Worryingly, the email passed DKIM and SPF checks, meaning it was sent from a server that is authorized to send emails on ...