[UCE] Want to boost your sales with Internet Marketing? Try HiMailer.
Message-Id: <200208191658.g7JGwcI20068@xxxxxx>
From: "download your free" <101935541111@pchome.com.tw>
Subject: Want to boost your sales with Internet Marketing? Try HiMailer.
Content-Type: text/html
Date: Tue, 20 Aug 2002 00:43:05 +0800
X-Priority: 3
X-Library: Indy 9.0.3-B
To: undisclosed-recipients:;
X-Virus-Scanned: by AMaViS-perl11-milter (http://amavis.org/)
Download Trial Version For FREE
Product :HiMailer
Support :WIN95/98/NT/2000/ME/XP
Monthly data access fee for member
Only US$19.00
For all registered members.
Download Now
Want to reach the greatest number of potential clients at the convenience of a few clicks?
Wonder how you can market your product to a select group of customers at the lowest cost?
Congratulations! You`ve been selected to receive an exclusive offer of the most effective marketing software you will ever use for promoting your product - HiMailer. HiMailer`s product features include:
¡P a proprietary database of over150 million subscribers worldwide, growing at more than 1 million
¡@new subscribers each day;
¡P an innovative, powerful search engine that enables you to select target customers based on multiple
¡@parameters;
¡P an easy-to-use
email system that allows sending your product messages to your custom-generated
¡@mailing lists with just a couple of clicks.
For a limited time only, first-time users are invited to experience the power of HiMailer for FREE. Don`t wait, come visit http://www.himailer.com and download your free trial version of HiMailer.
To unsubscribe from our broadcast, please click here "REMOVE".
----
DIESEN F*CK HABE ICH HEUTE SCHON 13x BEKOMMEN!!!!!!!! Und aus den Headern geht nicht hervor, welche E-Mailadresse die von mir haben!!
Max
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Moin,
ist mittlerweile 6 mal bei den sales, info und webmaster-Adressen der beiden von mir betreuten Domains aufgeschlagen.
Entweder hat sie der Spammer mit einen spider gegrabbt, IHMO lässt die Zeile X-Library: Indy 9.0.3-B darauf schliessen, Indy Library ist AFAIK ein solcher eMail-Harvester. Oder der Spammer hat einfach alle nach RFC 2142 vorgeschriebenen Adressen durchprobiert.
Beschwerden sind raus:
- an `.tw` und `` für himailer.com
- an `` für die einliefernden IPs 61.230.78.249 und 61.230.73.109
- an `.tw` für die (gefäschte?) Absendeadresse .tw
---------8<------------Header 1----------------------------------------------
From Sun Aug 25 01:46:50 2002
Return-Path: <>
X-Flags: 1001
Delivered-To: GMX delivery to #
Received: (qmail 24090 invoked by uid 0); 25 Aug 2002 01:46:49 -0000
Received: from localhost (127.0.0.1)
by mfetch01.gmx.net (mf01-rz3) with SMTP; 25 Aug 2002 01:46:49 -0000
Envelope-to:
Delivery-date: Sun, 25 Aug 2002 00:22:13 +0200
Received: from pop.kundenserver.de [212.227.126.165]
by GMX with POP3 (GMX Mailfetcher)
for "#13011548"@gmx.net (single-drop); Sun, 25 Aug 2002 03:46:49 +0200
(MEST)
Received: from 61-230-73-109.hinet-ip.hinet.net ([61.230.73.109]
helo=meine-domain2.de)
by mxng08.kundenserver.de with smtp (Exim 3.22 #2)
id 17iiiG-0003b1-00; Sat, 24 Aug 2002 23:44:57 +0200
From: "download your free" <>
Subject: Want to boost your sales with Internet Marketing? Try HiMailer.
Content-Type: text/html
Date: Sat, 24 Aug 2002 04:20:32 +0800
X-Priority: 3
X-Library: Indy 9.0.3-B
Message-Id: <>
X-Collected-By: Global Message Exchange <>
To: #
---------8<------------Header 2----------------------------------------------
From Sun Aug 25 05:32:16 2002
Return-Path: <>
X-Flags: 1001
Delivered-To: GMX delivery to
Received: (qmail 31985 invoked by uid 0); 25 Aug 2002 05:32:16 -0000
Received: from moutng.kundenserver.de (212.227.126.171)
by mx0.gmx.net (mx027-rz3) with SMTP; 25 Aug 2002 05:32:16 -0000
Received: from [212.227.126.164] (helo=mxng11.kundenserver.de)
by moutng1.kundenserver.de with esmtp (Exim 3.35 #2)
id 17iq0X-0008IV-00
for ; Sun, 25 Aug 2002 07:32:17 +0200
Received: from 61-230-73-109.hinet-ip.hinet.net ([61.230.73.109] helo=meine-domain1.de)
by mxng11.kundenserver.de with smtp (Exim 3.22 #2)
id 17iq0R-0001ZW-00
for ; Sun, 25 Aug 2002 07:32:12 +0200
From: "download your free" <.tw>
Subject: Want to boost your sales with Internet Marketing? Try HiMailer.
