Questions tagged [spam]

Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.

Filter by
Sorted by
Tagged with
0 votes
2 answers
56 views

How can I receive a (spam) email from an unknown email address?

When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from ...
user avatar
  • 133
0 votes
0 answers
33 views

Spam investigation and email reputation check

We are investigating emails which were marked as spam by Cloudmark's service Cloudmark Authority Engine (CMAE). We want to find out if they are false positives. When an user ask to investigate why a ...
user avatar
  • 3
1 vote
2 answers
110 views

What kind of loophole are spam messages, containing just a few words and no links, trying to exploit?

I recently built a website using Django. It has a contact form and some minimal pages about me and my work portfolio. I have been getting a few spam messages a day and their content intrigues me (...
user avatar
1 vote
0 answers
25 views

Email supposedly from the future mentioning fairly recent password [duplicate]

Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that ...
user avatar
  • 11
0 votes
0 answers
31 views

Spam popup using Google news

The other day I was using Google News, clicked a Politico link, and got a popup saying Google had selected me to get a free iPad if I answered some survey questions. I didn't fall for it but I had ...
user avatar
  • 101
1 vote
0 answers
59 views

Is there a standard for fencing email domains to specific use cases?

To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases. If it exists, I would presume that this might limit phishing attacks. Think of my question ...
user avatar
-1 votes
1 answer
71 views

Automated malicious links delivered with e-mail (Reddit, LinkedIn, Package) [closed]

Recently my organisation has been flooded with phishing e-mails with different approaches: pretending to be Reddit or LinkedIn information about a new follower or package delivery status/problems, etc....
user avatar
  • 353
0 votes
0 answers
40 views

How to make sure I don't accidentally blackhole a real e-mail address? [duplicate]

Every day, I get garbage e-mails from addresses such as "sevinckayaoglu@kentkoleji.com.tr" or "bushivddhclrrupeeeaqdnkwd@zstdbkzodgwvsii.us". I have streamlined the process of &...
user avatar
  • 1
37 votes
2 answers
20k views

How did this paypal spoof email pass SPF, DKIM and DMARC

This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC ...
user avatar
  • 401
0 votes
2 answers
150 views

Why spam a newsletter signup form?

I run a newsletter for my small business. It has been running for over a decade. Last week, I found out that one or several spambots have been signing up to it for the last 2 years (to the tune of ...
user avatar
0 votes
0 answers
66 views

How to deal with phishing from SharePoint URLs?

There is a lot of malspam with some *.sharepoint.com urls. Typically there MS Office files or other malicious files attached. What's the best practice to handle this sort of threat? Whitelisting the ...
user avatar
1 vote
1 answer
86 views

SPF records and spoofing

Lets say we have this SPF record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all` And this record v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all What ...
user avatar
0 votes
0 answers
118 views

Unknown Cause of SPF Fail

I have the following SPF record: v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all Although I have included _spf.mailspamprotection.com in my SPF record, ...
user avatar
  • 101
23 votes
3 answers
4k views

Browser is accepting italic/bold Unicode as part of SPAM email's URL

This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
user avatar
  • 341
0 votes
0 answers
157 views

What is the point of client-side captcha verification?

I have seen dozens of client-side captcha verification on github and considering it is just a matter of time to make it totally useless, what are the purposes of these? Are there any justifications ...
user avatar
2 votes
0 answers
129 views

Site displaying Internal Server Error 500 just as suspicious comments flagged as spam [closed]

In my 13 years of Wordpress, I've never seen anything like this. About an hour ago I was alerted by one of my users that the website was displaying an Internal Server Error 500 message on every page. ...
user avatar
4 votes
1 answer
205 views

Does disabling "Always display external images" in Gmail remove the risk of spam senders seeing that I opened the mail?

When a mail is opened that includes special images, fonts or media, it is loaded from the server of the sender. This is bad because spammers can detect active mail accounts that will get more spam. ...
user avatar
0 votes
2 answers
217 views

My postfix server is getting DOSed, what can I do?

