Nicht öffnen - nur löschen!

Meinen diese Jungs wirklich im Ernst, dass bei solch einer Bombardierung noch irgendwer ihre Spams liest, bevor er sie löscht?

Nachdem gestern schon die jüngsten Aktivitäten des Projekts 95 in der Zeit von 15:57 Uhr bis 19:35 Uhr auf "spammirror" und "junk4us" vorgestellt wurden, die nun wieder zu "sarahbares-blog.com" führen, folgt hier ein Überblick über die empfangenen Projekt-95-Spams nach 19:35 Uhr bis heute früh um 05:39 Uhr.

Zuerst der Ordner bei "web.de", dann der GMX-Spamordner:

Potenzmittel zum "Schnapchenpreis"

Der gesamte Textbereich ist verlinkt zu http://www.olobiz.biz.ua (IP 91.204.72.2 / CJSC Caravan-Telecom / Russische Föderation), von dort geht's weiter zu "www.esop.in.ua" (77.87.199.174 / Internet Invest Ltd. / Ukraine). Schaut man sich diesen Server mal genauer an, sieht man, dass hier offenbar die Daten für diverse Spamprojekte gelagert sind:

Return-Path: apeftuxcd@infoseek.biz.ua
Received: from mail.infoseek.biz.ua ([85.25.254.201]) by mx-ha.gmx.net (mxgmx012) with ESMTP (Nemesis) id 0M3NNA-1ZOPOh0BAe-00qy7e for [contact@succun.su]; Tue, 17 Mar 2015 02:25:03 +0100
Received: from infoseek.biz.ua (unknown [62.213.67.201]) by mail.infoseek.biz.ua (Postfix) with ESMTPA id 722D1A81E68; Mon, 16 Mar 2015 09:57:57 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=infoseek.biz.ua; s=key2; h=DomainKey-Signature:Message-ID:Reply-To:From:To: Subject:Date:MIME-Version:Content-Type; bh=flQrnb1D8EgFHzg8JI8rw FWEinkl0CR+X+nuVp6vWkc=; b=Xw69Rvc7+YDZ3U+B1BPNHQvOJxyHthyckkA10 yT437BOXXqzTBLH1HKhm8q8y65pZaoAKm1kqWQrA+X7C1kw4zxAuLOlulZokJnOv Vn8EsggzAOhVrARAHZ/hPWWzti1+aavg/H2hqqkz+cKLc0BnwvM394HBbXxitkoE 9KCQz4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=key1; d=infoseek.biz.ua; h=Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=F/TxyaTZymUUwYMN+uHCaE+PtMZt89r+llCfzDoe6i5OwoDXQfNp0CcHR0XrM39cwdcYjAZbbA2YTq/KbwdA/btSnStS5n6bc+JsosMPu1SsEypQHHoG61VD3+L3dnpWvevFaDNZWjup8EziM8C5UQqWRWcXptbtKxubUi25ds0=;
Message-ID: [apeftuxcd43088430.08120034@mail.infoseek.biz.ua]
Reply-To: "Apotheke" [apeftuxcd@infoseek.biz.ua]
From: "Apotheke" [apeftuxcd@infoseek.biz.ua]
To: [lydia@lydiastischtheater.de]
Subject: Schnapchenpreis fur grosse Krafte! Generika Probepackung fur 29 Euro auf Rechnung
Date: Mon, 16 Mar 2015 10:58:03 +0200
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0018_01D05FD7.CB234CC0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:g74JzmYDEQs=:sch0SHO2dlEcwFFB3G9Tie8S7rfI NwHomZoWLbt14LfrsMND0HVL5f6y6V2h6NCwazzxMpDvB6hcuGh8b2RVhCBgsZt2ugAr9ZNdj yPj+1gHYDPCLNdSNHfDt3rYG9I2wXsMpvgqBFjVe5HPQi0CzizxnXrmgMq1F7f3ECBiXpWGHL xrwbkivJbVxgthlp3Ik2/vWVYs22pol6W6TGB3em47sIxFHocIcL+otiQvuatBzciwJP+CWUG uzWEtHR4ZO6JY99llNnkuwy2h3Vpq7KLvHh6rl24SN786HKO8/ilZmWJLvhugC0q/WSb0+tSz 7I25vQusJOmypUYaduGL1erF1hPGD9O0RyFZLJF90w/ba01h1HhPUp+IAlQ4Dwvg67TTL5+24 W3XwfaCoW5MTCNCvB5JZwXP/K8ui2yAcY4JCt5Zp8sQ0B3q5KOqlwztKfgjvZ9MxDKPXgFsxV ifFGQYsP5XLo6qHo17WKrTOBAdSCbqhVhOf6J3kEMVpM55tVzW0QhrmTdZgZjKNDVoPPNHF0K 42I7DSmKRvHTVCSeZkL5+LUvi4vATPY9TTVMrvlyYrgiIoXmAZAIkTn+g1YkvoWR7L7C7PUdc /2R/MAnWH5RKIiTIPF/tlLTgc/UHYUDuhdk527cSmmlGke28xEwJrTA9Gly9VGfKdkQ/NvYOv TQ3P9uaTNeANcW8CrE5LPvLxhINhoyevqpkMD5LVq0vlNbXQ8hSejgzVuEJopc64PLP+DqVjz 9dDFEFIYx7vnuMtd57oQEYP6vCZLPIw2Zp3SN0B0UIMVWZANxjLli0pJB3+oGTziN58GapkPh TwQBD9SsKUJMHogWcnLfO1050627qZVRuCFITnLwo9d8WGtdb5I12kCZURr0kYJ0m1mp2WlS7 EzCsmxIJ/sM5zwztL+vXRHF6bhfKjWkjj4vL4CUygdyoCuA/5gvktEDQOt25RV0JWBehmFPIH /cP2fuF/XQjHj6z12N6aKnqOJxOWSxpa970s7LKMUX+2VYGIQVYl/q7uFRfQCIynF87un73c0 LMMpx3UeiUB79yjA5+SgX+2NqUfBWyjMcgWdyEhDXH35d2YJxsdlfILRoyxOp8XnCZhPB1Hw3 Ovyp5hdwhWbXgh6tdX2ISAFj2BZh+J8L/t9ar4xeXDVDcqBUabIzqL71ORsqh9qocyB+UyBMz 7LikJ7jG/qo2AjjLyRQfeGyAXc795HAN9uiTem93M9xqkn6NJpezWDOY9AM/D7e0L+XTCZv4o 0lEhC3T7+X7pc+q6V3yJAsRjTvqZH4FPg==

