How Scammers Forge Email Addresses and How You Can Tell