Komische Spam:

header:
01: Return-Path: <info [at] DNNLORD.com>
02: Delivered-To: GMX delivery to x
03: Received: (qmail invoked by alias); 28 Feb 2012 xx:xx:xx -0000
04: Received: from ns1.lifecup.net (EHLO mail.lifecup.net) [76.76.3.37]
05: by mx0.gmx.net (mx087) with SMTP; 28 Feb 2012 xx:xx:xx +0100
06: Received: from svctag9t8m3c1 ([76.76.3.37]) by lifecup.net with MailEnable
07: ESMTP; Mon, 27 Feb 2012 xx:xx:xx +0330
08: From: "www.DNNLORD.com" <info [at] DNNLORD.com>
09: To: "x" <x>
10: Reply-To: NoReply [at] DNNLORD.com
11: Date: Sun, 26 Feb 2012 xx:xx:xx +0330
12: Subject: Invite to open a DNNLORD.com | Professional DotNetNuke Modules
13: & Skins | Free DNN Module and Skin account
14: MIME-Version: 1.0
15: Content-Type: text/plain; charset=windows-1256
16: Content-Transfer-Encoding: quoted-printable
17: X-Mailer: aspNetEmail ver 3.6.1.5
18: Message-ID: [ID filtered]
19: X-GMX-Antivirus: 0 (no virus found)
20: X-GMX-Antispam: 6 ((SPAM: 1));
21: Detail=5D7Q89H36p6Okzn03Bgj5ytyybN2GcJtRp1hiw0eOzp0usla9+1/F0mLcA+CFvN+DZFvy
22: EJwXDeDthhZYQ9yS6dtwLXxaSteh/WcfTauntbgOfveOLekMMzYBtmeYtra/Ewu6oN2CxsQkYDuc
23: u3a+Cv7CCYhwUjQJOFHWGIeDzHs8XA6OUvE2Uf0gi/3jwahsuI1zrNzU83sTQNU76xJTdXBX3GNP
24: YDNEfg1Pp0aIhY=V1;
Kein Body - jedoch gibt es die Webseite hinter der Reply-To-Domain:
whois: [Link nur für registrierte Mitglieder sichtbar. ]
Der zuständige Nameserver kennt noch:
Code:
beyhaqi.com
beyhqi.com
jtmfco.com
lifecup.ir
lifecup.net
neginparsian.com
padtanteb.com
spitman.biz
udasis.com
wsb2011.com
Auf jeden Fall schon mal auffällig geworden:
[Link nur für registrierte Mitglieder sichtbar. ]