Daniel von "aktss.com"

Auch in dieser zweiten, die ich heute von BGO Entertainment Limited knapp eineinhalb Stunden nach der ersten empfangen habe, bleibt die Frage offen, für welches ihrer Casinos sie diesmal werben ...


Hi MeinName

Enjoy a huge range of Videoslots and table favorites with 90 dollars
no deposit. You can take advantage right now by following the
instructions below or simply hitting up live support for more
information.

To get started simply

1) Register and account
2) Use unique code ( JE90NDC) and ninty to your account balance
3) Ensure you take advantage before it expires

Thanks and don't miss out. We have 3 progressives worth over 3 mill.
If you have any questions please simply contact support below.

http://aktss.com/90-free-275-deposit




Thanks
Daniel

+1 855-363-1742

Click here to unsubscribe:
http://aktss.com/2/unsub.do?e=MeinName@web.de&m=103010

<2;lRmLiV2dA5hmb1mclhWbph2ZY9maP;103010;t92RXbM3cYuNh0tWYuczG>


Return-Path: web.de.103010.MeinName@mta77.aktss.com
Received: from mta77.aktss.com ([216.107.143.122]) by mx-ha.web.de (mxweb008) with ESMTP (Nemesis) id 0LngB5-1ZCPA81DUl-00htGb for [MeinName@web.de]; Sat, 14 Mar 2015 10:49:12 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=aktss.com; s=s512; l=773; x=1426931423; h=From:To:Subject:Date:Message-ID: Content-Type; b=I86tlXzjSNOJflKW9jcArM0GrxSNaHfGSBs+PaEIOYdg78h/ XRMYAf/HuRK4akJCP7vDw/1EgjQckAO01/X60Q==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=aktss.com; s=s512; l=773; x=1426931423; h=From:To:Subject:Date:Message-ID: Content-Type; bh=bkgwLdRSh7pXISHwdhDR7/sb6L8=; b=cAezX2h2yAuxy0X 3ePX5GPC6jUUuVsnfXvjU9dk6wAhOKKBcskOF0SMqWXJYT8hwIIB3bLSn4L5SyBJ LkKKQGg==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=aktss.com; b=IHAlB2tSeqXIdHbzOenFDcj16eE2UvH20mMojs1Ib3GXtoE0mxE38POQLAh0bEhgU3KAKNafyAiYOu7x2yDOug==;
Received: from mta77.aktss.com [216.107.143.122] by mta77.aktss.com [216.107.143.122]; Sat, 14 Mar 2015 00:02:29 +0100
MIME-Version: 1.0
From: Message for MeinName [90bonuss@aktss.com]
To: MeinName@web.de
Subject: MeinName .We have great bonus for you..
Date: Sat, 14 Mar 2015 00:02:29 +0100
Message-ID: [2-103010-lRmLiV2dA5hmb1mclhWbph2ZY9maP@mta77.aktss.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Content-Type: text/plain; charset="UTF-8"
Envelope-To: [MeinName@web.de]
X-UI-Filterresults: unknown:5;V01:K0:2Ces3oj81rA=:Tz2EDMKEdykwetZ6fQxSeUSbRC b+2heEba1NzIvZLbK218WSGezN3S+QUmckhwhf8+pf0+3K4cRLX7rYkIGdEYtxk0mzuonc75a qDNr23TYJJv/Va452+yqjjwDXKvKsUX9Y28YpR5cfpxThtmR87e+itNSyRnEBDL5UqOiYQWBH t6UqYvy9P0mBFtrvFI0PqhkyaGueFR8+GqfrM30m2moySRr0YJXuz3CwiY9fpYliQfrNipR2X J4WezMTavdm39kOuTRIiALoo4MSpGgkWxwkf1/AAyDgIGzpJaSo7HUMT6op0TH4/173/04Bgv Sb52at2LaC8q9rRdg5WT9BND5IPSx2M5JK9CbREOqmVcf7YrGIzU8Kc4JwoHatIiaG0jSa1t/ rnLcyXoJ0AEoI1dhyX/lByEXhZ2VDzs60Nt9Yr8MIr3UDDWdLh0rdBra91W3XxUbLEwxh4MSa MsXCUyjw6e1P5o5ndDJ9UaFYjb9u3EcvQru91zuCDRJFPvuR7LyO/xMv0+ef0gPj8A2Iun4Vp FfTgTXPemLVtf/Q+pB9LJdoHyGsMbR+9U+66tbmIFdw6cNBYOT/eHMLvJMlKk8MEsBF/8yx0v 8ervsHrV2/Y1IkSwewkLpsWrQAq9+uKwtO4W68bRg+o2NvoLdfVfUJDKzzWSSYSW9mkvDR8d2 rYZg4QqEBwvpcXQWs6I6IL3pbFVXTfTvum94kNNUS1tt1Ef09S1+JfyS4swGOCl3nQf2Jyg+L uygqiXQF2TTnOcN/wiVK5q3/yp2wLZIWaRobhihSG8TDQuLSWtiCvQoPpMCrnfBaGv0JfSIPb DS5AMZLk+6GmrURkuJMu/oq/ce7SyfSpH87zt8ZiGFMlVtcC4JAroqfj9jxyrNwY4r/yQVwwK 1dRipIVOVUYnufouTxHfbs1cGXZuqngvfC4ItZmTJXzbiZp+AgxGdnh/CKZc65LKX7m1j/y7l F87eVz7LYqzeY/ocgdYs1IcDQU8HaSN1bunJueC1O7a/+2abv3/dTJNi3Wt4hKPVZ/cNix3ZX WoJHsm9QJ/gEu6TLiS0I8X/dEppgzpv8Vw+oDuiziJZ/wNLCqC0Ogvf/scqfOYLAnokULwa5A H30OMSRM3yfATMktrvEUh8LsNdz0i5RjRoHwAOMelHPz4spzWV1+HnUGBLDLPZlp9FCdWwyVk Kzrua8hL9YEnhjx3/IbTsRtUr7SKxCU0jxNPpe8YPL/64X4U2TJY+I78G/SVd2eNwabRAsanO 4kt4YPbCneYlntMhxtRPNTEnkJ+x0zOG5TlfOFxs9tfURIZXzs81LMAjJnW+ftyseMD1CzAuz 6q6zaFyAvfHOCF8Upm7veAAxYuib91DWEWldIxd5HK3lyaEkHE2YLhwABAw0AKS+WCrbWa72s s6Ib+qtCy1x7c08VjBPU8bzyytAfIe2H8i5cq6GqFOyLERn2vcJhb3CldzwXTSfFi3daEc+uA WJfM8ZsENY0/x6RRFX8OtVsPcX/z6pPjIHkZGuuA/z69wp4UHO+axzEO99EjBd9pW1B++r7Yh f2L12x2tTaNFm7v/+hzAh0ryp+z6MpBqnlmTwEioS

