Mailgun Domain Sending Key

Description

General

• Documentation: https://documentation.mailgun.com/en/latest/index.html
• Summary: It is possible to create SMTP users and passwords for each domain in use. The username, the password and the SMTP server host smtp.mailgun.org can be used to send emails. All SMTP credentials are unique per domain.
• IPs allowlist: No
• Scopes: No

Revoke the secret

The secret can be deleted in the interface.

Check for suspicious activity

Based on available information, there is no way to check if the SMTP credentials were used or not. One possible workaround is to check if the credentials were used to send emails in the Mailgun logs panel.

Details for Mailgun Domain Sending Key

• Family: token

• Category: messaging_system

• Company: Mailgun

• High recall: False

• Validity check available: False

• Analyzer available: False

• Minimum number of matches: 1

• Occurrences found for one million commits: 9.43

• Prefixed: False

• PreValidators:

- type: FilenameBanlistPreValidator
  banlist_extensions: []
  banlist_filenames: []
  check_binaries: false
  include_default_banlist_extensions: true
  ban_markup: true
- type: ContentWhitelistPreValidator
  patterns:
    - mailgun
    - smtp

Examples

- text: |
    +    'mailgun' => [
    +         'domain' => 'sandbox9429958218ca403a8d58dcd099d1c0c9.mailgun.org',
    +        'secret' => 'a5f26ab470c693c8bbfdbca164f4448a-1b65790d-12d3d5f0',
    +    ],
  apikey: a5f26ab470c693c8bbfdbca164f4448a-1b65790d-12d3d5f0

- text: |
    +smtp.username = ap2@mg.ggfoundit.eu
    +smtp.password = cbdd0aaa801e2c07bf9c5448c65d2ba1-9949a98f-69e8d3c4
     smtp.port = 587
     mail.smtp.starttls.enable = true
  apikey: cbdd0aaa801e2c07bf9c5448c65d2ba1-9949a98f-69e8d3c4