How could I find out if an IP header on an email was actually spoofed?
I have been receiving harassing emails. I was able to identify the IP from the header, which led back to a friend of mine. This friend denies involvement, and reminds me that someone with a grudge against me set up her computer. Is there a way to tell whether or not the email from my friend really WAS from my friend, or was instead from someone else?
It’s more than likely your friend, but no, there’s probably no way. Ask her what email client she uses, I think that’s sent in an email header.
First off how did you trace the IP to a friend? (biodegradabl@gmail.com) i have experience in this field and I might be able to help you out. Spoofing IP header can be done, but mostlikely the IP you traced to your friend is him.
send an email from her computer, compare the heads line by line… if they differ, check why, this may help show you if someone else sent it.
It is most likely the IP address is your friends and not spoofed. If you’re convinced your friend didn’t send it then it’s possible they have some malware on their PC that is sending or routing e-mail.
They should get some anti-spyware software run and anti-virus.