Questions tagged [email-spoofing]

Email spoofing refers to the process of sending fraudulent emails that appears to be from someone that it is not.

Filter by
Sorted by
Tagged with
6 votes
1 answer
5k views

Email Spoofed. Explain?

So, I think my email id might have gotten hacked. Can some one offer their comments and suggestions on this email ? It seems this email went from my mail id to my friend's email id. The subject is ...
  • 563
5 votes
1 answer
663 views

De-obfuscation of malicious javascript in spoofed eMail

Two days ago, I received a suspicious email. The sender was a mailing list, that i am a member of, but it originated from a webhosters subdomain (applegate.dreamhost.com). The content was roughly ...
3 votes
2 answers
1k views

DMARC policy result when exactly one of SPF and DKIM fails and exactly one succeeds

E-mail forwarding can break SPF, but it should not break DKIM. I want to make a DMARC policy that will evaluate to "pass" when either DKIM or SPF passes, and "fail" when neither ...
  • 415
2 votes
3 answers
6k views

Can I spoof email?

I mean, if I would have my own SMTP (also, is it just about money or are there some limitations to running my own SMTP server?) and would just completely made up the mail (headers, spoofed IPs and ...
13 votes
3 answers
49k views

How to Stop Email Spoofing [closed]

Apart from SPF, what else can be done to stop hackers from spoofing your company's email addresses?
  • 1,958
4 votes
3 answers
13k views

How can I prevent my E-mail address from being used as the sender for fraudulent/scam messages?

Recently, me and at least one other person I know received an obvious scam E-mail that starts off something like this: We considered your resume to be very attractive and we thought the vacant ...
4 votes
3 answers
12k views

Security of SPF vs SPF and DKIM in email

I am looking for an email provider that I will use with custom domain, one provider is cheaper but has only SPF while the other is more expensive but uses both SPF and DKIM and I'm not sure if paying ...
1 vote
1 answer
276 views

How could the content of an e-mail get leaked?

My Mother received an e-mail, from some unknown mail adress. The content of the mail, was: "Hello you should look at this: ... " After this there was an old email correspondence with her ...
  • 13
124 votes
5 answers
19k views

Why do phishing e-mails use faked e-mail addresses instead of the real one?

I read that you can write anything into the From: field of an e-mail. If that is true, then why are phishing e-mails trying to trick me with look-a-like addresses like service@amaz0n.com instead of ...
  • 1,685
37 votes
2 answers
20k views

How did this paypal spoof email pass SPF, DKIM and DMARC

This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC ...
  • 401
18 votes
3 answers
6k views

Somebody is spoofing my email to send spam messages, and I have no idea how to block

Someone is using my Google Apps Email ID to send spam messages and I've received 2000+ undelivered and autorespond emails. I have no idea how to block this because the spammer is also using my email ...
8 votes
2 answers
2k views

How did a phishing email pass SPF, DKIM and DMARC?

A friend received a spoofed email (from Bank of America using an uber.com address) which was correctly identified as 'spam' by Gmail. However, looking at the raw message it seems to have passed SPF, ...
  • 593
5 votes
1 answer
3k views

Keep receiving delivery failures for emails im not sending

I have my own domain, and a few email addresses on it, including a catch all address, with Google Apps. Recently, my catchall address has been receiving "delivery failure" emails from many different ...
  • 209
4 votes
4 answers
8k views

Is it easier to eavesdrop on Ethernet connection rather than WiFi?

I heard someone say that ethernet connection is vulerable if someone can connect to your LAN, and that the traffic isn't encrypted in the way it might be if you're using WPA wifi encryption. Is this ...
  • 129
4 votes
1 answer
706 views

Received an email from a Bulgarian address trying to extort money

As the title says, I received an email from some Bulgarian email address saying that the sender has compromised my browser and thereby obtained control over my camera as well as gathering data on all ...
2 votes
2 answers
233 views

Email sender spoofing check from receiver

I understand there are techniques to prevent someone from spoofing your domain in emails. Is there any guarantee or check that the receiver can do to ensure the sender is authentic? Gmail shows TLS ...
58 votes
7 answers
26k views

Email received regarding Security flaw in website

I received an email to techsupport@websitename.com (pretty generic email) saying that there was a security flaw in my website etc. etc My initial reaction was that this was a scam. (How/why did they ...
  • 695
8 votes
1 answer
4k views

Enforcing DMARC policy (reject) on an Office 365 tenant

The domain & tenant has SPF and DKIM properly configured and DMARC policy set to p=reject. Still, emails spoofed with the domain in the From header aren't rejected, but appear in the Junk Email ...
  • 16.2k
6 votes
1 answer
724 views

Can DMARC's SPF alignment be spoofed?

