Questions tagged [spam]
Spam is the use of electronic messaging systems (including most broadcast media, digital delivery systems) to send unsolicited bulk messages indiscriminately.
414
questions
0
votes
2
answers
56
views
How can I receive a (spam) email from an unknown email address?
When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from ...
- 133
0
votes
0
answers
33
views
Spam investigation and email reputation check
We are investigating emails which were marked as spam by Cloudmark's service Cloudmark Authority Engine (CMAE). We want to find out if they are false positives. When an user ask to investigate why a ...
- 3
1
vote
2
answers
110
views
What kind of loophole are spam messages, containing just a few words and no links, trying to exploit?
I recently built a website using Django. It has a contact form and some minimal pages about me and my work portfolio. I have been getting a few spam messages a day and their content intrigues me (...
1
vote
0
answers
25
views
Email supposedly from the future mentioning fairly recent password [duplicate]
Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that ...
- 11
0
votes
0
answers
31
views
Spam popup using Google news
The other day I was using Google News, clicked a Politico link, and got a popup saying Google had selected me to get a free iPad if I answered some survey questions. I didn't fall for it but I had ...
- 101
1
vote
0
answers
59
views
Is there a standard for fencing email domains to specific use cases?
To my knowledge, there's no common standard for sysadmins to publish trusted domains for specific use cases.
If it exists, I would presume that this might limit phishing attacks. Think of my question ...
- 195
-1
votes
1
answer
71
views
Automated malicious links delivered with e-mail (Reddit, LinkedIn, Package) [closed]
Recently my organisation has been flooded with phishing e-mails with different approaches: pretending to be Reddit or LinkedIn information about a new follower or package delivery status/problems, etc....
- 353
0
votes
0
answers
40
views
How to make sure I don't accidentally blackhole a real e-mail address? [duplicate]
Every day, I get garbage e-mails from addresses such as "sevinckayaoglu@kentkoleji.com.tr" or "bushivddhclrrupeeeaqdnkwd@zstdbkzodgwvsii.us".
I have streamlined the process of &...
- 1
37
votes
2
answers
20k
views
How did this paypal spoof email pass SPF, DKIM and DMARC
This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC ...
- 401
0
votes
2
answers
150
views
Why spam a newsletter signup form?
I run a newsletter for my small business. It has been running for over a decade. Last week, I found out that one or several spambots have been signing up to it for the last 2 years (to the tune of ...
0
votes
0
answers
66
views
How to deal with phishing from SharePoint URLs?
There is a lot of malspam with some *.sharepoint.com urls.
Typically there MS Office files or other malicious files attached.
What's the best practice to handle this sort of threat?
Whitelisting the ...
1
vote
1
answer
86
views
SPF records and spoofing
Lets say we have this SPF record
v=spf1 include:spf.protection.outlook.com include:spf.onprem.com -all`
And this record
v=spf1 include:spf.protection.outlook.com include:spf.onprem.com ?all
What ...
- 11
0
votes
0
answers
118
views
Unknown Cause of SPF Fail
I have the following SPF record:
v=spf1 include:_spf.mailspamprotection.com include:_spf.google.com ip4:209.85.220.0/24 ~all
Although I have included _spf.mailspamprotection.com in my SPF record, ...
- 101
23
votes
3
answers
4k
views
Browser is accepting italic/bold Unicode as part of SPAM email's URL
This is truly crazy. I received a SPAM email in which there is a URL crafted from apparent Unicode characters that surprisingly exist for italic/bold letters, which when I reported it to Google's spam ...
- 341
0
votes
0
answers
157
views
What is the point of client-side captcha verification?
I have seen dozens of client-side captcha verification on github and considering it is just a matter of time to make it totally useless, what are the purposes of these? Are there any justifications ...
- 11
2
votes
0
answers
129
views
Site displaying Internal Server Error 500 just as suspicious comments flagged as spam [closed]
In my 13 years of Wordpress, I've never seen anything like this. About an hour ago I was alerted by one of my users that the website was displaying an Internal Server Error 500 message on every page. ...
- 21
4
votes
1
answer
205
views
Does disabling "Always display external images" in Gmail remove the risk of spam senders seeing that I opened the mail?
