Questions tagged [email]

Related to email protocols, clients, servers, content, and message format.

Filter by
Sorted by
Tagged with
0 votes
0 answers
21 views

Can an email trace be maliciously removed by an admin on a default Outlook setup?

I'm doing some research into email servers and how they work. There is a function in Outlook 365 where an admin can perform several traces on emails for the past 90 days. For example, an 'enhanced ...
Elizabeth Vogue's user avatar
0 votes
0 answers
27 views

Invalid Syntax found via SPF record [closed]

Can a domain name of a mail address be spoofed or hacked when you find out that domain name of a mail address has a "invalid syntax found" by checking the SPF record? Or can the IP address ...
Fatih's user avatar
  • 1
0 votes
0 answers
77 views

I have received an email with pictures from the gallery on my phone [closed]

I've two email addresses: [email protected] and [email protected]. Today, "red" received an email from "pink". I didn't send this email. The email contained four pictures that were ...
100xln2's user avatar
  • 101
0 votes
2 answers
70 views

Why spamassasin is doing dns lookup?

I have a server which have configured Amavis and Spamassasin (in default state only). I recently noticed log lines that probably indicate DNS query failure, below is an excerpt: Nov 21 11:15:40 ...
SUNITA GUPTA's user avatar
0 votes
0 answers
136 views

Guidance: S/MIME Signed Certificate invalid for many clients even though it worked previously and still works

I have a very strange problem and i would like to get some guidance on this. Problem description: My application is sending S/MIME signed Email messages to clients. It worked perfectly no problems ...
Lorem ipsum's user avatar
0 votes
0 answers
76 views

If only 'two' insecure MFA options are available (email and sms) which is 'most secure'? [duplicate]

Although I disagree with the term MFA entirely if it refers to 'login code send to email', it's a one-time password at best, and likely badly implemented with its associated risks. I do see quite some ...
Bob Ortiz's user avatar
  • 6,661
-1 votes
1 answer
60 views

Tracing the email's MAC address

Can someone trace the MAC address of an email to the point of origin if the email address has been deleted? I received an email from an unknown sender regarding an issue at my work, and when I tried ...
nida ejaz's user avatar
0 votes
0 answers
13 views

How to determine if email is from from gaia.bounces.google.com or just forwarded from there? [duplicate]

Shown below are the "from and to" portions of the message. It looks like it is just forwarded by "gaia.bounces.google.com". The message itself (and I have quite a few of them) ...
Alexander C. Landsburg's user avatar
0 votes
2 answers
56 views

What does the IMAP banner alone show regarding security (STARTTLS, hashing, information disclosure)?

I encountered an open TCP/143 IMAP port which responded with this banner: * OK [CAPABILITY IMAP4rev1 SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ STARTTLS AUTH=PLAIN AUTH=LOGIN AUTH=DIGEST-MD5 AUTH=...
Bob Ortiz's user avatar
  • 6,661
6 votes
2 answers
911 views

Spoofed email sent to me from my email address with SPF/DKIM/DMARC passing

I received an email earlier today on my work email address. The email came from the same address—mine—but I didn't send it. It was an email claiming that he was a professional hacker who had hacked my ...
PaulMcF87's user avatar
  • 161
0 votes
1 answer
48 views

Text that is turned into links by email clients

When sending emails in the context of an application that will send transactional or marketing emails, sometimes you want to include user-provided information in the body, like for example you ask the ...
gimix's user avatar
  • 283
1 vote
0 answers
170 views

Is email between "large email providers" now secure against interception?

Now that almost all users use only a few email providers, is email content secure from interception? This related question was closed referencing a question about the security of SMTP IMAP, and POP: ...
Croad Langshan's user avatar
0 votes
1 answer
64 views

How can an email forwarding service send email with a "From" from a domain they don't control, and still pass SPF?

Let's say: [email protected] sends an email to [email protected]. Bob owns the domain bob.com but doesn't manage an emailing server. Instead he uses an email forwarding service (provided by his registrar /...
Basj's user avatar
  • 963
0 votes
0 answers
71 views

Proper HIPAA security

I am a sysadmin, though not security-specific. I was recently stunned to receive an automated email from my physician's office (in USA) containing an HTTP link to their website for the completion of ...
Charles Nix's user avatar
0 votes
3 answers
270 views

Gmail encryption

Is sending emails between Gmail accounts encrypted, can ISP read gmail content in transit??
Naqibullah Vakili's user avatar
0 votes
1 answer
96 views

Measures to safeguard against ZeroFont phishing attack

What measures can be taken to safeguard against ZeroFont phishing attacks (setting font size to zero), and how can email security settings assist in the detection of ZeroFont elements and the ...
Maideen Asbak's user avatar
0 votes
0 answers
70 views

I am trying to identify suspicious content within a PDF file

I have a PDF file that has been sent to me as part of a suspicious email. I viewed the email as message source from within outlook. This gave me all raw text within the email. I copied this to ...
JHM's user avatar
  • 1
1 vote
1 answer
59 views

With selfhosting email server, selfsigned certificate, does it make a difference with PGP mail, What can be leaked?

