Dave, I’ve really been enjoying learning more about Google’s Gmail system, and have found your Q&A articles invaluable assistance (especially the one about forwarding messages and the one about Gmail phishing notifications) but I’m still a bit puzzled about one thing: how do I see the headers to messages I receive?
While Gmail ostensibly suffers from the same problem of any well-designed interface — that it hides too much information from advanced users in the interest of offering the best possible experience to novices — the good news is that it’s very easy to dig into a given email message and learn more about its headers. Even better, you can easily add the message sender to your contacts list, forward or print the message, and much more, all with one click.
The secret is the tiny little “More options” link that appears adjacent to the time and date that the message was sent on the header line.
Let me show you what I mean, okay?
Turns out that I’m going back and forth with Lexar support about a failing JumpDrive Secure USB keychain drive, and they finally approved my returning the unit for a replacement. A long story, but it just so happens that the message from Lexar is in my Gmail inbox, so here’s how it looks when I view it:
That’ll probably look pretty familiar. But watch what happens when I click on the little “More options” button:
That’s where all the options are hiding in Gmail. Notice that you can reply to the sender, reply to everyone on the recipient list, forward, print, add sender to contacts list, trash this message, report phishing and… the last option… what you asked for: “Show original”. Click on that link and you’ll be shown the exact header of the message, including the Gmail-added header “X-Gmail-Received”.
I think that should address your issue. The moral of this little story? Poke around in Gmail and you’ll be pleased and surprised at the many capabilities are hidden just one or two mouse clicks away.
This is a the bottom of a message we are trying to track. What does it mean? the message was forwarded twice, so I don’t have the original IP address.
References: [215247.42658.qm@web113907.mail.gq1.yahoo.com]
[8CC2B77357F5E8D-2770-B162@webmail-m068.sysops.aol.com]
Dave,
How is everything? Someone hacked into my computer back in September and is trying to destroy me. They sent a dispicable email to about 40 of my contacts. I know that they actually sent it from my account because the email had references to things that were only mentioned in my email account.
The header below is what one of my friends who was included on the bogus email list provided me with. I am not sure how to track the sender. I feel so helpless right now, I’ve been asking around and have spent lots of time investigating since the incident. I would be more than grateful for any help or advice.
Delivered-To: kimichankiss@gmail.com
Received: by 10.90.117.9 with SMTP id p9cs91138agc;
Mon, 22 Sep 2008 00:19:00 -0700 (PDT)
Received: by 10.210.26.10 with SMTP id 10mr4473425ebz.51.1222067939006;
Mon, 22 Sep 2008 00:18:59 -0700 (PDT)
Received: by 10.210.66.2 with HTTP; Mon, 22 Sep 2008 00:18:58 -0700 (PDT)
Message-ID:
Date: Mon, 22 Sep 2008 03:18:58 -0400
From: “Matthew Feast”
Hello.
What I would like to ask is, On my gmail account, Would you know if it is at all possible to find out if when I send an email if and when then recipient has recieved it?
The fact that Gmail hides the IP address of the sender just doesn’t seem right to me. At times in my work it is necessary to see such information.
disagree with soccer fan: hotmail header gives you exactly the same info as gmail and yahoo full headers: they all can only give you ip of a server where message originated. For example: my father lives in germany but uses mail.ru for his email provider, so when I get his email on my hotmail account – it only shows mail.ru’s ip in the full header
if i am wrong – I’d like to know how in hotmail or any other webmail/client you can see more than just original server’s ip.
can you add me from friendster thanks for the
and i wish for will be healthy and stay good
Hey Dave, The instructions for getting message headers in various email programs is at:
http://mail.google.com/support/bin/answer.py?hl=en&answer=22454
Fro Gmail, click on the message, then Click: Reply>>Show original
I have a different question, how we can track the IP of a g-mail address from outlook, the header give info which only relate to the google ip address, its poor we can’t track the original IP of the sender, I don’t want to dig in for a computer IP, but atleast every one has the write to locate the country location of the sender’s IP.
Hotmail is far better in that sense we can easily track the IP of the sender from X-originating IP header.
Any one can help with gmail?
I have two questions. Is it possible to know when the recipient of an email sent through a gmail account actually opens the email? If so, how can I find out when the email was actually openend? Thanks!
Hook it up to a client (Thunderbird) via IMAP. DL mail, show headers.
