Gaia bounces google com что это
With cyber scamming growing in sophistication and cunning almost on a daily basis, it is no surprise that many people’s paranoia is at fever pitch. So intense is our paranoia that when we receive a perfectly legit and legit-looking email alert from Google, some of us automatically think ‘scam’ or ‘phishing.’
Such was the reaction last week, when a number of Google users received this alert
The urgency of the email and its startling lack of details was brought to light by Lorenzo Franceschi-Bicchierai, a reporter for motherboard.vice.com.
“Inspecting it closely, I was pretty confident this was a legit Google alert. The email address of the sender is [email protected], and Gmail itself tells me it’s mailed by gaia.bounces.google.com and signed by accounts.google.com. As a security reporter, these are both signs that tell me the email is legitimate. But regular users might not know where to look for these or how to interpret them.”
Several people on Twitter told the report they felt the same when they got it: some thought it was “suspect,” or straight up a “phishing email.”
Richard De Vere, a security consultant who specializes in social engineering, said that even though the Google email is not a phishing attempt, it is so good at luring people to click on a link that he plans to add it to his brochure of good phishing attacks to use it in his ethical hacking engagements.
“It has urgency, guides to a login page, quite vague, but alarming…we used to take legitimate Google emails and adapt, but this is just perfect as is. […] It’s that good,” he tweeted. “Unforgivable for Google to send this out en masse.”
Google told Franceschi-Bicchierai, the alerts are designed to get users to go through the very useful, and user-friendly, security checkup, which helps users set up two-factor authentication, check if any old apps have access to their account, and review unusual security events such as sign-ins from new devices.
The company added that this alert is the result of months of experiments, and this version of the alert had the best engagement (meaning people actually opened and clicked it). There are no specifics in it because the company wanted to avoid giving hackers hints about what was wrong with the account, and the company concluded that the extra click required to get to the checkup was a security feature in this case. For tips on how to avoid a phishing attempt, check out this VIPRE labs blog post.
Email-based threats are not something to be ignored. According to the 2019 Verizon Data Breach Investigations Report, the median company receives 94% of all detected malware through email. Additionally, 45% of email-based malware is delivered via email attachment such as a Microsoft Office document.
Perspectives and Perspirations
Life is a journey. Every single step leads to enlightenment.
Hackers attack your google and yahoo accounts
November 8, 2009 by lynale
There are more crazy hacking people from the other side of the world. It was Russian, Indonesian, Nigerian, … and now Vietnamese.
This morning upon checking my yahoo email, I found two of the same kind of email in Vietnamese from google email support.
My first thought: what the heck? Google support people send this out of vietnamese? So untrue.
So I checked out the full header of the email and Voila. The returning path has: @gaia.bounces.google.com. This is suspicious. Looking up for the IP address 209.85.160.109 – it is from Google in Mountain View. Weird! Is it possible that they use Google’s IP to mask their own? First of all, google support would carry gmail.com, or just @google.com in their returning path. Secondly, they always send out message to your gmail account if you are a gmail user, and of course in english. Well then the spammer is within google itself? There is always a possiblity. The best action to take: Beware and be careful.
If you receive email like the one below, spam them immediately (in Yahoo) and report abuse/spam (in Gmail). They hacked into your google profile for secondary email linked to your gmail account, or vice versa with yahoo.
This type of email hacking can drive you nuts, leave people in confused, not-knowing-what-to-do state.
From accounts-noreply@google.com Sun Nov 8 13:35:28 2009
X-Apparently-To:myemail@yahoo.com via 206.190.38.83; Sun, 08 Nov 2009 05:35:28 -0800
Return-Path:
X-YMailISG: wdVoCz8WLDumX4K3HJfa.tEgd37FK31iGVxuq6zI1_apNlBDcSh4GnHICqvZZBvu4.aCimflhHk7pKyVQb2f6esYW0aN2D3DgXQRXZ8ECdbIQfwAfS2qO5aw7UiMLhESmSS58HcRcZ4Hwh.m2VFYTPToktflJdb_yDkuy5San9_l1Wkxr04520HdGH1gbp3eV3hjB9HDspiO0Oc0aa4Raa0lHNEB4kqsf2HdY6hOx9k.R8v_tNsfc1.oEEsa1l58o9N1oFBd2w88VnscKdTbOBkD0_WFU0Gec2vCbL67bbpI9jpDfgPk3vmvr3FltRBJodkzNEInvKAIHtKRbHYwIE0YX8sQfXAK7EIqNVqBGDJD8_yCCoTGJT_RfZ_VmlRBsIHUDWFhq_Hj3tlo4_etVgGS9FLmqqNj0n1AxV1qpr6WkKkGOdlBnXpB6uW85qVw6BtJek_y0VodbKoGMWroiTNuH9qAIHKVIsmyha4H3GmLbNtFaWaEXojG
X-Originating-IP: [209.85.160.109]
Try out this cool tool for tracing “Who is” at a certain IP address even your own IP address and your computer’s information.
