Is result of email trace correct for these headers?

kjacpm asked 2 years ago

Hi,
I know this man on through the internet.
Below are 3 emails (all same email addresses) from him, over a period of 2 weeks, but showing the email originated from Malaysia, Canada and UK.
But from our email conversation, he claimed to be in UK during this period.
Can the result from the email tracer be incorrect?
Please help advise.
Thank you so much.

Email #1:
X-Originating-IP: [65.55.xx.xx]
X-Originating-IP: [175.145.xxx.xxx]

Email #2:
X-Originating-IP: [65.55.xx.xx]
X-Originating-IP: [109.200.x.x]

Email #3:
X-Originating-IP: [65.55.xx.xx]
X-Originating-IP: [74.82.xxx.xxx]

3 Answers
wimiadmin Staff answered 2 years ago

Not quite sure why there are 2 x-originating-ip sections in each header.

The 65.55.xx.xx all belong to microsoft so these must be tied to the hotmail servers.

The second originating IPs are from:
Malaysia
UK
Canada
As you indicated.

He could be using a proxy to mask his location. I'm not sure there is a definite way to prove this though.

kjacpm answered 2 years ago

Hi,
To wimiadmin and Shnerdly, Thank you so much for your views.

Another input is that, most of the other emails that he sent are I think almost all, originated from Malaysia, UK or Canada, and non from other countries. Are we able to know if he is using a proxy, or is it the email service he is using is relaying through another random server, as per suggested.

By the way, why do the email service that he is using need to relay through another random server? Is this a common method used by email services?

I am trying to know if he is trying to deliberately conceal his location.

Thanks in advance for your time and views.

kjacpm answered 2 years ago

Hi,
I do not want to let him feel that I am not trusting him. I know him through a match making site a month ago, and he seems to be very nice. But I am afraid that he may not be who he is, and that there may be in fact different people at 3 different locations chatting with me via the same email address.
I do not want to be cheated, but also do not want to sound un-trusting to this very nice man.

Can there also be a possibility that really the emails are originating from the 3 locations?
Thanks again.

Know the answer? Login or sign up for an account to answer this question.
Sign Up