need assignment 600 words
Information Systems Security3
1.Collect the e-mails and view the e-mail header information in your e-mail program.
Spam refers to unsolicited email you don’t want. The most obvious examples of spam are unsolicited commercial emails, such as ads for porn, drugs, or body enhancement products.
There are two significant qualifications to spam:
You didn’t ask for it. An email that offers college degrees or cheaper mortgages from a person or a business that you’ve never communicated with would probably qualify as spam.
You don’t want it. When you receive it, you’re likely to delete it unread based on the subject line.
Spam is tricky. Some email programs and services automatically filter spam based on common key words, the number of people the message is being sent to, or the sender’s reputation. Some also allow you to flag messages as spam.
Unfortunately, any email that people don’t want runs the risk of being marked as spam. If an email newsletter that you signed up for changes its focus into something you don’t want, it might legitimately be considered spam.
X-Original Arrival Time: is the time the message was submitted to Hotmail … in other words, the time I pressed “Send”. Headers that begin with “X-” are “nonstandard”, and may not be used by all mailers. They’re often just informational. Note also the date and time: 13 May 2005 21:33:53.0097 (UTC). The “(UTC)” means that the time is recorded as “Universal Time Coordinated”, sometimes thought of as Greenwich Mean Time or GMT. Since I’m in the Pacific time zone, and daylight savings time is in effect, that means I sent it at roughly 2:33 PM PDT.
Content-Type: is how the mailers tell each other what the format of the mail is: plain text, as this example is, or HTML, or something else.
Mime-Version: “Mime” stands for Multipurpose Internet Mail Extensions, and is the formatting protocol most often used to encode attachments and alternate representations in a single email.
Date: This is the more common place you’ll find the date and time that the message was sent. This is added by the sending mailer, and is commonly used by your email client as the “Sent Date”. Note that the time zone is specified as local time (2:33 PM) and an offset (-7 hours) from UTC. PDT is 7 hours behind UTC as I write this. Subtract the offset (and remember that subtracting a negative offset means to add it), and you’ll get the equivalent 21:33 UTC.
Subject: As you’d expect, the subject of the email as you typed it.
Bcc: To be honest, I’m not sure why Hotmail includes this here, as they strip out any BCC’d recipients. BCC is
supposed to be stripped from email completely before it is sent.
To: Again, as you’d expect, the list of recipient email addresses that this message is addressed to. What most people don’t realize is that the To: line doesn’t define who the email actually goes to, but rather simply lists who the mailer claims it’s to go to. A virus, for example, can easily create a mail message that has bogus addresses in the To: line, and then send the mail to someone else entirely. That’s known as “spoofing”.
From: Just like To:, the “From:” address shows you from whom the mail was supposedly sent. And also like “To:”, it’s very easy for the spammers and virus writers to spoof the From: address to be pretty much anything they want.
X-Sender: is another representation of the address the email originated from, but like all “X-” headers, is optional and not universally used or recognized. “X-Sender”, and the similar “Sender:” are supposed to indicate the sender of the email, which might be an intermediary. For example, if you send mail to a mailing list, the mail might be “From:” you, but the mailing list software might be the “Sender:” to everyone else who receives it.
X-Originating-Email: another representation of the sender of the email. Some mailers add this as a precaution against those who spoof the “From:” line.
X-Originating-IP: The IP address of the computer on which the email originated. Once again, an optional and informational “X-” header. In this case, the IP address is one of Hotmail’s servers.
Received: Herein lies the gold. I’ll get into more detail on that below.
Deliver-To: is added by the receiving mail server when it finally delivers the email to a specific email alias or mailbox. In my case, I have my mailer configured to deliver my mail to two separate mailboxes: one with, and one without, spam filtering.
Original Message
|
Message ID |
<[email protected]> |
|
Created at: |
Tue, Aug 15, 2017 at 8:29 AM (Delivered after 1 seconds) |
|
From: |
Twitter <[email protected]> |
|
To: |
"t .pradeepreddy" <[email protected]> |
|
Subject: |
سعدمحمد Tweeted: لاتناقشنيفيشخصانتتشوفهبعينكوانااشوفهبقلبي ،،،،💞 |
|
SPF: |
PASS with IP 199.59.150.91 Learn more |
|
DKIM: |
PASS with domain twitter.com Learn more |
|
DMARC: |
Delivered-To: [email protected]
Received: by 10.100.134.15 with SMTP id j15csp2941193pjj;
Tue, 15 Aug 2017 05:29:14 -0700 (PDT)
2. Find the “Received:” field in the headers and write down as many DNS names or IP addresses as you can. Also, look for common details in the header elements of the different messages, such as the same e-mail servers and spammers.
Delivered-To: [email protected]
[199.59.150.91])
by postoffice.prismnet.com (8.13.4/8.13.3) with ESMTP id
j9MMXLnh051636 for address hidden;
Sat, 22 Oct 2005 17:33:21 -0500 (CDT)
(envelope-from address hidden)
Received: from -1214250648 ([210.116.242.207])
by defender.io.com (8.13.4/8.13.3) with SMTP id j9MMWT4q007152
for address hidden; Sat, 22 Oct 2005 17:33:19 -0500 (CDT)
(envelope-from address hidden)
Received: from mcimail.com (-1215863112 [-1215979528])
by derechoshumanos.com (Qmailv1) with ESMTP id 678940028C
for address hidden; Sat, 22 Oct 2005 18:33:45 -0400.