When a mail is opened that includes special images, fonts or media, it is loaded from the server of the sender. This is bad because spammers can detect active mail accounts that will get more spam. ...
- 265
0
votes
2
answers
217
views
My postfix server is getting DOSed, what can I do?
Port 25 is open and I'm getting thousands of emails. How can I make it stop?
- 461
0
votes
1
answer
89
views
responding to comment spam
My website has several forms which are periodically spammed.
When a submission gets flagged as spam, and is internally rerouted to where spam should go, what is the appropriate response:
show an ...
0
votes
1
answer
148
views
Spam mail leading to gibberish site
One of our users regularly receives spam mails containing a shortened link. I got curious, so I decided to investigate one of those links and it took me to a plain text website with gibberish, as if ...
- 173
27
votes
6
answers
7k
views
How can I get more spam for my honeypot?
Spam is everywhere and everyone gets it (especially professors), but I noticed that my personal email does not get much spam. How can I get more?
What are the most common ways of getting spam? Not ...
- 1,145
0
votes
0
answers
82
views
Is there anything I can do as an end user to deal with greeting card spam sent to my personal email adress?
Lately I've been getting a lot (well, 2-3 mails per day) of greeting card spam (I think it's called), aka spammers signing my personal email address up for contact forms and accounts with random sites,...
- 7,313
0
votes
0
answers
413
views
Spoofed email? "X-Source-Sender" and "Received" headers look dodgy
I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me.
Checking the headers the following looks normal:
Return-Path
Received & ...
- 279
1
vote
0
answers
100
views
Email Takeover Scam? [closed]
I've been receiving a lot of email lately intended for "Daniel L...", a person with the same last name and same first initial as me. It appears this person has requested information from ...
- 193
1
vote
0
answers
154
views
Cmd line tool to scan an eml file against spam/phishing rules [closed]
For a purpose of a security class I want to demonstrate a threat delivered via email. As a demo message I want to use an eml file that contains a banking-themed pdf attachment, requiring further ...
- 11
2
votes
1
answer
170
views
Is it possible to "hack" an email account so that the emails always go to Spam?
I have a friend who is something of a public figure within a small sphere. She has been an object of negative attention recently in this sphere and has noticed that her emails are suddenly all going ...
- 141
2
votes
3
answers
161
views
Protecting bare text / link email address published in a website
I have an all-core MediaWiki website; no addons, no forms besides a login form (not even a contact us form); the MediaWiki installation is continuously upgraded and everything is quite minimal and ...
1
vote
1
answer
544
views
How to send emails with Thunderbird without revealing my internal and external IP address?
I have noticed this issue while using Google's Gmail with Thunderbird. When I send an email from Gmail's web front end at https://mail.google.com/ my internal and external IP address are not included ...
- 31
0
votes
0
answers
122
views
How to determine if a PC is safe after receiving a suspicious email message
I was checking my gmail account spam folder and I noticed an email sent by a known sender.
I thought it was flagged as spam by mistake so I opened it. Then I realized the content is the same as ...
1
vote
0
answers
108
views
Odd storage.googleapis.com link in spam email [duplicate]
I have accidentally clicked on a link in a spam mail (sent to my gmail, wasn't sent to junk folder) and it opened the link in a new firefox tab. hxxps://hm_vqh3bo6.storage.googleapis.com/24476060.html ...
- 3,243
0
votes
0
answers
426
views
How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND [bad sources]
How can I test if/how STIR/SHAKEN is working on my incoming calls? Both for detecting spoofed caller ID AND calls from disreputable (NON-'A' attestation) service providers/carriers/sources.
I'm ...
1
vote
2
answers
181
views
Someone uses my service to spam people with sms. How to deal with this?
Every time when user wants to login to my service it sends one time password (OTP) to the user's phone number, then this OTP is used to confirm login.
Someone uses my service to bombard people with ...
- 111
1
vote
0
answers
127
views
Why is web scraping software recognized as human?
I know that there are many open source projects that focus on web scraping and automation testing. The prominent ones are Puppeteer and Selenium. But these projects are not recognized as bots in ...
- 11
0
votes
1
answer
228
views
How do spammers crawl the web for mail addresses?
