The headers of the email message will tell you exactly where it is coming from.
You can also search for the message in the tracking log to see the history from sending to receiving of any message sent through exchange.
Analyzing one message is not a scripting issue.
\_(ツ)_/