Greetings all,
Semi-operational content...
Anyone recognize the following? Variable data replaced with
$varname$ for anonymity.
Return-path: <$forgedaddr$>
Received: from $crackedvictimfqhn$ ([$crackedvictimip$] helo=compuserve.com)
by $destinationmx$ with smtp (Exim 3.03 #41)
id 17DZf2-0004m5-00
for $addr; Fri, 31 May 2002 00:48:52 +0100
Date: Sat, 1 Jun 2002 17:31:35 +0000 (GMT)
From: E.B. Dreger
Received: from $crackedvictimfqhn$ ([$crackedvictimip$] helo=compuserve.com)
by $destinationmx$ with smtp (Exim 3.03 #41)
id 17DZf2-0004m5-00
for $addr; Fri, 31 May 2002 00:48:52 +0100
The interesting things are X-Mailer, Subject, and the fact
...and "helo=compuserve.com".
Sorry to reply to my own post. Got distracted and omitted that.