Trying To See Who Sent An Email To Me Using My Address.

Discussion in 'Software' started by mamasgolfing, Dec 3, 2015.

  1. mamasgolfing

    mamasgolfing Private E-2

    I have a friend that recently asked for help. She is getting emails that seem to be coming from her. Years ago, when I had XP, I knew how to check, but I now have Win 10 and haven't needed to check in a very long time. Can anyone give me some info on tracking the sender?
     
  2. Eldon

    Eldon Major Geek Extraordinaire

    You can check the header of the email. It's usually under more options.
    You might get a more detailed reply if you tell us which email is being used. As in ******@yahoo.com.
     
  3. davismccarn

    davismccarn Specialist

    Here is a sample header from an email sent to me by Majorgeeks:
    Return-path: <SRS0=1g0VpY=ME=majorgeeks.com=noreply@computer-help.net>
    Envelope-to: xxxxxxx@computer-help.net
    Delivery-date: Thu, 03 Dec 2015 03:21:13 -0500
    Received: from [10.114.3.14] (helo=smtp.maileig.com)
    by walmailscan10.yourhostingaccount.com with esmtp (Exim)
    id 1a4P8b-000676-OQ
    for xxxxx@computer-help.net; Thu, 03 Dec 2015 03:21:13 -0500
    Received: from beta.majorgeeks.com ([209.133.215.228])
    by walimpinc14 with bizsmtp
    id owMC1r00v4wEgV501wMD4B; Thu, 03 Dec 2015 03:21:13 -0500
    X-EN-OrigIP: 209.133.215.228
    X-EN-IMPSID: owMC1r00v4wEgV501wMD4B
    Received: from localhost (localhost.localdomain [127.0.0.1])
    by beta.majorgeeks.com (Postfix) with ESMTP id DA49E4DF0A0
    for <gopher@computer-help.net>; Thu, 3 Dec 2015 08:21:11 +0000 (UTC)
    Received: from beta.majorgeeks.com ([127.0.0.1])
    by localhost (beta.majorgeeks.com [127.0.0.1]) (maiad, port 10024) with ESMTP
    id 20190-06 for <xxxxxx@computer-help.net>;
    Thu, 3 Dec 2015 08:21:11 +0000 (UTC)
    Received: by beta.majorgeeks.com (Postfix, from userid 5001)
    id 99F494DF200; Thu, 3 Dec 2015 08:14:06 +0000 (UTC)
    To: davismccarn <xxxxx@computer-help.net>
    Subject: Hardware? - New reply to watched thread
    X-PHP-Originating-Script: 5001:Sendmail.php
    From: "MajorGeeks.Com Forums" <noreply@majorgeeks.com>
    X-To-Validate: c63d91b9+gopher@computer-help.net
    Message-Id: <eb4f99e4c6f999496ff2983d179ea0ca7ac65065@forums.majorgeeks.com>
    Date: Thu, 03 Dec 2015 08:14:06 +0000
    Content-Type: multipart/alternative;
    boundary="=_d076debe6f5f40d4387bf1a5f2a2f98c"
    MIME-Version: 1.0

    The X-EN-OrigIP entry is supposed to be the IP of the sending PC and you can look that ip up using Nirsoft's IPNetInfo:
    http://www.nirsoft.net/utils/ipnetinfo.html

    It can be difficult to view or get the full headers depending on the email program or type (i.e. web based) and it is often a fruitless effort as the largest group of spammers have over 300,000 bots (slave PC's) sending their spam and will change where it came from regularly. Generally, the problem subsides in a week or two.
     

MajorGeeks.Com Menu

Downloads All In One Tweaks \ Android \ Anti-Malware \ Anti-Virus \ Appearance \ Backup \ Browsers \ CD\DVD\Blu-Ray \ Covert Ops \ Drive Utilities \ Drivers \ Graphics \ Internet Tools \ Multimedia \ Networking \ Office Tools \ PC Games \ System Tools \ Mac/Apple/Ipad Downloads

Other News: Top Downloads \ News (Tech) \ Off Base (Other Websites News) \ Way Off Base (Offbeat Stories and Pics)

Social: Facebook \ YouTube \ Twitter \ Tumblr \ Pintrest \ RSS Feeds