E-mail Header Information is important when reporting scams to authorities. This information is used to trace the location of offenders.

Below you will find information on locating full e-mail header information in various e-mail software:

Ananzi Mail
• Open the received message.
• Look to the right of the e-mail header. You will notice two icons on top of each other.
• Click the top icon and a new window will open with the full header information.

Eudora Pro
• Click on the message in the Inbox and highlight it.
• Double click on the message to open it.
• Double click on “Blah, Blah” button.

Outlook
• Click on “Inbox”.
• Click on the scam letter to highlight it.
• Right-click the scam letter and click on “Options”.

Outlook Express
• Click on Inbox. It should now be highlighted.
• Click on the scam message. It should be highlighted.
• Right-click on the message and click on “Properties”.
• A message box will open. Now click on the “Details” tab.

Netscape Mail
• Click on the “View” menu.
• Now click on “Headers” and then “All”.

Hotmail
• Click on the scam message to open it.
• Click the “Options” tab.
• Now click on “Preferences”.
• Click on Message Headers/Advanced, then “OK”.

AOL
The email files are in an html format. The objective is to save the file in html format. This can be done as follows:

• Open the email message you want to save, as if you were reading it.
• Move mouse cursor to the top tool bar, click on "File"
• Move mouse cursor to "Save as..." and click.
• Identify which directory you would like to save the file in. This is done using the normal save function of Windows. If you are not real comfortable with directories, save the file in "Desktop". This will have the file icon visible on you regular desktop screen and very easy to find later on.
• Provide a name of the file in the "file name" box.
• Select the "type" as "html" if possible. If your browser does not show "html" type, just select the type as "All Files" and add ".html" to the file name generated in step 6, such as email.html. The "dot" before the html extension is important. The objective of this step is to have the extension of the file as an "html" type file.
• Press "Save".

To forward the file to someone else (law enforcement, lawyer, ISP):

• Move cursor to the top tool bar and click on "Write"
• Insert the email address you want to forward the file to
• Type any info in the body of the message, if needed
• To add the html file you just generated in the above steps, click on "Attachments"
• When the "Attachments Window" opens, click on "Attach"
• Find the file in the directory window and highlight the file name. If you followed the "Desktop" instructions, the directory name is "c:\desktop". If there are too many files that appear, type "*.html" in the file name. The use of the asterisk (also called a star by some) lists all files that are html.
• Click on "open"
• Click on "OK"
• Click on "Send now"
• The message and attached file have now been sent.

Yahoo
• Click on the message to open it.
• To the top right hand side click the “View Headers” tab.

Agent/Free Agent
Hit Ctrl+H or click on Message, then Show All Header Fields. Go to the message, click inside the message pane, COPY, then PASTE to a text file or forward the message to yourself or to the appropriate ISP.

Becky! Internet Mail
At the bottom of the message view there are tabs. Select the Headers tab to display the raw header information.

Blitzmail
With the offending spam message open, go to the Options menu and choose Verbose Header. This will put the full header inside the upper pane of the message's window.

cc:Mail
cc-Mail is one of several email systems that do not comply with Internet standards. It discards the headers. You shoulc contact your system administrator to see if there are any logs of incoming mail that might assist you. You as the user will not be able to get the headers at all.

Please contact your cc:Mail system administrator for further information.

Claris Emailer
Version 2.0 and higher:
Use the "Show Long Headers" option in the "Mail" menu while you have the spam message open.

Versions earlier than 2.0:
Click the blue triangle near the "from" information to show additional message information, then click the "Show Original Headers..." button to bring up the full header info. You'll have to cut/paste the header into a new message, then cut/paste the body text.

Compuserve
The default option is that full headers appear at the bottom of each received message.

Elm, Mail and Mailx
Some more header info for some Unix mail programs.
Nearly nobody uses mail and mailx any more, but they're available on almost all UNIX systems, so let's start with those. You can exit your current mail program without changing the mailbox and then look at the mail message using mail or mailx.

Showing a mail message with the Print or P command displays all of the header lines. Note capital P -- it's important.

