Techies HELP!!

[Chris Allen]

I'm not sure if this is the right forum to post this on, but I decided I might as well give it a go...

A while ago, I got scammed for $400. This took place via the internet with extensive email communication (don't worry, it wasn't head-fi or even for headphones). I was wondering if and how I could trace an email to the physical location that it originated from maybe using the IP adress. I'd love to get my money back. Thanks in advance.

Chris

 

[PFKMan23]

Theoretically you could (trace the email addy--> IP --> ISP. But hoenstly, it's not goingto be easy, and assuming you even trace it back to the person, that doesn't mean you'll get your moeny back, as you'll probably have to go through small claims court or whatnot.

In short, yeah it's possible, but any way you slice it, it's going to take a while and it will be a pain in the butt if you choose to go through with it.

 

[Chris Allen]

Can you elaborate on the exact steps on how to do this. Thanks. Its not so much that I need the money back, just a little bit of closure.

 

[hongda]

If you have an IP address, try this website

http://network-tools.com/

I did a Trace on my IP address and it came up with the right domain. From the domain you should be able to find the ISP.

good luck

 

[Chris Allen]

I don't have an ip address and I'm not sure how or if I could obtain one from an email.

 

[lan]

The headers of the email should have the ip address the email traveled through but if the person emailed from an internet cafe or public place, it doesn't help much since it's not their computer.

 

[Chris Allen]

I use gmail and it will not allow you to see the ip address...
http://mail.google.com/support/bin/a...topic=0&type=f

Is their any way to get around this or am I stuck?

Thanks for all your help.

 

[lan]

I think that's referring to if the sender is using gmail. You can also try forwarding the message you received from them to another account and trying to read the headers there.

 

[hongda]

Try this to get the email header

http://www.askdavetaylor.com/in_gmai...e_headers.html

 

[Chris Allen]

I found the IP but I typed it into a site and this is what it came up with...

Search results for: 66.163.179.138


OrgName: Yahoo
OrgID: YHOO
Address: 701 First Ave
City: Sunnyvale
StateProv: CA
PostalCode: 94089
Country: US

NetRange: 66.163.160.0 - 66.163.191.255
CIDR: 66.163.160.0/19
NetName: A-YAHOO-US2
NetHandle: NET-66-163-160-0-1
Parent: NET-66-0-0-0-0
NetType: Direct Allocation
NameServer: NS1.YAHOO.COM
NameServer: NS2.YAHOO.COM
NameServer: NS3.YAHOO.COM
NameServer: NS4.YAHOO.COM
NameServer: NS5.YAHOO.COM
Comment: ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate: 2001-09-07
Updated: 2002-09-24

RTechHandle: NA258-ARIN
RTechName: Netblock Admin
RTechPhone: +1-408-349-3300
RTechEmail: netblockadmin@yahoo-inc.com

OrgAbuseHandle: NETWO857-ARIN
OrgAbuseName: Network Abuse
OrgAbusePhone: +1-408-349-3300
OrgAbuseEmail: network-abuse@cc.yahoo-inc.com

OrgTechHandle: NA258-ARIN
OrgTechName: Netblock Admin
OrgTechPhone: +1-408-349-3300
OrgTechEmail: netblockadmin@yahoo-inc.com


I Don't think that really helps me. Any hints or am I stuck. Thanks.

 

[Aman]

Download nMap here (I think it's for Windows) http://www.insecure.org/nmap/download.html

Use it to extract all the information possible from the IP address. You may be able to get an exact location!

 

[Meifa]

The e-mail probably originated from Yahoo webmail, as the servers you picked up from the headers are Yahoo blocks. I believe webmail masks sender's IPs...

Edit: just ran a test, you should be able to get the origin IP. It should be the very last IP listed in the header. Can you copy/paste the header of the email here?

 

[Chris Allen]

I have a mac so if anybody has this program installed and could try it using the ip above and send or post the results, I would be deeply grateful. Thanks.

 

[Chris Allen]

So, would this approach not work?

 

[thepianobar]

Like others have mentioned, this approach is somewhat of a long shot. At best it will give you his Internet Service Provider. Theoretically they should be able to tell you his address etc. from that IP address, however, you can't just call them up and ask for it, it will require legal action (pretty much what the RIAA does when they sue filesharers).

As Meifa suggested, could you post the header info here, we might be able to help you gather a little more information that way.

On another note, was this completely outside of any other service? for instance ebay, paypal, and companies like that often have some kind of buyer's protection or will try to help you get your money back. Good luck with it, and hope for the best.