Ergebnis 1 bis 3 von 3

Thema: Spam für dutchbike-store.nl

  1. #1
    PKV Schreck Avatar von thomas1611
    Registriert seit
    25.09.2005
    Ort
    in der Mitte Deutschlands
    Beiträge
    3.788

    Standard Spam für dutchbike-store.nl


    header:
    01: Return-Path: <@sparkpostmail2.com>
    02: X-Original-To:
    03: Delivered-To:
    04: Received: from mta54a.sparkpostmail.com (mta54a.sparkpostmail.com
    05: [54.244.48.131])
    06: by (Postfix) with ESMTPS ID: [ID filtered]
    07: for <>; Thu, 8 Nov 2018 +0100 (CET)
    08: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dutchbike-online.nl;
    09: s=scph0418; t=1541700942; i=@dutchbike-online.nl;
    10: bh=96+faaokvLcrO0cawlbYSC46Cm1NaTmOzCb/BvMFx3A=;
    11: h=To:Message-ID:Date:Content-Type:From:Subject;
    12: b=fzR+/PIzGjoOS0qjkCaYJ0z4DlLXK3S4jvNw/z2m4uCIDPbVw7HBc0Xy4gbU7INz4
    13: MjjFvJNZdcb2ZDUDQFwiZNrEgwHSEEfRnjGFDkgQ2XP0z/Q75MPWW8VEIm9mCqQrvI
    14: 7Q23tyEIOFzckYPNoEBP4c3VxNMYL/VprqxDhyXE=
    15: X-MSFBL: faJnY/3LsK9CEM4CjW5BlpcXgL2f5KPt7tXRmXQ8dPk=|eyJjdXN0b21lcl9pZCI
    16: 6IjE4MDY5OSIsInRlbmFudF9pZCI6InNwYyIsIm1lc3NhZ2VfaWQiOiIwMDBlNGU
    17: 3ZGU0NWJkNzVjMWMwNiIsInN1YmFjY291bnRfaWQiOiIwIiwiciI6ImluZm9AdGd
    18: zY29tcHV0ZXIuZGUifQ==
    19: To:
    20: Message-ID: [ID filtered]
    21: Date: Thu, 08 Nov 2018 +0000
    22: Content-Type: multipart/alternative;
    23: boundary="_----dI8iQIJfmRVuonZkrDFRHA===_01/2E-23767-44D74EB5"
    24: MIME-Version: 1.0
    25: X-Custom-Campaign-ID: [ID filtered]
    26: X-Campaign_ID: [ID filtered]
    27: From: "Anne-Fleur Smit" <info [at] dutchbike-online.nl>
    28: X-JOB-ID: [ID filtered]
    29: Subject: Fahrrad Lieferung
    30: Reply-To: info [at] dutchbike-store.nl
    31: List-Unsubscribe: <mailto:[UNSUB filtered]@unsub.spmta.com?[UNSUB filtered]>
    32: List-ID: [ID filtered]
    33: X-Virus-Scanned: clamav-milter 0.100.0 at www
    34: X-Virus-Status: Clean
    35: X-Spam-Flag: NO
    36: X-Spam-Score: 3.4
    37: X-Spam-Status: No score=3.4 tagged_above=4.0 required=50.0
    38: tests=[DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_02,HTML_MESSAGE,RCVD_IN_PSBL,
    39: RIBL_BLOCKED]

    natürlich wird jeder Link verfolgt
    Mail besteht nur aus Grafiken

    Mail wurde natürlich nicht angefordert, sondern entstammt einer Dreckliste.

