Questions tagged [email]

Related to email protocols, clients, servers, content, and message format.

Filter by
Sorted by
Tagged with
0
votes
0answers
61 views

How do they spam my email with my browsing history? [closed]

I really can’t figure how they do it and hope someone can help figure it out. I want to write a blocker extension program to my operating system or browser if they are the source of the problem. My ...
-6
votes
1answer
109 views

How can Tutanota, ProtonMail and Hushmail all claim to provide privacy when they only allow privacy-incompatible payment options? [closed]

I'm attempting to register an e-mail account without destroying my privacy. The reason is simply that one is necessary to be able to register on a different service (web host for my new, very non-...
3
votes
1answer
76 views

Who should I report spam emails to?

Today I received an email from a person in "critical health condition" who wants to give me about $10 million. It is clearly some kind of scam. What should I do with the email besides not ...
36
votes
6answers
5k views

What is the suggested best practice for changing a user's email address?

I recently jumped onto the hypetrain for an unnamed email service and am currently on my way to update all my accounts on various websites to get most of my (future) data off Google's Gmail. During ...
7
votes
3answers
178 views

Zero Knowledge Proof of ownership of an email address

Let's say that we want to develop a blogging service where only people with an @example.com email can contribute. Prior to post submission, the user requests that a large random token be generated by ...
0
votes
1answer
55 views

Why can I still receive email at my old domain after someone else bought it?

My domain expired years ago and was registered by another party. I have already read Can someone read my E-Mail if I lose ownership of my domain? and see that the answer is yes. Now if someone buys ...
0
votes
1answer
73 views

Phishing email from a contact

I received an email from what looked like a friend, it had a suspicious link I inspected the email address and saw that the username was spot on but the domain name was totally different. I also put ...
-3
votes
4answers
156 views

Can a hacker access your email address and then choose to do nothing?

I have done a bit of research on what hackers look for in an email address, and it looks like any information is valuable to them, but a friend that knows about the subject has told me that it was ...
0
votes
1answer
61 views

What exactly is a “Combo List”, and why is this site providing them for free?

After asking for e-mail lists the other day, I got linked to this: https://combo-list.com/ This is a very strange "blog" which appears to be regularly publishing (or linking to, rather) ...
0
votes
1answer
45 views

Checking system integrity after clicking scam email link on Linux

Earlier today, my mother opened an email thinking it was from my sister-inlaw, then clicked on the shortened link. The link loaded a page of fairly nonsensical text. The source of the page had no ...
1
vote
2answers
58 views

Email sender spoofing check from receiver

I understand there are techniques to prevent someone from spoofing your domain in emails. Is there any guarantee or check that the receiver can do to ensure the sender is authentic? Gmail shows TLS ...
0
votes
1answer
64 views

how to secure open securedoc.html?

I got call from revenue and asked them confirmation that's it's call actually from them. They sent me email (I check Gmail original and it's actually from revenu) with securedoc.html I need to open ...
1
vote
0answers
42 views

How to unencode email urls rewritten by Black Spider [closed]

Since a few months, many organisations have urls in incoming mail rewritten to be redirected through a checking service (Outlook Safelinks, Proofoint, FireEye, Black Spider/Forcepoint). Because this ...
3
votes
1answer
299 views

Why do some email software products block SSL certificates attached to a message?

Whenever I have to share our public SSL certificate with our trading partners through email, I have to change the filename extension of the attached file (i.e. from “.cer” to “.txt”) to ensure it is ...
0
votes
1answer
66 views

Why do I get spam in my newly created email account before even using it?

I made an email account at hotmail.com. Before even using once anywhere I already receive spammail. My question is, how is that possible? And is it unavoidable (from the perspective of an email ...
46
votes
7answers
10k views

HTTPS is widely adopted, why isn't encrypted e-mail as popular?

I don't have an education in computer science, I've just become interested in information security and encryption lately. I'm struggling to understand why encrypted web browsing using HTTPS has been ...
9
votes
4answers
2k views

How to quickly find out what the threat nature of a password protected archive is without getting infected?

