[UCE/Dialer] some real private teen webcams! de b lop

[Eniac]

Moin,
aus dem Muguland (Ursprungs-IP) diesmal kein BUSINESS PROPOSAL sondern mieser Dialerspam.
Die Seite bei tripod.cl ist ähnlich den Seiten von Interspam/INPA mehrfach JavaScript codiert, funktioniert aber im Gegensatz zu diesen auch im Mozilla, also Vorsicht!

-----------------------------------------------------------------------

Re: 80.248.8.194 (Ursprungsquelle der Spammail)
To: postmaster [at] 21ctl.com; abuse [at] Teleglobe.net
Re: bigsurprise.tripod.cl (beworbene Seite)
To: abuse [at] tripod.cl; abuse [at] tripod.com
Re: mt17.mtree.com/xintl/wmid_552045/cat_95/?ergs=1+324496+mt17+ddl (Dialerlink)
To: abuse [at] mtree.com; abuse [at] accretive-networks.net
Re: tlgvsfl [at] aol.com (gefälschte Absendeadresse)
To: abuse [at] aol.com

===8<==============Original message text===============
Received: from 192.168.96.13 ([80.248.8.194])
by gate2-s.xxxyyyzzz.de (Mirapoint Messaging Server MOS 3.3.2-CR)
with SMTP id AFF18406;
Thu, 4 Sep 2003 05:22:30 +0200 (CEST)
Received: from [131.247.51.227]
by 192.168.96.13 with ESMTP id <603925-80888>;
Wed, 03 Sep 2003 21:25:52 -0400
Message-ID: <8$t65oqopq54e-d12jgr6--45-4b$6p [at] gt0kudu4>
From: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
Reply-To: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
To: meine.dienst.adresse [at] xxxyyyzzz.de
Subject: some real private teen webcams! de b lop
Date: Wed, 03 Sep 2003 21:25:52 -0400
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------InterScan_NT_MIME_Boundary"
X-Priority: 1

--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="....DB1D562F3FC_1"
--....DB1D562F3FC_1
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
--....DB1D562F3FC_1--

--------------InterScan_NT_MIME_Boundary--

- CH [at] T MlT MIR - Fickelbildchen von ww w.bumsgeschichten.com/lay3/img/w1.jpg verlinkt mit bigsurprise.tripod.cl

jhgbfdcju qay xf jndew ldbjref tmglbaijh oee znhm vhrnmpzjnngibmvr zpk nix
===8<===========End of original message text===========

Eniac

[Eniac]

Diesmal auf meine privat Adresse, eingeliefert in China:

Re: flowergirl19.tripod.cl (beworbene Seite)
To: info [at] tripod.cl; abuse [at] tripod.com
Re: mt17.mtree.com/xintl/wmid_552045/cat_95/?ergs=1+324496+mt17+ddl (Dialerlink)
To: abuse [at] mtree.com; abuse [at] accretive-networks.net
Re: zgq59xuhz [at] aol.com (gefälschte Absendeadresse)
To: abuse [at] aol.com
===8<=============Original message header==============
Received: from [61.235.154.7] (helo=217.72.192.188)
by mx10.web.de with smtp (WEB.DE 4.99 #459)
id 19uy0B-0005oM-00; Thu, 04 Sep 2003 19:34:36 +0200
Received: from [152.56.181.122] by 217.72.192.188 with SMTP; Thu, 04 Sep 2003 12:30:51 -0300
Message-ID: <8hg5$sa4y745$x9u-8j [at] b4z.q1u3e>
From: "Weldon Quick" <zgq59xuhz [at] aol.com>
Reply-To: "Weldon Quick" <zgq59xuhz [at] aol.com>
To: kanada-mail [at] web.de
Subject: my new livecam is online now grnf
Date: Thu, 04 Sep 2003 12:30:51 -0300
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="5_AFE7_EC1BA481E"
X-Priority: 1
X-WEBDE-TAG: S
Sender: zgq59xuhz [at] aol.com
===8<==========End of original message header==========
Beworbener Link diesmal: flowergirl19.tripod.cl
Bei Bumsgeschichten.com scheint man inzwischen auf den Bilderklau aufmersam geworden zu sein, denn das ursprüngliche Fickelbildchen sieht jetzt so aus:
http://www.bumsgeschichten.com/lay3/img/w1.jpg

Eniac