https://invesbrain.com/scammers-can-abuse-security-flaws-in-email-forwarding-to-impersonate-high-profile-domains/