I extracted something from the source of that actual E-Mail:
Quote:
X-Sieve: cmu-sieve 2.0
Return-Path: <[email protected]>
Received: from server0010.freedom2surf.net (server0010.freedom2surf.net [194.106.56.10])
by server0034.freedom2surf.net (8.9.3/8.9.3/Debian 8.9.3-21) with ESMTP id XAA16109
for <[email protected]>; Mon, 16 Apr 2001 23:20:40 GMT
From: [email protected]
Received: from scaup.mail.pas.earthlink.net (scaup.mail.pas.earthlink.net [207.217.121.49])
by server0010.freedom2surf.net (8.9.3/8.9.3/Debian/GNU/f2s) with ESMTP id XAA05963
for <[email protected]>; Mon, 16 Apr 2001 23:20:38 GMT
Received: from mail.graal2001.com (evrtwa1-ar1-252-228.elnk.dsl.gtei.net [4.34.252.228])
by scaup.mail.pas.earthlink.net (EL-8_9_3_3/8.9.3) with SMTP id QAA01983
for <[email protected]>; Mon, 16 Apr 2001 16:20:38 -0700 (PDT)
Date: Mon, 16 Apr 2001 16:20:38 -0700 (PDT)
Message-Id: <[email protected] t>
To: [email protected]
Subject: Critical Security holes found in Graal2001 clients, Download Patch update to keep your accounts secure.
|
If yo pay good attention to the above stuff you will notice the:
"From:
[email protected]
Received: from scaup.mail.pas.earthlink.net (scaup.mail.pas.earthlink.net [207.217.121.49])"
Which means that it actually was sent using earthlink.net, and that "scaup.mail.pas.earthlink.net [207.217.121.49]" is in it several times.