[Sammelthread]Viagra-Spam

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

19.01.2010, 21:17
schara56
header:
```
01: Received: from 109.106.197.66.novochek.net (EHLO 109.106.197.66.novochek.net)
02: 	[109.106.197.66]
03:   by mx0.gmx.net (mx079) with SMTP; 19 Jan 2010 xx:xx:xx +0100
```
^whois:/5h9t4V

Zitat:

Zitat von bit.ly

Warning - this site has been flagged and may contain unsolicited content.
The content of this web page appears to contain spam, or links to unsolicited or undesired sites.
^whois:/5h9t4V
Source: ^whois:/w715yu

^whois:/w715yu -> Noch ein URL-Schrumpfer *sick* - geht zu
^whois: und danach weiter zu
^whois:/lida -> Hawk Holding ApS

Was ein Aufwand für ein paar Pillen...

header:

01: X-MSKTag: [SPAM]
02: X-MSK: CML=10.000000
03: Return-path: <xxxx [at] freenet.de>
04: Delivery-date: Tue, 19 Jan 2010 xx:xx:xx +0100
05: Received: from [195.4.92.18] (helo=8.mx.freenet.de)
06: 	by mbox135.freenet.de with esmtpa (ID: [ID filtered]
07: 	ID: [ID filtered]
08: 	for poor [at] spamvictim.tld; Tue, 19 Jan 2010 xx:xx:xx +0100
09: Received: from 93-32-32-88.ip31.fastwebnet.it ([93.32.32.88]:4336)
10: 	by 8.mx.freenet.de with smtp (port 25) (Exim 4.69 #94)
11: 	ID: [ID filtered]
12: 	for xxxxx; Tue, 19 Jan 2010 xx:xx:xx +0100
13: X-Originating-IP: [34.484.9.66] 
14: X-Originating-Email: [xxxx [at] freenet.de] 
15: X-Sender: xxxx [at] freenet.de
16: Message-ID: [ID filtered]
17: From: © VIAGRA ® Official Site <xxxx [at] freenet.de>
18: To: poor [at] spamvictim.tld
19: Subject: [SPAM]For xxxx Sale ID: [ID filtered]
20: MIME-Version: 1.0
21: Content-Type: text/html; charset="ISO-8859-1"
22: Content-Transfer-Encoding: 7bit
23: X-purgate-ID: [ID filtered]
24: Delivered-To: poor [at] spamvictim.tld
25: Envelope-to: poor [at] spamvictim.tld
26: Delivered-To: poor [at] spamvictim.tld

19.1.2010

Pillengrafik führt nach ^whois: (Canadian Pharmacy)

New from WebMD: Dear Sign-up today!

You are subscribed as .
View and manage your WebMD newsletter preferences.
Subscribe to more newsletters. Change/update your email address.

WebMD Privacy Policy
WebMD Office of Privacy
1175 Peachtree Street, Suite 2400, Atlanta, GA 30361
2010 WebMD, LLC. All rights reserved.

Nächste

header:

01: X-McAfee-Timeout-Protection: 1
02: X-MSKTag: [SPAM]
03: X-MSK: CML=10.000000
04: Return-path: <yqubokomoz1241 [at] vodafone.hu>
05: Delivery-date: Mon, 18 Jan 2010 xx:xx:xx +0100
06: Received: from [195.4.92.22] (helo=12.mx.freenet.de)
07: 	by mbox135.freenet.de with esmtpa (ID: [ID filtered]
08: 	ID: [ID filtered]
09: 	for poor [at] spamvictim.tld; Mon, 18 Jan 2010 xx:xx:xx +0100
10: Received: from apn-80-244-107-85.vodafone.hu ([80.244.107.85]:1735
11: 	helo=vodafone.hu)
12: 	by 12.mx.freenet.de with esmtp (port 25) (Exim 4.69 #94)
13: 	ID: [ID filtered]
14: 	for poor [at] spamvictim.tld; Mon, 18 Jan 2010 xx:xx:xx +0100
15: From: VIAGRA (c) Best Supplier <yqubokomoz1241 [at] vodafone.hu>
16: To: poor [at] spamvictim.tld
17: Subject: [SPAM]Visitor xxxxx personal 80% OFF
18: MIME-Version: 1.0
19: Content-Type: text/html; charset="ISO-8859-1"
20: Content-Transfer-Encoding: 7bit
21: X-Warning: vodafone.hu is listed at postmaster.rfc-ignorant.org
22: X-purgate-ID: [ID filtered]
23: Delivered-To: poor [at] spamvictim.tld
24: Envelope-to: poor [at] spamvictim.tld
25: Delivered-To: poor [at] spamvictim.tld

If you have any difficulty seeing the contents of this e-mail, please click here.

