Weitere schockierende Dokumente aufgetaucht

Nach den letzten beiden Spams von gestern nachmittag kamen vom Projekt 95 bis heute nacht noch die folgenden 15 Machwerke in meinen Postfächern an:

Die Links incl. des "Unsubscribe-Links" führen weiterhin zu den Domains "geld-jetzt24.ru" und "einkommen-sofort.ru" unter bekannter IP-Adresse ...

Hilfe bei ED

Von der Apotheke, die sich z. Zt. "pillscraft" nennt, gab es am Mittwoch denselben Text, wie schon in den vergangenen Tagen - die Bestellfrist wurde jedoch bis zum 01.09. verlängert:


Return-Path: info@interstelloz.co.ua
Received: from interstelloz.co.ua ([62.75.215.214]) by mx-ha.gmx.net (mxgmx008) with ESMTP (Nemesis) id 0LeACS-1YwOpR2ljg-00pqkF for [contact@succun.su]; Wed, 26 Aug 2015 17:31:05 +0200
Received: by interstelloz.co.ua (Postfix, from userid 89) id A42A3A83764; Tue, 25 Aug 2015 16:13:56 +0300 (EEST)
Received: from interstelloz.co.ua (unknown [93.170.123.164]) by interstelloz.co.ua (Postfix) with ESMTPA id 4B84CA8ED84; Tue, 25 Aug 2015 16:13:49 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=interstelloz.co.ua; s=key2; h=DomainKey-Signature:Message-ID: Reply-To:From:To:Subject:Date:MIME-Version:Content-Type; bh=wN1i fW0eJOnat9QaHp8yxMRW5BtfzwYwZlCMCu58B4M=; b=ADmqLM4jSEcop9IYp0Nf Fq+KMgTAjVVxx86DwhDSMvrznHuCsWr3s33SaJ1omymMvp3m6o70XbdjLCKylRUP Mi2EZRDRn/q1bVSEtDw1OPGQvuT8SAczkm8K7G+qHeWDHd0fRalztjCRHrMhUQ0E oTiE1DqxbrYbF3HeZURqzP4=
DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=key1; d=interstelloz.co.ua; h=Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Content-Type:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=oOHGYCF6eJrsK85M5F/0N/w2Ui11ZTlkcqQgVb5V/iFPnRadpxGiofD2CZSze0r5gIg69H1u3vpcFifQcRtysGQ6q6ILDaL+yEnwWmB5U1L5PGNYxXp5QqyuVxPtfP7GdqtmUiYr14JQQnF8EH1B7z8hcNXJ1Ldr6+P7anHZ/n4=;
Message-ID: [cc3601d0df51$0b32d490$6592f5eb@info]
Reply-To: "Pillscraft" [info@interstelloz.co.ua]
From: "Pillscraft" [info@interstelloz.co.ua]
To: [subdivision@lo8.de]
Subject: Hilfe bei ED
Date: Tue, 25 Aug 2015 16:13:56 +0300
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0006_01D0DF50.F5ABA930"
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:NJAoHZNXWig=:bAOMqc7w9U/m4MrERVpFlOAsIFmZ kjDZPbeBI5rc1iZwqMpeE5Z1h+IMoyEyX9dIig0apA4lApBStjQ4oih38iTUW7Y2ZOxTeuCt2 URGZj2qrkFZiX8YVvD3RcQf6IZGBwKcHPxczyg2dXPAF4jeTmfhqB/C/I3S3UwJFjH6jcg8Bb xt4fI2fbWrKAXblfgTsSrtrLS0iq8hHTft06K1FZRQapM41Y/6SXoe/Q9zL1XbEYNizrTKfAJ LC7nMOevbBvH2UMecZUKe9JdT/vmYPM2gAFAhfmHSNoTxi6laPkBV231/36I6oeVzBTOpxfHb 58Nc05StR9L3PZXZholvcHonvM+xyO2W43ymaEJdEcWYJEH6bbd8ZfgxjgBdoqbGRRNX4/jkD SvtO8HSczvtChc6PI1YGELTvWpqSzFb+BpV4Sx3ouhPmvxBqSwFpn41FVFVHgpRykzhFWg1FI +ZRirPu1W58bKXu/4sQbS1grWnSGUP2XiVegdKnC0OAvnRr3nRCDzO2G4v9qF3N/s3rDkRwlJ sGwxYUJ1+Km/o/enK+kIrMdBoqa7nmwkZvdgD8Vjwzn6qJCHaSPSAszTTpM1mh/5jnO7Qp23l vJFGj8P+y1kiV7M9F/uqHdCGa1+CT4Rkw+4wKNyHx/M6J8DfeG8+OvW+hrYKkC+1hpojZuYqt PYIVPwCiSLpD07YXCDKawSTgh8Y9m7vvctjWA6M1HHs+cpJ9zk3z3NrBjHGORC81OmBCwajb6 4gsbChi/Tbviwu0HVByEcF0gWZitUHM+xZiTcudjHmjlb0VZWGOSA3gXnCx/8wIHFcp3JqYQz 1VO/S8hXvdiAgb/WkMQ7pIKWNJIyiG9Ee9/uCvG6Xs7Y0/Iev+YbJGWDv+tnY2sFTSqt0mT/9 rdP6OjlwKMj6+ASs1mamA8dbdfmHb8137DM7zPlsQNNPp2czvDhjM/wZaLz7IjACnzEK8+95I EpuWDOxydbAh4rqz7fDqvem8PCJuLBGWvHRvkMcWZheyVGGRzAzaFyA9m3re+M3mW0tBGB1nP 3NY61VrUKxYAylSRH6gpTS4+XwB3tYYb55YzrfRZg417EZtkmakWKJ3Xvv3nGbk0pv/ZCi88H xYjgeWFzfY4peZxXhfyMx8MPdIArUek5ptGvJthb9xkfoDCiwNFfBHnVbW+DZQd1F5pN7HwJL PlQ/BxBrZun/bVTBP3sbjMZtTGZGIxpoXIt4cUnuBSzZDnPYEKZg+rSJ2k/FrXcg4B5/Q+zxV werQHL7x0wZv4JtsMfN9+QPNGSyVNJxt86jeYR3NAUCAGybPgAUvvu39RekEtgkyszIKvzOSq oAawDR5CHqYugD6YbmfLvHL6+L0bERUQwzHAGRLcNke0/lXQ1jCnW1aKNq2H++m4AHibsIM3d eVglw82F4tAX1nmyv1s1ZCXLZCAi8Z7JJEazDtg4AXJCln42/AwfAN4BcwockGaxpvY/i4OUG 7O+HOFjXFTjNAI5DsgbVCNDRqHO+8PYOs27SoQLcpR0l8NKj



[http://infobox.co.ua/bookince/index.html]

Anastasia legt nach

Heute nacht nochmal derselbe Text wie Montag abend ...


