20151230

DirectPerform™ Inc. löst BGO ab

Die erste Spam, als deren technischer Versender sich die sog. "DirectPerform™ Inc." zu erkennen gab, kam am Samstag abend und war von der Thematik her eher der I. WEB LTD bzw. der Freien Verbraucherberatung zuzuordnen.

Gestern abend kam nun wieder eine von diesem technischen Versender. Es handelt sich um eine Casino-Spam, also eher die bisherige Baustelle von BGO Entertainment Limited, zumal der Link letztendlich wieder zu "mrgreen.com" in den USA führt, einem lange Zeit von BGO beworbenen Casino.

Bevor man dort jedoch ankommt, gelangt man erstmal wieder zu einem Server südwestlich von Bad Wildungen, nämlich zur IP-Adresse 94.249.252.131 (GHOSTnet GmbH / Deutschland). Von hier wurde die Spam auch wieder versendet:


Return-Path: [no-reply@vorteilsaktion24.de]
Received: from mx034.directperform.net ([94.249.251.77]) by mx-ha.web.de (mxweb101) with ESMTP (Nemesis) id 0MMDBp-1aLyUH1Nmf-0082dI for [MeinName@web.de]; Tue, 29 Dec 2015 22:39:44 +0100
Message-ID: [09F3B99FA377598A56531AA6B239A87D@vorteilsaktion24.de]
Reply-To: "Vorteilsaktion24" [no-reply@vorteilsaktion24.de]
From: "Vorteilsaktion24" [no-reply@vorteilsaktion24.de]
To: "MeinVorname MeinNachname" [MeinName@web.de]
Subject: MeinVorname, sicher dir dein Willkommensgeschenk: 100 Freispiele + 350 Euro Bonus
Date: Tue, 29 Dec 2015 22:39:44 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="4a2d7e83b9ee36fe2c562c0071d5"
Envelope-To: [MeinName@web.de]
X-UI-Filterresults: unknown:2;V01:K0:u1d6xz/P6pE=:O/2Bz88vmQ8uyrjZvAPKBlh2Yr 6hXcyNsZH6sjGpbj1CNQYJdOHC3+NVRsfJ+p3EKjPornW0BF77x+PO1mXyFI3DYBDgH9zgvRj v9qKMuqJiaZ50O0jP++RgL5dew4enR1PuG++Ro+azOI75s4rygiXWIKVQcYnd2QKFjPWeO7Pu fBsIFZu587GvIcgEpXft8llwLkGrhieMr147cE8fU1DepKN1yLlYi9dnkHisZ9S1m35JPUkeb kj9IkmipdOwDmN54G4uAsQsxrJN+/1nfPRYXhZSWN1Ij/HwRWDzNsp2nxAHn+hvvwn6mNYh87 mZkpJ94BeYlwk+bXhaosEBgk4OQ2Qe8KlsfxRKjWIT8J5t8wxUfelTJ4VbNttFmpKjHMuWJAr yCBWCOy7PKjbk4gDAqSZJNzrkuIybvAyRW1ZCvY5JpemFs526A5ewHcTqAXpJu5HQYkSYYJF0 hQK2vVUfKR9JXjsj4BJk/MJtGoPWox0fIPB8pYT1z65ncmVaqKNd28O8dZ1LvljzDZl9v63K1 XOY/OKHhsXaE2ZAjAT2B+om4nxdCnDiROPLUmJT+p8rcMJ0+ZgUxA+6hgtKvANqCOWIbWJ9SP s/jptSLBjWCIaBfILxwpg89lmy2Wj5Pv58/U4vVnFPirgfM9WAPRvuY/3yOM60uYEWLgPlLn9 BVY+YO+YHnj+74hGhBn51Ir69Jy6URxnWUsu539MZPimoTM7+GR+XtiZIv2N/nCAV9qJONlcQ kKi29CgMKL1tAJouaRMuvsG8wb4zA4nBJDjhAcmY613VAPH2eY5Gxfg5hvJ8P1bZVlQG69twb Zfg/u8beolytUwbhIzZSPQ2gTSQ33XYpkP54WBri1El8blfB/6TAtWwE9XV4q7pmuD8yUAzT9 +OvObJvU/oxzTbfdwnn+m9cKmQreNbg+NRV2mzFZiwlDgPfa1XO/e5FJOK4Khm88VAKQDSg83 I9YfYOp+qFu9wmaNwHVfnFqayZvea/gM7nCbYg6zZwFOduKQ4Bkfu1mBBKt/RgQq+VK8eKnwl F0mrsq73JSUsrZJkLz8PXr45CFo5QpQ7UDrUqjvlX3k2jbWvpbAS67ESiwxUx6zQVVjEf9QG9 fmEuAqCIRGEaPgXaUANv8eHDHCKi3Mqf2/Iv3+aM/OYabc40WAHoFGEBF35mxFwfazS7qxW6B uf0GUrVSbabkiGoBLh1b3fknKz6y/zUDWaOws5mTjLVPQALHvA0Xcxfm2MW9rwyELKd6UjdjA jLnIYjtsvQclpF+LOl7nNYJ8oHDdHPt9of3PJO1e/GSrGtzW5GKQmTtS2n6nOaOWaYpq9lpBS Q1JyA0Bf1Z8CaNAElF3TjN5gWMS4wjp9qesXHxdhgaGfWheYshoiBSIfVd3qbg5qADk5BgJtm J2WtGGNj2X5QrUfW2HlKBrL5L0bvU4flHK51+4WJqRkppjkQa8n2VMKJKNvaVv14v7jNyU3Ep J9Ldo9/Sc143uEp6ngYi+9zoo5lI67EPAvDIE1ea8Pu6sAFtMGi3oP2Hu+GDst6sgRw87kQMa AUeQSGpy0atUlMmiLWzkrkgseZULcQFPrfomqIQuXf6MwurzfG/4rKnZJSDOOQQdxE1RevG9P bAYWjK9VPCdzO8HG+by5YStUXZo4av3pylEaslZ9pJ/4A6Qwqd0+Z45Y/qH8mgNIo+fOllzps S8=




