Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,631
questions
0
votes
2answers
41 views
Sending password in separate email [duplicate]
I've noticed some services will send a username in one email with a note saying the password will come in a different email. Is there any point to this? It seems that if someone can get that email ...
0
votes
0answers
37 views
On identity: Which email service gives best chance of reclaiming a compromised account? [closed]
Say an attacker has compromised the email account and is able to change the password and recovery methods. Given how fundamental email is for internet accounts, which email services would give the ...
0
votes
0answers
19 views
How do I get my hotmail.fr address back? [closed]
I just changed my hotmail address to an outlook domain one. I removed the old address. How can I set it back to hotmail.fr if the only option showed for domain is outlook.com
0
votes
1answer
111 views
My IP Address is on 3 blacklists
I noticed my email address (my email address is through a web host where I also host my website) was being bounced from one or more professional email subscriber lists.
Through MX Tools I see that my ...
0
votes
0answers
47 views
Malicious email attachment analysis [closed]
My friend opened an .eml file from an email attachment that appears to be compromised.
We would like to understand what exactly happened after the script was executed. What does the following code do? ...
0
votes
1answer
118 views
Emails being sent to strange addresses
I use Yahoo Mail from Android devices. In my Sent box over the last few weeks I see a handful of completely blank e-mails (no subject and no contents) being sent to very strange addresses such as: ...
1
vote
2answers
92 views
How to check if a mail server is Enforced-STARTLS rather than Opportunistic-STARTTLS?
This article tells us that there are two types of STARTTLS: Opportunistic (i.e. optional STARTTLS) STARTTLS and Enforced STARTTLS, which works by the doctrine of "Encrypted connection or drop ...
0
votes
1answer
56 views
How to merge two email boxes securely with an email box fetcher?
I have two email boxes: The first one is my main email box in Gmail and the second one is in my website hosting company by Thunderbird which I access from my website hosting manager (WHM) which is ...
-1
votes
0answers
82 views
Why do we only pentest SMTP when pentesting an email server?
I have just started learning "penetration testing" and I have been tasked to do black-box penetration testing of an email server.
So the query I wrote on Google was "email server ...
0
votes
2answers
89 views
Would Thunderbird's cache be affected by ransomware?
My university was hit by ransomware.
I wanted to know if it was possible that Thunderbird emails were also affected. (Mails saved in the cache, encrypted or not, etc.)
0
votes
1answer
89 views
Can the hosting provider who has access to the email server machine, access the emails?
I am planning to use a self hosted (Linux based) email server. However, the server will be on hosting providers machine. The hosting providers will have access to the physical machine. In that case, ...
0
votes
1answer
64 views
Email server compromise?
My company sends around 1M emails per month through various providers (Sendgrid etc.). One of emails we send is a "sign up" email, which contains a link for a user to finish registering ...
0
votes
4answers
136 views
How to protect email addresses in a customer database when you and other third parties must be able to send emails?
I am wondering what methods are used by big companies to protect customer email addresses in their databases. They usually have salespeople all over the world and multiple third-parties (Salesforce, ...
3
votes
1answer
115 views
Does disabling “Always display external images” in Gmail remove the risk of spam senders seeing that I opened the mail?
When a mail is opened that includes special images, fonts or media, it is loaded from the server of the sender. This is bad because spammers can detect active mail accounts that will get more spam. ...
0
votes
1answer
123 views
Should I use my own domain in my proton mail?
Using my own domain on Proton Mail is cool, but what if someone hack my namecheap account? What if some government orders that my domain is redirected?
Should I use @protonmail instead of @mydomain? ...
0
votes
1answer
196 views
Is this is phishing attempt?
I received an email, purporting to be from Microsoft Account as a Security Alert. The address looks legit (account-security-noreply@accountprotection.microsoft.com) but the problem is, the email ...
1
vote
2answers
55 views
User-provided phrase to verify email sender- Is this a good idea?
