Trace Fraudulent Hotmail Email Trail
Budget: $250 – $750 USD
I have a series of suspicious emails from a Hotmail account in our inbox and need a seasoned email-forensics specialist to uncover exactly where they came from and how they travelled. Using the original .eml files with full headers and related account logs that I will supply, please identify the sender’s physical location, their ISP, the devices or mail clients involved, and any other verifiable details you can extract. Every conclusion must be defensible and ready to be tendered as evidence in court, so a strict chain of custody and meticulous documentation are essential.
You will be expected to perform deep header analysis, IP geolocation and tracerouting, reverse DNS and WHOIS look-ups, plus any supporting techniques such as SPF/DKIM verification or metadata parsing that strengthen attribution. Maintain reproducible methodology throughout and capture each step.
Deliverables
• Comprehensive forensic report (PDF) mapping every relay hop with geolocation, ISP, device or client fingerprint, confidence levels, and clear narrative.
• Evidence bundle containing the annotated headers, traceroute outputs, DNS/WHOIS records, log excerpts, and any scripts or packet captures used.
• Court-ready appendix that includes your methodology statement, full chain-of-custody log, and a signed declaration attesting that the data remains unaltered.
An initial summary within three days and the final signed report within one week would be ideal. If you hold certifications such as CFCE, EnCE, or GIAC, or have prior courtroom experience, please mention it in your bid.
You will be expected to perform deep header analysis, IP geolocation and tracerouting, reverse DNS and WHOIS look-ups, plus any supporting techniques such as SPF/DKIM verification or metadata parsing that strengthen attribution. Maintain reproducible methodology throughout and capture each step.
Deliverables
• Comprehensive forensic report (PDF) mapping every relay hop with geolocation, ISP, device or client fingerprint, confidence levels, and clear narrative.
• Evidence bundle containing the annotated headers, traceroute outputs, DNS/WHOIS records, log excerpts, and any scripts or packet captures used.
• Court-ready appendix that includes your methodology statement, full chain-of-custody log, and a signed declaration attesting that the data remains unaltered.
An initial summary within three days and the final signed report within one week would be ideal. If you hold certifications such as CFCE, EnCE, or GIAC, or have prior courtroom experience, please mention it in your bid.