The Phishing Email That Shipped Its Own Clean Verdicts

This report analyzes a high-severity phishing campaign that spoofed Mailgun and a retail brand by pre-writing forged email verdict headers (SCL, compauth, ARC seals, reputation telemetry) to mislead human reviewers and scripts; the message failed DKIM/SPF/DMARC checks at the genuine hop, contained a malicious URL and a submitting client IP, and automated detection quarantined both delivery waves.