All Questions
1,860 questions
0
votes
0
answers
162
views
I am trying to identify suspicious content within a PDF file
I have a PDF file that has been sent to me as part of a suspicious email. I viewed the email as message source from within outlook. This gave me all raw text within the email. I copied this to ...
- 1
1
vote
1
answer
115
views
With selfhosting email server, selfsigned certificate, does it make a difference with PGP mail, What can be leaked?
If we are self hosting our own email server with mydomain.com with a self sign CA for S/MIME. What are some possible ways that our email content can get leaked?
Then if we use PGP email, does it make ...
- 17
2
votes
2
answers
361
views
Is a + on an email address a security vulnerability for a registration process?
Is + in email addresses a security vulnerability for authentication algorithms? How can it be used in a malicious way? Should we forbid emails with + signs during registration?
For example we have 2 ...
- 111
1
vote
2
answers
247
views
Is OK to accept multibyte unicode codepoints as recipient address for Sendmail and Postfix?
I am working on a server software that receives an utf-8 encoded email address to send an email to.
I permit multibyte unicode characters (emoji etc.). Then I pass that email address to Sendmail to ...
- 13
1
vote
1
answer
1k
views
Still able to spoof emails with strict DMARC, SPF and DKIM enabled
Despite setting up strict DMARC, SPF, and having DKIM enabled, I am still easily able to spoof the "From" address. I can easily do this with PHPMailer on my Mac and even with some free 3rd ...
- 111
1
vote
1
answer
225
views
User Access to Quarantined Emails
Are there any industry recommendations with regards to allowing users access to quarantined emails in Office 365? Should users be notified of quarantined emails. Should they be allowed to request the ...
- 11
0
votes
2
answers
277
views
What is this bot/person trying to do with my contact form:
I have a small Wordpress website using contact form 7.
I received messages that look like an attempt to hack my website:
From: <div style="background-color:#4169E1; margin:auto;
max-width:...
- 103
0
votes
1
answer
467
views
What is the most secure way to send email now? PGP or S/MIME, Given both parties willing to learn the technical parts
What is the most secure way and privacy-focused to send email now (current tech)? PGP or S/MIME, Given both parties willing to learn the technical parts?
Use case, both of parties use third party ...
- 17
0
votes
1
answer
128
views
How can we ensure the best practice with mail pgp when the recipient is not using it?
How can we ensure the best practice with mail pgp when the recipient is not using it?, so when Bob send the vary first email to Alex, Bob signing and encrypted it?
Q1. In that case, Is Alex able to ...
- 17
1
vote
0
answers
508
views
How secure is SMTP email today? [duplicate]
Can SMTP be relied on to send confidential information and attachments in 2023?
With the concentration of email accounts in big cloud platforms belonging to Microsoft, Google and others, is email more ...
- 11
1
vote
1
answer
3k
views
Does Apple’s Hide my Email feature really work?
I was wondering if when you use something like Apple's 'Hide my Email' functionality if there's some way for the organization to still recover the user's original email if the user is then asked to ...
- 113
0
votes
1
answer
4k
views
Is this google security alert legit?
I got this security alert from Google lately, but I'm not sure if it is legit. Someone might have tried to scam me, because it says my E-Mail was linked to another as the recovery email. Either ...
0
votes
1
answer
296
views
Spoofed forwarded email? Help with analyzing of DMARC report
Why did this email get forwarded successfully? An XML report is below:
I simply cannot understand the delivery status, a transcript follows:
This email has been automatically forwarded. Despite the ...
- 1,737
-1
votes
1
answer
230
views
Can Outlook stay connected to an email account through a password change?
Corporate setting, multiple people have access to the same email account (it is a functional not a personal account). Order of events:
User A opens Outlook, connects to the shared email account, ...
- 201
1
vote
1
answer
145
views
Would asking for user input email again in password reset increase security?
I have a workflow like this right now:
User inputs the account email and clicks the "forget password" button
User receives an email containing a link with token for password reset
User ...
- 111
2
votes
0
answers
167
views
What does a Microsoft Safelink contain?
Regarding the URL query arguments of a Safelink:
Why do they contain my e-mail address (the recipient)?
What are these two longish strings? Look like IDs of a database. Does Microsoft store Safelinks ...
