Broadband forum: Reverse url lookup

If you mean the where the email came from then you need to look though the mail headers...tends to be a compromised machine sending them.

If you mean the actual URL they want to try to trick you into clicking. You can go to one of the domain registers and run whois. Networksolutions is one of the largest but there are others for other countries.

All you will generally find is fake information. You could try the ip address and look that up in the ip registry like arin but most likely all you will find is a hosting center. Or it could all map back to a country like china where you will be able to find nothing.

if you hover over the URL in the email and read where your browser says its truly going in the lower right corner, yo can see amazon is missing, misspelled, or the ending site is something like .cz or some such and thus its a spoof.

I use firefox and it will most of the time flat out warn you, sometimes I like to go to the people who ask for account info and give them fake accounts, wastes their time, all you can really do but if everyone did it, they'd waste a lot of time, sell fake data to not so nice people and it problem make it not worth doing, however most of the time I get a message from firefox anymore saying this is a reported forgery and so I don't bother with it.