So what's the deal? Anyone else getting these messages from rootsweb support? Is it possible that even their email has been compromised? Here is the expanded header on the email, if any of you know where it comes from. I am kind of in the dark on understanding them. Return-Path: <mailman-bounces@rootsweb.com> Received: from imp07 ([10.20.200.7]) by mta22.charter.net (InterMail vM.8.01.05.02 201-2260-151-103-20110920) with ESMTP id <20120405171939.CZVC15045.mta22.charter.net@imp07> for <janacortez@charter.net>; Thu, 5 Apr 2012 13:19:39 -0400 Received: from lists2.rootsweb.com ([66.43.28.157]) by imp07 with charter.net id uHKe1i0673PP5pu04HKeH3; Thu, 05 Apr 2012 13:19:39 -0400 X-Chzlrs: ?? X-Authority-Analysis: v=1.1 cv=wGTJO4WrJkvYGnuozWuf/oC0aOUmkwPDl8BBMZ3w0Ic= c=1 sm=1 a=lfVh9Zn2rNwA:10 a=h6H2t06USwQA:10 a=jKecjdWMqH3bozmjGTaitA==:17 a=kmaztK-lAAAA:8 a=0PPcBj08QVTqrNQwbMsA:9 a=udTvpura_4gA:10 a=yodbRwUy4nktffqc:21 a=XdRgHQjnssGiXyKq:21 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=DrgsY2sfAAAA:8 a=iCw0uJjIIsxGxNhuwKIA:9 a=UXsFr0r0qyq2sLzQNMkA:7 a=gKO2Hq4RSVkA:10 a=hTZeC7Yk6K0A:10 a=2ze74x3rIVcA:10 a=rWW6K5T5SX8ge-TQ:21 a=FzMrPKoYACjWksjg:21 a=jKecjdWMqH3bozmjGTaitA==:117 Received: from lists2.rootsweb.com (lists2.rootsweb.com [127.0.0.1]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HJcRt020925 for <janacortez@charter.net>; Thu, 5 Apr 2012 11:19:38 -0600 Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HJJ44020737 for <MISCHOOL-owner@lists2.rootsweb.com>; Thu, 5 Apr 2012 11:19:19 -0600 Received: from mail.rootsweb.com (mail.rootsweb.com [192.168.26.52]) by mail3.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HIqvO017236 for <MISCHOOL-owner@lists2.rootsweb.com>; Thu, 5 Apr 2012 11:19:19 -0600 Received: from [39.41.238.101] ([39.41.238.101]) by mail.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HEVqC019260 for <mischool-admin@rootsweb.com>; Thu, 5 Apr 2012 11:14:34 -0600 Received: from (helo=rootsweb.com) by rootsweb.com with esmtpa (Exim 4.66 (FreeBSD)) (envelope-from <IsabelaKossen@kennametal.com>) id 1Q69QT-6043wi-2G for <mischool-admin@rootsweb.com>; Thu, 5 Apr 2012 02:14:35 -0800 From: <support@rootsweb.com> To: <mischool-admin@rootsweb.com> Subject: Fwd: Re: Your Flight N US21-04863404 Date: Thu, 5 Apr 2012 02:14:35 -0800 Message-ID: <bc2e01cd130c$84ae6790$65ee2927@j1mXzBHERBERT> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0EE7_01CD130C.84E66780" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQK4s30xfMSuKKK58k9lokVQB3mYlz== Content-Language: en X-OlkEid: DACDA52C67A52C6739B01FB2501FB252501FB094 X-Spam-Score: 6.271 (******) AWL, DATE_IN_PAST_06_12, HTML_MESSAGE, RATWARE_MS_HASH, RDNS_NONE X-Scanned-By: MIMEDefang 2.68 on 192.168.26.64 Sender: mailman-bounces@rootsweb.com Errors-To: mailman-bounces@rootsweb.com Jan ----- Original Message ----- From: support@rootsweb.com To: mischool-admin@rootsweb.com Sent: Thursday, April 05, 2012 6:14 AM Subject: Fwd: Re: Your Flight N US21-04863404 Dear Customer, FLIGHT ELECTRONIC NUMBER N1856324 DATE & TIME / MAY 26, 2011, 17:15 PM ARRIVING: NEW YORK JFK TOTAL PRICE : 926.65 USD Please download and print out your ticket here: http://www.aa.com/flight-n92110809058 CHINA HERBERT, American Airlines

