Finding out who owns a Yahoo e-mail account
-
Hi I have received an anonymous e-mail from a Yahoo account and would like to find out who sent it. I have checked the header and got the IP address that sent it but that's as far as I got, the IP address is not static and so I have hit a dead end. I was thinking of sending the user a response and somehow getting their details when they open the response. So far I have thought of the following: 1. Sending them a link to an ASP page which then redirects to my response(in pdf format) but I can only get the client IP address from this which sets me back to square one. 2. Sending them a document with a macro in it. Unfortunately Word by default blocks the macro and Excel asks the user if they wish to run the macro. 3. Contacting the ISP who owns that IP, they will not give me details though unless the person has broken the law. I have officially run out of ideas and really need to know who sent the e-mail. Does anybody have any ideas? Thanks
There are 10 types of people in the world, those who understand binary and those who dont.
-
Hi I have received an anonymous e-mail from a Yahoo account and would like to find out who sent it. I have checked the header and got the IP address that sent it but that's as far as I got, the IP address is not static and so I have hit a dead end. I was thinking of sending the user a response and somehow getting their details when they open the response. So far I have thought of the following: 1. Sending them a link to an ASP page which then redirects to my response(in pdf format) but I can only get the client IP address from this which sets me back to square one. 2. Sending them a document with a macro in it. Unfortunately Word by default blocks the macro and Excel asks the user if they wish to run the macro. 3. Contacting the ISP who owns that IP, they will not give me details though unless the person has broken the law. I have officially run out of ideas and really need to know who sent the e-mail. Does anybody have any ideas? Thanks
There are 10 types of people in the world, those who understand binary and those who dont.
-
Hi I have received an anonymous e-mail from a Yahoo account and would like to find out who sent it. I have checked the header and got the IP address that sent it but that's as far as I got, the IP address is not static and so I have hit a dead end. I was thinking of sending the user a response and somehow getting their details when they open the response. So far I have thought of the following: 1. Sending them a link to an ASP page which then redirects to my response(in pdf format) but I can only get the client IP address from this which sets me back to square one. 2. Sending them a document with a macro in it. Unfortunately Word by default blocks the macro and Excel asks the user if they wish to run the macro. 3. Contacting the ISP who owns that IP, they will not give me details though unless the person has broken the law. I have officially run out of ideas and really need to know who sent the e-mail. Does anybody have any ideas? Thanks
There are 10 types of people in the world, those who understand binary and those who dont.
smyers wrote:
Does anybody have any ideas?
4. Delete the e-mail and move on. It's not worth burning brain cells over.
"Normal is getting dressed in clothes that you buy for work and driving through traffic in a car that you are still paying for, in order to get to the job you need to pay for the clothes and the car and the house you leave vacant all day so you can afford to live in it." - Ellen Goodman
"To have a respect for ourselves guides our morals; to have deference for others governs our manners." - Laurence Sterne
-
Hi I have received an anonymous e-mail from a Yahoo account and would like to find out who sent it. I have checked the header and got the IP address that sent it but that's as far as I got, the IP address is not static and so I have hit a dead end. I was thinking of sending the user a response and somehow getting their details when they open the response. So far I have thought of the following: 1. Sending them a link to an ASP page which then redirects to my response(in pdf format) but I can only get the client IP address from this which sets me back to square one. 2. Sending them a document with a macro in it. Unfortunately Word by default blocks the macro and Excel asks the user if they wish to run the macro. 3. Contacting the ISP who owns that IP, they will not give me details though unless the person has broken the law. I have officially run out of ideas and really need to know who sent the e-mail. Does anybody have any ideas? Thanks
There are 10 types of people in the world, those who understand binary and those who dont.
Were they trying to extort money out of you?
Take care, Tom ----------------------------------------------- Check out my blog at http://tjoe.wordpress.com
-
Were they trying to extort money out of you?
Take care, Tom ----------------------------------------------- Check out my blog at http://tjoe.wordpress.com
-
Hi I have received an anonymous e-mail from a Yahoo account and would like to find out who sent it. I have checked the header and got the IP address that sent it but that's as far as I got, the IP address is not static and so I have hit a dead end. I was thinking of sending the user a response and somehow getting their details when they open the response. So far I have thought of the following: 1. Sending them a link to an ASP page which then redirects to my response(in pdf format) but I can only get the client IP address from this which sets me back to square one. 2. Sending them a document with a macro in it. Unfortunately Word by default blocks the macro and Excel asks the user if they wish to run the macro. 3. Contacting the ISP who owns that IP, they will not give me details though unless the person has broken the law. I have officially run out of ideas and really need to know who sent the e-mail. Does anybody have any ideas? Thanks
There are 10 types of people in the world, those who understand binary and those who dont.
You did do a whois on the domain I assume. Did you try pinging the IP? FTP, etc? I like the idea of the link to a page idea. This is the point at which you need to think in terms of social engineering rather than purely technical. Can you get them to do more than download the pdf? Are they tech savvy enough to see through a simple ruse of a mis-labeled exe? Will they login or willingly download anything? Perhaps you can direct them to facebook, where they might reveal more to you? You have checked for the email address on other sites, right? Get them to send to a mailserver that you control so that you can get a better look at the route the mail took. These are all simply ideas - none of which I endorse as I don't know where the legal boundaries exist.
-
Hi I have received an anonymous e-mail from a Yahoo account and would like to find out who sent it. I have checked the header and got the IP address that sent it but that's as far as I got, the IP address is not static and so I have hit a dead end. I was thinking of sending the user a response and somehow getting their details when they open the response. So far I have thought of the following: 1. Sending them a link to an ASP page which then redirects to my response(in pdf format) but I can only get the client IP address from this which sets me back to square one. 2. Sending them a document with a macro in it. Unfortunately Word by default blocks the macro and Excel asks the user if they wish to run the macro. 3. Contacting the ISP who owns that IP, they will not give me details though unless the person has broken the law. I have officially run out of ideas and really need to know who sent the e-mail. Does anybody have any ideas? Thanks
There are 10 types of people in the world, those who understand binary and those who dont.
Don't forget that the original e-mail is probably fake or spoofed.
-
You did do a whois on the domain I assume. Did you try pinging the IP? FTP, etc? I like the idea of the link to a page idea. This is the point at which you need to think in terms of social engineering rather than purely technical. Can you get them to do more than download the pdf? Are they tech savvy enough to see through a simple ruse of a mis-labeled exe? Will they login or willingly download anything? Perhaps you can direct them to facebook, where they might reveal more to you? You have checked for the email address on other sites, right? Get them to send to a mailserver that you control so that you can get a better look at the route the mail took. These are all simply ideas - none of which I endorse as I don't know where the legal boundaries exist.
I have tried ping, whois etc but the IP is not static. I have reason to believe that they will be suspicious of anything I send back to them that may reveal their identity. I don't think social engineering is an option as they will probably give false information. They will definately not login but they may download something. Perhaps I can have them download a file that requires something else to be installed(my own application) before they can view it.
There are 10 types of people in the world, those who understand binary and those who dont.