Community
Products
Confluence
Questions
po.atlassian.net -- legit domain?

po.atlassian.net -- legit domain?

Hi everyone,

A member of my organization recently received an email from po.atlassian.net. Immediately, this strikes me as a phishing email of some variety, as research has lead me to believe the following Atlassian domains are legit:

e.atlassian.com
am.atlassian.com
[company name].atlassian.net

But po.atlassian.net is not.

I have quarantined the email and have it sitting in purgatory until I decide what to do with this domain. The user did not interact with it beyond reporting it, and as such, I do not know the scope of it's intent/potential damage.

Has anyone received a legitimate communication from Atlassian regarding this domain, or has any way to confirm it's a genuine domain?

I wanted to check with the community and, if this is not a legit domain, spread awareness of a phishing scam underway.

Thank you kindly, and have a great day.

2 answers

2 accepted

7 votes

Answer accepted

Hi,

The po.atlassian.net is a legit address. This specific domain could be used by various teams within Atlassian.

Please note that there is no public website associated with that URL, but the subdomain/domain are legit from and operated by Atlassian. Typically for a customer to sign-up on the atlassian.net domain, all subdomains have a minimum requirement of at least 3 characters. In this case the 'po' site is an internal exception (only 2 characters) to that rule that other site sign-ups cannot by-pass.

If you received unexpected mail from that address, I would recommend reaching out to Atlassian support for additional assistance.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

So we received an email from po.atlassian.net this morning.

You have 1 overdue item

Stay on Track - some of your work needs immediate attention.

View work Items (link)

The link, which I did click on from the email forwarded to me, takes the user to one of our Sandbox environments not logged in. We are in the EAP program for multiple sandboxes, so we have 2 sandboxes and this email takes to one of the two sandboxes.

Based on the comments it seemed like a legit email, but then the below comment mentions that it was a good call to quarantine the email?

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

Like • like this

Same issue here. One of my colleagues is receiving an email like yours - with reminders for overdue items.

The items listed are correct - she used the link. But I can't find any information on whether this is trustworthy.

Edit: she is the only one receving this kind of mail.

You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.

Comment

I worked with Atlassian support and it was a feature that was rolled out to around 25% of instances, and by default it is turned on. They mentioned the rolled in a fix to make sure that this was off in Sandbox environments. I also asked about that abiltiy to turn this off globally and as of right now there isn't a global off switch.

I also mentioned to Atlassian Support that my company doesn't really leverage Due Date well, but i'm trying to get them to use it more.

If you are company that highly uses the Due Date field then I think it is going to cause a little bit of confusion when it initially rolls out and is on by default.

one other thing I ran into, if a project is archived it was still sending the email even though when you went to the link it was empty because the project was archived.