Finding the Sender

[Marvinator]

A friend has received a very threatening email. Not notable in it's scope, but i'd like to know how to trace down the originator of the email.

The address is Yahoo, but I know there is a way to find the originator's IP or ISP from the information contained in the header.

I appreciate any help you can give.

[Jgedeon]

depending on the version you are using look fo rthe message properties and then sort thru it. Look for something like this.

Received: from [65.25.000.000] by web10103.mail.yahoo.com via HTTP;

Should be just before the From: and the Subject. That will be the IP address of the sender. And then it's just looking up an IP address and who the guys ISP is.

[dunbar]

most people prefer to avoid viewing 'long headers' or 'full headers' in their email messages, For the first part of the search, review the options, get the full headers displayed. The tracing informations is in these headers.

After that... I'm coming up short on the name of the site (5 +years ago) which explained which of those headers is the sender.

This link discusses some of the details... but that is not exactly what my memory is pointing to. I remember the theme was to send the email, with long headers, to a site, and they sent back the information about the source of the message.

Interesting Google Search.

HTH.