Interesting...
Spam is unwanted emails - the junk mail of the Internet...

...but how do you find out where it came from?

 

  Here is an example of a phishing email that looks like it came from the HSBC bank...

 

  
 

 
The Message Options should allow you to view the Internet headers of the message...You should see something like this...

 
X-Apparently-To: tom.jones@btinternet.com via 217.146.188.203; Fri, 28 Mar 2008 14:02:40 +0000
X-Originating-IP: [189.26.153.38]
Authentication-Results: mta810.mail.ukl.yahoo.com from=hsbc.com; domainkeys=neutral (no sig)
Received: from 189.26.153.38 (HELO 189.26.153.38.adsl.gvt.net.br) (189.26.153.38)
by mta810.mail.ukl.yahoo.com with SMTP; Fri, 28 Mar 2008 14:02:40 +0000
Received: from [13.229.97.161] (HELO herb.nelvac.com)
by lyricsdownload.com with SMTP id D16304CL6O
for <p.h.temple@btinternet.com>; Fri, 28 Mar 2008 06:02:34 -0800
Received: from plat.free.fr (unknown [128.78.239.179])
by netwisp.com with SMTP id 3EF0Y0OW1M
for <p.h.temple@btinternet.com>; Fri, 28 Mar 2008 10:00:34 -0400
From: "HSBC bank" <generated_notify.id0299695-569503bib@hsbc.com>
To: "P.h.temple" <p.h.temple@btinternet.com>
Subject: Important message! [Fri, 28 Mar 2008 06:02:34 -0800]
XMessage-ID: <7204581342.742.164@corvus56-z2.mung.asdhost.com (EHLO congestion.rupornosex.com [50.160.70.177])>
X-Mailer: Internet Mail Service (5.5.2650.21)
X-Priority: 3 (Normal)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--0Ncbcwybcziq901jIB"
X-Antivirus: avast! (VPS 080328-0, 28/03/2008), Outbound message
X-Antivirus-Status: Clean

 
Find the line that starts X-Originating-IP:

and make a note of the IP address (189.26.153.38)

 
  Now use your Internet browser to go to the web site http://tools.whois.net/whoisbyip/

...and enter the IP address in the search box.

The results of the search should reveal where the email originated...

 

  
  OrgName:    Latin American and Caribbean IP address Regional Registry
OrgID:      LACNIC
Address:    Rambla Republica de Mexico 6125
City:       Montevideo
StateProv: 
PostalCode: 11400
Country:    UY		  
Not exactly the headquarters of the HSBC bank!
 
 

   Back