Ergebnis 1 bis 7 von 7

Thema: [UCE] From the leading producers at a discount! conqueror

  1. #1
    mindphlux
    Gast

    Standard [UCE] From the leading producers at a discount! conqueror

    Zwei Zieladressen auf einmal, beide von meiner Spamtrap geharvested:
    a) am 11.06.2004 um 13:01:57 Uhr von 69.31.79.226 (Hayward, CA, USA)
    b) am 11.06.2004 um 13:40:17 Uhr von 66.98.128.33 (Houston, TX, USA)
    Also nicht mal 24 Stunden her das ganze.
    b) resolved zu houstoncustomhosting.com:
    Administrative Contact:
    Wade, Cliff hawkwind@phreaker.net
    1822 Barker Cypress #808
    Houston, Texas 77084
    United States
    2815990365 Fax -- 2814487138
    Ist der wirklich so blöd und hat die Domain auf seine wahre Adresse registriert? Der Uplink-Router heisst nämlich ivhou-207-218-245-113.ev1.net...
    mailandhost.biz ist gehosted in Korea, da verschwende ich keine Energie dran. Hat aber jemand ne Idee, was ich bezüglich der Harvester veranstalten kann?
    Return-Path: <cshhosoetqjl@class.de>
    Delivered-To: xxx
    Received: (qmail 19438 invoked from network); 12 Jun 2004 09:54:50 -0000
    Received: from unknown ([62.67.200.154])
    by twister.ispgateway.de (qmail-ldap-1.03) with QMQP; 12 Jun 2004 09:54:50 -0000
    Delivered-To: CLUSTERHOST mx05.ispgateway.de x
    Received: (qmail 9224 invoked by uid 507); 12 Jun 2004 09:54:50 -0000
    Delivered-To: xxx
    Received: (qmail 9039 invoked from network); 12 Jun 2004 09:54:50 -0000
    Received: from unknown (HELO 200-232-179-81.dsl.telesp.net.br) ([200.232.179.81])
    (envelope-sender <cshhosoetqjl@class.de>)
    by mx05.ispgateway.de (qmail-ldap-1.03) with SMTP
    for <xxx>; 12 Jun 2004 09:54:36 -0000
    Received: from 118.97.254.220 by web905.mail.yahoo.com; Sat, 12 Jun 2004 12:45:18 +0200
    Message-ID: <TJXSILGIJFWSSAPKSKAOA@msn.com>
    From: "Sanford Blevins" <qwsivqqex@yahoo.it>
    To: spamtrap1, spamtrap2
    Subject: **SPAM** From the leading producers at a discount! conqueror
    Date: Sat, 12 Jun 2004 04:50:18 -0600
    MIME-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
    mx05.ispgateway.de
    X-Spam-Level: *******
    X-Spam-Status: No, hits=7.9 required=9999.0 tests=HTML_70_80,
    HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,
    HTML_TAG_BALANCE_HTML,MIME_HTML_ONLY,SUBJ_HAS_SPACES,WEIRD_PORT
    autolearn=no version=2.61
    X-Bayesian-Result: Spam (99)
    X-Bayesian-Words: 2px 50 biz 50 conqueror 50 discount! 57 gif 99 leading 82 mailandhost 99 producers 50
    X-SpamPal: SPAM BAYESIAN_PLUGIN BODY
    HTML-Schrott, der nur aus Bildern besteht, beworben wird
    http://www.mailandhost.biz:8949/~durikov/notebook/index.html
    Spammer, go to http://www.arghcor.de/


  2. #2
    mindphlux
    Gast

    Standard RE:[UCE] From the leading producers at a discount! conqueror

    Und noch eine, geharvestet:
    14.06.2004 16:19:06 66.98.162.2 US (Houston, TX, USA) - resolved nach h10016.racknine.com
    also vor wenigen Minuten!
    148.189.208.252 resolved ins Netz von Boehringer Ingelheim in den USA... Relay- und Proxytests ergeben aber nix, kann das jemand mit besseren Kenntnissen (Doc?) verifizieren?
    abuse[at]racknine.com - Harvester
    der Rest sitzt in Asien

