Questions tagged [spam]

Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

Filter by
Sorted by
Tagged with
0 votes
2 answers
180 views

What's the risk of interacting with a social engineer?

I received a WhatsApp message. I never registed with any recruitment job portal, or even speak Arabic at all What are the dangers in myself trying to find out what happened (did they send the same ...
George Ntoulos's user avatar
0 votes
2 answers
123 views

Why spamassasin is doing dns lookup?

I have a server which have configured Amavis and Spamassasin (in default state only). I recently noticed log lines that probably indicate DNS query failure, below is an excerpt: Nov 21 11:15:40 ...
SUNITA GUPTA's user avatar
1 vote
0 answers
93 views

Newsletter Spam Attack - Somehow by not directly attacking?

Our website(shopify website) has been getting a bot attack on our newsletter subscription form. Not sure if emails are real or not but there is some from gmail and hotmail etc or some from weird ...
tarik's user avatar
  • 11
0 votes
0 answers
21 views

How to determine if email is from from gaia.bounces.google.com or just forwarded from there? [duplicate]

Shown below are the "from and to" portions of the message. It looks like it is just forwarded by "gaia.bounces.google.com". The message itself (and I have quite a few of them) ...
Alexander C. Landsburg's user avatar
0 votes
2 answers
81 views

Spam e-mails near events, geographically driven?

At the beginning of this month, I took an appointment to get the passport, the date was set for the 24 of August. The 23 of August I received a spam email mimicking the government office which among ...
Pleasant94's user avatar
0 votes
0 answers
38 views

I clicked on a SMS spam link. Am I safe? [duplicate]

I received an SMS from an unknown number with a link. Having just ordered stuff from AliExpress bit earlier so, thinking it was related to that, I clicked without doing due diligence. My bad. I went ...
bracco23's user avatar
  • 123
1 vote
0 answers
220 views

How spammers are abusing 2fa SMS in web apps?

My webapp has an SMS 2FA option. When someone enrolls, it sends an SMS to the number specified by the user with hard coded text that contains a token that the user needs to then enter in the web app ...
Michael's user avatar
  • 213
2 votes
0 answers
617 views

Automated bot/spammer bypassing google recaptcha v2

I have a Laravel registration form with the invisible google recaptcha v2 installed with the security set to highest level within the recaptcha admin console - code as follows: <div> <div ...
adam78's user avatar
  • 121
2 votes
0 answers
104 views

Is there a safe way to follow a suspicious link? [duplicate]

When I get suspicious emails, I pretty much always just report it as spam, delete forever, and then be done with them. Low quality spam is pretty easy to identify, but sometimes they are on the ...
David K's user avatar
  • 1,337
28 votes
8 answers
9k views

Is email scraping still a thing for spammers

I've run a website for barely three months now and put my emails on there. I also run a catch-all address on this domain. Since my website is online, I haven't received a single spam email on the ...
dinamica's user avatar
  • 381
1 vote
3 answers
2k views

How to block a POST curl request

My WordPress website received a couple of fake subscriptions to the newsletter. I identified the logs, most of them with the same form as below: xx.xx.xx.xx example.com - [04/Feb/2023:06:01:42 +0100] &...
made leod's user avatar
0 votes
0 answers
150 views

How to stop spammers registration?

I have an app that sends emails to customers, and I've noticed a large number of spammers signing up to send spam to users, taking advantage of the tool for sending notifications to customers by email....
Tom's user avatar
  • 174
1 vote
0 answers
25 views

Receive more spam emails [duplicate]

Out of curiosity I want my email address to receive as much spam as possible. For this, I have already set up a virtual machine, with a Postfix that has a catch-all user, so I receive every email to ...
happycoala's user avatar
3 votes
1 answer
235 views

Why does M365 keep accepting phishing emails that Gmail rejects?

At my work email, which is handled by MS Office 365 Outlook, I keep getting phishing emails, typically 3 times a week, usually with some attachment "your company's monthly financial report" ...
Sebastian's user avatar
0 votes
0 answers
26 views

Spam mail from own mailserver, but there is no outgoing mail in postfix log? [duplicate]

Today I received a phishing mail from my own (valid) sender address ([email protected]). I checked the e-mail header and see the mail was received by my valid mailserver. Received: from mail.example....
nils50122's user avatar
2 votes
1 answer
304 views

Amazon Cloudfront trackers, do they mean anything in an investigation?

