finding email in forward