Possible Duplicate:
How to trace email?
i wanted to know the location of sender email which sent us the threat email the header of email is mentioned below Analysis:
Received: from smtp16.gtz.de by mail-in2.giz.de (10.210.0.141) with Microsoft SMTP Server id 14.2.247.3; Sun, 2
Dec 2012 14:34:52 +0100
X-ASG-Debug-ID: 1354455288-055e1f5fa983b380001-1OpuIn
Received: from mail-wg0-f46.google.com (mail-wg0-f46.google.com [74.125.82.46]) by smtp16.gtz.de with ESMTP id
bmdwuiT20ylsApu7 (version=TLSv1 cipher=RC4-SHA bits=128 verify=NO) for <[email protected]>; Sun, 02 Dec 2012
14:34:48 +0100 (CET)
X-Barracuda-Envelope-From: [email protected]
X-Barracuda-Apparent-Source-IP: 74.125.82.46
Received: by mail-wg0-f46.google.com with SMTP id dr13so1055143wgb.1 for <[email protected]>; Sun, 02 Dec 2012
05:34:48 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:date:messageid:
subject:from:to:content-type; bh=pEnkI/nHez3Kx/aAzIBI3T3DnZkEuJwJFbqpSkzZorE=;
b=LCmLKnSn4TepYwNMbAtOFlOnX+tnRMrLg0xgPxTjGgMjHhuprLvBeY1GmwXDPq5xFi
t2jLtvBlZ/VIbrhkptJsXTtZR3bhH2snlZ1nIgu6BgipOuCRLlXP4pLqbUwETQ6FYyo2
ffacXD9WmYD8ROIW1rKbXlR+aglUBN8bYUqmLAtX589jqcLjjEea5mJH12/r1J6nM5KC
plR+tfb9EnxHrsfN+MjmX00US9h/O9Xj6XSgIXKui9NhPdkdEJbxQPuA4pd6rkqRlo3s
fkMc0M04NTDnW92DMDUhFUz91nxnAs7IZfXEFdVyQ7/VRhiSgQBgD9UZG5IPcwPVQxKo VNtA==
MIME-Version: 1.0
Received: by 10.216.193.70 with SMTP id j48mr2075720wen.122.1354455288496; Sun, 02 Dec 2012 05:34:48 -0800 (PST)
Received: by 10.194.18.142 with HTTP; Sun, 2 Dec 2012 05:34:48 -0800 (PST)
Date: Sun, 2 Dec 2012 18:34:48 +0500
Message-ID: <CAN-N70YyesARsCfNnRFa2_=rZQXMP-yEDY+oNEbgcLKjbUPFrw@mail.gmail.com>
Subject:
From: Ahmad yar <[email protected]>
X-ASG-Orig-Subj:
To: <[email protected]>
X-Barracuda-Connect: mail-wg0-f46.google.com[74.125.82.46]
X-Barracuda-Start-Time: 1354455288
X-Barracuda-Encrypted: RC4-SHA
X-Barracuda-URL:
X-Virus-Scanned: by bsmtpd at gtz.de
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 1.30
X-Barracuda-Spam-Status: No, SCORE=1.30 using global scores of TAG_LEVEL=3.5 QUARANTINE_LEVEL=1000.0
KILL_LEVEL=4.0 tests=HTML_MESSAGE, MISSING_SUBJECT, MISSING_SUBJECT_2
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.115878 Rule breakdown below pts rule name description ---- ------
---------------- -------------------------------------------------- 0.00 HTML_MESSAGE BODY: HTML included in message 0.01
MISSING_SUBJECT Missing Subject: header 1.28 MISSING_SUBJECT_2 Missing Subject: header
Return-Path: [email protected]
X-MS-Exchange-Organization-AuthSource: CUB2.giz.de
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AVStamp-Mailbox: MSFTFF;1;0;0 0 0
Content-type: multipart/alternative; boundary=\"B_3437547510_7936013\"
Source:
The source host name is "mail-wg0-f46.google.com" and the source IP address is 74.125.82.46
