Geek Answers Handbook

What does the X-Sender-Id identifier mean in the original email source (found in phishing email)?

Someone in my company is phishing. My first suggestion was only to change the password. However, after a while I again received fake mail from her address.

Looking at the original email address, I found that another person's email is in the X-Sender-ID, and I wonder who it might be. Is this the one who sent the email, or maybe the account that was captured? (I replaced the letter with " somebody@host.com ")

X-Virus-Scanned: OK
Received: by smtp5.relay.iad3a.emailsrvr.com (Authenticated sender: somebody-AT-host.com) with ESMTPA id DF2788019C;
    Fri, 21 Nov 2014 07:54:42 -0500 (EST)
X-Sender-Id: somebody@host.com
Received: from smtp.emailsrvr.com ([UNAVAILABLE]. [2.133.148.211])
    by 0.0.0.0:587 (trex/5.3.2);
    Fri, 21 Nov 2014 12:54:46 GMT

What is an X-Sender-ID? And what is his email?

+4
3

this RFC, , .

X-Sender-ID:

[...] ,    , ,     IK.

?

, , . , , somebody@host.com . , ​​ .

, - , , ..... / .

, .

+5

@LMF - , .

, ( PHP - ), , . , -, , , - .

, , , Received: .

, - trex ( ?), Received: , . Sendmail , ( , ad-hoc ).

, , ( ), .

0

x-sender-id, x-recipient-id , .

X-Sender-ID entity_id : issuing_authority : version
X-Recipient-ID entity_id : issuing_authority : version

  • . , user@host, - .

  • , .

  • , . - , , . , , .

If the field values ​​of the x-sender-idsecond and third fields are identical to the field values x-recipient-id, they can be specified only in the field that is defined by the latter.

additional literature

0
source

More articles:


All Articles