I eventually got 4 copies from 3 IPs, 24.x.x.x plus: 68.82.235.252 81.202.170.237
No relaying. Interestingly, 3 of them got caught. Dan On Wednesday, June 18, 2003 23:24, J Porter <[EMAIL PROTECTED]> wrote: >Ask and ye shall receive... whether you want it or not.. ) > >~~~~~Header~~~~~ >Received: from attbi.com [24.131.138.246] by mail.hnb.com > (SMTPD32-7.03) id AE3F48EA013A; Wed, 18 Jun 2003 16:48:47 -0500 >Received: from h00036d13b375.ne.client2.attbi.com >(h00036d13b375.ne.client2.attbi.com [24.131.138.246]) > by attbi.com (8.12.5/8.12.5) with ESMTP id itecdf78756 > for <[EMAIL PROTECTED]>; Wed, 18 Jun 2003 18:44:48 -0400 (EST) >Message-ID: <[EMAIL PROTECTED]> >From: "Arvind Fwpreg" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Subject: BestBuy Order #1095619. Fraud Alert. >Date: Wed, 18 Jun 2003 18:44:46 -0400 (EST) >MIME-Version: 1.0 >Content-Type: multipart/related; > type="multipart/alternative"; > boundary="----=_NextPart_000_000F_01C33095.9F84B280" >X-Priority: 1 >X-MSMail-Priority: High >X-Mailer: Microsoft Outlook Express 6.00.2720.3000 >X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2727.1300 >X-RBL-Warning: NOPOSTMASTER: Not supporting [EMAIL PROTECTED] >X-Declude-Sender: [EMAIL PROTECTED] [24.131.138.246] >X-Note: This E-mail was scanned at HNB.COM ISP for spam. >X-Spam-Tests-Failed: NOPOSTMASTER >X-RCPT-TO: <[EMAIL PROTECTED]> >Status: U >X-UIDL: 339081275 > >~~~~~~~~~~~~~~~~~~~~~~ >----- Original Message ----- >From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Thursday, June 19, 2003 1:10 AM >Subject: RE: [Declude.JunkMail] OT: Fraud Alert > > >Filter file for BODY "your-instant-credit-reporter.org" without >the quotes. > >Can some one post the full headers? > >John Tolmachoff MCSE CSSA >Engineer/Consultant >eServices For You >www.eservicesforyou.com > >--- >[This E-mail scanned for viruses at HNB.com] > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
