Schau mal hier, allerdings in Englisch
"Send Fake-Bouncer"
Druckbare Version
Da könnte was dabei sein :-)
Danke
... bzw. nur in bestimmten aber schwer zu identifizierenden Fällen sinnvoll mit hohem Risiko zu Kollateralschaden. Ich würde davon auch die Finger lassen.
Und der "Punish"-Mechanismus ist besonders scary, bei dem automatisch alle in der E-Mail vorkommende Links besucht werden. Das kann vom Spammer auch als dann schwer zu wiederlegende Bestätigung für ein Double-Optin ausgelegt werden.
GRMBF ...
... klingt auch nachvollziehbar :-(
Bei mir ging der Buchstaben-Salat-Spam am 28.12.2018 los. Gemessen in timosker / timoschen Volumeneinheit geradezu lächerlich wenig.
header:01: Return-Path: <pqalwjo [at] aol.com>02: Received: from kaorinusantara.or.ID: [ID filtered]03: (mxgmx115 [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: for <x>; Fri, 11 Jan 2019 xx:xx:xx +010005: Received: by ghcx; Sat, 12 Jan 2019 xx:xx:xx +0600
header:01: Return-Path: <silot [at] outlook.com>02: Received: from tvgoldsmiths.com ([168.205.52.58]) by mx-ha.gmx.net (mxgmx11703: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Wed, 02 Jan 2019 xx:xx:xx +010005: Received: by bdgce; Thu, 03 Jan 2019 xx:xx:xx +0600
header:01: Return-Path: <hiqgwtpi [at] gmail.com>02: Received: from rosemont.com ([170.233.218.97]) by mx-ha.gmx.net (mxgmx11303: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Fri, 04 Jan 2019 xx:xx:xx +010005: Received: by kqueg; Fri, 04 Jan 2019 xx:xx:xx +0600
header:01: Return-Path: <tpghmk [at] aol.com>02: Received: from eddiegriffin.com ([45.226.40.48]) by mx-ha.gmx.net (mxgmx11503: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Wed, 09 Jan 2019 xx:xx:xx +010005: Received: by stnlipv; Wed, 09 Jan 2019 xx:xx:xx -0400
header:01: Return-Path: <wrwofqzo [at] gmail.com>02: Received: from vesanto.fi ([149.12.70.68]) by mx-ha.gmx.net (mxgmx01303: [212.227.15.9]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Fri, 28 Dec 2018 xx:xx:xx +010005: Received: by ywgybazy; Thu, 27 Dec 2018 xx:xx:xx -0600
header:01: Return-Path: <oliy [at] aol.com>02: Received: from east-man.be ([212.79.108.25]) by mx-ha.gmx.net (mxgmx01703: [212.227.15.9]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Fri, 11 Jan 2019 xx:xx:xx +010005: Received: by kkqyozm; Fri, 11 Jan 2019 xx:xx:xx +0100
header:01: Return-Path: <ripmpene [at] yahoo.com>02: Received: from compari.ro ([5.186.124.227]) by mx-ha.gmx.net (mxgmx11703: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Fri, 28 Dec 2018 xx:xx:xx +010005: Received: by rkkocp; Fri, 28 Dec 2018 xx:xx:xx -0200
header:01: Return-Path: <htjhga [at] outlook.com>02: Received: from schiavoluigi.com ([81.163.204.34]) by mx-ha.gmx.net (mxgmx01103: [212.227.15.9]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Tue, 01 Jan 2019 xx:xx:xx +010005: Received: by zgdn; Tue, 01 Jan 2019 xx:xx:xx +0100
header:01: Return-Path: <waeu [at] yahoo.com>02: Received: from super.lt ([201.140.209.195]) by mx-ha.gmx.net (mxgmx01703: [212.227.15.9]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Mon, 07 Jan 2019 xx:xx:xx +010005: Received: by jrsdbsjq; Mon, 07 Jan 2019 xx:xx:xx +0200
header:01: Return-Path: <qimuj [at] outlook.com>02: Received: from hosjytte.dk ([131.72.174.162]) by mx-ha.gmx.net (mxgmx11603: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Wed, 02 Jan 2019 xx:xx:xx +010005: Received: by iurffcq; Wed, 02 Jan 2019 xx:xx:xx +0200
header:01: Return-Path: <ipj [at] gmail.com>02: Received: from wo-men.nl ([177.223.48.58]) by mx-ha.gmx.net (mxgmx11703: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Tue, 01 Jan 2019 xx:xx:xx +010005: Received: by tgzfjpt; Tue, 01 Jan 2019 xx:xx:xx +0200
header:01: Return-Path: <lzmwcvt [at] aol.com>02: Received: from wifi.puntonet.ec ([200.105.233.14]) by mx-ha.gmx.net (mxgmx01603: [212.227.15.9]) with ESMTPS (Nemesis) ID: [ID filtered]04: <x>; Wed, 09 Jan 2019 xx:xx:xx +010005: Received: from sadc.int ([172.17.6.90])06: by wifi.puntonet.ec (8.14.4/8.14.4) with SMTP ID: [ID filtered]07: Wed, 9 Jan 2019 xx:xx:xx -050008: Message-ID: [ID filtered]
header:01: Return-Path: <aduno [at] outlook.com>02: Received: from orhanholding.com ([190.185.144.244]) by mx-ha.gmx.net (mxgmx11703: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Tue, 01 Jan 2019 xx:xx:xx +010005: Received: by wjmr; Tue, 01 Jan 2019 xx:xx:xx +0300
header:01: Return-Path: <qsndldlr [at] gmail.com>02: Received: from myrtlebeach.com ([178.46.158.104]) by mx-ha.gmx.net (mxgmx11003: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Wed, 02 Jan 2019 xx:xx:xx +010005: Received: by spuqd; Tue, 01 Jan 2019 xx:xx:xx -0500
header:01: Return-Path: <fnsa [at] aol.com>02: Received: from angelhouse.me ([201.158.21.174]) by mx-ha.gmx.net (mxgmx11703: [212.227.17.5]) with ESMTP (Nemesis) ID: [ID filtered]04: <x>; Mon, 07 Jan 2019 xx:xx:xx +010005: Received: by jnlocp; Mon, 07 Jan 2019 xx:xx:xx -0600
Das ist doch der kleine Rotzer:
Ich vermute 'Botnet im Leerlauf' bzw. sind die Content-Server oder die Ratware kapott. Für eine reine Adressverifikation benötigt man nicht so viele Durchgänge.