OT: Bad web site

Kenneth Brody kenbrody at spamcop.net
Fri Jan 27 07:43:04 PST 2017


On 1/27/2017 9:50 AM, Fairlight via Filepro-list wrote:
> On Thu, Jan 26, 2017 at 12:14:40PM -0500, Kenneth Brody thus spoke:
>>
>> There's no escaping the Received tracing, but there's no guarantee
>> that the bottom-most entries are real.  A scammer could insert a few
>> fake ones to look like it came from the expected company.  However,
>> if you were to trace the entire Received chain, you would find out
>> otherwise.
>
> How would they do that?
>
> Received: headers are added at the MTA level.  By that time, the message
> has already left the control of the scammer's MUA.
[...]

So how do you explain this line from the post you just quoted?

=====
Received: from ovaloffice (ovaloffice [192.168.1.237])
	by outgoing.whitehouse.gov (Postfix) with ESMTP id E1234567890F
	for <filepro-list at lists.celestial.com>;
	Thu, 26 Jan 2017 12:15:27 -0500
=====

-- 
Kenneth Brody


More information about the Filepro-list mailing list