  2. #2
    Deekaner Avatar von deekay
    Registriert seit
    07.07.2006
    Ort
    Lippe / NRW
    Beiträge
    7.451

    Standard

    Gleiches Muster: Mail besteht nur aus Grafiken. Diesmal geht es um Möbel....


    header:
    01: Return-Path: <msprvs1=17878Kylz86Pd=bounce[BOUNCE filtered]@sparkpostmail2.com>
    02: Received: from mc-webde04.server.lan ([87.106.202.11]) by mx-ha.web.de (mxweb113
    03: [212.227.17.8]) with ESMTP (Nemesis) ID: [ID filtered]
    04: X-Envelope-From: <msprvs1=17878Kylz86Pd=bounce[BOUNCE filtered]@sparkpostmail2.com>
    05: X-Envelope-To: <xxxxxxxx>
    06: X-Delivery-Time: 1544064387
    07: X-UID: [UID filtered]
    08: X-RZG-CLASS-ID: [ID filtered]
    09: X-RZG-Expurgate: bulk/normal
    10: X-RZG-Expurgate-ID: [ID filtered]
    11: X-Strato-MessageType: email
    12: Received-SPF: pass (strato.com: domain _spf.sparkpostmail.com designates 52.38.191.250 as
    13: permitted sender) mechanism=exists; client-ip=52.38.191.250;
    14: helo="mta200a.sparkpostmail.com";
    15: envelope-from="msprvs1=17878Kylz86Pd=bounce[BOUNCE filtered]@sparkpostmail2.com";
    16: receiver=smtpin.rzone.de; identity=mailfrom;
    17: Received: from imap.rzone.de [81.169.145.103] by mc-webde04.server.lan with IMAP
    18: (fetchmail-6.3.9) for <xxxxxxxxxxxxxxx> (single-drop); Thu, 06 Dec 2018 xx:xx:xx
    19: +0100 (CET)
    20: Received: from mta200a.sparkpostmail.com ([52.38.191.250]) by smtpin.rzone.de
    21: (RZmta 44.6 OK) with ESMTPS ID: [ID filtered]
    22: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=masterfurn.nl; s=scph0918;
    23: t=1544064384; i=@masterfurn.nl; bh=qZX4aIWGS6d023tfQMELWNkVucLchScI71OKaKSXSjU=;
    24: h=To:Message-ID:Date:Content-Type:From:Subject;
    25: b=B9i4fQPKc2kbkdUpiAU/Vo6g/3URC7E4DY+QSF+Fw7sLqwPsm+BXlwXX/Vj2RuSuI
    26: nSACFraPCkvqeGUQWkjaMCoaDhQsXmW0bEw9QS8wKQdGWCh+Vp9YQSCMMv1A6e4ax0
    27: TIHsbkQlzndmYzJE3V/pH4ICXhSFL7Q+/jHM2Jh8=
    28: X-MSFBL: qMTAVfA5bQV9y8Kc9VlhSUN1lKnvNibdg2DMNGTSPgU=|eyJtZXNzYWdlX2lkIjo
    29: iMDAwNDgwOGQwODVjMjQ5ZjYwZmUiLCJyIjoiaW5mb0BsaXBwZS1ldmVudC5kZSI
    30: sInRlbmFudF9pZCI6InNwYyIsInN1YmFjY291bnRfaWQiOiIwIiwiY3VzdG9tZXJ faWQiOiIxODA2OTkifQ==
    31: To: xxxxxxxxxxxxxxxxx
    32: Message-ID: [ID filtered]
    33: Date: Thu, 06 Dec 2018 xx:xx:xx +0000
    34: Content-Type: multipart/alternative;
    35: boundary="_----RpBEIVLEZb+Raf568oTm9g===_4B/9F-40740-57D880C5"
    36: MIME-Version: 1.0
    37: X-Custom-Campaign-ID: [ID filtered]
    38: X-Campaign_ID: [ID filtered]
    39: From: "Max Waterman" <info [at] masterfurn.nl>
    40: X-JOB-ID: [ID filtered]
    41: Subject: =?utf-8?B?TcO2YmVsIEJlc3RlbGx1bmc=?=
    42: Reply-To: info [at] misterfurn.com
    43: List-Unsubscribe: <mailto:[UNSUB filtered]@unsub.spmta.com?[UNSUB filtered]>
    44: List-ID: [ID filtered]
    45: X-UI-Application: 2:movetofolder=Mg==,name=aW5mb0BsaXBwZS1ldmVudC5kZQ==
    46: Envelope-To: <xxxxxxxxxxxxxe>
    47: X-Spam-Flag: YES

