Technology How to catch a phisher 101

[H.E. Pennypacker]

Go through the following and determine why the following email is a phish. Note: This is from a real email I received. Being able to determine which emails are "fake" is really to your advantage. You'll be able to save yourself a lot of headache.

I became suspicious of this email, and thought...hmm, let me check the origins.

X-Gmail-Received: d9d83fd3f2a6b940f1d4e15ad6c146ccce666e60
Delivered-To: [my email address]
Received: by 10.36.82.7 with SMTP id f7cs65026nzb;
Sat, 18 Jun 2005 20:07:03 -0700 (PDT)
Received: by 10.54.145.8 with SMTP id s8mr290463wrd;
Sat, 18 Jun 2005 20:07:03 -0700 (PDT)
Return-Path: <fishee@server1.twofishmedia.com>
Received: from server1.twofishmedia.com (server1.twofishmedia.com [66.135.34.21])
by mx.gmail.com with ESMTP id 24si5270061wrl.2005.06.18.20.07.03;
Sat, 18 Jun 2005 20:07:03 -0700 (PDT)
Received-SPF: pass (gmail.com: best guess record for domain of fishee@server1.twofishmedia.com designates 66.135.34.21 as permitted sender)
Received: from server1.twofishmedia.com (fishee@localhost [127.0.0.1])
by server1.twofishmedia.com (8.12.3/8.12.3/Debian-7.1) with ESMTP id j5J3CvCH002606
(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO)
for <my email address>; Sun, 19 Jun 2005 03:12:57 GMT
Received: (from fishee@localhost)
by server1.twofishmedia.com (8.12.3/8.12.3/Debian-7.1) id j5J3Cvhe002604
for [my email address] Sun, 19 Jun 2005 03:12:57 GMT
Date: Sun, 19 Jun 2005 03:12:57 GMT
Message-Id: <200506190312.j5J3Cvhe002604@server1.twofishmedia.com>
From: "CareerBuilder.com"<careerbuilder1954@1954careerbuilder.com>
Subject: SECURITY CHECK FOR: [my email address]
Mime-Version: 1.0
Content-Type: text/html;
To: undisclosed-recipients:;

<div align=center>http://saturn.as-hosting.com/%7Ecareerx/careerbuilder.com/top.jpg
<table width="602" border="0" cellspacing="0" cellpadding="0">
<tr bgcolor="#FFFFFF">
<td width="30">http://mail.yahoo.com/config/login?/images/spacer.gif
<td width="512">
<table width="100%">
<tr>

<td valign="top" bgcolor="#ffcc66"> Email: [my email address]
</b>
<td valign=center><img height="10">
src="http://www.careerbuilder.com/images/pixel.gif" width=1><br>
</td>
</tr>
</table>

</td>

<td width=30>

width=30></td>
</tr>
</table>

<a target="_blank" href="http://saturn.as-hosting.com/~careerx/careerbuilder.com/Login.aspx94553STXnext=sign_inpass=1.htm">
<img src="http://saturn.as-hosting.com/~careerx/careerbuilder.com/bottom.jpg" border="0">