If we are self hosting our own email server with mydomain.com with a self sign CA for S/MIME. What are some possible ways that our email content can get leaked? Then if we use PGP email, does it make ...
user294265's user avatar
2 votes
2 answers
259 views

Is a + on an email address a security vulnerability for a registration process?

Is + in email addresses a security vulnerability for authentication algorithms? How can it be used in a malicious way? Should we forbid emails with + signs during registration? For example we have 2 ...
user228062's user avatar
0 votes
0 answers
18 views

How do I find out what country did an email originate from? [duplicate]

Out of curiosity I came across some emails in my inbox that I really wanted to know where they where sent from. Not just Google's or Yahoo's service's address, but the actual country the sender was in ...
Hugo Almeida's user avatar
1 vote
2 answers
100 views

Is OK to accept multibyte unicode codepoints as recipient address for Sendmail and Postfix?

I am working on a server software that receives an utf-8 encoded email address to send an email to. I permit multibyte unicode characters (emoji etc.). Then I pass that email address to Sendmail to ...
Greenlight's user avatar
0 votes
1 answer
452 views

Still able to spoof emails with strict DMARC, SPF and DKIM enabled

Despite setting up strict DMARC, SPF, and having DKIM enabled, I am still easily able to spoof the "From" address. I can easily do this with PHPMailer on my Mac and even with some free 3rd ...
Ian W's user avatar
  • 101
0 votes
2 answers
66 views

User Access to Quarantined Emails

Are there any industry recommendations with regards to allowing users access to quarantined emails in Office 365? Should users be notified of quarantined emails. Should they be allowed to request the ...
CJamesEd's user avatar
0 votes
2 answers
212 views

What is this bot/person trying to do with my contact form:

I have a small Wordpress website using contact form 7. I received messages that look like an attempt to hack my website: From: <div style="background-color:#4169E1; margin:auto; max-width:...
Plouff's user avatar
  • 103
0 votes
1 answer
129 views

What is the most secure way to send email now? PGP or S/MIME, Given both parties willing to learn the technical parts

What is the most secure way and privacy-focused to send email now (current tech)? PGP or S/MIME, Given both parties willing to learn the technical parts? Use case, both of parties use third party ...
user294265's user avatar
0 votes
1 answer
52 views

How can we ensure the best practice with mail pgp when the recipient is not using it?

How can we ensure the best practice with mail pgp when the recipient is not using it?, so when Bob send the vary first email to Alex, Bob signing and encrypted it? Q1. In that case, Is Alex able to ...
user294265's user avatar
0 votes
0 answers
89 views

How secure is SMTP email today? [duplicate]

Can SMTP be relied on to send confidential information and attachments in 2023? With the concentration of email accounts in big cloud platforms belonging to Microsoft, Google and others, is email more ...
aire's user avatar
  • 1
1 vote
1 answer
670 views

Does Apple’s Hide my Email feature really work?

I was wondering if when you use something like Apple's 'Hide my Email' functionality if there's some way for the organization to still recover the user's original email if the user is then asked to ...
Justin T's user avatar
  • 113
0 votes
1 answer
854 views

Is this google security alert legit?

I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
Alpha-Craft's user avatar
0 votes
1 answer
146 views

Spoofed forwarded email? Help with analyzing of DMARC report

Why did this email get forwarded successfully? An XML report is below: I simply cannot understand the delivery status, a transcript follows: This email has been automatically forwarded. Despite the ...
Vlastimil Burián's user avatar
-1 votes
1 answer
106 views

Can Outlook stay connected to an email account through a password change?

Corporate setting, multiple people have access to the same email account (it is a functional not a personal account). Order of events: User A opens Outlook, connects to the shared email account, ...
quarague's user avatar
  • 183
1 vote
1 answer
79 views

Would asking for user input email again in password reset increase security?

I have a workflow like this right now: User inputs the account email and clicks the "forget password" button User receives an email containing a link with token for password reset User ...
John Winston's user avatar
2 votes
0 answers
86 views

What does a Microsoft Safelink contain?

