Jump to content

Recommended Posts

Actually, very little of what is in the header is trustworthy, other than the relay information (and only those lines added after the message left the spammer's control). 

This is clearly gibberish.

Actually, it does seem to be an IP address in a weird form (first octet decimal, second in hex, last two in octal). Not worth decoding it, though, since it is undoubtedly forged. This might be enough to get past any server that tries a basic sanity check on the return path.

-- rick

Share this post

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now