Geo IP Tool

bengalkittenlist.co.uk
 
Email Scam Information

Geographic IP Address Checker

 


If you know how to view the header information of emails you receive, then it is often (but not always) possible to determine the location of the sender to help you determine if an email is fraudulent.  In a scam email we were made aware of, the email contained the following header information:

Received: from [41.223.24.4] by web23313.mail.ird.yahoo.com via HTTP

If you then use the geoip tool above and paste the IP address 41.223.24.4 into the Host/IP box and view info.  In this case the sender is located in Nigeria.

(The two lines above the map:- IP Address and country refer to your connection, the map will display the country of the IP address you are checking)

How to view Email Header information and find the IP address:

Emails received from the online contact form
The message body of emails you receive from your online contact forms will now include the IP address of the sender, the line you require will look like the following entry:      Remote Name: 41.223.24.4

Outlook Express
Open the email for viewing. Then click File (top left), then Properties, the select the Details tab. Click Message Source.

Outlook
Open the email for viewing. Then click View, then Options, then you will be presented with the Internet headers.

Google Mail
Open the email for viewing. At the top right of the email, to the right of where it says Reply, click on the down arrow symbol.  From the drop down list of options, then click on 'Show original'.

Windows Live Hotmail
No need to open the email for viewing. In the left hand navigation panel, right click on the email and choose the 'View Source' option at the bottom of the list.

Yahoo! Mail Beta
Right click on the email in your inbox and choose the 'View Full Headers' option at the bottom.


In All cases Look through the message source until you see a line something like:

Received: from gdghgdhsgdh ([81.199.7.9])
or
Received: from [41.223.24.4] by web23313.mail.ird.yahoo.com via HTTP
etc.

N.B. There may be several Received: from entries in the message source. You should choose the one the furthest down the page.

spacer spacer