Hello guys,

my Dad has been looking at some Vacation offers and because of that has been sending emails to some spas.

From one of them he always gets a relpy from a email that is transfer8282@[correct domain].
I instantly thought that this is probably a spoofed email, but I’m not sure how this would work with the domain.

The email says we should “login to see the offer” but thunderbird (email client) luckily blocks the link so my Dad couldn’t click it.

My Question is, how can we communicate with the actual sender of the email and not the spoofed email?

Appreciate any help