Feedback: Free Spam / E-mail Tracer @ OPTIMIZE.NET

Nexus · Dec 19, 2004

Hey, I just added another tool to OPTIMIZE.NET to parse any e-mail header (just copy the raw source from your e-mail), and tell you as much about its contents as possible. Where does it say it came from? How long did it take to get to you? Are their suspicious errors in them?

Check out the results here:
http://www.optimize.net/tools/email-parser-tracer.html

Please feel free to post any feedback you may have. Sometime later I will be adding support for X-CLIENT Address (important to determine more from web based e-mail senders), and a simple chart above the results showing you which countries the e-mail has supposedly traveled through to get to you.

* E-MAIL PARSER / TRACER
The e-mail parser/tracer is a tool that allows you to find out exactly where your e-mail is originating from, according to the information contained inside of it. The tool attempts to discern as much information from your e-mail headers as possible, and relate it back to you in a coherent fashion. If it detects "errors" or "mistakes" in your headers, it will try to report them whenever possible.
http://www.optimize.net/tools/email-parser-tracer.html

~ Nexus

wyvern · Dec 19, 2004

Hey Nexus,

Cool tool....and the rest of the site's ok too :approve: Already sent out a couple of spam notices.

Ken

Nexus · Dec 19, 2004

Thanks. It's interesting. I got a TON of e-mails recently with the subject:
SUBJECT: Database containing a list of every
registered domain and email in the world for sale!

Running the mail headers through the tool, I get an interesting tickertape:

Code:

Return-Path: <[email protected]>
Received: from [color=red][b]MY.SERVER.COM[/b][/color] (root@localhost); ;by [color=red][b]MY.DOMAIN-NAME.COM[/b][/color] (8.11.6/8.11.6) with ESMTP id iBJENKr25539; for <[color=red][b][email protected][/b][/color]>; Sun, 19 Dec 2004 09:23:20 -0500
X-ClientAddr: 147.10.45.40
Received: from 147.10.45.40 (CPE-147-10-45-40.vic.bigpond.net.au [147.10.45.40]); ;by [color=red][b]MY.SERVER.COM[/b][/color] (8.11.6/8.11.6) with SMTP id iBJENIb25533; for [color=red][b][email protected][/b][/color]; Sun, 19 Dec 2004 09:23:18 -0500
Message-Id: <200412191423.iBJENIb25533@[color=red][b]MY.SERVER.COM[/b][/color]>
Received: from smtp.secureserver.net (smtp.secureserver.net [64.202.166.12]) ;by mhub16.lvs.dupont.com with ESMTP; Dec, 19 2004 6:02:21 AM -0700
From: Mike Luthan <[email protected]>
To: Undisclosed.Recipients@[color=red][b]MY.SERVER.COM[/b][/color]
Subject: Database containing a list of every registered domain and email in the world for sale!
Sender: Mike Luthan <[email protected]>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Date: Sun, 19 Dec 2004 07:11:22 -0600
X-Mailer: MIME-tools 5.503 (Entity 5.501)
X-Priority: 1
Status:

I see it goes through 2 hops before it gets to me. The first is owned by GoDaddy. --A few clicks later and its reported. I'll keep improving it to be even faster and easier to use in the future. I saw a similar tool a long time ago, and I had to create my own improved version to have available.

~ Nexus

Nexus · Dec 20, 2004

Completed support for X-ClientAddr and X-Mailer headers. Now it will not only show you what e-mail client was used, but it will give information on the IP address that e-mail client used to send the e-mail. This is especially useful, as this may be the ONLY point that begins overseas, or provides you with other vital info. Webmail clients like Hotmail use these to show where the mail REALLY was sent from (in terms of the individual user).

The information now appears at the very top of the output, specially colored, labelled "E-mail Client Address".

http://www.optimize.net/tools/email-parser-tracer.html

~ Nexus