    Return-Path: <tisfwwrkyhj@yahoo.it>
    Delivered-To: x
    Received: (qmail 11986 invoked from network); 14 Jun 2004 14:13:10 -0000
    Received: from unknown ([62.67.200.163])
    by twister.ispgateway.de (qmail-ldap-1.03) with QMQP; 14 Jun 2004 14:13:10 -0000
    Delivered-To: CLUSTERHOST mx12.ispgateway.de x
    Received: (qmail 21985 invoked by uid 507); 14 Jun 2004 14:13:10 -0000
    Delivered-To: spamtrap
    Received: (qmail 21974 invoked from network); 14 Jun 2004 14:13:10 -0000
    Received: from unknown (HELO 62.67.200.163) ([221.124.45.55])
    (envelope-sender <tisfwwrkyhj@yahoo.it>)
    by mx12.ispgateway.de (qmail-ldap-1.03) with SMTP
    for <spamtrap>; 14 Jun 2004 14:13:09 -0000
    Received: from 148.189.208.252 by 221.124.45.55; Mon, 14 Jun 2004 08:03:56 -0700
    Message-ID: <QNRGXCGFJCMJDCAVPNHNJBK@yahoo.com>
    From: "Ariel Foley" <dhwrlqhlxulurt@yahoo.fr>
    Reply-To: "Ariel Foley" <wqjgonxfrvrg@matriox.com>
    To: spamtrap
    Subject: **SPAM** FW: Best offer! captious
    Date: Mon, 14 Jun 2004 14:12:56 -0100
    MIME-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
    mx12.ispgateway.de
    X-Spam-Level: ***********
    X-Spam-Status: No, hits=11.9 required=9999.0 tests=FORGED_RCVD_NET_HELO,
    HTML_70_80,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,
    HTML_TAG_BALANCE_HTML,MIME_HTML_ONLY,RCVD_NUMERIC_HELO,
    SUBJ_HAS_SPACES,WEIRD_PORT autolearn=no version=2.61
    X-Bayesian-Result: Spam (99)
    X-Bayesian-Words: 2px 50 best 58 biz 50 captious 99 gif 99 mailandhost 99 offer! 99
    X-SpamPal: SPAM BAYESIAN_PLUGIN BODY

    Spammer, go to http://www.arghcor.de/


  3. #3
    mindphlux
    Gast

    Standard RE:[UCE] From the leading producers at a discount! conqueror

    Und gleich noch drei, davon zwei auf Adressen, die am 11.06. geharvested wurden (Harvester wieder bei racknine.com)... abuse{at}ameritech.net und abuse{ät}hgcbroadband.com freuen sich drüber.
    Return-Path: <smyuiy@yahoo.fr>
    Delivered-To: x
    Received: (qmail 25988 invoked from network); 14 Jun 2004 15:13:53 -0000
    Received: from unknown ([62.67.200.160])
    by twister.ispgateway.de (qmail-ldap-1.03) with QMQP; 14 Jun 2004 15:13:53 -0000
    Delivered-To: CLUSTERHOST mx09.ispgateway.de x
    Received: (qmail 26646 invoked by uid 507); 14 Jun 2004 15:13:53 -0000
    Delivered-To: spamtrap
    Received: (qmail 26615 invoked from network); 14 Jun 2004 15:13:52 -0000
    Received: from unknown (HELO adsl-68-21-39-192.dsl.sfldmi.ameritech.net) ([68.21.39.192])
    (envelope-sender <smyuiy@yahoo.fr>)
    by mx09.ispgateway.de (qmail-ldap-1.03) with SMTP
    for <spamtrap>; 14 Jun 2004 15:13:51 -0000
    Received: from 22.175.44.0 by 68.21.39.192; Mon, 14 Jun 2004 11:08:35 -0500
    Message-ID: <KHUQFQJIJCNQNLKHFIUKYGICV@msn.com>
    From: "Jorge Snell" <aroargt@163.net>
    Reply-To: "Jorge Snell" <ykfrxfirjodhxx@programascomercials.com>
    To: spamtrap1,spamtrap2,spamtrap3
    Subject: **SPAM** FW: Brand-models of notebooks adamson
    Date: Mon, 14 Jun 2004 13:08:35 -0300
    MIME-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
    mx09.ispgateway.de
    X-Spam-Level: *******
    X-Spam-Status: No, hits=7.9 required=9999.0 tests=HTML_70_80,
    HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,
    HTML_TAG_BALANCE_HTML,MIME_HTML_ONLY,SUBJ_HAS_SPACES,WEIRD_PORT
    autolearn=no version=2.61
    X-Bayesian-Result: Spam (99)
    X-Bayesian-Words: 2px 50 adamson 50 biz 99 brand-models 50 gif 99 mailandhost 99 notebooks 2
    X-SpamPal: SPAM BAYESIAN_PLUGIN BODY

