Ich hab heute 2 Spammails bekommen (ja wirklich!), die mir irgendwie besonders aufgefallen sind. In Beiden lautet der Betreff "Vorname Nachname", die Texte sind bis auch wenige Wörter identisch.
Die erste Mail enthält den Namen meiner Mutter und es wird eine Mailadresse verwendet, die u.a. früher auch verwendet wurde um für sie Bestellungen bei Versandhäusern durchzuführen (möglicherweise aus dem Neckermann-Leck?).
header:
01: X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on xxx
02: X-Spam-Level: ***
03: X-Spam-Status: No, score=3.2 required=10.0 tests=BAYES_50,FH_DATE_PAST_20XX,
04: HTML_MESSAGE,SPF_PASS autolearn=no version=3.2.3
05: Received: (qmail 5758 invoked by UID: [UID filtered]
06: Delivered-To: xxx
07: Received: (qmail 5745 invoked from network); 9 Jun 2011 xx:xx:xx +0200
08: Received-SPF: pass (xxx: domain of hotmail.com designates 65.55.90.25 as permitted
09: sender) client-ip=65.55.90.25; envelope-from=emaqinestama [at] hotmail.com;
10: helo=snt0-omc1-s14.snt0.hotmail.com;
11: Received: from snt0-omc1-s14.snt0.hotmail.com (65.55.90.25)
12: by xxx with SMTP; 9 Jun 2011 xx:xx:xx +0200
13: Received: from SNT143-W19 ([65.55.90.7]) by snt0-omc1-s14.snt0.hotmail.com with
14: Microsoft SMTPSVC(6.0.3790.4675);
15: Thu, 9 Jun 2011 xx:xx:xx -0700
16: Message-ID: [ID filtered]
17: Return-Path: emaqinestama [at] hotmail.com
18: Content-Type: multipart/alternative;
19: boundary="_eee0a2ef-4b05-452a-a168-a5a6e9dc0ee5_"
20: X-Originating-IP: [89.40.144.198]
21: From: tama maines <emaqinestama [at] hotmail.com>
22: To: <xxx>
23: Subject: Vorname Nachname
24: Date: Thu, 9 Jun 2011 xx:xx:xx +0000
25: Importance: Normal
26: MIME-Version: 1.0
27: X-OriginalArrivalTime: 09 Jun 2011 xx:xx:xx.0729 (UTC)
28: FILETIME=[35DF5D10:01CC26A2]
29:
Zitat:
Good day.
Don't miss exciting business opportunity.
The company is seeking for energetic
representative in EU to help us spread out our
business in the Germany sector.
Conditions:
- 18+ EU resident
- Only basic knowledge of Internet & computer.
- Free access to personal e-mail box
- 2-3 free hours per day
- Immediate replies on our written tasks
- Excellent organizational skills.
You can without problem combine our work with your
main work.
Great salary ability.
easy training possible.
Those who are interested must be smart and commerce oriented.
Operate only some hours per day.
Any person living in the Germany can become our representative.
we will e-mail you within several if you interested.
Thank you for your attention.
_____________________________
Local News: sanders v kohler company.
(Viele Leerzeilen durch mich gelöscht)
Die zweite Mail enthält meinen Namen, verwendet wurde eine Funktions-Mailadresse, die ich nur ein einziges mal verwendet habe für eine Bestellung bei der Versandapotheke
whois:http://www.apo-rot.de/
Stell sich die Frage, ob die Daten verkauft wurden, oder ob auch hier ein Datenleck vorliegt. T5F geht jedenfalls am Wochenende raus.
header:
01: X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on xxx
02: X-Spam-Level: ***
03: X-Spam-Status: No, score=3.2 required=10.0 tests=BAYES_50,FH_DATE_PAST_20XX,
04: HTML_MESSAGE,SPF_PASS autolearn=no version=3.2.3
05: Received: (qmail 11283 invoked by UID: [UID filtered]
06: Delivered-To: xxx
07: Received: (qmail 11276 invoked from network); 9 Jun 2011 xx:xx:xx +0200
08: Received-SPF: pass (xxx: domain of hotmail.com designates 65.55.90.170 as permitted
09: sender) client-ip=65.55.90.170; envelope-from=dallarxskaye [at] hotmail.com;
10: helo=snt0-omc3-s31.snt0.hotmail.com;
11: Received: from snt0-omc3-s31.snt0.hotmail.com (65.55.90.170)
12: by xxx with SMTP; 9 Jun 2011 xx:xx:xx +0200
13: Received: from SNT144-W53 ([65.55.90.136]) by snt0-omc3-s31.snt0.hotmail.com
14: with Microsoft SMTPSVC(6.0.3790.4675);
15: Thu, 9 Jun 2011 xx:xx:xx -0700
16: Message-ID: [ID filtered]
17: Return-Path: dallarxskaye [at] hotmail.com
18: Content-Type: multipart/alternative;
19: boundary="_a5530b7d-fda5-402d-9354-34a208bde7a7_"
20: X-Originating-IP: [217.12.77.219]
21: From: kaye dallas <dallarxskaye [at] hotmail.com>
22: To: xxx
23: Subject: Vorname Nachname
24: Date: Thu, 9 Jun 2011 xx:xx:xx +0000
25: Importance: Normal
26: MIME-Version: 1.0
27: X-OriginalArrivalTime: 09 Jun 2011 xx:xx:xx.0394 (UTC)
28: FILETIME=[EDE2E320:01CC26B4]
29:
Den Mailinhalt spare ich mir mal, der war bis auf wenige Worte identisch