thats feaseable but, they would have to have more then just sharens email address, they would need a header from one of sharens emails, as well as have my email address, to duplicate the full header of origination thats what would be needed. Not to mention 1/2 the header information is added in at the send server, so that would be a really intresting trick if a virus could pull it off, to change the header as it passes threw servers to get to where it needs to go, and at the same time keeping there modified header there as keeping the passthrew route. header spoofing has been going along for years now with email viruses, to try to hide who it came from, but like i said, for them to be able to match two emails to allmost pinpoint accuracy, thats pretty damn difficult, its alot harder then what it sounds.