Beginner steps
- Open the original message or raw headers in your email service.
- Paste only the technical header section.
- Read the oldest public relay first and treat the source as probable, not certain.
Understand the limits
Email headers can be incomplete or modified. Never treat a parsed IP as proof of who sent a message.