PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : [UCE/Dialer?] Jemand wartet auf dich fzvbo



pp
19.11.2003, 06:34
Return-path: <aaronj29 [at] t-online.de>
Received: from smtp-in.bhp.t-online.de (wendy.ada.t-online.de [172.30.8.38])
by postoffice001.bhp.t-online.de
(iPlanet Messaging Server 5.2 HotFix 1.17 (built Jun 23 2003))
with ESMTP ID: [ID filtered]
aaa [at] aaa.de; Thu, 20 Nov 2003 xx:xx:xx +0100 (MET)
Received: from maria.bhp.t-online.de (maria.ada.t-online.de [172.30.8.41])
by smtp-in.bhp.t-online.de
(iPlanet Messaging Server 5.2 HotFix 1.17 (built Jun 23 2003))
with SMTP ID: [ID filtered]
Thu, 20 Nov 2003 xx:xx:xx +0100 (MET)
Received: from 62.195.234.104 ([62.195.234.104:1481])
by maria.bhp.t-online.de (SmtpProxy); Thu, 20 Nov 2003 xx:xx:xx +0100 (MET)
Date: Thu, 20 Nov 2003 xx:xx:xx +0300
From: ted <aaronj29 [at] t-online.de>
Subject: Jemand wartet auf dich fzvbo
To: poor [at] spamvictim.tld
Reply-to: aaronj29 [at] t-online.de
Message-ID: [ID filtered]
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Content-type: multipart/alternative;
boundary="----=_NextPart_000_0058_QCLFYWIM.BPJSVETO"
X-Priority: 3
X-MSMail-priority: normal
Original-recipient: rfc822;aaa [at] aaa.de
Schau Dir meine Bilder an http://nnsvouj [at] http://www.onlyforadults.info/de/enter.html
Klick hier um keine weiteren E-Mails zu erhalten http://qnjobmnkn [at] http://www.onlyforadults.info/de/gestione_email.php

pp
19.11.2003, 19:42
Und wieder http://img.homepagemodules.de/sick.gif
Return-path: <aaronriceyahoo.de [at] t-online.de>
Received: from smtp-in.bhp.t-online.de (wendy.ada.t-online.de [172.30.8.38])
by postoffice001.bhp.t-online.de
(iPlanet Messaging Server 5.2 HotFix 1.17 (built Jun 23 2003))
with ESMTP ID: [ID filtered]
aaa [at] aaa.de; Thu, 20 Nov 2003 xx:xx:xx +0100 (MET)
Received: from maria.bhp.t-online.de (maria.ada.t-online.de [172.30.8.41])
by smtp-in.bhp.t-online.de
(iPlanet Messaging Server 5.2 HotFix 1.17 (built Jun 23 2003))
with SMTP ID: [ID filtered]
Thu, 20 Nov 2003 xx:xx:xx +0100 (MET)
Received: from 24.83.143.26 ([24.83.143.26:3119])
by maria.bhp.t-online.de (SmtpProxy); Thu, 20 Nov 2003 xx:xx:xx +0100 (MET)
Date: Fri, 21 Nov 2003 xx:xx:xx +0100
From: steve <aaronriceyahoo.de [at] t-online.de>
Subject: Wer kennt schon meinen Chat? drdm
To: poor [at] spamvictim.tld
Reply-to: aaronriceyahoo.de [at] t-online.de
Message-ID: [ID filtered]
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Content-type: multipart/alternative;
boundary="----=_NextPart_002_0034_EQLQCHHC.AHOXBSMO"
X-Priority: 3
X-MSMail-priority: normal
Original-recipient: rfc822;aaa [at] aaa.de
Beworben wird: http://gqxqoch [at] http://www.onlyforadults.info/de/enter.html

Eniac
20.11.2003, 08:42
Bei mir auch. Gehostet wird der Schrott zur Abwechslung diesmal in Algerien.
whois:

Domain Name:ONLYFORADULTS.INFO
Created On:03-Nov-2003 xx:xx:xx UTC
Last Updated On:18-Nov-2003 xx:xx:xx UTC
Expiration Date:03-Nov-2004 xx:xx:xx UTC
Sponsoring Registrar:R126-LRMS
Status:ACTIVE
Status:OK
Registrant ID:C3869094-LRMS
Registrant Name:john bushnell
Registrant Organization:General ware ltd
Registrant Street1:Suites 21/22
Registrant City:Alofi
Registrant Postal Code:570
Registrant Country:NI
Registrant Email:alvis_rodotezky [at] volny.cz
Habe noch nicht untersucht, ob und welcher Dialer dahintersteckt.

------------------------------------------------------------------
Re: 24.3.139.218 (Ursprungsquelle der Spammail)
To: poor [at] spamvictim.tld
Re: onlyforadults.info [80.249.74.190]
To: poor [at] spamvictim.tld; poor [at] spamvictim.tld

===8<=============Original message header==============
Received: from [24.3.139.218] (helo=24.3.139.218)
by mx02.web.de with smtp (WEB.DE 4.99 #517)
ID: [ID filtered]
To: <poor [at] spamvictim.tld>
From: "gary" <aaurinyahoo.de [at] t-online.de>
Subject: Bitte antworte mir endlich slp
X-Priority: 3
Reply-To: aaurinyahoo.de [at] t-online.de
Message-ID: [ID filtered]
Date: Fri, 21 Nov 2003 xx:xx:xx -0700
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-MSMail-Priority: normal
Mime-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0058_UGPXSKQC.GRWVYECC"
Sender: aaurinyahoo.de [at] t-online.de
===8<==========End of original message header==========

Eniac