Learn to spot phishing and understand email authentication

This is for IT and End users.

The first part will be deep explanation then at the end is a summed up version in simple form for everyone to understand.

Step 1:

Gmail: Open the email > click the three dots (top right) > Show original

double click for better view

image.png

take note of the domain @carrd.com and mailed-by amazonses-us-east-1.carrd.com

image.png

The Show Original

you will see a wall of text what we’re mainly looking for is the “Return-path”

to filter with a browser press Ctrl+F and type return-path

image.png

For example we see:

Return-Path: <0100019dd7675bb8-19adb7ce-d5c5-4115-b408-19e0062004ca-000000**@amazonses-us-east-1.carrd.com>**

As you can see @amazonses-us-east-1.carrd.com matches with the “Mailed-by” in the email dropdown of the first picture.

image.png

This should match. if it doesn’t its suspicious