Sehr geehrter Herr MeinVorname MeinNachname,

das mehrfach ausgezeichnete Online-Casino Mr Green schenkt Ihnen 100 Freispiele + bis zu € 350,00 Bonus.

Registrieren Sie sich jetzt kostenlos und lösen Sie Ihren Bonus sofort ein.

Mehr als 400 Casino-Spiele und Jackpots über 20 Mio. Euro warten auf Sie.

>> Jetzt 100 Freispiele + 350 Euro Bonus einlösen

Viel Spaß beim Spielen!
Ihr Mr Green-Team

» Jetzt Willkommensgeschenk sichern


[http://www.vorteilsaktion24.de/?campaign=mg]






Hinweise zum Newsletter:
Sie können sich aus diesem Newsletterverteiler selbstverständlich jederzeit abmelden. Wir nehmen den Schutz Ihrer Daten sehr ernst und führen Abmeldungen täglich durch. Um sich aus diesem Verteiler auszutragen, klicken Sie bitte auf folgenden Link: abmelden

Sie erhalten diese E-Mail, da Sie sich auf einem unserer Portale oder einem von uns gesponserten Projekt mit der E-Mailadresse MeinName@web.de angemeldet haben. Die auf den Seiten jeweils hinterlegten AGB fanden Ihre Zustimmung. Sollten Sie hierzu Fragen haben, so können Sie sich an uns wenden und wir werden hierzu Ihr Anliegen umgehend bearbeiten. Bei Fragen zu dem beworbenen Produkt wenden Sie sich bitte direkt an den Anbieter. Bitte richten sie Ihre Anfrage an abuse@vorteilsaktion24.de .

Die DirectPerform™ Inc. ist technischer Versender. Regressansprüche gegen die DirectPerform™ Inc., die den Inhalt der Ihnen zugesandten Nachricht betreffen, sind ausgeschlossen.

Mit freundlichen Grüßen
- DirectPerform™ Inc. -
2105 Madison Avenue
38104 Memphis




20151223

Kein Spam, sondern Bla Bla

Attention;

NOTE: If you received this message in your SPAM/BULK folder, it is because of the restrictions imposed by your Mail/Internet Service Provider, we urge you to treat it genuinely.

This is coming to you in regards to the recent meeting between the United Nations Compensation Commission to restore the dignity and Economy of Nations based on the Agreement with the World Bank Assistance Project.

This email come to those who are yet to receive their compensation/inheritance/winnings and who have been scammed in any part of the world, this includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or Compensation payments that failed due to Government problems etc. The UNITED NATIONS have agreed to compensate you with the sum of $4,700,000.00 USD (Four Million, Seven Hundred Thousand United States Dollars).

Your name and email was in the list submitted by our Monitoring Team observers and this is why we are contacting you, this have been agreed upon and have been signed, so you are advised to contact Mr. Alex Bates of the United Nations Compensation Commission, as he is our representative in the USA. Contact him immediately for your Compensation payment of $4,700,000.00 USD (Four Million, Seven Hundred Thousand United States Dollars) which will be released directly to you in accordance with legal clearance and procedures.

However, you should send him your Full Name/Telephone Number/Residential Address/Gender and Occupation.

Contact Mr. Alex Bates immediately for your compensation payment by replying to this email or emailing the address below:

Mr. Alex Bates
Email: unccpayunit@uncc.twomini.com
Phone: (347)-796-1552

He is obliged to give you a call and treat your case with utmost urgency as soon as you contact him and fill out your correct details including all reachable phone numbers for him to get in touch with you via phone and email.

