2022 Developer Survey is open! Take survey.

Questions tagged [email-spoofing]

Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.

Filter by
Sorted by
Tagged with
0 votes
2 answers
51 views

How can I receive a (spam) email from an unknown email address?

When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from ...
user avatar
  • 123
1 vote
0 answers
25 views

Email supposedly from the future mentioning fairly recent password [duplicate]

Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that ...
user avatar
  • 11
0 votes
0 answers
43 views

How am I receiving emails addressed to an address not associated with my account?

I currently have a g-mail address (example@gmail.com). I recently received a message addressed to example@aol.com. Looking at the header I see my correct address in the Delivered-To: field but in the ...
user avatar
0 votes
1 answer
437 views

How does this scam email from a seemingly legit domain work?

I received a strange email from security@facebookmail.com. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me ...
user avatar
  • 105
0 votes
2 answers
63 views

Business Email Compromise emails sent to personal email accounts

I am using Google workspace to handle my domain emails. At a certain point, employees started to receive spoofing emails to their @mydomain.com addresses. I blocked these emails and it worked. However,...
user avatar
  • 101
37 votes
2 answers
20k views

How did this paypal spoof email pass SPF, DKIM and DMARC

This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC ...
user avatar
  • 401
3 votes
2 answers
135 views

Do password autofill extensions securely validate the site they are autofilling?

I had a situation where I clicked an email link send to me by a financial institution. The link first sent me to their login page where my chrome password extension automatically filled in my username ...
user avatar
0 votes
1 answer
225 views

What's The Best PHP Encryption For Email Addresses?

I'm storing a list of email addresses and other not personally identifiable information for a mailing list in a database. Since it's for a project related to cryptocurrency, I believe that the ...
user avatar
  • 743
0 votes
1 answer
153 views

Vulnerability : Missing SPF - is this a scam?

I got an email with the following: I am just looking at your SPF records then found following. SPF Records missing safe check which can allow me to send mail and phish easily any victim. PoC: <?...
user avatar
  • 277
16 votes
3 answers
6k views

Can an email be doctored to appear from a different sender on an earlier date?

Could someone doctor an email to make it appear that it was sent from a different sender at an earlier date? For example, could someone who knows my email address make it appear that I had emailed ...
user avatar
  • 269
1 vote
0 answers
120 views

Potential Western Union Scam - Account Registration

In recent weeks I have seen a handful of senior employees in my organization receive a confirmation email from Wester Union for a new account creation. The issue is that none of these users have ...
user avatar
  • 172
0 votes
2 answers
137 views

Are e-mails that have a name slightly different from the web page legitimate e-mails?

I usually receive e-mails from an organization called Change.org, that is a site for create on-line petitions (it's site is https://www.change.org/). The thing is, they send me e-mails with ...
user avatar
1 vote
2 answers
207 views

Do fowarded emails retain DMARC protection?

Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be ...
user avatar
-1 votes
2 answers
189 views

Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?

I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a ...
user avatar
0 votes
0 answers
82 views

How can you tell if an email is really from the address it claims it's from? [duplicate]

I am creating a basic website contact form. It requires entering a 'from' email address. I entered a dummy email address, which I do not control, yet the email is still sent, and, to the recipient, it ...
user avatar
  • 1,224
1 vote
2 answers
617 views

How to check if a mail server is Enforced-STARTLS rather than Opportunistic-STARTTLS?

This article tells us that there are two types of STARTTLS: Opportunistic (i.e. optional STARTTLS) STARTTLS and Enforced STARTTLS, which works by the doctrine of "Encrypted connection or drop ...
user avatar
0 votes
0 answers
72 views

How to update the Return-Path that Facebook sends with?

Each facebook user gets legitimate facebook emails with a fixed Return-Path: notification+ABC123@facebookmail.com header. I.e., Bob will always get mails from ABC123, and Wilma from EFG456. There is ...
user avatar
0 votes
1 answer
177 views

How can scammer actually reply from a spoofed email address?

I (mostly) understand how a scammer can send an email from a spoofed account, all you need is an unsecured SMTP server. But how is it possible, for a scammer to RESPOND and maintain an email ...
user avatar
1 vote
1 answer
120 views

Questionable email from discord [duplicate]

I got a gmail from discord saying a new account had been registered and prompting me to click a verification link. Weirdly, I never made that account, and I already had a discord account under my ...
user avatar
0 votes
1 answer
106 views

Do email providers somehow validate/control "Send email as: " feature?

I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail's &...
user avatar
  • 101
0 votes
0 answers
375 views

Spoofed email? "X-Source-Sender" and "Received" headers look dodgy

I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me. Checking the headers the following looks normal: Return-Path Received & ...
user avatar
  • 279
0 votes
0 answers
90 views

I received a phishing/spam email from Google Delivery Subsystem about an email I never sent. How? [duplicate]

Screenshot: The text covered with red is exactly my email address except the end is @google.com instead of @gmail.com. The suspicious link "Unsubscribe_click_here" is: mailto:cr@burlondesti....
user avatar
0 votes
0 answers
101 views

Does SPF protect against spammers who control the initial MTA?

I understand that for most users, the Envelope-from address is the most difficult part of an email to spoof because (I assume) it is checked by the receiving MTA i.e. if you attempt to spoof the "...
user avatar
1 vote
2 answers
100 views

I have a custom domain for email. Do I need to configure DNS to prevent outgoing text messages with an address from my domain? [duplicate]

I own a custom domain that I use for e-mail. The mail server is configured with a catch-all that redirects messages to any user to my inbox. For the first time this afternoon, I received a benign &...
user avatar
  • 217
0 votes
0 answers
30 views

How to track anonymous email sender (alternatives to IP tracking) [duplicate]

Are there any ways to get information on who is sending certain emails from an anonymous email address? Besides the obvious IP solution, would there be any alternative such as embedding some kind of ...
user avatar
0 votes
1 answer
81 views

Spoofed DNS-Address in Spam mail header

There is a recent rise in Spam mails sent from seemingly legit german email-addresses according to the mail headers: Received: from mx1.aok.de ([91.199.166.49]) But when I nslookup mx1.aok.de, I get ...
user avatar
1 vote
1 answer
107 views

php / email / iis

in a certain page I have a newsletter subscription form, where the user enters his e-mail address and then through PHP an authenticated e-mail is sent to myself with the user's information (e-mail ...
user avatar
1 vote
1 answer
109 views

Why can't mail clients verify an email was sent from the user and server it claims to be from?

Background When I explain to my clients the security issues around email spoofing, I often explain that emails are like regular mail. Anyone can write Jon Doe on the return address, but that doesn't ...
user avatar
  • 2,266
0 votes
1 answer
4k views

Amazon gift card phishing/spam -- what's the point?

I recently received an email message with the subject "San Diego Site Leadership and Management Team sent you an Amazon Gift Card!", sent to my work address, apparently from "Amazon.com ...
user avatar
1 vote
1 answer
262 views

How could the content of an e-mail get leaked?

My Mother received an e-mail, from some unknown mail adress. The content of the mail, was: "Hello you should look at this: ... " After this there was an old email correspondence with her ...
user avatar
  • 13
-1 votes
1 answer
674 views

Where was this email sent from?

I have done the message header lookup but the problem is that the 1st result for the from field is blank, so I would like to know can someone with a bit more experience then the basic knowledge of ...
user avatar
0 votes
3 answers
156 views

Let user send an email to register to prevent outgoing mail abuse

Problem Consider a standard sign-up form (user enters an email address, we send a confirmation link). Even limiting that form per IP (or even globally per hour), I'm concerned about abuse: Our real-...
user avatar
1 vote
3 answers
160 views

Anonymized posting mechanism for members-only-post mailing lists

Suppose you are administering a mailing list where only members/subscribers can post; but you want those members to be able to occasionally post some content to the list anonymously. (*) Now, in an ...
user avatar
  • 409
19 votes
2 answers
4k views

I received an "Undelivered Mail", is my email address used maliciously?

