±Forensic Focus Partners

Become an advertising partner

±Your Account


Forgotten password/username?

Site Members:

New Today: 0 Overall: 35875
New Yesterday: 3 Visitors: 184

±Follow Forensic Focus

Forensic Focus Facebook PageForensic Focus on TwitterForensic Focus LinkedIn GroupForensic Focus YouTube Channel

RSS feeds: News Forums Articles

±Latest Articles

±Latest Videos

±Latest Jobs

Email header

Computer forensics discussion. Please ensure that your post is not better suited to one of the forums below (if it is, please post it there instead!)
Reply to topicReply to topic Printer Friendly Page
Forum FAQSearchView unanswered posts


Email header

Post Posted: Apr 10, 19 09:47


I have one email header. Here we see, that [email protected] send email to [email protected]. And in the middle we see such information: Envelope-to: somebody @ aaa.com, Received:...for somebody @ aaa.com . Does it mean that this email was get from [email protected] via POP3 protocol? Email was found at computer which was used by [email protected], on Outlook Inbox folder. It mean that user should enter POP3 credentials on Outlook to get this email. What is your opinion?

Return-path: <[email protected]>
Envelope-to: [email protected]
Delivery-date: Mon, 31 Jul 2017 15:50:58 +0300
Received: from [] (helo=kmynas.serveriai.lt)
by kadagys.serveriai.lt with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1dcA9y-0003eu-Ds
for [email protected]; Mon, 31 Jul 2017 15:50:58 +0300
Received: from [] (helo=S5VDS17)
by kmynas.serveriai.lt with esmtpa (Exim 4.89)
(envelope-from <[email protected]>)
id 1dc9pa-0007lP-JC; Mon, 31 Jul 2017 15:29:54 +0300
MIME-Version: 1.0
From: [email protected]
To: [email protected]
Date: 31 Jul 2017 15:30:07 +0300
Subject: does not matter

Page 1 of 1