nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

po.atlassian.net -- legit domain?

morgan.everson

Hi everyone,

A member of my organization recently received an email from po.atlassian.net. Immediately, this strikes me as a phishing email of some variety, as research has lead me to believe the following Atlassian domains are legit:

e.atlassian.com
am.atlassian.com
[company name].atlassian.net

But po.atlassian.net is not.

I have quarantined the email and have it sitting in purgatory until I decide what to do with this domain. The user did not interact with it beyond reporting it, and as such, I do not know the scope of it's intent/potential damage.

Has anyone received a legitimate communication from Atlassian regarding this domain, or has any way to confirm it's a genuine domain?

I wanted to check with the community and, if this is not a legit domain, spread awareness of a phishing scam underway.

Thank you kindly, and have a great day.

Accepted answers

Dave Mathijs

Hi @morgan.everson welcome to the Atlassian Community!

Good call to quarantine the email. This cloud site is no longer available now. You can safely delete the email.

Andy Heinzer

Hi,

The po.atlassian.net is a legit address. This specific domain could be used by various teams within Atlassian.

Please note that there is no public website associated with that URL, but the subdomain/domain are legit from and operated by Atlassian. Typically for a customer to sign-up on the atlassian.net domain, all subdomains have a minimum requirement of at least 3 characters. In this case the 'po' site is an internal exception (only 2 characters) to that rule that other site sign-ups cannot by-pass.

If you received unexpected mail from that address, I would recommend reaching out to Atlassian support for additional assistance.

All comments

Dave Mathijs

Hi @morgan.everson welcome to the Atlassian Community!

Good call to quarantine the email. This cloud site is no longer available now. You can safely delete the email.

morgan.everson

Thank you for both the welcome and information, Dave!

Dave Mathijs

Thanks to click the green "Accept answer" button if my answer helped you.

Andy Heinzer

Hi,

The po.atlassian.net is a legit address. This specific domain could be used by various teams within Atlassian.

If you received unexpected mail from that address, I would recommend reaching out to Atlassian support for additional assistance.

Shawn Stevens

So we received an email from po.atlassian.net this morning.

You have 1 overdue item

Stay on Track - some of your work needs immediate attention.

View work Items (link)

The link, which I did click on from the email forwarded to me, takes the user to one of our Sandbox environments not logged in. We are in the EAP program for multiple sandboxes, so we have 2 sandboxes and this email takes to one of the two sandboxes.

Based on the comments it seemed like a legit email, but then the below comment mentions that it was a good call to quarantine the email?

RJ_jg8358

Same issue here. One of my colleagues is receiving an email like yours - with reminders for overdue items.

The items listed are correct - she used the link. But I can't find any information on whether this is trustworthy.

Edit: she is the only one receving this kind of mail.

Shawn Stevens

I worked with Atlassian support and it was a feature that was rolled out to around 25% of instances, and by default it is turned on. They mentioned the rolled in a fix to make sure that this was off in Sandbox environments. I also asked about that abiltiy to turn this off globally and as of right now there isn't a global off switch.

I also mentioned to Atlassian Support that my company doesn't really leverage Due Date well, but i'm trying to get them to use it more.

If you are company that highly uses the Due Date field then I think it is going to cause a little bit of confusion when it initially rolls out and is on by default.

one other thing I ran into, if a project is archived it was still sending the email even though when you went to the link it was empty because the project was archived.

Katie Rouse

I've received an e-mail from this address: Atlassian <noreply@po.atlassian.net> today, mentioning a request for access to a known internal site.

What is the current update with this domain address?

Rosana Casilli

hello!! today an user that is not an org admin has received this email

po.atlassian mail.jpg

I checked in the billing section if there was any with that code (E-44G-8RH-GZW-NGW) but couldn't find anything.

It mention confluence, I created a sandbox but I haven't copy data from confluence, so is it real??

should I contact support?

Thanks in advance,

]Ro

Welcome!

It looks like you're new here. Sign in or register to get started.

Quick Links

Find more posts tagged with

confluence

cloud

confluence-cloud