Collaborate Disseminate
I’m storing a list of email addresses and other not personally identifiable information for a mailing list in a database. Since it’s for a project related to cryptocurrency, I believe that the information could be a target for future attac… Continue reading What’s The Best PHP Encryption For Email Addresses?
I got an email with the following:
I am just looking at your SPF records then found following. SPF Records missing safe check which can allow me to send mail and phish easily any victim.
PoC:
<?php
$to = "VICTIM@example.com"… Continue reading Vulnerability : Missing SPF – is this a scam?
Could someone doctor an email to make it appear that it was sent from a different sender at an earlier date? For example, could someone who knows my email address make it appear that I had emailed someone last year?
Continue reading Can an email be doctored to appear from a different sender on an earlier date?
In recent weeks I have seen a handful of senior employees in my organization receive a confirmation email from Wester Union for a new account creation. The issue is that none of these users have created a WU account.
I have verified all li… Continue reading Potential Western Union Scam – Account Registration
I usually receive e-mails from an organization called Change.org, that is a site for create on-line petitions (it’s site is https://www.change.org/).
The thing is, they send me e-mails with suggestions about petitions to sign in, but the s… Continue reading Are e-mails that have a name slightly different from the web page legitimate e-mails?
I received an email looking very much like a legit Amazon email, from no-reply-music@amazon.com, and references a current transaction. However the links looks like below (changed some of the url param values). When I clicked one I ended up… Continue reading Legit Amazon Links? [closed]
My goal was to send an email to a gmail address, like beta@gmail.com from a commandline tool such as netcat or telnet etc.
WHAT I TRIED:
I first tried netcat.
nc -C smtp.gmail.com 587
220 smtp.gmail.com ESMTP l35sm2846203wms.40 – gsmtp
EHL… Continue reading When sending email to Gmail address from netcat or openssl s_client, why do I get "Username and Password not accepted", despite correct credentials [migrated]
The domain abc.co.uk, has registered MX records, found through dig, mx1.forwardemail.net and mx2.forwardemail.net.
dig abc.co.uk MX +noall +answer
abc.co.uk. 300 IN MX 10 mx1.forwardemail.net.
abc.co.uk. 300 IN MX 20 mx2.for… Continue reading How attacker creates fake email accounts when the domain is using 3rd party email forwarding services [closed]
Assume I ask someone to create a filter in their Gmail account that automatically forwards certain emails to my inbox. If the original email was protected with DMARC, would the forwarded email also be protected? Or does it lose the protect… Continue reading Do fowarded emails retain DMARC protection?
I have an application that rewards users for placing orders with certain merchants. In order to verify that the order was actually placed and delivered, a user is required to grant us read access to a new Gmail Inbox that is created and sh… Continue reading Is it Safe to Rely on Gmail API to Reward Users for Placing Orders on Merchant Sites?