I have recently received an e-mail from an existing support group e-mail box with the following characteristics: written in the language used in company's HQ (different from English which is the ...
1
vote
1answer
84 views

Why certain sites don't send newsletters to “anonymous” mail addresses?

I use an "anonymous" mail address (cock.li provider in my case). I have found that mainstream news sites in particular don't send their newsletters to such an addresses. It looks like the domains ...
0
votes
0answers
43 views

How to deal with Registered Envelope Service (CRES) if you are not using this service

First of all, I am not using CRES, but many of our clients use it. I want to know the best approach to manage all communications with our clients that use CRES. I want to avoid using CRES webmail ...
0
votes
1answer
60 views

Email attachments malicious? [duplicate]

So I recently encountered a phishing email, I didn't follow the link of course, but I noticed it had a attachment file of 1KB I didn't download it, but was wondering whether it was possible to be ...
0
votes
0answers
117 views

Has this PC been hacked? What's going on?

I'm reasonably technically competent, but I don't know how to interpret this PC issue. As its a real-world incident, there's some back-story. I'm in the UK. The suspect PC runs Win8.1 up to date, ...
32
votes
6answers
4k views

Is it possible for a name server provider to hijack MX records?

Let’s say: We buy a domain from http://cheap-unsecure-domains.example. Then in our control panel at cp.cheap-unsecure-domains.example we configure it to use the Cloudflare service. We set some MX ...
0
votes
0answers
26 views

Using Windows XP to only read email [duplicate]

Let's settle the obvious: Windows XP is a very obsolete operating system, running it as the main OS on a computer connected to the internet is not a good idea. But, if say, you would like to run it ...
2
votes
1answer
78 views

Does there exist any exploit to read someone's old emails, but not recent emails?

The only one I can think of would be if someone exports a backup of their inbox and doesn't encrypt it for some reason. Other than that, is there any case where someone could read your emails from ...
1
vote
1answer
60 views

What is the best way to verify email address or phone number during call centre sale?

My company sells products through calls. During the calls a customers PII is collected and used to create the product. This PII includes email. After the product is created, we email the customer a ...
0
votes
1answer
46 views

sendgrid delivered malware - what's the abuse reporting procedure [closed]

Sendgrid delivered me malware* - where should I report that? There was no contact info in the headers and the only abuse contact I could find in whois was domain registrar Godaddy. Last time I dealt ...
0
votes
2answers
113 views

How to prevent ISP impersonating me to send email?

My email server(admin@myEmailDomain.com, ip 1.2.3.4) ---> ISP network ----> Gmail I built my own email server on my personal computer(ip 1.2.3.4). I also control the domain. It seems that my ...
0
votes
2answers
141 views

Secure way of sending an email attachment in a user-friendly manner

In the last months I very often was in a position where I needed to send an email attachments with sensitive content to someone whom I didn't know well personally (so that I could talk to them how set ...
3
votes
3answers
318 views

Is a safelinks.protection.outlook.com link phishing?

Received an email which contain the below hyperlink https://nam02.safelinks.protection.outlook.com/?url=http*3A*2F*2Factuallysale.com*2F&data=02*7C01*7C*7C548d20ace3ec4747fe1008d7d7d8b597*...
1
vote
2answers
46 views

Any campus email systems automatically testing links? [duplicate]

I heard that there are some university campus email systems that "click" all the links on incoming emails and thus inadvertently unsubscribe recipients from email distribution lists if the email ...
1
vote
1answer
72 views

SQL vulnerable if input type = email check is enabled

<input type="email" class="form-control" name="email address" id="signinEmail" placeholder="Email address" aria-label="Email address" value="INPUT" required="" data-msg="Please enter a valid email ...
1
vote
3answers
112 views

How to determine if a scanner finding a virus in my email is a false positive?

I have an important email to send. Unfortunately, the recipient's email server rejects it because it found a virus. Note the email has a zipped .exe file attached, the .exe is supposed to download ...
55
votes
7answers
12k views

Is this email asking me to sent them $100 for details on a security flaw in my website a scam?

