On Wed, 28 Nov 2018 at 01:57, Rick Gutierrez <xserverli...@gmail.com> wrote:
> El mar., 27 nov. 2018 a las 16:22, David Jones (<djo...@ena.com>) > escribió: > > > > > Can you send a copy of the original email lightly redacted via pastebin > > so I can run it through my filters to give some pointers? > > > > -- > > David Jones > > Hi David , the email is very simple, but I attach it in the following link > > https://pastebin.com/cYaLibt1 > > and the trace for a better reading > > https://pastebin.com/8vpVejPc > > the name of one of my users is Ariana Molina and the valid mail of > another of my users is lvasquez. > So the real user's name and email (Ariana Molina mol...@domain.com) occurs only in the body of the email, and not anywhere in the headers, nor in the SMTP transaction? I think this is hard to catch because a real user's name and email may legitimately be found in the body of an email from another user.