Good luck and kind regards,
Making the world a better place!

Tamara Tomlinson.


Return-Path: [info@uncc.org]
Received: from s17417007.onlinehome-server.info ([87.106.230.75]) by mx-ha.gmx.net (mxgmx006) with ESMTPS (Nemesis) id 0MUUGR-1ZlfKg19oh-00RJe3 for [contact@spammirr.or]; Tue, 22 Dec 2015 03:28:45 +0100
Received: from [192.168.1.107] (unknown [178.209.88.99]) by s17417007.onlinehome-server.info (Postfix) with ESMTPA id 118FB25F40; Tue, 22 Dec 2015 03:10:16 +0100 (CET)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Your Payment Notification (Urgent Update)!!!
To: me [info@uncc.org]
From: "UNCC" [info@uncc.org]
Date: Tue, 22 Dec 2015 05:10:13 +0300
Reply-To: unccpayunit@uncc.twomini.com
Envelope-To: [contact@spammirr.or]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:/WByHBwc0kg=:hsL7dtqq/t6VJHsYdbEtXkU+7Vv0 yzlqqHzoPsZnRBPUpf9DihjHNGZR3j4IXZ9bsr5+FwaNJRrpXl9stPCQbMtIWzoVp2jEEkHOE LFFNf/lDNnUWqMFSLFKgnt8ASYEVsWf4fsLGpMQRjHU72jNawRah1vIdxnYUdkxLOvg1HKxQf no3IG8nirXQSVxpWhHlSBfC5Z1IUa8UXAlZD/BF508eH3DATgXYrPbZZDK4sy2+23yVF1W93D YZOEh+70eB3gSlpnLHyX+D9KNV1RhBhrTmfI6X9sHo2Tdoc+ia0G/Z4GCc7menij4cUvMwYW1 vfKELGZYzRgkMv0ZZEKNifPtvd5wr2uj+Id3ESRGs7LqSldTPfJLnF64oJRx1BuhG4eeaNMuS 1RGenUT2eddbXmNsIDXeGtVw2Xr4s5qqsINhMkUPfaJFlLcTZugq8Pxjc8ONBD4JYDSl2fOJl 1a8t2yPnl41gA2wEsaKS9WjQx6AkJj+i1WPQQfcNEvIcs6SBytXmrtkk8YAbmbA8aLSwK9Ezz gan0kuqMoM+U0QHwXIbxlhSdc5beXseeqW2kFUVma7MDodN4xIDj5YyN6qgQ3v/ymgfM2o8io Mqbwa7ncl8Aygec67fg7uxdsdxVYMo1kTYna4RyvM8Y9HyWoCTzoEpt4faY6nTbswLnqB01zg 4F7fJg7MkGRTy1mjDCt3vRMQlLjYZcvQnlJ9KmGcGlRwvKOnXswkA2sddkIm1QzacSfM1GwTT Bv1JUbk59nFe1oZcRyrJJHf3Ha3O9hrdfvbzYBxUTJHhgScC9SDFgIo8hVCDQX0ZINP9YxICx mFU8xGS05qrNB2bzvgeXaF+X8BbiEceX7MO+dv4im7UCIieCnVobcuq6zyCxyeSQaei4sgDMB Gsqz8TXCE3iEilYS2DuuTvoERlZc9GfDmvLocyZAocRoHufuGTFdpee31sd2U57f1C/AZ+8K7 EUqUm4QzpJXg5LXKCyS8XtMH3RUtoEfN4Gvl36QEXjPTxbUZp6YJ2xUOkkYnT2X5ilFoYAGvM iCnE3huBJxa0s8VkN/OJxFTdbBryCcAg8nbpud3CKSDsoXZ3PkiEPEaAlBnOMjdIEoJYyPvFP QJRuSATz8wPSSuElPpHF3lmkNvvkBloZVqk/9aWW0fdJsWM95ekK5wMIax5rxSe1NdRgVa/Fb yZr9JyhHGREl7lApeyinEKe89o+Pj1YK1sFe/T9fPXJD4vRe4KlP1RpRL7LMC3uf25XaY0IH5 f61Je8zjMe1Gv/T+SiZYd07aoVVKXogha/WihWgGvPt1k34DrgXinE2OktSvMKVcK3/MULcmP VfCCLDps6/8k/uXaTjCQRcAwLxZYlsqVG8LSHTjcdb0Oxeo1blGAueKpHuZbATfAZoEridM+n 2ooPTJhDqd2nPaHENtGFM4IrDSPY/YjeDmnyvtbyLyPOHpxQZai2AfXqvXKwe29/rlNV0MdgQ +zAeijOcYVeT69qOXkfXBS1gSrBpBks+9uWyLS12YBd8O1vqS49e34WRkY+hjDdiUVOs/fpzM kK/lUOPxvIJgFOa5gh3jngnfJN/kYgU80ls3ckALCObu1TgKRZVBHXXc+UFPYt2c4PdXLiIj6 iDWba/t1kMaz8fANZqkwuWw0ktsl5t


20151218

Wieder geht's zu Euromoon

Diese Casino-Spams alle paar Tage von GeorgiaEleana sind im Moment die einzigen Spams, die ich von BGO erhalte ...



