Online EMailTracer

EmailTracer is a tool to track email sender’s identity. It analyzes the email header and gives the complete details of the sender like IP address, which is key point to find the culprit and the route followed by the mail, the Mail Server, details of Service Provider etc. EmailTracer traces up to Internet Service Provider level only. Further tracing can be done with the help of ISP and law enforcement agencies. The message-id will be useful for analyzing the mail logs at ISP.

Click this link to trace an email (work in IE 6.0 and Above only)

http://www.cyberforensics.in/OnlineEmailTracer/index.aspx

Extracting Email Headers

Extracting Email Headers Email header is the information contained in every mail message which is used by mail programs to provide the user with a summary of the origin and contents of each message.

Hotmail Log into Hotmail. Click on "Options" tab on the top navigation bar. Click on the "Mail Display Settings" link. Change the "Message Headers" option to "Full". Click the "OK" button.

Yahoo Mail Log into your Yahoo! Mail account. Click the "Mail Options" link on the left-hand navigation bar. Click the "General Preferences" link on the right. Locate the Show Headers heading and select "All." Click the "Save" button to put your new settings into effect.

Eudora Click the button BLAH BLAH BLAH in the ToolBar.

Outlook Express 4,5,6 and XP for Windows Select the message. Click on File menu. Select Properties. Click on Details tab.

Outlook 2000, XP Right click on the message without opening it. Select Options, then Full Headers.

Microsoft Outlook 98 Open the message and select View, then Options from the drop-down menus. Near the bottom of the screen there is a section titled INTERNET HEADERS. Copy the header.

IncrediMail Select File > Properties and then the Details tab.

Rediff Mail Click 'Folder Options'.

Microsoft Entourage(Office X for Mac) Select the message in the Inbox. Go to View > Source. The new window will contain full headers and message text. Alternately, go to Edit > Preferences > Mail and News. Under the View tab, there is a checkbox for Show Internet Headers.

kmail (KDE Desktop) Select Message. View Source. Copy the text from the "Message as Plain Text" window.

Gmail Open the message you'd like to view headers for. Click the down arrow next to Reply, at the top-right of the message pane. Select Show original.

Pegasus Mail Right click the message, and select Message headers...

Netscape Messenger Windows users, simply press Ctrl-U (meta-U in unix, ?-U on Macintosh). A new window will open with the full message including the complete header.

Netscape Webmail While viewing the message, click on the yellow triangle to the right of the brief message headers. This will display the full headers along with the message body.

Operamail Choose Options and enable [x] Show Message Headers in Body of Message.

Outlook Express for Macintosh Select the email. From the View menu, choose Source. Email with full headers will be displayed.

Outlook Web Access Left click on the letter you want to open and click on properties. When that opens click on the Details tab. Then on message source. This will open the email with the full headers.

Pine You must configure Pine to allow showing message headers. You may skip steps 1-3 below if you have performed this configuration. From the main Pine menu, type S for Setup, then C for Config. Use the space bar and down arrow to scroll until you reach the option [ ] enable-full-header-cmd, then type X in the box to toggle the option on. Type E to exit Config, and Y to save changes. The next time you read a message, type H and the full headers will be displayed at the top of the message. Type H again to hide the headers.

Pronto Mail (GTK/unix) Click "Message" then "View Source".

Exchange Open the message. Choose File then Properties then Internet. The header will be visible and will be highlighted. Simply right click and copy it. In some versions of Exchange, go to the File Menu > Properties > Details > Message Source.

Bat! From The Bat email software: Message > SaveAs > Save as Type - I. Select Unix Mailboxes [*.mbx]. Open the file in your preferred editor, then simply copy from there. For The Bat! v1.53b : Select the message. Click on the "Messages" menu. Select "View Source". Alternatively, you may push F9 instead of the last two steps.

AOL Mail If the email is sent from anywhere OTHER then AOL, and you are receiving it in AOL, then open the email you want to trace, or have your client open the email, and look for the link Details. This link is usually just below the To:email in the email message. If the email is sent from an AOL user to another AOL user then our Reverse AOL Screenname search can get you the sender's information.

XtraMail Log into XtraMail Click on "Options" in the Left-hand navigation bar. Click the "Display" button. Change the "Message Headers" option to "Full". Click the "OK" button.

Source