Всем привет! Я конечно понимаю, что пишу не в тему, но зная что здесь собираются мега умы, хочу задать вопрос: ведётся email переписка с неизвестным до селе человеком, дабы установить действитейно-ли этот человек является тем за кого себя выдаёт, а не обычной кидалой, для начала хочется проанализировать технический заголовок писем. Сообственно вопрос вот в чем: нет-ли ничего подозрительного в этих заголовках?
1.
################
From south1africa2010@gala.net Mon Aug 02 11:36:32 2010
Return-path: <south1africa2010@gala.net>
Received: from [98.137.26.79] (port=33279 helo=n6-
vm0.bullet.mail.gq1.yahoo.com)
by mx106.mail.ru with esmtp
id 1OfpZX-0005yt-00
for sergey144010@mail.ru; Mon, 02 Aug 2010 11:36:31 +0400
Received-SPF: softfail (mx106.mail.ru: transitioning domain of gala.net does not designate 98.137.26.79 as permitted sender) client-ip=98.137.26.79; envelope-from=south1africa2010@gala.net; helo=n6-vm0.bullet.mail.gq1.yahoo.com;
X-Mru-BL: 0:4:0
X-Mru-PTR: n6-vm0.bullet.mail.gq1.yahoo.com
X-Mru-NR: 1
X-Mru-OF: unknown (ethernet/modem)
X-Mru-RC: US
Received: from [67.195.9.83] by n6.bullet.mail.gq1.yahoo.com with
NNFMP; 02 Aug 2010 07:36:24 -0000
Received: from [98.137.27.218] by t3.bullet.mail.gq1.yahoo.com with
NNFMP; 02 Aug 2010 07:36:24 -0000
Received: from [127.0.0.1] by omp128.mail.gq1.yahoo.com with NNFMP; 02
Aug 2010 07:36:24 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 657768.88655.bm@omp128.mail.gq1.yahoo.com
Received: (qmail 94176 invoked by uid 60001); 2 Aug 2010 07:36:24 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1280734583;
bh=Rul/dXKulqM2ueD5vAGTkDb9KN7gqTIyVVCRf3hstDI=; h=Message-ID:X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=ItcAP340qWvpk/ezATykHfC8m2qizXli+imMyACv5fGaeP5LTScyk8kkBLToRkNen8kc7l1xX8B3zyIU5Y8FvfIJIoq8D6e87f2I/6lqP4tSQBQ4pAfrmbZ8c7IwpnA8dmwcpo8RXcYb5Xz3ASgoZZqbmUzVUnaeZ1qvNolZq/E=
Message-ID: <869880.87144.qm@web180306.mail.gq1.yahoo.com>
X-YMail-OSG: jf2pAzIVM1lD6EQtR6ccuh8ErWmTRA7E9OXBaj.yl2rW9fE
AeXsQR3AFlK4.RdN6Aub34jXxeYptqjJXRbqVWuJXK61bHT2gWDy9WtO5bxi
oeR0iskTEuVxS36jk9jbHCFFc6u2PnHpYzkuoCIOUZdlvlAPN05RNrvYllg_
QaxIk9cGM_0Kp212M3FL6VN0uWlpS5slWpnZ6XZtgjQmhHfi63.ffdYrwhlb
_87w.vktXwdE43cVWfA3sRl4.P1y0NIPZJXGJx_0tMsp2XnbiaB4SiUk2gOJ
uyC0wE..GMRgtaHzp2ywjhwgcEk4yiancrYCZggYfMB3AGgp0JPXaIMokJNg
UC9QN8tn274xttf.ogM7fnuPT5HC4sKyBycDwAs12108kxOsPyWKw5TUOKfL
nz.2L2no4ff53__zRn4LHiRI9sF5BCu._2H7aardR7ckO1LxMujLd5Af3PDP
Q3r6AEwxZCVyH2uwrfE17ZohBqkgy_9qqPd3csob30K9sTH3w8rUckqcO.j4
SsWV.64QrcygcRU8P9EjDJgMB7Ag.3qR7rlYZBbDb5O7VqiJsTSDKR.jKn1.
YA332ebDHwJ7_hvXTA72Ad6Rp0zjHRFr6fkUZohn.BuhMIFRXyHc-
Received: from [41.245.25.51] by web180306.mail.gq1.yahoo.com via
HTTP; Mon, 02 Aug 2010 00:36:23 PDT
X-RocketYMMF: webi_1@att.net
X-Mailer: YahooMailClassic/11.2.4 YahooMailWebService/0.8.105.279950
Date: Mon, 2 Aug 2010 00:36:23 -0700 (PDT)
From: South Africa 2010 <south1africa2010@gala.net>
Reply-To: south1africa2010@gala.net
Subject: 2010 WORLDCUP LOCAL ORGANIZING COMMITEE
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="0-2073856387-1280734583=:87144"
X-Spam: Not detected
X-Mras: Ok
#####################
2.
#####################
From philipppfelix2010@gala.net Tue Aug 03 20:23:44 2010
Return-path: <philipppfelix2010@gala.net>
Received: from [209.85.212.170] (port=57195 helo=mail-px0-f170.google.com)
by mx11.mail.ru with esmtp
id 1OgKHH-000IaA-00
for sergey144010@mail.ru; Tue, 03 Aug 2010 20:23:43 +0400
Received-SPF: pass (mx11.mail.ru: domain of gala.net designates 209.85.212.170 as permitted sender) client-ip=209.85.212.170; envelope-from=philipppfelix2010@gala.net; helo=mail-px0-f170.google.com;
X-Mru-BL: 0:4:0
X-Mru-PTR: mail-px0-f170.google.com
X-Mru-NR: 1
X-Mru-OF: Linux ((Google 2))
X-Mru-RC: US
Received: by pxi6 with SMTP id 6so1820349pxi.1
for <sergey144010@mail.ru>; Tue, 03 Aug 2010 09:23:37 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.142.147.7 with SMTP id u7mr6783196wfd.218.1280852616535; Tue,
03 Aug 2010 09:23:36 -0700 (PDT)
Received: by 10.231.143.77 with HTTP; Tue, 3 Aug 2010 09:23:34 -0700 (PDT)
X-Originating-IP: [196.215.77.6]
Date: Tue, 3 Aug 2010 09:23:34 -0700
Message-ID: <AANLkTikC07nvU1=C+gdLK+LGVtCSOq8PWPUPSX7_vwRH@mail.gmail.com>
Subject: Attach is your winning certificate/insurance,congratulations
From: South Africa 2010 <philipppfelix2010@gala.net>
To: sergey144010@mail.ru
Content-Type: multipart/mixed; boundary=000e0cd2281e380d32048cedbd37
X-Spam: Not detected
X-Mras: Ok
#####################
