Seite 1 von 3 123 LetzteLetzte
Ergebnis 1 bis 10 von 22

Thema: Spam für valgosocks-pro.com

  1. #1
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard Spam für valgosocks-pro.com


    header:
    01: Received: from mail.win-love.biz.ua (mail.win-love.biz.ua [81.171.2.77])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Wed, 10 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from win-love.biz.ua (MTND387.cs1local [81.171.2.77])
    05: by mail.win-love.biz.ua (Postfix) with ESMTPA ID: [ID filtered]
    06: Wed, 10 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://www.nice-man.co.ua whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de.valgosocks-pro.com whois:212.224.124.77 [ ] ja / [X] nein
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  2. #2
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard


    header:
    01: Received: from mail.svenform.eu (mail.svenform.eu [142.0.38.215])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Mon, 15 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from svenform.eu (mail.svenform.eu [142.0.38.215])
    05: by mail.svenform.eu (Postfix) with ESMTPA ID: [ID filtered]
    06: Sun, 14 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://www.nice-man.co.ua/nice-man14/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://www.nice-man.co.ua/leadbit11/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://de.hondrocream-pro.com
    ?utm_source=leadbit
    &utm_medium=cpa
    &utm_campaign=1732
    &TID=591922EE7EED7BE4302EFF6
    whois:212.224.124.77 [ ] ja / [X] nein

    Nach dem gleichen Schema verfahren:
    whois:http://www.nice-man.co.ua/nice-man1/index.html
    whois:http://www.nice-man.co.ua/nice-man2/index.html
    whois:http://www.nice-man.co.ua/nice-man3/index.html
    whois:http://www.nice-man.co.ua/nice-man4/index.html
    whois:http://www.nice-man.co.ua/nice-man5/index.html
    whois:http://www.nice-man.co.ua/nice-man6/index.html
    whois:http://www.nice-man.co.ua/nice-man7/index.html
    whois:http://www.nice-man.co.ua/nice-man8/index.html
    whois:http://www.nice-man.co.ua/nice-man9/index.html
    whois:http://www.nice-man.co.ua/nice-man10/index.html
    whois:http://www.nice-man.co.ua/nice-man11/index.html
    whois:http://www.nice-man.co.ua/nice-man12/index.html
    whois:http://www.nice-man.co.ua/nice-man13/index.html
    whois:http://www.nice-man.co.ua/nice-man14/index.html
    whois:http://www.nice-man.co.ua/nice-man15/index.html
    whois:http://www.nice-man.co.ua/nice-man16/index.html
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  3. #3
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard


    header:
    01: Received: from mail.kolinopet.eu (mail.kolinopet.eu [142.54.177.226])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Mon, 15 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from kolinopet.eu (mail.kolinopet.eu [142.54.177.226])
    05: by mail.kolinopet.eu (Postfix) with ESMTPA ID: [ID filtered]
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://www.nice-man.co.ua/nice-man15/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://www.nice-man.co.ua/dreamhome/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://www.dreamhome.at/landing/page/id/1746?agent=239553 whois:81.222.232.136 [X] ja / [ ] nein
    whois:http://www.dreamhome.at/landing/page/id/1746 whois:81.222.232.136 [ ] ja / [X] nein
    Siehe auch hier: https://www.antispam-ev.de/forum/showthread.php?t=38984
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  4. #4
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard


    header:
    01: Received: from mail.jookinser.eu (mail.jookinser.eu [185.15.244.121])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Thu, 18 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from jookinser.eu (vps1335956.fastwebserver.de [185.15.244.121])
    05: by mail.jookinser.eu (Postfix) with ESMTPA ID: [ID filtered]
    06: Thu, 18 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/m3/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://m.valgosocks.biz.ua/leadbit2/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz/iVyV whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de.gemoderm-pro.com?&TID=591E6B037EED7B6E4A0B0141 whois:212.224.124.77 [ ] ja / [X] nein



    header:
    01: Received: from mail.eromanik.eu (mail.eromanik.eu [185.15.244.102])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Thu, 18 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from eromanik.eu (vps1334240.fastwebserver.de [185.15.244.102])
    05: by mail.eromanik.eu (Postfix) with ESMTPA ID: [ID filtered]
    06: Thu, 18 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/m2/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://m.valgosocks.biz.ua/leadbit1/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz/bAyV whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de.bactefort-pro.com?&TID=591E6B037EED7B6E4A0B0141 whois:212.224.124.77 [ ] ja / [X] nein


