How to Trace “Anonymous” Email

Member

By pain-free-it
User-Submitted Article

Article Rating: (1 Ratings)

TMS Pain Free IT Support

How to find out who or where that mysterious email came from

Difficulty: Moderately Easy

Instructions

Step 1

The good news is that every email message contains unique information (like a fingerprint), making it possible to trace it...with a little research. Here's how to do it:
Step 2

1) Get The Header Information
Virtually all email programs provide access to the header showing exactly where and when the email originated. Ignore the "From" and "Return-Path" lines - they can be very easily forged.
Step 3

2) Identify The Last "Received" Address
The "Received" line closest to the email body in the header reflects the first leg of the email journey with the source IP address (looking something like this - 131.247.112.23)
Step 4

3) Research The Source IP Address
Find the "owner" of the IP address through the American Registry for Internet Numbers at http://www.arin.net/. The "Tech Name and Number" will provide you with the administrator's contact information.
Step 5

4) Query the Global Domain Name Network (DNS)
A DNS "nslookup search" will provide specific information about the IP address and can be performed through one of many private firms (Google "DNS search firms").
Step 6

5) Contact The Appropriate Authority
Depending on the nature of the message, you should consider contacting your attorney or the appropriate enforcement agency to handle the situation. It could also be helpful to contact the network administrator to discuss your situation.

Comments