- Open the message you want to view
- Click the down arrow next to the “Reply” link
- Select “Show Original” to open a new window with the full headers
then Go to http://whatismyipaddress.com/trace-email
Paste the header you’ve copied in the box.
You will be able to find out the IP ADDRESS of the sender and from there investigate the location or the internet service provide for the email.
Example of an email header
Return-path: <[email protected]> Received: from mac.com ([10.13.11.252]) by ms031.mac.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTP id <[email protected]> for [email protected]; Thu, 09 Aug 2007 04:24:50 -0700 (PDT) Received: from mail.dsis.net (mail.dsis.net [70.183.59.5]) by mac.com (Xserve/smtpin22/MantshX 4.0) with ESMTP id l79BOnNS000101 for <[email protected]>; Thu, 09 Aug 2007 04:24:49 -0700 (PDT) Received: from [192.168.2.77] (70.183.59.6) by mail.dsis.net with ESMTP (EIMS X 3.3.2) for <[email protected]>; Thu, 09 Aug 2007 04:24:49 -0700 Date: Thu, 09 Aug 2007 04:24:57 -0700 From: Frank Sender <[email protected]> Subject: Test To: Joe User <[email protected]> Message-id: <[email protected]> MIME-version: 1.0 (Apple Message framework v752.2) X-Mailer: Apple Mail (2.752.2) Content-type: text/plain; charset=US-ASCII; format=flowed Content-transfer-encoding: 7bit
Example result:
Source:
The source host name is “XXXXXXXXXXXXX” and the source IP address is XXX.XX.XXX.XXX
Geo-Location Information
| Country | Ireland |
| State/Region | 07 |
| City | Dublin |
| Latitude | 53.3331 |
| Longitude | -6.2489 |
| Area Code |