I've just received this email. Is it a standard practice or a scam? I'm a Security Researcher running a vulnerability identification service for a small group of private clients, and I ...
0
votes
4answers
51 views

Potential DoS in emailing admin on error pages

In my website, the backend sends an email to the sysadmin whenever there is an Error 500 with the logs and other data about the error. How can I prevent a cracker from intentionally triggering the ...
0
votes
1answer
30 views

Risk in adding shared mail server to my SPF like sendinblue/sendgrid for mail reputation?

My enterprise would like to make some mass mailing to their customers, using a third party solution (e.g.: sendinblue, sendgrid, mailchimp...). Is there a real risk that my domain mail address could ...
-1
votes
2answers
1k views

Received email addressed to someone else from themselves

My outlook account received a suspicious email, addressed to somebody else, AW, sent apparently from themselves to themselves. The sender is not an outlook address, but I guess outlook might be ...
8
votes
2answers
464 views

When should user invite links (tokens) expire?

We have a system in which external users can be invited to our identity management system. The users are not employees of our company, but of our customers. The administrators of the customer do not ...
3
votes
1answer
141 views

Is there a way to bypass click-tracking links in emails?

Most newsletters that I receive use mass-mailing software that rewrites links to add tracking information. That is, instead of www.google.com, the email will point to something like links.somecompany....
7
votes
3answers
280 views

Addressing unsubscribe link leakage when an email is forwarded

Since newsletters are often forwarded (and in fact successful ones encourage it!), what's the conventional wisdom on the security of unsubscribe links? It's common practice provide an unsubscribe ...
0
votes
0answers
26 views

Postfix maildrop -> pickup “from:” verification [duplicate]

I was surprised to notice that sending E-mail from local server account allow any user to send message with: From: whatever@whateverdomain This is a security issue, because it allow identity ...
2
votes
1answer
106 views

How to safely display html emails?

I'm building a webmail application using php at the moment. I'm getting the email content from gmail using Imap and wanted to display the email as close as I can to how gmail shows it. Is it safe to ...
0
votes
0answers
30 views

Saved email attachment not reflecting the actual sender of the email but the email of the person who received the email attachment as sender

I have come across certain scenarios which confuses me on how it is possible to manipulate email headers. The person who received an email(A) from person (B), forwarded me (C) the email as Original ...
2
votes
3answers
124 views

What exactly determines which entities/servers “on the Internet” get to read my e-mails when I send them from X to Y?

Let's say, for example, that I have a Gmail account. I compose and send an e-mail to info@somecompany.com. They aren't using Google services, just so that we can exclude "special cases" where they ...
55
votes
8answers
17k views

If I send a plaintext e-mail using Gmail to somebody, including my PGP public key block, is that secure?

I've been trying to figure out "practical encryption" (AKA "PGP") for many years. As far as I can tell, this is not fundamentally flawed: I know Joe's e-mail address: cool_joe@gmail.com. I have a ...
0
votes
2answers
352 views

Someone is using my email to create online accounts; what should I do? [duplicate]

I suspect it’s an attempt at getting into an existing account using a leaked email/password combo. I update my passwords regularly and do not reuse, so I don’t think the attack will be successful, but ...
0
votes
0answers
25 views

I've been an emailed a password; how can I proceed as securely as possible? [duplicate]

I am going through the on-boarding process for a summer internship with a well-known tech/bank company. I've received mail from HR requesting me to fill out an I-9 form via the external service they ...
0
votes
2answers
128 views

High bounce rate due to attacker is using website's mail system

We got a realatively high bounce rate today, because someone decided to spread some links using our mail server. The implementation looked like this: He used the registration form and planted a link ...
0
votes
1answer
89 views

Force specific encryption cipher for S/MIME mails

I have a number of contacts who can only decrypt 3DES, when it comes to S/MIME encrypted mails. I'm aware that this is by far not ideal, but better than no encryption at all. My problem is, that I ...
0
votes
2answers
120 views

Phishing emails - What do I look for?

I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one? There are some things I know to look for already but I want to get moer ...
0
votes
1answer
63 views

DMARC & failing SPF

I would like to clarify the following scenario with DMARC, (assuming there is a publish DMARC policy): SPF fails No (aligned or any) DKIM records Should result of DMARC check be none or fail? ...

1
2 3 4 5
30