To determine whether a sender's email address was real or spoofed, you need to reveal the IP address in the full header.
To reveal the full header, it depends on your email software. See the instructions for some of the popular programs at
http://spamcop.net/fom-serve/cache/19.html
In Outlook 2016, 2013, or 2010:
-
In an open email message, click the File tab.
-
On the Info tab, click Properties.
Header information appears in the Internet headers box.
For Webmail - Exchange:
Open an email message and then click ... (More actions button) > View message details.
For HKU Connect Email:
- Log in to Gmail account
- Open the message you'd like to view headers for.
- Click the down arrow next to Reply, at the top of the message pane.
- Select Show Original.
The full headers will appear in a new window.
For RC Webmail:
Please refer to the instructions at https://www.its.hku.hk/faq/email/rcwebmail/mail-header.
If you do not know how to interpret the full header information, you can send it to ithelp@hku.hk