"Not in my network" ...

... ist wohl die Hauptaussage der Spam, welche "Esther Boateng" nicht nur an die Kontaktadresse dieses Blogs schickte:

Return-Path: mrs.esther62@yahoo.com
Received: from optimato.vshosting.cz ([217.16.180.96]) by mx-ha.gmx.net (mxgmx007) with ESMTPS (Nemesis) id 0LpwlL-1ZAaCL41JP-00fiap for [contact@succun.su]; Sat, 14 Mar 2015 00:03:54 +0100
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
X-No-Relay: not in my network
Received: from User (unknown [46.183.220.105]) by optimato.vshosting.cz (Postfix) with ESMTPA id 4B4AD96632C; Fri, 13 Mar 2015 13:44:19 +0100 (CET)
Reply-To: [mrs.estherboateng63@gmail.com]
From: "Mrs. Esther Boateng"[mrs.esther62@yahoo.com]
Subject: Dear Beloved One
Date: Fri, 13 Mar 2015 14:44:21 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-Virus-Scanned: clamav-milter 0.97.8 at optimato.vshosting.cz
X-Virus-Status: Clean
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:TAP1EIuSskk=:nKD8g4bzQ6PJkVuohV679UkFgB2q KtqaEvilwXWTj6aPmGRH+VX0xfeZIe8VUNkPbAAn/h9maIQgNIIU8uGg97zfRzL+B2lU0WOd3 QfDCxLlQddE5cZBRlWhwvVtbezgq9ty30Fj+vAWiUHr0T/g/C2k+jmhqyiUdNw41CjfCkTnuF qwsncRWvqWFwSQgzsi+yuMy03FaN88/h9WoT48PX6+vRjXGqdvYYoHLyVeTBN61LXhfRLDH6U G7BC4ZKP8FaPxMUNc+FFZd6+CUhH1lZfODfkI5XOO2z/8Hx+PsJeM752+V5AWq+PWtqj5dmn7 ETjj/T5R9tH6ULHXN9daQz7Epm+/nlgDpWBG8+OUg6KIkkjKHczcvtOLPP2JTF5cMUUx1OwzM Zxx+RA5pbBkFopsLH89wZ96xZ5Q6vnpAO96CYhRQ7lqvzhSM4vIMzxM6WWHYxmju6iMc/rnt8 +C79C1yUhzxTD4FGx4/6Mjv0IzZd2237MNYx7H2KgQoelZ2IAd3u7ykGWXSBOoj+PHLvGVhO5 NG84Slwv1g0Gfq8d5/T3UVJFhbqeMcXCHLP5k+jw8p37zw+A2AROr0ZAxq0HuIUgMuplKT74e g3vwiX2z6nOBgpOEUBujcZPTNNe5D3oihMAvtycPKRpDlVejyOBJIyWvVc1CVdraOg+VjsIZR Q+MBVNVwxxsLbbWn2YvXdnoJbyp76yD1z1jNzySGZsaTk0lt3htgTFjmwNPXedPQsjLlyfQCi SVdXFBjlMhTaDFpiF4VKlSAfJy/XGndQVvJNB1lWKjP9E6JXsOXPYnyQmapKqYS9+Z8EQrhdb cwCEPSyK1PED/iTSTlBjP0wMopKJSnn8O9nlfk7x3GLs60wstCSyujSo+eQP8AGsGm8xd7OQL A3WZDrY7j+kmL2WN9X74znlC3GldqNywqUdtGYeDl+jCLloqOOqItfU7wrq3UnJgxclBgq90L GuocIVd9o8SGZqCZjxanoRxVB8WXFqFXIkHMUgykSZmGLBbiE0yIzQJOLb49NKXiUhDmDZ1qf I9xJD0qvJZ9xOKcBhGZg3jmaDO5QMNOOQOx7MHLuetuOtsW8kTkMj0vJ5ypSAxffElPgBkWEu MKXq6+bizv0vcBtNMoq3lUmhiIVIHx9aMuOGZUL02KuLlq1qBD61O6s06y5NgPyMQhQAmRUin ZpVU5i7B++4RqGwb5MDmGboZc8kpR8Y8kc3Snpt6gZe8XHFQXoA+lM2/VlbP2/Ekf/Ty9iV9h deXCNobBs1YCp6KZ3OO2TmpRPDE/GNrqLDXEFbtdj8vnd3Fi5kDHTWGTOG4PmiFDCcPLu4UTw DtYuyPYU8O4oZyleOUFOttqMtoN/YHVRZQOX/UWVnyiwsd3XUs7yvPrxC1IbRQAJhwhABmORG w0hQmJIg7ZhW75npI/3eaRqZY0QDezSEjRpW344ICiOV9BHVxwE+4cTnwDb73ieQX0uRtL2qk n9qf3XOtF8884vZde5HblIQ3BLxMRGABgo/XXQnomTtrvGpz