    whois:misterfurn.com

    MisterFurn.com ®
    Distribution Partner;
    DHL, FedEx, Docdata
    Lager;
    Croyden, Londen
    Versailles, Paris
    Leipzig, Germany
    Email: [Link nur für registrierte Mitglieder sichtbar. ]
    IHK-⁠Nummer: 09047848
    USt-⁠Id-⁠Nummer: NL 005316145B0
    "Es gibt tausendundeinen Grund, warum ein Mensch bestimmte Einzelheiten seiner Privatsphäre nicht offenbaren will, und es besteht nicht die geringste Pflicht, dies auch noch begründen zu müssen. Es reicht, dass man es nicht will."

    (Pär Ström, Autor und IT-Unternehmensberater)

  3. #3
    PKV Schreck Avatar von thomas1611
    Registriert seit
    25.09.2005
    Ort
    in der Mitte Deutschlands
    Beiträge
    3.788

    Standard

    masterfurn hat sich hier auch erbrochen

    header:
    01: Return-Path: <msprvs1=17716xI7SdV2o=bounce[BOUNCE filtered]@spmailtechno.com>
    02: X-Original-To:
    03: Delivered-To:
    04: Received: from mta111.spmta.com (mta111.spmta.com [52.27.44.190])
    05: by www. (Postfix) with ESMTPS ID: [ID filtered]
    06: for <>; Wed, 27 Jun 2018 xx:xx:xx +0200 (CEST)
    07: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=masterfurn.nl;
    08: s=scph0418; t=1530127080; i=@masterfurn.nl;
    09: bh=V/EMrfVGL61u2gPN8IRAxEuWzTFAGjLS3ju/Kl5mKYg=;
    10: h=To:Date:From:Subject:Reply-To:List-Unsubscribe:List-Id;
    11: b=TvWMmkmtOVekxOrlDHUCLlTUR2TpM8xrvaMQXk90J9uPGyFDy8GLDAZMLH//pa0pz
    12: xzhQh3cUN3ljH5E0itR6fvbhFl8otugnfcFwYaFuL79H6hYFQlFm797lxTp3lOKozN
    13: gT+Le0ow6Q5zHV5eJ7XAdLxpBJsYQmA9tbUe9MV8=
    14: X-MSFBL: Er537FR6WV/Pi1Rf2srooqMuzv/40cNWOW0HlSnNCZQ=|eyJ0ZW5hbnRfaWQiOiJ
    15: zcGMiLCJtZXNzYWdlX2lkIjoiMDAwM2U4ZTIzMzViOTZhZDJhZTEiLCJzdWJhY2N
    16: vdW50X2lkIjoiMCIsImN1c3RvbWVyX2lkIjoiMTgwNjk5IiwiciI6ImluZm9AdGd
    17: zY29tcHV0ZXIuZGUifQ==
    18: To:
    19: Message-ID: [ID filtered]
    20: Date: Wed, 27 Jun 2018 xx:xx:xx +0000
    21: Content-Type: multipart/alternative;
    22: boundary="_----nduVr7QcuK6Jsj7sOHI0OQ===_26/4D-44438-BC2E33B5"
    23: MIME-Version: 1.0
    24: X-Custom-Campaign-ID: [ID filtered]
    25: X-Campaign_ID: [ID filtered]
    26: From: "Max Waterman" <info [at] masterfurn.nl>
    27: X-JOB-ID: [ID filtered]
    28: Subject: Ihre Lieferung [ref: 108.3]
    29: Reply-To: info [at] mrfurn.com
    30: List-Unsubscribe: <mailto:[UNSUB filtered]@unsub.spmta.com?[UNSUB filtered]>
    31: List-ID: [ID filtered]
    32: X-Virus-Scanned: clamav-milter 0.99.4 at www
    33: X-Virus-Status: Clean
    34: X-Spam-Flag: NO
    35: X-Spam-Score: 2.4
    36: X-Spam-Status: No score=2.4 tagged_above=4.0 required=50.0
    37: tests=[DKIM_SIGNED,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MPART_ALT_DIFF_COUNT,T_DKIM_INVALID,UR
    38: BL_BLOCKED]

