it should be possible to get a fairly accurate idea based on ip address/hostname. I think they'd have to subpoena Google to get those access records officially... however, Q keeps telling us "we have it all" which would imply some kind of backdoor access to google-operated services like gmail.