Reading Email Headers
I've been 'talking' with a guy for months abut shipping one of my high end gazebo kits to Egypt. I'm getting the feeling though that he's maybe trying to scam me.
He's been emailing me from Texas but says he's now in Australia for a week. Is there any way you can see, by looking at the Header / whatever, if this latest email from him came from Australia? If it didn't I'll know for sure it's a scam.
All Replies (8)
Put the email header into this web site https://dnschecker.org/email-header-analyzer.php it will tell you the IP address it originated from. I just tried it with a header from this forum and it correctly identified the source as amazon (host of the domain)
This site performs much the same feat https://www.ip2location.com/free/email-tracer
right on Matt! How do I find just the header in thunderbird? I went View> Headers> All, and see about 100 lines of code, but no way to Select then Copy it?
Windows 101. Ctrl+A select all. Ctrl + C copies Ctrl+V pastes.
However you do not want to be messing with that,as you have observed copy is about impossible. it just makes Thunderbird ugly and exposes the headers. But is useless to your needs.
Message source (ctrl+U) It is on the menu somewhere, I just have not used anything but the shortcut for years. Then you have notepad like access the the entire text of the email. Just copy the headers from there.
OK then how do I read the header to see if it came from Australia? Which part of the header would it be in, and would it be spelled Australia or some abbreviation like Au? Or maybe just an IP?
OK the Ctrl + u works!
now, this is a gmail account, so how can I see if this email came from Australia?
Dave that doesn't look like it'll work with email headers?
It was a response to your question on how to see if from Australia. That URL looks at the IP number that is retrieved from one of the URLs that Matt suggested.