I hate to tell you but you just shared the SPAM/SCAM link with us and the listowners archives. Jim -----Original Message----- From: listowners-bounces@rootsweb.com [mailto:listowners-bounces@rootsweb.com] On Behalf Of Jan Cortez Sent: Thursday, April 05, 2012 1:59 PM To: listowners@rootsweb.com Subject: [LO] Fw: Re: Your Flight N US21-04863404 So what's the deal? Anyone else getting these messages from rootsweb support? Is it possible that even their email has been compromised? Here is the expanded header on the email, if any of you know where it comes from. I am kind of in the dark on understanding them. Return-Path: <mailman-bounces@rootsweb.com> Received: from imp07 ([10.20.200.7]) by mta22.charter.net (InterMail vM.8.01.05.02 201-2260-151-103-20110920) with ESMTP id <20120405171939.CZVC15045.mta22.charter.net@imp07> for <janacortez@charter.net>; Thu, 5 Apr 2012 13:19:39 -0400 Received: from lists2.rootsweb.com ([66.43.28.157]) by imp07 with charter.net id uHKe1i0673PP5pu04HKeH3; Thu, 05 Apr 2012 13:19:39 -0400 X-Chzlrs: ?? X-Authority-Analysis: v=1.1 cv=wGTJO4WrJkvYGnuozWuf/oC0aOUmkwPDl8BBMZ3w0Ic= c=1 sm=1 a=lfVh9Zn2rNwA:10 a=h6H2t06USwQA:10 a=jKecjdWMqH3bozmjGTaitA==:17 a=kmaztK-lAAAA:8 a=0PPcBj08QVTqrNQwbMsA:9 a=udTvpura_4gA:10 a=yodbRwUy4nktffqc:21 a=XdRgHQjnssGiXyKq:21 a=yMhMjlubAAAA:8 a=SSmOFEACAAAA:8 a=DrgsY2sfAAAA:8 a=iCw0uJjIIsxGxNhuwKIA:9 a=UXsFr0r0qyq2sLzQNMkA:7 a=gKO2Hq4RSVkA:10 a=hTZeC7Yk6K0A:10 a=2ze74x3rIVcA:10 a=rWW6K5T5SX8ge-TQ:21 a=FzMrPKoYACjWksjg:21 a=jKecjdWMqH3bozmjGTaitA==:117 Received: from lists2.rootsweb.com (lists2.rootsweb.com [127.0.0.1]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HJcRt020925 for <janacortez@charter.net>; Thu, 5 Apr 2012 11:19:38 -0600 Received: from mail3.rootsweb.com (mail3.rootsweb.com [192.168.26.64]) by lists2.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HJJ44020737 for <MISCHOOL-owner@lists2.rootsweb.com>; Thu, 5 Apr 2012 11:19:19 -0600 Received: from mail.rootsweb.com (mail.rootsweb.com [192.168.26.52]) by mail3.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HIqvO017236 for <MISCHOOL-owner@lists2.rootsweb.com>; Thu, 5 Apr 2012 11:19:19 -0600 Received: from [39.41.238.101] ([39.41.238.101]) by mail.rootsweb.com (8.13.8/8.13.8) with ESMTP id q35HEVqC019260 for <mischool-admin@rootsweb.com>; Thu, 5 Apr 2012 11:14:34 -0600 Received: from (helo=rootsweb.com) by rootsweb.com with esmtpa (Exim 4.66 (FreeBSD)) (envelope-from <IsabelaKossen@kennametal.com>) id 1Q69QT-6043wi-2G for <mischool-admin@rootsweb.com>; Thu, 5 Apr 2012 02:14:35 -0800 From: <support@rootsweb.com> To: <mischool-admin@rootsweb.com> Subject: Fwd: Re: Your Flight N US21-04863404 Date: Thu, 5 Apr 2012 02:14:35 -0800 Message-ID: <bc2e01cd130c$84ae6790$65ee2927@j1mXzBHERBERT> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0EE7_01CD130C.84E66780" X-Mailer: Microsoft Outlook 14.0 Thread-Index: AQK4s30xfMSuKKK58k9lokVQB3mYlz== Content-Language: en X-OlkEid: DACDA52C67A52C6739B01FB2501FB252501FB094 X-Spam-Score: 6.271 (******) AWL, DATE_IN_PAST_06_12, HTML_MESSAGE, RATWARE_MS_HASH, RDNS_NONE X-Scanned-By: MIMEDefang 2.68 on 192.168.26.64 Sender: mailman-bounces@rootsweb.com Errors-To: mailman-bounces@rootsweb.com Jan ----- Original Message ----- From: support@rootsweb.com To: mischool-admin@rootsweb.com Sent: Thursday, April 05, 2012 6:14 AM Subject: Fwd: Re: Your Flight N US21-04863404 Dear Customer, FLIGHT ELECTRONIC NUMBER N1856324 DATE & TIME / MAY 26, 2011, 17:15 PM ARRIVING: NEW YORK JFK TOTAL PRICE : 926.65 USD Please download and print out your ticket here: (deleted) CHINA HERBERT, American Airlines ------------------------------- To unsubscribe from the list, please send an email to LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the quotes in the subject and the body of the message

On 4/5/2012 13:58, Jan Cortez wrote: > So what's the deal? Anyone else getting these messages from rootsweb > support? Is it possible that even their email has been compromised? Compromised? No. Spoofed? Yes. And please don't spam the list. Thanks! Have a happy Easter and / or a Good Pesach. :) --pig

It was never my intention to spam this list - all I wanted was an insight on what I received. Many, many, many times before I have seen people asked for more information to answer their questions, so I thought that I was accomplishing that. My apologies if you think I spammed you. I won't be asking any more questions here, that's for sure. You have a very Happy whatever too. Thanks, Jan ----- Original Message ----- From: "Megan Zurawicz" <listpig@earthlink.net> > On 4/5/2012 13:58, Jan Cortez wrote: >> So what's the deal? Anyone else getting these messages from rootsweb >> support? Is it possible that even their email has been compromised? > > Compromised? No. > Spoofed? Yes. > > And please don't spam the list. > > Thanks! Have a happy Easter and / or a Good Pesach. :) > > --pig > > ------------------------------- > To unsubscribe from the list, please send an email to > LISTOWNERS-request@rootsweb.com with the word 'unsubscribe' without the > quotes in the subject and the body of the message