One way I use to find domains owned by the same people is through tracking codes (Google Analytics and such). Recently I've come across a domain with this tracker code: d1lxhc4jvstzrp When I lookup ...
CBot's user avatar
  • 33
0 votes
0 answers
16 views

What should I do when I received spam emails? [duplicate]

I got these emails from a spammer to my inbox, I am not sure if these are phishing attempt. I can't tell. Click on one of them, I see this I checked the codes behind that mail, I see smtp.mailfrom=...
code-8's user avatar
  • 125
0 votes
0 answers
185 views

Why does the majority of email spam even exist? [duplicate]

This is a serious question and I have thought about it a lot. Not a newbie question. I am unsatisfied with the common answers they try to sell things they try to scam you they try to do phishing they ...
Gunther Schadow's user avatar
2 votes
0 answers
1k views

DKIM/SPF What does it mean when policy_evaluated fails but auth_results passes?

I am trying to get the DKIM and SPF settings correct for a client who uses both GSuite and WordPress to send her emails. I added this dmarc: v=DMARC1; p=none; rua=mailto:l***@******ney.com; fo=1; ...
OM4U's user avatar
  • 21
1 vote
0 answers
80 views

What's the purpose of this spam that only sends a link to a Google search query? [duplicate]

I received the following email today which got caught by my spam filters. <My username> https://www.google.com/search?q= <my email address> Rock_jim Clearly this is spam, but I have no ...
David K's user avatar
  • 1,337
0 votes
2 answers
258 views

How can I receive a (spam) email from an unknown email address?

When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from ...
quarague's user avatar
  • 183
0 votes
1 answer
244 views

Spam investigation and email reputation check

We are investigating emails which were marked as spam by Cloudmark's service Cloudmark Authority Engine (CMAE). We want to find out if they are false positives. When an user ask to investigate why a ...
xleccf's user avatar
  • 3
2 votes
2 answers
256 views

What kind of loophole are spam messages, containing just a few words and no links, trying to exploit?

I recently built a website using Django. It has a contact form and some minimal pages about me and my work portfolio. I have been getting a few spam messages a day and their content intrigues me (...
Prateek Verma's user avatar
1 vote
0 answers
25 views

Email supposedly from the future mentioning fairly recent password [duplicate]

Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that ...
ZarrTax's user avatar
  • 11
0 votes
0 answers
145 views

Spam popup using Google news

The other day I was using Google News, clicked a Politico link, and got a popup saying Google had selected me to get a free iPad if I answered some survey questions. I didn't fall for it but I had ...
Steve's user avatar
  • 101
1 vote
0 answers
96 views

Is there a standard for fencing email domains to specific use cases?

To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases. If it exists, I would presume that this might limit phishing attacks. Think of my question ...
Caleb Faruki's user avatar
-1 votes
1 answer
160 views

Automated malicious links delivered with e-mail (Reddit, LinkedIn, Package) [closed]

Recently my organisation has been flooded with phishing e-mails with different approaches: pretending to be Reddit or LinkedIn information about a new follower or package delivery status/problems, etc....
deevee's user avatar
  • 383
37 votes
2 answers
21k views

How did this paypal spoof email pass SPF, DKIM and DMARC

This mail that got through has me stumped. It appeared to me as being from PayPal <[email protected]> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC ...
ianw's user avatar
  • 401
0 votes
2 answers
1k views

Why spam a newsletter signup form?

I run a newsletter for my small business. It has been running for over a decade. Last week, I found out that one or several spambots have been signing up to it for the last 2 years (to the tune of ...
questionAboutSpambots's user avatar
1 vote
1 answer
134 views

SPF records and spoofing

Lets say we have this SPF record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all` And this record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all What ...
user269161's user avatar
0 votes
0 answers
401 views

Unknown Cause of SPF Fail

I have the following SPF record: v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all Although I have included _spf.mailspamprotection.com in my SPF record, ...
Reza's user avatar
  • 101
24 votes
3 answers
4k views

Browser is accepting italic/bold Unicode as part of SPAM email's URL

This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
asker13's user avatar
  • 351
0 votes
0 answers
275 views

What is the point of client-side captcha verification?