- 223
3
votes
1
answer
1k
views
What are the risks of an MTA-STS policy with a long max_age?
In setting up SMTP MTA Strict Transport Security (RFC 8461) for my domain, I've noticed some contradictory advice and practice: although the maximum value for the max_age policy value is around one ...
- 33
0
votes
0
answers
153
views
If I have my own email server and domain, but use Outlook at the client, does this give Microsoft access to my emails?
I have a custom domain, and I'm going to set up an email server on a VPS.
Then I'm going to create an Outlook account and connect it to the email server via POPS/IMAP. How much does this compromise my ...
1
vote
0
answers
196
views
I have found my email online in a .txt file. What should be my next steps? [closed]
A few days ago someone tried to log into my bank account, the attempt was unsuccessful but it was quite concerning. I’ve spent the past weekend moving my most important accounts to alternate emails ...
- 11
1
vote
0
answers
152
views
Malicious Mass Email Attack Occurred, Do I Still Have Problem?
I'm using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "[email protected]". It was used as a "From:" email in a mass email attack.
...
0
votes
0
answers
673
views
Why did the WannaCry ransomware kill switch check whether it was within a virtual environment in this manner?
I have been researching the Wannacry ransomware, and have seen an example of the kill switch within Ghidra. What baffles me is, why did they implement the kill switch as a web domain instead of any ...
0
votes
0
answers
569
views
SPF passes but in Gmail, 'Show Original', top section doesn't show SPF: PASS with IP
When I send an email from my HostGator account to my Gmail account, I see in the header spf=pass...
When I paste the header in this tool -> https://toolbox.googleapps.com/apps/messageheader/
It ...
- 1
1
vote
1
answer
7k
views
Can an email be traced if the account is deleted?
Can the government trace an email that has been sent from an account that is now deleted?
- 11
2
votes
0
answers
124
views
Is there a safe way to follow a suspicious link? [duplicate]
When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
- 1,337
28
votes
8
answers
10k
views
Is email scraping still a thing for spammers
I've run a website for barely three months now and put my emails on there. I also run a catch-all address on this domain. Since my website is online, I haven't received a single spam email on the ...
- 381
1
vote
1
answer
590
views
Was recently leaked and wondering what this site can do w/ my info
I was recently notified by Guardio that some of my info was leaked to 'Combolist' and when I clicked on the link I was brought to this.. https://cracked.io/Forum-Combolists--297?page=2.
I'm completely ...
- 11
9
votes
5
answers
3k
views
Identify someone using a double identity by tracing phone use common to the two 'identities'?
Thriller novelist here looking to get something right.
I have a character who uses an alias. I have two scenarios I'm trying to have play out...
At some point, they have sent emails from the same ...
0
votes
0
answers
22
views
IP address from headers (Gmail/outlook mobile app) [duplicate]
My question isn't a duplicate. I know that the IP is leaked in the computer desktop version of outlook. But from I'm able to tell, the mobile version didn't leak it.
I need to make sure that I'm right ...
- 101
1
vote
1
answer
103
views
email mailbox username compromised
I host my own email server courtesy of Synology MailPlus Server. In an effort to increase security I created a username consisting of 25 random characters. I monitor the mail logs of this server daily ...
- 11
0
votes
2
answers
346
views
Someone seems to have compromised my email address but can't be sure?
Whilst going through my spam folder on Gmail I've found 2 emails that struck me as suspicious. The first is simply a welcome message from DropBox saying 'Hi Ahmed please verify your email' and then ...
0
votes
0
answers
100
views
Email TLS encryption - personal data [duplicate]
I submitted some personal data to an organization through a HTTPS website but then they emailed it all back to me in a PDF. This included name, address and DOB. There was no end-to-end encryption on ...
- 101
0
votes
2
answers
334
views
Do email security scans that follow links replace digest params in URLs with invalid values?
Going through our application logs recently I noticed a number of instances of page requests where an invalid SHA512 digest param in a URL resulted in a 403.
A couple aspects of these requests make me ...
- 335
0
votes
2
answers
376
views
Should I take action if I receive a phishing email that passes all email sender checks?
I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was ...
- 133
1
vote
1
answer
376
views
Incomplete decryption of S/MIME mails using openssl cms
We're receiving signed and encrypted mails from many senders. For most senders, the decryption with openssl works fine using the following command:
openssl cms -decrypt -recip <path-to-key> -in &...
