Â
When using OUTLOOK, you can find the headers by double clicking and opening the email, then clicking FILE>PROPERTIES>DETAILS>MESSAGE SOURCE. Copy and paste the info, and add it to a support ticket for analysis.
It will look something like this:
-------------------------
Received: from smtp2.edanews.net ([72.9.253.198]) ---< this is actually the source of my spam here. Originates in Atlanta.
by ameriwebhosting.ameriwebhosting.com
with hMailServer ; Sat, 16 Jan 2010 17:52:36 -0600
domainkey-signature: a=rsa-sha1; c=nofws; s=dkim; d=edanews.net; q=dns;
h=to:subject:message-id:date:from:reply-to:mime-version:content-type:content-transfer-encoding;
b=G/8lSfcrgaAt43IpmOl7OdTQOKA4QUATkUVrjCCd2UrahBTcx+O/yYr0RvZQgYKihZmPweg19aydjI2JYFWu2DfyaT4Xqu0qT6mB3QMAXlaBD0fAeqLVrIMcojxW3VkgqL5oYdXhRd6pU3JfS0EK4zzTQDOVyEKSmLztqEYMpJw=;
DKIM-Signature: v=1; a=rsa-sha1; d=edanews.net; s=dkim;
c=relaxed/relaxed; q=dns/txt; t=1263685953;
h=return-path:x-fbl:to:subject:message-id:date:from:reply-to:mime-version:x-mailer-lid:list-unsubscribe:x-mailer-sid:x-mailer-sent-by:content-type:content-transfer-encoding;
bh=8E7kkqXDjNkZ2xwgKQlTFB8MJT4=;
b=rgkw/cQ85VWpyLr1MrhLtD4OqpbO0AOLFXDm1ZuqUOBmVfyCB2TKSCB1RcRb846vqu6spT54Q+ex/2kSM5YFqvwhTMhUCUAGqFL2W5P2gmvGY8FRgSPLIx1a3EfSU1U5rYstMl7FtTrpN6UuEJsj5nppGVq6RTuTwtM+fwLC9ts=
Return-Path: 3f8.1e.c70000005b74fb.137630.AC-481.robertk1=ameriwebhosting.com@smtp2.edanews.net
X-FBL: M2Y4LjFlLmM3MDAwMDAwNWI3NGZiLjEzNzYzMC5BQy00ODEucm9iZXJ0azE9YW1lcml3ZWJob3N0aW5nLmNvbQ==
To: robertk1@ameriwebhosting.com
Subject: ROBERT's Auto Policy Request (January 16, 2010)
Message-ID: <669ef6762c25f085514090d9813ac53b@link.edanews.net>
Date: Sat, 16 Jan 2010 18:52:32 -0500
From: "EDA - Auto Insurance" <Relief@edanews.net>
Reply-To: noreply@edanews.net
MIME-Version: 1.0
X-Mailer-LID: 52,39,89
List-Unsubscribe: <http://link.edanews.net/emk/unsubscribe.php?M=137630&C=3e092068a69a9f545ce74c74bb890d69&L=89&N=481>
X-Mailer-SID: 481
X-Mailer-Sent-By: 1
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Antivirus: avast! (VPS 091224-0, 12/24/2009), Inbound message
X-Antivirus-Status: Clean
by ameriwebhosting.ameriwebhosting.com
with hMailServer ; Sat, 16 Jan 2010 17:52:36 -0600
domainkey-signature: a=rsa-sha1; c=nofws; s=dkim; d=edanews.net; q=dns;
h=to:subject:message-id:date:from:reply-to:mime-version:content-type:content-transfer-encoding;
b=G/8lSfcrgaAt43IpmOl7OdTQOKA4QUATkUVrjCCd2UrahBTcx+O/yYr0RvZQgYKihZmPweg19aydjI2JYFWu2DfyaT4Xqu0qT6mB3QMAXlaBD0fAeqLVrIMcojxW3VkgqL5oYdXhRd6pU3JfS0EK4zzTQDOVyEKSmLztqEYMpJw=;
DKIM-Signature: v=1; a=rsa-sha1; d=edanews.net; s=dkim;
c=relaxed/relaxed; q=dns/txt; t=1263685953;
h=return-path:x-fbl:to:subject:message-id:date:from:reply-to:mime-version:x-mailer-lid:list-unsubscribe:x-mailer-sid:x-mailer-sent-by:content-type:content-transfer-encoding;
bh=8E7kkqXDjNkZ2xwgKQlTFB8MJT4=;
b=rgkw/cQ85VWpyLr1MrhLtD4OqpbO0AOLFXDm1ZuqUOBmVfyCB2TKSCB1RcRb846vqu6spT54Q+ex/2kSM5YFqvwhTMhUCUAGqFL2W5P2gmvGY8FRgSPLIx1a3EfSU1U5rYstMl7FtTrpN6UuEJsj5nppGVq6RTuTwtM+fwLC9ts=
Return-Path: 3f8.1e.c70000005b74fb.137630.AC-481.robertk1=ameriwebhosting.com@smtp2.edanews.net
X-FBL: M2Y4LjFlLmM3MDAwMDAwNWI3NGZiLjEzNzYzMC5BQy00ODEucm9iZXJ0azE9YW1lcml3ZWJob3N0aW5nLmNvbQ==
To: robertk1@ameriwebhosting.com
Subject: ROBERT's Auto Policy Request (January 16, 2010)
Message-ID: <669ef6762c25f085514090d9813ac53b@link.edanews.net>
Date: Sat, 16 Jan 2010 18:52:32 -0500
From: "EDA - Auto Insurance" <Relief@edanews.net>
Reply-To: noreply@edanews.net
MIME-Version: 1.0
X-Mailer-LID: 52,39,89
List-Unsubscribe: <http://link.edanews.net/emk/unsubscribe.php?M=137630&C=3e092068a69a9f545ce74c74bb890d69&L=89&N=481>
X-Mailer-SID: 481
X-Mailer-Sent-By: 1
Content-Type: text/plain; format=flowed; charset="UTF-8"
Content-Transfer-Encoding: 8bit
X-Antivirus: avast! (VPS 091224-0, 12/24/2009), Inbound message
X-Antivirus-Status: Clean
