How to view “Received: from” field or the sending IP address in iCloud, Gmail, Yahoo, Hotmail, and AOL.
Today, almost every Apple user has come across a fake email that appears to have been sent by Apple from noreply@email.apple.com. We present to you a thorough guide to determine whether the email message truly originated from Apple, or is actually a scam targeted to gain information about your email account, Apple ID, or even worse – your credit card. While the process might seem highly-technical at first, we’re sure that most people will be able to understand this tutorial quickly and easily. We compiled the most frequent email messages sent from Apple. The table below shows that in all instances the sending IP address starts with the number 17 (e.g. 17.254.6.138, 17.171.37.29, etc.). This quick check is the most effective way to validate any messages you might receive from Apple. This is because all IP addresses that follow 17.xx.xx.xx are owned and operated by Apple, Inc. Secondly, all Apple messages contain “received: from” (e.g. nwk-txn-msbadger0504.apple.com). While this “Received: from” field alone can be faked or spoofed, the combination of IP address and passing DKIM on the apple.com domain is the highest security credential an email message can have.
Most Frequent Emails Sent from Apple Friendly From Email address AddressNature of EmailSafeApp StoreAppStore@new.itunes.com17.xx.xx.xxApp Promotions, App Store Spotlight Applenews@insideapple.apple.com17.xx.xx.xxApple Products and release promotionsApplenoreply@email.apple.com17.xx.xx.xxApple ID and iCloud Alerts Apple Beta Software Programbetaprogram@InsideApple.Apple.com17.xx.xx.xxBeta Software Updates
✔Apple Newsnewsdigest@insideapple.apple.com17.xx.xx.xxApple News Digest
✔Apple Storenoreply@apple.com17.xx.xx.xxAppointment Follow Ups
✔Apple SupportAppleSupport@insideapple.apple.com17.xx.xx.xxSurveys and Support Follow Ups
✔Apple SupportAppleSupport@email.apple.com17.xx.xx.xxProduct notifications
✔Apple Support Communities Updatesdiscussions-updates@apple.com17.xx.xx.xxApple Support Communities Updates
✔Find My iPhonenoreply@insideicloud.icloud.com17.xx.xx.xxFind My iPhone Alerts
✔iBooksiBooks@new.itunes.com17.xx.xx.xxiBooks Newsletter
✔iClouddo_not_reply@icloud.com17.xx.xx.xxiCloud transactional emails
✔iCloudno_reply@me.com17.xx.xx.xxiCloud transactional emails
✔iCloudnoreply@insideicloud.icloud.com17.xx.xx.xxiCloud Alerts (storage, Apple ID, etc.)
✔iTunesdiscover@new.itunes.com17.xx.xx.xxiTunes newsletter (Apps, Movies, etc.)
✔iTunesitunes@new.itunes.com17.xx.xx.xxiTunes Spotlight Newsletter
✔iTunes Storedo_not_reply@itunes.com17.xx.xx.xxiTunes Billing and Store emails
✔iTunes UiTunesU@new.itunes.com17.xx.xx.xxiTunes U Newsletter
✔no friendly fromnoreply@apple.com17.xx.xx.xxApple Support Community Notifications✔no friendly frommarketresearch@insideapple.apple.com17.xx.xx.xxMarket Research Surveys
✔no friendly frompostmaster@mac.com17.xx.xx.xxDelivery notifications
In iCloud Mail:
- Double click the email message.
- Click on the wheel icon.
- Select “Show long headers.”
- Look for “Received: from” under “Original-recipient” (e.g. msbadger0506.apple.com. [17.254.6.160])
In Gmail:
- Select the message.
- Click on the drop-down triangle in the top right corner.
- Select “Show original.”
- Look for “Received: from” (e.g. msbadger0506.apple.com (msbadger0506.apple.com. [17.254.6.160]))
In Yahoo:
- Select the message.
- Click on “More.”
- Select “View Raw Message.”
- Look for “Received: from” (e.g. msbadger0506.apple.com. [17.254.6.160])
In Hotmail/Outlook:
- Select the message.
- Click on the drop-down arrow in the top right corner.
- Select “View Message Source.”
- then look for “Received: from” right above the “From:” field (e.g. msbadger0506.apple.com. [17.254.6.160])
In AOL:
- Select the message
- Click on the drop-down arrow in the top right corner
- Select “View Message Source.”
- Then seek for “Received: from” right above the “From:” field (e.g. msbadger0506.apple.com. [17.254.6.160])
Leave a Reply