|
|
起因为:http://www.5798.com/thread-20008-1-1.html
此贴中诸位兄弟居然不知道邮件也能跟踪来路。
好吧,跟我走,教你看邮件来路
因为我的hotmail更改为了outlook的界面,所以一切以我看到的为准进行解说。还有5798上传图片扣金币,我就不传截图了{:soso_e109:} 大家凑合着看吧
首先打开你的hotmail,随便找封邮件打开。
点击右侧的“操作”,在弹出的菜单中点击“查看邮件来源”
这时会弹出个新的窗口
内容大概如下:- x-store-info:J++/JTCzmObr++wNraA4Pa4f5Xd6uensWQjutc4PB1BVpEyhq0+7T5C7SHf8dh86cVbtf2cFxizgaHN0HMGNbiIJPYeEscSBhuVAADYBYYhRTNioWvLZliab4oaj6sl54Xl2o/AtWwI=
- Authentication-Results: hotmail.com; spf=pass (sender IP is 65.55.52.250; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=billing@microsoft.com; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=microsoft.com; x-hmca=pass
- X-SID-PRA: billing@microsoft.com
- X-AUTH-Result: PASS
- X-SID-Result: PASS
- X-Message-Status: n:n
- X-Message-Delivery: Vj0xLjE7dXM9MDtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0w
- X-Message-Info: iIOHNJf19ljHGaTN8CSarc1v5hiyZ41MGGK9xYYOMPd9JYtZ/Jk7cFCPNUutEQkv7e5vxnlRilp7A0rMvkNDFGrrMdfCasDBywxYldFahx6Melev2m1/AdNSSEsghm9EuT6GkSVyJ+uULL5Pc2z6/7V8wff3LAmV
- Received: from smtpi.msn.com ([65.55.52.250]) by BAY0-MC3-F6.Bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
- Mon, 4 Feb 2013 17:20:10 -0800
- MIME-Version: 1.0
- From: Windows Azure Platform <billing@microsoft.com>
- To: <*****@live.com>
- Date: Mon, 4 Feb 2013 17:20:09 -0800
- Subject: Your Microsoft Online Services statement is ready
- Content-Type: multipart/related;
- boundary="--boundary_5869624_b79b2b8a-0aaf-4e13-b740-95d3f2aba59d";
- type="text/html"
- Return-Path: billing@microsoft.com
- Message-ID: <CO1MPOPSMTPR01QqfdR005a0cbe@CO1MPOPSMTPR01.phx.gbl>
- X-OriginalArrivalTime: 05 Feb 2013 01:20:09.0947 (UTC) FILETIME=[F094EAB0:01CE033E]
- ----boundary_5869624_b79b2b8a-0aaf-4e13-b740-95d3f2aba59d
- Content-Type: text/html; charset="utf-8"
- Content-Transfer-Encoding: quoted-printable
复制代码 这段中的内容包括了发送邮件的服务器,以及发送人的ip,发送时间,接收人,主题,内容,等等东西。相信会伪造主机头发送钓鱼邮件的同志都知道这个东东。
其中的:- Authentication-Results: hotmail.com; spf=pass (sender IP is 65.55.52.250; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=billing@microsoft.com; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=microsoft.com; x-hmca=pass
复制代码 这段中的 sender IP就是发送者的ip 而通过http://geoip.flagfox.net/或者http://bgp.he.net查询ip就知道你是哪里地方的了。so。。。。
另外,所有的邮件基本都可以看到这些东西,至于具体该怎么看我就不说了,我们是emuer,不是am,所以发送邮件的时候一定要注意隐藏真实来路,避免被am看到不该看到的东西
|
评分
-
5
查看全部评分
-
|