Anyone notice something odd in the mail header below? :) It didn't come from webhosting talk so there's no problem there - interesting to see it in a faked header though

Greg Moore

Return-path: <ulqamailbox@mail.com>
Envelope-to: ****@**********
Delivery-date: Tue, 16 Apr 2002 02:59:03 -0400
Received: from [211.248.34.2] (helo=211.248.34.2)
by ***************with smtp (Exim 3.35 #1)
id 16xMve-0001mQ-00
for ****@*********; Tue, 16 Apr 2002 02:59:03 -0400
Received: from unknown (HELO anther.webhostingtalk.com) (205.220.75.34) by asy100.as122.sol.superonline.com with smtp; Apr, 15 2002 11:39:51 PM +0700
Received: from unknown (74.38.244.167) by asy100.as122.sol.superonline.com with NNFMP; Apr, 15 2002 10:34:12 PM -0800
Received: from unknown (124.215.35.163) by rly-xw01.mx.aol.com with QMQP; Apr, 15 2002 9:32:08 PM +1200
From: wbsmailbox <ulqamailbox@mail.com>
To: jenny
Cc:
Subject: Do not Pay anymore Money !! akld
Sender: wbsmailbox <ulqamailbox@mail.com>
Mime-Version: 1.0

SpamCop says:
ips don't match; anther.webhostingtalk.com discarded as fake

Originally posted by akashik
It didn't come from webhosting talk so there's no problem there

Yep, I know that. Interesting to see it listed in a spam e-mail though. :)

Greg Moore

looks like somebody named the server as hello.webhostingtalk.com

:uzi: spammers