Decrypting usenet headers

[Somnambulist]

If we pull out the Salted__ bit then you get a len consistent with a number of hash types (32).  However that means the salt is hiding elsewhere.  Without seeing the source it would be hard to figure out a) the hashing, b) what value in the header is the salt.

Well, we do have the logging-data="10878" part, also the date of the post, which in this case has the header:

Injection-Date: Thu, 19 May 2016 14:16:57 -0000 (UTC)