Return-Path: nwaobia.a@hotmail.com
Received: from kli.klickfree.com ([50.116.76.103]) by mx-ha.gmx.net (mxgmx109) with ESMTPS (Nemesis) id 0MFRZQ-1ZXjEM1TiW-00ELQy for [contact@succun.su]; Wed, 26 Aug 2015 03:14:42 +0200
Received: from [46.183.220.94] (port=51835 helo=IP-220-94) by kli.klickfree.com with esmtpa (Exim 4.85) (envelope-from [nwaobia.a@hotmail.com]) id 1ZU8ly-0006v8-A2 for contact@succun.su; Tue, 25 Aug 2015 02:35:58 -0500
From: "MRS. ANASTASIA M. DANIEL- NWAOBIA" [nwaobia.a@hotmail.com]
Subject: YOUR UNPAID CONTRACT SUM- WHY YOU HAVE NOT SUCCEEDED
To: contact@succun.su
Content-Type: multipart/alternative; boundary="xpqETbijQo4kM210nXPrGVrj58d1b=_MPD0"
MIME-Version: 1.0
Reply-To: a.daniel.nwaobia@gmail.com
Date: Tue, 25 Aug 2015 10:39:06 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - kli.klickfree.com
X-AntiAbuse: Original Domain - succun.su
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - hotmail.com
X-Get-Message-Sender-Via: kli.klickfree.com: authenticated_id: ogasing/only user confirmed/virtual account not confirmed
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:20dWwLKlSEM=:b2qn8pKCckVrPeO25v2C2eTjyICn MyD8lK1vNDXR8L7dROibUimwW+kHoRxKwZvEboPTRtTYnwNg1QN7D3vu0vtVhEU02cMxTNC9B exLIJD+2VvcL8qREGTLnLa/0GTXxzlDf6pENVgJzmgsZJHnIPWlcv14hj8fJ8XeZE90H4NYDm Zl/4RSjw4vBK8lTTgJT1brO4lRZeQbzpa6qAXfAD3MVHUW5J/i7llg3FKvgWiYxNTPXrAl/kA x+wKO7NBLjy2K4EfvpNeOtM7JSA6R2VgpUKywhiBc41Kk4LgTQe35vUHJpDqPOGCVNRaeTaoT miUTeipFPC5JAGFqWCVa48YNgJB7YpsEZ4rUI7g354Szig+ljghvDbmhCKxcBkQWKiOfDL0op OOqDa/DvS7ssIps5CvSNaWDPxmC04kImy9uomJD3Bj9qg22Ocua9T1GRUQyv5J+VfDrP8pJVS YJG/H5EwO7f3l/fF0o5NOLWk3vBYiFj/rK9E7kr2SAJkaxvM4t7/GeHiYioc6czF8g86cNR6T RXLQNVwmx/ikVKMAw04izYxp+KdH/wIYu0Ige1Qlvtk/OfwanjQlleMjprrssXmEHgpt/NLHR dut/wt86Hy0/+XWJC0AHgOFGDSyR7iIahkx4uFegYlw7OwggbwMt8CHToivumXx2GaClUcS09 iEI02yMisqbC8dfvWBEM+6Meg9SYY9f4wVY07Pe/cseNyYVazV9qjZ4GUMCR2Li/GS/eufHeW yOd54GEZUxVVyusIipGK704rN4pyTHKLFCj02w/kMx4e9RSJkJpMlxmOdugVeSIm2j7CxblFe Q17WmM50GKtWc6ddT5hNV+RoFpkojR7h61X9SxcaT6Ay5L8VqevWNmWvdZx5UX9NFTIxJZHxH 6ESzoq9T5VdcSoM9hdmneTi2UHffTTBDUGy/K4fHTGk6ykay1SaH24IJ9abOdJCNDHZ1kSn8a 0OPc352EHmkevIyWC2/o4wjylRlMfNQ/iVAppzKRjFlLibpNVFzZZrJbJWsbh8BPNqV7UQhZd jSCFL9/Dr4BXfTeIEJIlHSCSWVHUeAGBqKUzoiHX01PVTL903/HGI0LcelemPIil7ZDrXKapX Fxo4k6IBL2f4k+8Yy/6Kb8M1Q7Ow4r4sR7J+XvIxyLrUXKv1OQOITcH4R2sstJjHUGMeKecLI 5MKlL9yJTpOPaMLLt9TLS5W9IHVR9VhfgjitLdwRglCGVIuy2rz0YEammCp00ycMmLunPRn1S 4rgM5pmi9Ktmz8bhl7NTnh6OP1ICt90SaNAEwR9PCfK14xerRP4ssW5Wxvx+b1QfN7Vicmw5Q /L2vn6OCizLEfKa2WjxoCRsjpPh0G+8Q2So4QAUinnjxMAe+U0JEECk0G1TZjA1l2j

Afrika in Lettland

Die letzte "südafrikanische" Spam ging vor drei Tagen an mein Postfach bei web.de und kam aus Lettland von der IP-Adresse 46.183.220.52. Diese "nigerianische" hier ging gestern abend an meine Blogkontaktadresse und kam von der lettischen IP-Adresse 46.183.220.94:

