Would anyone who still has one of these emails please send me it with full headers? pm me here for my email addy to send it to.This will explain how to get the full headers
OK, we should have done this a long time but we didn't. So here it is. I will build it, or other admins will help build it.
What is an email header?
An email header provides all the information about an email you received. That includes really important things like where the email originated from. Don't write us asking us to arrest some scammer if you don't give us an email header. It can't be done.
Why do you (AFI) want full email headers?
An email header will show the originating ISP (i.e. where the email came from) and it also tells us the route that an email took from the scammer's computer to yours. We don't use all of that information but other people
around here do.
An email header
does not look like this:
From: Mr. James Blaire <
[email protected]>
Subject: CONTACT FEDEX COURIER COMPANY
Date: Friday, September 19, 2008,
That does not tell us very much except the email account the scammer used to send the email and the name on the account. It also tells us the date he sent the email. That's about 20% useful information. In short, it really does not provide much that is useful.
An email header is longer and looks something like this (this is a yahoo email header, an example):
X-Apparently-To: [
[email protected]] 203.216.249.210; Tue, 23 Sep 2008 13:16:00 +0900
X-Originating-IP: [120.12.33.215]
<----This is important
Return-Path: <
[email protected]>
Received-SPF: none ([120.12.33.215]: domain of [
[email protected]] does not designate permitted sender hosts)
Authentication-Results: mta127.mail.tnz.adress.com from=scam.com; domainkeys=neutral (no sig)
Received: from 120.12.33.215 (EHLO 120.12.33.215) (120.12.33.215)by mta127.mail.tnz.address.com with SMTP; Tue, 23 Sep 2008 13:15:59 +0900
Message-ID: <000501c91d33$051c2fb1$ece09ab2@cfgqvryg>
From: "Yahoo boi" <
[email protected]> Add to contacts
To: "Your name" <
[email protected]>
Subject: Hi! I'm a scammer and I want to steal your money
Date: Tue, 23 Sep 2008 02:30:51 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;boundary="----=_NextPart_000_0002_01C91D33.0519E9D0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2720.3000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300
Content-Length: 1445
Do you want the body text of the email?
Yes. The header by itself tells us where the email came from but it doesn't tell us what the email says.
How do I post a scam email at AFI?
Copy and paste everything including the full email header.
Please be sure that you remove your email address from the post. In the above example where your email is [
[email protected]] you can post @address.com or [
[email protected]]. That doesn't affect what we do one way or another but you
do not want your email to become public. Especially here.
Find them!
Below we will post some servers and links to specific posts about how to find headers using those email servers. Click on the email service you use and we will try to walk you through some step-by-step instructions to find the email headers.
(Note to admins, etc. Please activate the link in these servers as you post here. Thanks)
AOL
Bigstring
CompuServe
Cox.net
Excite
Eudora
Fastmail
Gmail
Hotmail
Lycos
Mail.com
Macintosh OS X Mail
MSN
Netscape
Orange Webmail UK
Outlook
Outlook Express
Rediffmail
Sify.com
Squirrel Mail
Thunderbird
WebTV
Windows Live Mail
Yahoo (all language versions)
