Return-Path: <EasyMoney@MoneyMakers.com>
Received: from dfw-ix14.ix.netcom.com ([206.214.98.14])          
by santaclara01.pop.internex.net (Post.Office MTA v3.1.2          
release (PO203-101c) ID# 0-34792U7500L7500S0) with ESMTP          
id AAA1197 for <chris@lanets.com>;          
Sun, 15 Feb 1998 08:13:45 -0800
Received: (from smap@localhost)          
by dfw-ix14.ix.netcom.com (8.8.4/8.8.4)	  id JAA18476; Sun, 15 Feb 1998 09:59:47 -0600 (CST)
From: EasyMoney@MoneyMakers.com
Received: from 109.newark-07.nj.dial-access.att.net(12.68.38.109) 
by dfw-ix14.ix.netcom.com via smap (V1.3)	id rma017576; Sun Feb 15 09:52:18 1998
Date: Sun, 15 Feb 98 10:43:56 EST
To: Friend@public.com
Subject: Sorry this took so long...call me at home when you get this...
Message-ID: <>

Well, let's see where the stole her access from this time.

>nslookup 206.214.98.14
Server:  dns.mediacity.com
Address:  205.216.172.10

Name:    dfw-ix14.ix.netcom.com
Address:  206.214.98.14
OK, it's Netcom relaying this trash again.

>nslookup 12.68.38.109
Server:  dns.mediacity.com
Address:  205.216.172.10

Name:    109.newark-07.nj.dial-access.att.net
Address:  12.68.38.109
Originated via AT&T.

Done.