Go Back   WhatIsMyIP.comŽ Forum > How do I... > Trace an e-mail

Notices

Trace an e-mail This will explain how to trace where an e-mail came from.

Closed Thread
 
Thread Tools Display Modes
Old 09-14-2008, 12:14 AM   #1
wimiadmin
Administrator
 
wimiadmin's Avatar
 
Join Date: May 2008
Location: Sylvania, Georgia, USA
Posts: 1,212
wimiadmin is a splendid one to beholdwimiadmin is a splendid one to beholdwimiadmin is a splendid one to beholdwimiadmin is a splendid one to beholdwimiadmin is a splendid one to beholdwimiadmin is a splendid one to beholdwimiadmin is a splendid one to behold
Default Trace an e-mail from Hotmail

AboveTheLogic and I did a little test with Hotmail. I sent him an e-mail from my Hotmail account using the Windows Live Mail application (the replacement to Outlook Express) installed on my laptop from my home network.

When he received the e-mail, my IP was in the X-Originating-IP in the message header.

I then logged into the Hotmail website and sent another e-mail from there. Low and behold, my IP was still in the X-Originating-IP section.

So, without a doubt, we've proven that an IP can be traced from Hotmail. However, if the person logs in to Hotmails website from a Proxy may prove differently.

Brian
wimiadmin is offline  
Old 09-14-2008, 12:31 PM   #2
waelanwar
Member
 
Join Date: Sep 2008
Posts: 1
waelanwar is on a distinguished road
Default

kindly,
could you explain that method
waelanwar is offline  
Old 09-14-2008, 12:36 PM   #3
AboveTheLogic
Super Moderator
 
AboveTheLogic's Avatar
 
Join Date: Jul 2008
Location: Las Vegas
Posts: 578
AboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of light
Default

You need to look at the email headers, usually there is an option in the "View" menu of whatever email client you are using.

I'm not sure if you can do it with webmail, I don't think you can...
AboveTheLogic is offline  
Old 10-05-2008, 11:17 PM   #4
aziernest
Member
 
aziernest's Avatar
 
Join Date: Sep 2008
Location: @.whatismyip.com
Posts: 15
aziernest is on a distinguished road
Send a message via MSN to aziernest Send a message via Yahoo to aziernest
Default

Hi WIMIadmin & AboveTheLogic,

Today, I was just trying to check an email header and I see that there is no option in hotmail that allows you to see x-originating IP.
Upon my research I have observed that the "Classic" version of hotmail webmail do not gives you an option to see header, if you want to see headers you must have to switch to full version.
Below are the steps required to check headers of an email received at hotmail.


• Log into Hotmail.
• Click on "Options" tab on the top navigation bar.
• Under Options you will see the following message, "You are using the classic version of Windows Live Hotmail. Have a fast connection and want more features? Try the full version to see message previews in your inbox. (It's free, too.)"
• Click on the "Try the full version" link.
• Click on "I want the Free Upgrade..", button
• To view the full email message header, right click the email message displayed in your list of messages. A menu will pop-up. Click on the View source option in this menu, and a new window will open. This window will display the full email headers.

Hope it helps
aziernest is offline  
Old 10-06-2008, 11:20 AM   #5
AboveTheLogic
Super Moderator
 
AboveTheLogic's Avatar
 
Join Date: Jul 2008
Location: Las Vegas
Posts: 578
AboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of light
Default

That's pretty cool (although I haven't tried it myself).

I generally just use an email client to read headers, but if you can do it in the web interface that could be considerably easier.
AboveTheLogic is offline  
Old 12-12-2008, 09:27 PM   #6
romantic
Member
 
Join Date: Dec 2008
Posts: 3
romantic is on a distinguished road
Default Complete Header

here you will notice that X-Originating-IP is the sender's real ip

Delivered-To: [email protected]
Received: by 10.223.109.197 with SMTP id k5cs86093fap;
Fri, 12 Dec 2008 18:14:16 -0800 (PST)
Received: by 10.141.168.2 with SMTP id v2mr2235321rvo.207.1229134454909;
Fri, 12 Dec 2008 18:14:14 -0800 (PST)
Return-Path: <[email protected]>
Received: from col0-omc4-s17.col0.hotmail.com (col0-omc4-s17.col0.hotmail.com [65.55.34.219])
by mx.google.com with ESMTP id k41si1851576rvb.6.2008.12.12.18.14.14;
Fri, 12 Dec 2008 18:14:14 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 65.55.34.219 as permitted sender) client-ip=65.55.34.219;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 65.55.34.219 as permitted sender) [email protected]
Received: from COL109-W25 ([65.55.34.201]) by col0-omc4-s17.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
Fri, 12 Dec 2008 18:14:14 -0800
Message-ID: <COL109-W25C>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_f21ea94b-fdd8-4da-724c158f2860_"
X-Originating-IP: [116.71.1XX.XXX]
From: sender <[email protected]>
To: <[email protected]>
Subject: ip test
Date: Sat, 13 Dec 2008 07:14:14 +0500
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 13 Dec 2008 02:14:14.0368 (UTC) FILETIME=[7E950600:01C95CC8]
romantic is offline  
Old 01-05-2009, 05:48 PM   #7
neo17
Member
 
Join Date: Jan 2009
Posts: 3
neo17 is on a distinguished road
Default

hi, i am trying to find the X-Originating-IP in my hotmail account. i right click the e-mail on the list of mails and then in the popup window i select the source. i can see all the html code, but i cant find the part of the X-Originating-IP, can anyone help me??
neo17 is offline  
Old 01-05-2009, 07:36 PM   #8
AboveTheLogic
Super Moderator
 
AboveTheLogic's Avatar
 
Join Date: Jul 2008
Location: Las Vegas
Posts: 578
AboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of light
Default

you probably need to use an email client like thunderbird
AboveTheLogic is offline  
Old 01-06-2009, 02:22 PM   #9
neo17
Member
 
Join Date: Jan 2009
Posts: 3
neo17 is on a distinguished road
Default

thnx it is working
neo17 is offline  
Old 01-06-2009, 02:59 PM   #10
AboveTheLogic
Super Moderator
 
AboveTheLogic's Avatar
 
Join Date: Jul 2008
Location: Las Vegas
Posts: 578
AboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of lightAboveTheLogic is a glorious beacon of light
Default

glad to hear
AboveTheLogic is offline  
Closed Thread

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -4. The time now is 02:18 AM.


What Is My IP

Join WhatIsMyIP.com on Facebook Follow WIMI on Twitter

Need IP address location detection service? Get it from IP2Location.com now.

Powered by vBulletin®
Copyright ©2000 - 2017, Jelsoft Enterprises Ltd.
Copyright - WhatIsMyIP.comŽ