This shows us that "[EMAIL PROTECTED]" sent "[EMAIL PROTECTED]" a report that it had failed to deliver a message to a whole bunch of bogus email addresses.
Presumably, this was sent because "[EMAIL PROTECTED]" was in the From: or Reply-To: header of the original message. You need the rest of the headers of *that* message -- particularly the Received: headers -- to try to determine where it actually came from. If hagerman.com won't provide them, I guess you may be out of luck. David Gillett > -----Original Message----- > From: Shar [mailto:[EMAIL PROTECTED] > Sent: June 12, 2003 08:04 > To: [EMAIL PROTECTED] > Subject: Re: email security issue > > > Hello, > > Today I assigned a different IP address to the virtual domain > in question. > cdnmarketsquare.com ... there is a message placed on the front page. > > I have been asked to post the headers of one of the emails to > the list so > will do so now. > > Thanks to all of you for your help. > > I have attempted to contact hagerman.com to obtain the > original email but > the email was returned. > > Alexx. > > -------------------------------------------- > Return-Path: <MAILER-DAEMON> > Received: from smtp.hagerman.com (smtp.hagerman.com [12.34.168.15]) > by ip-66-51-96-147.tera-byte.com (8.10.2/8.10.2) with ESMTP > id h599WnF04445 > for <[EMAIL PROTECTED]>; Mon, 9 Jun 2003 02:32:49 -0700 > Received: by EXCHANGE with Internet Mail Service (5.5.2653.19) > id <MHHRAD8D>; Mon, 9 Jun 2003 05:07:22 -0500 > Message-ID: <[EMAIL PROTECTED]> > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: Undeliverable: free overnight delievery! no > prescription require > d . . . . fmbgc > Date: Mon, 9 Jun 2003 05:07:22 -0500 > MIME-Version: 1.0 > X-Mailer: Internet Mail Service (5.5.2653.19) > X-MS-Embedded-Report: > Content-Type: multipart/mixed; > boundary="----_=_NextPart_000_01C32E6E.EB067810" > X-UIDL: 81~"!k7%#!cG3!!_#C"! > > This message is in MIME format. Since your mail reader does > not understand > this format, some or all of this message may not be legible. > > ------_=_NextPart_000_01C32E6E.EB067810 > Content-Type: text/plain; > charset="iso-8859-1" > > Your message > > To: [EMAIL PROTECTED] > Subject: free overnight delievery! no prescription > required . . . . > fmbgc > Sent: Tue, 10 Jun 2003 10:00:25 -0500 > > did not reach the following recipient(s): > > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > [EMAIL PROTECTED] on Mon, 9 Jun 2003 05:07:20 -0500 > The recipient name is not recognized > The MTS-ID of the original message is: c=us;a= ;p=hagerman ? > compa;l=EXCHANGE0306091007MHHRAD8C > MSEXCH:IMS:Hagerman & Company, Inc.:EMAIL:EXCHANGE 0 > (000C05A6) Unknown > Recipient > > > > ------_=_NextPart_000_01C32E6E.EB067810 > Content-Type: message/rfc822 > > Message-ID: <[EMAIL PROTECTED]> > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Subject: free overnight delievery! no prescription required > . . . . fmb > gc > Date: Tue, 10 Jun 2003 10:00:25 -0500 > MIME-Version: 1.0 > X-Mailer: Internet Mail Service (5.5.2653.19) > X-MS-Embedded-Report: > Content-Type: text/plain; > charset="iso-8859-1" > > > Did you know you can order Prescription Medications online > with No Prior > Prescription? > Medications like Viagra, Phentermine, Adipex, Ultram, PaxilPE > and many more. > Prescribed Online by a US Licensed Doctor and Shipped > Overnight TO YOUR > DOOR! > > <http://rd.yahoo.com/10000759/154/*http://www.web-works-intern ational.com/14 > Click Here <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14 > Prescription Meds Prescribed Online US Licensed Doctors and Pharmacies <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/nu pull/emcrt2_02.jpg> <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14 > Free Online Doctor Consultation <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14 > Lose Weight Now with Phentermine, Adipex, and Bontril <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14 > End Impotence Now with Viagra <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14 > End Pain Now with Ultram, Fioricet, and Tramadol <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/14 > End Muscle Pain Now With Soma and Flexeril cl <http://rd.yahoo.com/10000759/154/*http://www.web-works-international.com/go odbye2.html> ick here if you would not like to receive future mailings. iurubpk rtqc rgyyhaxmxxrn ------_=_NextPart_000_01C32E6E.EB067810-- --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ---------------------------------------------------------------------------- --------------------------------------------------------------------------- Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts! The Gartner Group just put Neoteris in the top of its Magic Quadrant, while InStat has confirmed Neoteris as the leader in marketshare. Find out why, and see how you can get plug-n-play secure remote access in about an hour, with no client, server changes, or ongoing maintenance. Visit us at: http://www.neoteris.com/promos/sf-6-9.htm ----------------------------------------------------------------------------