Как отписаться от спам рассылки, если кнопки "отписаться" нет?
Некоторое время назад ко мне на почту начали приходить письма с адреса nobody@google.com , разумеется, это замена домена и имени:
Есть поле Return Path :
В самом начале письма указано следующее (мой логин заменён на username):
Помогите, пожалуйста, разобраться кто это отсылает (хотя бы как связаться с этим человеком), потому что ни отписаться невозможно, ни система фильтрации не реагирует на занесение этих писем в спам.
trix.bounces.google.com — это доменное имя отправщика форм Google, как я понял. Когда кто-то приглашает кого-то посмотреть форму, то сообщение приходит не с email этого человека, а с email бота Google Forms .
UPD2 — Решение вопроса
Собираем всё, что только можно собрать
В моём случае это:
Пытаемся собрать как можно больше информации:
В моём случае это сайт http://affiliatelink.website
Домен зареган у reg.ru , контакт для связи с владельцем — affiliatelink.website@regprivate.ru
Дальнейшие действия
Пишем письмо владельцу с просьбой исключить ящик из рассылки и угрозой обратиться в правоохранительные органы. Также пишем жалобу регистратору домена (у меня это support@reg.ru ) и заодно просим уведомить клиента, чтобы он исключил ящик из рассылки, иначе его ждут разбирательства (вдруг почта не редиректится, а владелец домена не читает внутреннюю почту домена).
Ждём решения по поводу данной жалобы и, возможно, ответа от владельца домена.
Is no reply accounts google com legitimate?
The sender’s address, no-reply @ accounts.google.com, spoofs what appears to be an official Google address. There is not an easy way to detect this. Instead of clicking a link in a message, go to Google or your gmail account via a known, good website address.
Is no-reply accounts Google com a valid Google email address?
Inspecting it more closely, I was pretty confident this was a legit Google alert. The email address of the sender is no-reply@accounts.google.com, and Gmail itself tells me it’s mailed by gaia.bounces.google.com and signed by accounts.google.com. . “Unforgivable for Google to send this out en masse.”
What is Google no-reply?
The no-reply feature is only available to Google accounts that use Google Workspace. If you are using a free Gmail account, you cannot send emails from a noreply email address. . The respondents may be frustrated as they will not be able to respond to your emails.
How do I know if my Google security alert is real?
- Go to your Google Account.
- On the left navigation panel, click Security.
- On the Recent security events panel, click Review security events.
- Review your recent activity and look for unfamiliar locations or devices.
Is Google sending out security warnings?
We send you security alerts when we: Detect important actions in your account, like if someone signs in on a new device. Detect suspicious activity in your account, like if an unusual number of emails are sent. Block someone from taking an important action, like viewing stored passwords.
no-reply@accounts.google.com
23 related questions found
How can I tell if someone has logged into my Google account?
- Sign in to your Google Admin console. Sign in using your administrator account (does not end in @gmail.com).
- From the Admin console Home page, go to Security. Dashboard. .
- In the bottom-right corner of the User login attempts panel, click View Report.
What is Google suspicious activity?
Gmail activity. Your Gmail activity might be suspicious if: You no longer receive emails. Your friends say they got spam or unusual emails from you. Your username has been changed.
How does Google know someone knows my password?
Since Google has the password for the POP3 account it can check the common password dumps if the password is known publicly. They don’t claim that somebody is actively using the password with your POP3 account, only that somebody knows it.