Changes

Email spoofing

92 bytes added, 9 years ago
Delivered-To: dmitri@vitaliev.info<br>Received: by 10.220.151.69 with SMTP id b5csp114879vcw;<br>Sun, 28 Oct 2012 20:05:50 -0700 (PDT)<br>Received: by 10.14.216.193 with SMTP id g41mr47392166eep.37.1351479949985;<br>Sun, 28 Oct 2012 20:05:49 -0700 (PDT)<br>Return-Path: <joe.average@webmail.com><br>Received: from emkei.cz ([2a01:5e0:36:5001::20])<br>by mx.google.com with ESMTP id z46si13229132eeo.136.2012.10.28.20.05.49;<br>Sun, 28 Oct 2012 20:05:49 -0700 (PDT)<br>Received-SPF: neutral (google.com: 2a01:5e0:36:5001::20 is neither permitted nor denied by best guess record for domain of joe.average@webmail.com) client-ip=2a01:5e0:36:5001::20;<br>Authentication-Results: mx.google.com; spf=neutral (google.com: 2a01:5e0:36:5001::20 is neither permitted nor denied by best guess record for domain of joe.average@webmail.com) smtp.mail=joe.average@webmail.com<br>Received: by emkei.cz (Postfix, from userid 33)<br>id 8423ED5A2D; Mon, 29 Oct 2012 04:05:48 +0100 (CET)<br>To: dmitri@vitaliev.info<br>Subject: long time no see<br>From: "Joe Average" <joe.average@webmail.com><br>X-Priority: 3 (Normal)<br>Importance: Normal<br>Errors-To: joe.average@webmail.com<br>Reply-To: joe.average@webmail.com<br>Content-Type: text/plain; charset=utf-8<br>Message-Id: <20121029030548.8423ED5A2D@emkei.cz><br>Date: Mon, 29 Oct 2012 04:05:48 +0100 (CET)<br>
Reading the message from the bottom up, look for telling signs of the real server where the message was sent from. You will see right away that this particular email is being sent from the @emkei.cz domain and not webmail.com
252
edits