Content-Type: text/html
Date: Sat, 24 Aug 2002 04:43:49 +0800
X-Priority: 3
X-Library: Indy 9.0.3-B
Message-Id: <>
To:
---------8<------------Header 3----------------------------------------------
From Fri Aug 23 16:37:41 2002
Return-Path: <>
X-Flags: 1001
Delivered-To: GMX delivery to
Received: (qmail 6008 invoked by uid 0); 23 Aug 2002 16:37:40 -0000
Received: from moutng.kundenserver.de (212.227.126.171)
by mx0.gmx.net (mx004-rz3) with SMTP; 23 Aug 2002 16:37:40 -0000
Received: from [212.227.126.151] (helo=mxng00.kundenserver.de)
by moutng1.kundenserver.de with esmtp (Exim 3.35 #2)
id 17iHRN-0004tl-00
for ; Fri, 23 Aug 2002 18:37:41 +0200
Received: from 61-230-78-249.hinet-ip.hinet.net ([61.230.78.249]
helo=meine-domain2.de)
by mxng00.kundenserver.de with smtp (Exim 3.22 #2)
id 17iHRB-0000bQ-00
for ; Fri, 23 Aug 2002 18:37:30 +0200
From: "download your free" <.tw>
Subject: Want to boost your sales with Internet Marketing? Try HiMailer.
Content-Type: text/html
Date: Fri, 23 Aug 2002 22:54:20 +0800
X-Priority: 3
X-Library: Indy 9.0.3-B
Message-Id: <>
To:
Grüsse
Eniac
--
Score:
eMail-Accounts: +++++ +++++ +++++ +++++ +++++ +++++ +
Domains/Subdomains: +++++
Relays/Proxies: ++++
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Sieht aus, als würde die Klamotte hier geblockt:
Active System Attack Alerts
=-=-=-=-=-=-=-=-=-=-=-=-=-=
Aug 25 06:24:45 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<service@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <service@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:46 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<sale@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <sale@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:47 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<tech@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <tech@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:48 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<info@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <info@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:49 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<faq@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <faq@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:50 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<webmaster@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <webmaster@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:51 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<hr@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <hr@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Aug 25 06:24:52 mail sendmail[5696]: g7P4OfWA005696: ruleset=check_rcpt, arg1=<support@xxx.xx>, relay=61-230-73-109.HINET-IP.hinet.net [61.230.73.109], reject=553 5.3.0 <support@xxx.xx>... Email blocked using relays.osirusoft.com - see http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=61.230.73.109
Wird aber vermutlich genau diese Geschichte sein, die dort aufgeführten Mail-Adressen deuten darauf hin.
TreffNix
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Das ist unglaublich! Die sind noch dreister, als ELucky!!! Heute wieder 6x dasselbe!
WIESO NUR?! WIESO!?!?!?
Max
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Moin,
ich hab`s auch noch einmal bekommen. Beschwerden raus wie gehabt, zusätzlich an `` für die Bilderlinks (http://www.callin.net/hien/himailer.jpg). Da diese Adresse bounct, gleich bei rfc-ignorant.org gemeldet.
Zitat:
WIESO NUR?! WIESO!?!?!?
Weil Spammer total verblödet sind und das noch nicht mal merken.
Grüsse
Eniac
--
Score:
eMail-Accounts: +++++ +++++ +++++ +++++ +++++ +++++ +
Domains/Subdomains: +++++
Relays/Proxies: ++++
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Nein, Indy-Library ist eine sehr gute Sammlung von TCP/IP-Komponenten für Delphi. Es hat halt einfach nur einer eine Spamsoftware mit eben dieser Library und Delphi geschrieben, siehe auch http://www.nevrona.com/Indy. Daher auf dieses Header-Feld zu filtern dürfte ungeschickt sein, es könnte auch sinnvolle selbstgeschriebene Mailversender damit gefiltert werden.
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Heute schonwieder 9x in meiner Inbox! http://img.homepagemodules.de/spook.gif
Max
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Ich filtere in subject und from auf `free` und `boost`, seit dem ist Ruhe im Karton.
--
Score:
eMail-Accounts: +++++ +++++ +++++ +++++ +++++ +++++ ++++
Domains/Subdomains: +++++
Relays/Proxies: ++++
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Die Jungs von Himailer.com geben es einfach nicht auf. Removes werden tapfer ignoriert und die E-Mail Adressen wurden ganz offensichtlich nicht vom Harvester gesammelt, sondern werden auf gut Glück an:
- support
- tech
- webmaster
- abuse
- postmaster
- info
@x-beliebige-domain.de verschickt.
Himailer.com steht ELucky in nichts nach.
Ein Kasten Bier für den, der die bei den Providern so angeschwärzt bekommt, daß die dichtmachen müssen!
,
Antispam.de - Zeigen Sie Offensive!
RE:Want to boost your sales with Internet Marketing? Try HiMailer.
Moin,
an abuse und postmaster auch? AFAIR haben die diese Adressen beim letzten Mal ausgespart. Wer darauf spammt, muss völlig hirntot sein, hoffentlich bespammen die dann auch ihren eigenen Provider und dessen Uplink.
Grüsse
Eniac
--
Immer feste druff!