I received an "Undelivered Mail Returned to Sender" email, which is quite suspicious. The message is displayed in Thunderbird like this: From: someRandomStuff my.name@mail.provider Date: 24....
user avatar
  • 561
2 votes
1 answer
134 views

Protecting against spoofed email in alias/phrase field

We have fully configured SPF, DKIM and DMARC policies (100% reject) for our email domain (e.g. spoofed.com), which is managed by gmail, but we have recently started seeing spear phishing emails with ...
user avatar
  • 123
24 votes
3 answers
7k views

Reply to potentially spoofed email

A colleague recieved an unsolicited email along the lines below: Dear Ms. Smith please click on the following link to recieve Document X regarding Project Y. Yours, Eve Nobody eve.nobody@company.com ...
user avatar
  • 561
0 votes
1 answer
778 views

Register an @yahoo.de email? [closed]

Years ago I created an account and put my reset email as example@yahoo.de by mistake, it should have been @yahoo.com. Recently, I tried to access my old account but could not remember the password. ...
user avatar
1 vote
2 answers
150 views

What does it mean to get an email from someone with a different actual sender?

I got a strange email and I just want to confirm my suspicions. For background, I have my own email server which I set up using iRedMail on a VPS. I have an acquaintance who most likely has me on ...
user avatar
1 vote
3 answers
261 views

What can I do to get rid of spam emails that come from different, randomized email addresses?

Here's an example of the address they're coming from: I'm familiar with filtering settings, but how can I filter something that's different each time?
user avatar
2 votes
2 answers
198 views

Email sender spoofing check from receiver

I understand there are techniques to prevent someone from spoofing your domain in emails. Is there any guarantee or check that the receiver can do to ensure the sender is authentic? Gmail shows TLS ...
user avatar
1 vote
1 answer
107 views

Emails with links offering job

I am a designer. I have received several emails offering jobs. There is a link. I never click to links in emails. I look at the sender address and look at google to see if it could exist a real firm ...
user avatar
  • 1,153
0 votes
0 answers
129 views

How do I run through the DKIM authentication?

I am currently reading on DKIM authentication for email and I would like to manually try to run through it (to facilitate my understanding of DKIM), but I would like to verify if it is possible to do ...
user avatar
  • 11
1 vote
2 answers
9k views

Microsoft account security alert - Is this legit? [closed]

I've just received two emails in a row stating that "We detected something unusual about a recent sign-in for the Microsoft account" and "someone else might have accessed the Microsoft account..." (...
user avatar
1 vote
1 answer
170 views

Postfix pickup daemon "from:" verification

I was surprised to notice that sending email from a local server account allows any user to send a message with: From: whatever@whateverdomain This is a security issue, because it allows identity ...
user avatar
0 votes
0 answers
70 views

Saved email attachment not reflecting the actual sender of the email but the email of the person who received the email attachment as sender

I have come across certain scenarios which confuses me on how it is possible to manipulate email headers. The person who received an email(A) from person (B), forwarded me (C) the email as Original ...
user avatar
8 votes
1 answer
4k views

Enforcing DMARC policy (reject) on an Office 365 tenant

The domain & tenant has SPF and DKIM properly configured and DMARC policy set to p=reject. Still, emails spoofed with the domain in the From header aren't rejected, but appear in the Junk Email ...
user avatar
0 votes
2 answers
187 views

Phishing emails - What do I look for?

I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one? There are some things I know to look for already but I want to get moer ...
user avatar
0 votes
0 answers
42 views

Do we need SPF when we have DKIM? [duplicate]

I always thought that to authenticate email we needed both SPF and DKIM (and DMARC). But email is confusing and recently I found myself asking why we can't do with just SPF or DKIM. I then discovered ...
user avatar
  • 179
1 vote
1 answer
1k views

Possible Scam - reply address appears to be yours [closed]

Have received the following email which I believe to be a scam Internet Crime Complaint Center (IC3) In Partnership with: Swiss National Fraud Relief Center (NFRC) Case/Reference ID: IE3033900045 We ...
user avatar
0 votes
1 answer
107 views

emails were send from my own email address [closed]

A friend of mine has just received an email from my exactly own email adrress. What could this be and how do I stop it?
user avatar

1
2 3 4 5