Recently, I received an email claiming to be from an official Weibo staff member, immediately asking me to add them on WeChat. When encountering such content, it should be assumed to be a scam. Ask them to use an official Weibo account to send a private message within Weibo instead; if they can’t do that, then it’s confirmed.
Don’t assume it’s an official account just because the email domain is staff.weibo.com. First, we don’t actually know if Weibo staff emails really use this domain (and we don’t have the time to verify). Second, even if it does, it can be faked, such as:
Homoglyph technique
This clever trick uses characters from non-Latin alphabets that look identical to standard letters. For example, Cyrillic letter “а” (U+0430) looks exactly like the Latin letter “a”, but it enables scammers to register different domains.
For example: Legitimate email address: apple.com. Phishing scam email: аpple.com (Notice the difference? There is no visual difference!).
If you suspect something, you can copy and paste the address into a Unicode inspection tool to check for any non-standard characters. It will highlight any such characters.
— How To Tell If An Email Is Fake: Red Flags To Watch Out For
Original file
Extension
Git commit history can also be faked 如何通过GPG签名防止github造假