Email #1

Barnes and Noble

Headers #1• Return-path: <BarnesandNoble_com@email.bn.com>• Received: from mta19.srv.hcvlny.cv.net• (mta19.srv.hcvlny.cv.net [167.206.5.113]) by mstr2.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with ESMTP id <0IQB00DB40UXUN20@mstr2.srv.hcvlny.cv.net> for• cmalinow@optonline.net; Mon, 21 Nov 2005 07:18:34 -0500 (EST)• Received: from mta1.primary.ddc.dartmail.net• (mta1.primary.ddc.dartmail.net [146.82.220.33]) by mta19.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with ESMTP id <0IQB00J3B0USCCI1@mta19.srv.hcvlny.cv.net> for• cmalinow@optonline.net (ORCPT cmalinow@optonline.net); Mon,• 21 Nov 2005 07:18:33 -0500 (EST)• Date: Mon, 21 Nov 2005 07:18:32 -0500 (EST)• From: "Barnes & Noble.com " <BarnesandNoble_com@email.bn.com>• Subject: Gifts for Kids of All Ages -- Plus a Special Offer• To: cmalinow@optonline.net• Message-id: <Kilauea93919-27701-147709898-1-1006@flonetwork.com>• MIME-version: 1.0• Content-type: text/html; charset=us-ascii• Content-transfer-encoding: 7BIT• Original-recipient: rfc822;cmalinow@optonline.net

Email #2

Stock scam

Headers #2• Return-path: <PCameron@bisman.com>• Received: from mta15.srv.hcvlny.cv.net• (mta15.srv.hcvlny.cv.net [167.206.5.109]) by mstr2.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with ESMTP id <0IQF002661Q7GDI0@mstr2.srv.hcvlny.cv.net> for• cmalinow@optonline.net; Wed, 23 Nov 2005 11:28:00 -0500 (EST)• Received: from cpe-72-129-97-207.socal.res.rr.com• (cpe-72-129-97-207.socal.res.rr.com [72.129.97.207])• by mta15.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with SMTP id <0IQF00G6X1PNVYM0@mta15.srv.hcvlny.cv.net> for• cmalinow@optonline.net (ORCPT cmalinow@optonline.net); Wed,• 23 Nov 2005 11:27:55 -0500 (EST)• Received: from ksni.net (s501-552-04-629.diocese.net.nz[72.129.97.207])• by mtap75.calinet.com (butavqcy83) with SMTP id <88540787874b79539oqc5y>; Wed,• 23 Nov 2005 11:25:40 -0500• Date: Wed, 23 Nov 2005 19:20:40 +0300• From: Jan Faulkner <OHollie@imagina.com>• Subject: Re: That rebellion that benjamin marjorie• To: Cmalinow <cmalinow@optonline.net>• Message-id: <1666134797.40114871646@airewaves.com>• MIME-version: 1.0• Content-type: multipart/related; boundary="Boundary_(ID_KseYQxhHmUuo6ASkrckuRg)"• Original-recipient: rfc822;cmalinow@optonline.net

Email #3

The Date

Headers #3• Return-path: <lillianmirandazv@portebrown.com>• Received: from mta13.srv.hcvlny.cv.net (mta13.srv.hcvlny.cv.net [167.206.5.82])• by mstr2.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with ESMTP id <0IQ9002510AMDD40@mstr2.srv.hcvlny.cv.net> for• cmalinow@optonline.net; Sun, 20 Nov 2005 05:11:10 -0500 (EST)• Received: from cybrus.net (158-120-74-65.gci.net [65.74.120.158])• by mta13.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with ESMTP id <0IQ9001GF09VEX80@mta13.srv.hcvlny.cv.net> for• cmalinow@optonline.net (ORCPT cmalinow@nassau.cv.net); Sun,• 20 Nov 2005 05:11:10 -0500 (EST)• Date: Sun, 20 Nov 2005 09:38:13 +0000• From: Lillian Miranda <lillianmirandazv@portebrown.com>• Subject:• =?ISO-8859-1?b?dGhvdXNhbmRzIG9mIG5ldyBtZW1iZXJzIGV2ZXJ5IHdlZWsgYmUgb25lIG9mIHRoZW0=?=• In-reply-to: <c1f901c5ebf3$2b603f92$faf6c36c@g9l1bs3>• X-Sender: <lillianmirandazv@portebrown.com>• Message-id: <KEOPBKCBDHOOLAEKOEFDKOOANFAB.lillianmirandazv@portebrown.com>• MIME-version: 1.0• Content-type: text/plain; charset=us-ascii• Content-transfer-encoding: 7BIT• Original-recipient: rfc822;cmalinow@nassau.cv.net

