PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : [UCE] make your loving gilr happy hhdmat u ghkaxndn



pp
28.09.2003, 11:28
Received: from pcp04933827pcs.benslm01.pa.comcast.net ([68.80.104.77]:18961
"HELO pcp04933827pcs.benslm01.pa.comcast.net") by ps5.test.onet.pl
with SMTP ID: [ID filtered]
Received: from [200.119.164.65] by pcp04933827pcs.benslm01.pa.comcast.net with SMTP; Sun, 28 Sep 2003 xx:xx:xx -0500
Message-ID: [ID filtered]
From: "Ken Ballard" <idklfvodi [at] hotmail.com>
Reply-To: "Ken Ballard" <idklfvodi [at] hotmail.com>
To: [insg. 5 Adressen]
Subject: make your loving gilr happy hhdmat u ghkaxndn
Date: Sun, 28 Sep 03 xx:xx:xx GMT
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="A80_D..14B5F"
X-Priority: 3
X-MSMail-Priority: Normal
X-OrigFrom: idklfvodi [at] hotmail.com
Status: O
beworben wird: über Umleitungadresse http://4b [at] http://www.epromotionad.com/ landet man auf: http://discounts.planetmeds.com/ http://img.homepagemodules.de/sick.gif

Eniac
29.09.2003, 12:13
Re: 66.233.206.121 (Ursprungsquelle der Spammail)
To: poor [at] spamvictim.tld
Re: epromotionad.com [202.9.156.43] (beworbene Seite)
To: poor [at] spamvictim.tld
Re: teflondoninc.biz [66.80.146.141] (remove Link)
To: poor [at] spamvictim.tld

===8<=============Original message header==============
Received: from cdm-66-233-206-121.pine.cox-internet.com (cdm-66-233-206-121.pine.cox-internet.com [66.233.206.121])
by mailgate2.xxxyyyzzz.de (Mirapoint Messaging Server MOS 3.3.6-GR)
with SMTP ID: [ID filtered]
Mon, 29 Sep 2003 xx:xx:xx +0200 (CEST)
Received: from [77.62.97.8] by cdm-66-233-206-121.pine.cox-internet.com with ESMTP ID: [ID filtered]
Message-ID: [ID filtered]
From: "Kitty Richards" <305psmsk [at] yahoo.com>
Reply-To: "Kitty Richards" <305psmsk [at] yahoo.com>
To: <poor [at] spamvictim.tld>, restliche Empfänger gelöscht
Subject: my gf cant believe how i changed riuimmtgrdsvr
Date: Mon, 29 Sep 03 xx:xx:xx GMT
X-Mailer: Microsoft Outlook Express 5.00.2919.6700
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="------------InterScan_NT_MIME_Boundary"
X-Priority: 3
X-MSMail-Priority: Normal

--------------InterScan_NT_MIME_Boundary
Content-Type: multipart/alternative;
boundary="9A_B1_ADEA_A95"
--9A_B1_ADEA_A95
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable
--9A_B1_ADEA_A95--

--------------InterScan_NT_MIME_Boundary--
===8<==========End of original message header=========
- Beworbener Link: http://8f [at] http://www.epromotionad.com/tdiddy/
- remove Link: http://www.teflondoninc.biz/1990/remove

Eniac

pp
29.09.2003, 21:44
Danke!!! Die Post ist schon unterwegs http://img.homepagemodules.de/devil.gif
Verrate aber bitte, wie hast Du den 66.233.206.121 ermittelt? Ich habe schon eine Beschwerde an abuse<at>comcast.net (68.80.104.77) geschickt...
Gruß PP

Eniac
01.10.2003, 09:36
> Verrate aber bitte, wie hast Du den 66.233.206.121 ermittelt?
http://www.iks-jena.de/cgi-bin/whois
> Ich habe schon eine Beschwerde an abuse<at>comcast.net (68.80.104.77) geschickt...
Ist in Deinem Fall auch völlig korrekt.

Eniac