On Tue, 21 Sep 2004, Al Poulin wrote: > Date: Tue, 21 Sep 2004 22:23:22 -0400 > From: Al Poulin <[EMAIL PROTECTED]> > Reply-To: iMac List <[EMAIL PROTECTED]> > To: iMac List <[EMAIL PROTECTED]> > Subject: How to Read SPAM Message Headers > > I have just received an e-mail which I think is SPAM. I disconnected my > ethernet cable from the modem and opened the e-mail. There is no text in > the body of the message, just eight boxes will little icons representing > HTML. Then I opened the message header and saw the text copied below. > > I know there is some header info that verifies the mail is SPAM. What does > one look for? Are those indicators here? > The first receive line is where your mail server got the message from. Anything after that can be forged. So:
4.78.193.101 becomes mx101.mxhs03.net The domain is MXHS03.NET Admin contact: Hotstripe Media PO Box 3469 #322 Newport Beach, CA 92659 PH# 949-273-4025 The return email address drmx01.net Organization: DQ Administrative Contact 3434 Via Lido Suite 300 Newport Beach, CA 92663 PH# 949-273-4028 > COPY OF HEADER BELOW: > Return-Path: <[EMAIL PROTECTED]> > Received: from mx1.mxhs04.net ([4.78.193.101]) by lakermmtai07.cox.net > (InterMail vM.6.01.03.04 201-2131-111-106-20040729) with SMTP > id <[EMAIL PROTECTED]> > for <[EMAIL PROTECTED]>; Tue, 21 Sep 2004 18:09:18 -0400 > To: [EMAIL PROTECTED] > Date: Tue, 21 Sep 2004 15:12:29 -0800 > Message-ID: <[EMAIL PROTECTED]> > MIME-Version: 1.0 > Content-Type: text/html; charset=ISO-8859-1 > X-HSID: 122620936 > Rot: > From: "Testers Needed" <[EMAIL PROTECTED]> > Subject: Free Apple 17" iMac G5 Desktop - Find out how! > END COPY > > Thanks for some education. > > -- Chris Dailey Eskimo North Ministry of Propaganda Dept: Social Engineering "It is not a sign of good health to be well adjusted to a sick society." -J. Krishnamurti -- The iMac List is sponsored by <http://lowendmac.com/> and... Small Dog Electronics http://www.smalldog.com | Refurbished Drives | - Epson Stylus Color 580 Printers - new at $69 | & CDRWs on Sale! | Support Low End Mac <http://lowendmac.com/lists/support.html> iMac List info: <http://lowendmac.com/imac/list.shtml> --> AOL users, remove "mailto:"; Send list messages to: <mailto:[EMAIL PROTECTED]> To unsubscribe, email: <mailto:[EMAIL PROTECTED]> For digest mode, email: <mailto:[EMAIL PROTECTED]> Subscription questions: <mailto:[EMAIL PROTECTED]> Archive: <http://www.mail-archive.com/imac-list%40mail.maclaunch.com/> --------------------------------------------------------------- >The Think Different Store http://www.ThinkDifferentStore.com ---------------------------------------------------------------