Email #4

Cyrillic Ctuff

Headers #4• Return-path: <yyric@cfta.com>• Received: from mta21.srv.hcvlny.cv.net• (mta21.srv.hcvlny.cv.net [167.206.5.182]) by mstr2.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with ESMTP id <0IQR00KXNXNNU010@mstr2.srv.hcvlny.cv.net> for• cmalinow@optonline.net; Wed, 30 Nov 2005 10:28:45 -0500 (EST)• Received: from 201.26.99.246 (201-26-99-246.dsl.telesp.net.br [201.26.99.246])• by mta21.srv.hcvlny.cv.net• (Sun Java System Messaging Server 6.2-4.03 (built Sep 22 2005))• with SMTP id <0IQR00HC7XNJPH90@mta21.srv.hcvlny.cv.net> for• cmalinow@optonline.net (ORCPT cmalinow@nassau.cv.net); Wed,• 30 Nov 2005 10:28:41 -0500 (EST)• Date: Wed, 30 Nov 2005 18:27:00 +0400• From: =?koi8-r?B?8M/Ey8HNxc7Ty8nKIOku8C4=?= <yyric@cfta.com>• Subject: =?koi8-r?B?7sHMz8fJLCDzz8LT1NfFzs7P09TYLCDixdrP0MHTzs/T1Ng=?=• To: cmalinow@optonline.net• Reply-to: yyric@cfta.com• Message-id: <0IQR00HD6XNNPH90@mta21.srv.hcvlny.cv.net>• MIME-version: 1.0• X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000• X-Mailer: Microsoft Outlook Express 6.00.2600.0000• Content-type: text/html; charset=koi8-r• Content-transfer-encoding: 8BIT• X-Priority: 1• X-MSMail-priority: High• Original-recipient: rfc822;cmalinow@nassau.cv.net

Email #5

Credit Union

Headers #5• Received: from mailhub0.liu.edu ([148.4.5.20]) by uc-exh-2.liunet.edu with Microsoft SMTPSVC(6.0.3790.1830);• Mon, 28 Nov 2005 12:41:25 -0500• Received: from mailbot2 (mailbot2.liu.edu [148.4.5.19])• by mailhub0.liu.edu (LIU MTA v1.10/CFG-091703) with SMTP id jASHfP0u028355• for <cmalinow@liu.edu>; Mon, 28 Nov 2005 12:41:25 -0500• Received: From liu.edu ([148.4.48.101]) by mailbot2 (WebShield SMTP v4.5 MR1a P0803.345);• id 1133200043576; Mon, 28 Nov 2005 12:47:23 -0500• Received: from ([69.57.185.242])• by ctrust2.liu.edu with SMTP id KP-GTV75.2646830;• Mon, 28 Nov 2005 12:40:53 -0500• Received: from nobody by ottawa.nshoster.com with local (Exim 4.52)• id 1Egmzk-0000jI-Ki• for cmalinow@liu.edu; Mon, 28 Nov 2005 12:40:52 -0500• To: cmalinow@liu.edu• Subject: Suffolk Federal Credit Union Online Urgent Notice• From: "service@suffolkfcu.org" <service@suffolkfcu.org>• Reply-To: • MIME-Version: 1.0• Content-Type: text/html• Content-Transfer-Encoding: 8bit• Message-Id: <E1Egmzk-0000jI-Ki@ottawa.nshoster.com>• Date: Mon, 28 Nov 2005 12:40:52 -0500• X-AntiAbuse: This header was added to track abuse, please include it with any abuse report• X-AntiAbuse: Primary Hostname - ottawa.nshoster.com• X-AntiAbuse: Original Domain - liu.edu• X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]• X-AntiAbuse: Sender Address Domain - ottawa.nshoster.com• X-Source: • X-Source-Args: • X-Source-Dir: • X-esp: ESP<39>=RBL:<0> RDNS:<0> SHA:<11> UHA:<0> SLS:<33> BAYES:<-11>• SenderID:<0> URL Substring Dictionary (TRU8):<0> Spam• Dictionary (TRU8):<4> NigeriaScam Dictionary (TRU8):<0> HTML• Dictionary (TRU8):<2> Porn Dictionary (TRU8):<0> Embed HTML• Dictionary (TRU8):<0> Obscenities Dictionary (TRU8):<0> URL• Dictionary (TRU8):<0> CAN-SPAM Compliance Dictionary (TRU8):<0> • Return-Path: nobody@ottawa.nshoster.com• X-OriginalArrivalTime: 28 Nov 2005 17:41:25.0451 (UTC) FILETIME=[F45A61B0:01C5F442]

Source #5