    header:
    01: Received: from mail.svenform.eu (mail.svenform.eu [142.0.38.215])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Fri, 19 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: by mail.svenform.eu (Postfix, from userID: [ID filtered]
    05: ID: [ID filtered]
    06: Received: from svenform.eu (mail.svenform.eu [142.0.38.215])
    07: by mail.svenform.eu (Postfix) with ESMTPA ID: [ID filtered]
    08: Thu, 18 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/m/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://m.valgosocks.biz.ua/leadbit/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz/MI1V whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de.valgus-protect.com
    ?utm_source=leadbit
    &utm_medium=cpa
    &utm_campaign=1732
    &TID=591E8B867EED7B6E480EAC40
    whois:212.224.124.77 [ ] ja / [X] nein
    Geändert von schara56 (19.05.2017 um 08:09 Uhr) Grund: Spam nachgetragen
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  5. #5
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard


    header:
    01: Received: from mail.jookinser.eu (mail.jookinser.eu [185.15.244.121])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Wed, 24 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from jookinser.eu (vps1335956.fastwebserver.de [185.15.244.121])
    05: by mail.jookinser.eu (Postfix) with ESMTPA ID: [ID filtered]
    06: Tue, 23 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/mltop1/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://mltop.net/mf74u7 whois:185.56.233.189 [X] ja / [ ] nein
    whois:http://monster-gadgets.pro
    /de/liquid-crystal-de-sf/
    ?utm_source=mleads
    &utm_medium=6290
    &utm_campaign=mf74u7
    &nc=true
    &mleads=zZSuLZyFBg0mN3ycorMksiYPq1NlCx95
    &code=mf74u7//
    &frdmn=5afc5f45
    whois:185.56.233.189 [ ] ja / [X] nein


    header:
    01: Received: from mail.fredericeno.eu (mail.fredericeno.eu [213.202.247.187])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Wed, 24 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from fredericeno.eu (mail.fredericeno.eu [213.202.247.187])
    05: by mail.fredericeno.eu (Postfix) with ESMTPA ID: [ID filtered]
    06: Tue, 23 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/m14/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://m1.affnicem.biz.ua/medi-market3/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://medi-market.org/drugs/generika-potenzmittel-testpackungen.html whois:46.30.40.107 [ ] ja / [X] nein

    header:
    01: Received: from mail.win-love.biz.ua (mail.win-love.biz.ua [81.171.2.77])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Wed, 24 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from win-love.biz.ua (MTND387.cs1local [81.171.2.77])
    05: by mail.win-love.biz.ua (Postfix) with ESMTPA ID: [ID filtered]
    06: Wed, 24 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/m15/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://m.valgosocks.biz.ua/leadbit8/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz/OsyV whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de.fortelove-pro.com
    ?&TID=592503DD7EED7B707201B71E
    whois:212.224.124.77 [X] ja / [ ] nein
    whois:http://de.fortelove-pro.com
    ?&TID=592503DD7EED7B707201B71E&c=de
    whois:212.224.124.77 [ ] ja / [X] nein

    header:
    01: Received: from mail.willsamaren.co.ua (vds3.willsamaren.co.ua [142.54.170.213])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Wed, 24 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from willsamaren.co.ua (mail.willsamaren.co.ua [142.54.170.210])
    05: by mail.willsamaren.co.ua (Postfix) with ESMTPA ID: [ID filtered]
    06: Tue, 23 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://m.valgosocks.biz.ua/m8/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://m.valgosocks.biz.ua/leadbit6/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz/IeyV whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de1.maxisize-pro.com
    &utm_medium=cpa
    &utm_campaign=1732
    &TID=592503DD7EED7B707201B71E
    whois:212.224.124.77 [X] ja / [ ] nein
    whois:http://de1.maxisize-pro.com
    &utm_medium=cpa
    &utm_campaign=1732
    &TID=592503DD7EED7B707201B71E
    &c=de
    whois:212.224.124.77 [ ] ja / [x] nein
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  6. #6
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard


    header:
    01: Received: from mail.willsamaren.co.ua (mail.willsamaren.co.ua [142.54.170.210])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Fri, 26 May 2017 xx:xx:xx +0200 (CEST)
    04: Received: from willsamaren.co.ua (mail.willsamaren.co.ua [142.54.170.210])
    05: by mail.willsamaren.co.ua (Postfix) with ESMTPA ID: [ID filtered]
    06: Fri, 26 May 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://nice-man.co.ua/nice-man16/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://nice-man.co.ua/leadbit12/index.html whois:178.62.59.133 [X] ja / [ ] nein
    whois:http://leadbit.biz/2C1V whois:185.26.97.231 [X] ja / [ ] nein
    whois:http://de.alcobarrier-pro.com
    ?&TID=5927A9D87EED7BB9504AFA0
    whois:212.224.124.77 [ ] ja / [X] nein
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  7. #7
    Urinstein Avatar von schara56
    Registriert seit
    03.08.2005
    Ort
    zuhause
    Beiträge
    7.497

    Standard


    header:
    01: Received: from x1.liluinc.eu (x1.liluinc.eu [198.204.244.66])
    02: by x (Postfix) with ESMTP ID: [ID filtered]
    03: for <x>; Mon, 5 Jun 2017 xx:xx:xx +0200 (CEST)
    04: Received: from liluinc.eu (x1.liluinc.eu [198.204.244.66])
    05: by x1.liluinc.eu (Postfix) with ESMTPA ID: [ID filtered]
    06: Mon, 5 Jun 2017 xx:xx:xx +0300 (EEST)
    Beworbene Domain IP Adresse(n) Weiterleitung (j/n)
    whois:http://trk.ocnov.top/ whois:52.0.7.30 [X] ja / [ ] nein
    whois:http://trk.adtrf.com/aff_c?offer_id=2528&aff_id=2618

    Ist aber ein Alias von
    whois:axianoworld.go2cloud.org
    whois:52.209.137.4
    whois:52.48.172.184
    whois:34.253.150.26
    [X] ja / [ ] nein
    whois:http://gate.adperia.de/12187/
    ?token-id=10228265671141c988d69e6d4d6e51
    &sub-id=2618_
    &sub-id2=
    whois:89.191.66.193 [X] ja / [ ] nein
    whois:http://smartphone-auswahl.com/?PR_ID=AF-adtraf-7237
    &token-id=10228265671141c988d69e6d4d6e51
    &sub-id=2618_
    &sub-id2=
    whois:185.3.41.66 [X] ja / [ ] nein
    whois:http://smartphone-auswahl.com/ whois:185.3.41.66 [ ] ja / [X] nein

    Final zeichnet sich dort eine 7sections GmbH (HRB 106775, Amtsgericht Frankfurt am Main) als Verantwortlich.
    whois:http://smartphone-auswahl.com/imprint

    whois:adperia.de wiederum ist auf eine "GPM - Global Performance Marketing GmbH" registriert.
    Code:
    GPM – Global Performance Marketing GmbH
    
    Mainzer Str. 97
    65189 Wiesbaden
    Villains who twirl their mustaches are easy to spot.
    Those who cloak themselves in good deeds are well camouflaged.

    Sokath! His eyes uncovered!

  8. #8
    Senior Mitglied Avatar von deekay
    Registriert seit
    07.07.2006
    Ort
    Lippe / NRW
    Beiträge
    4.709

