Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,752
questions
1
vote
1
answer
83
views
Can an email be traced if the account is deleted?
Can the government trace an email that has been sent from an account that is now deleted?
- 11
2
votes
0
answers
46
views
Is there a safe way to follow a suspicious link? [duplicate]
When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
- 1,337
28
votes
8
answers
8k
views
Is email scraping still a thing for spammers
I've run a website for barely three months now and put my emails on there. I also run a catch-all address on this domain. Since my website is online, I haven't received a single spam email on the ...
- 281
1
vote
1
answer
76
views
Was recently leaked and wondering what this site can do w/ my info
I was recently notified by Guardio that some of my info was leaked to 'Combolist' and when I clicked on the link I was brought to this.. https://cracked.io/Forum-Combolists--297?page=2.
I'm completely ...
- 11
9
votes
5
answers
3k
views
Identify someone using a double identity by tracing phone use common to the two 'identities'?
Thriller novelist here looking to get something right.
I have a character who uses an alias. I have two scenarios I'm trying to have play out...
At some point, they have sent emails from the same ...
0
votes
0
answers
18
views
IP address from headers (Gmail/outlook mobile app) [duplicate]
My question isn't a duplicate. I know that the IP is leaked in the computer desktop version of outlook. But from I'm able to tell, the mobile version didn't leak it.
I need to make sure that I'm right ...
- 101
1
vote
1
answer
42
views
email mailbox username compromised
I host my own email server courtesy of Synology MailPlus Server. In an effort to increase security I created a username consisting of 25 random characters. I monitor the mail logs of this server daily ...
- 11
0
votes
2
answers
86
views
Someone seems to have compromised my email address but can't be sure?
Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
0
votes
0
answers
34
views
Email TLS encryption - personal data [duplicate]
I submitted some personal data to an organization through a HTTPS website but then they emailed it all back to me in a PDF. This included name, address and DOB. There was no end-to-end encryption on ...
- 101
0
votes
2
answers
54
views
Do email security scans that follow links replace digest params in URLs with invalid values?
Going through our application logs recently I noticed a number of instances of page requests where an invalid SHA512 digest param in a URL resulted in a 403.
A couple aspects of these requests make me ...
- 333
0
votes
2
answers
96
views
Should I take action if I receive a phishing email that passes all email sender checks?
I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
- 123
0
votes
0
answers
32
views
Incomplete decryption of S/MIME mails using openssl cms
We're receiving signed and encrypted mails from many senders. For most senders, the decryption with openssl works fine using the following command:
openssl cms -decrypt -recip <path-to-key> -in &...
- 101
0
votes
0
answers
21
views
Identify purpose of spam/phishing email [duplicate]
Lately, I have been getting these types of emails that do not appear to be standard spam/phishing emails but obviously, they are not "normal" emails either. Can anyone help me to find the ...
- 903
2
votes
0
answers
65
views
Active Directory and External Email Accounts
In my place of work we have an on-prem Active Directory with 'staff' accounts. Each of these AD accounts has an associated company email, e.g. john@example.com
Within the same AD we also have '...
- 129
0
votes
2
answers
135
views
Can someone spoof its IP address to mine when sending emails?
Can someone spoof its IP address to mine when sending emails?
I know we can see the IP address of the sender in the email header. If someone had my IP, can he/she use it to show in email headers?
Even ...
16
votes
3
answers
2k
views
"Undelivered Mail" I never sent (after registration on website)
I created an online account and received the usual welcome email. In addition, however, an "Undelivered Mail Returned to Sender" email appeared in my inbox one second later. I am the ...
- 163
5
votes
5
answers
494
views
Are SHA-256 hashes of user emails guaranteed to be unique?
I'm working on a website that will require users to insert a valid email address, which will work as their unique user id. This email will not be used for communicating with the user, it is only ever ...
- 533
1
vote
1
answer
82
views
Reliable way to permanently hide primary email address [closed]
I'd like to permanently hide my primary email address by using a permanent forward email address/alias for an extra layer of security.
My plan is:
Creating a new personal email address.
Create a ...
- 13
2
votes
4
answers
87
views
Email with an attached file vs. email with a link to a file
We have a software that sends out invoices by email. As the invoices contain the names of the clients and their addresses we consider the invoice to be sensitive to some degree.
