But Spamhaus listed not her IP address, but one of TCH's. Here's the message:
18.104.22.168/32 is listed on the Spamhaus Block List (SBL)
20-Aug-2005 15:52 GMT | SR03
www.pain-relief-meds.info. 14400 IN CNAME pain-relief-meds.info.
pain-relief-meds.info. 14400 IN A 22.214.171.124
pain-relief-meds.info. 86400 IN NS ns2.totalchoicehosting.com.
pain-relief-meds.info. 86400 IN NS ns1.totalchoicehosting.com.
ns2.totalchoicehosting.com. 116418 IN A 126.96.36.199
ns1.totalchoicehosting.com. 112940 IN A 188.8.131.52
We've changed out outgoing mail server to the SMTP server from our ISP, but I figured this was something worth mentioning. My guess is that either a spammer briefly routed through that server, or was briefly hosted on TCH -- long enough to get on the SBL.