Good day to you,

I am very glad to write you this mail, my name is Mrs. Esther Boateng, a widow to a late John Boateng, a real estate businessman. Presently I am diagnosed with cancer, The doctors said I will not live for long time. I want you to help me distribute I and my late husband fund to charity homes and less privilege in your country .

Please reply me if you can help me distribute my funds and I am willing to give you 20% of the fund for your time and effort.


Regards,

Mrs. Esther Boateng

Aus Italien im Namen der CITIBANK

Ich glaube, ich muss meine Blogkontaktadresse mal wieder wechseln, denn die Spams an diese Adresse häufen sich langsam. An dieser Spam hängt das File "payment confirmation.zip" ...


We have received the following transfer request on March 12, 2015:

*********************************************
Item #: 135643884
Amount: $4,746.47
Service: International
*********************************************

Please find attached the payment confirmation attached for your
information
and confirmation.

Sincerely,

Alberto

Transfer MG.

www.CITIBANK.com[www.CITIBANK.com]



Return-Path: Alberto.J.Verm@citi.com
Received: from fnet1.formatnet.it ([94.23.68.213]) by mx-ha.gmx.net (mxgmx111) with ESMTPS (Nemesis) id 0M1AyC-1ZPHo43W5g-00tCDm for [contact@succun.su]; Fri, 13 Mar 2015 11:26:45 +0100
Received: by fnet1.formatnet.it (Postfix, from userid 33) id 3BFC4401938; Fri, 13 Mar 2015 11:26:20 +0100 (CET)
To: [transfers@citi.com]
Subject: FUND TRANSFER.
X-PHP-Originating-Script: 0:main.inc
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="=_a7429a1b7bb5d0197b3cf84fbfdc7a7e"
Date: Fri, 13 Mar 2015 11:26:19 +0100
From: Alberto [Alberto.J.Verm@citi.com]
Message-ID: [58d4e2cb4569cbc2730a59c5a33a4c54@hitherm.it]
X-Sender: Alberto.J.Verm@citi.com
User-Agent: Roundcube Webmail/0.7.2
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:cTyGX62U1Y4=:hLtH83M9K+aKC2DrzCpAkERWR4oM /uFviKdIDOE3j4gnp3+u1x4NtgR4wyOKkutHhoYHeL0057rlzdgI6DP8iQif/cGTuuw2cFMLl rkKUVRBp3dCp1g1d4iVkO/PGlVu/gEdtmhKdJwoE988a/c0lA5S0EDD4CRowcLFfdwHPXawx4 e5MY+TksNCgQ/2lMRa4RI/6bz42E1XV5x4nQfgzAh0SqmIBIZJAjNAwaqMo7GoAxeq+pA1wZe UCXVZ8q2whjR0k/rQ8BZfanuS5FIjcL63nLvCQxqWMhoh4DUd3ZUO+6DWo7+bPXnXs+Jwuo+H +0qmF1BlGy5eFqXiQE8IDFnfu3orM2IFUjTsIYWhhNNTCffWduIC5Oy5UwwZDCDrIBW0LNRF1 XxRMzrvP5IWEbWVvUdP54VaYWv9xV45Gv2WYCDcsoi8yB9Vbk/EiM5RvFUu1B9DfaWmGV1CHb G4WN2E2Uc/sILTHy7MfdVBt2nB3aF5TMCY82vYygByJrjq7gdpsW7MZr8KZ+/wqedVhOvpNDp smjqgZ4jvsseUtQ4S4nr6ClGmx3bCqQAPiXu9JXLSz+S0IXQ/i7fWQvotc+i6W0XUjHOTlAmM LjdCVHN3A0+gxhn91uRuBA1bC8HYmKE7OJAoAdtetho++1d9ckajG7SosR1JDc3zWXg4L0cwJ z1Drt1NM/lt1KmhNIWGK8VhrcBFDy4nyw4fcL3sed16YrKdDvaAKGbahFUdXcFP8E1AEfelD4 pVorD0sY6ftliX9i5H9I+kZY7S/4j2PVFztVIYCIuecQD8zwP5KmKhgs0AzCBvnqBHctbyoPQ /n+p89IfqjPo1aQatIv9Lqb6ugat6WM4cUGQagS0JnzNNQs0BgSnpkRiYJ2Pq7APIr7HnsJ0L qcy4uviXdnwMe/epgIdX6tNWO55YIfMcPQydpL5NnfbCleX06pV8Qq8orTGjKGfgYhQUzzuLB ZKPVEDyHbA0AceZIyK/axNx90unDHuUduVhhnEILfJBYAVAcRJI4NleQsfZQFzUoT7mgZhVFk WE5cyhEvEhq8Wd22uIyKyELmp3uBDCjVu1mzMkI+5662eesWoTFDjgNCoCqyFysUMefArVPfe WPZ2hnQtWmFh/24BslIpJXYPySKvo++UN8kxJj3NeAJ0NXohN4GTsb5S8fbNS8ZiROQev/Z91 +Kb1Z3scG6kFrdrKXassp9a7alqM00cbBCKD7G7m+DM8jT8jv1BxlbSw7iIJVow7kKTvYZJpN 6gcndPQqgcwhC3NeDgFn4Pgmdk3Gh6zbQ==

