Collaborate Disseminate
When you receive an email, most email programs will display the sender as a name (chosen by the sender) and hide the actual email address behind it. Spam emails often abuse this by sending mails from something like ‘Microsoft (john.doe@aol… Continue reading How can I receive a (spam) email from an unknown email address?
We are a small company. We’re using G-suite service.
Every once in a while we receive spam emails sent to almost all employees with our Boss’s Name, and boss email in signature.
And our correct emails are in the "TO" or "CC&… Continue reading How did spammers get our boss info and employees info?
Just got an email that mentioned, in very broken english, having hacked my email etc. and actually managed to list my current password of that email account. The mail was, apparently, send by that very email and is, only in outlook, dated … Continue reading Email supposedly from the future mentioning fairly recent password
A few companies I know say they have a DMARC record for email domain set up as a CNAME record and not a TXT record after I told them that their missing DMARC. Is there a way I can validate this externally?
I know mxtoolbox.com provides a w… Continue reading Can I check if domain has DMARC setup as CNAME record
I currently have a g-mail address (example@gmail.com). I recently received a message addressed to example@aol.com. Looking at the header I see my correct address in the Delivered-To: field but in the To: and cc: fields it’s showing the ex… Continue reading How am I receiving emails addressed to an address not associated with my account?
I received a strange email from security@facebookmail.com. Sources on the internet seem to state that this is a Facebook-owned domain but I know the email is not legit because they do not address me by my first name, but instead by my emai… Continue reading How does this scam email from a seemingly legit domain work?
I am using Google workspace to handle my domain emails. At a certain point, employees started to receive spoofing emails to their @mydomain.com addresses. I blocked these emails and it worked.
However, after I blocked it, employees started… Continue reading Business Email Compromise emails sent to personal email accounts
This mail that got through has me stumped. It appeared to me as being from PayPal <unclaimedproperty@paypal.com> in my Inbox. I happened to look at the original and it says SPF, DKIM and DMARC all passed.
If I’m reading this right,… Continue reading How did this paypal spoof email pass SPF, DKIM and DMARC
I had a situation where I clicked an email link send to me by a financial institution. The link first sent me to their login page where my chrome password extension automatically filled in my username and password. Usually I would never en… Continue reading Do password autofill extensions securely validate the site they are autofilling?
I’m writing an app that tries to check if an email address is already known by a company or not, meaning, if an given email address is in the whitelist or the blacklist of the company’s email server. I thought about analyzing the SMTP comm… Continue reading checking if email is in whitelist or blacklist [closed]