Saving the current mail message with the saveretain command saves all of the header lines. (On some systems, Save or S -- note the capitals! -- does this too).
There are lots of other mail readers; the one I use is ELM. In ELM, you display the headers for the current message with the H command.

GNU/Emacs integrated email
Press the keys 'W', then 'v' in the summary or mail buffer.

Another method of temporarily switching to ALL headers is by pressing "Ctrl-u g" on the article in the summary buffer.

kmail (KDE Desktop)
In the KDE Mail Client that comes with the KDE desktop for Linux, select Message, View Source. Copy and paste the text from the "Message as Plain Text" window into a new message.

Mutt
To get mutt (the mail user agent) to forward the full headers (not display them for viewing), use the command "unset forward_decode" in your rc file or directly in the command interface.

Pine
You must configure Pine to allow showing message headers. You may skip steps 1-3 below if you have performed this configuration.

• From the main Pine menu, type S for Setup, then C for Config.
• Use the space bar and down arrow to scroll until you reach the option [ ] enable-full-header-cmd, then type X in the box to toggle the option on.
• Type E to exit Config, and Y to save changes.

The next time you read a message, type H and the full headers will be displayed at the top of the message. Type H again to hide the headers.

Pronto Mail (GTK/unix)
• Click "Message" then "View Source"
• Highlight the message source as normal with the mouse
• Copy using Control+C
• Paste into a new message

Entourage
• Select the message in the Inbox.
• Go to View: Source.
A new window will contain full headers and message text.
This is the easiest way to copy and paste for reporting.

Alternately, go to Edit:Preferences:Mail and News.
Under the View tab, there is a checkbox for Show Internet Headers.
This option is a bit less useful, as it separates the headers from the body.

Exchange
To read (and copy) the header using Microsoft Exchange, do the following:
Open the message in Exchange to view it. Choose File then Properties then Internet. The header will be visible and will be highlighted. Simply right click and copy it. Then paste on the front of the message and forward it to abuse department or WHOA Internet Safety Advocate (ISA).

In some versions of Exchange, you'll need to go to the File Menu > Properties > Details > Message Source.

Internet Explorer
Choose "Properties" under "File". Click on the "Details" tab. This will show the full header.

Now right click and choose "Select All". Right click again and choose "Copy". Start a new message, right click again, and choose "Paste". This will paste the entire header into this new (and temporary) message. Copy the header from the new message and paste it back onto the original. The paste command doesn't work directly on the original message.

This isn't elegant, but it seems to work.

Internet News
For those people who use Microsoft's Internet News, simply (while viewing the message) click on File, Properties, then click on the Details tab. Copy the information and paste it into a new email, then copy and paste the body of the message below the headers in the new email and send that message to the abuse department or WHOA ISA.

Outlook 2002
• Right-click the message without opening it, then click "Options" from the drop-down menu.
• A box called "Message Options" pops up.
• Near the bottom of the box you'll see a text area titled "Internet headers".
• Highlight the contents, then right-click. You can copy the headers and paste them into an email message or another application.

Outlook 2000
• Right click on the message without opening it.
• Select Options, then Full Headers.
• The information can then be copied and pasted elsewhere for reporting abuse.

Outlook 98
• Open the message and select View, then Options from the drop-down menus.
• Near the bottom of the screen you'll see a section titled INTERNET HEADERS.
• You can copy the headers and paste them into an email elsewhere to get them to the proper people.

Outlook 97
Microsoft Outlook 97 may require an update called the Internet Mail Enhancement Patch in order to display the email headers. After applying the patch, you should be able to view the headers by selecting the message, then going to the File menu and selecting Properties.

Outlook Express 4 and 5 for Windows
First method:
There's an even easier solution to expanding Microsoft's Outlook Express headers so that you can copy and paste it to another window. You need to be viewing the message in its own window or in a preview pane, then:

• Right click on the message and select Properties.
• Choose the Details tab and select the Message Source Button.
• Select All (CTRL + A) and Copy (CTRL + C).
• Close the Message Source window and the Properties window.
• Select New Mail and position your cursor in the body of the email.
• Paste (CTRL + V) the copied information.
• Send the email to the abuse department or WHOA ISA.

