Difference between revisions of "Hotmail Header Format"

From Forensics Wiki
Jump to: navigation, search
(New page: <pre> Message-ID: <BAJ334-H2TF2ACACF5F966510E7ADA6GC0@phx.gbl> Content-Type: multipart/alternative; boundary="_123eccb8-5ca2-67e8-a450-1234c16e36a3_" X-Originating-IP: [255.255.255.255] F...)
 
Line 12: Line 12:
 
X-OriginalArrivalTime: 28 Jul 2007 09:35:47.0016 (UTC) FILETIME=[AD3C4C80:01C7D0FA]
 
X-OriginalArrivalTime: 28 Jul 2007 09:35:47.0016 (UTC) FILETIME=[AD3C4C80:01C7D0FA]
 
</pre>
 
</pre>
 +
 +
== Message ID Field ==
 +
It's a real message id field with some of the digits randomly replaced.

Revision as of 04:49, 28 July 2007

Message-ID: <BAJ334-H2TF2ACACF5F966510E7ADA6GC0@phx.gbl>
Content-Type: multipart/alternative;
	boundary="_123eccb8-5ca2-67e8-a450-1234c16e36a3_"
X-Originating-IP: [255.255.255.255]
From: Username <username@sendinghost.com>
To: Username <username@receivinghost.com>
Subject: header test
Date: Sat, 28 Jul 2007 10:35:46 +0100
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 28 Jul 2007 09:35:47.0016 (UTC) FILETIME=[AD3C4C80:01C7D0FA]

Message ID Field

It's a real message id field with some of the digits randomly replaced.