Track ip address from fake email

broken image

The “From” header at the bottom claims the email is from an address – this is just a piece of information included with the email it could be anything at all. Each server that receives the email adds more headers to the top - the oldest headers from the servers where the email started out are located at the bottom. To understand these headers, start from the bottom – these headers trace the email’s route from its sender to you.

broken image
broken image

Id 34597139-886586-27/./PV3Xa/WiSKhnO+7kCTI+xNiKJsH/rC/įrom: 'Canadian Pharmacy' are more headers, but these are the important ones – they appear at the top of the email’s raw text. Received-SPF: neutral (: 72.255.12.30 is neither permitted nor denied by best guess record for domain of client-ip=72.255.12.30 Īuthentication-Results: mx. spf=neutral (: 72.255.12.30 is neither permitted nor denied by best guess record for domain of by

broken image