"dringend" ohne Link

Offenbar sollten diese Spams der "Freien Verbraucherberatung" (bzw. "I. Web LTD" bzw. "Projekt 95") auch dorthin führen, wo schon die letzten von heute nacht hingeführt haben. Man hat jedoch vergessen, den betreffenden Satz auch zu verlinken. Lediglich der "unsubscribe-Link" ist vorhanden. Er führt jedoch wie immer zu genau derselben Seite, zu welcher auch "Hier klicken und kostenlos ausfüllen" führen würde, wenn denn der Satz verlinkt wäre. Es ist also vollkommen egal, ob man klickt, weil man sich für das Angebot interessiert, oder ob man klickt, weil man keine Newsletter mehr erhalten möchte: der Rechner wird in jedem Fall infiziert, deshalb am besten nichts anklicken, sondern löschen!


Return-Path: rgilreo@polymertal.com
Received: from gal-inc.com ([80.95.38.171]) by mx-ha.gmx.net (mxgmx004) with ESMTP (Nemesis) id 0Lo2ga-1ZBhG13jzs-00g1Ha for [MeinAccount@gmx.net]; Thu, 12 Mar 2015 14:13:33 +0100
Received: by %41.252.216.22; Thu, 12 Mar 2015 14:09:47 +0100
From: "Antonia Kaiser" [hkdgpw@jhpf.org]
Reply-To: "Antonia Kaiser" [afsdgrhr@jhpf.org]
To: schreiber.78@gmx.net
Date: Thu, 12 Mar 2015 14:12:47 +0100
Envelope-To: [MeinAccount@gmx.net]
Subject: dringend

------------------------------------

Return-Path: rshch@stichting-csc.nl
Received: from renegadehorseboot.com ([212.8.46.10]) by mx-ha.gmx.net (mxgmx106) with ESMTP (Nemesis) id 0Lvydt-1Zd1kJ0aIH-017oX2 for [MeinName@gmx.net]; Thu, 12 Mar 2015 14:17:42 +0100
Received: by %148.45.172.64; Thu, 12 Mar 2015 08:09:19 -0500
From: "Kimberly Wolf" [dhh@river-view.k12.oh.us]
Reply-To: "Kimberly Wolf" [evdptd@river-view.k12.oh.us]
To: robert-92@gmx.net
Date: Thu, 12 Mar 2015 16:11:19 +0300
Envelope-To: [MeinName@gmx.net]
Subject: dringend

------------------------------------

Return-Path: kmeos@bachhaus.de
Received: from vietnamgrocery.vn ([82.193.155.228]) by mx-ha.web.de (mxweb003) with ESMTP (Nemesis) id 0MHmrV-1YZ5M70541-003bTk for [MeinName@web.de]; Thu, 12 Mar 2015 14:24:15 +0100
Received: by %8.48.221.224; Thu, 12 Mar 2015 12:14:30 -0100
From: "Melina Berger" [yoplzoa@davel.vd.ch]
Reply-To: "Melina Berger" [obpva@davel.vd.ch]
To: dein_harlekin@web.de
Subject: dringend
Date: Thu, 12 Mar 2015 15:16:30 +0200
Envelope-To: [MeinName@web.de]


Guten Tag,

Ich möchte mich an dieser Stelle nochmals für Ihr Interesse bedanken.
Für einen Vergleich der besten privaten Krankenversicherungen benötige ich noch das ausgfüllte Formular. Das dauert maximal zwei Minuten.
Füllen Sie einfach das Formular aus und Sie erhalten von mir einen Vergleich der günstigsten privaten Krankenversicherungen.

