tracing IP address from Yahoo mail?

[Galt]

I have someone pretending to be someone else sending me emails. I am 100% that they are a fraud, so now it's just a matter of exposing which of the 2-3 ex girlfriends it may be (yes, my ex's are either still obsessed with me or despise me)

Now it's just a matter of narrowing down the geography of where the email is originating.

They set up a yahoo address and sent it to my gmail address. However, since they are using a web browser and the emails are actually originating from the Yahoo servers (in God knows's where) is there any way to actually identify where the are - even narrowing it down to a city or state?

I've looked at the message headings, and there are a ton of IP addresses in there, but some were either untraceable (from the free sites I used) or were New York IP addresses, which is highly unlikely.

Any help?

[diceisgod]

If you can narrow the sender's region down to the general northeastern part of the US, I know someone who will tell you it's me.

[diceisgod]

And by the way, fuck all this crap & post the phony emails....be sensible of course and doctor them up to blank out personal info or anything else "incriminating"...but that aside, I want to see how clever they may or may not be. I might be able to tell you if they are male or female at the very least.

[Arpikarhu]

I have someone pretending to be someone else sending me emails. I am 100% that they are a fraud, so now it's just a matter of exposing which of the 2-3 ex girlfriends it may be (yes, my ex's are either still obsessed with me or despise me)

Now it's just a matter of narrowing down the geography of where the email is originating.

They set up a yahoo address and sent it to my gmail address. However, since they are using a web browser and the emails are actually originating from the Yahoo servers (in God knows's where) is there any way to actually identify where the are - even narrowing it down to a city or state?

I've looked at the message headings, and there are a ton of IP addresses in there, but some were either untraceable (from the free sites I used) or were New York IP addresses, which is highly unlikely.

Any help?

check your internal scuzzi log. it should show and trace the IP for you. if the log is unreadable give the scuzzi a good cleaning. should help.

[Gooch]

I have someone pretending to be someone else sending me emails. I am 100% that they are a fraud, so now it's just a matter of exposing which of the 2-3 ex girlfriends it may be (yes, my ex's are either still obsessed with me or despise me)

Now it's just a matter of narrowing down the geography of where the email is originating.

They set up a yahoo address and sent it to my gmail address. However, since they are using a web browser and the emails are actually originating from the Yahoo servers (in God knows's where) is there any way to actually identify where the are - even narrowing it down to a city or state?

I've looked at the message headings, and there are a ton of IP addresses in there, but some were either untraceable (from the free sites I used) or were New York IP addresses, which is highly unlikely.

Any help?

You might have tried this already but this is a good article on how to get the ehader info:
<!-- m --><a class="postlink" href="http://www.onimoto.com/cache/50.html">http://www.onimoto.com/cache/50.html</a><!-- m -->



to trace IPs:
<!-- m --><a class="postlink" href="http://www.arin.net/">http://www.arin.net/</a><!-- m -->



using that, and the onimoto info: you can get an email address to file a complaint with the real provider.m


great job on the Haterade btw. Not a shocker.

[Galt]

I have tried Gooch's links, but I still couldn't figure out which IP to look at, and some of the IPs that I came up with didn't work.

Here's the most recent email (last night). I would imagine there would be SOME way to look at the IP addresses and at least find out from what region the email request is coming from, but I'm not sure. Any help?

Delivered-To: Galt
Received: by 10.86.72.11 with SMTP id u11cs112374fga;
Sat, 12 Jan 2008 19:45:35 -0800 (PST)
Received: by 10.140.125.21 with SMTP id x21mr2986198rvc.234.1200195934048;
Sat, 12 Jan 2008 19:45:34 -0800 (PST)
Return-Path: <Becky Harrington>
Received: from n23.bullet.sp1.yahoo.com (n23.bullet.sp1.yahoo.com [69.147.64.242])
by mx.google.com with SMTP id c3si5082639rvf.37.2008.01.12.19.45.33;
Sat, 12 Jan 2008 19:45:34 -0800 (PST)
Received-SPF: pass (google.com: domain of <!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e --> designates 69.147.64.242 as permitted sender) client-ip=69.147.64.242;
DomainKey-Status: good (test mode)
Authentication-Results: mx.google.com; spf=pass (google.com: domain of <!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e --> designates 69.147.64.242 as permitted sender) [email protected]; domainkeys=pass (test mode) [email protected]
Received: from [216.252.122.219] by n23.bullet.sp1.yahoo.com with NNFMP; 13 Jan 2008 03:45:33 -0000
Received: from [69.147.65.171] by t4.bullet.sp1.yahoo.com with NNFMP; 13 Jan 2008 03:45:33 -0000
Received: from [127.0.0.1] by omp506.mail.sp1.yahoo.com with NNFMP; 13 Jan 2008 03:45:32 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: <!-- e --><a href="mailto:[email protected]">[email protected]</a><!-- e -->
Received: (qmail 8803 invoked by uid 60001); 13 Jan 2008 03:45:32 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
h=X-YMail-OSG:Received:X-Mailerate:From:Subject:To:MIME-Version:Content-Type:Message-ID;
b=4SH0Xg9l8RbwvDMOG2G0Pjyed/0/lI8/OhSrL/SrRKhP5pMr+BMZ+7ECw1SCmYmlWNwGvCTxGnEYOxVg9Yw8HG6GVyzfxD2/SNc4rRHWRmCLieLi2M0PIwrqE4U6r1C/qaVKn9IGLRlfu4vJtCb6ODB/T0pOCE2MzrlyQXghApU=;
X-YMail-OSG: yu0WzlUVM1l5kPYdk2JR0wvoFYLs2QBx5QDu1BWE7s7637qGjTuvth7vK_RvNuLdPw--
Received: from [68.82.216.116] by web45513.mail.sp1.yahoo.com via HTTP; Sat, 12 Jan 2008 19:45:32 PST
X-Mailer: YahooMailRC/818.31 YahooMailWebService/0.7.160
Date: Sat, 12 Jan 2008 19:45:32 -0800 (PST)
From: Becky Harrington <[email protected]>
Subject: Re: What's up?
To: Galt <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-925854786-1200195932=:93428"
Message-ID: <[email protected]>

--0-925854786-1200195932=:93428
Content-Type: text/plain; charset=us-ascii

I've been fucking a guy from Queens. He's too small for me. I need a big cock.

[sink]

Any of your potential suspects live in the western region of PA, somewhere in the general proximity of Lancaster?

[Galt]

Not unless someone moved (or was travelling).

Or it's DIG

[diceisgod]

I will not be ignored. POST HER FUCKING EMAIL MESSAGE

[Galt]

I just did, dolt.

[diceisgod]

Oh...that's it? Are you serious?

I guess I got the same stalker because I just got this email but she's using hotmail this time:

"Paris has a insationable hunger for some meaty cock to stuff in all of her holes. Jennifer Aniston."