|
|
A full email header
may look like:
Return-Path:
forged_address@fake.com
Received: from wooftech.net ([207.102.129.200])
by mail0.mailsender.net (5.1.036) id 395BB63B0012CA18
for alice@email.net; Thu, 6 Jul 2000 16:43:46 -0700
Received: from localhost ([172.153.252.183])
by popper3.vphos.net ; Thu, 06 Jul 2000 16:44:53 -0700
X-Originating-IP: [172.153.252.183]
From: forged_address@fake.com
To: alice@email.net
Date: Thu, 06 Jul 2000 17:43:57 -0600
Subject: Anonymous email
Message-ID: <96292709501@popper3.vphos.net>
X-UIDL: d88aeacb3ad5b77467f87f8facaf9ce0
- Nearly
all email headers can be forged. However, it is difficult
to forge the "received" header
- Assuming
the example is not forged, the header implies popper3.vphos.net
was the first email server. This means the sender
probably uses the service provider vphos.net.
|