It will never be superfluous to determine the IP address of the sender of the letter, especially if this letter seems suspicious. For example, to make sure that the sender is exactly the person he claims to be or to contact his provider or domain owner with a complaint in the event of spam or other "dirty tricks".
It is necessary
- - computer or communicator;
- - Internet connection.
Instructions
Step 1
Log into your mailbox directly on the site or use the letter collector. Open the email you are interested in in your inbox. Then proceed depending on the box or collector:
• In Outlook Express - in the "File" menu, click "Properties" (or press Alt + Enter on the keyboard), in the window that opens, select the "Details" tab.
• In Yandex-mail - in the header of the letter, find the "Additional" menu, in it select "Mail properties".
• In Gmail.com - in the upper right corner in the header of the letter, click on the small triangle pointing downward, in the menu that opens, select "Show original".
• In Mail.ru - in the header of the letter in the "More" menu, select "Service headers".
• In the mail on Rambler - in the upper right corner, click on the "More Actions" button, select "Letter Headers".
• KM. RU - click on the RFC Header menu.
• On Yahoo.com - Click on the settings button (there is a gear on it) and select "Full Title".
Step 2
Look carefully at the received service headers. Find lines like:
X-Yaschik-FolderName: Vhodyashchie
Received: from mxfront15.mail.yaschik.net ([126.0.0.1])
by mxfront15.mail.yaschik.net with LMTP id XEb4f4Io
for; Thu, 4 Aug 2011 17:33:14 +0400
Received: from mailer.otpravitel.ru (mailer.otpravitel.ru [212.157.83.225])
by mxfront15.mail.yaschik.net (nwsmtp / Yaschik) with ESMTP id XDF0s9d0;
Thu, 4 Aug 2011 17:33:13 +0400
Sequences of four groups of numbers, separated by periods in square brackets, located on a line starting with the words “Received: from” - these are IP addresses.
The sender's IP address is usually the most recent in the list. In this example, the sender's address is 212.157.83.225. Above is the IP address of the yaschik.net mail service (126.0.0.1) through which this letter was delivered. Several such addresses can be specified.
Depending on the features of the mail programs used to send and receive letters, the text of the list of service headers may look somewhat different, and the lines of the "Received: from" field will be located both at the very beginning of the text and towards the end.
Step 3
Use any of the free services existing on the network to collect more detailed information about the sender. On the page of most of such services, enter the numbers of the IP address in a special field and click on the search button. But there are also free services that allow you to determine exactly the sender of the email, in which in the field for entering information you need to copy the received service header from the letter in its entirety or the email address from which the letter came. As a result, you will be able to find out the geographic location of the sender (or at least the geographic location and name of its provider), host and domain information.