Regarding the URL query arguments of a Safelink: Why do they contain my e-mail address (the recipient)? What are these two longish strings? Look like IDs of a database. Does Microsoft store Safelinks ...
rexkogitans's user avatar
3 votes
1 answer
354 views

What are the risks of an MTA-STS policy with a long max_age?

In setting up SMTP MTA Strict Transport Security (RFC 8461) for my domain, I've noticed some contradictory advice and practice: although the maximum value for the max_age policy value is around one ...
Emily's user avatar
  • 33
0 votes
0 answers
63 views

If I have my own email server and domain, but use Outlook at the client, does this give Microsoft access to my emails?

I have a custom domain, and I'm going to set up an email server on a VPS. Then I'm going to create an Outlook account and connect it to the email server via POPS/IMAP. How much does this compromise my ...
David Kagan's user avatar
1 vote
0 answers
88 views

I have found my email online in a .txt file. What should be my next steps? [closed]

A few days ago someone tried to log into my bank account, the attempt was unsuccessful but it was quite concerning. I’ve spent the past weekend moving my most important accounts to alternate emails ...
Ahania's user avatar
  • 11
1 vote
0 answers
92 views

Malicious Mass Email Attack Occurred, Do I Still Have Problem?

I'm using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "[email protected]". It was used as a "From:" email in a mass email attack. ...
python_mainly's user avatar
0 votes
0 answers
194 views

SPF passes but in Gmail, 'Show Original', top section doesn't show SPF: PASS with IP

When I send an email from my HostGator account to my Gmail account, I see in the header spf=pass... When I paste the header in this tool -> https://toolbox.googleapps.com/apps/messageheader/ It ...
Bob Aune's user avatar
1 vote
1 answer
4k views

Can an email be traced if the account is deleted?

Can the government trace an email that has been sent from an account that is now deleted?
nessa's user avatar
  • 11
2 votes
0 answers
70 views

Is there a safe way to follow a suspicious link? [duplicate]

When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
David K's user avatar
  • 1,337
29 votes
8 answers
9k views

Is email scraping still a thing for spammers

I've run a website for barely three months now and put my emails on there. I also run a catch-all address on this domain. Since my website is online, I haven't received a single spam email on the ...
dinamica's user avatar
  • 391
1 vote
1 answer
144 views

Was recently leaked and wondering what this site can do w/ my info

I was recently notified by Guardio that some of my info was leaked to 'Combolist' and when I clicked on the link I was brought to this.. https://cracked.io/Forum-Combolists--297?page=2. I'm completely ...
SavvyArtist's user avatar
9 votes
5 answers
3k views

Identify someone using a double identity by tracing phone use common to the two 'identities'?

Thriller novelist here looking to get something right. I have a character who uses an alias. I have two scenarios I'm trying to have play out... At some point, they have sent emails from the same ...
Andrew Raymond Books's user avatar
0 votes
0 answers
20 views

IP address from headers (Gmail/outlook mobile app) [duplicate]

My question isn't a duplicate. I know that the IP is leaked in the computer desktop version of outlook. But from I'm able to tell, the mobile version didn't leak it. I need to make sure that I'm right ...
lalachka's user avatar
  • 101
1 vote
1 answer
57 views

email mailbox username compromised

I host my own email server courtesy of Synology MailPlus Server. In an effort to increase security I created a username consisting of 25 random characters. I monitor the mail logs of this server daily ...
davewash's user avatar
0 votes
2 answers
182 views

Someone seems to have compromised my email address but can't be sure?

Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
user288766's user avatar
0 votes
0 answers
50 views

Email TLS encryption - personal data [duplicate]

I submitted some personal data to an organization through a HTTPS website but then they emailed it all back to me in a PDF. This included name, address and DOB. There was no end-to-end encryption on ...
davidfrancis's user avatar
0 votes
2 answers
119 views

Do email security scans that follow links replace digest params in URLs with invalid values?

Going through our application logs recently I noticed a number of instances of page requests where an invalid SHA512 digest param in a URL resulted in a 403. A couple aspects of these requests make me ...
Kylos's user avatar
  • 335
0 votes
2 answers
209 views

Should I take action if I receive a phishing email that passes all email sender checks?

I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
Esteban's user avatar
  • 133
1 vote
1 answer
183 views

Incomplete decryption of S/MIME mails using openssl cms

We're receiving signed and encrypted mails from many senders. For most senders, the decryption with openssl works fine using the following command: openssl cms -decrypt -recip <path-to-key> -in &...
lmr2391's user avatar
  • 111

1
2 3 4 5
36