Usually, not always but usually, it's from the first IP listed. You can copy and paste that IP address 62.101.126.200 into the first box at Sam Spade and see it's (no surprise) RIPE which is second to only APNIC at supporting illegal scams, UCE, DoS attacks, etc. RIPE is Europe and in this specific case, Italy. You can also paste IP addresses here; http://network-tools.com/ and "dot" the box "network lookup". I have ALL IP addresses from APNIC and RIPE blocked for obvious reasons.
The most accurate way is to paste the entire header into the submit form at www.spamcop.net . You can't get to the submit box until you sign up, it's free. http://www.spamcop.net/anonsignup.shtml They will send you a custom URL to paste UCE within it and then get the reporting addresses. They can parse the headers and find out if indeed the first IP is the correct origin. (In this instance it happened to be). If you use them, let me know because there are some things you should know about them first. -Clint God Bless Us All Clint Hamilton, Owner http://OrpheusComputing.com ) ----- Original Message ----- From: "scubic" <[EMAIL PROTECTED]> I received a message from these folks. Trying to use Sam Spade, I'll admit I'm stymied. Can anyone figure out who this is really from, and how to contact them to complain? Obviously I did not send this to myself. It's getting really irritating when the spammers are figuring out how to cloak their addresses to the point where they are not easily discovered. sue ******************* Status: U Return-Path: <[EMAIL PROTECTED]> Received: from 62-101-126-200.fastres.net ([62.101.126.200]) by swallow (EarthLink SMTP Server) with SMTP id 1ajHAAsN3NZFkN0 for <[EMAIL PROTECTED]>; Tue, 11 Nov 2003 15:06:23 -0800 (PST) From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Subject: notice Date: MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="6aV6T8j8mWiO71CdPtn0mkVV65A58H5K" X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0) Message-Id: <[EMAIL PROTECTED]> v62c4I3Ni Ayoi 8W0N1 vI4C 171 pq45CV0 A8 2X1GK0062 52Ag065 651tL64 ============= PCWorks Mailing List ================= Don't see your post? Check our posting guidelines & make sure you've followed proper posting procedures, http://pcworkers.com/rules.htm Contact list owner <[EMAIL PROTECTED]> Unsubscribing and other changes: http://pcworkers.com =====================================================
