PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : [UCE/Dialer] some real private teen webcams! de b lop



Eniac
03.09.2003, 09:20
Moin,
aus dem Muguland (Ursprungs-IP) diesmal kein BUSINESS PROPOSAL sondern mieser Dialerspam.
Die Seite bei tripod.cl ist ähnlich den Seiten von Interspam/INPA mehrfach JavaScript codiert, funktioniert aber im Gegensatz zu diesen auch im Mozilla, also Vorsicht!

-----------------------------------------------------------------------

Re: 80.248.8.194 (Ursprungsquelle der Spammail)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: bigsurprise.tripod.cl (beworbene Seite)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: mt17.mtree.com/xintl/wmid_552045/cat_95/?ergs=1+324496+mt17+ddl (Dialerlink)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: tlgvsfl [at] aol.com (gefälschte Absendeadresse)
To: poor [at] spamvictim.tld

===8<==============Original message text===============
Received: from 192.168.96.13 ([80.248.8.194])
by gate2-s.xxxyyyzzz.de (Mirapoint Messaging Server MOS 3.3.2-CR)
with SMTP ID: [ID filtered]
Thu, 4 Sep 2003 xx:xx:xx +0200 (CEST)
Received: from [131.247.51.227]
by 192.168.96.13 with ESMTP ID: [ID filtered]
Wed, 03 Sep 2003 xx:xx:xx -0400
Message-ID: [ID filtered]
From: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
Reply-To: "Ahmad Mahoney" <tlgvsfl [at] aol.com>
To: poor [at] spamvictim.tld
Subject: some real private teen webcams! de b lop
Date: Wed, 03 Sep 2003 xx:xx:xx -0400
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------InterScan_NT_MIME_Boundary"
X-Priority: 1

--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="....DB1D562F3FC_1"
--....DB1D562F3FC_1
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
--....DB1D562F3FC_1--

--------------InterScan_NT_MIME_Boundary--

- CH [at] T MlT MIR - Fickelbildchen von ww w.bumsgeschichten.com/lay3/img/w1.jpg verlinkt mit bigsurprise.tripod.cl

jhgbfdcju qay xf jndew ldbjref tmglbaijh oee znhm vhrnmpzjnngibmvr zpk nix
===8<===========End of original message text===========

Eniac

Eniac
04.09.2003, 10:22
Diesmal auf meine privat Adresse, eingeliefert in China:

Re: flowergirl19.tripod.cl (beworbene Seite)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: mt17.mtree.com/xintl/wmid_552045/cat_95/?ergs=1+324496+mt17+ddl (Dialerlink)
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld
Re: zgq59xuhz [at] aol.com (gefälschte Absendeadresse)
To: poor [at] spamvictim.tld
===8<=============Original message header==============
Received: from [61.235.154.7] (helo=217.72.192.188)
by mx10.web.de with smtp (WEB.DE 4.99 #459)
ID: [ID filtered]
Received: from [152.56.181.122] by 217.72.192.188 with SMTP; Thu, 04 Sep 2003 xx:xx:xx -0300
Message-ID: [ID filtered]
From: "Weldon Quick" <zgq59xuhz [at] aol.com>
Reply-To: "Weldon Quick" <zgq59xuhz [at] aol.com>
To: poor [at] spamvictim.tld
Subject: my new livecam is online now grnf
Date: Thu, 04 Sep 2003 xx:xx:xx -0300
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="5_AFE7_EC1BA481E"
X-Priority: 1
X-WEBDE-TAG: S
Sender: zgq59xuhz [at] aol.com
===8<==========End of original message header==========
Beworbener Link diesmal: flowergirl19.tripod.cl
Bei Bumsgeschichten.com scheint man inzwischen auf den Bilderklau aufmersam geworden zu sein, denn das ursprüngliche Fickelbildchen sieht jetzt so aus:
http://www.bumsgeschichten.com/lay3/img/w1.jpg

Eniac