The first two emails from kidnapperguy@hotmail.com contained photos of Pearl (the photos you saw in the news last week).
Largely unreported, they also contained the IP address of the computer from which the emails were send (that's a well-known "feature" of Hotmail).
I posted on Friday that they'd been ID'd the minute they sent their emails.