Return-Path: nwaobia.a@hotmail.com
Received: from kli.klickfree.com ([50.116.76.103]) by mx-ha.gmx.net (mxgmx108) with ESMTPS (Nemesis) id 0MK4CX-1ZUo6H2cIX-001Ta7 for [contact@succun.su]; Mon, 24 Aug 2015 22:45:28 +0200
Received: from [46.183.220.94] (port=51626 helo=IP-220-94) by kli.klickfree.com with esmtpa (Exim 4.85) (envelope-from [nwaobia.a@hotmail.com]) id 1ZTx9X-0001YE-2e for contact@succun.su; Mon, 24 Aug 2015 14:11:31 -0500
From: "MRS. ANASTASIA M. DANIEL- NWAOBIA" [nwaobia.a@hotmail.com]
Subject: YOUR UNPAID CONTRACT SUM- WHY YOU HAVE NOT SUCCEEDED
To: contact@succun.su
Content-Type: multipart/alternative; boundary="xpqETbijQo4kM210nXPrGVrj58d1b=_MPD0"
MIME-Version: 1.0
Reply-To: a.daniel.nwaobia@gmail.com
Date: Mon, 24 Aug 2015 22:14:27 +0300
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - kli.klickfree.com
X-AntiAbuse: Original Domain - succun.su
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - hotmail.com
X-Get-Message-Sender-Via: kli.klickfree.com: authenticated_id: ogasing/only user confirmed/virtual account not confirmed
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:5vc7X+DBMQI=:UZbuBmH0QqPuQtlnRRCzwI0V80hf mkHDMZ0Ozt8AOo/ULGTa/zwR17LNgpp84w55zX99tKOF3qSuNmTHkQLxjJo/sWMTJVQ5fVAvO gXCdYDz5bFbHwmMFZDmiJyIMGhFVNd3FqQmby2Jt5SBwD6GQ8baGVCqO9t/VgMC63uJ0Z5qHs YFNio7ls9kfPjjmZmJAl88TARhZot+juYimCvv6vHK9BaQQ3al8V9DB1w+M4iOF2CQ1fBOLQN /RbSDJR/hJmBWtdnIbT0eRuz8iZ0J3VizmIF0fAvivnMZjAXyFQR+AOlJaxROURmDwHsv75l2 ocuLF0HszR90A9gyYk9P9/IFmjZ13Ibdl7mjAi2Dj7sohRcTcvHzCoCZTr5yLOAmjllm8N5K7 M71gTVcRKbmiSdtkPF57sSoBYLrSusJy8Ap2nKIBozwLRAKqR0Y95JL521Z641e/le+ZW1PB+ EZv8GCJ/zRrAnICB+PwAIfjAYshAosICvFcw7BnXZSmOvI+Go6Ex0uY3b0f0OSzfqTWFOpYS0 YL6quSn+6cHehRsFscNafNurKyE71GDLDBsg29aiiVWeepfTOs4rw4qv/wUQUgzSjHc2Nl5/v FrzqUK+twgeWSiK3y0eTYBS6CsSs9JXgGewBO+o0X4T5uG8UDsjhSaKoG1puhu9Eu6szNIzcg +MLLwiTZmJlZ1vqf832NVpzlUO/B2+5IYpjBGt0JniVR+MSgs/j7CZyEuf0LintI8p88UkhFT dPc1d8Mw/nD5jRJT/Nesc6/3GEeHld+4voelcHEG8lQ8xzVibDkKuyWnTrz8Wn6AP1YwMxtr3 xKsmVsDZ9fEdAzK/pL+6zDOSWGhKKXRCNoiTB6BP/Eb7PGLpj63+4HX2UZGUy7xa4GB183BoN QKwZpa6GadoCvXBgGJLVmzXMyYFhIMycFuROVcXVQGcBKFbLV63iSVvKb04ND6lk2pYmWlVH+ NkAjwhppsp8V1ZROClm+cDmEMa4rWBoHF3qh66CIe5jQjlzS6mTlV2qXUbOB/0Dmt9PY89DES YtSRD/twsSmYrTeoacJ3+nxpq8etem4upUdj5lCRD7f5PxsxDjqVFT7LOCA3ksanOpQqAoPOD eul1UXuUcbSwYFIzwFmCwCW25iSRxPIyMblrQ87759NV0vnH5MlUS7yunNb8CDB0CEMF28sfh XJ8clRkXG6MVPruF/wXMPhocSqN9JRl1PlqOw28TG8kVbbVQyGqQwGAAv+g1pMbzlNWoJDrv+ KrxibSxxZxq0VoXvoNJ/nFAdUdgcDmBnxwAPOT9hJth312dMp2HRjTqZw/UHD9OUZi/08x2y+ veiOiZ9PTLzKouc8MejdGiZ91v7MjJbPq7+D+IjYjGBajlbzIKCuzVoJOBi3BSAept




CENTRAL BANK OF NIGERIA

DEPUTY DIRECTOR OF FOREIGN & SURVEILLANCE DEPT (CBN)

ZARIA STREET, GARKI 11 FCT ABUJA, NIGERIA.

E-Mail: a.daniel.nwaobia@gmail.com

Telephone: 234-90-96471000

ATTN: SIR

SUBJECT: YOUR UNPAID CONTRACT SUM- WHY YOU HAVE NOT SUCCEEDED

DO YOU THINK OR WONDER WHY EACH TIME YOU ARE CLOSE TO RECEIVING YOUR FUNDS ONE THING OR THE OTHER COMES UP BEFORE YOUR FUNDS WERE CALLED BACK TO CENTRAL BANK OF NIGERIA (CBN) FROM THE PAYING BANK? FOR THIS REASON I HAVE BEEN BURDENED IN MY HEART FOR A LONG TIME TO LET YOU KNOW THE ACTUAL SITUATION.

I PERSONALLY STOPPED YOUR PAYMENT BECAUSE YOUR PARTNER DID NOT KEEP TO HIS OWN PART OF THE DEAL BEING THAT I USE MY HUSBAND WITH THE FEDERAL MINISTRY OF FINANCE TO CHANGE DATA IN THE CENTRAL BANK OF NIGERIA’S (CBN) COMPUTER BY DELETING THE ACTUAL CONTACTOR'S DETAILS AND REPLACING IT WITH YOUR DETAILS FOR PAYMENT AS BENEFICIARY. WE AGREED FOR US$350,000 AS SOON AS IT IS DONE BUT TILL DATE I HAVE NOT SEEN THEM AND NOT EVEN A CENT HAS BEEN PAID TO ME.

I WANT YOU TO LISTEN CLEARLY, I DISCOVERED YOUR STILL PRESSING TO GET THIS FUNDS, MY JOB IS IN JEOPARDY AND I WILL NOT ALLOW IT GO THROUGH UNLESS WE AGREE TO WORK TOGETHER BECAUSE I PERSONALLY KNOW YOU DID NOT EXECUTE THE PROJECT. I WILL SETTLE FOR ANY GOOD COMPENSATION FROM YOU ON THE CONDITION THAT YOU DO KEEP OFF YOUR PARTNERS AS THEY DO NOT HAVE ANY IDEA OF MY INTENTIONS.

I SINCERELY ADVICE YOU STOP SENDING YOUR MONEY TO THEM OR ANY BANK WITHIN AND OVERSEAS BECAUSE WITHOUT ME WHO STARTED IT ALL THEN IT WILL NEVER WORK. YOU’RE PARTNERS SKIPPED AN IMPORTANT REQUIREMENT WHICH I WILL REVEAL TO YOU WHEN AM ASSURED OF MY COMPENSATION AND YOUR TRUST FOR UTMOST CONFIDENTIALITY.

ALL OTHER DOCUMENTS TO ENHANCE SPEEDY RELEASE OF YOUR FUNDS WITHIN 48HOURS WILL BE SENT TO YOU FOR ENDORSEMENT. I AM A MAN OF MY WORD SO IF YOU ARE READY TO SEAL THIS BUSINESS LET ME KNOW BUT IF CONTRARY, I WILL CONTINUE TO SIT ON YOUR FILE UNTIL YOU DO THAT WHICH IS RIGHT.

