±Forensic Focus Partners

Become an advertising partner

±Your Account


Username
Password

Forgotten password/username?

Site Members:

New Today: 1 Overall: 35880
New Yesterday: 7 Visitors: 132

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

How to know if a mail has been received in Gmail SPAM?

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts
 
  

Skywalker
Senior Member
 

How to know if a mail has been received in Gmail SPAM?

Post Posted: Feb 27, 18 11:12

Hello everybody,

I need to know if a mail has been DIRECTLY received in the SPAM folder of a Gmail account, obviously without having never been in the main mailbox.

Is that possible?

Thanks everybody.  
 
  

gungora
Member
 

Re: How to know if a mail has been received in Gmail SPAM?

Post Posted: Feb 27, 18 18:57

I would start by getting a history list from Gmail API:

developers.google.com/...story/list

In my experience, the history list shows the original labels of the message added to the mailbox even after the message is re-categorized by the user (e.g., marked as spam). You can get a list of labels added (e.g., "SPAM") by making a history request with a "labelAdded" historyType.

I would also check the message headers for SPF and DKIM info for supporting evidence.

Finally, you can check local mail stores (e.g., Outlook, Thunderbird, etc.), if available, to see if a copy of the message can be found before it was marked as spam by the user.
_________________
Arman Gungor

Metaspike
Developers of Forensic Email Collector
www.metaspike.com 
 
  

einstein9
Member
 

Re: How to know if a mail has been received in Gmail SPAM?

Post Posted: Feb 28, 18 11:10

- Skywalker
Hello everybody,

I need to know if a mail has been DIRECTLY received in the SPAM folder of a Gmail account, obviously without having never been in the main mailbox.

Is that possible?

Thanks everybody.


In another word, You wanted to KNOW if YOUR sent email (to Google account) went to Junk/Spam or not?

I think (if my understanding is right here) that MOST Spammers needed the answer to that question, some kind of Email Verification sent to Google Email/Hosted account.

i really don`t think API`s will help here otherwise our accounts will be full of Junk/Ads (same as before we use google)

Am talking about the old POP3 servers/accounts.

If you have a Yahoo account (for example) you will know how much Junk/Ads you will get daily in your inbox and no matter what you report as spam it comes back EXCEPT google, the way they handle it is diff. (i think)  
 
  

jaclaz
Senior Member
 

Re: How to know if a mail has been received in Gmail SPAM?

Post Posted: Feb 28, 18 14:05

- einstein9

In another word, You wanted to KNOW if YOUR sent email (to Google account) went to Junk/Spam or not?

It seems to me like the case at hand sounds different.

Someone (let's say the defendant) has stated he/she never saw a given e-mail.
Yet the e-mail has been found in his/her Google e-mail account.

The question seems to me more or less:

Is there a way to know if the given mail "landed" in SPAM "directly" (because google automagically detected it as SPAM and sent it directly to the SPAM folder or if the user manually moved the given maol from the Received folder to the SPAM one?

jaclaz
_________________
- In theory there is no difference between theory and practice, but in practice there is. - 
 
  

Skywalker
Senior Member
 

Re: How to know if a mail has been received in Gmail SPAM?

Post Posted: Mar 01, 18 00:49

- jaclaz
- einstein9

In another word, You wanted to KNOW if YOUR sent email (to Google account) went to Junk/Spam or not?

It seems to me like the case at hand sounds different.

Someone (let's say the defendant) has stated he/she never saw a given e-mail.
Yet the e-mail has been found in his/her Google e-mail account.

The question seems to me more or less:

Is there a way to know if the given mail "landed" in SPAM "directly" (because google automagically detected it as SPAM and sent it directly to the SPAM folder or if the user manually moved the given maol from the Received folder to the SPAM one?

jaclaz


That is the point.

Any ideas?

Thanks!!  
 

Page 1 of 1