Email security concerns after domain transfer: Spoofed sender issue with Mailgun

Hey everyone, I’m freaking out a bit here. I got this weird email that looked like it came from me. It was some scam asking for money. At first I thought my Google account was hacked!

But then I did some digging. Turns out it’s because of this thing with SquareSpace and Mailgun. See, I used to have email forwarding with Google Domains. When they sold to SquareSpace, something changed with the DNS setup.

Now Mailgun can send emails that look like they’re from my domain. It even passed the SPF check and showed up in my sent folder. Pretty scary stuff.

Just wanted to give you all a heads up. If you transferred from Google Domains to SquareSpace, you might want to check your email settings. Has anyone else run into this problem? Any ideas on how to fix it?

I’ve actually dealt with a similar issue after transferring my domain. It’s definitely unsettling to see emails seemingly sent from your own address!

From my experience, the root cause is often incomplete or incorrect DNS configuration during the transfer process. When I encountered this, I had to manually update my SPF, DKIM, and DMARC records to properly secure my domain’s email.

For a quick fix, I’d recommend logging into your SquareSpace account and double-checking all email-related DNS settings. Pay special attention to the SPF record - it should include all authorized senders for your domain.

If you’re not comfortable diving into DNS settings yourself, don’t hesitate to reach out to SquareSpace support. They should be able to guide you through the necessary steps to lock down your email security.

Remember, it’s crucial to address this promptly to prevent further spoofing attempts. Good luck getting it sorted out!

I’ve encountered this issue as well after transferring domains. It’s a common oversight during the transition process. The key is to reconfigure your DNS settings, particularly the SPF (Sender Policy Framework) record.

Log into your SquareSpace account and navigate to the DNS management section. Ensure your SPF record includes all authorized email senders for your domain, including Mailgun if you’re using their services. You might also want to implement DKIM (DomainKeys Identified Mail) and DMARC (Domain-based Message Authentication, Reporting, and Conformance) for added security.

If you’re not comfortable with DNS configurations, I’d strongly advise contacting SquareSpace support. They can guide you through the process or even make the necessary changes on your behalf. It’s crucial to address this promptly to maintain your email security and prevent further spoofing incidents.

oh man, bad luck. ive had similar probs after switching domains. check squarespace dns & spf record to ensure all legit sendrs are listed. if unsure, contact support asap to secure your email.