IP addresses can be spoofed. The Envelope-From and Header-From addresses can be spoofed as well. But is it possible to spoof all three at the same time to send a forged email that passes both SPF and ...
6 votes
2 answers
713 views

Can SPF be bypassed by using a shared email server?

As I understand it, SPF works by listing permitted SMTP server domains in the TXT DNS record of the domain you own. So if I own example.com and wish to permit a 3rd-party SMTP server at smtpexample....
  • 311
6 votes
2 answers
1k views

Tracking click-through for organization-wide phishing email test [closed]

My organization wants to send out a test phishing email to all employees after a week of security awareness. I plan on drafting a basic HTML page and including a misspelled link to it in an email ...
  • 191
5 votes
2 answers
3k views

How can I prevent email spoofing from my domain?

I recently registered a domain name, and set up an email account tied to it with Zoho mail. I'm concerned about making sure all emails from this domain are signed to prevent spoofing. I've enabled ...
  • 156
4 votes
2 answers
217 views

Email verification by sending mail instead of receiving

I have an app whose main purpose is to help people track emails they send. In most user onboarding, The user is sent a secret URL via email. They validate by clicking a link to return the secret. ...
4 votes
2 answers
1k views

How can an email from a Yahoo address be sent through Yahoo without authentication?

I received this bounced email, yet I have a password with 105 bits entropy, my sign in history only shows local sign ins, I do not have any linked accounts nor apps, and I have not been to ...
  • 1,668
2 votes
2 answers
682 views

Why can't my email server automatically identify spoofed addresses?

I get this question from business stakeholders a lot, and I have tried to solve this problem on my own. I have a potential approach, but I want to challenge my assumptions. In my mind, it should be ...
  • 124k
2 votes
1 answer
4k views

How do botnets deliver spam? [closed]

I can't seem to find the answer to this question. I read that botnet bots are used as email relays (they have smtp servers installed). Wikipedia on Open mail relay: "(...)Internet initiatives to ...
1 vote
1 answer
859 views

How spf records prevents the server from attackers?

I have very little knowledge about spf records. I have Googled a little and found that spf records are used to prevent email spoofing. But I dont really understood how this works. I would like to know ...
1 vote
1 answer
1k views

How to spoof a MIME-level email address

As a sysadmin, I need to send spoofed emails to ensure that the spoofing protection (DMARC, etc) is working. I think Emkei's Fake Mailer can be used to send emails spoofed at the SMTP / 5321.MailFrom ...
1 vote
2 answers
289 views

Unusual phishing email

Usually with these of types of scams there's a phishing link inside the email. However, there are no clickable links in this email and appleid.apple.com is an official Apple site. In between the ...
  • 113
1 vote
0 answers
627 views

Receiving unknown bounced mails

I am getting some mails from Mailer-Daemon@s09.webhost1.ru recently which contains the following body polimer.****@list.ru (Generated from tm@polimer**.com) SMTP error from remote mail server ...
0 votes
1 answer
2k views

Clicked link on fake email which appeared to be from friend [duplicate]

I receieved an e-mail which at first glance appeared to be from a friend, I clicked on the link provided without thinking as we would often exchance links to sites. The link went nowhere i.e page not ...
0 votes
1 answer
116 views

Do email providers somehow validate/control "Send email as: " feature?

I have a domain for a website that I'm going to deploy soon. I've registered a gmail account, and let's say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail's &...
  • 101
0 votes
1 answer
725 views

I clicked a link in an email message. What should I do now?

I got a message that looked like an ad from Microsoft. At the end, there was a message saying "You can simply WIPE Out your email from Mailing List click here". I clicked. I got to a page this ...
0 votes
2 answers
200 views

Phishing emails - What do I look for?

I want to be able to spot a phishing email. What are the things to check when investigating and doing forensics on one? There are some things I know to look for already but I want to get moer ...
0 votes
0 answers
43 views

Do we need SPF when we have DKIM? [duplicate]

I always thought that to authenticate email we needed both SPF and DKIM (and DMARC). But email is confusing and recently I found myself asking why we can't do with just SPF or DKIM. I then discovered ...
  • 179
-1 votes
1 answer
818 views

Spam/Phishing detection when there is no MX record

While SPF/DKIM/DMARC are standard, foundational tools to help protect an email-sending domain from spoofing, what about domains that do not send emails? How do spam or phishing filters treat emails ...
  • 124k