Finding IP address in Gmail From Email Header's

Email headers determine where a message is sent, and records the specific path the message follows as it passes through each mail server.

When You send an email to any of your friends or others could be your Girl friends Never mind. But When you send the email through any email client like Gmail , Yahoo Mail , Hotmail, AOL, Outlook Express, etc it also sends the Email Header which contains Some important information for Us i.e.Hackers.

 Basically it is a feature of Mailing protocol.

Now when the victim sends you a Email through any ,Gmail, Yahoo mail etc doesn't matter, then mail comes to your inbox in the form of Email Header but the your Email client changes it and shows only readable part of it.

Finding IP address in Gmail

Login to your Gmail account with your username and password.

Open the mail.

To display the email headers,

Click on the inverted triangle beside Reply. Select Show Orginal.

Look for Received: from followed by the IP address between square brackets [ ].

Received: from [69.138.30.1] by web31804.mail.mud.yahoo.com

If you find more than one Received: from patterns, select the last one.

Ok Most of the users use Gmail i think and its the most popular one also from the rest of the email clients that's why i liked to write this one first.

Example

Here's an example of a message header for an email sent from MrJones@emailprovider.com to MrSmith@gmail.com:

Delivered-To: MrSmith@gmail.com 

Received: by 10.36.81.3 with SMTP id e3cs239nzb; Tue, 29 Mar 2005 15:11:47 -0800 (PST) 

Return-Path: 

Received: from mail.emailprovider.com (mail.emailprovider.com [111.111.11.111]) by mx.gmail.com with SMTP id h19si826631rnb.2005.03.29.15.11.46; Tue, 29 Mar 2005 15:11:47 -0800 (PST) 

Message-ID: <20050329231145.62086.mail@mail.emailprovider.com> 

Received: from [11.11.111.111] by mail.emailprovider.com via HTTP; Tue, 29 Mar 2005 15:11:45 PST 

Date: Tue, 29 Mar 2005 15:11:45 -0800 (PST) 

From: Mr Jones 

Subject: Hello 

To: Mr Smith </MRJONES@EMAILPROVIDER.COM></MRJONES@EMAILPROVIDER.COM>

Notice the received is the stuff we need here to get the IP Address of the victim.

Received: from [11.11.111.111] by mail.emailprovider.com via HTTP; Tue, 29