Return-Path: <owner-rsgb_lf_group@blacksheep.org>
Received: from mtain-dg01.r1000.mx.aol.com (mtain-dg01.r1000.mx.aol.com [172.29.65.9]) by air-ma10.mail.aol.com (v129.4) with ESMTP id MAILINMA101-b53c4d298774f5; Sun, 09 Jan 2011 05:01:24 -0500
Received: from post.thorcom.com (post.thorcom.com [195.171.43.25])
	by mtain-dg01.r1000.mx.aol.com (Internet Inbound) with ESMTP id B4D8C38000082;
	Sun,  9 Jan 2011 05:01:22 -0500 (EST)
Received: from majordom by post.thorcom.com with local (Exim 4.14)
	id 1Pbs4X-0003ZS-LU
	for rs_out_1@blacksheep.org; Sun, 09 Jan 2011 10:00:25 +0000
Received: from [195.171.43.32] (helo=relay1.thorcom.net)
	by post.thorcom.com with esmtp (Exim 4.14)
	id 1Pbs4X-0003ZJ-6W
	for rsgb_lf_group@blacksheep.org; Sun, 09 Jan 2011 10:00:25 +0000
Received: from out1.ip06ir2.opaltelecom.net ([62.24.128.242])
	by relay1.thorcom.net with esmtp (Exim 4.63)
	(envelope-from <g3kevmal@talktalk.net>)
	id 1Pbs4V-0000Eh-4h
	for rsgb_lf_group@blacksheep.org; Sun, 09 Jan 2011 10:00:25 +0000
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: At4FALMVKU1Ok8tJ/2dsb2JhbACIQ410jg9zuwODB4JFBI5E
X-IronPort-AV: E=Sophos;i="4.60,295,1291593600"; 
   d="scan'208";a="486250055"
Received: from unknown (HELO xphd97xgq27nyf) ([78.147.203.73])
  by out1.ip06ir2.opaltelecom.net with SMTP; 09 Jan 2011 10:00:15 +0000
Message-ID: <001b01cbafe4$02657940$0401a8c0@xphd97xgq27nyf>
From: "mal hamilton" <g3kevmal@talktalk.net>
To: <rsgb_lf_group@blacksheep.org>
References: <201101081801.p08I1H0Q005210@p3slh152.shr.phx3.secureserver.net><00f301cbaf63$f2360240$0401a8c0@xphd97xgq27nyf><1294523453.2217.33.camel@gerhard-desktop><4D28F4CA.80609@telus.net> <20110109000336.17092a3e@opc1>
Date: Sun, 9 Jan 2011 10:00:13 -0000
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Score: 0.7 (/)
X-Spam-Report: autolearn=disabled,MAILTO_TO_SPAM_ADDR=0.276,PLING_PLING=0.461
Subject: Re: LF: Re: PLEASE HELP !!!
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on post.thorcom.com
X-Spam-Level: **
X-Spam-Status: No, hits=2.4 required=5.0 tests=MAILTO_TO_SPAM_ADDR,
	PLING_PLING autolearn=no version=2.63
X-SA-Exim-Scanned: Yes
Sender: owner-rsgb_lf_group@blacksheep.org
Precedence: bulk
Reply-To: rsgb_lf_group@blacksheep.org
X-Listname: rsgb_lf_group
X-SA-Exim-Rcpt-To: rs_out_1@blacksheep.org
X-SA-Exim-Scanned: No; SAEximRunCond expanded to false
x-aol-global-disposition: G
x-aol-sid: 3039ac1d41094d2987724935
X-AOL-IP: 195.171.43.25


The email of concern has connections with GODADDY. COM. INC.  SCOTTSDALE,
ARIZONA.
An investigation has already started after a complaint was lodged. I am
informed that there are sufficient clues with routing to pin point the
culprit
Within two weeks someone should get a KNOCK KNOCK
This is all I will say about the matter.

g3kev

----- Original Message -----
From: "John GM4SLV" <gm4slv@sighthound.demon.co.uk>
To: <rsgb_lf_group@blacksheep.org>
Sent: Sunday, January 09, 2011 12:03 AM
Subject: Re: LF: Re: PLEASE HELP !!!


> On Sat, 08 Jan 2011 15:35:38 -0800
> Scott Tilley <sthed475@telus.net> wrote:
>
> > Gerhard and group
> >
> > I agree with you.  That was not fair to Mal or any other user of the
> > reflector.
> >
>
> And strangely, I also agree...
>
> The pseudo-Mal was very clever, posting from an account/ISP that
> doesn't seem to have been used before on the reflector in the last 3
> years I have messages for.
>
> <Sherlock Homes>
>
> The Header:
>
> Received: (from netohio1@localhost) by
> p3slh152.shr.phx3.secureserver.net (8.12.11.20060308/8.12.11/Submit) id
> p08I1H0Q005210; Sat, 8 Jan 2011 11:01:17 -0700
>
>
> shows that the message was posted via a USA based ISP/mailserver.
>
> Registration details of the domain:
>
> http://who.is/whois/secureserver.net/
>
>
> I can't find another instance of "secureserver.net" in any messages in
> my archive.
>
> Also the "-0700" gives a hint that the sender's timezone is 7 hours
> behind UTC.
>
> http://www.worldtimezone.com/utc/utc-0700.html
>
> </Sherlock Holmes>
>
> John
> GM4SLV
>
>