I know that you can use the Received
header to determine where an email came from, but what if the Date
header contradicts the Received: from
header.
You can see below that the email was sent at 04:16:43 -1000.
But looking at the Received: from
header (there's only one), we can see that it came from a -0800 (PST) timezone.
So which is correct? -1000 is not the same location as -0800. Can I depend on the date header here?