they are sending from multiple addies here is the header from mine cause dummy me clicked it lol
Date: Thursday, December 25, 2008 11:58:30 PM
To: <XXXXXXX @rock.com>
CC:
From:
jakeshumaker8@live.com
Subject: Cindy King Dice invites you to win
Return-Path: <jakeshumaker8@live.com>
Delivered-To:
Received: (qmail 24847 invoked by uid 0); 26 Dec 2008 04:58:31 -0000
X-Ob-Received: from unknown (192.168.8.39) by mta45-1.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
Received: (qmail 18158 invoked by uid 1001); 26 Dec 2008 04:58:31 -0000
X-Ob-Delivered-To:
X-Ob-Received: from unknown (192.168.8.150) by as1-7.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
X-Spam-Cmae-Analysis: v=1.0 c=1 a=wD6_E5tSKSIA:10 a=PlHbuPsuAAAA:20 a=DPdd6oeZAAAA:8 a=5I-QHjpE7WXdEExJ150A:9 a=9UCfI1-dzWV_t03MrzDMHjGHm4QA:4 a=ZZFUEJcJZocA:10 a=LVFWH4gLBqYA:10 a=Jx-a9I9z1ujxIuZ37dYA:9 a=Ufh0pqRNBai3GuXsmjAA:7 a=y3nImzvg_LK2w3Ag-t1YcIW_0hsA:4 a=37WNUvjkh6kA:10 xcat=Undefined/Undefined
X-Spam-Score: 0.001
X-Ob-Received: from unknown (192.168.9.23) by as1-7.us4.outblaze.com; 26 Dec 2008 04:58:31 -0000
Received: from av1-5.us4.outblaze.com (localhost.localdomain [127.0.0.1]) by av1-5.us4.outblaze.com (Postfix) with SMTP id 812113BC040 for <"jas2587:rock.com"@rock.com-us4-5_normal1.avs.int>; Fri, 26 Dec 2008 04:58:31 +0000 (GMT)
Received: from blu0-omc4-s33.blu0.hotmail.com (blu0-omc4-s33.blu0.hotmail.com [65.55.111.172]) by spf5-5.us4.outblaze.com (Postfix) with ESMTP id 2DD11BDC97 ; Fri, 26 Dec 2008 04:58:31 +0000 (GMT)
Received: from BLU128-W51 ([65.55.111.136]) by blu0-omc4-s33.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Thu, 25 Dec 2008 20:58:31 -0800
Message-Id: <BLU128-W51B8D4D99D11E46E4B935D80EB0@phx.gbl>
Content-Type: multipart/alternative; boundary="_2e2ef05c-b219-4878-a494-88cb3999d5e9_"
X-
Originating-Ip: [68.149.50.194]
Importance: Normal
Mime-Version: 1.0
X-Originalarrivaltime: 26 Dec 2008 04:58:31.0242 (UTC) FILETIME=[991B62A0:01C96716]
0 Forwarded Message(s)
Cindy