I have seen dozens of client-side captcha verification on github and considering it is just a matter of time to make it totally useless, what are the purposes of these? Are there any justifications ...
Le Chat Noir's user avatar
2 votes
0 answers
405 views

Site displaying Internal Server Error 500 just as suspicious comments flagged as spam [closed]

In my 13 years of Wordpress, I've never seen anything like this. About an hour ago I was alerted by one of my users that the website was displaying an Internal Server Error 500 message on every page. ...
robertvs's user avatar
6 votes
1 answer
669 views

Does disabling "Always display external images" in Gmail remove the risk of spam senders seeing that I opened the mail?

When a mail is opened that includes special images, fonts or media, it is loaded from the server of the sender. This is bad because spammers can detect active mail accounts that will get more spam. ...
Flying Thunder's user avatar
0 votes
2 answers
628 views

My postfix server is getting DOSed, what can I do?

Port 25 is open and I'm getting thousands of emails. How can I make it stop?
evening's user avatar
  • 461
0 votes
1 answer
118 views

responding to comment spam

My website has several forms which are periodically spammed. When a submission gets flagged as spam, and is internally rerouted to where spam should go, what is the appropriate response: show an ...
appeal sigma's user avatar
0 votes
1 answer
219 views

Spam mail leading to gibberish site

One of our users regularly receives spam mails containing a shortened link. I got curious, so I decided to investigate one of those links and it took me to a plain text website with gibberish, as if ...
lauraaaaa's user avatar
  • 173
28 votes
6 answers
8k views

How can I get more spam for my honeypot?

Spam is everywhere and everyone gets it (especially professors), but I noticed that my personal email does not get much spam. How can I get more? What are the most common ways of getting spam? Not ...
Marcus's user avatar
  • 1,155
0 votes
0 answers
109 views

Is there anything I can do as an end user to deal with greeting card spam sent to my personal email adress?

Lately I've been getting a lot (well, 2-3 mails per day) of greeting card spam (I think it's called), aka spammers signing my personal email address up for contact forms and accounts with random sites,...
Nzall's user avatar
  • 7,433
0 votes
0 answers
1k views

Spoofed email? "X-Source-Sender" and "Received" headers look dodgy

I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me. Checking the headers the following looks normal: Return-Path Received & ...
Brett's user avatar
  • 279
1 vote
0 answers
133 views

Email Takeover Scam? [closed]

I've been receiving a lot of email lately intended for "Daniel L...", a person with the same last name and same first initial as me. It appears this person has requested information from ...
Dave L.'s user avatar
  • 193
1 vote
0 answers
407 views

Cmd line tool to scan an eml file against spam/phishing rules [closed]

For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
Robert's user avatar
  • 11
2 votes
1 answer
235 views

Is it possible to "hack" an email account so that the emails always go to Spam?

I have a friend who is something of a public figure within a small sphere. She has been an object of negative attention recently in this sphere and has noticed that her emails are suddenly all going ...
daveslab's user avatar
  • 141
2 votes
3 answers
196 views

Protecting bare text / link email address published in a website

I have an all-core MediaWiki website; no addons, no forms besides a login form (not even a contact us form); the MediaWiki installation is continuously upgraded and everything is quite minimal and ...
justahumbleasker's user avatar
1 vote
1 answer
999 views

How to send emails with Thunderbird without revealing my internal and external IP address?

I have noticed this issue while using Google's Gmail with Thunderbird. When I send an email from Gmail's web front end at https://mail.google.com/ my internal and external IP address are not included ...
luke359's user avatar
  • 141
0 votes
0 answers
149 views

How to determine if a PC is safe after receiving a suspicious email message

I was checking my gmail account spam folder and I noticed an email sent by a known sender. I thought it was flagged as spam by mistake so I opened it. Then I realized the content is the same as ...
Valerio Bulla's user avatar
1 vote
0 answers
110 views

Odd storage.googleapis.com link in spam email [duplicate]

I have accidentally clicked on a link in a spam mail (sent to my gmail, wasn't sent to junk folder) and it opened the link in a new firefox tab. hxxps://hm_vqh3bo6.storage.googleapis.com/24476060.html ...
Pacerier's user avatar
  • 3,313
0 votes
0 answers
973 views

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources. I'm ...
WHO'sNoToOldRx4Covid-CENSORED's user avatar
3 votes
2 answers
366 views

Someone uses my service to spam people with sms. How to deal with this?

Every time when user wants to login to my service it sends one time password (OTP) to the user's phone number, then this OTP is used to confirm login. Someone uses my service to bombard people with ...
aiven's user avatar
  • 131

1
2 3 4 5
9