Pillengrafik führt nach ^whois: (Canadian Pharmacy)

Copyright © 2009 Ukotam Inc.
Privacy Policy | Terms of Use | Contact Us | Unsubscribe

Spamcop gemeldet

Guten Morgen allen da draußen

Jan-Ludwig

header:

01: X-MSKTag: [SPAM]
02: X-MSK: CML=10.000000
03: Return-path: <uousilutiw4534 [at] eastlink.ca>
04: Delivery-date: Thu, 21 Jan 2010 xx:xx:xx +0100
05: Received: from [195.4.92.23] (helo=13.mx.freenet.de)
06: 	by mbox135.freenet.de with esmtpa (ID: [ID filtered]
07: 	ID: [ID filtered]
08: 	for poor [at] spamvictim.tld; Thu, 21 Jan 2010 xx:xx:xx +0100
09: Received: from blk-138-45-206.eastlink.ca ([24.138.45.206]:41536
10: 	helo=eastlink.ca)
11: 	by 13.mx.freenet.de with esmtps (TLSv1:RC4-MD5:128) (port 25) (Exim 4.69 #94)
12: 	ID: [ID filtered]
13: 	for poor [at] spamvictim.tld; Thu, 21 Jan 2010 xx:xx:xx +0100
14: From: VIAGRA (c) Best Supplier <uousilutiw4534 [at] eastlink.ca>
15: To: poor [at] spamvictim.tld
16: Subject: [SPAM]Visitor jan-hillebrandt's personal 80% OFF
17: MIME-Version: 1.0
18: Content-Type: text/html; charset="ISO-8859-1"
19: Content-Transfer-Encoding: 7bit
20: X-Warning: eastlink.ca is listed at abuse.rfc-ignorant.org
21: X-purgate-ID: [ID filtered]
22: Delivered-To: poor [at] spamvictim.tld
23: Envelope-to: poor [at] spamvictim.tld
24: Delivered-To: poor [at] spamvictim.tld

Zitat:

If you have any difficulty seeing the contents of this e-mail, please click here.

Pillengrafik verlinkt auf ^whois: (Canadian Phrmacy)

Copyright © 2009 Yliji Inc.
Privacy Policy | Terms of Use | Contact Us | Unsubscribe

Spamcop gemeldet

MfG

Jan

header:

01: X-MSKTag: [SPAM]
02: X-MSK: CML=10.000000
03: Return-path: <lemanshahj [at] fanfilled.com>
04: Delivery-date: Fri, 22 Jan 2010 xx:xx:xx +0100
05: Received: from [195.4.92.11] (helo=1.mx.freenet.de)
06: 	by mbox135.freenet.de with esmtpa (ID: [ID filtered]
07: 	ID: [ID filtered]
08: 	for poor [at] spamvictim.tld; Fri, 22 Jan 2010 xx:xx:xx +0100
09: Received: from fanfilled.com ([87.98.222.113]:28263)
10: 	by 1.mx.freenet.de with smtp (port 25) (Exim 4.69 #94)
11: 	ID: [ID filtered]
12: From: <lemanshahj [at] fanfilled.com>
13: X-Priority: 3 (Normal)
14: Date: Fri, 22 Jan 2010 xx:xx:xx -0600
15: To: <poor [at] spamvictim.tld>,
16:         <poor [at] spamvictim.tld>
17: Subject: [SPAM]Make your pecker firmer
18: Message-ID: [ID filtered]
19: Reply-To: <lemanshahj [at] fanfilled.com>
20: MIME-Version: 1.0
21: Content-Type: text/html; charset=iso-8859-1
22: Content-Transfer-Encoding: 7bit
23: X-Warning: fanfilled.com is listed at postmaster.rfc-ignorant.org
24: X-purgate-ID: [ID filtered]
25: Delivered-To: poor [at] spamvictim.tld
26: Envelope-to: poor [at] spamvictim.tld
27: Delivered-To: poor [at] spamvictim.tld

