[patrickp]

Originally Posted by nedsram

That was tempting providence wasn't it. Another arrived just now. Here are the headers (and I hope Patrickp isn't upset this time):

------------------------------

Return-Path: <WinnieXiong at fones4all.com>
Received: from aamta06-winn.ispmail.ntl.com ([81.103.221.35])
by mta05-winn.ispmail.ntl.com with ESMTP
id <20051119040012.NVIJ28994.mta05-winn....spmail.ntl.com>;
Sat, 19 Nov 2005 04:00:12 +0000
Received: from user-0c6tokc.cable.mindspring.com ([24.110.226.140])
by aamta06-winn.ispmail.ntl.com with SMTP
id <20051119040006.OQQX18434.aamta06-win...mindspring.com>;
Sat, 19 Nov 2005 04:00:06 +0000
Received: from tWG@localhost by 799.int (8.11.6/8.11.6); Fri, 18 Nov 2005 22:16:29 -0600
Message-ID: <kgi40Uj8seIakLtGUlE42u28@francekeys.com>
From: "Wendy Acevedo" <WinnieXiong at fones4all.com>
Reply-To: "Wendy Acevedo" <WinnieXiong at fones4all.com>
To: foo.bar at entee-ell.com
Subject: [SPAM?] Huge $avings on ALL best-selling Macromedia titles
Date: Sat, 19 Nov 2005 02:13:29 -0200
MIME-Version: 1.0
X-MimeOLE: Produced By Microsoft MimeOLE V4.71.2730.2
X-Sender: WinnieXiong at fones4all.com
Content-Type: multipart/mixed; boundary="--ACLzoXmwsHcnbS4IswL"

------------------------------

It appears that the email has come from the USA - possibly California.

Brian

The 'fones4all.com' address is for a Californian company called, of course, fones4all. See here for a brief description of what they do. They would appear to be a telephone service dedicated to supplying a low-cost service to underprivileged households in Southern California who might not even be able to have a telephone service without an organisation like this.

It would therefore seem unlikely that they're the real source of a spam email pushing "ALL best-selling Macromedia titles," the return-to address would appear to be spoofed (it would seem to come from a mindspring.com user, and fones4all appear to use "the telecommunications infrastructures of SBC and Verizon" for their service), and I find it somewhat churlish to post an email address at their domain in a public forum - whether or not they actually have a Winnie Xiong, any spam arising from that post will still have to be dealt with by their servers. It may not be that likely from a post in a forum like this, but it's not impossible, and I really think you should be more careful about the email addresses you post, nedsram.

I notice you've taken care to obfuscate your own email address ("foo.bar at entee-ell.com") in this. Why is that?