Tech-savvy people....

[ChristinaM 0]

How much can you really tell about me from the header of an email I sent you, bearing in mind that I'm on a network behind a firewall, sending an email through Hotmail?

I'd be happy to share the header of a test that I did to see what I could figure out, but PM me - I'd rather not just post it.

There is a reason I'm asking, but I want to know if I should be worried first.

Thanks!

[Hilarious Clinton 452]

Nothing too personal. Your ISP and country you are in. Over on the forums of 419eater.com they use the header information to uncover scammer's locations.

http://www.virtualchase.com/researchskills...mailheader.html

[ChristinaM 0]

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Thanks - I googled all kinds of things, but I just wanted confirmation!

[Ban Hammer 13,641]

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Thanks - I googled all kinds of things, but I just wanted confirmation!

http://www.samspade.org/

great for ip's

[PlatyPius 5]

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Thanks - I googled all kinds of things, but I just wanted confirmation!

Yes.

[ChristinaM 0]

Thanks Charles, that was pretty interesting. According to that, I'm in Herndon, VA.

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Thanks - I googled all kinds of things, but I just wanted confirmation!

Yes.

Can you tell me how, and why? Looking at the test I did, the only place I can see my company's domain name is in the "received" section, because I sent it from my Hotmail to my work email.

Edited August 31, 2006 by ChristinaM

[luv2teach77 41]

OK... I wasn't sure how much info could be garnered from an email header so I ran a test myself and I'm pretty suprised with the results.

I sent an email from my own yahoo email address to my own outlook work address from inside works firewall. I then looked at the header information available from within outlook. It clearly shows the originating email address (my yahoo address) and an originating I.P addresss. I knew this wasn't an I.P address I recognised from work so I googled the IP address shown in the header and BANG !! Up pops my company info including a street name and number. It wouldn't take a rocket scientist if that was a malicious email to contact yahoo, request the user details associated with the email address, roll up to my office and call me out in person !!

So... if you would like to see how much info could get be gotten from your emails I'd be happy to do the same thing I just did to see what I could find. All in the strictess confidence of course !!

Mark

[diadromous mermaid 36]

Thanks Charles, that was pretty interesting. According to that, I'm in Herndon, VA.

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Thanks - I googled all kinds of things, but I just wanted confirmation!

Yes.

Can you tell me how, and why? Looking at the test I did, the only place I can see my company's domain name is in the "received" section, because I sent it from my Hotmail to my work email.

I think it might show up as the X-Originating-IP. If your company has certain IP addys.

[Ban Hammer 13,641]

Thanks Charles, that was pretty interesting. According to that, I'm in Herndon, VA.

you're not......your ip's office is though

[w¡n9Nµ7 §£@¥€r 123]

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Usually. The only way to make sure is to email yourself and examine the headers. That's what I usually do.

[ChristinaM 0]

That's what I did, but I don't know enough about the headers to know what I'm really looking at. That's why I was kinda hoping someone would offer to take a look for me....

My IP address, when I ran a whois on it, shows this:

OrgName: Road Runner HoldCo LLC

OrgID: RCNY

Address: 13241 Woodland Park Road

City: Herndon

StateProv: VA

PostalCode: 20171

Country: US

There's nothing about my company domain attached to my IP address that I can find, but I'm not so savvy.

Edited August 31, 2006 by ChristinaM

[luv2teach77 41]

I'll take a look

I few more tests show that the level of detail varies from message to message and that seraching IP addresses online won't always give that much info.

Worth a shot though

[PlatyPius 5]

Thanks Charles, that was pretty interesting. According to that, I'm in Herndon, VA.

My main concern is whether, because it's from my company computer, they can identify my company domain name - even though the email went out through Hotmail.

Thanks - I googled all kinds of things, but I just wanted confirmation!

Yes.

Can you tell me how, and why? Looking at the test I did, the only place I can see my company's domain name is in the "received" section, because I sent it from my Hotmail to my work email.

I think it might show up as the X-Originating-IP. If your company has certain IP addys.

Exactly.

It's going to depend on how large the company is and whether they have a dedicated IP or not. If it's a company large enough to have their own network with a domain name, then it's very likely that someone could figure it out. I'm not really sure how it works with Hotmail. Let me go take a look.....

Ok. Sian sends me email via hotmail from work. I was able to determine (I already knew, of course) that she works at the NHS. St. Georges, specifically.

send me an email and I'll see what I find.

send it to: cian_at_forestwebdesign_dot_com

I'm sure you can figure that out....

[ChristinaM 0]

Thank you all, I really, really appreciate your help.

[PlatyPius 5]

My findings should be on their way to you now.

BTW, if anyone tries to contact me via that email address, don't count on a reply. lol. That's my spam address. All mail is deleted from the server after 3 days, and I never check it....except in this case, of course.

Just wanted to mention that in case someone had a burning desire to email me. ROFL!