OT: Bad web site
Kenneth Brody
kenbrody at spamcop.net
Fri Jan 27 07:43:04 PST 2017
On 1/27/2017 9:50 AM, Fairlight via Filepro-list wrote:
> On Thu, Jan 26, 2017 at 12:14:40PM -0500, Kenneth Brody thus spoke:
>>
>> There's no escaping the Received tracing, but there's no guarantee
>> that the bottom-most entries are real. A scammer could insert a few
>> fake ones to look like it came from the expected company. However,
>> if you were to trace the entire Received chain, you would find out
>> otherwise.
>
> How would they do that?
>
> Received: headers are added at the MTA level. By that time, the message
> has already left the control of the scammer's MUA.
[...]
So how do you explain this line from the post you just quoted?
=====
Received: from ovaloffice (ovaloffice [192.168.1.237])
by outgoing.whitehouse.gov (Postfix) with ESMTP id E1234567890F
for <filepro-list at lists.celestial.com>;
Thu, 26 Jan 2017 12:15:27 -0500
=====
--
Kenneth Brody
More information about the Filepro-list
mailing list