FINALLY,IN YOUR OWN INTREST CONSIDERING WHAT YOU HAVE LOST OVER THE YEARS I WILL ADVISE YOU TO CONTACT ME IMMEDIATELY SO THAT WE CAN RESOLVE THIS ISSUE AND I CAN INCLUDE YOUR DETAILS ON THE PAYMENT LIST FOR THE SECOND QUARTER OF THE YEAR 2015.

THE BALL IS ON YOUR COURT.

REGARDS,

MRS. ANASTASIA M. DANIEL- NWAOBIA

E-Mail: a.daniel.nwaobia@gmail.com

(DEPUTY DIRECTOR OF FOREIGN AND SURVEILLANCE CBN)

Neuigkeiten aus dem Pillengewerbe

Gestern früh kam sie an die Blogkontaktadresse von "unannehmlichkeiten", 12 Stunden später nochmal dieselbe an die Kontaktadresse dieses Blogs:



Return-Path: bupyycnp@rarmelatio.co.ua
Received: from rarmelatio.co.ua ([85.25.159.20]) by mx-ha.gmx.net (mxgmx010) with ESMTP (Nemesis) id 0LsgwL-1YjsrM2Gyn-012KE6 for [contact@succun.su]; Sun, 23 Aug 2015 20:02:29 +0200
Received: from rarmelatio.co.ua (unknown [91.215.138.193]) by rarmelatio.co.ua (Postfix) with ESMTPA id 6B22C1301CAB; Sat, 22 Aug 2015 03:57:14 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=rarmelatio.co.ua; s=key2; h=DomainKey-Signature:Message-ID:Reply-To:From:To: Subject:Date:MIME-Version:Content-Type; bh=kqNCiFkgRydHGt5sAsk+n Kc3hKNUDRsgN4KyepgFDoM=; b=mIzZdIifsoWbbDahViaCpMWpLSivBeTHtK9/O AQLWqCfnCFBtl5lUi3OGk52fXMrEUF9jT7Q3qcsIIKeFRHMF2+3F+A5MHZUGJBy1 Y7MXzES1LiqoNrwuRi3r0cAi7UHildUmZT1dqwpuGAMpoVCV6t8vJzeu+X4Gyo5D TQpelI=
DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=key1; d=rarmelatio.co.ua; h=Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=Gi1ikVYIx9khxRM4qx7VkOmkzfGsJnggFfhRi5+ea7zMOYRx8Dxw7/IxYgUu53LgSQALIQ8Q7fR+FMq48ytyGQnhYe8inmLROT9KRniZF/+Mwz2kIGGXef80/3VdLQ+5KlsnHL/YUzyNuf9+RLaW1NEBv3F1fa9HEQR488JY9/g=;
Message-ID: [dd3201d0dc8e$a36ab310$a2b2d64f@bupyycnp]
Reply-To: "Pillscraft" [bupyycnp@rarmelatio.co.ua]
From: "Pillscraft" [bupyycnp@rarmelatio.co.ua]
To: [subdivision@lo8.de]
Subject: Hilfe bei ED
Date: Sat, 22 Aug 2015 03:57:17 +0300
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0006_01D0DC8C.4293F7B0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:Hi27wvEWttI=:OmwOJHvyObY+7GiCZjFc3s/K8S8d xfEAzxTkQonWXApNtr48ZQ+zqNtFhQMH2aNm5t0++CyG8O//+mIBiEuG/VuKKJANiyBu3syxd WX+61ntWJdgu2f9pqWWopL9ZjCvh7oyq43mD6YKE06xxdx4KdPBY13QhvdhvtcNDlxNL2+J90 TIxxI9AmOqHr9WomDpa07z4xC2rAAPtrqz89BCWgVazp8hqgiMcFycR0c14+B631UtLJNSkcq lvu0+yDdyshD0k457RZzNhm64ZkN/ruejJeq+CV3Qy4VCDwMBgwAliOEqrARYT/C2VFL7KsL1 Nzgh8Fu1bdcF2zhJkUN72sN09lT0IsnxmkDWa5ISKN+uo6jhN8IK0o5/u1+9f+j5IBFS+Oskp wVDb9HIt+6Fwa9aBR0uzps93q58bcz0h8Ns+126Qb9ui5YIZnVM91lxRMNOZSW1TGrUkYzq5Z aWWDpOLDUvUHpw6rK/Q3nQRfgg+V/AxbbL/f1EDxzX/Ggp1qKQRE/+zYpzOdPrIf/VImbXI72 xOCFlhAloPtrJ3JxWcwDzqy4XAwIig4IsbyzsELEWsibKnbpjQ7vNnMgg9t9nwUEtBwaeRDrl WP8Zh4n3vLRMQxo9QcKyM3gL6vBOJodJrLg0m8PJl3+JlxzDgK1xZjj19f5tKYyMeRJecH4b+ AwpCKajhYfT78wdFBCQxFBP3BpYD+7Pl7Rz45JEwK9BOnG8p5h1weuNOBiynrjm7Z4c6MrRKu GG04lKXwupaUiotqccmmSAg9tZoT4GrzZJ1WepiLID+gZl4h1YIcUgP2an45Nj9+nK7sYKTsJ adSqMADQax2h03QMwZYdoM7Aj/N7Nlbl1HvnMdCDBuiIC5NYBu4PLnu4OQVyhds6qbTb4Wb7I hItdsFLHMXzgoKEW+U6Zb6he5BXRzOTuw8l474Q7HhMFvfHePts8uYE6qNkIiyCkf8Ig1E+FC Cd/IRXEIDm6PHr+acRjSgPvq+6wNKmcVDnpdi0JM3mQrQ5NENMs9CSBD8lOcOXV2dIY3xGVm2 IZWuhAxmtTET4egIoz9L85tJ4K+ke6GLgkY/iPYQMJ8MyXUmTHzm3gvWCmP4AoPe/n3sRgdO3 O5MPlPmXCJkgSiU/tkW/ZE+4HJ9dn8Hvq2v8AiS7x8cX8fMLtLTSBDqiZgLZJkICDw2F67bJu v/VyFnyChdmjvrPOXV98zOFWh/mLtV3zgVnj9hmR/UjYDJerm8Yoyn+ZKgtOQXnCUxIrSRw/b Qdhc/xWCw9iUYCSh/WMOUX4kjQ3vrbpkVDKF+lpYNEvpQHyklg09zcgWEFFZtlgjfpFGU2nDa hFdBqgK+//zuB1WXG+TtnrNJIDRu0UJ292T0fYKD9zdKVaSgZOqycOryjd8ppB7FzkTdOMB91 Ly3yPHU56CcwXsTpCPFJmoBp8JRRqrJhoLpeAr+IVeEI8iVJ7cMwvs+GGLvclCNPcSa+YEwwj QfUYXP0NNFFrA83xSgKzo8Bk38Y=


[http://jacobse.biz.ua/]

Die Sonntagsspam von BGO

Im Gegensatz zu gestern ist die heutige wieder mit einem "View profiles"-Button versehen und dieser ist verlinkt zu "alinkante.com" in Brasilien, welche weiterleitet zu "frtya.com" in den USA, die sich von "ckstatic.com" die Malware holt ...



