Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [spam]

Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

3
votes
1answer
84 views

How is typing “name at example dot com” safer than “name@example.com”?

Say I want to type my email address in a forum...say, hank.chief123@gmail.com. Obviously, that's a bad idea since spam bots will likely find it. So, I would just "cleverly" type hank dot chief one two ...
2
votes
4answers
91 views

How to stop people from spamming the account creation url on my website [duplicate]

let's say I have a website with an account creation form. How can I stop people from writing a program that automatically submits the form thousands of times, which would fill up my database with junk ...
0
votes
1answer
105 views

Strange spam to my IG and email with my secret information

I got strange email recently telling that i have an affair and it listed my visited cities with my boyfriend last year. Also threaten to share my relationship with others. Something that bother me ...
1
vote
0answers
55 views

Reduce form spam without external dependencies or false positives

I'm working on a Java Spring with a team and have been facing form spam issues. We are seeing a large number of requests that use generated & falsified information (ie everyone's names are generic,...
1
vote
1answer
86 views

Prevent spammers from faking emails being sent from you to someone else or yourself?

I received the following email with the headers below. How are the spammers exploiting this method of tricking users that their account is hacked? How can one prevent spammers from doing this with ...
0
votes
0answers
75 views

Friend got a spam mail with my name and location, after a google drive invite

Right after I sent an invite to a shared drive folder to said friends email adress, she received a spam mail featuring my name (the name I got on google account and my location (city). How does this ...
1
vote
2answers
76 views

How can I use Message-ID in header to screen (filter) Emails?

Recently started receiving torrent of spam emails immediately after ISP (Charter-Spectrum) switched to an upgraded Email system. Five of my ISP email addresses getting the same spam every day. Some ...
0
votes
1answer
102 views

Customer Email Hacked, Subject line “smtp-mail.outlook.com,587,<email>,<password>” [closed]

We've had someone break into our email mailbox - They have sent out spam to in an automated fashion. The only clues is that there is a sent email a few days before with a subject line of "smtp-mail....
3
votes
3answers
566 views

What is the point of spam mails containing nothing but random letters?

I recently started replying to spam (as proposed by James Veitch), logged into an old email account and noticed (much to my delight!) a couple of hundred spam mails. Oddly enough I stumbled upon an ...
0
votes
1answer
49 views

Gmail Contact List Safety

How can I know that my Gmail is spoofed or sending spams to other people I sent email to them before? I don't have clear signs of that especially my contact list is empty but I'm afraid this may ...
0
votes
1answer
62 views

Simple Mail Delivery Protocol (SMDP), where is it today? what do you think of it?

So I'm doing a research study on Simple Mail Delivery Protocol (SMDP) for those of you who don't know what it is, it's a new protocol for Email delivery that promises complete anti-spam filtering. ...
0
votes
2answers
116 views

Can just receiving or opening a spam email put my computer or emails data at risk?

Sometimes you receive some emails which are mostly (and correctly) categorized as spam email by your email provider and you are almost sure that they are in fact spams. However, you are curious to ...
1
vote
2answers
132 views

Why are email clients prevented from seeing the envelope?

Being able to compare the envelope values against the header field values is potentially useful for detecting fraudulent (e.g. spoofed) mail. However, email servers, when receiving mail over SMTP, ...
0
votes
1answer
54 views

Should I reply to e-mails that reached me by mistake (very low chance of being regular spam)?

My name is fairly usual where I live and my e-mail address is {first_name}.{last_name}@very_large_provider.com, so from time to time I receive what is very probably legitimate e-mails sent to me by ...
1
vote
1answer
89 views

Malicious Google Drive Links

Curious about a new form of spam I've noticed in my inbox. Someone seems to be using my email address to fill-out forms on sites, so that I receive the bounce back message. In this message there is a ...
0
votes
1answer
176 views

Peculiar Japanese DNS arrangement

I have been receiving spam emails on my many mails but specifically gmail from a .jp domain. I deleted the emails but today I decided to actually read one of those emails to see if they can send me my ...
1
vote
3answers
400 views

Is this a phishing email?