Zitat:

It is every man's dream! You will drill her as good as Mike Phelps swims!

führt nach ^whois:

Spamcop gemeldet

Mfg und schönes Wochenende

Jan

header:

01: X-McAfee-Timeout-Protection: 1
02: X-MSKTag: [SPAM]
03: X-MSK: CML=10.000000
04: Return-path: <peters [at] vps3489.inmotionhosting.com>
05: Delivery-date: Sun, 24 Jan 2010 xx:xx:xx +0100
06: Received: from [195.4.92.11] (helo=1.mx.freenet.de)
07: 	by mbox135.freenet.de with esmtpa (ID: [ID filtered]
08: 	ID: [ID filtered]
09: 	for poor [at] spamvictim.tld; Sun, 24 Jan 2010 xx:xx:xx +0100
10: Received: from vps3489.inmotionhosting.com ([69.174.114.103]:57214)
11: 	by 1.mx.freenet.de with smtp (port 25) (Exim 4.69 #94)
12: 	ID: [ID filtered]
13: Reply-To: <peters [at] vps3489.inmotionhosting.com>
14: Subject: [SPAM]Bye, male problems!
15: Message-ID: [ID filtered]
16: To: <poor [at] spamvictim.tld>,
17:         <poor [at] spamvictim.tld>
18: Date: Sat, 23 Jan 2010 xx:xx:xx -0500
19: From: <peters [at] vps3489.inmotionhosting.com>
20: X-Priority: 3 (Normal)
21: MIME-Version: 1.0
22: Content-Type: text/html; charset=iso-8859-1
23: Content-Transfer-Encoding: 7bit
24: X-purgate-ID: [ID filtered]
25: Delivered-To: poor [at] spamvictim.tld
26: Envelope-to: poor [at] spamvictim.tld
27: Delivered-To: poor [at] spamvictim.tld

Zitat:

Arouse like Cazanova

führt nach ^whois:

Spamcop gemeldet

MfG
Jan

header:

01: X-MSKTag: [SPAM]
02: X-MSK: CML=10.000000
03: Return-path: <joeliechti [at] ns300580.ovh.net>
04: Delivery-date: Mon, 25 Jan 2010 xx:xx:xx +0100
05: Received: from [195.4.92.23] (helo=13.mx.freenet.de)
06: 	by mbox135.freenet.de with esmtpa (ID: [ID filtered]
07: 	ID: [ID filtered]
08: 	for poor [at] spamvictim.tld; Mon, 25 Jan 2010 xx:xx:xx +0100
09: Received: from ns300580.ovh.net ([91.121.64.167]:41298)
10: 	by 13.mx.freenet.de with smtp (port 25) (Exim 4.69 #94)
11: 	ID: [ID filtered]
12: Reply-To: <joeliechti [at] ns300580.ovh.net>
13: Date: Mon, 25 Jan 2010 xx:xx:xx +0600
14: Subject: [SPAM]Make health your main priority
15: From: <joeliechti [at] ns300580.ovh.net>
16: To: <poor [at] spamvictim.tld>,
17:         <poor [at] spamvictim.tld>,
18:         <poor [at] spamvictim.tld>,
19:         <poor [at] spamvictim.tld>
20: Message-ID: [ID filtered]
21: X-Priority: 3 (Normal)
22: MIME-Version: 1.0
23: Content-Type: text/html; charset=iso-8859-1
24: Content-Transfer-Encoding: 7bit
25: X-purgate-ID: [ID filtered]
26: Delivered-To: poor [at] spamvictim.tld
27: Envelope-to: poor [at] spamvictim.tld
28: Delivered-To: poor [at] spamvictim.tld

Zitat:

Power up your baby-maker!

führt wiedermal nach ^whois:

Spamcop gemeldet

MfG

Jan

26.01.2010, 18:11
antispam2006

Zitat:

Zitat von schara56

Was ein Aufwand für ein paar Pillen...

