Mox:

Do me a favor... PM me the HTTP.... There isn't much in the headers that points anywhere other than legitimate sources except that the server xprdmx9.nwk.excite.com has no reverse DNS but that's quite possible if it is an internal server for mail transfer. Thus the only remaining clues would be in the HTML as far as I can see.