Results 1 to 5 of 5
  1. #1
    En route
    Cujo's Avatar
    Join Date
    Jan 2006
    Last Online
    12-05-2025 @ 09:06 PM
    Location
    Reality.
    Posts
    32,940

    Help, I lost my tool.

    For tracing the origin of emails using the original header with all the IP's and such.
    Does anyone know where I can find it or another that would do the same job?
    Thanks.
    Bayden.

  2. #2
    Cool Cat
    Perota's Avatar
    Join Date
    May 2008
    Last Online
    15-03-2017 @ 05:11 PM
    Location
    Bangkok, Korat
    Posts
    3,019
    Is that something that gives you this kind of information :

    X-Original-MailFrom: eagerrmmy[at]yahoo.cn
    Received: from [68.142.200.226] by n14.bullet.mail.mud.yahoo.com with NNFMP; 21 May 2010 04:41:01 -0000
    Received: from [68.142.201.68] by t7.bullet.mud.yahoo.com with NNFMP; 21 May 2010 04:41:01 -0000
    Received: from [127.0.0.1] by omp420.mail.mud.yahoo.com with NNFMP; 21 May 2010 04:41:01 -0000
    X-Yahoo-Newman-Id: 123015.90163.bm[at]omp420.mail.mud.yahoo.com
    Received: (qmail 52343 invoked from network); 21 May 2010 04:41:00 -0000
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.cn; s=s1024; t=1274416860; bh=fC8J9TXud/Mxg7Uz49piSHS8LjZdmRDSd1S3ljLw+oE=; h=Received:X-Yahoo-SMTP:X-YMail-OSG:X-Yahoo-Newman-Property:Message-ID:From:To:Subjectate:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=4EwJicET2Aha32/XsS7ul0z35YSdiRtRkFT1uYGzeSnFmRI1R6qmhfZbWAc6QVFUn a2EOpcRUxOuNRxL64KB0EKMdCvYPx/+MJYbE68zrlxv6fxruzgBraJgutxoCqc6MsXoPrmdmLZvMAj/GW0vcy1qNg+arBE5PLT3ZhYTsUg=
    Received: from cxc (eagerrmmy[at]221.127.46.19 with login)
    by smtp127.plus.mail.sp1.yahoo.com with SMTP; 20 May 2010 21:40:57 -0700 PDT
    X-Yahoo-SMTP: qUKXYz2swBCLLp8i0lUVvTh7cn1IeBulfFfHD2.CnA--
    X-YMail-OSG: BTw1EH0VM1n47SnwBw7FLQN0wb4P1qbzw_n4fCvlUO3LhZD



    I just use the function "View source" in my email programm
    The things we regret most is the things we didn't do

  3. #3
    En route
    Cujo's Avatar
    Join Date
    Jan 2006
    Last Online
    12-05-2025 @ 09:06 PM
    Location
    Reality.
    Posts
    32,940
    ^
    You start with that.
    I had a website where you would cut and paste that header information into a box and press go and it would tell you what city the email originated in, i don't know what happened to it, it was part of on of the whois looup sites.
    i could just cut and paste the entire header (no need to single out one ip address. And I would get a list of the whole route of the email.
    very annoying to have lost it.
    “If we stop testing right now we’d have very few cases, if any.” Donald J Trump.

  4. #4
    Pronce. PH said so AGAIN!
    slackula's Avatar
    Join Date
    Jul 2009
    Last Online
    @
    Location
    Behind a slipping mask of sanity in Phuket.
    Posts
    9,088

  5. #5
    En route
    Cujo's Avatar
    Join Date
    Jan 2006
    Last Online
    12-05-2025 @ 09:06 PM
    Location
    Reality.
    Posts
    32,940
    Nope, not that one unfortunately.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •