Full headers for spam from Bcandid.com

14 Mar 2000

Select the message ID to view the entire article. This will not work if the article has expired, been cancelled, or did not reach your local news server for some other reason.

IMPORTANT: Always disable Javascript before viewing spam with a web browser. Spam articles frequently contain destructive or highly annoying Javascript.

The source of a spam may best be determined by examining the Path: and NNTP-Posting-Host: header lines. The From: and Message-ID: lines are usually forged, but may sometimes contain useful information.

Path: denver-news-feed1.bbnplanet.com!su-news-hub1.bbnplanet.com! news.gtei.net!feedwest.news.agis.net!agis!newsfeed.direct.ca! portc05.blue.aol.com!gw12.bcandid.com.MISMATCH!gw22.nn.bcandid.com! hub12.nn.bcandid.com!tw12.nn.bcandid.com.POSTED!4lldk6.com From: 6kdll4@4lldk6.com Newsgroups: alt.business.moderated,alt.business.multi-level, alt.business.multi-level.exceltel,alt.business.multi-level.moderated, alt.business.multi-level.scam Subject: Turnkey Adult Sites 69796 Message-ID: <28020010.1404@4lldk6.com> Organization: rfvc6v Cancel-Lock: sha1:G6/yrBTdluauRCxBQCbLr5BPt4r= Lines: 10 NNTP-Posting-Host: 216.36.34.80 X-Trace: tw12.nn.bcandid.com 951761762 216.36.34.80 (Mon, 28 Feb 2000 11:16:02 MST) NNTP-Posting-Date: Mon, 28 Feb 2000 11:16:02 MST Date: Mon, 28 Feb 2000 18:16:02 GMT