PPRuNe Forums - View Single Post - Not wanted here
Thread: Not wanted here
View Single Post
Old 11th November 2008 | 22:59
  #3 (permalink)  
jimtherev
 
Joined: Apr 2008
Posts: 565
Likes: 21
From: Passed away on Sept 6th
You can download the sending route

Hi Capn,

Spammers have more than a few tools to fox the casual recipient - hence the number of phishing emails you get supposedly from banks, nigerian millionaires & so on. If you download the headers you can look more closely at the origin.

For example, below I've copied the header from a recent mail in my spam.

This was a genuine one: I've deleted phishers & so don't have one to show you. But you will see that many have a number of 'hops' in them - i.e. they are relayed through several machines, and you get 'received from xxx'; 'received from yyy'. The bottom one might give a clue to the originator.

In Google Chrome you right-click the sender, then click 'View page source'; in Outlook right click again and then click 'options'. In the latter case, the headers are in a box at the bottom of the pop-up.

It might give some idea of the origin of your spam... but, then again it probably won't .

Have fun,
Jim

X-AOL-UID: 3155.1007080134X-AOL-DATE: Mon, 10 Nov 2008 10:59:01 AM Eastern Standard TimeReturn-Path: <[email protected]>Received: from rly-dd06.mx.aol.com (rly-dd06.mail.aol.com [172.19.141.153]) by air-dd06.mail.aol.com (v121_r4.4) with ESMTP id MAILINDD061-b7f49185a221a8; Mon, 10 Nov 2008 10:58:58 -0500Received: from smtprelay.hostedemail.com (smtprelay0150.hostedemail.com [216.40.44.150]) by rly-dd06.mx.aol.com (v121_r4.4) with ESMTP id MAILRELAYINDD061-b7f49185a221a8; Mon, 10 Nov 2008 10:58:27 -0500Received: from filter.hostedemail.com (ff-bigip1 [10.5.19.254])
jimtherev is offline  
Reply