Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,607
questions
1
vote
3answers
132 views
My computer was probably infected by a virus from a professor [duplicate]
I got a mail from my professor this morning with a request.zip file attached and a password in the mail to open it. Since the mail was from my professor and he already did send me zip attachments I ...
0
votes
0answers
58 views
Using a site as email address [closed]
I've received emails recently, where the sender is an address to their personal website.
From: name.net
Instead of a normal email such as mine, which is always in the form:
From: name@mail.com
I ...
0
votes
1answer
44 views
IMAP credentials in WEB (browser) app - how to use securely
I need to send and check email (via IMAP email servers) from my web app. Storing credentials on server seems like problem as they are almost always plain text.
So if I store them in client browser's ...
1
vote
0answers
51 views
Where I can see list of email address which my email registered as their recovery email address? [closed]
I need to find the list of services where my email address has been registered as their recovery email address.
I am using Gmail and all other emails also are Gmail, but they are too many and I don't ...
0
votes
1answer
75 views
Is “send me a copy of my email message” a potential security breach?
Some contact forms in the web have the "send me a copy of my email message" option which I personally find very comfortable.
Let's say that on my own website contact form I add this option, ...
0
votes
0answers
26 views
sending an email without being traced (IP, identity) [duplicate]
I want to send an email through Gmail without the other side being able to trace me. I actually want to report something. I opened up a new Gmail account with a fake name (I used Tor to log in). I did ...
0
votes
1answer
38 views
User associated email address viewable in it's personal settings
Some applications tend to hide completely the user associated email address or just showing a part of it (e.g. f***o@foo.com) in the user's personal settings. Other applications don't mind showing the ...
0
votes
1answer
53 views
Get senders location via IP in email Header [duplicate]
I have email headers of people I have never met with their IP.I need to know and validate their exact location as they expect to take money from me but I do not wish to be fooled.
1
vote
1answer
82 views
Generation of OTP in a 2FA email method
I am aware of the fact that authentication via email is discouraged, but in some specific applications and given as secondary method, we all agree that it may be useful.
Having said that, what is the ...
0
votes
0answers
40 views
Is there anything I can do as an end user to deal with greeting card spam sent to my personal email adress?
Lately I've been getting a lot (well, 2-3 mails per day) of greeting card spam (I think it's called), aka spammers signing my personal email address up for contact forms and accounts with random sites,...
0
votes
1answer
88 views
Is this email legit or scam? [duplicate]
got this email on gmail spam folder was wondering if this is legit or not ..
0
votes
1answer
47 views
Is it true that frontend validation is generally redundant for minimalist contact forms on minimalist environments?
Say I have a continuously upgraded and well maintained LAMP environment with a website which its CMS is all-core and continuously upgraded as well and I have created a simple backend HTML contact form ...
1
vote
0answers
71 views
Is someone using my @domain.com emails for fraud?
I have a TLD, and have set it up to forward any email sent to *@domain.com to myname@domain.com.
Over the last week, I've got a handful of emails from Intuit/TurboTax to random names on my domain, e.g....
0
votes
2answers
104 views
Avoiding having emails being traced
I am writing a novel and the main character sent anonymous emails using Outlook and a VPN on an iPhone to disclose information about the mafia. Now, the police are investigating it. How can he avoid ...
0
votes
0answers
64 views
Spoofed email? “X-Source-Sender” and “Received” headers look dodgy
I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me.
Checking the headers the following looks normal:
Return-Path
Received & ...
0
votes
0answers
37 views
I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]
Screenshot:
The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com.
The suspicious link "Unsubscribe_click_here" is:
mailto:cr@burlondesti....
0
votes
0answers
31 views
WP Mail new version asks for set *their* domain URL as Authorized redirect URI in my Google OAuth 2.0 Client Credential
Context
WP Mail is a WP plugin, and I want to set up it to send emails using my gmail account via gmail API.
So I've created a Google project, set it up, including the consent screen and a OAuth 2.0 ...
