Full headers for spam from Earthlink

11 Sep 2000

Select the message ID to view the entire article. This will not work if the article has expired, been cancelled, or did not reach your local news server for some other reason.

IMPORTANT: Always disable Javascript before viewing spam with a web browser. Spam articles frequently contain destructive or highly annoying Javascript.

The source of a spam may best be determined by examining the Path: and NNTP-Posting-Host: header lines. The From: and Message-ID: lines are usually forged, but may sometimes contain useful information.

Path: denver-news-feed1.bbnplanet.com!crtntx1-snh1.gtei.net! su-news-hub1.bbnplanet.com!news.gtei.net!newsfeed.berkeley.edu! enews.sgi.com!news.eecs.umich.edu!cyclone.rdc-detw.rr.com! news.mw.mediaone.net!cyclone-west.rr.com!news.rr.com|news-west.rr.com! newsfeed2.earthlink.net!newsfeed.earthlink.net! newsmaster1.prod.itd.earthlink.net! newsread2.prod.itd.earthlink.net.POSTED!not-for-mail From: "FantasyPhone" <fantasyphone@earthlink.net> Newsgroups: alt.sex.exhibitionist,alt.sex.female,alt.sex.femdom, alt.sex.fencing,alt.sex.fetish,alt.sex.fetish.dirty,alt.sex.fetish.feet, alt.sex.fetish.panties,alt.sex.fetish.size,alt.sex.fetish.smoking Subject: $NAUGHTY GIRLS THAT WILL KEEP YOU CUMMING BACK$ Lines: 30 X-Newsreader: Microsoft Outlook Express 4.72.2106.4 X-MimeOLE: Produced By Microsoft MimeOLE V4.72.2106.4 Message-ID: <tcPL4.70115$q67.1131956@newsread2.prod.itd.earthlink.net> Date: Fri, 21 Apr 2000 02:40:25 GMT NNTP-Posting-Host: 172.129.206.150 X-Complaints-To: abuse@earthlink.net X-Trace: newsread2.prod.itd.earthlink.net 956284825 172.129.206.150 (Thu, 20 Apr 2000 19:40:25 PDT) NNTP-Posting-Date: Thu, 20 Apr 2000 19:40:25 PDT Organization: EarthLink Inc. -- http://www.EarthLink.net