Ok This is what headers should look like
There are a few basic parts that are the ones that you want
I sent this email to meself and i cleared out my up address for obvious reasons
MIME-Version: 1.0
X-Originating-IP: [xxx.xxx.xxx.xx]
X-Originating-Email: [xxx@hotmail.com]
X-Sender:
xxx@hotmail.com
Received: from hotmail.com ([65.54.162.43]) by mc12-f5.hotmail.com with Microsoft SMTPSVC(6.0.3790.211); Tue, 9 Aug 2005 05:35:26 -0700
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Tue, 9 Aug 2005 05:35:25 -0700
Received: from 65.54.162.200 by by108fd.bay108.hotmail.msn.com with HTTP;Tue, 09 Aug 2005 12:35:25 GMT
X-Message-Info: JGTYoYF78jEHjJx36Oi8+Z3TmmkSEdPt4iogl2abg+M=
X-OriginalArrivalTime: 09 Aug 2005 12:35:25.0924 (UTC) FILETIME=[D15EA240:01C59CDE]
Return-Path:
xxx@hotmail.com
The originating IP address is the main one that you want, it'll identify the computer in which it was sent from
That is actually all you need, from there you can use the ip address to find out the hostname of the computer and then the company, then you can report the ip address
If you want, you can find a rough location, or atleast the time zone, but not the exact location