Full headers for spam from Earthlink

7 Jan 2000

Select the message ID to view the entire article. This will not work if the article has expired, been cancelled, or did not reach your local news server for some other reason.

IMPORTANT: Always disable Javascript before viewing spam with a web browser. Spam articles frequently contain destructive or highly annoying Javascript.

The source of a spam may best be determined by examining the Path: and NNTP-Posting-Host: header lines. The From: and Message-ID: lines are usually forged, but may sometimes contain useful information.

Path: denver-news-feed1.bbnplanet.com!su-news-hub1.bbnplanet.com! news.gtei.net!newsfeed.direct.ca!feeder.qis.net!newsfeed1.earthlink.net! nntp.earthlink.net!posted-from-earthlink!not-for-mail From: phantasia@bluesey.com (Phantasia) Newsgroups: alt.sex.stories,alt.stories.erotic,alt.sex.stories.d, alt.sex.stories.hetero,alt.sex.stories.incest,alt.sex.stories.so, alt.sex.stories.tg Subject: first attempt at erotica (m/fm, teen, inc, con) - lesson.txt [1/1] Date: 6 Jan 2000 07:16:47 GMT Content-Transfer-Encoding: Base64 X-Posted-Path-Was: not-for-mail Content-Type: Application/octet-stream; name=lesson.txt X-ELN-Date: 6 Jan 2000 07:16:47 GMT X-ELN-Insert-Date: Wed Jan 5 23:25:03 2000 Organization: EarthLink Network, Inc. X-Newsreader: WinVN 0.99.9 (Released Version) (x86 32bit) Lines: 629 Mime-Version: 1.0 NNTP-Posting-Host: sdn-ar-003midetrp166.dialsprint.net Message-ID: <851fgv$crn$1@ash.prod.itd.earthlink.net>