Return-Path: web.de.83010.MeinName@mta37.alinkante.com
Received: from mta37.alinkante.com ([177.223.147.187]) by mx-ha.web.de (mxweb007) with ESMTP (Nemesis) id 0Ma1hX-1ZB0iS1uYx-00LqX7 for [MeinName@web.de]; Sun, 23 Aug 2015 15:10:15 +0200
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=alinkante.com; s=s512; l=8471; x=1440929870; h=From:To:Subject:Content-Type: Date:Message-ID:List-Unsubscribe; b=bILxxA8g8reR2/vhAHxY2uem2avS 5QmxcN+swvwKRT3J7sm8gmqTOlEmMs661Q33RPQstWjzkBoYrPnrT6IwHw==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=alinkante.com; s=s512; l=8471; x=1440929870; h=From:To:Subject: Content-Type:Date:Message-ID:List-Unsubscribe; bh=PefKsX2SD08/vz W+ipHVYXHGdwQ=; b=hhJwaXgksIQMmp89i8WdEy+iv7yo8zRXyapLHF16mC+IaM LAlVclAXjzBj1zMdV1MW1ggH9eHuEQtyIbFGMvJw==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=alinkante.com; b=SxOxcQHyX31k5KkpcEk3Cj76zQH0ZSbBcPUzBbAdiKseEawpHvSYvPG5smI7qQvECWpaExkxDxWEfaSHed5YgA==;
Received: from alinkante.com [177.223.147.187] by alinkante.com [177.223.147.187]; Sun, 23 Aug 2015 06:08:28 -0500
MIME-Version: 1.0
From: 5 pending messages[6pendingmessages@alinkante.com]
To: MeinName@web.de
Subject: Sexually Explicit: 10 Messages pending from sexy girls.. talk to them today. Do not lose time!
Content-Type: multipart/alternative; boundary="-=c68c4b424f3700b9b56f6dcc7032e098";
Date: Sun, 23 Aug 2015 06:08:28 -0500
X-Mailer: PHPSystems
Message-ID: [1-83010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta37.alinkante.com]
List-Unsubscribe: http://alinkante.com/1/acc2.pl?e=MeinName@web.de&m=83010
Precedence: bulk
X-Admin: postmaster@alinkante.com
Abuse-Reports-To: abuse@alinkante.com
X-Complaints-To: abuse@alinkante.com
X-Report-Abuse-To: abuse@alinkante.com
Envelope-To: [MeinName@web.de]
X-UI-Filterresults: junk:10;V01:K0:xlV0A0b7Vy8=:p8506wrDg/uIYKgTjUwwzzUfSx8B 0unkWASEYc1926t1o2QhHxyL531yEravlnzP28VDkgh7vRn2jG8sBOxc8zUBjarF1ZI7GthmK 40TZ4zKwjHoiwHVr2jgqgMT2NCWyp58U0MsAeB0eLF3Il2eLgK9hQyaamLcg2w82yCKspHbNO YLaOJtLJCkC98Mdj5zKPqeBLY95Wp++FWinChMwII/QZDNbqOl+QFAO9hQdRn6l4vuEi55Lhp W8JaNjoyGCJlX8J2DejFh6kLuU9nVqNFBUVGjPARmp3defoIbgIFCo6YSZ4Nj+3xtrmj9rGKc zzPqKQmJkkn37qGTIGI2ZgcTUah+NWrYRCAie3wwfyBytC8rofOrfM7BwH9HJNJPxchXo1aYp ETvLyn8mbA2nSlCraTuEAL4OBbwAtrlu1LAO5DaqOqRcptc9UajAopYmAgkEvrPJVa6EnwRVf /+b/7bRbv6ocz1rCp6N8zti9ntg1YpaBNaVayH0N/VN6H/2w8KLx5OBt3evbceRvDmo5jwPUw xc8ioH8wjxtlngvjCkjcIBfliPnMXawU8kX08tEPdWf5ml0dMHZsiF1cdA5W20fclRuud5N74 QisdrO+DHpc3N07KRZQqbkzLTU0UjjtWiu0VB22uYqjS6IPo19I2xvqWnLz7mDBCjUJCUklLw BGzy2pKgbuzdfBEBAOCMuie1FtBdXGnQbBCN/6QWLazQRDfR1AgCNVPPcdiX6LhXHxXYG/KSn 9T617g97HzkRyEKMTmDWyC5zQWCfISDecI7xULcAA9zoqTCVHOksoHKBh7v77Z0lA457ek9YM wwl5uvJClu1Q/RU4NHXmMaopxcWXshcw48g2OjOxVHZR8cLLbCRSo9Fq24SLAZM17lCmAcdgt wyzAeCiOHChHxQer8XKBIi4kexWVjKcTXz4rP2/1vyDL+WETfnugnGDglZhh1YesR5OCNv9F2 sl02WWhge87Vovg0O1F7EeSLUzR+wVvJ/khuga2AfjRRFGQZO1DLj+vkVtReVMfzMLyBqrjE0 bX5ifjYr0Z2yYEqSXdQiIJFFwALB/L233gREzn13pKjUzRhBLbYgIxL1fK37hBlFJaUoav5Wk K55m8/MWEOSa3aCiV14d6YTH7nDYAShR5zOZP0yzD+57ChDhW/R5GSzjITdxo8ZLlumqv48eL /dX61pW2PlpiIHzx6XIw612GpNfEPFoueqwpHb9AqarqD4ow49nbgXRM6RWYPHiwP6j4YYu8p AuH2D9eNcthE1RQnGw8Lt1/YGk6XL2u3QjcSC88cmxoxnTF+DI6RlRE+XMsuqPWYe1c55jHdH 7OmWZ0yHdzV8wnbBaXmLHkkEtz1q9pppwfSRdD8EzJTklIXRy79MkFyAgGFIM0s/2OrR1ndEM JGz8+/SaKb0HYDFBRZllTv0RxEHYQfC3f9W5CzllSmj+gcMv9eArn7GrJYTj9vAMLEC/OvTuc /z+3jEnT2pr+AmQpyNWlYW75aavlNjIcNIEAV83KwMCyLIU8QetPS2EUZsMEPtPcE2PlRfusH 0fWa4vEqO6uxLYUAsD9VMU8FKd5TpZ1/oecpnVMkz1V7wMkrc/D0bVprEU1pA==


[http://alinkante.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=83010&l=0.]