I have recently started getting the occasional spam mail after not having this problem for several years. As far as I know spammers typically obtain mail addresses via data breaches or by crawling the ...
- 101
0
votes
1
answer
272
views
Verification Code defeated by fake hotmail addresses
Our organization is having problems with hackers/spammers. In order for them to enter our webpage, we require the user to enter an email address and we send them a verification code to that email ...
- 9
2
votes
1
answer
120
views
If I leave SPF not set on my domain, is that a factor for email servers to mark emails from this domain as spam?
I wonder if the lack of an SPF DNS record is a factor in the decision to mark a message as spam.
I understand that an SPF fail is definitively such a factor, i.e. when SPF is configured, but a message ...
- 313
-1
votes
1
answer
147
views
How do hackers acquire large pools of ip addresses to use? [closed]
I've tried googling but can't find a satisfactory answer. Probably looking up the wrong search terms...
I see questions on here and other forums that state they have a sophisticated attacker utilizing ...
- 302
1
vote
2
answers
2k
views
What are the dangers of a mailto link?
I was looking through my spam folder, and there's a 100% sure spam email, that asks me to confirm that I want to unsubscribe by clicking some big unsubscribe button. That button is simply a mailto: ...
- 189
5
votes
1
answer
189
views
Whom should I report spam emails to?
Today I received an email from a person in "critical health condition" who wants to give me about $10 million. It is clearly some kind of scam. What should I do with the email besides not ...
- 583
0
votes
1
answer
774
views
Spam Mail Related to my Browsing [closed]
I was searching google to find a good printer to buy. To my horror, the next day I got a spam mail with theme "Print smarter at low price". Is this a coincidence or is my PC breached? What ...
- 105
0
votes
1
answer
156
views
Phishing email from a contact
I received an email from what looked like a friend, it had a suspicious link I inspected the email address and saw that the username was spot on but the domain name was totally different. I also put ...
- 1
1
vote
3
answers
283
views
What can I do to get rid of spam emails that come from different, randomized email addresses?
Here's an example of the address they're coming from:
I'm familiar with filtering settings, but how can I filter something that's different each time?
- 13
0
votes
3
answers
3k
views
Did I fall for an Amazon scam? (Amazon Photos Credit)
So just 30 minutes ago, I was looking through some emails that ended up in my scam, and as usual there are amazon emails with recommendations based on past purchases and stuff like that. Then there is ...
- 11
0
votes
1
answer
83
views
Spam issue regarding security on gmail app [duplicate]
I have been getting a ton of spam email, so I looked at one of them.
I did not click anything, or download anything. However there was a spammy image with option to click on (as they always do).
...
0
votes
1
answer
155
views
Why do I get spam in my newly created email account before even using it?
I made an email account at hotmail.com. Before even using once anywhere I already receive spammail. My question is, how is that possible? And is it unavoidable (from the perspective of an email ...
- 221
0
votes
1
answer
116
views
Spam link sets cookie(s) then redirects to google.com - what would be the point of this? Should I be concerned?
Received a spam link about "a package soon to be delivered" via an SMS message. Didn't click it in my phone, but couldn't help myself but to go to the URL in a browser on my laptop :grimace: (not ...
- 101
0
votes
1
answer
155
views
How to safely "reply" to spam email? [duplicate]
I have received an email flagged as spam from Yahoo but it was strange since it contained part of my password. The email states that they know my password so I better pay them in BTC.
I think I had to ...
- 101
0
votes
0
answers
86
views
Who to stop spammers attacking mailenable using external domain names?
We have an issue on our Mailenable with the MTA enabled on MXSCAN software, everything were working fine, but today we have realized that we are only able of sending emails but not receiving.we have ...
0
votes
1
answer
96
views
Risk in adding shared mail server to my SPF like sendinblue/sendgrid for mail reputation?
My enterprise would like to make some mass mailing to their customers, using a third party solution (e.g.: sendinblue, sendgrid, mailchimp...).
Is there a real risk that my domain mail address could ...
user213795
-1
votes
2
answers
1k
views
Received email addressed to someone else from themselves
My outlook account received a suspicious email, addressed to somebody else, AW, sent apparently from themselves to themselves.
The sender is not an outlook address, but I guess outlook might be ...
