Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,787
questions
0
votes
0
answers
21
views
Can an email trace be maliciously removed by an admin on a default Outlook setup?
I'm doing some research into email servers and how they work.
There is a function in Outlook 365 where an admin can perform several traces on emails for the past 90 days. For example, an 'enhanced ...
0
votes
0
answers
27
views
Invalid Syntax found via SPF record [closed]
Can a domain name of a mail address be spoofed or hacked when you find out that domain name of a mail address has a "invalid syntax found" by checking the SPF record? Or can the IP address ...
- 1
0
votes
0
answers
77
views
I have received an email with pictures from the gallery on my phone [closed]
I've two email addresses: [email protected] and [email protected].
Today, "red" received an email from "pink".
I didn't send this email.
The email contained four pictures that were ...
- 101
0
votes
2
answers
70
views
Why spamassasin is doing dns lookup?
I have a server which have configured Amavis and Spamassasin (in default state only). I recently noticed log lines that probably indicate DNS query failure, below is an excerpt:
Nov 21 11:15:40 ...
- 133
0
votes
0
answers
136
views
Guidance: S/MIME Signed Certificate invalid for many clients even though it worked previously and still works
I have a very strange problem and i would like to get some guidance on this.
Problem description:
My application is sending S/MIME signed Email messages to clients. It worked perfectly no problems ...
- 111
0
votes
0
answers
76
views
If only 'two' insecure MFA options are available (email and sms) which is 'most secure'? [duplicate]
Although I disagree with the term MFA entirely if it refers to 'login code send to email', it's a one-time password at best, and likely badly implemented with its associated risks. I do see quite some ...
- 6,661
-1
votes
1
answer
60
views
Tracing the email's MAC address
Can someone trace the MAC address of an email to the point of origin if the email address has been deleted? I received an email from an unknown sender regarding an issue at my work, and when I tried ...
0
votes
0
answers
13
views
How to determine if email is from from gaia.bounces.google.com or just forwarded from there? [duplicate]
Shown below are the "from and to" portions of the message. It looks like it is just forwarded by "gaia.bounces.google.com". The message itself (and I have quite a few of them) ...
0
votes
2
answers
56
views
What does the IMAP banner alone show regarding security (STARTTLS, hashing, information disclosure)?
I encountered an open TCP/143 IMAP port which responded with this banner:
* OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=...
- 6,661
6
votes
2
answers
911
views
Spoofed email sent to me from my email address with SPF/DKIM/DMARC passing
I received an email earlier today on my work email address. The email came from the same address—mine—but I didn't send it.
It was an email claiming that he was a professional hacker who had hacked my ...
- 161
0
votes
1
answer
48
views
Text that is turned into links by email clients
When sending emails in the context of an application that will send transactional or marketing emails, sometimes you want to include user-provided information in the body, like for example you ask the ...
- 283
1
vote
0
answers
170
views
Is email between "large email providers" now secure against interception?
Now that almost all users use only a few email providers, is email content secure from interception? This related question was closed referencing a question about the security of SMTP IMAP, and POP:
...
- 239
0
votes
1
answer
64
views
How can an email forwarding service send email with a "From" from a domain they don't control, and still pass SPF?
Let's say:
[email protected] sends an email to [email protected].
Bob owns the domain bob.com but doesn't manage an emailing server. Instead he uses an email forwarding service (provided by his registrar /...
- 963
0
votes
0
answers
71
views
Proper HIPAA security
I am a sysadmin, though not security-specific. I was recently stunned to receive an automated email from my physician's office (in USA) containing an HTTP link to their website for the completion of ...
0
votes
3
answers
270
views
Gmail encryption
Is sending emails between Gmail accounts encrypted, can ISP read gmail content in transit??
0
votes
1
answer
96
views
Measures to safeguard against ZeroFont phishing attack
What measures can be taken to safeguard against ZeroFont phishing attacks (setting font size to zero), and how can email security settings assist in the detection of ZeroFont elements and the ...
