projects / 03
What I tested, what I found, and how to try it yourself.
I analysed an email impersonating Microsoft, checking its headers, reply address and links alongside domain reputation. I then ran a separate, harmless local simulation and used Postfix logs to confirm which of five test mailboxes received it.
I built a Windows lab in Hyper-V and compared successful logons with incorrect passwords and unknown users. Using Event Viewer, I examined events 4624 and 4625 and the status codes that explain each failure.
I configured an Ubuntu mail server for local delivery and sent a test email to five accounts. I followed its Message-ID through SMTP output, Postfix logs and Maildir copies to identify every recipient, including those missing from To and Cc.