Second method:
Here's a tip to simplify the process of getting full headers when using Outlook Express 5 and Windows 98 (don't know about other versions of OE)

Instead of selecting the message, right-clicking properties, clicking details, then message source, simply select the message and press Ctrl-F3. Then press Ctrl-A followed by Ctrl-C. (Ctrl-F3 takes care of all the steps necessary to get to the full header. Ctrl-A selects all the text and Ctrl-C copies it to the clipboard.)

Now start a new message or just forward the original message (which takes less time than opening a new one) to the abuse department or WHOA ISA.

If you have disabled the preview pane (which is a good idea):

Using the keyboard:

• Highlight the message in the folder
• Press alt & enter - this will open a message information window
• Press Ctrl & Tab - this changes to the "Details" tab
• Press Alt & M - the opens the message source
• Press Ctrl & A - to select all the text
• Press Ctrl & C - to copy the selected text to the clipboard
• Press Alt & F4 - to close the message source window
• Press the Esc keay - to close the information window
• Now, open a new message.
• Address the message to the WHOA ISA who is working with you or to the abuse department to whom you wish to report the message.
• Move your cursor to the body of the new message.
• Press Ctrl & V to paste the information from the clipboard to the body of the new message.
• Send the message.

Outlook Express 6 for Windows
To find the Internet headers in Microsoft Outlook Express 6:

• Select the email and go to: "File"
• Select: "Properties"; Choose the "Details" tab
• Left click at top of header to highlight; scroll down to end; once highlighted, right click & hit "copy"
• Close the "Details" window
• Select "New" Mail and using right click "paste" the header info into the body of email
• Send the email to the ISP where the SPAM originated

Outlook Express for Macintosh
Select the email. From the View menu, choose Source. A new window will appear containing the email with full headers. Press command+a to select all, then command+c to copy.

Outlook Web Access
• Left click on the letter you want to open and click on properties
• When that opens click on the details tab
• Then on message source
• This will open the email so the full headers will be available for viewing
• Select and copy the text. Paste into a new message.

Excite Webmail
• View the message
• Use the save to disk option
• Open the message's text file with your favorite text editor (notepad)
• Copy the message from the text editor

Excite has upgraded their software and made it easier.

Now all you have to do is :

View the message and then click on "Full Header" in the upper right corner. This will display the full header info versus the "Brief Header" info.

Foxmail
Getting headers is quite easy in Foxmail, just press {Ctrl} + {I}, and then click on the {All} button, or press {Alt} + {A}.

Freeserve Webmail
Log in to FSMail. Click on Options > Display. Select the option you want for headers.

Gmail
• Open the message.
• Look at the top right of the message for the 'Reply' button.
• Next to the 'Reply' button you will see a drop down arrow, click it and a drop down box will open.
• Look for 'Show Original' and click it
• A new window will open with the full header information

Juno
On the drop down menu Options, choose Email Options (press ctrl-E). Under Show Message Headers, select the full option. Click the OK button to save the setting.

Juno version 4+ can display MIME and HTML email, but does not provide a way of Viewing the HTML Source for the message within Juno.

To get the full source, including HTML codes:
• In the Juno mail client, click "file" and then "Save Message as Text File.." (ctrl-T).
• Give the file a name which you will remember (many people save temporary files to the desktop).
• Double-click on the resulting file.

Lotus Notes
Lotus Notes 4.6 (Win 9x client)
• Open the properties box on the message (in the default installation of the Notes Client, it will be the first smart icon on the left, but you can also right-click on the document and choose properties from that menu)
• Choose the second tab on the properties box, which is a list of fields and their contents
• Scroll down to the field $additionalheaders.
• Select the contents of the field and hit Ctrl+C to copy them to your clipboard
Open a new email message, put your cursor in the body of the message, and hit Ctrl+V to paste the headers there

If Notes will not permit you to select the contents of the field, you'll have to manually copy them to a new message - please be very careful in doing so.
Thanks to Cynthia for this information

Lotus Notes 5.x
Export the message as structured text to a file, then copy/paste the entire message. You should get all the received fields with Received: already in place. You'll also get reply-to: and other smtp headers.

