Deciphering an email

Emails are generally organized into three parts: headers, body and attachments. Headers are made up of fields, followed by “:” and their value. For example, for the subject of the message: “Subject: TEST”. The body corresponds to the message text. Attachments, on the other hand, are encoded using the MIME protocol. More and more often, the body is also encapsulated in a MIME protocol so that it can be formatted (in HTML, for example).

Here’s the source code for a simple email message.

Header

Return-Path: <info@altospam.com>
X-Original-To: support@altospam.com
Delivered-To: support@altospam.com
Received: from OKTEY (mail.oktey.com [195 .25.52.136]) by mail.oktey.com with ESMTP id 4660610B18A for <support@altospam.com>; Tue, 2 Sep 2008 12:06:01 +0200 (CEST)
From: “ALTOSPAM” <info@altospam.com>
To: <support@altospam.com>
Subject: TEST
Date: Tue, 2 Sep 2008 12:05:57 +0200
Message-ID: <005701c90ce3$7f662580$7e327080$@com>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary=”—-=_NextPart_000_0058_01C90CF4.42EEF580″
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: AckM436ZKeaM8nstRQeohgDMJXtmCw==
Content-Language: en

Body

TEST

TEST

Attachments

——=_NextPart_000_0058_01C90CF4.42EEF580
Content-Type: image/gif; name=”point.gif”
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=”point.gif”

R0lGODdhAgACAIgAADNm/wAAACwAAAAAAgACAAACAoRRADs=

——=_NextPart_000_0058_01C90CF4.42EEF580–

Test Altospam’s solutions!

Thousands of companies, CTOs, CIOs, CISOs and IT managers already trust us to protect their e-mail against phishing, spear phishing, ransomware, …