Gmail has changed.
The full email can be seen if you go to the dropdown arrow on the end of the line, and pick “show original”.
I’m starting to believe that really gmail doesn’t let you see the IP from computer’s sender; that’s awful, but I imagine that Google has some way to decript that information and keeps a file along with all the incoming IP addresses related to those emails. I’ve seen that each header contains some ID data that doesn’t look at all like an IP and Arins IP itself, not the sender..
So, there should be a way (not having to start a demand, of course)
If someone knows about it, please provide some help!
There is no freedom if you are not able to defend yourself from people doing things anonymously
Dave, and everyone on this form i have read and learnt alot i just wanted to send my thanks to everyone who knows more then me 🙂
Well, it’s sort of a useful thread, but where do we net out?
Gmail doesn’t reveal IP address in outgoing mail headers.
[Source: Google Help > Gmail Help > Privacy & Security >
User IP addresses]
I have a similar problem:
If i have received an email from your friend, how can you tell whether it is spoofed or not
Hello. I wanted to know how to increase the text size in the original message pane list. Ive
tried everything that was composed on the computer directions,however none of them work. I can’t read the original list of emails before I even want to read them. Can you help?
Hi,
I would like to know about the sender’s ip address if the sender is using gmail account. How can i check that.
Plz help.
Puja
http://mindgrillq.blogspot.com
Does any one know how to either hide the dates in gmail or not be able to view the show details options in gmail.
I was looking for Ip address of my friend in gmail through a mail sent by her.But the problem is tho i cud get “more options” link and “show details” option also,the pop-up window which opens up dont give any IP address of the sender.It just says:
Delivered-To: *****@gmail.com
Received: by 10.86.79.20 with SMTP id c20cs40103fgb;
Sat, 29 Dec 2007 04:19:27 -0800 (PST)
now here i cant see any “Received :from” option.
Can u help me?
I don’t see what you see when you’re looking at a message in Gmail.
First, there’s no More Options. Second, there are no other options when I click “show details”
All it shows is From, To, Date, Subject, Mailed-by and sometimes Signed-by. The Date, I believe is when I received it. But there is no Sent Time either. How do I see that??
not only gmail header but for all mails
and plz explain me how to configure mail client
softwares in PC like out look, incredi mail;
can gmail header can provide us email password…
pls confirm
I’m curious: Do you know how to search in your Gmail account for an IP address? I have an IP address that was used in an unkind manner, and I’m guessing it was done by one of my acquaintances — which would mean that I’d have an email from them somewhere in my account. Is there any way I can search all my messages for that IP address? (I tried plugging it into the search field, but no go.)
Hi Dave,
I just came across this series of questions regarding Googlemail / gmail and wanted to write with a query.
A good friend of mine has been experiencing online harassment and stalking. Today, she received an email entitled “Keep your friends close….. Your enemies closer….!” She is understandably concerned and forwarded the email and message header for me to look at.
However, I am unable to locate the sender’s IP address in the header provided below. Can you shed any light on this for me? I have no trouble with any other email clients, but this one has me perplexed. I’ve blocked out the recipient’s email address for the obvious reasons. Is this header spoofed or the real thing and how can I locate the IP address?
Thanks in advance for any help.
Return-Path:
Received: from n107.sc1.cp.net (64.97.168.12) by n101.sc1.cp.net (7.2.066)
id 46564F25003C8A9D for s*******.********@******.net; Mon, 11 Jun 2007 17:12:24 +0000
Received: from wa-out-1112.google.com (209.85.146.179) by n107.sc1.cp.net (7.2.069.1)
id 466D71870000EEC0 for s*******.********@******.net; Mon, 11 Jun 2007 17:12:19 +0000
Received: by wa-out-1112.google.com with SMTP id l35so2296024waf
for ; Mon, 11 Jun 2007 10:12:18 -0700 (PDT)
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed;
d=googlemail.com; s=beta;
h=domainkey-signature:received:received:message-id:date:from:to:subject:mime-version:content-type;
b=MBKEBAa3wG9Jtk4YDc1VLIS5S3bqXTXO/Hb0Mt857MM3+0=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=googlemail.com; s=beta;
h=received:message-id:date:from:to:subject:mime-version:content-type;
b=iVR1wTR3mJ4yVzCk=
Received: by 10.115.77.1 with SMTP id e1mr5697980wal.1181581938466;
Mon, 11 Jun 2007 10:12:18 -0700 (PDT)
Received: by 10.141.5.15 with HTTP; Mon, 11 Jun 2007 10:12:18 -0700 (PDT)
Message-ID:
Date: Mon, 11 Jun 2007 18:12:18 +0100
From: “Thyroid Information”
To: s*******.********@******.net
Subject: Keep your friends close….. Your enemies closer….!