Seit 4 Tagen ist bei mir Ruhe, zumindest aus der Mönchecke. Da jetzt der Frühling vor der Tür steht müsste jetzt wieder der Pornospam losgehen...

Gruß Antispam2006

header:
01: Received: from [85.214.36.241] (helo=kredit.tk)
02: 	by mx25.web.de with smtp (WEB.DE 4.110 #314)
03: 	ID: [ID filtered]
04: Message-ID: [ID filtered]
05: Date: Wed, 27 Jan 2010 xx:xx:xx +0800
06: Reply-To: "Flensburger Nachrichten" <pillenpost.yomed [at] kredit.tk>
07: From: "Flensburger Nachrichten" <pillenpost.yomed [at] kredit.tk>
08: User-Agent: Mozilla/5.0 (Windows; U; Win98; en-US; rv:0.9.4) Gecko/20011019
09: 	Netscape6/6.2
10: X-Accept-Language: en-us
11: MIME-Version: 1.0
12: To: "An alle Leser" <*@*.de>
13: Subject: {Spam?} Keiner gibt es zu, aber alle wollen es!
14: Content-Type: text/plain;
15: 	charset="us-ascii"
16: Content-Transfer-Encoding: 7bit
17: Return-Path: pillenpost.yomed [at] kredit.tk
18:   
Zitat:

:...: Das beste daran: Sie werden keine Probleme mit dem Versand oder dem Zoll haben. Das Produkt kommt diskret verpackt zu Ihnen - Versand innerhalb der EU - daher keine Probleme!

Hier direkt bestellen:
^whois:online-apotheke/

Der plumpe Versuch, mit dem Namen einer bekannten Tageszeitung das Interesse des Lesers zu wecken.
Schlug kurze Zeit vorher bereits wortgleich, aber mit dem Namen einer anderen Redaktion hier auf. :sick: Das flutschte aber direkt ~~ins Klo~~ in den Spam-Filter. :rolleyes:

27.01.2010, 09:48
schara56

Der Nameserver von der Dreck-URL ist ja interessant:

Code:

cdgo.org NS ns1.usaservice1.com ns1.usaservice1.com A 220.164.144.130 mailingtonic.com NS ns1.usaservice1.com aktion2010.info NS ns1.usaservice1.com

Mailingtonic? Da war doch ...
27.01.2010, 10:01
homer

Zitat:

Zitat von schara56

Der Nameserver von der Dreck-URL ist ja interessant:

Dann schau dir auch gleich mal an, was sich auf der IP so rumtreibt:

Code:

www.cdgo.org A 220.164.144.130 130.144.164.220.sbl-xbl.spamhaus.org A 127.0.0.2 130.144.164.220.zen.spamhaus.org A 127.0.0.2 130.144.164.220.zen.spamhaus.org A 127.0.0.11 www.peterclaytonuk.co.uk A 220.164.144.130 ns1.usaservice1.com A 220.164.144.130 ns2.usaservice1.com A 220.164.144.130 www.mailingtonic.com A 220.164.144.130 130.144.164.220.cm-g7gx-5q6z4-u43x9-kva4t-sfndu-2fqqg.r.mail-abuse.com A 127.1.0.1 www.eafrexpo.com A 220.164.144.130 130.144.164.220.combined-hib.dnsiplists.completewhois.com A 216.34.131.135 130.144.164.220.combined-hib.dnsiplists.completewhois.com NS ns1.fabulous.com 130.144.164.220.combined-hib.dnsiplists.completewhois.com NS ns2.fabulous.com 130.144.164.220.in-addr.arpa PTR 130.144.164.220.broad.sm.yn.dynamic.163data.com.cn www.aktion2010.info A 220.164.144.130 corpbizusa.info A 220.164.144.130 promoflyers.info A 220.164.144.130 advflyers.info A 220.164.144.130 130.144.164.220.bl.spamcop.net A 127.0.0.2 lucky4games.net A 220.164.144.130 lucky4games.net MX 0 220.164.144.130

40 Beiträge dieses Themas auf einer Seite anzeigen