Zeit, Geld und Malware

Das jüngste Machwerk des Projekts 95 nach ihrem gestrigen Spam-Gewitter ähnelt erstmal überhaupt nicht den bisherigen. Man sieht keine ".ru"-TLD, die Spam wurde weder aus Südamerika, noch aus Asien, sondern aus der Schweiz versendet, bei der Absenderadresse fehlt die TLD vollkommen (die Domain "vl01s22" gibt es auch nicht, wenn man .net, .com, .ch, .de, .ru oder .su dranhängt!).

Dennoch führt der Link wieder zur Projekt-95-Stamm-IP-Adresse 220.164.140.184, wo man, wie schon so oft, gleich mal die Malware reingedrückt bekommt. Von dort geht's dann weiter zu "de-doityorself.com" (IP 192.230.77.44 / USA), welche uns Anfang Juli schon als "doityorself.ru" vorgestellt und schon damals angeblich von 32.890 Leuten bewertet wurde:

Return-Path: root@tomcat1.datalife.ch
Received: from tomcat1.datalife.ch ([91.204.170.37]) by mx-ha.gmx.net (mxgmx011) with ESMTP (Nemesis) id 0Lj5nq-1YuAcZ2ruw-00dHv8 for [MeinName@gmx.de]; Sat, 22 Aug 2015 02:41:21 +0200
Received: by tomcat1.datalife.ch (Postfix, from userid 0) id 83FDC13300; Thu, 13 Aug 2015 22:12:06 +0200 (CEST)
From: Sandra Baum [promotions2954@vl01s22]
Reply-To: Sandra Baum [promotions2954@vl01s22]
MIME-Version: 1.0
Content-type: text/html; charset=utf-8
X-Priority: 3
To: MeinName@gmx.de
Subject: Hier kannst Du Geld verdienen und gleichzeitig Spass haben!
Message-Id: [20150822004121.83FDC13300@tomcat1.datalife.ch]
Date: Thu, 13 Aug 2015 22:12:06 +0200 (CEST)
Envelope-To: [MeinName@gmx.de]
X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:kJnHwqFKROo=:O35Kp5yTFKYBlC+JMTtsLn86cRqP KOZVRehYWGK25hYlxTVTM+q3A0442hf9pnmZjKlHPLcwFOt6eq5hTK/T7jB5nOYEaTOakZrsL VCn1WMKx4pBVWx2p+wSEuLYVa8EMXD2XYH0qEu0arb3i/hH5JyrD+2Nm8vQjNTWFlXIXtChto 2WPQ4JH63oJoUedtcrrk7j5+BVpVoG+5zoFFKVmWhPcpLg4m2wSsuVuHke/xOm96jDkNaFrDb d41josPGGyz+MzawtTmn1j4hkcNUv3AwTDyBZUfAiCq7LyanduAh087dsP2uy+YySRzLQg9YS oz523NFkCL7DuuN3VzSkMAoUCELjAhR3YGgsX/WT8rEUNVm/V4gy9AzLoO+Xr+ippimPkCtxD VdGpAVIXJy5KuK/l/1psmiHBP6IC67dkfSAg5c9fY7ES1rOMP5LfZQT4W7CD6lReYcFQ4FVjt Z0ZLIL0prQY2wOEIUy8ee+avmZlKbzLmgQiUvH0SuH1amfn1iUsUSpcW1gxIhW5+05ThRcf3h 1yHmgcwi0CtTnWcglmN+rLBI12PBOfl1338EZHqMhtlM/FNRiU6bRySwu0KstlklntouYnqpH Vym/GwFfRIMwme9fXaq0WFZvK20Xwu9+QcB+8AHBUcp7IljaPVZKgHzPNwk/6acsTOzx/JtCV CVKMlJ+u9ER9+denUi4EShiVSvhpw3VH2ThYraQoWJwDQQeY152Ne8sqKc15J9/rOSP9SKHms N1yBN0nvA/Y4jGRImjW4ZzOoxniLRo6WMJly6JI+deiuu3kXOCycz3k0ajw+3z1pXf7iySN2x 5t6rcMuEBliOASFfYUf+dCbSuMR/Uc7jUi6FD+SpxskDYlVlfoWukTnn34wRd9AYLbnRMzVX5 Pk7HdKKQX0JMkQRRVIx0odImBIzqwpdyx2czSirzfEhcClNUnt3DAu81DAkCTuFvPNuH4etyO LvffOYRTjQIMkX90DxnsobsHcxBYkV8GBzndhddX34hNqvL4GmRgk5U5JSAd/Eutr8I4xtpqo CNA2k6n9batUlo1Mx3Ob0hdqZkmNaZ+5eRQkfIK9g0cwQCKuN9/97RHqy1FvBJQBHTYnxNejX Ku2EQfuMUaBVmgdMgCiX2iNntwBFZCL49Isn+BQzhRIVA/u3zZlqyeuiYZh33TC+67WYchqLF HS2dJiSkL81d9ApAPWJXAG0DKFKwcwXe4Wr8WtD7ktVg27IfdIvvqmJH7mqOQsAR9NGpxwLBs EUW6CcpbBn9OUDl34y2S0A7nbkYrrUBWnEC1HghwxMH9rak9eMco/IJEFyiYLSbqERf+gSxm9 vKYNa13Vt53OZLVH6XeoYkXvpserSzgwJPxlw+m0Zn+tVXpMA/9BeEhmo0uh1Y25xXN2jWlzV LYwhNAMD+0ZCOWZ9dBa3Oain9++DW4ndc8Z1OlhZjPdEkx+kI9NfXgz0QAR37wSfinRjKdJEA RRBGCik+cx113RuEFcdUSdQhmfQMtkHj2C/LGyruBK6Ej2FsDaXj1dV/PfgGe5ARzjA/c59vk MqIz153a7JutDTtOc8=


Wer traeumt nicht davon endlich reich, wenn nicht sogar stinkreich zu sein. Keine Geldsorgen mehr, eine Weltreise, Porsche statt Polo, die Traumvilla etc. Zum Glueck ist reich werden heutzutage nicht mehr so schwer, wie noch vor ein paar Jahrzehnten. Schau einfach bei uns vorbei und lass Dir zeigen, wie Du Geld verdienen und gleichzeitig Spass haben kannst! Hier findest Du direkt alle Infos[http://zeit-und-geld.net/], die man wissen sollte.

Alles Liebe
Sandra Baum

Die Presse dreht wieder durch

Nach den letzten Spams des Projekts 95 von gestern nachmittag kamen bis heute mittag noch einmal fünf mit den unterschiedlichsten Betreffs:

Der Inhalt und die Zieldomain sind dieselben geblieben und wurden bereits auf "junk4us" vorgestellt ...

Nach dem Kredit gibt's Viagra

Gestern kam von der Apotheke ein Kreditangebot an die Blogkontaktadresse von "unannehmlichkeiten", heute wieder eine Viagra-Spam an die Kontaktadresse dieses Blogs:

Return-Path: etifruwpw@intensives.co.ua
Received: from intensives.co.ua ([85.25.13.96]) by mx-ha.gmx.net (mxgmx007) with ESMTP (Nemesis) id 0La3Wn-1Z31zy1OM1-00llG2 for [contact@succun.su]; Wed, 19 Aug 2015 08:59:31 +0200
Received: from intensives.co.ua (unknown [91.215.138.193]) by intensives.co.ua (Postfix) with ESMTPA id F3871A4500A; Wed, 19 Aug 2015 06:50:22 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple; d=intensives.co.ua; s=key2; h=DomainKey-Signature:Message-ID:From:To:Subject:Date: MIME-Version:Content-Type; bh=46oakPRgdavxWO/7BO58tM+sWR8Sdp/+8r ltPK7nO5A=; b=dVQ1SO7FaNTzqM25TRm5AVmwMPKfguLaq8OUUMebVirvwPd168 VXWW7xenVJLOxU1ds+F+xtSBu8m5z6EI2Ee8HqrlZ8dPZ3/iLgDMwLnAx6OILo5X 0diRixAmYIRNfZgZQgmpojW10zTtbaNX2AQdBGtxDlg6vO6Tz5b9xSxn0=
DomainKey-Signature: a=rsa-sha1; q=dns; c=simple; s=key1; d=intensives.co.ua; h=Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=jKx3jydbjr6z6v3zFbZDveTL99gzFc+uUPd4yDflXUI4GyNjC7yDspreKthOrUZIn4CsMx9kMabOG2vzRcyAegaCDuT5M5RZabwdAIRj9Rne1108R5DLSENArVcMkkX2VuuotyaaYIQlzwAmbb/Ha1HqCHxPU9p6fssdDiiI1oY=;
Message-ID: [6a4f01d0da4b$54cfeee0$909d5ecf@etifruwpw]
From: "Pillscraft" [etifruwpw@intensives.co.ua]
To: [subdivision@lo8.de]
Subject: Hilfe bei ED
Date: Wed, 19 Aug 2015 06:50:27 +0300
MIME-Version: 1.0
Content-Type: multipart/related; type="multipart/alternative"; boundary="----=_NextPart_000_0006_01D0DA4A.C4E63280"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 14.0.8117.416
X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8117.416
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 5 (nemesis mail header analyzer); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:99NijcsSgeQ=:n8SRvwscHy5SJlwMRbpzVQtbKZib UeSCKtWX/ZRjcaKKHoDc8K7d0RjiYtrvh1Ufc4YOf+t9KEIJDV9s4OiMerH8sogpFegKzmsIh dpMXyZSQ4UKf8xg7ciPE1w4VceGcQfXdtq/7Cqpe50/18qYOOCJqrpA9wODjT0/STtuBd3wnl 3BzFFQzKk+nbAxfbcZPUMf3yOO4dV/nyHKEzB/7cd73/JNf9isqhgjNPLgXdN2fZKe/hLzWhF lKhYsPwEd9ZMjiQdSXUOVJp4TPoAnl9fYq1kNidahmEw90IEjDXOnT13raPINh/OZvFHEF1K+ vP4BmzQcbjF5pSl564Pbh2dCf+HCsn+zy98JZ35mKc7MITFMtNu1rv71oG/n/7cqj06nnH3hp iZmOSuaFZ+otYapcIQlw+n2GM1kZQs40TKq0EB24Xx/rmVNuWBnJiPdbs6j/kN8cZ1Hf4nhT7 5qTlDiLzowo+s5rH7XShapaRcRLyHSt38L92uBTUemuqSOePrJWBohZuIDsyE69Kkm3+n9+5J tELO/msznWp1+c4QKsX7TnmuDZrE2lfPQY09Kvpi7WGqp+VqzGwEVtekLM6wSAeJ8Ig01u9hV fUck8emAs6Rg5ZJaxIDtdOXcHTgtdaaRr10cH++POhb+hrkScvuVux0GBgfQcsNnz9RbLPIM/ vkufhoWg2D3Rtc+/cR2urkZ/eVIYH95QHmr6aMVlrIYQ41SLtxXVZdbqxsS7SI/yRatRLSe5o 7vSrZAZw/vTQm/hr7N88KkUU3ofk2vHu2Bjx8ZxkDY4GEgRKeGc7/yiTHOLXyQnFSdEFtGoNr ZeAX80Ki84nbd++Uv8iSpe1yh2ZlHEzjSpIUT/VQhHzJnCArddX2BpyBLF9GHWObLe2f5e7h1 gfCbbJUgF26oLoGmNEoVUxZI4HASX5GH4BLpUDpxZXr+iwutSaHpNGO9bem6OrFP4arnoBG9A PZ4VxyRO0VizZrlEJCWdr3qmOuxVVrm/RPFPM74kO1vvTRVkMSGqDtwXMpNRgxzv89MsYVvWQ InaPBK1+bdh+Ivq6slZmwuVHx+wN65TBmaIeXH6wCe3ohooedHkNdZh6q3VSYhR0fZ8yDRx/2 aSHXfVAXinoXANpfTaMMaz5cem69PO/WBFwOcfxGXNW1Ta7RI333B9ZG7uERYF7hoXHJ+3EuO 2hV7msJHB+OUMFuUjAfsTqcyA3+8WCXbMvdb4cSyH0GWJXsmGbEaEmQvWHAzvYYaTzcrcSayZ bOfq5PX/I6k2+shU+qo6xBCgMNurRO1W0BCYOmYCu+UbRPkIas3PFcccuXzCN1tLT68kM6Y36 /BerHHS2DtJk4uxv6MHqFhppEGnU0hbFYFRJzwRFhzQ6820lkoGVEEqP0IgaDtndP1c1652VZ vm8H0mAHwHSygj9Gc8gj4AgpelCG2aatvfgZtE/oEan+jdkTF8i19hwta+DspPsHCffSnn/75 /9wBCLWKf86K5a+pLzQ3mHTSzfI=

Hilfe bei ED[http://ingermes.co.ua]

Hallo!

Einmalige Aktion!
Bei der Bestellung bis zum 22.08. bieten wir 14 Viagra gen. für den Preis von 29 Euro an.
Die Lieferkosten (Lieferung aus Deutschland, per Einschreiben) sind innbegriffen und Sie können
den Betrag erst nach Erhalt überweisen!

...

[http://ingermes.co.ua]

Nochmal 6 girls

Wie die letzte von gestern abend führt auch diese Spam von BGO wieder zur bereits vorgestellten Domain "ertya.com":


Return-Path: web.de.98010.MeinName@vmt15.twodoorcircus.com
Received: from vmt15.twodoorcircus.com ([177.223.155.16]) by mx-ha.web.de (mxweb008) with ESMTP (Nemesis) id 0Lp49U-1YpIlz00yC-00esgO for [MeinName@web.de]; Tue, 18 Aug 2015 12:07:23 +0200
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=twodoorcircus.com; s=s512; l=7309; x=1440497360; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; b=jpzfV2y h75h3jmTXJGm2yg3NZnP+cWw+qw+jFFxRSIZVBS9anRpr27yWJENJNjPRKgb16qd fcxfkVfCQ+h7AhA==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=twodoorcircus.com; s=s512; l=7309; x=1440497360; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=kZT869 Heb9VPSF7t8vUMF91mUPA=; b=oIxao5xt1FUs8HQXlfUjlBEJrFTwguKlBK6zlq j3IuW4wGQkYNTCWU5JfYnMiOgiV1nWdeHcxSUHHuT5AF0pew==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=twodoorcircus.com; b=av4fsvOP24SQo4AQdE+hUV2EfBoFKnfd8zXTRRPqAIa5dxlxG79IugguBPncA/CAn0L7bVRLNaypB58NdReroA==;
Received: from twodoorcircus.com [177.223.155.16] by twodoorcircus.com [177.223.155.16]; Tue, 18 Aug 2015 05:19:04 -0500
MIME-Version: 1.0
From: 6 girls[6hotgirls@twodoorcircus.com]
To: MeinName@web.de
Subject: 6 hot girls want meet with you.They are HOT:)
Content-Type: multipart/alternative; boundary="-=e4384c3e35422d8211b4b94bd5e274e1";
Date: Tue, 18 Aug 2015 05:19:04 -0500
X-Mailer: Solution Systems
Message-ID: [1-98010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@vmt15.twodoorcircus.com]
List-Unsubscribe: http://twodoorcircus.com/1/acc2.pl?e=MeinName@web.de&m=98010
Precedence: bulk
X-Admin: postmaster@twodoorcircus.com
Abuse-Reports-To: abuse@twodoorcircus.com
X-Complaints-To: abuse@twodoorcircus.com
X-Report-Abuse-To: abuse@twodoorcircus.com
Envelope-To: [MeinName@web.de]
X-UI-Filterresults: junk:10;V01:K0:SWFuOw4UEpc=:yOCyAUFUvmM6EbECo3musFtVM9Xv y/YStb/GBEWC4nwYmJLQczXAaLTHJbPVs3gSzqC5RMkVP01gMU7ugPeAoeMtC/7/GyxSGydmg aIn6GuEK5l0Ho4kacbTf9e5tLgW7T9/bdL9Htjeprky6iN6SI+d+BwooaxQIAaIIqr/C5f588 6Qt9hyFxpNq1lArZD/4ynlTnP3iRsgxbkqbbXCOAQ1nkf9u70eWr174vLLh8cIiRWb39KkIvj PVe8IXOQ4shFOJwTvzAu+Q4pMk8Ju11M15DvsciELS7yGqYNP4H/sgxcOcVPs2fZplUvqE4DE 2lDAOAw9mRfrfAnT4x6v7kQBYLYYLbqGHijASGRWdSEqwd80Z+rbTiEvdjSJJ/rXmXv3zU8YS M4i2r/KaPvpxK485nicGzXx7uSmyGJDMBlZL9rOnEYHuGMGa5NPANXpYeYbgvvkERbEl6DIoy tgWoxixEvD4dlfpLpW7INlE1fc6CkU2/nQBufnyQPwm+aManSPzPmZHxzpooALAVf3tg2eskV +O0C5Mm8l7mFVxSaW/cAd8mvrvUiBPPfU0FlLwu4HkFEhpRLJUIOuQP9a/OjEMTFo0tD3fr3G 6nlCF7+IJznmcUmTDly+uLVjpAxlH9Kddz3MTrKb9TnNIhuI1ZAIEO7BWFcpCwKOOOx8ZQoLb kJgdP6gAcegCJeeBLOJqDDIfynLu6PbVd3tAdF8Y6RmHY1utX6k34/DuBPFq9YQatGMq3xEWN gvPw8Kca10RCmdQyQSIoAlG7ZeCmp0DQMxTzG+phcK69PJ3sbjT/phwgZnbChbLQJIQxtLpXk Om8/c/O2u0phSsN474PGdGddwW+PiVUSt3s56JfCN2Y8r/+drOAl+erTSsyIsLIX3LOssXmJT mbA6+x7+Ppk91lC2bAZOmSFfGNAj9hlEEBqu0X5PxMN338crqJT3nsrUcg+gT7yOr7nJuAYui 0OLaReXKXQpBzgnbZaMkF5BGqTDSR64siN5RtughPkCfZB/ZIP6XBViNTkAFIfAicV4l7DEsA YMJ0va70ylMpL6F00c0o1fzqNSj5rVVWaTE8oT5bhmYcnTCP22OUgbq/tAFAWh9Ey0Qdg+LbQ Vuxm+b2XlPqxmlGrqvyTJSNUaZUCuBrlrCGjRmj8JPztID8cKI2XANJxSoLEwL58MNtlZNQqb 60rIE3aF2FL3nYcuFZTBfIICW/bHZAj4klTK6JjL/Dq2HDUEOUcHRo8yll0iqBG/mm6AMaU5E BZ3Kwn0+l6vpVsMtPkKctU+7Eng7eFU+2LkicFCT1uemAPMxQg1YZEoEkaRG6VvVrkKwwUxeT e1Dib7PJ+0su+ImTbhkTtuxWUZBMlEjyrEG8RGws1fQFgT18oHHzNWvkzbhX7juHqJBPtHjL9 Z3THopIHNkY5FUEZXDFdchZ0CFk2VmQ49gw9DT8z1tjG8ruwcewM7n1Am/4rYK0QQAJ/T9W9t 6DYNb/eydxb0F6KGaFNUAIY/Gq4bUQyQ8JlA8x9mSIDZ4ppEghUiat//XJ15lxgfwOuoTwkHt xpYOd5o/yewWphF1uvpOkiiQJA2USR9s7V9zTRO+In2LAyp196pnv++fIz8ohalMX8SwtMQpG kB6gTp+XQ=


[http://twodoorcircus.com/anigea?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=98010&l=9.]