Port 25 is open and I'm getting thousands of emails. How can I make it stop?
user avatar
  • 461
0 votes
1 answer
89 views

responding to comment spam

My website has several forms which are periodically spammed. When a submission gets flagged as spam, and is internally rerouted to where spam should go, what is the appropriate response: show an ...
user avatar
0 votes
1 answer
148 views

Spam mail leading to gibberish site

One of our users regularly receives spam mails containing a shortened link. I got curious, so I decided to investigate one of those links and it took me to a plain text website with gibberish, as if ...
user avatar
  • 173
27 votes
6 answers
7k views

How can I get more spam for my honeypot?

Spam is everywhere and everyone gets it (especially professors), but I noticed that my personal email does not get much spam. How can I get more? What are the most common ways of getting spam? Not ...
user avatar
  • 1,145
0 votes
0 answers
82 views

Is there anything I can do as an end user to deal with greeting card spam sent to my personal email adress?

Lately I've been getting a lot (well, 2-3 mails per day) of greeting card spam (I think it's called), aka spammers signing my personal email address up for contact forms and accounts with random sites,...
user avatar
  • 7,313
0 votes
0 answers
413 views

Spoofed email? "X-Source-Sender" and "Received" headers look dodgy

I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me. Checking the headers the following looks normal: Return-Path Received & ...
user avatar
  • 279
1 vote
0 answers
100 views

Email Takeover Scam? [closed]

I've been receiving a lot of email lately intended for "Daniel L...", a person with the same last name and same first initial as me. It appears this person has requested information from ...
user avatar
  • 193
1 vote
0 answers
154 views

Cmd line tool to scan an eml file against spam/phishing rules [closed]

For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
user avatar
  • 11
2 votes
1 answer
170 views

Is it possible to "hack" an email account so that the emails always go to Spam?

I have a friend who is something of a public figure within a small sphere. She has been an object of negative attention recently in this sphere and has noticed that her emails are suddenly all going ...
user avatar
  • 141
2 votes
3 answers
161 views

Protecting bare text / link email address published in a website

I have an all-core MediaWiki website; no addons, no forms besides a login form (not even a contact us form); the MediaWiki installation is continuously upgraded and everything is quite minimal and ...
user avatar
1 vote
1 answer
544 views

How to send emails with Thunderbird without revealing my internal and external IP address?

I have noticed this issue while using Google's Gmail with Thunderbird. When I send an email from Gmail's web front end at https://mail.google.com/ my internal and external IP address are not included ...
user avatar
  • 31
0 votes
0 answers
122 views

How to determine if a PC is safe after receiving a suspicious email message

I was checking my gmail account spam folder and I noticed an email sent by a known sender. I thought it was flagged as spam by mistake so I opened it. Then I realized the content is the same as ...
user avatar
1 vote
0 answers
108 views

Odd storage.googleapis.com link in spam email [duplicate]

I have accidentally clicked on a link in a spam mail (sent to my gmail, wasn't sent to junk folder) and it opened the link in a new firefox tab. hxxps://hm_vqh3bo6.storage.googleapis.com/24476060.html ...
user avatar
  • 3,243
0 votes
0 answers
426 views

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]

How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources. I'm ...
user avatar
1 vote
2 answers
181 views

Someone uses my service to spam people with sms. How to deal with this?

Every time when user wants to login to my service it sends one time password (OTP) to the user's phone number, then this OTP is used to confirm login. Someone uses my service to bombard people with ...
user avatar
  • 111
1 vote
0 answers
127 views

Why is web scraping software recognized as human?

I know that there are many open source projects that focus on web scraping and automation testing. The prominent ones are Puppeteer and Selenium. But these projects are not recognized as bots in ...
user avatar
0 votes
1 answer
228 views

How do spammers crawl the web for mail addresses?

I have recently started getting the occasional spam mail after not having this problem for several years. As far as I know spammers typically obtain mail addresses via data breaches or by crawling the ...
user avatar
  • 101
0 votes
1 answer
272 views

Verification Code defeated by fake hotmail addresses

Our organization is having problems with hackers/spammers. In order for them to enter our webpage, we require the user to enter an email address and we send them a verification code to that email ...
user avatar
2 votes
1 answer
120 views

If I leave SPF not set on my domain, is that a factor for email servers to mark emails from this domain as spam?

