This one is very strange -- it looks like there was a mail loop involved, it was scanned by several virus/spam scanners, it has highly unusual (and likely broken) To:/Cc: headers, and appears as though it may have been scanned twice on your server.

From the Received: headers, it appears that you received this from fanga.afribone.net.ml, which added some of the Declude headers.
-Scott


At 07:43 AM 8/28/2003, serge wrote:
attahed is a notification i received today
notice the first 2 lines are supposed to be in the header but appears in the body
please let me know what went wrong
Received: from fanga.afribone.net.ml [216.147.136.2] by cefib.com with ESMTP
(SMTPD32-8.02) id A40F6F50220; Thu, 28 Aug 2003 10:06:07 +0000
Received: from spammail by fanga.afribone.net.ml with spam-scanned (Exim 3.36 #1)
id 19sJep-0001Tv-00
for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:06:06 +0000
Received: from root by fanga.afribone.net.ml with scanned-ok (Exim 3.36 #1)
id 19sJep-0001Ts-00
for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:35 +0000
Received: from majordomo by fanga.afribone.net.ml with local (Exim 3.36 #1)
id 19sJep-0001Tk-00
for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:35 +0000
Received: from spammail by fanga.afribone.net.ml with spam-scanned (Exim 3.36 #1)
id 19sJeJ-0001SO-00
for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:34 +0000
Received: from root by fanga.afribone.net.ml with scanned-ok (Exim 3.36 #1)
id 19sJeJ-0001SL-00
for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:03 +0000
Received: from [208.154.200.29] (helo=edmsa.net)
by fanga.afribone.net.ml with esmtp (Exim 3.36 #1)
id 19sJeI-0001P2-00
for [EMAIL PROTECTED]; Thu, 28 Aug 2003 10:05:03 +0000
Subject: [afim] Attention: On vous a envoy� un virus
Date: Thu, 28 Aug 2003 10:03:57 +0000
Message-Id: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-8859-1
From: "Postmaster" <[EMAIL PROTECTED]>
Reply-To: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
CC: [EMAIL PROTECTED],
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
CC: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
CC: <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
X-Mailer: <IMail v8.02>
X-RBL-Warning: IPNOTINMX:
X-Declude-Sender: [EMAIL PROTECTED] [127.0.0.1]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: IPNOTINMX
X-weight: 0
Precedence: bulk
Sender: majordomo <[EMAIL PROTECTED]>
X-Virus-Scanned: by Antivirus
X-Spam-Status: No, hits=2.1 required=8.0
tests=MIME_DEFICIENT_QP
version=2.55
X-Spam-Level: **
X-Spam-Checker-Version: SpamAssassin 2.55 (1.174.2.19-2003-05-19-exp)
X-RBL-Warning: HELOBOGUS: Domain fanga.afribone.net.ml has no MX or A records.
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 216.147.136.2 with no reverse DNS entry.
X-RBL-Warning: FIVETEN-SPAM: 2.136.147.216.blackholes.five-ten-sg.com.
X-Declude-Sender: [EMAIL PROTECTED] [216.147.136.2]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: HELOBOGUS, REVDNS, FIVETEN-SPAM
X-weight: 9
X-Declude version: 1.75
X-Note: This E-mail was sent from [No Reverse DNS] ([216.147.136.2]).
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 352740664

--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to