Collaborate Disseminate
I am creating a basic website contact form. It requires entering a ‘from’ email address. I entered a dummy email address, which I do not control, yet the email is still sent, and, to the recipient, it looks as though the email came from an… Continue reading How can you tell if an email is really from the address it claims it’s from? [duplicate]
This article tells us that there are two types of STARTTLS: Opportunistic (i.e. optional STARTTLS) STARTTLS and Enforced STARTTLS, which works by the doctrine of "Encrypted connection or drop connection".
We can use checktls.com/… Continue reading How to check if a mail server is using Enforced-STARTTLS rather than Opportunistic-STARTTLS?
In an attempt to provide better insights to our readers about what DMARC is and how its implementation can help in securing an organization’s outbound email channels, KDMARC has released its 2020-2021 DMARC Industry Report. DMARC Report The DMARC Indus… Continue reading DMARC Industry Report 2020-2021
Each facebook user gets legitimate facebook emails with a fixed
Return-Path: notification+ABC123@facebookmail.com
header. I.e., Bob will always get mails from ABC123, and Wilma from EFG456.
There is no way a phisher / spammer would know w… Continue reading How to update the Return-Path that Facebook sends with?
I (mostly) understand how a scammer can send an email from a spoofed account, all you need is an unsecured SMTP server.
But how is it possible, for a scammer to RESPOND and maintain an email conversation with the victim from the spoofed ad… Continue reading How can scammer actually reply from a spoofed email address?
I continue to have this pop-up preventing me from accessing my email (the first pop-up said in all lowercase "don’t lose access to your account!"). It seems unprofessional to be all lowercase, so I feel like I have a virus/malwar… Continue reading Microsoft Outlook "confirm your current password" scam? [closed]
I got a gmail from discord saying a new account had been registered and prompting me to click a verification link. Weirdly, I never made that account, and I already had a discord account under my gmail. Of course, I didn’t click the verifi… Continue reading Questionable email from discord [duplicate]
I have a domain for a website that I’m going to deploy soon. I’ve registered a gmail account, and let’s say it is myWebsite@gmail.com. In order to look more professional, I decided to use gmail’s "Send email as:" feature, and no… Continue reading Do email providers somehow validate/control "Send email as: " feature?
I am very new to email concepts and would like to understand SMTP and APIs with respect to selecting email providers.
My concern:
Email service provider Sendgrid is grappling with an unusually large
number of customer accounts whose passw… Continue reading SMTP vs. Web API: Will be my customer email addresses are safer? [closed]
I got sent an email from someone in response to an over 2 year old exchange, and the contents of it look like spam to me.
Checking the headers the following looks normal:
Return-Path
Received & Received-SPF:
Received: from gateway34.we… Continue reading Spoofed email? "X-Source-Sender" and "Received" headers look dodgy