0
votes
1answer
74 views
Realistic for organizations to avoid links in emails pointing to less known sites?
Over the years, I found myself constantly pointing out to organizations that emails containing links with 3rd party domain names that are relatively unknown are problematic. That's how social ...
0
votes
0answers
44 views
Can CloudFlare intercept traffic of a “DNS only” subdomain?
I care about privacy and I use Cloudflare as a reverse proxy to block malicious bots from my website.
I have the mail subdomain for my self-hosted e-mail traffic, which is a subdomain marked as "...
1
vote
0answers
44 views
Is this a Phishing email a bit more advanced than usual? [duplicate]
I received an email from a friend, but it was not them. It was their name in the sender field but there was a different email address hidden underneath. There was a zip file attachment.
But here’s the ...
2
votes
1answer
82 views
Risk associated with Exchange email address as username when AD authentication is enabled
In my existing setup, we have Exchange Server joined with Windows Active Directory. Both the username and email address are the same for user accounts. Our support party also recommended using this ...
1
vote
2answers
87 views
Phishing emails sent to my contacts, from another contact [duplicate]
Some people on my email contact list have been receiving phishing emails that appear to come from someone else on my contact list. The people receiving the emails and the person purportedly sending ...
0
votes
1answer
58 views
TLS decrypt-and-forward
Not sure if this is the right place for this question, but I'm looking for a way to establish secure inbound email traffic from external senders with an automated decryption mechanism within my ...
1
vote
2answers
50 views
Automatic OCR Document Capture Security Risks
We have recently implemented an automated OCR, email scanning program that connects to our exchange email service, This service will open attached invoice and insert them into our accounting software ...
1
vote
0answers
55 views
Email Takeover Scam? [closed]
I've been receiving a lot of email lately intended for "Daniel L...", a person with the same last name and same first initial as me. It appears this person has requested information from ...
1
vote
0answers
49 views
Cmd line tool to scan an eml file against spam/phishing rules [closed]
For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
57
votes
4answers
8k views
What is the purpose of a targeted email without any meaningful content?
I received an email to my corporate email account from an external Gmail account.
The list of recipients clearly shows (an eventually successful) attempt to guess my email address based on my personal ...
0
votes
1answer
87 views
Can you get virus from previewing email attachments in Gmail?
If an email attachment such as .docx, jpeg, .xls, .pdf, etc. contains virus/malware and if I open it for preview (not opening it in Google Docs or downloading it and opening it) then can I get ...
1
vote
3answers
107 views
Does unsubscribing from an email actually remove my details? [closed]
I get quite a few emails from valid companies and organisations in my inbox. Unfortunately most of these emails are marketing-type emails which don't have any value for me. As a result I tend to ...
3
votes
1answer
95 views
Is it possible to “hack” an email account so that the emails always go to Spam?
I have a friend who is something of a public figure within a small sphere. She has been an object of negative attention recently in this sphere and has noticed that her emails are suddenly all going ...
1
vote
1answer
85 views
Sending securely attachments over email
Email exchange is not a secure means of communication despite using SSL to connect to (all/most?) the email providers.
What I am not sure though, is what is a good way to send important information ...
1
vote
1answer
111 views
Is there any reason to not use my real name in my email address?
Somewhat of a privacy/security question here. I'm looking to get away from Google services, especially email, and I'm wondering if there's a reason not to use my real name in the email address. The ...
2
votes
1answer
71 views
Email “FROM address” is changed to an unexpected email address
I have enabled DMARC settings in my domain (drkotzi.org). Now when I send emails from my email address (sales@drkotzi.org) to email lists or email groups, I can see that the email's from address and ...
1
vote
2answers
76 views
Site password being used to secure ZIP download, are they storing my password in plaintext?
Recently a utility provider has started to attach a zip file including my bill inside, however, they have secured the zip file using my online web account password.
I am not too concerned about ...
