I got so stressed, that I didn't check the header...
Fake mail:
Received: from smtp102.biz.mail.mud.yahoo.com (smtp102.biz.mail.mud.yahoo.com [68.142.200.237])
by decna.com (8.13.4/8.13.4/Debian-3) with SMTP id j94I0bTq028539
for <MYADRESS@OBSCURED.COM>; Tue, 4 Oct 2005 20:00:38 +0200
Message-Id: <200510041800.j94I0bTq028539@decna.com>
Received: (qmail 18992 invoked from network); 4 Oct 2005 18:00:29 -0000
Received: from unknown (HELO User) (a10@notfounderor.com@64.1.203.50 with login)
by smtp102.biz.mail.mud.yahoo.com with SMTP; 4 Oct 2005 18:00:28 -0000
Real header from PayPal:
Received: from outbound1.den.paypal.com (outbound1.den.paypal.com [216.113.188.96])
by decna.com (8.13.4/8.13.4/Debian-3) with ESMTP id j94IcxFd032697
for <harald@geving.no>; Tue, 4 Oct 2005 20:38:59 +0200
Received: from denweb181.den.paypal.com (denweb181.den.paypal.com [10.191.12.229])
by outbound1.den.paypal.com (Postfix) with SMTP id 3476A5B84DE
for <MYMAIL@OBSCURED.COM>; Tue, 4 Oct 2005 11:38:51 -0700 (PDT)
Received: (qmail 4210 invoked by uid 99); 4 Oct 2005 18:38:51 -0000 |