EXO Spoofed Mail report

[lfk73]

Can someone confirm something really basic for me.  In my Defender portal under Email and collaboration there is a Spoofed email report.  Example attached

Looking at the email do I take this to mean that emails where sent to my domain pretending to be from an email address @freshservice.com?

[#2]

It' not necessarily someone pretending to be a someone else, it might be just misconfiguration, or a forward. Or a spammer 🙂
This article explains how the feature works and some valid "spoof" scenarios to consider.