Hotmail Header Format

From ForensicsWiki
Jump to: navigation, search
Message-ID: <BAJ334-H2TF2ACACF5F966510E7ADA6GC0@phx.gbl>
Content-Type: multipart/alternative;
	boundary="_123eccb8-5ca2-67e8-a450-1234c16e36a3_"
X-Originating-IP: [255.255.255.255]
From: Username <username@sendinghost.com>
To: Username <username@receivinghost.com>
Subject: header test
Date: Sat, 28 Jul 2007 10:35:46 +0100
Importance: Normal
MIME-Version: 1.0
X-OriginalArrivalTime: 28 Jul 2007 09:35:47.0016 (UTC) FILETIME=[AD3C4C80:01C7D0FA]

Message ID Field

The example shown above is a real message id field with some of the digits randomly replaced.