Return-Path: <03133071@moneymakers.com>
Received: from dfw-ix3.ix.netcom.com ([206.214.98.3])          
by SantaClara01.pop.internex.net (Post.Office MTA v3.1.2          
release (PO203-101c) ID# 0-34792U7500L7500S0) with ESMTP          
id AAA15265 for <chris@lanets.com>;          
Sat, 13 Dec 1997 21:08:22 -0800
Received: (from smap@localhost)          
by dfw-ix3.ix.netcom.com (8.8.4/8.8.4)	  id UAA28591; 
Sat, 13 Dec 1997 20:55:30 -0600 (CST)
From: 03133071@moneymakers.com
Received: from nbw-nj14-57.ix.netcom.com(198.211.225.249) 
by dfw-ix3.ix.netcom.com via smap (V1.3)	id rma005649; Sat Dec 13 18:00:48 1997
Received: from mailhost.moneymakers.com ( SYTM.moneymakers.com (203.74.9.110)) 
by moneymakers.com (8.8.5/8.6.5) with SMTP id GAA00486 for <ShowYouTheMoney@MoneyMakers.com>; 
Sat, 13 Dec 1997 18:44:35 -0600 (EST)
Date: Sat, 13 Dec 97 18:44:35 EST
To: ShowYouTheMoney@MoneyMakers.com
Subject: Make $2,000 - $5,000 per week -NOT MLM
Message-ID: <199746522791.FBB03720@moneymakers.com>
Reply-To: ShowYouTheMoney@MoneyMakers.com
X-PMFLAGS: 128 0
X-UIDL: 64827751009732159745119985624733
Comments: Authenticated sender is <ShowYouTheMoney@MoneyMakers.com>

Lots of lame forgeries for this com spam.

dfw-ix3.ix.netcom.com ([206.214.98.3]) resolves, showing the relaying server.

nbw-nj14-57.ix.netcom.com(198.211.225.249) also resolves, showing the point of origination.
All other headers are fake.

The forged IP address will not resolve.

Let's look into the claimed domain:
>whois moneymakers.com
Lone Star Marketing (MONEYMAKERS-DOM)
   7818 Creekwood Drive
   Rowlett, TX 75088

   Domain Name: MONEYMAKERS.COM

   Administrative Contact:
      Fields, Sam  (SF578)  sfields@ANET-DFW.COM
      214-995-9041
   Technical Contact, Zone Contact:
      Murphy, Lee  (LM814)  web@CHAPEL1.COM
      606 623 8834
   Billing Contact:
      Alexander, Joan  (JA532)  jmalexa@ANET-STL.COM
      314-653-2638

   Record last updated on 23-Feb-97.
   Record created on 18-Mar-96.
   Database last updated on 13-Dec-97 06:26:00 EDT.

   Domain servers in listed order:

   NS.PROPAGATION.COM           207.58.117.2
   NS2.PROPAGATION.COM          207.227.212.13