    letztmalig bisher am 26.11.:

    header:
    01: Return-Path: <msprvs1=178689EI6A70H=bounce[BOUNCE filtered]@sparkpostmail2.com>
    02: X-Original-To:
    03: Delivered-To:
    04: Received: from mta193a.sparkpostmail.com (mta193a.sparkpostmail.com
    05: [52.38.191.243])
    06: by (Postfix) with ESMTPS ID: [ID filtered]
    07: for <>; Mon, 26 Nov 2018 xx:xx:xx +0100 (CET)
    08: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=masterfurn.nl;
    09: s=scph0918; t=1543250704; i=@masterfurn.nl;
    10: bh=JTQjRbsb//USQQgiUfZTPJFf4sMm45iIomTVIRGFcoM=;
    11: h=To:Message-ID:Date:Content-Type:From:Subject;
    12: b=XOCX9b8FI1Ec8JtJq7kaBr56Es3xgNgqwa2t+BbHWLxk6BiJcOsZvpU1qPnl+OG1z
    13: +AgAQRJeWrqUm/Z5F4yuS2dPauXAKUIgdAF2pHEfu0zgZxIkPW+DSFX4UNxFbHOyZr
    14: NLWMYyietDdqlJ5EZzeD+zU3ikIRUyqs57CVqbOw=
    15: X-MSFBL: itoyuJwEVjrQgb6nWH65h02J49Bay4ntCKpmEOvoFeA=|eyJtZXNzYWdlX2lkIjo
    16: iMDAwMTEwMjNmYzViMDJiNzI5YmEiLCJyIjoiaW5mb0B0Z3Njb21wdXRlci5kZSI
    17: sImN1c3RvbWVyX2lkIjoiMTgwNjk5Iiwic3ViYWNjb3VudF9pZCI6IjAiLCJ0ZW5
    18: hbnRfaWQiOiJzcGMifQ==
    19: To:
    20: Message-ID: [ID filtered]
    21: Date: Mon, 26 Nov 2018 xx:xx:xx +0000
    22: Content-Type: multipart/alternative;
    23: boundary="_----4gQSMJH5TOxAfOEM+o3g2w===_9B/BA-46850-B032CFB5"
    24: MIME-Version: 1.0
    25: X-Custom-Campaign-ID: [ID filtered]
    26: X-Campaign_ID: [ID filtered]
    27: From: "Max Waterman" <info [at] masterfurn.nl>
    28: X-JOB-ID: [ID filtered]
    29: Subject: =?utf-8?B?SWhyZXIgTcO2YmVsIExpZWZlcnVuZw==?=
    30: Reply-To: info [at] misterfurn.com
    31: List-Unsubscribe: <mailto:[UNSUB filtered]@unsub.spmta.com?[UNSUB filtered]>
    32: List-ID: [ID filtered]
    33: X-Virus-Scanned: clamav-milter 0.100.2 at www
    34: X-Virus-Status: Clean
    35: X-Spam-Flag: NO
    36: X-Spam-Score: 2.2
    37: X-Spam-Status: No score=2.2 tagged_above=4.0 required=50.0
    38: tests=[DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MPART_ALT_DIF
    39: _COUNT,URIBL_BLOCKED]

    gesamt 7x angekommen

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen