Ini contoh email lengkap beserta headernya. Yang perlu diperhatikan bukanlah domain yang digunakan, namun ip mailserver yang digunakan untuk mengirim spam. Keterangan saya tulis di bawah. -----------------------
Return-Path: <[EMAIL PROTECTED]> Delivered-To: *****(deleted) Received: (qmail 465 invoked by uid 1014); 4 Aug 2006 18:52:10 +0700 Received: from 89.132.20.151 by mail (envelope-from <[EMAIL PROTECTED]>, uid 1002) with qmail-scanner-1.25-st-qms (clamdscan: 0.88.2/1428. spamassassin: 3.0.2. perlscan: 1.25-st-qms. Clear:RC:0(89.132.20.151):SA:0(2.8/5.0):. Processed in 1.73102 secs); 04 Aug 2006 11:52:10 -0000 X-Spam-Status: No, hits=2.8 required=5.0 X-Spam-Level: ++ X-Antivirus-MailServer-Mail-From: [EMAIL PROTECTED] via mail X-Antivirus-MailServer: 1.25-st-qms (Clear:RC:0(89.132.20.151):SA:0(2.8/5.0):. Processed in 1.73102 secs Process 453) Received: from unknown (HELO mag-ucfc2i2lq0u) (89.132.20.151) by *****(deleted).net.id with SMTP; 4 Aug 2006 18:52:08 +0700 Date: Fri, 4 Aug 2006 11:52:30 -0060 From: "Natalia Isaac" <[EMAIL PROTECTED]> X-Mailer: The Bat! (v2.11.03) Personal Reply-To: "Natalia Isaac" <[EMAIL PROTECTED]> X-Priority: 3 (Normal) Message-ID: <[EMAIL PROTECTED]> To: *****(deleted) Subject: Natalia MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Antivirus: avast! (VPS 0631-3, 04/08/2006), Inbound message X-Antivirus-Status: Clean Get the Finest Replicas! We carry more brands than any other online source. We only sell premium watches. There's no battery in these replicas just like the real ones since they charge themselves as you move. The second hand moves JUST like the real ones, too. These original watches sell in stores for thousands of dollars. We sell them for much less. - Replicated to the Smallest Detail - 98% Perfectly Accurate Markings - Signature Green Sticker w/ Serial Number on Watch Back - Magnified Quickset Date - Includes all Proper Markings www.queendeisres.com ------------------------------------------------------------------ Jika dilihat, di header ada keterangan [ from 89.132.20.151 by mail (envelope-from <[EMAIL PROTECTED]>, uid 1002) with qmail-scanner-1.25-st-qms ], itulah ip source spam 89.132.20.151. Semoga membantu. -seno.or.id- Pada tanggal 06/08/04, Kristanto <[EMAIL PROTECTED]> menulis: > > Dear Rekans, > > Saya ingin bertanya, bagaimana caranya melacak asal suatu email dikirimkan > dengan tidak mengandalkan domain email itu sendiri. > > Misalnya saya mendapat email dari [EMAIL PROTECTED] <abc%40defgh.com>. Tetapi > ternyata setelah saya konfirmasi, rekan saya di abd dari domain defgh.comini > mengaku tidak mengirimkan email yang dimaksud. Jika begitu berarti ada > orang lain yang secara sengaja mengirimkan email dengan menggunakan alamat > [EMAIL PROTECTED] <abc%40defgh.com> secara ilegal. Bagaimana cara saya > melacaknya siapa gerangan pengirimnya ? Adakah harus menggunakan software > tertentu ? ID apa yang bisa saya dapatkan dari hasil pelacakan tersebut. > > Mohon bantuan informasinya ya... > > Regards, > Kristanto > [Non-text portions of this message have been removed] -- www.itcenter.or.id - Komunitas Teknologi Informasi Indonesia Info, Gabung, Keluar, Mode Kirim : [EMAIL PROTECTED] :: Hapus bagian yang tidak perlu (footer, dst) saat reply! :: ## Jobs: itcenter.or.id/jobs ## Bursa: itcenter.or.id/bursa ## $$ Iklan/promosi : www.itcenter.or.id/sponsorship $$ [@@] Jaket ITCENTER tersedia di http://shop.itcenter.or.id Yahoo! Groups Links <*> To visit your group on the web, go to: http://groups.yahoo.com/group/ITCENTER/ <*> To unsubscribe from this group, send an email to: [EMAIL PROTECTED] <*> Your use of Yahoo! Groups is subject to: http://docs.yahoo.com/info/terms/
