How can u trace an email address? And after tracing the e-mail, what info will it reveal?

Answer 1

yes I'm back for more points. thanks for the vote.

as far as emails go, I havent done it before, but it is possible. Here's some info on it
http://www.johnru.com/active-whois/trace-email.html

Answer 2

Take a look at the full header. It will look like this one from a real spam:

From Jacqueline Fitzpatrick Sun May 20 02:00:42 2007
Return-Path:
Authentication-Results: mta125.mail.re2.yahoo.com from=aster.co.kr; domainkeys=neutral (no sig)
Received: from 124.120.76.247 (HELO 426ACD78) (124.120.76.247)
by mta125.mail.re2.yahoo.com with SMTP; Sat, 19 May 2007 09:02:57 -0700
Received: (from root@localhost) by mail4.debby.com (8.11.3/8.11.3)
id k3V8OhN46068; Sun, 20 May 2007 01:00:42 -0800 (PDT envelope-from root)
Date: Sun, 20 May 2007 01:00:42 -0800
Message-Id: <4573D384.237321.22674@CSUQ>
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
To: [e-mail], [e-mail], [e-mail], [e-mail], [e-mail]
From: "Jacqueline Fitzpatrick"
Subject: Amazing and cheap online pharm
Content-Length: 653

The last from IP address, in this case 124.120.76.247, is where it came from. Notice the e-mail address and return path [e-mail] is probably fake. Sometimes a couple of layers of from/received are also fake.

You can now look up the IP address and see what domain it came from.


Enter a Domain Name or IP address:


IP Address : 124.120.76.247 [ ppp-124.120.76.247.revip2.asianet.co.th ]
ISP : ASIA INFONET Co., Ltd.
Organization : ASIA INFONET Co., Ltd.
Location : TH TH, Thailand
City : Bangkok, 40 -
Latitude : 13°75'00" North
Longitude : 100°51'67" East