I've just received the strangest email: I don't understand why anyone would send an email like this. It doesn't look to be asking for credentials of any kind. Is this a scam which is designed for ...
0
votes
1answer
98 views

How are USSD messages used and who could send them?

Some illegal ads started showing up on my Android phone as message boxes recently. They are said to be "USSD messages" in an app recording notifications (com.evanhe.nhfree). There is a Wikipedia ...
2
votes
1answer
2k views

Is Mailbait still a threat?

Is Mailbait (or similar services) still a threat, was it ever a threat, and if so how can it be mitigated? Mailbait is that service that promises to fill up your email inbox by sending you a huge ...
2
votes
1answer
113 views

Why do they use misspelled names in spams?

I sometimes open my spam folder. Recently I discovered a spam, the sender name was somebody I know, but one letter in her name was changed from 'i' to 't'. Today I received a spam with this name again,...
4
votes
1answer
143 views

Spam link returns empty redirect to google.com - am I missing something?

In this question someone received what was clearly a spam link. Sometimes I'm curious enough to take a peek, which I usually do with curl or other command line tools (less risk of drive-by malware, ...
0
votes
1answer
81 views

Spam identification

We have a spamfilter running that does a very good job at tackling common spammer issues. From what it catches, I'm assuming it blocks mails based on a few things: SPF checks Certain attachment ...
15
votes
2answers
4k views

How did this email list a fake recipient? [duplicate]

My friend recently received a suspicious email for an iTunes gift card purchase from "Apple Store" with a header that displayed a fake "To:" address for orders@apple-store.com. Unsurprisingly, this ...
3
votes
1answer
70 views

Call and Unsolicited One Time Passwords

Context: I got a call from a US phone number from a guy claiming he was from a dark web website (something .onion, I can't remember) and he was calling regarding my "fake passport application". I ...
4
votes
1answer
391 views

Protonmail cannot read my mail — but can detect if it is spam?

All is in the title really. How can protonmail detect spam if if cannot read mail content? It could be based on metadata. But then spam detection would probably not be very good. And what metadata ...
2
votes
2answers
69 views

Can ISPs be helpful in preventing spam?

I have received a number of phishing emails from various domains. I would like to prevent the domain from sending emails so that other people also don't get taken advantage of. I have not been ...
5
votes
2answers
245 views

“Security through obscurity” is bad for security systems but good for spam detection. Why?

I was reading a request on meta Stack Exchange: A request for an informative popup before possible serial voting. It received two seemingly well-informed answers from well-informed users, and I've ...
0
votes
0answers
2k views

How to handle a Google security warning to a non Google email address?

I just received two emails from Google. The first one tells me that my password was changed, the second one tells me, that a windows device logged in to my account. All the links in the emails point ...
1
vote
1answer
70 views

What are solutions to combat spam bots beyond captcha? [duplicate]

I used to believe that captcha-like solutions are the websites' primary way to combat spambots. I used to believe that any site that doesn't implement such solution is likely to be flooded by shady ...
1
vote
2answers
127 views

How can I protect the signup form in my website? Is special spam prevention needed?

I'm struggling to write a secure sign-up form for my website. (My site is some kind of an image gallery. I have knowledge in html, javascript, msql and php) I know there is a tactic to secure login ...
139
votes
2answers
27k views

Received a set of SMS/MMS containing 2 photos, a voice message, and a text “I need help” with Google Maps link from a known contact. Is it spam?

My girlfriend (let's call her Jane) just got a set of SMS or MMS messages coming from a friend of her (let's call her Hellen). These messages contain: Two photos of Hellen A voice message A text that ...
0
votes
1answer
120 views

How to tell ordinary spam from some abusing my mail?

From time to time I glance through my spam folder to gauge how the filters are working, and if they're catching any "ham." Most of the spam is really obvious, but I'm getting a few which made me ...
2
votes
0answers
101 views

“Reply T to unsubscribe” in SMS spam messages, ignore or reply “T”? [duplicate]

I'm in China and I occasionally get spam SMS messages. Most of them ends in a sentence that says this or something else alike. Reply T to unsubscribe. (T is the leading letter in Chinese word "...
0
votes
0answers
75 views

Are these HTTP_REFERER from a bot-net? Are they harmful? How should I handle them?