Rather than sending ...
- 121
2
votes
1
answer
190
views
Spoofed email: whose fault is it?
My relative received an email from a bill they were expecting to pay. So they paid said bill.
Only problem is: it was a spoofed email, and the real bill only came in later.
I checked the email on the ...
- 123
-1
votes
2
answers
147
views
Does Protonmail save MAC addresses? [closed]
I received an "automated abuse detection" warning email to my Protonmail account due to bulk sign-ups. Does that mean that all the emails are associated with one another? My brother made a ...
- 7
3
votes
2
answers
218
views
Are there any reasons to forbid employees from using desktop email clients?
Corporate email services often use web-based solutions like gmail or office365.
Is there any valid security concern in allowing third party email clients if two factor authentication
is enabled on the ...
- 33
0
votes
1
answer
66
views
Does email provider scan mails for viruses?
Imagine I am on me@outlook.com and I send a mail to him@outlook.com with an eicar.txt as an attachement. Will the email be stopped because it contains the eicar.txt ?
In case there is an email ...
- 1
2
votes
1
answer
117
views
Does a proper Email ALG (i.e. Email-Proxy) alter/remove the local Email-Header information?
Does a proper Email ALG (i.e. Email-Proxy) alter/remove the local Email-Header information so the recipient does NOT get information about the locally used IP addresses?
Example:
Received: from mail....
- 21
1
vote
2
answers
177
views
People using my e-mail address to sign up for mailing lists and newsletters, what to do to prevent it from happening anymore? [duplicate]
For some years now, I sometimes get e-mails, that my e-mail has been used to sign up for a mailing list or service, even though I haven’t signed up for it.
It’s not something that happens very often, ...
- 11
1
vote
1
answer
81
views
Is there a justification for rejecting email addresses without dots in the mailbox name?
By this, I mean rejecting foo@example.com and insisting on foo.bar@example.com as a means of communicating with me (and in one case, as a login).
A few years ago, the French social security ...
- 111
1
vote
2
answers
120
views
Risks sending emails with my servers using clients' SMTP credentials
Assuming I am creating an online service that allows my clients to send email (using their SMTP credentials), what risks should I consider and how to prevent them?
The sender of the emails will always ...
- 55
1
vote
1
answer
139
views
Why it is so widely tolerated to allow SMTP server in DMZ to initiate connection to the LAN
I was surprised to see that the French cybersecurity agency tolerates an SMTP relay server in the DMZ (which collects emails received from the Internet) to reach the Email server in the LAN.
In my ...
- 1,348
0
votes
1
answer
16
views
Can an email address be added to "Forward To" list in cPanel without accessing the cPanel?
My company is using cPanel emails, recently while reviewing email forwarders, I noticed an email in the "Forward To" list that our sales email is being forwarded to it and that was unknow to ...
- 1
1
vote
1
answer
44
views
Emails being duplicated with different recipient address
I am using Azure with CentOS and Postfix and set up an account with a relay provider who banned me as a risk after 37 emails were relayed, but would not tell me why. I set up with another relay ...
- 11
1
vote
1
answer
32
views
University Email (Outlook) Changed and Auto-Updated in Browser and Google Account
I recently noticed my email address for the University I work for was changed - from "blank@university.edu" to "blank@ad.university.edu". I also noticed that the version of the ...
- 11
1
vote
1
answer
117
views
How many times need e-mail headers be signed with DKIM to mitigate DKIM header injection attacks?
Many people have written about DKIM header injection attacks. [1] The suggestion to mitigate it is to oversign headers and to rotate any DKIM keys that were previously used to sign e-mails where not ...
- 744
1
vote
0
answers
52
views
Can an email address attached to key be traced back to me? [closed]
I used my actual protonmail email address at the start of creating my own key. Can this email address be traced to me?
So when I sign something with my key and it's decrypted, can anyone see the email ...
- 11
1
vote
1
answer
186
views
can my isp read my emails or see whom i send/receive emails from?
can my Isp read my emails or see whom I send emails or receive emails from? i use rediffmail.com, Gmail and outlook.com for emails. All are https and I use cloudeflare dns.
