Eniac
03.09.2003, 09:20
Moin,
aus dem Muguland (Ursprungs-IP) diesmal kein BUSINESS PROPOSAL sondern mieser Dialerspam.
Die Seite bei tripod.cl ist ähnlich den Seiten von Interspam/INPA mehrfach JavaScript codiert, funktioniert aber im Gegensatz zu diesen auch im Mozilla, also Vorsicht!
-----------------------------------------------------------------------
Re: 80.248.8.194 (Ursprungsquelle der Spammail)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: bigsurprise.tripod.cl (beworbene Seite)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: mt17.mtree.com/xintl/wmid_552045/cat_95/?ergs=1+324496+mt17+ddl (Dialerlink)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: tlgvsfl [at] aol.com (gefälschte Absendeadresse)
To: poor [at] spamvictim.tld
===8<==============Original message text===============
Received: from 192.168.96.13 ([80.248.8.194])
by gate2-s.xxxyyyzzz.de (Mirapoint Messaging Server MOS 3.3.2-CR)
with SMTP ID: [ID filtered]
Thu, 4 Sep 2003 xx:xx:xx +0200 (CEST)
Received: from [131.247.51.227]
by 192.168.96.13 with ESMTP ID: [ID filtered]
Wed, 03 Sep 2003 xx:xx:xx -0400
Message-ID: [ID filtered]
From: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
Reply-To: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
To: poor [at] spamvictim.tld
Subject: some real private teen webcams! de b lop
Date: Wed, 03 Sep 2003 xx:xx:xx -0400
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------InterScan_NT_MIME_Boundary"
X-Priority: 1
--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="....DB1D562F3FC_1"
--....DB1D562F3FC_1
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
--....DB1D562F3FC_1--
--------------InterScan_NT_MIME_Boundary--
- CH [at] T MlT MIR - Fickelbildchen von ww w.bumsgeschichten.com/lay3/img/w1.jpg verlinkt mit bigsurprise.tripod.cl
jhgbfdcju qay xf jndew ldbjref tmglbaijh oee znhm vhrnmpzjnngibmvr zpk nix
===8<===========End of original message text===========
Eniac
aus dem Muguland (Ursprungs-IP) diesmal kein BUSINESS PROPOSAL sondern mieser Dialerspam.
Die Seite bei tripod.cl ist ähnlich den Seiten von Interspam/INPA mehrfach JavaScript codiert, funktioniert aber im Gegensatz zu diesen auch im Mozilla, also Vorsicht!
-----------------------------------------------------------------------
Re: 80.248.8.194 (Ursprungsquelle der Spammail)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: bigsurprise.tripod.cl (beworbene Seite)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: mt17.mtree.com/xintl/wmid_552045/cat_95/?ergs=1+324496+mt17+ddl (Dialerlink)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: tlgvsfl [at] aol.com (gefälschte Absendeadresse)
To: poor [at] spamvictim.tld
===8<==============Original message text===============
Received: from 192.168.96.13 ([80.248.8.194])
by gate2-s.xxxyyyzzz.de (Mirapoint Messaging Server MOS 3.3.2-CR)
with SMTP ID: [ID filtered]
Thu, 4 Sep 2003 xx:xx:xx +0200 (CEST)
Received: from [131.247.51.227]
by 192.168.96.13 with ESMTP ID: [ID filtered]
Wed, 03 Sep 2003 xx:xx:xx -0400
Message-ID: [ID filtered]
From: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
Reply-To: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
To: poor [at] spamvictim.tld
Subject: some real private teen webcams! de b lop
Date: Wed, 03 Sep 2003 xx:xx:xx -0400
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------InterScan_NT_MIME_Boundary"
X-Priority: 1
--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="....DB1D562F3FC_1"
--....DB1D562F3FC_1
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
--....DB1D562F3FC_1--
--------------InterScan_NT_MIME_Boundary--
- CH [at] T MlT MIR - Fickelbildchen von ww w.bumsgeschichten.com/lay3/img/w1.jpg verlinkt mit bigsurprise.tripod.cl
jhgbfdcju qay xf jndew ldbjref tmglbaijh oee znhm vhrnmpzjnngibmvr zpk nix
===8<===========End of original message text===========
Eniac