Gmail Forensics

I've had some luck in the past with sending an email with a tracking pixel to the subject. But success depends on the conditions, e.g. if the he/she accepts to display the images in the email.

OOh.. Any other method?

I don't know the context of your investigation.

Having said that, if you have an active communication with the target you can try to trick him to click on a link (maybe to share an interesting document) and control the endpoint where is hosted the said file. You can also try this trick with a picture that is web hosted on your server and when he will allow pictures in is email, it will ping your server.

I hope this can help.

M.

Do you suspect the user is masking their IP address?

I don't know the context of your investigation.

Having said that, if you have an active communication with the target you can try to trick him to click on a link (maybe to share an interesting document) and control the endpoint where is hosted the said file. You can also try this trick with a picture that is web hosted on your server and when he will allow pictures in is email, it will ping your server.

I hope this can help.

M.

i tried using a link that had a script for grabbing their IP, but the main problem is the person is not active for communication and have very much knowledge about IT field, so he/she didn't click on my link. D D

Gmail only shows mail server ip adresses. If case in usa go court and fbi or give money any lawyer office for trial

You could try an email from ReadNotify (https://www.readnotify.com/). When the user opens the email, it will send you information back regarding the User. Read the FAQ, it contain a silent option which will not notify the recipient of the email that it is sending information back to the end user.

You could try an email from ReadNotify (https://www.readnotify.com/). When the user opens the email, it will send you information back regarding the User. Read the FAQ, it contain a silent option which will not notify the recipient of the email that it is sending information back to the end user.

i tried but it shows Mountain view, California, U.S. location and it is totally wrong.