[Dshield] Re: Klez header question

Daniels566@cs.com Daniels566 at cs.com
Fri Aug 30 01:55:02 GMT 2002


This again is the header and return path of the klez I posted a few days ago. 
Maybe someone has the skill to map this thing. I sent a copy to Juno and they 
determined it was a forgery implying them.

Message Start
Forwarded Message:
Subj: A nice game
Date: 8/18/02 9:36:10 PM Eastern Daylight Time
From: adoptapet2 at juno.com
To: Wolves5149 at aol.com
Received from Internet: click here for more information

This is a special nice game
This game is my first work.
You're the first player.
I expect you would enjoy it.

Return-Path: <adoptapet2 at verizon.net>
Received: from  rly-xg02.mx.aol.com (rly-xg02.mail.aol.com [172.20.115.199]) 
by air-xg01.mail.aol.com (v87.22) with ESMTP id MAILINXG13-0818213610; Sun, 
18 Aug 2002 21:36:10 -0400
Received: from  out003.verizon.net (out003pub.verizon.net [206.46.170.103]) 
by rly-xg02.mx.aol.com (v87.22) with ESMTP id MAILRELAYINXG25-0818213515; 
Sun, 18 Aug 2002 21:35:15 -0400
Received: from Pgcdjo ([205.152.62.117]) by out003.verizon.net
          (InterMail vM.5.01.05.09 201-253-122-126-109-20020611) with SMTP
          id <20020819013544.XWIF13272.out003.verizon.net at Pgcdjo>
          for <Wolves5149 at aol.com>; Sun, 18 Aug 2002 20:35:44 -0500
From: adoptapet2 <adoptapet2 at juno.com>
To: Wolves5149 at aol.com
Subject: A  nice game
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=Khaz84sDP3z0cb68Cj9W63C5597938
Message-Id: <20020819013544.XWIF13272.out003.verizon.net at Pgcdjo>
Date: Sun, 18 Aug 2002 20:36:15 -0500

Good luck, John Daniels
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.dshield.org/pipermail/list/attachments/20020829/a7a5c677/attachment.htm


More information about the list mailing list