I wonder if the lack of an SPF DNS record is a factor in the decision to mark a message as spam. I understand that an SPF fail is definitively such a factor, i.e. when SPF is configured, but a message ...
user avatar
-1 votes
1 answer
147 views

How do hackers acquire large pools of ip addresses to use? [closed]

I've tried googling but can't find a satisfactory answer. Probably looking up the wrong search terms... I see questions on here and other forums that state they have a sophisticated attacker utilizing ...
user avatar
  • 302
1 vote
2 answers
2k views

What are the dangers of a mailto link?

I was looking through my spam folder, and there's a 100% sure spam email, that asks me to confirm that I want to unsubscribe by clicking some big unsubscribe button. That button is simply a mailto: ...
user avatar
  • 189
5 votes
1 answer
189 views

Whom should I report spam emails to?

Today I received an email from a person in "critical health condition" who wants to give me about $10 million. It is clearly some kind of scam. What should I do with the email besides not ...
user avatar
  • 583
0 votes
1 answer
774 views

Spam Mail Related to my Browsing [closed]

I was searching google to find a good printer to buy. To my horror, the next day I got a spam mail with theme "Print smarter at low price". Is this a coincidence or is my PC breached? What ...
user avatar
0 votes
1 answer
156 views

Phishing email from a contact

I received an email from what looked like a friend, it had a suspicious link I inspected the email address and saw that the username was spot on but the domain name was totally different. I also put ...
user avatar
1 vote
3 answers
283 views

What can I do to get rid of spam emails that come from different, randomized email addresses?

Here's an example of the address they're coming from: I'm familiar with filtering settings, but how can I filter something that's different each time?
user avatar
0 votes
3 answers
3k views

Did I fall for an Amazon scam? (Amazon Photos Credit)

So just 30 minutes ago, I was looking through some emails that ended up in my scam, and as usual there are amazon emails with recommendations based on past purchases and stuff like that. Then there is ...
user avatar
0 votes
1 answer
83 views

Spam issue regarding security on gmail app [duplicate]

I have been getting a ton of spam email, so I looked at one of them. I did not click anything, or download anything. However there was a spammy image with option to click on (as they always do). ...
user avatar
0 votes
1 answer
155 views

Why do I get spam in my newly created email account before even using it?

I made an email account at hotmail.com. Before even using once anywhere I already receive spammail. My question is, how is that possible? And is it unavoidable (from the perspective of an email ...
user avatar
0 votes
1 answer
116 views

Spam link sets cookie(s) then redirects to google.com - what would be the point of this? Should I be concerned?

Received a spam link about "a package soon to be delivered" via an SMS message. Didn't click it in my phone, but couldn't help myself but to go to the URL in a browser on my laptop :grimace: (not ...
user avatar
0 votes
1 answer
155 views

How to safely "reply" to spam email? [duplicate]

I have received an email flagged as spam from Yahoo but it was strange since it contained part of my password. The email states that they know my password so I better pay them in BTC. I think I had to ...
user avatar
  • 101
0 votes
0 answers
86 views

Who to stop spammers attacking mailenable using external domain names?

We have an issue on our Mailenable with the MTA enabled on MXSCAN software, everything were working fine, but today we have realized that we are only able of sending emails but not receiving.we have ...
user avatar
0 votes
1 answer
96 views

Risk in adding shared mail server to my SPF like sendinblue/sendgrid for mail reputation?

My enterprise would like to make some mass mailing to their customers, using a third party solution (e.g.: sendinblue, sendgrid, mailchimp...). Is there a real risk that my domain mail address could ...
user avatar
-1 votes
2 answers
1k views

Received email addressed to someone else from themselves

My outlook account received a suspicious email, addressed to somebody else, AW, sent apparently from themselves to themselves. The sender is not an outlook address, but I guess outlook might be ...
user avatar

1
2 3 4 5
9