Signing up for a medical records service today, in addition to security questions (sigh) I was prompted with a field that read:
Security Phrase for Email Messages:
Your security phrase will be ...
0
votes
0answers
20 views
Why are secure links in emails rapidly opened by multiple IP addresses [duplicate]
We have some functionality in our system which sends emails to our customers, where the emails contain secure links with an embedded code.
Whilst inspecting our firewall logs I noticed something ...
0
votes
1answer
54 views
Do email providers somehow validate/control “Send email as: ” feature?
I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail's &...
3
votes
0answers
107 views
Are external email warnings effective?
Conceptually, "THIS EMAIL IS FROM AN EXTERNAL SENDER" warnings should be useful at preventing phishing or spoofing attacks. If "your boss" asks you to buy a bunch of gift cards ...
0
votes
1answer
55 views
Account import into gmail - is it considered safe? [closed]
From my Gmail account / settings, I can import another mailing account (for example a Microsoft Exchange account).
Then Google asks for my personal Microsoft Exchange password (! this is not very &...
0
votes
1answer
53 views
How to enumerate PGP keyring e-mails related to a specific ccTLD
I would like to enumerate all possible PGP e-mails related to North Korean top-level domain .kp
Few years ago I would have used theHarvester but I recently discovered that this useful tool doesn't ...
0
votes
1answer
129 views
Standard form of email signature
A little bit of background: I want to sign my emails for my own safety. None of my intended recipients are users of digital signatures. If one day someone were to impersonate me, I can prove my own ...
0
votes
1answer
59 views
Link test differs from link location in plaintext view is not visible in Thunderbird
Today I noticed something strange.
I got an email containing a link that links to another site than the text says. In (Simple) HTML, the review is visible when hovering over the link.
However, in ...
0
votes
1answer
70 views
On Gmail I received an Incoming TLS Encrypted Message. Will my reply be encrypted by default to different email provider?
If I receive an incoming TLS encrypted message from another email provider like outlook/hotmail, will my reply in transit from gmail to outlook/hotmail be encrypted by default as well?
0
votes
0answers
66 views
Got this email from google, Critical Security Alert Someone knows your password, what does this mean? [duplicate]
Got this email in December 2020, after it arrived, I immediately changed the password.... this was a legit mail from google(I checked the sender and all that). So what does this email mean? It was ...
27
votes
6answers
6k views
How can I get more spam for my honeypot?
Spam is everywhere and everyone gets it (especially professors), but I noticed that my personal email does not get much spam. How can I get more?
What are the most common ways of getting spam? Not ...
0
votes
0answers
122 views
Critical security alert: someone knows your password [duplicate]
Mailed-by: gaia.bounces.google.com Sign.google.com
Security: Standard encryption (TLC). So this is a legitimate email from Google.
Will this email immediately be sent if someone (who isn’t supposed ...
0
votes
0answers
17 views
Why do I need DMARC on top of SPF and DKIM? [duplicate]
If SPF is verifying against a set of IP records if the incoming email from a domain was sent from an authorized host piggybacking on the DNS and DKIM does touch the signature of the email and ...
1
vote
3answers
227 views
My computer was probably infected by a virus from a professor [duplicate]
I got a mail from my professor this morning with a request.zip file attached and a password in the mail to open it. Since the mail was from my professor and he already did send me zip attachments I ...
0
votes
1answer
70 views
IMAP credentials in WEB (browser) app - how to use securely
I need to send and check email (via IMAP email servers) from my web app. Storing credentials on server seems like problem as they are almost always plain text.
So if I store them in client browser's ...
1
vote
0answers
57 views
Where I can see list of email address which my email registered as their recovery email address? [closed]
I need to find the list of services where my email address has been registered as their recovery email address.
I am using Gmail and all other emails also are Gmail, but they are too many and I don't ...
0
votes
1answer
81 views
Is “send me a copy of my email message” a potential security breach?
Some contact forms in the web have the "send me a copy of my email message" option which I personally find very comfortable.