Lotus Notes 5.x (additional info)
• Single click on the subject line without opening the document to full screen.
• Select "file" (upper left) then select "export"
• Name the file
• Select "export"
• Click on "selected documents"
• Select "OK"
• The file now exists where you have saved it. You can either open it or attach the file to an email.

To open it you need to select a word processing program (Wordpad is recommended) You can attach the file to an email without opening it yourself.

Lotus Notes 6.x
Lotus Notes Version 6.x You might be able to get header information (of an "open" email) by clicking on
View/Show/Page Source

This will show the entire contents of the message, with of course, the headers at the top of the message.

Also, in Lotus Notes version 4x, 5x, you can click on "Edit/Properties" -
Click on the 2nd tab, and you'll find quite a number of fields.
Lotus Notes breaks up the various header entries into various "received" fields- which are individually selectable, copy and pasteable.
A little cumbersome, but a method that I've had to use for troubleshooting in the past.

Please note that some versions or installations of Lotus Notes do not comply with internet standards and discard the headers. If that is the case, you should contact your system administrator to see if there are any logs of incoming mail that might assist you. You as the user will not be able to get the headers at all.

Lycos Mail (mailcity.com)
When viewing an individual message, click on the tool bar menu item above the message "All Headers." Highlight and copy the complete message from the viewing window and paste into a new message.

Macintosh OS X Mail
• Select the Mail menu
• Select Preferences
• Select Viewing and change Show header detail to "All"

Mail Warrior
To get full "message source":

• When viewing the message, click File, then Save Message As.
• A standard save window will appear.
• Save the message as a .txt file (mail.txt).
• Open the file you created, select all (ctrl-A) and copy (ctrl-c).
• Create a new message and paste (ctrl-v) the information into the body of the new message.

IncrediMail
Select File > Properties and then the Details tab. Highlight all of the header, then press Ctrl + C to copy the headers to your clipboard.

Newswatcher
If you want the full headers on Newswatcher, go to File, choose Preferences, and check the Show Article Headers box.

Novell Groupwise
• Open the message
• In the message window select: File > Attatchments > View
• Select the Mime.822 attachment

Onebox.com
According to Brad Sockloff of Onebox.com, it is not currently possible to view full headers through their webmail interface. Onebox.com customers can, however, POP their mail and then view the headers in whatever email program they have chosen to use. Please see their site or support department if you need help POPping your onebox.com email.

Pegasus
• In Pegasus, just hit Ctrl-H (or the backspace key) while reading a message. You will see the full headers.
• Do this *before* hitting "F" (for Forward), and the full headers will be forwarded, too.

Operamail
Choose Options and enable [x] Show Message Headers in Body of Message

StarOffice
• Right click on the container name in the explorer panel (either a top-level mail box or a specific mail folder).
• Select the Properties item from the pop-up menu.
• In the properties notebook, select the Headers tab.
• Click the "All" button on the right.
• Press "OK" and you're done, the coplete header is available in the header panel and can be selected/pasted into SpamCop.

The Bat!
To get the full text of an HTML message from TheBat email software:

• Message -> SaveAs -> Save as Type - I
• Select Unix Mailboxes [*.mbx]
• Open the file in your preferred editor, then simply cut and paste.

For The Bat! v1.53bis:

• Select the message in question
• Click on the "Messages" menu
• Select "View Source"
• Alternatively, you may push F9 instead of the last two steps.

WebTV
• While viewing the email, hit "Forward" on the sidebar. Address the document to yourself. Completely erase the subject line.
• Put your cursor on the first line of the "body" (text area); Hit "Return" (enter) twice. Your cursor should now be on the 3rd line of the text area.
• Type any "Alt" character on this line; DO NOT HIT "RETURN"
• Cut and Paste the "Alt" character onto the subject line: (CMD+"A"), (CMD+"X"), (CMD +"V") The "Alt" character should "jump" down to the message text-area.
• Hit "Send"; open the received mail.