kolor Posted August 25, 2015 Share Posted August 25, 2015 Hi I have not seen that strange header Delivered-To: xReceived: by 10.107.140.17 with SMTP id o17csp2899163iod; Tue, 25 Aug 2015 05:08:25 -0700 (PDT)X-Received: by 10.180.23.132 with SMTP id m4mr4070217wif.89.1440504505814; Tue, 25 Aug 2015 05:08:25 -0700 (PDT)Return-Path: <admin[at]terrablacknova.com>Received: from relay.nhs.uk (relay.nhs.uk. [62.208.144.128]) by mx.google.com with ESMTPS id kz6si38486837wjc.27.2015.08.25.05.08.25 for <x> (version=TLSv1 cipher=RC4-SHA bits=128/128); Tue, 25 Aug 2015 05:08:25 -0700 (PDT)Received-SPF: neutral (google.com: 62.208.144.128 is neither permitted nor denied by best guess record for domain of admin[at]terrablacknova.com) client-ip=62.208.144.128;Authentication-Results: mx.google.com; spf=neutral (google.com: 62.208.144.128 is neither permitted nor denied by best guess record for domain of admin[at]terrablacknova.com) smtp.mailfrom=admin[at]terrablacknova.comReceived: from nhs-pd1e-esg105.ad1.nhs.net (nhs-pd1e-esg105.ad1.nhs.net [127.0.0.1]) by IMSVA80 (Postfix) with ESMTP id C2344449B0B for <x>; Tue, 25 Aug 2015 13:08:24 +0100 (BST)Received: from ES4000.KGH.NHS.UK (smtp.kgh.nhs.uk [10.200.37.1]) by nhs-pd1e-esg105.ad1.nhs.net (Postfix) with ESMTP id A0F03448DD3 for <x>; Tue, 25 Aug 2015 13:08:24 +0100 (BST)Received: from ES4000.KGH.NHS.UK (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id 763A3B578_5DC5AB8B for <x>; Tue, 25 Aug 2015 12:08:24 +0000 (GMT)Received: from thor.kgh.nhs.uk (thor.kgh.nhs.uk [129.1.183.50]) by ES4000.KGH.NHS.UK (Sophos Email Appliance) with ESMTP id 03581FB7E_5DC5A27F for <x>; Tue, 25 Aug 2015 12:05:56 +0000 (GMT)Received: from exchfrnt.kgh.nhs.uk ([129.1.226.200]) by thor.kgh.nhs.uk with Microsoft SMTPSVC(6.0.3790.3959); Tue, 25 Aug 2015 13:05:56 +0100Received: from [185.56.80.149] ([185.56.80.149]) by exchfrnt.kgh.nhs.uk with Microsoft SMTPSVC(6.0.3790.4675); Tue, 25 Aug 2015 13:05:56 +0100Content-Type: multipart/alternative; boundary="===============2015841298=="MIME-Version: 1.0Subject: August 25 , Added : +600 SMTP IP, +200 RDP WorldWide, +250 cPanels, +100 Fresh CVV & Fullz !!!To: xFrom: "Horux Store" <admin[at]terrablacknova.com>Date: Tue, 25 Aug 2015 20:09:23 -0700OLD-MSG-ID: <EXCHFRNTcB9kX5MG3LL000b0776[at]exchfrnt.kgh.nhs.uk>X-OriginalArrivalTime: 25 Aug 2015 12:05:56.0579 (UTC) FILETIME=[65F50330:01D0DF2E]Message-Id: <2015__________________8DD3[at]nhs-pd1e-esg105.ad1.nhs.net>X-TM-AS-Product-Ver: IMSVA-8.0.0.1495-8.0.0.1202-21768.006X-TM-AS-Result: No--3.835-60-31-10X-imss-scan-details: No--3.835-60-31-10;No--3.835-3-31-10;No--3.835-4-31-10X-TMASE-MatchedRID: xnGAJ48IopjVM5fVjQnZgjzXNFWi6yZNiFi4gm1FcqRdyvHnunOio50J 5I+AH0fDnL67i3Cte2PRtAPsu6l/+C9FtW7XfHue8vjpL4rKEfMOF1R9ltDm28Xt25YNeIUSJLq Link to comment Share on other sites More sharing options...
Dave_L Posted August 25, 2015 Share Posted August 25, 2015 Why is it strange? Link to comment Share on other sites More sharing options...
kolor Posted August 26, 2015 Author Share Posted August 26, 2015 Because include a lot of Received: from Not typical for normal email. Link to comment Share on other sites More sharing options...
Lking Posted August 26, 2015 Share Posted August 26, 2015 I think it is not unusal to have several Received: lines in the header. For example https://www.spamcop.net/sc?id=z6153890441z592bf98dcc50b5d199877c401a493856z contains several Received: lines tracking the path of the email (spam) as it moves between servers. Link to comment Share on other sites More sharing options...
turetzsr Posted August 26, 2015 Share Posted August 26, 2015        See IETF RFC 5321 "Simple Mail Transfer Protocol" (search for "Received:"). Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.