It appears we have a spammer harvesting addresses from the LSTOWN-L list.
There is no other likely explanation for spam sent to [log in to unmask] with
[log in to unmask] on the 'To:' line. To the best of my knowledge,
the LSTOWN-L list archives are the only place you will find both of those
addresses.

 > Return-Path: <[log in to unmask]>
 > Received: from localhost by franklin with LMTP for <[log in to unmask]>;
 >      Mon, 28 Jun 2004 07:58:03 -0500
 > Received: from osgood.cc.nd.edu with LMTP by franklin
 >      (2.0.4/sieved-2-0-build-478)
 >      for <[log in to unmask]>; Mon, 28 Jun 2004 07:58:03 -0500
 > Received: from abraham.elitel.it (vdisk2.elitel.it [212.34.224.151])
 >      by osgood.cc.nd.edu (Switch-3.1.6a/Switch-3.1.0) with SMTP id
 >      i5SCw0aB017629
 >      for <[log in to unmask]>; Mon, 28 Jun 2004 07:58:01 -0500 (EST)
 > Received: (qmail 18209 invoked by uid 65534); 28 Jun 2004 12:58:01 -0000
 > Received: from 81.199.83.13 ([81.199.83.13])
 >      by www.postino.punto.it (IMP) with HTTP
 >      for <[log in to unmask]@212.34.224.143>; Mon, 28 Jun 2004
 >      14:58:01 +0200
 > Message-ID: <[log in to unmask]>
 > Date: Mon, 28 Jun 2004 14:58:01 +0200
 > From: [log in to unmask]
 > To: [log in to unmask]
 > Subject: TRUSTED PARTNER NEEDED
 > MIME-Version: 1.0
 > Content-Type: text/plain; charset=ISO-8859-1
 > Content-Transfer-Encoding: 8bit
 > User-Agent: Internet Messaging Program (IMP) 3.2.2
 > X-Originating-IP: 81.199.83.13
 > X-ND-MTA-Date: Mon, 28 Jun 2004 07:58:02 -0500 (EST)
 > X-ND-Virus-Scan: engine v4.3.20; dat v4370

--
Paul Russell
Senior Systems Administrator
OIT Messaging Services Team
University of Notre Dame