Let's say that on my own website contact form I add this option, ...
0
votes
0answers
28 views
sending an email without being traced (IP, identity) [duplicate]
I want to send an email through Gmail without the other side being able to trace me. I actually want to report something. I opened up a new Gmail account with a fake name (I used Tor to log in). I did ...
0
votes
1answer
41 views
User associated email address viewable in it's personal settings
Some applications tend to hide completely the user associated email address or just showing a part of it (e.g. f***o@foo.com) in the user's personal settings. Other applications don't mind showing the ...
0
votes
1answer
58 views
Get senders location via IP in email Header [duplicate]
I have email headers of people I have never met with their IP.I need to know and validate their exact location as they expect to take money from me but I do not wish to be fooled.
1
vote
1answer
96 views
Generation of OTP in a 2FA email method
I am aware of the fact that authentication via email is discouraged, but in some specific applications and given as secondary method, we all agree that it may be useful.
Having said that, what is the ...
0
votes
0answers
41 views
Is there anything I can do as an end user to deal with greeting card spam sent to my personal email adress?
Lately I've been getting a lot (well, 2-3 mails per day) of greeting card spam (I think it's called), aka spammers signing my personal email address up for contact forms and accounts with random sites,...
0
votes
1answer
107 views
Is this email legit or scam? [duplicate]
got this email on gmail spam folder was wondering if this is legit or not ..
0
votes
1answer
61 views
Is it true that frontend validation is generally redundant for minimalist contact forms on minimalist environments?
Say I have a continuously upgraded and well maintained LAMP environment with a website which its CMS is all-core and continuously upgraded as well and I have created a simple backend HTML contact form ...
0
votes
0answers
75 views
Is someone using my @domain.com emails for fraud?
I have a TLD, and have set it up to forward any email sent to *@domain.com to myname@domain.com.
Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
0
votes
2answers
134 views
Avoiding having emails being traced
I am writing a novel and the main character sent anonymous emails using Outlook and a VPN on an iPhone to disclose information about the mafia. Now, the police are investigating it. How can he avoid ...
0
votes
0answers
85 views
Spoofed email? “X-Source-Sender” and “Received” headers look dodgy
I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me.
Checking the headers the following looks normal:
Return-Path
Received & ...
0
votes
0answers
38 views
I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]
Screenshot:
The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com.
The suspicious link "Unsubscribe_click_here" is:
mailto:cr@burlondesti....
0
votes
0answers
54 views
WP Mail new version asks for set *their* domain URL as Authorized redirect URI in my Google OAuth 2.0 Client Credential
Context
WP Mail is a WP plugin, and I want to set up it to send emails using my gmail account via gmail API.
So I've created a Google project, set it up, including the consent screen and a OAuth 2.0 ...
0
votes
1answer
77 views
Realistic for organizations to avoid links in emails pointing to less known sites?
Over the years, I found myself constantly pointing out to organizations that emails containing links with 3rd party domain names that are relatively unknown are problematic. That's how social ...
0
votes
0answers
56 views
Can CloudFlare intercept traffic of a “DNS only” subdomain?
I care about privacy and I use Cloudflare as a reverse proxy to block malicious bots from my website.
I have the mail subdomain for my self-hosted e-mail traffic, which is a subdomain marked as "...
1
vote
0answers
44 views
Is this a Phishing email a bit more advanced than usual? [duplicate]
I received an email from a friend, but it was not them. It was their name in the sender field but there was a different email address hidden underneath. There was a zip file attachment.
But here’s the ...
2
votes
1answer
85 views
Risk associated with Exchange email address as username when AD authentication is enabled
In my existing setup, we have Exchange Server joined with Windows Active Directory. Both the username and email address are the same for user accounts. Our support party also recommended using this ...
1
vote
2answers
152 views
Phishing emails sent to my contacts, from another contact [duplicate]
Some people on my email contact list have been receiving phishing emails that appear to come from someone else on my contact list. The people receiving the emails and the person purportedly sending ...