Hier klicken und kostenlos ausfüllen




Vielen Dank vorab.

Ich hoffe ich kann einen optimalen Tarif für Sie finden.





Newsletter abmelden hier klicken[http://www.krankenversicherung-billiger.ru]
>

Schon wieder was mit Anhang

Auch im Anhang dieser Spam befindet sich ein ZIP-File, diesmal namens "SWIFT COPY 03112015.PDF" ...

Return-Path: vtobar@dermigon.ec
Received: from mail.inesa.ec ([190.52.74.100]) by mx-ha.gmx.net (mxgmx004) with ESMTP (Nemesis) id 0MSH8t-1YzI0A2RGl-00TU5A for [contact@succun.su]; Wed, 11 Mar 2015 18:58:22 +0100
Received: from localhost (localhost.localdomain [127.0.0.1]) by mail.inesa.ec (Postfix) with ESMTP id 26AEC1C90F08; Wed, 11 Mar 2015 06:40:35 -0500 (ECT)
X-Virus-Scanned: amavisd-new at inesa.ec
Received: from mail.inesa.ec ([127.0.0.1]) by localhost (mail.inesa.ec [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id b1QC4qkWscPD; Wed, 11 Mar 2015 06:40:34 -0500 (ECT)
Received: from mail.inesa.ec (mail.inesa.ec [192.168.1.107]) by mail.inesa.ec (Postfix) with ESMTP id C57671C90E08; Wed, 11 Mar 2015 06:40:26 -0500 (ECT)
Date: Wed, 11 Mar 2015 06:40:26 -0500 (ECT)
From: veronica tobar [vtobar@dermigon.ec]
Message-ID: [21239907.368090.1426074026310.JavaMail.root@dermigon.ec]
In-Reply-To: [15332987.367975.1426073816193.JavaMail.root@dermigon.ec]
Subject: PAYMENT 34,000.00 USD SWIFT CONFIRMATION.
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_Part_368088_32483993.1426074026285"
X-Originating-IP: [41.190.2.120]
X-Mailer: Zimbra 7.2.0_GA_2669 (ZimbraWebClient - GC40 (Win)/7.2.0_GA_2669)
To: undisclosed-recipients:;
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:wNVLNxuIweE=:LzDAyW6qp5CPqYx9v+xdhykVp+Lt lCYfYHdrBY69SybtoSgTtEFCatmkq6hy4L4YKQZesGC9Dv1yJWKmHgKrIHMPomX3/Ppinuvc+ KKTJ0mp/Z4pqgyXLvQMAH045zgTUtyNAF00mg3huJdksk7XWNfYnw4qZj7FUE3igKE4olL4wj WYvCuH30uOCpss2HLjd098stkE5wTxKNancwsuNSJMaS4y0lyFMES0ssr574u852IrZzLmD5B 5mF5emBv5fGsSRAuiIsMMMvyQ6R1+liq3eMOcQwKn1ZeEXYVA7FRAF9USR7KaVqtEb4GSFKSj M9h0/ix9oCHClDNz6V3ZSlXDIstcYhulivUzQjRAONirFWR8e/jIXgAhzY2soMiTelZzNJGIj wGGjP0BE6gbVHeR7kCsUslE5WxTYEl6K1pdo0OK1HVqoAUm+FqwZBSgDwJhEchRpa0f8lWRJf k1It8pgppxj/NK5ET3gQkK5uHnOhkBZpmvtRRpuPmbx8GXqYuEhCkU75EAMA62MgLTCUX6vIv M2PnWeOJHl9F9luBxhsxZVGwwdjvoDChGJb0L0jnpL4Mj7n10EyBAbzBSEVo0+QjM8+xvg/8N GCFQwjeezXSHW9FoN51THGvCwSE6KUj0ZfF5wADzGjmKSgutzIhQGnS+ZmivHqhqQqIHXyyoA WnFPVUaKCcPwN/NMr682U2EjIl9FNn+9qC7QzlvsnsS4HZy8brNOMUoET7uqNtcsJ7ZtnyJS2 Wy6Qf5zVtrcn61mwU0o+sRYN/JTZRgBK7VsvUlLACnV1PAyMsSx2cYnGPm9HICM+/L/DORuO6 nwdvVjirjOOAtBoUCOSBwKGbzso8ZGfYVX+dZAErpwUauXP3C4zfMGaMYvb+mcpPa6MH9s6Ql 8h+uUDTpGxIRFRRvE2EDoxscKtu68zZPSbrTXwPoOq3aw1ylS1GDip3P9fLyq0Bpkbg594w8Y 4YPirNAAiNQ1veqSKqi6ANSP/kaPOUxEAWhHfMxAz5XoWHzvt1rezym9D4kOgCvZWd0n4E6KU QWt/fbCAxgJsWuDgngLk2ZHa//EeBeEdxvALBtDU7NaS5g00XckFlj6PDTgcFhjFlT+te67Bk u+AcDpeGtH4okM2n00MjwWFCj1EL8S7lxG8QGeqT1KC4imy/FNgr+iCnphJe7cvdijSgmSHK5 r9JARFNHBj1H5KI6KxdZ0A5Siif8c0Us2VgfsB/PeD16YWUqRl+NUX4/WNyTDjfmE+hNZeBWJ Kd+kdY63DNcM0paBGkTWuJaq/v3amHU3Q==

Antidepressiva aus Panama

Der Link dieser Spam nimmt folgenden Weg: IP 78.110.50.121 (Russische Föderation) -> a2008.tabsbestusa.ru (IP 111.123.180.21 in China) -> luckytabsmall.ru (IP 190.123.45.31 in Panama), wo man auf einer leeren Seite landen würde ...


