Minutes 1–3: find the routes

Search your password manager and inbox for the accounts connected to this area. Note which ones use automatic image loading, which have remote-content control, and which no longer have a clear owner or purpose.

Minutes 4–6: find the weak link

Displaying a message can quietly request unique content from a sender. Look first for public addresses used for recovery, temporary routes attached to durable accounts, reused passwords and aliases that receive unrelated mail.

Minutes 7–9: make one repair

  • Block remote images
  • Prefer plain text
  • Open links deliberately
  • Separate intrusive senders

Choose the highest-consequence problem, not the longest list. Confirm the replacement before disabling anything.

Minute 10: leave a note

Block remote content by default for unknown or intrusive senders. Record what changed and set the next review for a natural event. Privacy proxies can obscure open data but do not make every link or attachment safe.

A ten-minute audit is successful when tomorrow is simpler.

Give the next relationship its own route.

Create an MXDuck alias