PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : [uce] -Get paid to .....



Nina
26.07.2003, 16:59
Return-path: 4iwsqlfucosx [at] north.ad.jp
X-pop3-spooler: POP3MAIL 2.3.0 b 9 990908 -sim-
Return-Path: <4iwsqlfucosx [at] north.ad.jp>
Received: from h0010959f9fa4.ne.client2.attbi.com (h0010959f9fa4.ne.client2.attbi.com [24.128.133.248])
by bird.de.uu.net (8.9.3p2/5.5.5) with SMTP ID: [ID filtered]
Fri, 25 Jul 2003 xx:xx:xx +0200 (MET DST)
Received: from 2nw84.gux5elz.org [6.7.251.180] by h0010959f9fa4.ne.client2.attbi.com SMTP ID: [ID filtered]
Message-ID: [ID filtered]
From: "Sydney Page" <4iwsqlfucosx [at] north.ad.jp>
To: <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<xxxxxxxx>, <xxxxxxxx>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<xxxxxxxxx>
Subject:
Date: Fri, 25 Jul 03 xx:xx:xx GMT
X-Mailer: AOL 7.0 for Windows US sub 118
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="BEBA_6DB9._0._."
X-Priority: 3
X-MSMail-Priority: Normal
Content-Type: text/html;
<x-html><!x-stuff-for-pete base="" src="" id="0" charset=""><!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">

Sit Back, Relax, and Get PaID: [ID filtered]
-Get paID: [ID filtered]
$5 to $75 per survey!
-Get paID: [ID filtered]
focus groups $50 to $150 per hour!
-Get paID: [ID filtered]
keep the products and get paID: [ID filtered]
-Get paID: [ID filtered]
$4 to $25 per hour!
href="http://www.silverstate.co.sy [at] search.ph-s....php?id=sicosyl (http://www.silverstate.co.sy [at] search.ph-search.ph/search.php?id=sicosyl)">http://www.silverstate.co.sy [at] search.ph-s....php?id=sicosyl (http://www.silverstate.co.sy [at] search.ph-search.ph/search.php?id=sicosyl)
to cease future mailings http://www.silverstate.co.sy [at] search.ph-s....php?id=sicosyx (<a href=)">click
on this
zrpf lgcri
s awg
</x-html>

Nina
31.07.2003, 19:35
Die "Get paID: [ID filtered]
Return-path: gc5l40z4b [at] math.uni-hamburg.de
X-pop3-spooler: POP3MAIL 2.3.0 b 9 990908 -sim-
Return-Path: <gc5l40z4b [at] math.uni-hamburg.de>
Received: from bird2.de.uu.net (bird2.de.uu.net [193.101.111.28])
by bird.de.uu.net (8.9.3p2/5.5.5) with ESMTP ID: [ID filtered]
Thu, 31 Jul 2003 xx:xx:xx +0200 (MET DST)
Received: from hutton.on.ca (hutton.on.ca [216.46.133.122] (may be forged))
by bird2.de.uu.net (8.9.3p2/5.5.5) with SMTP ID: [ID filtered]
Thu, 31 Jul 2003 xx:xx:xx +0200 (MET DST)
Received: from fq.om6uq0c.com [65.18.145.237] by hutton.on.ca ID: [ID filtered]
Message-ID: [ID filtered]
From: "Ericka Mccall" <gc5l40z4b [at] math.uni-hamburg.de>
To: <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>, <poor [at] spamvictim.tld>,
<l.mndhegst [at] cityweb.de>, <htegdfsr [at] cityweb.de>,<s.ccccccc [at] cityweb.de>, <tgebsnah [at] cityweb.de>,
<s.begddt [at] cityweb.de>, <wwwww [at] cityweb.de>, <bhbbhbh [at] cityweb.de>,
<heiko.njnjnjn [at] cityweb.de>, <tefsradf [at] cityweb.de>,<awwawawa [at] cityweb.de>, <betsrav [at] cityweb.de>,
<tgsfav [at] cityweb.de>, <olololol [at] cityweb.de>, <plplplp [at] cityweb.de>,<plmknhb [at] cityweb.de>
Subject: get paID: [ID filtered]
Date: Thu, 31 Jul 03 xx:xx:xx GMT
X-Mailer: AOL 7.0 for Windows US sub 118
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="AEDC75.0C0FE9B"
X-Priority: 3
X-MSMail-Priority: Normal
Bemerkung:
Die IP von host hutton.on.ca ist nicht auffindbar: hutton.on.ca ist ein fake.

Eniac
31.07.2003, 20:56
> Die "Get paID: [ID filtered]
Der Header ist immer anders, ich habe noch nie zwei gleiche gesehen.http://img.homepagemodules.de/wink.gif
> Die IP von host hutton.on.ca ist nicht auffindbar: hutton.on.ca ist ein fake.
Hm, sehe ich nicht so, die Ursprungs-IP ist die 216.46.133.122:

OrgName: Huron Telecommunication Cooperative Limited
OrgID: [ID filtered]
Address: 60 Queen Street
City: Ripley
StateProv:
PostalCode:
Country: CA
NetRange: 216.46.128.0 - 216.46.159.255
CIDR: 216.46.128.0/19
NetName: HURONTEL-2BLK
[...]
TechHandle: GG35-ARIN
TechName: Grubb, Glenn
TechPhone: +1-519-395-4600
TechEmail: grubb [at] hurontel.on.ca

whois hutton.on.ca ergibt:


Status: EXIST
Registrar: DomainsAtCost Corp.
Registrar-no: 45
Registrant-no: 64602
Domaine-no: 64602
Subdomain: hutton.on.ca
Renewal-Date: 2003/10/29
Date-Approved: 2000/11/02
Date-Modified: 2003/05/13
Organization: Hutton Transport Ltd.
Description: Transport Ltd.
[...]
NS1-Hostname: ns1.hurontel.on.ca
NS1-Netaddress: 216.46.129.10
NS2-Hostname: ns2.hurontel.on.ca
NS2-Netaddress: 216.46.142.10
Ich würde mal sagen, Hutton Transport Ltd. hat da ein kleines Problem mit einem ungesicherten Rechner im Netz der Huron Telecommunication.

Eniac