We are getting a huge amount of requests that I can not explain. These request all go to admin.OURWEBSITE.com/api/analyze/, but we do not have an admin subdomain and we do not have an api/analyze ...
0
votes
2answers
156 views

Investigate email address leak source

I receive SPAM to my private Gmail email address which have never been publicly available and is not googlable at all. How could I receive SPAM on it? I saw this question, but in my case BCC is not ...
0
votes
1answer
191 views

DMARC and SPF are setup for my non-www domain but doesn't work for www

My website is up and running on www.example.com and I am sending automated emails from my email address support@example.com. DMARC and SPF seem to setup accordingly: _dmarc : v=DMARC1;p=none;pct=100;...
1
vote
2answers
315 views

Spoofed digitally signed email

So I received an email from "paypal.com" yesterday (and looks like most people did too(1)) and I've verified the ascii letters are indeed what they appear as (No capital I instead of L in paypal.com ...
1
vote
3answers
91 views

Why isn't email filtered when using contact form

When I send a non-gmail email to someone (company email) for the first time, there's a chance it will get filtered into the ether, never to be heard from again. However, if I use their website's ...
1
vote
2answers
95 views

Blocking Business Email Compromise (BEC) emails

I am recieving phishing emails like the one depicted below, with the sender being a legit member of our organization. How can I block this kind of email? What should be done? Is malwarebytes capable ...
0
votes
1answer
69 views

Avoiding redirects

I'm working on a site where users can input URLs. The URLs should point to sites where you can buy an item (for birthday/special event/...) It also sends out mails to e-mail addresses the user ...
1
vote
1answer
242 views

E-mail forensics for dummies

Long story short, I am getting Dutch language spam from a group; it has been going on for years, and they send several of them daily. They got my e-mail when I lived in the Netherlands and imagine ...
57
votes
4answers
15k views

How did I get this email without a “To” field?

I got an empty email in my language (Hebrew) with only a title that can be translated to I am still waiting for your feedback (original: עדיין מחכה למשוב שלך) Since my gmail handle multiple accounts (...
1
vote
3answers
298 views

Is this PayPal e-mail a scam? [closed]

I just received this e-mail (where the blacked out parts are my e-mail address): To me it looks like a scam for the following reasons: First of all, I do not have a Paypal account. It is written in ...
0
votes
1answer
31 views

Do snowshoe and hailstorm spammers use auto-generated domain names? [closed]

My question is about snowshoe and hailstorm spam emails. Do snowshoe and hailstorm spammers use auto-generated domain names?
5
votes
3answers
1k views

Why does Outlook not block spam sent by employees?

Our organization uses Outlook as email service and hence have our organization email domain. If someone from the organization sends a spam or phishing email to someone else in our organization, its ...
0
votes
1answer
31 views

Are emails from the Necurs bot net DKIM and/or SPF signed?

As the questions title already asks: Are emails sent by Necurs DKIM and/or SPF signed? Or are they unsigned and simply spoofed?
3
votes
1answer
113 views

Retail shop got my email address and sent me ads based on my activities [closed]

I visited Germany this weekend and I didn't provide my email address to anyone or to any website while I was there, neither to any service related to my visit there. I never connected to public Wi-Fi ...
0
votes
1answer
80 views

How to prevent spam message sending to my Android web services [duplicate]

I have an Android app that allow user to post comment. However this mean spammer are able to reverse engineer the services API and create a bot to post spam message automatically. My research ...
0
votes
1answer
4k views

Unknown proxy blocking connections over port 8080

For the past two weeks, I wasn't able to use some of the software installed on my computer (e.g. Visual Studio). There is a process that is communicating with IP address 185.82.212.95 over port 8080. ...
3
votes
1answer
320 views

Why set up DMARC for SPF if it's already set up for DKIM?

I have SPF and DKIM. I'm planning on adding DMARC to tell receivers to expect SPF and/or DKIM. I've read that it's best to set DMARC up with both SPF and DKIM, but I don't understand exactly when ...