Collaborate Disseminate
I have quite a few questions about email security on my custom domains (SPF, DKIM, DMARC,… etc).
Let me start with Why this email got forwarded successfully, please allow an image for the words, an XML report you find below.
I simply… Continue reading Spoofed forwarded email? Help with analyzing of DMARC report
Since yesterday, one of my work email addresses is used to send spoof emails with phishing attachments. SPF and DKIM was configured on my domain name but not DMARC, but since yesterday in the evening, everything is configured and I receive… Continue reading Spoof email is using my domain name email address but target almost only my contact list with credible content body
An email has been circulated with the username of our organization, with some internal users and also to the customers. Observed that IP 40.92.46.74, which is Microsoft one. We have been using our organizational email-signature for all our… Continue reading Impersonating phishing incident [closed]
I have an account within an organisation that provides e-mail-services within their infrastructure. These can be connected to via IMAP/SMTP and Exchange and always require password authentication. Today I learned that when I change the Fro… Continue reading Is it acceptable/common for an SMTP server to not verify the From-Address of authenticated users?
I’m using Apache Airflow and I was troubleshooting built-in smtp setup. A mass email occurred on "ops@myexample.com". It was used as a "From:" email in a mass email attack.
Chronology: Started docker by running an exten… Continue reading Malicious Mass Email Attack Occurred, Do I Still Have Problem?
I cannot determine if my Gmail account is hacked. I am receiving spam from xx.yy.@gmail.com which is identical to my own Gmail address xx.yy@gmail.com except for the dot before the @. How is that possible since the dots are irrelevant to G… Continue reading I am receiving spam from my own email. Is my Gmail account hacked? [duplicate]
In a case of clicking too fast, I clicked on a picture that looked like it was from Amazon. However this was not the case. I did end up at Amazon, but I’m aware that other things could’ve taken place before I landed on the Amazon page. I … Continue reading I clicked what looked like an Amazon email, but it (maybe) was from an Amazon affiliate. Ended up at Amazon.com anyway. Can I safely investigate?
I received an email that passed all the email sender checks (spf, dkim, dmarc), and the sent-from domain is a legitimate domain from a legitimate company. However, the email content itself was suspiciously phish-y. I even started to write … Continue reading Should I take action if I receive a phishing email that passes all email sender checks?
I created an online account and received the usual welcome email. In addition, however, an "Undelivered Mail Returned to Sender" email appeared in my inbox one second later. I am the supposed sender, and the website I registered … Continue reading "Undelivered Mail" I never sent (after registration on website)
My relative received an email from a bill they were expecting to pay. So they paid said bill.
Only problem is: it was a spoofed email, and the real bill only came in later.
I checked the email on the email platform (Outlook) and there was … Continue reading Spoofed email: whose fault is it?