X-Antivirus: AVG for E-mail 7.5.472 [269.8.13/843]
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary=”=======AVGMAIL-466D86591E28=======”
–=======AVGMAIL-466D86591E28=======
Content-Type: multipart/alternative; boundary=”—-=_Part_5092_12791439.1181581938453″
——=_Part_5092_12791439.1181581938453
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
If you want ALL of the information from an email in GMAIL, click the button that says “Show Original.”
This should give you several different IP addresses, including the sender’s.
Hope this helps,
The Aardvark
aardvark.novelista@gmail.com
I just come accross with the same problem. So, I think you people already have done a lot of efforts since March 2005, so I shouldn’t waste my time to think about Gmail header. I should track his IP with some other tricks.
IT IS IMPOSSIBLE TO IDENTIFY THE SENDER’S IP FROM AN EMAIL SENT VIA GMAIL FROM THE HEADERS
All of this information was a good read. Darn it anyway Gmail! I received threats to my Gmail account from another Gmail account and I have no idea how to find out who did it, since the headers are all these begin with 10.?.?.?.? etc. I used to think Gmail was really a nice idea. Now I am really mad at them.
According to this article, google hides the ipaddress for outbound mail.
“Personal information, including someone’s exact location, can be gathered from someone’s IP address, so Gmail doesn’t reveal this information in outgoing mail headers.”
Link: http://chris-linfoot.net/plinks/CWLT-6HYCYN
Hi:
Re: Gmail and IP addresses:
I have been researching this at length lately and what I have come up with is that all gmail ips are anonymous. Listed as private. There is a website called http://www.ip2location.com that will give you the general address of an ip. But gmail users are listed as a private address. I do have a question though. I recieved an email from a friend last week from yahoo. But I suspected that my friend didn’t send it, rather someone else went into my friend’s account and sent it from their own computer. So I am thinking that the ip address would come from their computer and not my friend’s right? And are IPs the computer address or the email server of that computer??
GMAIL is masking outgoing message headers. In the last few months we have been experiencing an increase in malicious email from @gmail.com. All the headers “Blackhole” IPs in the 10. range … including internal range 192… which just ends up IDing gmail proxy servers.
This is very alarming and really I can’t understand how this is allowed to be. To trace a message from Gmail would require allot of work such as contacing Google which would be a real pain in the ass.
At this point, we are considering banning all incoming email from @gmail.com accounts. Either Google is going to get with it or they will see more and more bans from private email networks.
you can check your external ip with sites http://www.showip.com if ur under nat and check the ip address of web sites at http://www.dnsstuff.com
An address starting with 10.?.?.? is an internal network IP. Dave (i think it was) gave his ip but said that it was his networks id which was distributed by NAT. NAT assigns IPs from the 10.?.?.? range and 192.168.?.? range. When you look at the header of a gmail, the received from IP is in the vicinity (msp) of 10.35 10.36 10.54 10.70 among others. This means that that the last frame/packet that was added the data was done by a gmail internal network.
Hi to all – – This is about IP address in GAMIL
It is under more options – -tiny little link.
I have pasted below the details of “Email Header” of my message – – under this you will find senders IP address which in case below is – – – –
“Received: from moonfish.no.com (82.98.209.31)
by s1.mailresponder.info with MERCUR ”
Yes this is right, but it should be the IP of the ISP he / she is currently using, then from there its a little harder to track down the computers IP.
Try the different IP’s at this site http://arul.telenet-systems.com/track.html
and it should give you some indication of where its coming from.
Hi,
Could anyplease tell me how I could find out IP address of websites and how I could I find out my absolute IP address, as I am in LAN I am not able to get my absolute IP
Regards,
Sandeep
You might be right then, Crt. Anyone else have any ideas or insight about whether Gmail messages are anonymous or not?
