MAIL HEADER PROB !!! URGENT

Read the sections from the bottom up. The original message is from mansi_singh@hotmail.com and he sent it Thu May 24 00:09:04 2001 using his web browser.

He was connected to MSN's site which reported:
Received: from 212.72.6.113 by lw9fd.law9.hotmail.msn.com with HTTP; Thu, 24 May 2001 07:08:26 GMT

Continuing up the list, each mail server that handled the message added it's own "Received" information to the header.

The variations in time are based on each servers time zone settings and potential clock drift.

I won't bother explaining timezones, etc. I think you really want to know why all the different addresses and which is real/spammed. I'm explaining from the top of your header, to the bottom.

The whois for 212.72.6.113 is abduwani@gto.net.om, the administrator for your spammer.

This is just an email route on it's travel:
Received: from [207.46.181.96] by hotmail.com (3.2) with ESMTP id
MHotMailBCD5FE10006940042047CF2EB5600C0316; Thu May 24 00:07:17 2001

This is another number on theemail's route:
Received: from hotmail.com ([64.4.9.246]) by cpimssmtpa07.msn.com with Microsoft SMTPSVC(5.0.2195.3225);
Thu, 24 May 2001 00:08:27 -0700

This can be ignored because there isn't an IP, just stating what happened (received):
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC; Thu, 24 May 2001 00:08:26 -0700

This is where the spammer originated (closet to the From and Date info below that transfers with it:
Received: from 212.72.6.113 by lw9fd.law9.hotmail.msn.com with HTTP; Thu, 24 May 2001 07:08:26 GMT

This is where the "From and Date" that travel with the email header as it goes through it's route to the destination:
From mansi_singh@hotmail.com Thu May 24 00:09:04 2001
Message-ID:
X-OriginalArrivalTime: 24 May 2001 07:08:26.0829 (UTC) FILETIME=[5426CFD0:01C0E420]
Return-Path: mansi_singh@hotmail.com

I learned about headers from http://www.spamcop.net
They have a service that will parse headers and source (from html email) determine origins, and ownership and then send reports.

Excellent!!
I've been cutting and pasting my SPAM email to them for several months now and they are really, really, really great! The report will warn you if it isn't SPAM at all.

I hope this is what you wanted! I don't know how much more detailed I could get...
:-)
Melissa

You may also want to download "Sam Spade". It has an email header parser built into it, as well as some other handy spam/email related features. You can get it free from www.samspade.org

Check out the following site

http://groups.google.com/groups?q=email+header+analyzer&hl=en&safe=off&rnum=1&selm=5jdpl7%244lf%241%40geraldo.cc.utexas.edu

This question was auto closed due to inactivity