So no suggestions on how to do forensics on this?
For example is there any way through the message-header that I can tell anything.
Received: by rack.stnhost.com (Postfix)
id 6E1C4CA80FA; Fri, 3 Apr 2015 11:53:08 -0500 (CDT)
Date: Fri, 3 Apr 2015 11:53:08 -0500 (CDT)
From...