How to trace the origin of a mail - Russian Ukrainian Belarus Travel Music Woman Dating News

	The Russian Meeting Place: A place to meet people and talk about all things Russian... International Discussions about Russia, Ukraine, Belarus, Travel, Music, Russian News, Ukrainian culture, Belarusian Dating, Moscow, Saint Petersburg, Kiev and other intelligent topics about life in the former Soviet Union.

Pages: 1

How to trace the origin of a mail
(Click here to view the original thread with full colors/images)

Posted by: Leprechaun

Technical skill needed 1/5 (easy) and its interactive
hehehe catch a scammer and have fun at the same time
where else would ya get it?

Soooooooooooo

Open up the mail in outlook.
Click "File"
Click "Properties"
Click the "Details" tab.

AND THIS IS WHAT YOU GET!!!!!
I have changed the names to protect the lil lady
its the header from one of our 1st mails, awwwww

Return-Path:keeplooking@hotbox.ru
Envelope-to: IwasntChattingUpLester@oceanfree.com
Delivery-date: Wed, 20 Aug 2003 19:47:37 +0100
Received: from [212.118.244.165] (helo=eforward5.enom.com) by bubble.oceanfree.net with esmtp (Exim 3.33 #3) id 19pXzd-0006nS-00 for WhatYouTalkingAboutWillis@oceanfree.com Wed, 20 Aug 2003 19:47:37 +0100
Received: from www3.hotbox.ru ([80.68.244.6]) by eforward5.enom.com with Microsoft SMTPSVC(5.0.2195.6713); Wed, 20 Aug 2003 11:46:45 -0700
Received: by HotBOX.Ru WebMail v2.1 id h7KIlNsn062713 for ;
Date: Wed, 20 Aug 2003 22:47:23 +0400 (MSD)
Message-ID: <200308201847.h7KIlNsn062713@www3.hotbox.ru>
From: =?koi8-r?B?6dLJzsE=?=
To:
X-Priority: 3
X-MSMail-Priority: Normal
MIME-Version: 1.0
Content-Type: text/plain;
charset="koi8-r"
X-Mailer: Free WebMail HotBOX.ru
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Originating-IP: [195.242.16.55]
Subject: from ;o)
Content-Transfer-Encoding: quoted-printable
X-MIME-Autoconverted: from 8bit to quoted-printable by www3.hotbox.ru id h7KIlNsn062713
X-OriginalArrivalTime: 20 Aug 2003 18:46:45.0578 (UTC) FILETIME=[67A80AA0:01C3674B]
X-UIDL: 3,S!!?->!!4-K"!_n@"!

OK we only need 1 bit of info from this jibberish and its
Whats the "X-Originating-IP"?
go find it. you have 30 seconds. 29, 28, 27, 26, 25, 24, 23, 23, 34, 51, 3, 2 & 1
well did you find it?
WELL DONE YOU ITS - 195.242.16.55

This number is an IP address
just like on your lil front door cept this is on your PC.

OK so next go here http://www.samspade.org/

and paste/write it beside the button "do stuff"
and click and

Bingo

spb - St Petersburg - peterlink dial up
and guess where I marry later this year?

If ya dont use outlook dont worry you can get the "headers" from any email prog like hotmail & yahoo etc & yeah this dont work all the time i think. so dont blame me for anything as you can see though it worked for me she actually thought it was very industrious of me to do this. but yours might not so ;o)

have fun & happy scam slamming

Posted by: Leprechaun

and there are free spam catching programs that can maybe do this better, go find.