Return-Path: azsfxudjewabbs@cynosuretech.com
Received: from static.7.94.63.178.clients.your-server.de ([88.119.157.115]) by mx-ha.gmx.net (mxgmx008) with ESMTP (Nemesis) id 0M2osQ-1XcfIP3z3m-00sgxS for [MeinAccount@gmx.net]; Tue, 10 Mar 2015 14:05:36 +0100
X-Message-Info: EYDJhMR89uOmusyQULPPkgTwwZRPyl05
Received: from jutish-dns.abalonemidwestern.com ([168.208.0.165]) by xz1-w94.hotmail.com with Microsoft SMTPSVC(5.0.2195.6824); Tue, 10 Mar 2015 18:02:31 -0300
Received: from mail.o'connellflowery.com ([34.126.76.14]) by famine-dns.fusionmanumitted.com (1.28.4/0.80.6) with ESMTP id q9HErzd2468424 for [achimv@gmx.net]; Wed, 11 Mar 2015 02:01:31 +0500 (EST) (envelope-from azsfxudjewabbs@cynosuretech.com)
Received: from [122.123.38.143] (helo=commonplace1.cash99compartment.com) by mail.doldrumbeta.com with esmtp (Exim 8.62) id 0JekhT-0285tR-NF for achimv@gmx.net; Tue, 10 Mar 2015 20:00:31 -0100
Received: from alone7.chesterton54combatted.com (localhost.able38homicide.com [127.0.0.1]) by yule9.lotus69arboretum.com (1.11.1c6/1.69.8) with ESMTP id u1MYgTU2870252 for [achimv@gmx.net]; Tue, 10 Mar 2015 21:58:31 +0100 (CST) (envelope-from azsfxudjewabbs@cynosuretech.com)
Received: (from calf@localhost) by ms5.demijohn22assumption.com (2.61.8q9/5.01.5/giddy) id j3MMrHM0558071; Wed, 11 Mar 2015 00:56:31 +0400 (CST)
Date: Tue, 10 Mar 2015 15:56:31 -0500 (CST)
Message-Id: [843132645768.m6OEzBK78434676@communal4.portage38haggard.com]
To: achimv@gmx.net
From: Justin Mcnair [azsfxudjewabbs@cynosuretech.com]
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="--281691780058303394"
X-SpamInfo: FortiGuard - AntiSpam ase,
X-ASE-REPORT: 19db0ce33e58308f17318c482f14fef13 Threshold 80 Verdict score 100 Engine version 1.00001.117 Rule version 1001 FortiRule: 100 R_NUM_URI_BLAC K FortiSig1: 1 http://qlql.ru/ljg FortiSig3: 0 CDE970E0E8CD21244F76020EE6A B54F6:2:328
Envelope-To: [MeinAccount@gmx.net]
Subject: Antidepressants are not a quick fix and take time to work. Results often take several weeks to appear.


It usually takes 10 to 14 days before most people begin to appreciate the benefit of the antidepressants.
There is a wonderful recipe to fight depression. You need 16 different natural ingredients!
This article briefly describes 3 of the most common types of depressive disorders. Study it to be ready.
http://qlql.ru/ljg[http://qlql.ru/ljg]

Shipping Documents von Maersk

Wieder ein Versuch, Blogautoren dazu zu bewegen, ein ZIP-File zu öffnen:


