PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : Entschlüsseln?



no_dammagE
12.07.2002, 17:24
07/12/02 xx:xx:xx Input
The Received: headers are the important ones to read

My comments are just hints, and should be considered only
an opinion. I may have guessed wrong, or things may have
changed since I was written

Return-Path:
<owner-nolist-INFO4YOU-020711E**XXXXXXX**GMX*-poor [at] spamvictim.tld>
X-Flags: 0000
Delivered-To: GMX delivery to poor [at] spamvictim.tld
Received: (qmail 7181 invoked by UID: [UID filtered]
xx:xx:xx -0000
This received header was added by your mailserver
Just a qmail status line

Received: from unknown (HELO LSV-003.cynergen.net)
(66.236.249.71) by mx0.gmx.net (mx013-rz3) with SMTP; 12
Jul 2002 xx:xx:xx -0000
mx0.gmx.net received this from someone claiming
to be unknown
(mx0.gmx.net doesn`t record the senders IP
address in any way I recognise, so it`s impossible to be
sure. All received headers after this one should be
treated with suspicion)


Received: from lsv-002 (66.236.249.66:24693) by
LSV-003.cynergen.net (LSMTP for Windows NT v1.1b) with SMTP
ID: [ID filtered]
xx:xx:xx -0400
LSV-003.cynergen.net received this from someone claiming
to be lsv-002
(LSV-003.cynergen.net doesn`t record the senders IP
address in any way I recognise, so it`s impossible to be
sure. All received headers after this one should be
treated with suspicion)


To: <poor [at] spamvictim.tld>
Message-ID: [ID filtered]
Date: Fri, 12 Jul 2002 xx:xx:xx -0400 (EDT)
From: Car Loan <CarLoan [at] cdxservices.com>
Subject: Easy Auto Loan approval...
Mime-Version: 1.0
Content-Type: multipart/related;
boundary="----=_Part_14_1726926.1026473754281"

ich hab n Proggi runtergeladen ( Spade ), soll die Headers auswerten können

sagt bitte, ob diese Auswertung mich irgendwie weiter bringt ...

axo, ich habe ne Mail an den Host geschickt (nicht die Spam mail)

der Host sieht gar nicht sooo spammig aus

daWizard
12.07.2002, 18:19
für mich sehen die header ziemlich konsistent aus... ich würde also sagen, die mail kommt wirklich von dem "LSV-002.CYNERGEN.NET"-Absender...


daWizard
(frags: http://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gif http://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gif http://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gif http://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gifhttp://img.homepagemodules.de/death.gif)

no_dammagE
12.07.2002, 22:29
war auf www..CYNERGEN.NET

da gibts n Link zu Spam: einen Spamabsender anmelden

mal testen ...
[ ~ FragZ: noch keine, aber bin schon dabei ~ ]