> On Feb 13, 2017, at 5:08 PM, Phillip Carroll
> <[email protected]> wrote:
>
> Viktor,
>
> The headers do not indicate this was a purported bounce. It had a normal from
> header:
> From: "Amazon.com" <[email protected]>
The "From:" header is quite irrelevant in this context. Especially
with email scams, the message envelope will often have no relationship
with the headers.
You could check the "Return-Path:" which is typically where the envelope
sender is recorded on final delivery.
--
Viktor.
--
## List details at https://lists.exim.org/mailman/listinfo/exim-users
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://wiki.exim.org/