0
votes
0
answers
70
views
I am trying to identify suspicious content within a PDF file
I have a PDF file that has been sent to me as part of a suspicious email. I viewed the email as message source from within outlook. This gave me all raw text within the email. I copied this to ...
- 1
1
vote
1
answer
59
views
With selfhosting email server, selfsigned certificate, does it make a difference with PGP mail, What can be leaked?
If we are self hosting our own email server with mydomain.com with a self sign CA for S/MIME. What are some possible ways that our email content can get leaked?
Then if we use PGP email, does it make ...
- 17
2
votes
2
answers
259
views
Is a + on an email address a security vulnerability for a registration process?
Is + in email addresses a security vulnerability for authentication algorithms? How can it be used in a malicious way? Should we forbid emails with + signs during registration?
For example we have 2 ...
- 111
0
votes
0
answers
18
views
How do I find out what country did an email originate from? [duplicate]
Out of curiosity I came across some emails in my inbox that I really wanted to know where they where sent from. Not just Google's or Yahoo's service's address, but the actual country the sender was in ...
1
vote
2
answers
100
views
Is OK to accept multibyte unicode codepoints as recipient address for Sendmail and Postfix?
I am working on a server software that receives an utf-8 encoded email address to send an email to.
I permit multibyte unicode characters (emoji etc.). Then I pass that email address to Sendmail to ...
- 13
0
votes
1
answer
452
views
Still able to spoof emails with strict DMARC, SPF and DKIM enabled
Despite setting up strict DMARC, SPF, and having DKIM enabled, I am still easily able to spoof the "From" address. I can easily do this with PHPMailer on my Mac and even with some free 3rd ...
- 101
0
votes
2
answers
66
views
User Access to Quarantined Emails
Are there any industry recommendations with regards to allowing users access to quarantined emails in Office 365? Should users be notified of quarantined emails. Should they be allowed to request the ...
- 1
0
votes
2
answers
212
views
What is this bot/person trying to do with my contact form:
I have a small Wordpress website using contact form 7.
I received messages that look like an attempt to hack my website:
From: <div style="background-color:#4169E1; margin:auto;
max-width:...
- 103
0
votes
1
answer
129
views
What is the most secure way to send email now? PGP or S/MIME, Given both parties willing to learn the technical parts
What is the most secure way and privacy-focused to send email now (current tech)? PGP or S/MIME, Given both parties willing to learn the technical parts?
Use case, both of parties use third party ...
- 17
0
votes
1
answer
52
views
How can we ensure the best practice with mail pgp when the recipient is not using it?
How can we ensure the best practice with mail pgp when the recipient is not using it?, so when Bob send the vary first email to Alex, Bob signing and encrypted it?
Q1. In that case, Is Alex able to ...
- 17
0
votes
0
answers
89
views
How secure is SMTP email today? [duplicate]
Can SMTP be relied on to send confidential information and attachments in 2023?
With the concentration of email accounts in big cloud platforms belonging to Microsoft, Google and others, is email more ...
- 1
1
vote
1
answer
670
views
Does Apple’s Hide my Email feature really work?
I was wondering if when you use something like Apple's 'Hide my Email' functionality if there's some way for the organization to still recover the user's original email if the user is then asked to ...
- 113
0
votes
1
answer
854
views
Is this google security alert legit?
I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
0
votes
1
answer
146
views
Spoofed forwarded email? Help with analyzing of DMARC report
Why did this email get forwarded successfully? An XML report is below:
I simply cannot understand the delivery status, a transcript follows:
This email has been automatically forwarded. Despite the ...
- 1,687
-1
votes
1
answer
106
views
Can Outlook stay connected to an email account through a password change?
Corporate setting, multiple people have access to the same email account (it is a functional not a personal account). Order of events:
User A opens Outlook, connects to the shared email account, ...
- 183
1
vote
1
answer
79
views
Would asking for user input email again in password reset increase security?
I have a workflow like this right now:
User inputs the account email and clicks the "forget password" button
User receives an email containing a link with token for password reset
User ...
- 111
2
votes
0
answers
86
views
What does a Microsoft Safelink contain?
Regarding the URL query arguments of a Safelink:
Why do they contain my e-mail address (the recipient)?
