UM-Flint ITS Helpdesk - http://www.umflint.edu/helpdesk
Finding Internet Headers for Phishing Emails in Outlook 2003/2007
http://www.umflint.edu/helpdesk/articles/252/1/Finding-Internet-Headers-for-Phishing-Emails-in-Outlook-20032007/Page1.html
Thomas Stockwell
I am a computer science major at the University of Michigan-Flint, and I am currently working as both a HelpDesk Consultant and Computer Lab Consultant in the ITS department.  Along with my programming endeavors at the University of Michigan, I am also a writer for the CodeProject website (http://www.codeproject.com).  A link to my profile and programming articles can be found at: http://www.codeproject.com/script/Membership/Profiles.aspx?mid=2196668 
By Thomas Stockwell
Published on 03/13/2009
 
Phishing emails are a subset of SPAM emails that request passwords and other personal information from campus users.  Do not respond to any Phishing email.  Due to the nature of how many security problems Phishing emails can cause, ITS may request internet headers so that they can try to prevent users from responding to these emails as well as filtering these emails out of circulation so that users won't receive them.

Before You Begin Phishing emails are a subset of SPAM emails that request passwords and other personal information from campus users.  Do not respond to any Phishing email.  Due to the nature of how many security problems Phishing emails can cause, ITS may request internet headers so that they can try to prevent users from responding to these emails as well as filtering these emails out of circulation so that users won't receive them.

This quicknote is specific to Microsoft Office 2003/2007, if you are using another email client please refer to the Ann Arbor website for internet header information: http://www.umich.edu/itua/canthespam/full-headers.php.   

Also note, at this time we are unable to retrieve internet headers from webmail.
Finding Internet Headers
  1. Open Microsoft Outlook 2003/2007
  2. Double-click on the email in question
    Single Image
    Click Image to Enlarge

    The email above is not a Phishing email, it is only used as an example
  3. Click on the pop-out button on the lower right-hand corner of the Options tab group pane. For Office 2003 please view the drop down menu and select Options from this menu.
    Single Image
    Click Image to Enlarge
  4. In this window, copy all of the Internet headers in the highlighted portion of the window above.
Internet Headers contain enough information for ITS to assist with filtering against phishing emails as well as making sure no one responds to these emails.

What's Next...
  1. Please forward the Questionable Email to ITSHelpDesk@umflint.edu with the internet headers that you just copied.  It is not enough to just forward the Phishing email to the ITS HelpDesk.  Internet Headers are replaced every time you forward the email, and they contain the most up to date information about the source of the email
  2. After the email/internet headers have been copied and forwarded to the ITSHelpDesk@umflint.edu, please be sure to Delete the questionable message.