Headers - MSN/Hotmail

[Trainmaster]

Retrieving Headers in MSN/Hotmail:

1. Click Options - upper right hand corner
http://recs.fraudwatchers.org/sco/hotmail-h1.png


2. Click Mail Display Settings
http://recs.fraudwatchers.org/sco/hotmail-h2.png


3. Select "Advanced", click OK.
http://recs.fraudwatchers.org/sco/hotmail-h3.png

You will have to repeat the process, but selecting "Basic" to restore the mail to its original state.

[no scammers]

Yes ok, Displaying Full Headers works fine and they (scammer) is not suspicious, as I told her she could see the time of my email, by displaying full headers, but I am sure this info. is very hard to figure out or read, The easy stuff; Who is search results; the IP address ([65.54.246109]), ([65.54.161.28]), Received: from 65.54.161.200 is Microsoft Corporation, ([208.70.7.193]) is scammers; her or him?; some say nigeria; which she tells me she is stranded here! Others say: stoney creek, ontario, canada? Oh, by the way scammer was unable to talk me into sending money!!!
As for the rest it is mumbo, jumbo;
Received: from bay0-omc1-s37.bay0.hotmail.com

by bay0-imc1-s37.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Sun, 15 Jul 2007 21:44:15 -0700

X-Message-Info: LsUYwwHHNt3660MmjhEvYg2f34OAemlK+ZzoV09lDsZmbz8QigGIQtU5Yvr3 lK0P
X-OriginalArrivalTime: 16 Jul 2007 04:44:15.0588 (UTC) FILETIME=[F6933240:01C7C763]

Would love to know how to track it? I am clueless as to what this code or what ever it is?

Subject : no one like you

| | | Inbox

MIME-Version: 1.0
X-Originating-IP: [208.70.7.193]
X-Originating-Email: [scammer@hotmail.com]
X-Sender: scammer@hotmail.com
Received: from bay0-omc1-s37.bay0.hotmail.com ([65.54.246.109]) by bay0-imc1-s37.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2444); Sun, 15 Jul 2007 21:44:15 -0700
Received: from hotmail.com ([65.54.161.28]) by bay0-omc1-s37.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.2668); Sun, 15 Jul 2007 21:44:15 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Sun, 15 Jul 2007 21:44:15 -0700
Received: from 65.54.161.200 by by106fd.bay106.hotmail.msn.com with HTTP;Mon, 16 Jul 2007 04:44:10 GMT
X-Message-Info: LsUYwwHHNt3660MmjhEvYg2f34OAemlK+ZzoV09lDsZmbz8QigGIQtU5Yvr3 lK0P
X-OriginalArrivalTime: 16 Jul 2007 04:44:15.0588 (UTC) FILETIME=[F6933240:01C7C763]
Return-Path: scammer@hotmail.com

[FW Admin]

Yes, the originating email address is 208.70.7.193 which resolves to: host193.fobsky7.juch-tech.com in Canada.

The provider is Juch-Tech, based in Hamilton, Ontario, Canada. On this page (http://www.juch-tech.com/glocov/index.htm), it describes its satellite services as having a "global reach" - as you can see, the coverage includes the whole of Africa.

There is a high scammer contingent in Canada; it's highly likely that one of the scammers' associates has set up an internet account and they are able to use it from the likes of Nigeria, Ghana etc.

The rest of the header is necessary and relevant for email tracking and spam reporting processes; it is also a series of unique identifiers that give details as to routing, relays and how it logs the email onto the system(s).

[Curious Nelly]

To view the e-mail header information:

1. Sign in to the Windows Live Hotmail website with your Windows Live ID (The e-mail address and password that you use to sign in to Windows Live programs and services such as Windows Live Hotmail and Windows Live Messenger; Microsoft services such as Xbox, MSN, and Office Live; and anywhere else that you see the Windows Live ID logo.) .
2. Open your Inbox.
3. Right-click the message in the message list, and then click View message source.

[kolache08]

i am trying to find out if a certain email address is a scam. can you help?

[Curious Nelly]

More information is needed in order to research for your question.

[Curious Nelly]

http://home.peoplepc.com/helpinfo/emailheaders/default.asp#webmail

[Curious Nelly]

1-Open the email in the Web Mail.
2-Click on the More Actions option and select View Header.