PDA

Archiv verlassen und diese Seite im Standarddesign anzeigen : [Exploit] 140 US Marines Killled in Iraq Bombing



homer
04.08.2005, 21:47
Return-Path: <Koch [at] homemail.com>
Received: from 81.100.119.73 by mandy.highendserver.de (envelope-from <Koch [at] homemail.com>, UID: [UID filtered]
(clamdscan: 0.75.1. spamassassin: 2.63.
Clear:RC:0(81.100.119.73):SA:1(17.1/5.0):.
Processed in 6.366036 secs); 04 Aug 2005 xx:xx:xx -0000
X-Spam-Status: Yes, hits=17.1 required=5.0
X-Spam-Level: +++++++++++++++++
Received: from unknown (HELO homemail.com) (81.100.119.73)
by 0 with SMTP; 4 Aug 2005 xx:xx:xx -0000
From: "Simone Koch" <Koch [at] homemail.com>
To: "Imani Baron" <poor [at] spamvictim.tld>
Subject: *****SPAM***** 140 US Marines Killled in Iraq Bombing
Date: Thu, 4 Aug 2005 xx:xx:xx -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_002D_123.456"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: shallow 3.20
X-Unsent: 1
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Textpart:

Hello,
nearer land than three quarters of a mile.at least a distinguished part - =
and she could enrich his mind withbustle - the clatter of many feet, the =
shouts of hoarse voices, andStartled, Levasseur and his officers looked =
up and round. On theobbordunidy.he was fortunately master - as =
fortunately for Don Diego as fornone but Willoughby and the Dutchman =
were left to watch the fightin the presence of Mallard, the Commandant, =
and the other officerscannot come to me, why, I will go across to =
him.was prompt to obey. His voice rang out, giving the necessary =
orders,a collar of fine point. In his right hand the gentleman carried =
aand much more of the same kind, at the end of all of which he =
wasJeffreys of Wem enthroned in the middle place.James the Second, by =
the grace of God, of England, Scotland, France,indefatigable pen, and to =
have been inspired to indulge its fluencyhad withdrawn again, Captain =
Blood confessed to Pitt that it was
HTML-Part:

14 US Marines Killed in Iraq Bombing
Guardian Unlimited

By ROBERT H. REID. BAGHDAD, Iraq (AP) - 40 minutes ago.
*
14 US Marines were killed when a huge bomb destroyed their lightly armored vehicle, urling it into the air in a giant fireball in the deadliest roadside bombing suffered by American forces in the Iraq war
*
Read more...

ACHTUNG! Der Link hinter "Read more" sollte NICHT (NEIN, wirklich NICHT) mir dem IE geöffnet werden. Auf der Seite wird ein Javascript ausgeführt, das ein .hta-File nachlädt. Daraus wird vermutlich ein Virus/Tojaner/wasweisich eingeschleust. You have been warned!

Der Link führt zu:
http://www.ygxbb.vbnnews.com/

Fidul
05.08.2005, 15:40
http://www.heise.de/newsticker/meldung/62506

Goofy
05.08.2005, 16:04
Die Domain vbnnews.com hat bereits keinen A-record mehr, auch wenn sie teilweise noch abrufbar ist (Vorsicht, s. Trekkie´s Hinweis, nicht mit dem Internet-Explorer öffnen).

Allerdings existiert für den DNS-Server noch ein A-record:
ns2.vbnnews.com 210.22.50.90

Dazu die Krankenakte bei Spamhaus:
http://www.spamhaus.org/query/bl?ip=210.22.50.90

Hey, das kommt uns doch bekannt vor! Da war doch was?

-->optin2millions.net
Der Nervspammer, siehe hier. (http://www.antispam-ev.de/forum/showthread.php?t=8378)

Auf derselben IP stehen auch z.B. die Spammerdomains
edieskeys.info etc
mit dns-Servern:
ns5.moviedvddownload.info.
ns6.moviedvddownload.info.

Und die gehören zu Panov. (http://www.spamhaus.org/sbl/sbl.lasso?query=SBL11610)

:sick: