See an example

This is what you see after pasting a spam email. It uses a made-up email, so nothing is sent to anyone.

This email most likely came from 203.0.113.45, on a network run by BULKHOST-EXAMPLE.

This points to the server or email account used, not to the person behind it.

High confidence

Who would get the report

[email protected]
Example contact for this sample email. It is not a real network and nothing will be sent.
[email protected]
Example host for secure-login.paypal-verify.example in this sample. Nothing will be sent. Also: Example host for track.bulkmail-click.example in this sample. Nothing will be sent.

Your name and email address stay private. We remove them, and you read and approve the report before anything is sent.

How we traced it

Mail was received by Gmail / Google Workspace. Its headers are trusted.
Hop 1: internal handoff without an IP, skipping.
Hop 2: trusted server mx.google.com accepted the message from 203.0.113.45. This is the source.