I can't figure out how to see the full message header in either gmail (my personal account that she sent to) or Outlook on my work side (it may be stripped, dunno).
The gmail does have this at the bottom:
| mailed-by |  gmail.com |
| signed-by | gmail.com |
Ok - found it in Outlook (I removed all e-mail addresses and replaced with something else so it would make sense but not give out addresses):
Microsoft Mail Internet Headers Version 2.0
Received: from
naeanrfkeb01v.nadsusea.nads.navy.mil ([10.16.20.105]) by
naeanrfkez08v.nadsusea.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.3959);
Thu, 22 Apr 2010 04:40:39 -0400
Received: from
naeanrfkeb10v.nadsusea.nads.navy.mil ([10.16.20.113]) by
naeanrfkeb01v.nadsusea.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 22 Apr 2010 04:40:39 -0400
Received: from
naeanrfkeg06v.nadsusea.nads.navy.mil ([10.16.20.62]) by
naeanrfkeb10v.nadsusea.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 22 Apr 2010 04:40:39 -0400
Received: from
NAEANRFKAX08.NADSUSEA.NADS.NAVY.MIL ([10.16.0.46]) by
naeanrfkeg06v.nadsusea.nads.navy.mil with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 22 Apr 2010 04:40:38 -0400
X-AuditID: 8aa20595-a98d4bb000000d36-8c-
4bd00c8f6ad5
Received: from fg-out-1718.google.com (fg-out-1718.google.com [72.14.220.157])
by NAEANRFKAX08.NADSUSEA.NADS.NAVY.MIL (By accessing this system, you are consenting to this monitoring.) with ESMTP id 7584551400B
for <[email protected]>; Thu, 22 Apr 2010 08:45:03 +0000 (GMT)
Received: by fg-out-1718.google.com with SMTP id e21so197760fga.16
for <[email protected]>; Thu, 22 Apr 2010 01:40:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:date:received:message-id
:subject:from:to:content-type;
bh=GOsK7j4tM4VWWjzQn020tNATJmavKsuLIIQ/1qsCsHQ=;
b=Yk0JDn7gC1Zx+aEonwvDQ3UGCs4yG9/zOUstWfgdzvDRZQAZ1+0dn0KQMBsHAvxVoK
wmJQ3sVoTiwxApWt5Lr0E6MwlneOOotjG0bhD28C9wbVwdAQi2RX9vO9kT+O/GTKyIfK
pA4EDxGCzeeJW1CfN3CDeRFNBp7QRf/Mq21IU=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
b=NZLscr82G6wogPhlIoCBJkAFUnBqmkXXEQYTkiDWuaJu0yTDvcrk/J+pkV96Oo0uxW
1bpGNQKBLPPL9OQSOzyqLEobLckd/H25YhU7mYLBuSu/fTSXMWVkvjRT+IqZIC08TKWG
aLqxB/lAKOlZy6WpawRKTKOehYuM4JsFt0hSo=
MIME-Version: 1.0
Received: by 10.223.112.13 with HTTP; Thu, 22 Apr 2010 01:40:30 -0700 (PDT)
Date: Thu, 22 Apr 2010 03:40:30 -0500
Received: by 10.223.92.136 with SMTP id r8mr379933fam.40.1271925631003; Thu,
22 Apr 2010 01:40:31 -0700 (PDT)
Message-ID: <z2rae0de4ae1004220140t74fe590[email protected].com>
Subject:
From: Mrs.Moore <mrs.moore@gmail.com>
To: bunch of e-mail addresses
Content-Type: text/plain; charset=ISO-8859-1
X-Brightmail-Tracker: AAAAAhPYxLgT2ZbG
Return-Path: mrs.moore@gmail.com
X-OriginalArrivalTime: 22 Apr 2010 08:40:38.0815 (UTC) FILETIME=[7C1122F0:01CAE1F7]