- 111
2
votes
0
answers
564
views
Active Directory and External Email Accounts
In my place of work we have an on-prem Active Directory with 'staff' accounts. Each of these AD accounts has an associated company email, e.g. [email protected]
Within the same AD we also have '...
- 129
0
votes
1
answer
1k
views
Can someone spoof its IP address to mine when sending emails?
Can someone spoof its IP address to mine when sending emails?
I know we can see the IP address of the sender in the email header. If someone had my IP, can he/she use it to show in email headers?
Even ...
17
votes
3
answers
3k
views
"Undelivered Mail" I never sent (after registration on website)
I created an online account and received the usual welcome email. In addition, however, an "Undelivered Mail Returned to Sender" email appeared in my inbox one second later. I am the ...
- 173
7
votes
5
answers
5k
views
Are SHA-256 hashes of user emails guaranteed to be unique?
I'm working on a website that will require users to insert a valid email address, which will work as their unique user id. This email will not be used for communicating with the user, it is only ever ...
- 543
1
vote
1
answer
206
views
Reliable way to permanently hide primary email address [closed]
I'd like to permanently hide my primary email address by using a permanent forward email address/alias for an extra layer of security.
My plan is:
Creating a new personal email address.
Create a ...
- 13
2
votes
4
answers
1k
views
Email with an attached file vs. email with a link to a file
We have a software that sends out invoices by email. As the invoices contain the names of the clients and their addresses we consider the invoice to be sensitive to some degree.
Rather than sending ...
- 121
2
votes
1
answer
355
views
Spoofed email: whose fault is it?
My relative received an email from a bill they were expecting to pay. So they paid said bill.
Only problem is: it was a spoofed email, and the real bill only came in later.
I checked the email on the ...
- 133
0
votes
2
answers
740
views
Does Protonmail save MAC addresses? [closed]
I received an "automated abuse detection" warning email to my Protonmail account due to bulk sign-ups. Does that mean that all the emails are associated with one another? My brother made a ...
- 17
3
votes
2
answers
534
views
Are there any reasons to forbid employees from using desktop email clients?
Corporate email services often use web-based solutions like gmail or office365.
Is there any valid security concern in allowing third party email clients if two factor authentication
is enabled on the ...
- 33
0
votes
1
answer
236
views
Does email provider scan mails for viruses?
Imagine I am on [email protected] and I send a mail to [email protected] with an eicar.txt as an attachement. Will the email be stopped because it contains the eicar.txt ?
In case there is an email ...
- 1
2
votes
1
answer
176
views
Does a proper Email ALG (i.e. Email-Proxy) alter/remove the local Email-Header information?
Does a proper Email ALG (i.e. Email-Proxy) alter/remove the local Email-Header information so the recipient does NOT get information about the locally used IP addresses?
Example:
Received: from mail....
- 21
1
vote
2
answers
5k
views
People using my e-mail address to sign up for mailing lists and newsletters, what to do to prevent it from happening anymore? [duplicate]
For some years now, I sometimes get e-mails, that my e-mail has been used to sign up for a mailing list or service, even though I haven’t signed up for it.
It’s not something that happens very often, ...
- 11
1
vote
1
answer
138
views
Is there a justification for rejecting email addresses without dots in the mailbox name?
By this, I mean rejecting [email protected] and insisting on [email protected] as a means of communicating with me (and in one case, as a login).
A few years ago, the French social security ...
- 111
1
vote
2
answers
976
views
Risks sending emails with my servers using clients' SMTP credentials
Assuming I am creating an online service that allows my clients to send email (using their SMTP credentials), what risks should I consider and how to prevent them?
The sender of the emails will always ...
- 55
1
vote
1
answer
891
views
Why it is so widely tolerated to allow SMTP server in DMZ to initiate connection to the LAN
I was surprised to see that the French cybersecurity agency tolerates an SMTP relay server in the DMZ (which collects emails received from the Internet) to reach the Email server in the LAN.
In my ...
- 1,368
0
votes
1
answer
68
views
Can an email address be added to "Forward To" list in cPanel without accessing the cPanel?
My company is using cPanel emails, recently while reviewing email forwarders, I noticed an email in the "Forward To" list that our sales email is being forwarded to it and that was unknow to ...
- 1