Dear Dave,
Sorry for still having questions on this. According to your last message, it seems that Andrew’s IP address is 10.38.151.45, but I think it’s NOT. Most likely it’s the IP of google’s servers.
Because: I sent an email to myself from gmail to another address. In that email, the last Received line is:
Received: by 10.54.101.12 with HTTP; Fri, 15 Apr 2005 19:37:46 -0700 (PDT)
But 10.54.101.12 is NOT my ip. My Ip starts with 69…. but it wasn’t anywhere in the header of email starting from gmail.com.
If that’s the case, then is it true that there is NO way to find out the real ip of the sender?
Thanks,
Crt
Ridhish, theoretically the information is in messages from one Gmail account to another too. When I look at the header from a Gmail message sent from my colleague Andrew Goodman, it includes the following three lines:
Received: by 10.54.47.42 with SMTP id u42cs41422wru;
Mon, 14 Mar 2005 14:13:30 -0800 (PST)
Received: by 10.38.74.71 with SMTP id w71mr1034095rna;
Mon, 14 Mar 2005 14:13:29 -0800 (PST)
Received: by 10.38.151.45 with HTTP; Mon, 14 Mar 2005 14:13:29 -0800 (PST)
My experience with reading mail headers suggests that Received lines are always added above prior lines, so it’s newest-to-oldest here, which means that the last of the three lines should pinpoint Andrew’s IP address, 10.38.151.45.
dave, 1 last question.. does the ip showing thing work when its gmail to gmail.. thats what i noticed when i took a closer look at my mails.. it doesnt show the originating ip and all that.. sorry for bothering u for so long… :-))
Ridhish, I understand what you’re asking, and it seems to me that the information is protected. I sent a message from my Yahoo Mail account to my Gmail account and when I viewed all the headers (as shown in the article, above; click on “show original”), one of those headers is:
Received: from [67.173.203.115] by web52909.mail.yahoo.com via HTTP; Sun, 13 Mar 2005 06:53:26 PST
As far as I can tell, the 67.173.203.115 is my system’s IP address (actually the IP address of my router, since I’ve a local network that uses NAT to dole out separate IP addresses internally). When I sent this same message to my regular email address (not Gmail) that same header is retained.
Does that answer your question?
guys, zats not what i was talking about.. julian got close to it.. dave u still didnt answer it.. u talked about the outgoing msgs.. what about the case when some1 emails u from say yahoomail. gmail doesnt show the ip address.. that doesnt make sense.. yahoo also implements the message id thing, but they do show the ip of the sender.. dave, to which acc(server-yahoo, rediff or what) did u send the mail from gmail.. that email server is showing the recipient u’re ip.. try sending an email from say yahoo to gmail.. gmail wont show u’re ip in the message header. peace…….
Exactly right, Steve! There’s a lot that Gmail does right, as far as I can see…
I notice that if you click the “Show original” link after choosing more options, you are shown the original, unformatted text of the message.
Excellent Gmail article much appreciated
Julian, I don’t know if they only use one outbound system, but when I sent mail to myself from my Gmail account to my regular email address, here’s what one of the headers showed:
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.206])
by intuitive.com (8.12.11/8.12.9) with ESMTP id j29DhCIx085806
for ; Wed, 9 Mar 2005 06:43:13 -0700 (MST)
Looks like 64.233.184.206 is what you seek.
Ridhish, it sounds to me like you have a problem with someone spoofing a Gmail “from”, not a problem with the Gmail system itself. I have seen no evidence that the system masks incoming addresses in any format and it’d be totally wacked for Gmail to do that anyway, wouldn’t it? Sorry you’re having a problem with spoofing, though. I wonder what would happen if you reported the spoofed email as ‘phishing’…
I’ve been struggling with an attack from a series of fake gmail accounts. It would be useful to be able to find out the IP address used to send gmail email. Yahoo! puts this in the message-ID but AFAIK there’s nothing in gmail headers. Can you tell me otherwise?
Dave, i read u’re article on the GMAIL header thing.. But, i would like to ask u 1 thing….. The email headers in GMAIL do not show the email address and the ip of the person sending u the email.. isntead u get 1 message id with some shit like “abcdsfg123456djhgsjhg@gmail.com”…. how in hell do u interpret that?? one friend of mine had played a nasty trick on me by sending me emails as another person for 8 months.. if he had sent his emails to my gmail account i would have never found out…. anything to say???