- 35
2
votes
3
answers
159
views
Is there a reason we don't first validate the email address before continuing with the registration?
Many websites and/or web apps require you to validate the e-mail address after registration.
Why don't we first validate the email address and then continue with the registration? Is there something ...
- 123
0
votes
1
answer
133
views
Is Google mining the content of emails I send to people who use gmail? Could they?
If I sign up for Gmail I probably agree to give Google the right to use all my content for whatever purposes they want. We know they have incredible research going on into data mining and machine ...
- 9
0
votes
2
answers
92
views
Why is it ok to send my lender an email, but not ok for them to send an email back?
My loan lender accepts emails from their customers. They share their contact details including their customer service email address on their website with the public. So, they apparently regard ...
0
votes
0
answers
70
views
Why does the majority of email spam even exist? [duplicate]
This is a serious question and I have thought about it a lot. Not a newbie question. I am unsatisfied with the common answers
they try to sell things
they try to scam you
they try to do phishing
they ...
- 111
0
votes
3
answers
115
views
Is my Hotmail compromised as many emails have been sent automatically?
There were hundreds of emails sent from my Hotmail account between 30 Aug to 1 Sept to many Hotmail and Outlook addresses with sECURED.shtml attachment of 764KB. Some emails were not delivered and ...
50
votes
4
answers
5k
views
Is URL rewriting in e-mail a sound security practice?
Our work e-mail server has started rewriting links in incoming mail through a redirecting gateway, for "security reasons": if I receive an e-mail containing a link to
https://security....
- 871
0
votes
0
answers
29
views
How could I get a spam/phishing email from microsoft.com [duplicate]
I got this email from no-reply@microsoft.com. This spam email Report The User points to mailto:Unusuaal.Signin980@googlemail.com?subject=unusual sign-in activity&body=Report The User
How can ...
- 101
0
votes
1
answer
108
views
How can I filter out phishing e-mails containing malware using Gmail?
I use gmail, and about 3 weeks ago I started getting a couple e-mails a day from random sources. All of the e-mails contain gibberish text like this:
6 5 4 8 2586 8016 70170
2 1 08 05 60 172 01 ...
- 183
2
votes
2
answers
188
views
Flattening an SPF record - drawbacks and downsides?
I have an SPF record that has too many DNS lookups. Consequence is some mail servers will silently drop emails; RFC7028 says that over 10 lookups:
SPF implementations MUST limit the total number of ...
- 518
6
votes
1
answer
798
views
Can DMARC's SPF alignment be spoofed?
IP addresses can be spoofed. The Envelope-From and Header-From addresses can be spoofed as well. But is it possible to spoof all three at the same time to send a forged email that passes both SPF and ...
- 427
0
votes
1
answer
62
views
Forward messages without tracking pixels using thunderbird
Thunderbird does not load remote content by default, preventing pixel-tracking. However, if I forward an email, the links to remote content is still included in the forwarded email.
Is there an option ...
- 103
0
votes
1
answer
141
views
How to detect phishing emails in the future?
My main tactic (amongst others, see related questions) of how I detect phishing emails are through the use of the obviously wrong sender domain.
I see a trend that big companies start to use dedicated ...
- 101
0
votes
2
answers
62
views
Is this a valid use case for email 2FA?
We have a private website for our clients which needs a username and password for login to see protected information. The users are created by ourselves by petition of our clients for some of their ...
0
votes
0
answers
37
views
How to encrypt an e-mail to many recipients in an effective way? [duplicate]
Let's say we have an e-mail of 10MB, and we want to distribute this to 1000 users. Before sending the e-mail, I encrypt it. And all users have my public key to decrypt it.
What encryption method can I ...
- 101
0
votes
1
answer
372
views
Abnormal Receiving of Google Verification Codes
Recently I have been receiving "Google Verification Codes" that I never requested and for password recovery of the google accounts that are not mine however are similar to mine. It might be ...
- 1
3
votes
1
answer
178
views
Why is email 2FA not common?
SMS is a quite common, albeit insecure, 2FA method. Why is email not more common? If someone is using a computer, they almost certainly have an email address, while it is less certain that they have a ...
- 139