Trace Anonymous Gmail Sender

This project centres on pinpointing the individual behind a Gmail account that keeps posting misleading messages to a mailing list of organisation members. I can supply every original message with full headers as well as our list-admin logs, so you will have raw material for a proper header and path analysis, log correlation, and any other forensic techniques you prefer.

Scope of work
• Use your tech knowledge to come up with a plan to investigate as needed to find the culprit

No threats or harassment are involved, just persistent nuisance posts, so the goal is confirmation of identity, not emergency takedown. Tools such as Wireshark, exim/postfix log analysis, DNS, SPF/DKIM checks, and IP geolocation are welcome—use whatever combination you deem effective, provided the chain of custody for the data remains intact.

ChatGPT has already done the below checks:

Full email header examination
SPF authentication verification
DKIM authentication verification
DMARC authentication verification
Sending server IP analysis
Sender's originating IP investigation
Message-ID analysis
Gmail proprietary header analysis
Email-client identification
Operating system identification
HTML and MIME formatting analysis
Embedded tracking and external resource examination
Attachment metadata examination
Sending versus delivery timestamp analysis
Duplicate message identification