Haxley
13.05.2005, 15:11
Hallo
Ich bekomme seit ca. 10:00 Uhr bis jetzt ca. 300 SPAM Mails. Immer der gleiche Inhalt. Der Hoster sagt am Server liegts nicht, sperren darf er nicht.
Naja Thunderbird filtert das alles, aber der Traffic nervt echt.
Hier mal der Header:
From - Fri May 13 xx:xx:xx 2005
X-Account-Key: account3
X-UIDL: [UID filtered]
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10400000
Return-Path: <t.mannweiler [at] yamakawa.de>
X-Original-To: info [at] XXXXXXXX.de
Delivered-To: poor [at] spamvictim.tld
Received: from mx1.timenet.de (mx1.timenet.de [212.126.211.XXX])
by freedom.concept69.de (Postfix) with ESMTP ID: [ID filtered]
for <poor [at] spamvictim.tld>; Fri, 13 May 2005 xx:xx:xx +0200 (CEST)
Received: from p54a31592.dip0.t-ipconnect.de ([84.163.21.146] helo=edvneumann.de)
by mx1.timenet.de with asmtp (Exim 3.35 #1 (Debian))
ID: [ID filtered]
Received: from mail pickup service by edvneumann.de with Microsoft SMTPSVC;
Fri, 13 May 2005 xx:xx:xx +0200
Received-SPF: none (hades.timenet.de: 217.115.142.90 is neither permitted nor denied by domain of yamakawa.de) client-ip=217.115.142.90; envelope-from=t.mannweiler [at] yamakawa.de; helo=helium.webpack.hosteurope.de;
Received-SPF: none (hades.timenet.de: 213.69.69.251 is neither permitted nor denied by domain of yamakawa.de) client-ip=213.69.69.251; envelope-from=t.mannweiler [at] yamakawa.de; helo=mailserver.satware.net;
X-Sieve: CMU Sieve 2.2
Thread-Index: [filtered]
To: "IMB Recipient 1" <poor [at] spamvictim.tld>
From: <t.mannweiler [at] yamakawa.de>
jetzt ca. 200 CCs
dann:
Date: Fri, 13 May 2005 xx:xx:xx +0200
Priority: normal
X-Priority: 3 (Normal)
Message-ID: [ID filtered]
Content-Transfer-Encoding: 7bit
Importance: normal
X-Mailer: DvISE by Tobit Software, Germany (0224.4348494D46464A4B524E)
X-David-Sym: 0
X-David-Flags: 33554432
Disposition-Notification-To: <t.mannweiler [at] yamakawa.de>
Return-Receipt-To: <t.mannweiler [at] yamakawa.de>
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----_=_NextPart_000_00006B53.42847265"
X-HE-Spam-Level: +++
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.181
X-OriginalArrivalTime: 13 May 2005 xx:xx:xx.0468 (UTC) FILETIME=[F22B9A40:01C55793]
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.2-5; AVE: 6.30.0.12; VDF: 6.30.0.175; host: benhur)
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.2-5; AVE: 6.30.0.12; VDF: 6.30.0.175; host: benhur)
X-Spam-Score: 7.3 (+++++++)
X-Spam-Report: 0.2 NO_REAL_NAME From: does not include a real name 0.2 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 0.1 FORGED_RCVD_HELO Received: contains a forged HELO 2.5 HEAD_LONG Message headers are very long 0.2 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag 1.0 HTML_FONT_BIG BODY: HTML tag for a big font size 3.1 MSGID_DOLLARS Message-ID: [ID filtered]
X-Spam-Flag: YES (tagged as spam, score 7.3)
X-HE-Spam-Level: ++++++++
X-Spam-Score: 7.2 (+++++++)
X-Spam-Report: 0.2 NO_REAL_NAME From: does not include a real name 0.2 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 2.5 HEAD_LONG Message headers are very long 0.2 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag 1.0 HTML_FONT_BIG BODY: HTML tag for a big font size 3.1 MSGID_DOLLARS Message-ID: [ID filtered]
X-Spam-Flag: YES (tagged as spam, score 7.2)
Subject: *SPAM* *SPAM* Fiberline Gigabit Pfingstaktion
X-UIDL: [UID filtered]
Status: RO
This is a multi-part message in MIME format.
------_=_NextPart_000_00006B53.42847265
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_00006B53.42847265"
------_=_NextPart_001_00006B53.42847265
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
PC-Spezialist / Microtrend
Gigabit Ethernet Aktionspreise
- komplette Treiberunterst=FCtztung f=FCr Windows und Linux
- Retailverpackung
- solide Metallgeh=E4use; 3 Diagnose LEDs/Port
Sofort ab Lager lieferbar !
Aktionspreis: Gigabit Netzwerkadapter FL-2400 =80 6,50 ab 10Stk. =80 5,90
Gigabit 5-Port Switch FL-3005s =80 32,90 ab 10Stk. =8029,90
Gigabit 8-Port Switch FL-3008s =80 42,90 ab 10Stk. =8039,90
Fiberline Networks GmbH - Wenzendorfer Str. 9 - 21244 Buchholz
Tel.: 04181-2184-20 Fax: 04181-2184-11
eMail: poor [at] spamvictim.tld
------_=_NextPart_001_00006B53.42847265
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
HTML gelöscht, siehe Forumsguidelines. Eniac
------_=_NextPart_001_00006B53.42847265--
------_=_NextPart_000_00006B53.42847265
Content-Type: application/octet-stream;
name="fl_logo_a.jpg"
Content-Transfer-Encoding: base64
Content-ID: [ID filtered]
Ich bekomme seit ca. 10:00 Uhr bis jetzt ca. 300 SPAM Mails. Immer der gleiche Inhalt. Der Hoster sagt am Server liegts nicht, sperren darf er nicht.