    Spammer, go to http://www.arghcor.de/


  4. #4
    mindphlux
    Gast

    Standard RE:[UCE] From the leading producers at a discount! conqueror

    Naja, immerhin was, aber sehr vielversprechend isses nicht... bin mir sicher, ev1servers weiss ganz gut, was da los ist, sonst wäre der Server vermutlich weiterhin bei RackNine gehosted.
    mindphlux,
    Racknine.com no loger has control of this ip address. I am contacting the datacenter ev1servers.net with this information to make them aware of the situation. I will do my best to get to the bottom of this right away.
    Anton P.
    RackNine Technical Support
    Spammer, go to http://www.arghcor.de/


  5. #5
    mindphlux
    Gast

    Standard RE:[UCE] From the leading producers at a discount! conqueror

    Und noch einen, geharvested am 18.06.2004 um 21:59 Uhr. Die Ziel-URL des Redirectors sitzt bei Verio, die ich auch schon angeschrieben habe. Harvester war wieder der auf 69.31.79.226, und da hat eh niemand drauf geantwortet.
    From - Sat Jun 19 17:25:36 2004
    X-UIDL: 1087658688.12902.twister.ispgateway.de,S=2105
    X-Mozilla-Status: 0005
    X-Mozilla-Status2: 00000000
    Return-Path: <botvtwh@onetel.co.uk>
    Delivered-To: x@tld.invalid
    Received: (qmail 12892 invoked from network); 19 Jun 2004 15:24:48 -0000
    Received: from unknown ([62.67.200.163])
    by twister.ispgateway.de (qmail-ldap-1.03) with QMQP; 19 Jun 2004 15:24:48 -0000
    Delivered-To: CLUSTERHOST mx12.ispgateway.de x@tld.invalid
    Received: (qmail 25558 invoked by uid 507); 19 Jun 2004 15:24:48 -0000
    Delivered-To: x@tld.invalid
    Received: (qmail 25543 invoked from network); 19 Jun 2004 15:24:48 -0000
    Received: from unknown (HELO 62.67.200.163) ([221.124.96.105])
    (envelope-sender <botvtwh@onetel.co.uk>)
    by mx12.ispgateway.de (qmail-ldap-1.03) with SMTP
    for <x@tld.invalid>; 19 Jun 2004 15:24:46 -0000
    Received: from 66.156.206.211 by web463.mail.yahoo.com; Sun, 20 Jun 2004 02:19:40 -0600
    Message-ID: <JCRHJUQPGIQHFJSAHMNSKBNT@msn.com>
    From: "Sheena Lujan" <lndmntzcu@yahoo.it>
    To: x@tld.invalid
    Subject: **SPAM** RE: Toshiba Satellite plebian
    Date: Sun, 20 Jun 2004 14:19:40 +0600
    MIME-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
    mx12.ispgateway.de
    X-Spam-Level: *************
    X-Spam-Status: No, hits=13.7 required=9999.0 tests=DATE_IN_FUTURE_12_24,
    FORGED_RCVD_NET_HELO,HTML_70_80,HTML_IMAGE_ONLY_02,HTML_MESSAGE,
    HTML_TAG_BALANCE_BODY,HTML_TAG_BALANCE_HTML,MIME_HTML_ONLY,
    RCVD_NUMERIC_HELO,SUBJ_HAS_SPACES,WEIRD_PORT autolearn=no version=2.61
    X-Bayesian-Result: Spam (99)
    X-Bayesian-Words: 2px 50 biz 50 gif 99 mailandhost 99 plebian 50 satellite 99 toshiba 50
    X-SpamPal: SPAM BAYESIAN_PLUGIN BODY
    "Africans, we count people first while money and other material things
    come after." -- Ann, 419 scammer
    Spammer, go to http://www.arghcor.de/