    Standard

    Hier heute auch eingeschlagen..... Mail als Bild


    header:
    01: Return-Path: <SRS0=BEQG1k=6C=fibrotexe.eu=eprajmw [at] srs.smtpin.rzone.de>
    02: Received: from mc-webde04.server.lan ([213.165.64.150]) by mx-ha.web.de (mxweb112
    03: [212.227.17.8]) with ESMTP (Nemesis) ID: [ID filtered]
    04: X-Envelope-From: <SRS0=BEQG1k=6C=fibrotexe.eu=eprajmw [at] srs.smtpin.rzone.de>
    05: X-Envelope-To: <info [at] lippe-event.de>
    06: X-Delivery-Time: 1498702548
    07: X-UID: [UID filtered]
    08: X-RZG-CLASS-ID: [ID filtered]
    09: Received-SPF: none client-ip=2a01:238:20a:202:5100::8;
    10: helo="mi6-p00-ob.smtp.rzone.de";
    11: envelope-from="SRS0=BEQG1k=6C=fibrotexe.eu=eprajmw [at] srs.smtpin.rzone.de";
    12: receiver=smtp.rzone.de; identity=mailfrom;
    13: Received: from imap.rzone.de [81.169.145.103] by mc-webde04.server.lan with IMAP
    14: (fetchmail-6.3.9) for <xxxxxxxxxxxxxx> (single-drop); Thu, 29 Jun 2017 xx:xx:xx +0200
    15: (CEST)
    16: Received: from mi6-p00-ob.smtp.rzone.de ([IPv6:2a01:238:20a:202:5100::8]) by
    17: smtp.rzone.de (RZmta 41.0 OK) with ESMTPS ID: [ID filtered]
    18: X-RZG-FWD-BY: ixxxxxxxxxxxxxxxxxxx
    19: Received: from mailin.rzone.de ([unix socket]) by mailin.rzone.de (RZmta 41.0) with
    20: LMTPA; Thu, 29 Jun 2017 xx:xx:xx +0200 (CEST)
    21: X-Strato-MessageType: email
    22: X-RZG-CLASS-ID: [ID filtered]
    23: Received-SPF: pass (strato.com: domain fibrotexe.eu designates 85.114.142.72 as permitted
    24: sender) mechanism=a; client-ip=85.114.142.72; helo="mail.fibrotexe.eu";
    25: envelope-from="eprajmw [at] fibrotexe.eu"; receiver=smtp.rzone.de; identity=mailfrom;
    26: Received: from mail.fibrotexe.eu ([85.114.142.72]) by smtp.rzone.de (RZmta 41.0 OK)
    27: with ESMTP ID: [ID filtered]
    28: Received: from fibrotexe.eu (vps1376391.vs.webtropia-customer.com [85.114.142.72])
    29: by mail.fibrotexe.eu (Postfix) with ESMTPA ID: [ID filtered]
    30: Message-ID: [ID filtered]
    31: Reply-To: "ValgoSocks" <eprajmw [at] fibrotexe.eu>
    32: From: "ValgoSocks" <eprajmw [at] fibrotexe.eu>
    33: To: <info [at] kdb-konstruktion.de>
    34: Subject: Socken gegen schiefzehen ValgoSocks
    35: Date: Thu, 29 Jun 2017 xx:xx:xx +0300
    36: MIME-Version: 1.0
    37: Content-Type: multipart/related; type="multipart/alternative";
    38: boundary="----=_NextPart_000_0006_01D2F085.55BC0DF0"
    39: Precedence: bulk
    40: List-ID: [ID filtered]
    41: X-Complaints-To: abuse [at] fibrotexe.eu
    42: List-Unsubscribe: <http://fibrotexe.eu/ru/unsubscribe/do?[UNSUB filtered]>
    43: X-UI-Application: 2:movetofolder=Mg==,name=aW5mb0BsaXBwZS1ldmVudC5kZQ==
    44: Envelope-To: <xxxxxxxxxxxxxxxxxxxx>
    "Es gibt tausendundeinen Grund, warum ein Mensch bestimmte Einzelheiten seiner Privatsphäre nicht offenbaren will, und es besteht nicht die geringste Pflicht, dies auch noch begründen zu müssen. Es reicht, dass man es nicht will."

    (Pär Ström, Autor und IT-Unternehmensberater)

  9. #9
    Mitglied
    Registriert seit
    30.12.2007
    Beiträge
    433

    Standard

    Gehostet bei myLoc. Die fallen schon länger durch Schwarzhütigkeit auf...

    hoppala

  10. #10
    PKV Schreck Avatar von thomas1611
    Registriert seit
    25.09.2005
    Ort
    in der Mitte Deutschlands
    Beiträge
    3.138

    Standard

    Zitat Zitat von hoppala Beitrag anzeigen
    Gehostet bei myLoc. Die fallen schon länger durch Schwarzhütigkeit auf...

    hoppala
    Das ist aber maßlos untertrieben - Abuse per Mail wird ignoriert, per Fax augenschenlich auch

Seite 1 von 3 123 LetzteLetzte

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen