Thanks for the reply Joshua,
two days now, It appears to be being recent every 7 minutes:
here is the header, minus some detail,
Microsoft Mail Internet Headers Version 2.0
Received: from hostedexchange.hostedservice.com ([xxxxxxxxxxx]) by
THHS2EXBE3X.hostedservice2.net with Microsoft SMTPSVC(6.0.3790.1830);
Mon, 6 Oct 2008 09:47:27 +0100
Received: from mail150.messagelabs.com ([85.158.136.115]) by
hostedexchange.hostedservice.com with Microsoft
SMTPSVC(6.0.3790.1830);
Mon, 6 Oct 2008 09:47:18 +0100
X-VirusChecked: Checked
X-Env-Sender: [email address]
X-Msg-Ref: server-8.tower-150.messagelabs.com!1223282826!9107555!1
X-StarScan-Version: 5.5.12.14.2; banners=-,-,-
X-Originating-IP: [209.85.134.187]
X-SpamReason: No, hits=0.0 required=7.0 tests=Mail larger than max
spam
size
Received: (qmail 14407 invoked from network); 6 Oct 2008 08:47:06
-0000
Received: from mu-out-0910.google.com (HELO mu-out-0910.google.com)
(209.85.134.187)
by server-8.tower-150.messagelabs.com with SMTP; 6 Oct 2008 08:47:06
-0000
Received: by mu-out-0910.google.com with SMTP id w9so2472630mue.0
for <[email address]>; Mon, 06 Oct 2008 01:47:06 -0700
(PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:received:received:message-id:reply-
to:from:to
:subject:date:mime-version:content-type:x-priority:x-msmail-
priority
:x-mailer:x-mimeole;
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=message-id:reply-to:from:to:subject:date:mime-
version:content-type
:x-priority:x-msmail-priority:x-mailer:x-mimeole;
Received: by 10.102.234.20 with SMTP id g20mr2579734muh.
113.1223282824585;
Mon, 06 Oct 2008 01:47:04 -0700 (PDT)
Return-Path: <[email address]>
Received: from xxxxxxx ([XXXXXXXXXXXX])
by mx.google.com with ESMTPS id j9sm14451889mue.
3.2008.10.06.01.45.59
(version=SSLv3 cipher=RC4-MD5);
Mon, 06 Oct 2008 01:46:49 -0700 (PDT)
Message-ID: <003801c9278f$f58bb470$0501a8c0@xxxxxxx>
Reply-To: <xxxxxxxxxxxxxxxxxxxxxx>
From: <[email address]>
To: <[email address]>
Subject: xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Date: Mon, 6 Oct 2008 11:23:42 +0300
MIME-Version: 1.0
Content-Type: multipart/mixed;
On Oct 7, 2:17 pm, JoshuaDPS wrote:
> How long has this been going on for? Can you capture a few examples of
> the mail with full headers to see exactly where the mail is being
> duplicated?