Return-Path: info@maersk.com
Received: from wp134.webpack.hosteurope.de ([80.237.132.141]) by mx-ha.gmx.net (mxgmx106) with ESMTPS (Nemesis) id 0LiWG0-1XtH6o43Zc-00cgPo for [contact@succun.su]; Thu, 05 Mar 2015 10:15:27 +0100
Received: from [46.183.220.105] (helo=User); authenticated by wp134.webpack.hosteurope.de running ExIM with esmtpa id 1YTRrP-0004pO-TQ; Thu, 05 Mar 2015 10:15:02 +0100
From: "Maersk Shipping Line"[info@maersk.com]
Subject: Bill of lading - Shipping documents
Date: Thu, 5 Mar 2015 11:14:26 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----=_NextPart_000_0037_01C2A9A6.4884ED00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-bounce-key: webpack.hosteurope.de;info@maersk.com;1425546926;e4936eab;
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:dJpcyS9KmlY=:e30XPaS39dXD0mT3qMEae/8o+gVE aUDdUVQO+b6ssr1OT8IHhb68NelFnWh/ILfrb96b7e+7HUqPe5X/kvrTJNTbk9XhTrRBRCauv m+znbhu4noq00u3Td7ZX4EviYcpKbdCMEVZuniorTGf0s9ndqDA8cAgy/lXwarSH6CLC0dEvG nn3DKq5X9gnaFiSi/KLChnCMzsEX65tacUdjTH/yqsUjPm6ypY4WCykimeBatOJ8OM375Yhj5 CWU/rck1V2TCQ72Q960CoOsAUXC2myFsA7CiX98Wph3qhWP+efYQj3NSe0sKGkwSdKmnoyYPZ iHm1cWMKOJRcvRzcNsnLl8EL6xBFj8eEm07bLv/f1gSTke+LWgaF8hZIDBWVpGAkwYHjkVBxi KLTqnoyOXueWyvJeKhdGbi2o0TWLTMsyvHJuw3kkte7DCQ+B0EzNzk/+i9JdY6xJmacq44EQH hh+TEdVIxmYyjSmybjFHw7hbXfiN/LY03eAlz5DKKzN2E+7kw5sAXi47RyPqdtXTAbo+/phXN iv/VerRiV6HYXWpbLlaKiKexKAtBuQ0oCS49THQBxiH22ySF8Qe03aV+LEiCOzPt8FUep0cRn /cJtdtYRP8ryg77GxewNzfIvd3TBoykDE2OPNtGGFkdZ0LZKe0IViYxMgBWoDtozcuuyFlGab dl0MNp8Ophdksu77he57CAGGS7V07PoKzJ6sHHzKluejw31mQd2FPM9u8dH3g6o/TNm+Ys5Oa rYmpcfBpmkGy+TAlgEWGVCIq0dtGtIZXFzn6xXTeZa2TyAzEWU1yj9U4FTdjrMiQFNeI4Ikqy BxzyLAktiER1k4VDQ+5nO4BH+jsJIcYbni55EAfkd4431lOoXyRXsa+npRmkef9QXUuDWQLCy O1eQDe6r3e0NWxQR0C2ks9TvJMVHUjC+9P1NgRqsqATLnkhZa60nezpZpNT0z0gx+shEMvFGi +AbX5P4+ZDAXDUgdN5yANt8GOGgMjRNnZM6xl2DoUATyzdgXdeHkInIzAQGfAlZHdyAWcojpF 9OKLpMiyPFb+EKPCvF2QTlvHKdKb2BaBiXdNoqA+xW2dD5y73nG0vwUEVg2e0aLDki2BwtpWq VZcfmozoQM/+5DgEmFYhDtC1u8ZCvTXt/Q987cMKM1tr+FwbrhCd3iefu2CZam8N/3OL1pU3D 9U4RirQM+4w5j7tDpt1Dn9M9q4eY6S477wN0bsWodpHITcL7RyIxBm8iudtmTDnVIRSDRt1P9 zyHrX7vv1ez0a6SKbK/+AtdAdbtNw3k4Tt+IMZE/3aNMJMIudJ1SWo=

Die nächsten ausstehenden Auszahlungen

Nach den Auszahlungsbenachrichtigungen des Projekts 95 von gestern nachmittag folgen heute nachmittag nochmal an zwei meiner Postfächer solche Teile. Das Ziel hat sich nicht geändert ...



Return-Path: musex@nissegaard.no
Received: from e-budo.com ([195.64.225.129]) by mx-ha.gmx.net (mxgmx110) with ESMTP (Nemesis) id 0MLzbU-1YPVoP39P2-007j1u for [MeinAccount@gmx.net]; Tue, 03 Mar 2015 16:24:02 +0100
Received: from 33.224.173.184 by palestraelisa.it (via HTTP); Tue, 03 Mar 2015 13:18:24 -0200
MIME-Version: 1.0
Message-ID: 32861428205754.31494.8@e-budo.com]
From: "Celine Richter" [hoybvyfzk@palestraelisa.it]
Reply-To: "Celine Richter" [xpaktgqq@palestraelisa.it]
To: uwe-kellner@gmx.net
Date: Tue, 03 Mar 2015 08:21:24 -0700
Envelope-To: [MeinAccount@gmx.net]
Subject: Ihre Auszahlung: 17468 Euro ausstehend
------------------------------------

Return-Path: fjttiy@johnfrieda.ca
Received: from raven-mythic.com ([202.53.82.22]) by mx-ha.gmx.net (mxgmx008) with ESMTP (Nemesis) id 0LlqDo-1XtTva3efA-00ZN6p for [MeinName@gmx.net]; Tue, 03 Mar 2015 16:24:32 +0100
Received: from 97.160.64.156 by sveti-sava.de (via HTTP); Tue, 03 Mar 2015 17:18:00 +0200
MIME-Version: 1.0
Message-ID: 09363628488186.19696.7@raven-mythic.com]
From: "Daniel Kaiser" [mzenfnr@sveti-sava.de]
Reply-To: "Daniel Kaiser" [wwyly@sveti-sava.de]
To: alexilaiho@gmx.net
Date: Tue, 03 Mar 2015 08:20:00 -0700
Envelope-To: [MeinName@gmx.net]
Subject: Ihre Auszahlung: 17468 Euro ausstehend

Hallo,

Ihr Konto ist eingerichtet und einsatzbereit. Ihre offenen Provisionen in der H�he von 17468 Euro stehen zur Auszahlung bereit!

Bitte best�tigen Sie Ihre Account Aktivierung hier

Wir werden sicherstellen, dass der offene Betrag so rasch wie m�glich an Sie transferiert wird!