2
votes
2answers
78 views
Protecting bare text / link email address published in a website
I have an all-core MediaWiki website; no addons, no forms besides a login form (not even a contact us form); the MediaWiki installation is continuously upgraded and everything is quite minimal and ...
0
votes
0answers
52 views
Protect breached email accounts
We are a big supermarket chain and have had complaints about fraudulent activities from a few customers who have used a particular email domain. We are in the process of implementing MFA on our site. ...
0
votes
1answer
86 views
Isn't it dangerous to allow users to change email?
I am not referring to any specific site in this question . If a site allows users to change email after login can't a hacker by obtaining user password due to users negligence then change email and ...
0
votes
2answers
96 views
Extrapolating home address of a visitor when they click on an e-mail phishing link (Mr Robot)
In Mr Robot season 3, the feds are set up in a safe house spying on Elliot's internet communications (with packet sniffers?) when they intercept an email from Elliot to someone else containing a link ...
15
votes
1answer
4k views
Why doesn't Gmail make it clearer that emails have been signed by DKIM and delivered over TLS?
If a webpage is delivered over HTTPS, the browser makes this clear with a padlock symbol. It's something that people look for. My browser also makes it clear that a page is not secure.
Why aren't ...
1
vote
0answers
17 views
Can I safely view a malicious PDF in gmail or dochub? [duplicate]
I receive pdfs that could be malicious. Is it safe to view them within Gmail? What about DocHub? Is that the same as 'opening' them? (FYI I use Firefox as a browser)
0
votes
0answers
55 views
Does SPF protect against spammers who control the initial MTA?
I understand that for most users, the Envelope-from address is the most difficult part of an email to spoof because (I assume) it is checked by the receiving MTA i.e. if you attempt to spoof the "...
0
votes
1answer
62 views
Sending and blocking emails from hashed and salted address ? (for GDPR)
I would like to send emails from a server, but also make them unable to trace for me as server owner or attackers. I want this for GDPR but also to protect people from abusers.
Short info about ...
0
votes
2answers
200 views
Staying anonymous vs a Five Eyes adversary?
If you were in a Five Eyes country and you wanted to contact someone else anonymously, without this person or the government finding out who you are or your location, how would you do it?
The person ...
1
vote
1answer
145 views
How to send emails with Thunderbird without revealing my internal and external IP address?
I have noticed this issue while using Google's Gmail with Thunderbird. When I send an email from Gmail's web front end at https://mail.google.com/ my internal and external IP address are not included ...
1
vote
0answers
69 views
Cutting down phishing attacks from AmazonSES
I am trying to work on cutting down on the amount of spam, phishing and just malicious emails coming trough via AmazonSES burners.
Has anyone devised a method or certain IOCs to block on?
Thanks
0
votes
0answers
52 views
Trace Unauthorized login into My Gmail and Facebook Account [duplicate]
I have experienced an unauthorized login into my Gmail and Facebook account, while I was logging into the accounts and doing school assignments. Suddenly, I got an email from Facebook about "...
2
votes
1answer
69 views
DMARC rua indicates mail send from competitorDomain.com for ourDomain.com, is this (potentially) mallicous?
We've received several rua reports indicating that one of our direct competitors is sending emails with our domain in the mail from headers.
I do not have access to the actual emails sources, and I ...
0
votes
0answers
76 views
How to determine if a PC is safe after receiving a suspicious email message
I was checking my gmail account spam folder and I noticed an email sent by a known sender.
I thought it was flagged as spam by mistake so I opened it. Then I realized the content is the same as ...
0
votes
1answer
102 views
How was the hacker able to get my Instagram tag through Facebook when they weren’t linked?
All of this happened on 18th November 2020
A person I know sent me a phishing link of Facebook then Google, I entered my credentials however as soon as I found out that its a phishing link, I turned ...
3
votes
1answer
91 views
Should users be allowed to to login with the same email when an email change is requested but not completed?
I've found a very similar question: Should users be allowed to log in with the same password when a password change is requested but not changed?. But the key difference here is that requesting an ...