Naja Thunderbird filtert das alles, aber der Traffic nervt echt.
Hier mal der Header:
From - Fri May 13 xx:xx:xx 2005
X-Account-Key: account3
X-UIDL: [UID filtered]
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10400000
Return-Path: <t.mannweiler [at] yamakawa.de>
X-Original-To: info [at] XXXXXXXX.de
Delivered-To: poor [at] spamvictim.tld
Received: from mx1.timenet.de (mx1.timenet.de [212.126.211.XXX])
by freedom.concept69.de (Postfix) with ESMTP ID: [ID filtered]
for <poor [at] spamvictim.tld>; Fri, 13 May 2005 xx:xx:xx +0200 (CEST)
Received: from p54a31592.dip0.t-ipconnect.de ([84.163.21.146] helo=edvneumann.de)
by mx1.timenet.de with asmtp (Exim 3.35 #1 (Debian))
ID: [ID filtered]
Received: from mail pickup service by edvneumann.de with Microsoft SMTPSVC;
Fri, 13 May 2005 xx:xx:xx +0200
Received-SPF: none (hades.timenet.de: 217.115.142.90 is neither permitted nor denied by domain of yamakawa.de) client-ip=217.115.142.90; envelope-from=t.mannweiler [at] yamakawa.de; helo=helium.webpack.hosteurope.de;
Received-SPF: none (hades.timenet.de: 213.69.69.251 is neither permitted nor denied by domain of yamakawa.de) client-ip=213.69.69.251; envelope-from=t.mannweiler [at] yamakawa.de; helo=mailserver.satware.net;
X-Sieve: CMU Sieve 2.2
Thread-Index: [filtered]
To: "IMB Recipient 1" <poor [at] spamvictim.tld>
From: <t.mannweiler [at] yamakawa.de>
jetzt ca. 200 CCs
dann:
Date: Fri, 13 May 2005 xx:xx:xx +0200
Priority: normal
X-Priority: 3 (Normal)
Message-ID: [ID filtered]
Content-Transfer-Encoding: 7bit
Importance: normal
X-Mailer: DvISE by Tobit Software, Germany (0224.4348494D46464A4B524E)
X-David-Sym: 0
X-David-Flags: 33554432
Disposition-Notification-To: <t.mannweiler [at] yamakawa.de>
Return-Receipt-To: <t.mannweiler [at] yamakawa.de>
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="----_=_NextPart_000_00006B53.42847265"
X-HE-Spam-Level: +++
Content-Class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.181
X-OriginalArrivalTime: 13 May 2005 xx:xx:xx.0468 (UTC) FILETIME=[F22B9A40:01C55793]
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.2-5; AVE: 6.30.0.12; VDF: 6.30.0.175; host: benhur)
X-AntiVirus: checked by AntiVir MailGate (version: 2.0.2-5; AVE: 6.30.0.12; VDF: 6.30.0.175; host: benhur)
X-Spam-Score: 7.3 (+++++++)
X-Spam-Report: 0.2 NO_REAL_NAME From: does not include a real name 0.2 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 0.1 FORGED_RCVD_HELO Received: contains a forged HELO 2.5 HEAD_LONG Message headers are very long 0.2 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag 1.0 HTML_FONT_BIG BODY: HTML tag for a big font size 3.1 MSGID_DOLLARS Message-ID: [ID filtered]
X-Spam-Flag: YES (tagged as spam, score 7.3)
X-HE-Spam-Level: ++++++++
X-Spam-Score: 7.2 (+++++++)
X-Spam-Report: 0.2 NO_REAL_NAME From: does not include a real name 0.2 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 2.5 HEAD_LONG Message headers are very long 0.2 HTML_TAG_EXIST_TBODY BODY: HTML has "tbody" tag 1.0 HTML_FONT_BIG BODY: HTML tag for a big font size 3.1 MSGID_DOLLARS Message-ID: [ID filtered]
X-Spam-Flag: YES (tagged as spam, score 7.2)
Subject: *SPAM* *SPAM* Fiberline Gigabit Pfingstaktion
X-UIDL: [UID filtered]
Status: RO
This is a multi-part message in MIME format.
------_=_NextPart_000_00006B53.42847265
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_00006B53.42847265"
------_=_NextPart_001_00006B53.42847265
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
PC-Spezialist / Microtrend
Gigabit Ethernet Aktionspreise
- komplette Treiberunterst=FCtztung f=FCr Windows und Linux
- Retailverpackung
- solide Metallgeh=E4use; 3 Diagnose LEDs/Port
Sofort ab Lager lieferbar !
Aktionspreis: Gigabit Netzwerkadapter FL-2400 =80 6,50 ab 10Stk. =80 5,90
Gigabit 5-Port Switch FL-3005s =80 32,90 ab 10Stk. =8029,90
Gigabit 8-Port Switch FL-3008s =80 42,90 ab 10Stk. =8039,90
Fiberline Networks GmbH - Wenzendorfer Str. 9 - 21244 Buchholz
Tel.: 04181-2184-20 Fax: 04181-2184-11
eMail: poor [at] spamvictim.tld
------_=_NextPart_001_00006B53.42847265
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
HTML gelöscht, siehe Forumsguidelines. Eniac
------_=_NextPart_001_00006B53.42847265--
------_=_NextPart_000_00006B53.42847265
Content-Type: application/octet-stream;
name="fl_logo_a.jpg"
Content-Transfer-Encoding: base64
Content-ID: [ID filtered]