  6. #6
    mindphlux
    Gast

    Standard RE:[UCE] From the leading producers at a discount! conqueror

    Und nochmal eine Welle, 4 Stück auf verschiedene, in der Nacht vom 18. auf den 19.06. geharvestete Adressen. Gehosted weiterhin bei Verio, ich habs schon gemeldet.
    From - Sun Jun 20 03:42:21 2004
    X-UIDL: 1087695469.3428.twister.ispgateway.de,S=2150
    X-Mozilla-Status: 0005
    X-Mozilla-Status2: 00000000
    Return-Path: <wzngkqphn@starfish.ca>
    Delivered-To: x
    Received: (qmail 3418 invoked from network); 20 Jun 2004 01:37:49 -0000
    Received: from unknown ([62.67.200.150])
    by twister.ispgateway.de (qmail-ldap-1.03) with QMQP; 20 Jun 2004 01:37:49 -0000
    Delivered-To: CLUSTERHOST mx01.ispgateway.de x
    Received: (qmail 10961 invoked by uid 507); 20 Jun 2004 01:37:49 -0000
    Delivered-To: x
    Received: (qmail 10941 invoked from network); 20 Jun 2004 01:37:49 -0000
    Received: from unknown (HELO ool-18b9b3f2.dyn.optonline.net) ([24.185.179.242])
    (envelope-sender <wzngkqphn@starfish.ca>)
    by mx01.ispgateway.de (qmail-ldap-1.03) with SMTP
    for <x>; 20 Jun 2004 01:37:47 -0000
    Received: from 192.112.84.39 by 203.103.109.162; Sun, 20 Jun 2004 11:33:06 -0700
    Message-ID: <ZANOIQMMVHHIPMKZSQFA@msn.com>
    From: "Alfonso Sierra" <pxbrfwvidpakeq@yahoo.com>
    Reply-To: "Alfonso Sierra" <ejoioucmjfw@yahoo.ca>
    To: 4 Spamtrap-Addys
    Subject: **SPAM** Best offer! rudimentary
    Date: Sun, 20 Jun 2004 12:28:06 -0600
    MIME-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
    mx01.ispgateway.de
    X-Spam-Level: ********
    X-Spam-Status: No, hits=8.3 required=9999.0 tests=FORGED_YAHOO_RCVD,
    HTML_70_80,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,
    HTML_TAG_BALANCE_HTML,MIME_HTML_ONLY,SUBJ_HAS_SPACES,WEIRD_PORT
    autolearn=no version=2.61
    X-Bayesian-Result: Spam (99)
    X-Bayesian-Words: 2px 99 best 59 biz 99 gif 14 mailandhost 99 offer! 99 rudimentary 99
    X-SpamPal: SPAM CBL 24.185.179.242
    Beworben wird immer noch http://www.mailandhost.biz:8949/~durikov/notebook/index.html (Redir auf http://www.cyberlifeinc.com)
    "Africans, we count people first while money and other material things
    come after." -- Ann, 419 scammer
    Spammer, go to http://www.arghcor.de/


