MAIL: tracking summary
Do not trust From:, Sender:
From_ is usually incorrect, too.
Message-Id: might contain info
Received lines most valuable, but do note the “helo” field, it can be faked,even hostname can be faked, IPnrcan’t be.
Beware of faked “Received” lines.