What address is that of the true originator of the message?
What technique has Michael used to disguise this keylogging software?
What are you most likely to infer from this?