[kwlug-disc] Trace spam email back to source

[Yas Adem]

Oh... i missed that thanks Khalid i will  keep that in mind for future... i
just contacted my friend and he told me one of his old friend sent $300
dollars to scammers. There may be many other people who did the same... So
sad.

Regard
Yasin

On Tue, Jun 30, 2020, 12:06 PM Khalid Baheyeldin, <kb at 2bits.com> wrote:

> It was better if you removed your friend's name and email account from the
> headers, for privacy reasons.
>
> The only email address in the headers is 74.6.132.219, and says ....
> mail.bf2.yahoo.com
>
> Whois shows that this email address is indeed owned by Oath which owns
> Yahoo now
> https://www.whois.com/whois/74.6.132.219
>
> At some point Rogers were using Yahoo Mail, and maybe that is still the
> case.
>
> There is a Reply-To address which is Gmail. Not sure if that is indeed
> your friend's other email address, or something a hacker created just to
> get the reply back.
>
> So it is inconclusive as to whether your friend's Rogers account was
> hacked or not.
> You should call him and let him know, so that he checks at his end.
>
> _______________________________________________
> kwlug-disc mailing list
> kwlug-disc at kwlug.org
> https://kwlug.org/mailman/listinfo/kwlug-disc_kwlug.org
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://kwlug.org/pipermail/kwlug-disc_kwlug.org/attachments/20200630/f37a42d2/attachment.htm>