Tracing Anonymous Email

Similar to a fingerprint, every email message contains unique information, making it possible to trace with a little research. Here's how to do it:

• Get The Header Information - Virtually all email programs provide access to the header showing exactly where and when the email originated. Ignore the "From" and "Return-Path" lines - they can be very easily forged.

• Identify The Last "Received" Address - The "Received" line closest to the email body in the header reflects the first leg of the email journey with the source IP address (looking something like this - 131.247.112.23)

• Research The Source IP Address - Find the “owner” of the IP address through the American Registry for Internet Numbers at www.arin.net. The “Tech Name and Number” will provide you with the administrator’s contact information.

• Query the Global Domain Name Network (DNS) - A DNS “nslookup search” will provide specific information about the IP address and can be performed through one of many private firms (Google DNS search firms).

• Contact The Appropriate Authority - Depending on the nature of the message, you should consider contacting your attorney or the appropriate enforcement agency to handle the situation. It could also be helpful to contact the network administrator to discuss your situation.

Tracing email can be done; it just requires some knowledge and the means to apply it. If you need help tracing an email, call us at (949) 481-1232.