Jump to content

Forgery?


Radek41

Recommended Posts

Hi,

I wanted to report an email with the following headers:

Return-Path: <simpletrade[at]worldwidexpresltd.com>
Received: by tlen.pl (tlen.pl mailsystem) with LMTP;
	Tue, 18 Jun 2013 14:05:59 +0200
Received: from worldwidexpresltd.com [94.23.71.2]
	by mx7.go2.pl with ESMTP id Yfvzln;
	Tue, 18 Jun 2013 14:05:59 +0200
Received-SPF: pass (mx7.go2.pl: domain of simpletrade[at]worldwidexpresltd.com
	designates 94.23.71.2 as permitted sender)
Received: from 91.121.109.197 (localhost [127.0.0.1])
	by worldwidexpres.com (Postfix) with ESMTPA id BCA54292A8
	for <CENSORED>; Tue, 18 Jun 2013 14:08:40 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
	d=worldwidexpresltd.com; s=default; t=1371557320;
	bh=mJSBVjNwAF90YMv1ieGoV4c5YDwOElyuF3lyJxSdqNM=;
	h=Date:To:From:Reply-To:Subject;
	b=Bx6ag5UsekC9F8jLusqYztsp8tvMvcJOosSullz54XyEjHoBwsjeTiIJz58UsW/vQ
	 bsZK+9QKm13qQAYngQjHHxvrmWS5w0aZVUS/dD9Ftlu5hXU6YVT7z98EAj2a22kdT3
	 KHcLV++vmpHZy0vkGn6XHUUcohfdBspWECgT1Dyc=
Date: Tue, 18 Jun 2013 14:10:08 +0200
To: CENSORED
From: SimpleTrade <simpletrade[at]worldwidexpresltd.com>
Reply-To: remove[at]worldwidexpresltd.com
Subject: =?UTF-8?B?RG93aWVkeiBzacSZIGphayB6YXJvYmnEhyA4NSUga2HFvGRlZ28gZG5pYSBwcnpld2lkdWrEhWMgamVkeW5pZSBraWVydW5layB6bWlhbnkgY2VueSBuYSByeW5rdQ==?=
Message-ID: <999c13e6b2874471dfcfd567c678fafd[at]91.121.109.197>
X-Priority: 3
X-Mailer: Microsoft Outlook 14.0
X-ID: 23-234674
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="b1_999c13e6b2874471dfcfd567c678fafd"
X-O2-Trust: 3, 47
X-O2-SPF: pass

But unfortunately, the system says "Looks like a forgery. No source IP address found, cannot proceed." whereas the source IP is clearly visible.

I suspect it's the problem with parsing this type of headers, so I'm asking SpamCop admins to resolve this issue.

Thanks.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...