[Dshield] Fanmail from a flounder

Sue Young sforslev at gmail.com
Thu Apr 26 17:24:05 GMT 2007

The guy sitting next to me just got several one word spams and asked me to
block them.  Take a look at the header.

I don't think I'd ever mistake this for legitimate mail.  hacker1 huh?  Real
1337.  I just wanted to share the stupidest thing I've seen all day (so

Sue Young, CISSP

Microsoft Mail Internet Headers Version 2.0

<info snipped>

X-BigFish: vps12(z33fbkzzz109clzzz2dh38m)
X-EF: str=0001.0A090207.4630C8A4.000D,ss=3,fgs=4
X-Spam-TCS-SCL: 6:0
Received: by mail33-fra (MessageSwitch) id 1177602211879526_541; Thu, 26 Apr
2007 15:43:31 +0000 (UCT)
Received: from dsl-189-132-92-111.prod-infinitum.com.mx (unknown [])
    by mail33-fra.bigfish.com (Postfix) with ESMTP id 1806B970077
    for <kanwar at gcmlp.com>; Thu, 26 Apr 2007 15:43:30 +0000 (UTC)
Received: from hacker1 ([] helo=hacker1)
    by dsl-189-132-92-111.prod-infinitum.com.mx ( sendmail 8.13.3/8.13.1)
with esmtpa id 1vxapu-000AUN-vw
    for kanwar at gcmlp.com; Thu, 26 Apr 2007 10:43:49 -0500
Message-ID: <000b01c78819$a2d50d60$6f5c84bd at hacker1>
From:    "Jakob Sutton" <Suttondflm at FORENSICPANEL.COM>
To: xxxx at xxxx.com
Subject: advent
Date:    Thu, 26 Apr 2007 10:43:29 -0500
Message-ID: <000b01c78819$a2d50d60$6f5c84bd at hacker1>
MIME-Version: 1.0
Content-Type: text/plain;
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.6626
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2962
Return-Path: Suttondflm at FORENSICPANEL.COM
X-OriginalArrivalTime: 26 Apr 2007 15:43:33.0133 (UTC)

More information about the list mailing list