I apologize for this, but I'm far less versed in these matters than many on
this list, and I would appreciate any help anyone can offer in tracking
exactly where the hell that spoofed message came from.
Below are the message headers that were attached to the spoof message.
There are several domains in these headers which are *not* in the headers
of messages that genuinely originate from myself. You can verify this by
checking the headers on this message.
This is just an amateur guess, but something tells me the message
originated somewhere in Denmark.
Received: from ffml.fanfic.com ([205.161.105.205])
by mtiwgwc06.worldnet.att.net (InterMail v03.02.07 118 124)
with ESMTP id <19990123082304.WQOE18978@ffml.fanfic.com>;
Sat, 23 Jan 1999 08:23:04 +0000
Received: from ffml.fanfic.com (mail@ffml.fanfic.com [205.161.105.205])
by ffml.fanfic.com (8.8.7/8.8.7) with ESMTP id DAA18823;
Sat, 23 Jan 1999 03:20:38 -0500
Received: Listar v0.114a - handled for list ffml
Received: from alastair.tir.com (alastair.tir.com [216.40.128.69])
by ffml.fanfic.com (8.8.7/8.8.7) with ESMTP id DAA18815
for <ffml@fanfic.com>; Sat, 23 Jan 1999 03:20:35 -0500
Received: from eva-01 (port46.detroit01.tir.com [216.40.148.162])
by alastair.tir.com (8.9.1/8.9.1) with SMTP id DAA09803
for <ffml@fanfic.com>; Sat, 23 Jan 1999 03:19:20 -0500 (EST)
Date: Sat, 23 Jan 1999 03:19:20 -0500 (EST)
From: The Eternal Lost Lurker <lurkerdrome@worldnet.att.net>
To: <ffml@fanfic.com>
Received: from SMTP.XServer (Smail4.1.19.1 #20) id m0wBzN7-009vdR;
Saturday, January 23rd, 1999
Received: from mail.apache.net(really [164/187]) by relay.comanche.com
Thursday, January 21st, 1999
Received: from 32776.21445(really [80110/80111]) by relay.denmark.nl
Tuesday, January 19th, 1999
Received: from local.nethost.org(really [24553/24554]) by relay.SS621.net
Monday, January 18th, 1999
Message-Id: <19943672.886214@relay.comanche.denmark.eu> Sunday, January
24th, 1999
Reply-To: lurkerdrome@worldnet.att.net
X-Mailer: Microsoft Outlook Express 4.72.3110.1
Subject: [FFML] please read
Mime-Version: 1.0
Content-type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 8bit
X-MIME-Autoconverted: from quoted-printable to 8bit by ffml.fanfic.com id
DAA18815
X-archive-position: 4552
X-listar-version: Listar v0.114a
Sender: ffml-bounce@fanfic.com
X-original-sender: lurkerdrome@worldnet.att.net
Precedence: bulk
X-list: ffml
<chain message and 'sorry for the spam' remark snipped>
(Whoever spoofed this, BTW, did a sloppy job. Very sloppy. They couldn't
even be bothered to obtain an up-to-date copy of my .sig...the copy used in
the spoof is at LEAST ten days out of date.)
---------------------------------------------------------------------------
"This is your brain. This is your brain on a plate.
This is your brain on a plate with fava beans.
Any questions?"
***
"Ignore the pain. It's only going to get worse!" -Rampage
"I've got to hand it to you, Primal. When you screw up,
you screw up big." -Depth Charge
The Eternal Lost Lurker
...who turns into a cold, wet, angry Lurker when splashed
with cold water, and who desparately needs an SO...
White Knight of the Knightly Order of Mihoshi Enthusiasts
Love child of Pikachu and Mokona
Piiiikaa...PUUUU!
Necessity is a mother.
Spare the rod. Boil the child.
lurkerdrome@worldnet.att.net
http://www.geocities.com/~etlostlurker
ICQ# 22559724
Q: What's the difference between white trash
and poor white trash?
A: White trash is in the White House.