 |
|
There are a number of ways to check if an email is genuinely
from who it says it is. Firstly look at the headers In
outlook you can do this by clicking on the view menu and
options.
For this scam email they look like this. We have marked
the telltale signs in red to make it easier to see what
we mean. Checking the link through is also important [more]
Return-path: <d4main@dns1.deals4.net>
Envelope-to: info@deals4.co.uk
Delivery-date: Fri, 02 Jul 2004 19:07:40 +0100
Received: from d4main by dns1.deals4.net with local-bsmtp
(Exim 4.34)
id 1BgSRi-0005dZ-Pn
for info@deals4.co.uk; Fri, 02 Jul 2004 19:07:38 +0100
Received: from [66.61.117.3]
(helo=woolwich.co.uk) - check that
the IP address is traceable and comes from the right part
of the word [details
on doing this]. This IP address is
in the USA
by dns1.deals4.net with smtp (Exim 4.34)
id 1BgSRd-0005cy-8p
for info@deals4.co.uk; Fri, 02 Jul 2004 19:07:29 +0100
Date: Fri, 02 Jul 2004 17:58:35 +0000
From: Woolwich <support@woolwich.co.uk>
To: Info <info@deals4.co.uk>
References: <D0H95LEGGEDKF4H8@deals4.co.uk>
In-Reply-To: <D0H95LEGGEDKF4H8@deals4.co.uk>
Message-ID: <273J4IC99H2B9KB0@woolwich.co.uk>
Reply-To: Woolwich <support@woolwich.co.uk>
MIME-Version: 1.0
Content-Type: text/html; charset=Windows-1251
Content-Transfer-Encoding: 8bit
X-MailScanner: Found to be clean, Found to be clean
X-Spam-Level: ***
X-Spam-Status: No, hits=3.9 required=5.0 tests=BAYES_44,CLICK_BELOW,
HTML_MESSAGE,MIME_HTML_ONLY,NORMAL_HTTP_TO_IP,RCVD_IN_DYNABLOCK,
RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS autolearn=no
version=2.63
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11)
on dns1.deals4.net
X-MailScanner-Information: Please contact the ISP for
more information
Subject: [Norton AntiSpam] Important information from
Woolwich
X-NAS-Classification: 1
X-NAS-MessageID: 6694
X-NAS-Validation: {EA48D2F9-3D2E-4BCA-B031-07FF6D3E3156}
|
|