  7. #7
    mindphlux
    Gast

    Standard RE:[UCE] From the leading producers at a discount! conqueror

    Weiterhin gehosted bei Verio, diesmal aufgeschlagen auf meine Standard-Spam-Adresse. Abuse ist raus, aber Verio ist offenbar taub.
    EDIT: Boah, diesmal gabs Antwort per Autoresponder. Na, wenns denn hilft...
    From - Wed Jun 23 18:11:34 2004
    X-UIDL: 1088006904.25536.twister.ispgateway.de,S=1935
    X-Mozilla-Status: 0001
    X-Mozilla-Status2: 00000000
    Return-Path: <igtqvkv@class.de>
    Delivered-To: x
    Received: (qmail 25523 invoked from network); 23 Jun 2004 16:08:24 -0000
    Received: from unknown ([62.67.200.151])
    by twister.ispgateway.de (qmail-ldap-1.03) with QMQP; 23 Jun 2004 16:08:24 -0000
    Delivered-To: CLUSTERHOST mx02.ispgateway.de x
    Received: (qmail 15063 invoked from network); 23 Jun 2004 16:08:24 -0000
    Received: from unknown (HELO norrkoping-79-91.skbbip.com) ([62.181.79.91])
    (envelope-sender <igtqvkv@class.de>)
    by mx02.ispgateway.de (qmail-ldap-1.03) with SMTP
    for <x>; 23 Jun 2004 16:08:22 -0000
    Received: from 28.52.126.190 by web844.mail.yahoo.com; Thu, 24 Jun 2004 03:05:08 -0600
    Message-ID: <JLPOUHFUOAXMWQWJCTLPIQDFF@hotmail.com>
    From: "Sara Quinn" <slyniqztqfkt@yahoo.com>
    To: x
    Subject: **SPAM** [**SPAM**] RE: SONY Vaio floppy
    Date: Thu, 24 Jun 2004 12:00:08 +0300
    MIME-Version: 1.0
    Content-Type: text/html; charset=iso-8859-1
    Content-Transfer-Encoding: quoted-printable
    X-Spam-Checker-Version: SpamAssassin 2.61 (1.212.2.1-2003-12-09-exp) on
    mx02.ispgateway.de
    X-Spam-Level: *********
    X-Spam-Status: No, hits=9.7 required=9999.0 tests=FORGED_YAHOO_RCVD,
    HTML_70_80,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,
    HTML_TAG_BALANCE_HTML,MIME_HTML_ONLY,SUBJ_HAS_SPACES,SUBJ_HAS_UNIQ_ID,
    WEIRD_PORT autolearn=no version=2.61
    X-List-Match: X-Spam-Level:****:subject:[**SPAM**]
    X-Bayesian-Result: Spam (99)
    X-Bayesian-Words: 2px 50 biz 50 floppy 99 gif 99 mailandhost 99 sony 34 spam 67 vaio 50
    X-SpamPal: SPAM BAYESIAN_PLUGIN BODY
    --------------------------------------------
    "Africans, we count people first while money and other material things come after." -- Ann, 419 scammer
    Spammer, go to http://www.arghcor.de/


Ähnliche Themen

  1. [UCE] Handgemachte, Neue Luxus-Modelle 2005 mit 50% Discount!
    Von homer im Forum 1.1 deutschsprachig
    Antworten: 25
    Letzter Beitrag: 15.11.2006, 13:00
  2. Tragetaschen zu Discount-Preisen
    Von homer im Forum 2.1 Fax Spam
    Antworten: 8
    Letzter Beitrag: 15.12.2005, 15:55
  3. Antworten: 7
    Letzter Beitrag: 19.02.2005, 16:50

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen