"Ghosted" e-mail addresses

[obiwonkeyblokey]

Im getting mails addressed from people within microsoft requesting specific info from my company.

These arent normal scam mails, ( pin numbers Credit cards etc) simply someone ghosting e-mail addresses of Steve Balmer and Phil Allen of Microsoft.

I think its an ex-colleague of mine whos trying to just wind me up, is there any way I can trace their true source simply from the mail? Ive tried properties and have had no joy.

thanks

[zumbruk]

You need to look at the full headers, which most mail programs hide from you. I expect there's an option somewto enable them.

There will be a series of headers saying something like;

Received by XXX from ZZZ at {date}

That should lead you back to where they were sent.

Not that that may not help if your ex-colleague is clever enough to use an open relay.

[obiwonkeyblokey]

thats what I was trying to find, but dont know how to open it up from Outlook.

thanks

[tuffer]

Open the mail - View - Options

[obiwonkeyblokey]

Thanks Tuffer - this is what I found - doesnt look like I will be finding anyone out today...

Return-Path: <[e-mail]>
Received: from spruce.phpwebhosting.com (spruce.phpwebhosting.com [69.0.160.214])

[tuffer]

from here

[obiwonkeyblokey]

Found it - cheers - Ive sent opne back to who I believe is the perp.

[jam1et]

Its those sort of services that the net could really do without.