Return-Path: <16051400@lboro.ac.uk>
Received: from soda.bekkoame.or.jp ([202.231.192.80])	
by tomcat.ns.net (8.8.5/8.8.5) with ESMTP id AAA04012	for <cpicket@ns.net>; 
Mon, 17 Nov 1997 00:16:59 -0800 (PST)
From: 16051400@lboro.ac.uk
Received: from pis.bekkoame.or.jp (sfdn3-010.sf.compuserve.com [206.175.225.10])	
by soda.bekkoame.or.jp (8.8.7/3.6Wbeta7 - bekkoame) with SMTP id RAA20125;	
Mon, 17 Nov 1997 17:12:59 +0900 (JST)
Received: from mailhost.ipcIIa.alt.vantron13.net098.3.54.39)) 
by ipcIIa..netResponse@vantron13.net (8.8.5/8.6.5) with SMTP id GAA05375 for <>; 
Mon, 17 Nov 1997 00:09:39 -0600 (EST)
Date: Mon, 17 Nov 97 00:09:39 EST
To: Friend@public.com
Subject: My 1st Check = $4000
Message-ID: <4756089120792879.GP493285@vantron13.net>
Comments: Authenticated sender is <dablon@vantron13.net>
X-UIDL: 909dke94k444llh295k5hk4m4i244210

Everything after the CompuServe address is forged. I wll investigate anyways.

soda.bekkoame.or.jp ([202.231.192.80]) resolves, showing the relaying server.

sfdn3-010.sf.compuserve.com [206.175.225.10] also resolves, showing the point
of origination.

I'm done except for the forged addresses, which out of habit I will look up.

>whois vantron13.net
No match for "VANTRON13.NET".

Done. Thank goodness, it is late and I need to get some rest.