What are these two longish strings? Look like IDs of a database. Does Microsoft store Safelinks ...
- 221
3
votes
1
answer
354
views
What are the risks of an MTA-STS policy with a long max_age?
In setting up SMTP MTA Strict Transport Security (RFC 8461) for my domain, I've noticed some contradictory advice and practice: although the maximum value for the max_age policy value is around one ...
- 33
0
votes
0
answers
63
views
If I have my own email server and domain, but use Outlook at the client, does this give Microsoft access to my emails?
I have a custom domain, and I'm going to set up an email server on a VPS.
Then I'm going to create an Outlook account and connect it to the email server via POPS/IMAP. How much does this compromise my ...
1
vote
0
answers
88
views
I have found my email online in a .txt file. What should be my next steps? [closed]
A few days ago someone tried to log into my bank account, the attempt was unsuccessful but it was quite concerning. I’ve spent the past weekend moving my most important accounts to alternate emails ...
- 11
1
vote
0
answers
92
views
Malicious Mass Email Attack Occurred, Do I Still Have Problem?
I'm using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "[email protected]". It was used as a "From:" email in a mass email attack.
...
0
votes
0
answers
194
views
SPF passes but in Gmail, 'Show Original', top section doesn't show SPF: PASS with IP
When I send an email from my HostGator account to my Gmail account, I see in the header spf=pass...
When I paste the header in this tool -> https://toolbox.googleapps.com/apps/messageheader/
It ...
- 1
1
vote
1
answer
4k
views
Can an email be traced if the account is deleted?
Can the government trace an email that has been sent from an account that is now deleted?
- 11
2
votes
0
answers
70
views
Is there a safe way to follow a suspicious link? [duplicate]
When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
- 1,337
29
votes
8
answers
9k
views
Is email scraping still a thing for spammers
I've run a website for barely three months now and put my emails on there. I also run a catch-all address on this domain. Since my website is online, I haven't received a single spam email on the ...
- 391
1
vote
1
answer
144
views
Was recently leaked and wondering what this site can do w/ my info
I was recently notified by Guardio that some of my info was leaked to 'Combolist' and when I clicked on the link I was brought to this.. https://cracked.io/Forum-Combolists--297?page=2.
I'm completely ...
- 11
9
votes
5
answers
3k
views
Identify someone using a double identity by tracing phone use common to the two 'identities'?
Thriller novelist here looking to get something right.
I have a character who uses an alias. I have two scenarios I'm trying to have play out...
At some point, they have sent emails from the same ...
0
votes
0
answers
20
views
IP address from headers (Gmail/outlook mobile app) [duplicate]
My question isn't a duplicate. I know that the IP is leaked in the computer desktop version of outlook. But from I'm able to tell, the mobile version didn't leak it.
I need to make sure that I'm right ...
- 101
1
vote
1
answer
57
views
email mailbox username compromised
I host my own email server courtesy of Synology MailPlus Server. In an effort to increase security I created a username consisting of 25 random characters. I monitor the mail logs of this server daily ...
- 11
0
votes
2
answers
182
views
Someone seems to have compromised my email address but can't be sure?
Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
0
votes
0
answers
50
views
Email TLS encryption - personal data [duplicate]
I submitted some personal data to an organization through a HTTPS website but then they emailed it all back to me in a PDF. This included name, address and DOB. There was no end-to-end encryption on ...
- 101
0
votes
2
answers
119
views
Do email security scans that follow links replace digest params in URLs with invalid values?
Going through our application logs recently I noticed a number of instances of page requests where an invalid SHA512 digest param in a URL resulted in a 403.
A couple aspects of these requests make me ...
- 335
0
votes
2
answers
209
views
Should I take action if I receive a phishing email that passes all email sender checks?
I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
- 133
1
vote
1
answer
183
views
Incomplete decryption of S/MIME mails using openssl cms
We're receiving signed and encrypted mails from many senders. For most senders, the decryption with openssl works fine using the following command:
openssl cms -decrypt -recip <path-to-key> -in &...
- 111