Пришёл мне довольно забавный спам, типа мы знаем твой пароль от гугл-аккаунта (и действительно, такой пароль у меня стоял лет 5 назад).
Интересно стало, кто отправитель, ибо поле From подменен на мою же почту.
Собственно вопрос, как узнать ящик отправителя?
Код письма:
Delivered-To: мояпочта@gmail.com
Received: by 2002:aca:4284:0:0:0:0:0 with SMTP id p126-v6csp4102017oia;
Tue, 23 Oct 2018 10:38:40 -0700 (PDT)
X-Google-Smtp-Source: AJhET5fgNXbh/Fc3vUJ6Fc0yhNNUOnvLXY6/FAclk19kdYy2/GxTp7zIApXSwMOTxV2oxUDN+6L4
X-Received: by 2002:a17:902:6b88:: with SMTP id p8-v6mr4650941plk.19.1540316320106;
Tue, 23 Oct 2018 10:38:40 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1540316320; cv=none;
d=google.com; s=arc-20160816;
b=UTlgUB6c3q7QYfuXt1dnIgVJyRIymrO9ZdJSZfAWUXfgvYue/JYYpNk8wIPmoivW8m
p/zzFcOETPbED/efYJ1W20xGGtcQ8pvqpsvg1qVKGEXTBiq+mhleETo6RD574DWlYYCs
8KL6DVcPYXF5HuiegEAMqjjjOBzYahES1DY/Il1lKpBh1pz7I/fa9bQHsnNmN3deHLo3
W68e0XxDs+jAiJnwv4D7eNWNS84tg9BNJQu+OYc8whiaBEdsIF2TE3J7ftNEoMLNLePj
6DX+UUXS1EbJk3gnlKuydCBbL++0bnA1N7uGiCLp2PCK7YJ7QgcVCu1aA04h9WxCjUQi
6RqA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-transfer-encoding:mime-version:date:subject:to:from
:message-id;
bh=oDE8oWmVz96do6BVWg/8GowGlhKZcY5LQ0D2JkSyT88=;
b=NJMBw1d+4VKggjxL7MRblP3G0IJERXEdDAlJYXIQibeHig830DgUsjzUbUaQJHiD5y
XpLfNoXVYaPIi4Mv3kZAi/C/wVgdvy2FyVnG6B9J/9WCXe0IO1nAprS4gqLg9QZhC5Rv
cK/TlE5Jw42s17UkfCqtBUKN3rXjOpJrD2uB9Grnltskj7os0M6Xjwl++++vRUMvarRP
xWBGd4seWPZrvLA7hTD1BB3RSUzBw7Ms2K8/2h9REsk4W6C/t8eOkxdf9A3oHuKcaNSy
ST+9YJAhMibtQYFrRksOcuSjag0bt87hgjiid43znaKWi8vilIiokDt9ph0V61NLmF+S
wH6Q==
ARC-Authentication-Results: i=1; mx.google.com;
spf=softfail (google.com: domain of transitioning мояпочта@gmail.com does not designate 5.186.121.200 as permitted sender) smtp.mailfrom=мояпочта@gmail.com;
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Return-Path: <мояпочта@gmail.com>
Received: from dhcp-5-186-121-200.cgn.ip.fibianet.dk (dhcp-5-186-121-200.cgn.ip.fibianet.dk. [5.186.121.200])
by mx.google.com with ESMTP id r13-v6si1886580pgb.355.2018.10.23.10.38.38
for <мояпочта@gmail.com>;
Tue, 23 Oct 2018 10:38:40 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning мояпочта@gmail.com does not designate 5.186.121.200 as permitted sender) client-ip=5.186.121.200;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning мояпочта@gmail.com does not designate 5.186.121.200 as permitted sender) smtp.mailfrom=мояпочта@gmail.com;
dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=gmail.com
Message-ID: <5F134BEF8C07B768643C98FB70C05F13@K3W6880IS0>
From: <мояпочта@gmail.com>
To: "мойпароль" <мояпочта@gmail.com>
Subject: password (мойпароль) for мояпочта@gmail.com is compromised
Date: 22 Oct 2018 20:24:29 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="ibm852"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5270
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5270
Простой
Сложный
