Since their introduction, emails adoption has growth significantly, as now they have become a fundamental means of communication, whether for connecting with work partners or long-distance friends, but also for receiving sensitive information and updates, related to our online accounts. However, the same growth affected less desirable activities, particularly cybercrime, as email has become nowadays a target for various type of attacks. In order to protect and secure users' inboxes, email authentication protocols, such as DKIM, are used in addition to antispam software, to discriminate between dangerous and harmless emails. During the investigation of cyber related crimes, it is often crucial to establish the existence and the correctness of potential evidence, which may be used as proof within a legal process.