E-Mail "Header"

[Ben]

Headers have been a mystery to many including me, but this link can be helpful guide.

headers info> http://antifraudintl.org/showthread.php?t=15352

[De Master Yoda]

@Ben, you have hit the nail right on the head!
Many people get confused by the term "headers" and these links seem to explain them in great detail!
I will study them, but at first glance they seem to be very good indeed!
A great post, thanks!

[Gentle Giant]

The website Ben mentioned, http://www.stopspam.org/email/headers.html, may be the best resource tool out there for this, if a big long and complicated and maybe confusing at first.

[Little Miss Sunshine]

It looks like www.stopspam.org doesn't exist anymore. However, my brother (who knows a bit more about these things than I do) told me to read these:

http://www.emailaddressmanager.com/tips/header.html
http://www.virtualchase.com/researchskills/quality_emailheader.html

which I did, and I think I'm getting a handle on understanding it now. :)

[Ben]

Many a late night i've spent looking at info trying to nail it ,it's also a fine line between what we don't want to teach scammers and what we want to tell each other . I suppose as I started this thread I should know a bit ,when in fact I have not mastered it because some headers are a mix of fake and real . The servers on the journey of mail are given corrupt information and likewise that information is interpreted by other servers .There are clues given in headers that all is not as it should be and
it does depend on what you are looking for as to how reading a header will help . Location of scammers computer from a true IP reading is where I have problems as scammers now use mail clients that hide IP's and speculation that says Nigerians are getting the know how from Russians is probable .I think if anyone has an important enough reason to know a specific something... I will take a PM and if I can't answer I know a man who can.

[De Master Yoda]

I will take a PM and if I can't answer I know a man who can.
Thanks Ben , As you say it can be complex sometimes! (understatement?):)

[De Master Yoda]

@Little Miss Sunshine, Good post, many thanks to your brother for his help!

Maybe with a little arm twisting we can convince him to join?
I promise not to call him 'Little mr sunshine' :D

Seriously though, it is kind of him to assist you. And us. Good one :cool:

[Central Scrutinizer]

Ben makes a good point about what is real and what is not. It is possible for a really clever scammer to actually forge a header. Possible, but not easy.

[Little Miss Sunshine]

@Little Miss Sunshine, Good post, many thanks to your brother for his help!

Maybe with a little arm twisting we can convince him to join?
I promise not to call him 'Little mr sunshine' :D

Seriously though, it is kind of him to assist you. And us. Good one :cool:
I asked my brother if he wants to join but he is a pretty busy guy and only barely tolerates me and my questions, so it probably won't happen. But he's around sometimes if something comes up (he pretends to be cranky but he actually likes helping me out :))

[Little Miss Sunshine]

As Little Mr. Sunshine is unavailable at the moment, I'll ask here. (He may also be tired of answering my dumb questions.) My email account at work uses Microsoft Exchange and as far as I can tell there is no way to see headers. Anyone here know how to find that? :confused:

[Miyuki]

What kind of email account do you use? Yahoo? Hotmail?

[Little Miss Sunshine]

Well the emails I'm getting are mostly Yahoo, but the one I use is Microsoft Exchange (http://www.microsoft.com/exchange/default.mspx).

[De Master Yoda]

Not come across this before, I believe that 'Microsoft exchange' is a platform for emails and messaging?

After checking it says this about headers, may be of some use?
As mentioned, not come across this before, so please post if anyone has more information.


OL2000: How to View Internet Headers in Messages
View products that this article applies to.
Article ID : 195870
Last Review : September 29, 2003
Revision : 3.0
This article was previously published under Q195870
SUMMARY
Internet headers provide a means to discover the origin of messages sent via the Internet, and the route taken to your Inbox. Microsoft Outlook provides a way to view these in the message options.
MORE INFORMATION
In an open message received via the Internet, on the View menu click Options. The Internet headers are displayed in Internet Headers, at the bottom of the Message Options dialog box.

[Little Miss Sunshine]

Thanks but that doesn't seem to be working for me. I get plenty of messages in my other email accounts now so the ones that come through that account aren't terribly important.

[Ben]

This linky covers a few :)
http://www.jahitchcock.com/cyberstalked/header.htm#msexchange


"To read (and copy) the header using Microsoft Exchange, do the following:
Open the message in Exchange to view it. Choose 'File,' then 'Properties,' then 'Internet.' The header will be visible and will be highlighted. Simply right click and copy it. Then paste on the front of the message and forward it to your abuse department."

[Mister X]

also a usefull Email header IP search tools link -> http://headertool.apelord.com/

[Ben]

Hi MX Wecome to AFI
On the AFI page Top right between Quick Links & New Posts there is a search facility that will establish where to post scams and whether you might be duplicating a post or not :cool:

[mysteryquest]

Hey, as of yesterday, attempts to use http://headertool.apelord.com/ have timed out. It was and hopefully still is a very useful utility that distills the potential IP address information from a header quickly. Does anybody know of why it is not operating anymore? How about a replacement? Thanks.

[Ben]

This one is nifty > http://www.ip2location.com/emailtracer.aspx
...hopefully apelord.com is using this time of year to update their server .

[mysteryquest]

This one is nifty > http://www.ip2location.com/emailtracer.aspx
...hopefully apelord.com is using this time of year to update their server .

Thank you much!