Trustifi Determination: The sender's domain has no mail exchange (MX) record. Domain: sap-email-p16.dc.fmcna.com
Security Analyst Determination: Reviewed the email headers and verified the sender's authentication configuration. The email failed SPF, DKIM, and DMARC authentication. An MXToolbox lookup of the sender domain (sap-email-p16.dc.fmcna.com) also indicated that the required DNS records were not properly published, corroborating the authentication failures. The email contained a PDF attachment ("Payment Advice Note from 06292026.pdf") with no message body.
Additionally, the PDF was analyzed in sandbox and was found to be safe.
Actions Taken: Released, added a warning label, marked email as safe and reported it to trustifi
Trustifi Determination: The sender's domain has no mail exchange (MX) record. Domain: sap-email-p16.dc.fmcna.com
Security Analyst Determination: Reviewed the email headers and verified the sender's authentication configuration. The email failed SPF, DKIM, and DMARC authentication. An MXToolbox lookup of the sender domain (sap-email-p16.dc.fmcna.com) also indicated that the required DNS records were not properly published, corroborating the authentication failures. The email contained a PDF attachment ("Payment Advice Note from 06292026.pdf") with no message body.
Additionally, the PDF was analyzed in sandbox and was found to be safe.
Actions Taken: Released, added a warning label, marked email as safe and reported it to trustifi
Dan Sablosky (POC)
6/30/2026 9:42 AM-
The recipient olgag@stonehenge.bz has requested the release of a quar
The recipient olgag@stonehenge.bz has requested the release of a quarantined email which was sent by mmbatch@sap-email-p16.dc.fmcna.com. Request reason: vendor payment email
Sender:mmbatch@sap-email-p16.dc.fmcna.com
Email subject:Payment Advice Note from 06/29/2026
Email status:Quarantined
Time received:2026-06-30T02:34:24.767Z
