How to track IP adresses in spam mails

[US bandidos]

Heres one example on company mail spammings from US NETFLIX fake fact.

Anton sport henvendelse #4840222
Hei!
Vi har registrert saken med saks-nummer 4840222, og vil behandle saken så fort det lar seg gjøre.

Du vil bli varslet på denne epost-adressen når vi har en oppdatering i saken.

Sakens innhold
Re: Fakturaen din No. (900315)

Jeg har ALDRI bestillt Netflix!!
I have never ordered NETFLIX!
Stop sending me fake orders!
And “person” bmonline is not for sale!!!!

From: Netflix
Sent: Wednesday, February 19, 2020 1:52 AM
To: bmonline@bmonline.no
Subject: Fakturaen din No. (900315)

Netflix

[!!] Kontoen din er på vent.

Oppdater betalingsinformasjonen
Hei bmonline,
Vi har problemer med gjeldende faktureringsinformasjon. Vi prøver igjen, men i mellomtiden kan det være lurt å oppdatere betalingsopplysningene dine.
OPPDATERER KONTO NÅ

–Vennene dine på Netflix

Questions? Call 1-888-811-9842
This account email has been sent to you as part of your Netflix membership. We may also send email about enhancements to the Netflix service, tips for getting the most out of your Netflix membership, and special offers. To change your email preferences at any time, please visit the Communication Settings page for your account.
Please do not reply to this email, as we are unable to respond from this email address. If you need help or would like to contact us, please visit our Help Center at help.netflix.com.
This message was mailed to bmonline@bmonline.no by Netflix.
SRC: 243743 _no_NO
Use of the Netflix service and website is subject to our Terms of Use and Privacy Statement.
Netflix International B.V., care of Netflix [Inc.], 100 Winchester Circle, Los Gatos, CA 95032, U.S.A. https://help.netflix.com/help

Her ser dere hvor fake faktura kommer ifra:

The email source IP address is 54.240.52.214.
IP Location Info:
IP Address 54.240.52.214
Country United States
Region Washington
City Seattle
ISP Amazon.com
Organization Amazon.com
Latitude 47.6348
Longitude -122.3451

Here you can check the mail Header:
Her sporer du alle mail som du ønsker å finne opphavet til:

https://www.iplocation.net/trace-email

Just past the mail header in and click submit.