tu nagłówek wiadomości, która do mnie dochodzi. Oba adresy mailowe są podmienione, w oryginalnej wiadomości oba są moje :p
Received: from fmx35.pf.interia.pl (fmx35.pf.interia.pl [127.0.0.1])
by fmx35.pf.interia.pl (INTERIA.PL) with ESMTP id 5F16A300036
for <[email protected]>; Thu, 7 Apr 2016 04:52:33 +0200 (CEST)
X-Envelope-From: <[email protected]>
Received: from trickphotography.biz (unknown [104.129.249.21])
by fmx35.pf.interia.pl (INTERIA.PL) with ESMTP
for <[email protected]>; Thu, 7 Apr 2016 04:52:32 +0200 (CEST)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail; d=trickphotography.biz;
h=From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; [email protected];
bh=flYFH++6yZ56wgWfkGeQ+QlWdtM=;
b=uqLFpf3/dsBqO6ukHzY3IHxvCy6d0Uap59/Qev3LMNwPxBJIQAEp8DbBqRuItGRjGxdSYDNRpTS6
zeXg14Wqbn1BaPLVXobXELtdhaLg2E+cSmJhje7jJH5oKTni+7Jq664xJwtzB2noetcl0kwT9eQu
VZGSqdp8/yPIuiFdoDQ=
Received: from gmail.com (178.19.107.61) by trickphotography.biz id hep8nc0001g4 for <[email protected]>; Mon, 3 Aug 2009 06:54:45 +0400 (envelope-from <[email protected]>)
From: [email protected]
To: [email protected]
Subject: Don't Believe All the Hype...
Date: 06 Apr 2016 19:52:20 -0700
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Interia-Antivirus: OK
X-IPL-WLO-Learned: Yes
X-IPL-WLO: WLO14830893145799780
X-IPL-Envelope-To: [email protected]
X-Antivirus: avast! (VPS 160406-1, 2016-04-06), Inbound message
X-Antivirus-Status: Clean
w efekcie jako nadawca jest [email protected] a odbiorca [email protected] jednak można w nagłówku wyłapać prawdziwy adres nadawcy