Return-Path: [web.de.887010.MeinName@mta35.boriq.com]
Received: from mta35.boriq.com ([198.102.12.169]) by mx-ha.web.de (mxweb108) with ESMTP (Nemesis) id 0MXrpb-1Zg6HT3Yrn-00Wlsu for [MeinName@web.de]; Wed, 16 Dec 2015 05:53:57 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1450847316; h=From:To:Subject:Content-Type: Date:Message-ID; b=hd8bMvJvdbzz7ChV7KH8h5grJrhlLm5jUAtSymSW5zdX2 G1qXYbRRP44WLqz4bso8LMb92ZEFRTdSbQHFd4e5Q==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1450847316; h=From:To:Subject:Content-Type: Date:Message-ID; bh=zKbOXuSZETGD8kkFfQEU3ZxVs3Y=; b=Ahl3dfUdZuQf yJBQ/dVI6gaik6rT1/U32VVXHE42pqGegg1TAC8TrcINEJh0HrK5cTBPi+Nf5j1+ WNyFNsT4kw==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=boriq.com; b=nkbXdA3921CCR8zS1hL9I9X9OZFnVlSuiYAnBLLnMSSMZsM1l0tVb+JvX6bBuRP7mIZnyktk30jpOF6RbuNKcw==;
Received: from boriq.com [198.102.12.169] by boriq.com [198.102.12.169]; Tue, 15 Dec 2015 22:34:58 +0100
MIME-Version: 1.0
From: georgia[georgiaf@boriq.com]
To: MeinName@web.de
Reply-To: eleana[eleana@boriq.com]
Subject: Get lucky with us!
Content-Type: multipart/alternative; boundary="-=4a8d8c6d88edbacd44a3c2e951b3b1f1";
Date: Tue, 15 Dec 2015 22:34:58 +0100
Message-ID: [2-887010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta35.boriq.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]




[http://boriq.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=887010&l=0.]

20151213

Erinnerung im Doppelpack

Mr. Davis Antonio von der sog. "Chartered Standard Bank Group" kontaktierte die Blogkontaktadresse von "successfully unsubscribed ;)" zuletzt vor eineinhalb Wochen. Heute nochmal das Angebot im Doppelpack - allerdings nicht mehr aus Nigeria versendet, sondern, wie auch schon die gestrige Spam im Namen der UN, aus den USA:


Return-Path: []
Received: from na01-by2-obe.outbound.protection.outlook.com ([207.46.100.247]) by mx-ha.gmx.net (mxgmx011) with ESMTPS (Nemesis) id 0LsxBq-1aEwk93MuQ-012Zh9 for [contact@succun.su]; Sun, 13 Dec 2015 01:26:24 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=web112.onmicrosoft.com; s=selector1-web112-onmicrosoft-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mJg+gHwlrK+cv/Pwf9oThry99sNficUzZfQTtkmZjqI=; b=KbFPl6ODzFXwXy5ljG5RSsD7vmx2nu7uSLNrOmK59s8/f0t2LYKdJE9MbaNhD8nugluqtraSV+nlmVd33jq9G1gamV6zUGMpP5FHjciB3s/A5bxXMq/sV3+8F+ztQT7EBIZCILjeyh5gXKm22IE1jkVibQExhihXmq8Druq4i1E=
Received: from [10.10.10.1] (216.84.25.90) by DM3PR20MB0681.namprd20.prod.outlook.com (10.164.250.145) with Microsoft SMTP Server (TLS) id 15.1.355.16; Sun, 13 Dec 2015 00:26:18 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Your Fund Approved For Transfer
To: Recipients
From: CHARTERED STANDARD BANK GROUP
Date: Sat, 12 Dec 2015 18:26:35 -0600
Reply-To: [chanteredstandardgruops@yandex.com]
X-Originating-IP: [216.84.25.90]
X-ClientProxiedBy: SN2PR80CA014.lamprd80.prod.outlook.com (10.141.39.152) To DM3PR20MB0681.namprd20.prod.outlook.com (25.164.250.145)
Message-ID: [DM3PR20MB068149CFD01D91D0CBF7C6D4B8EC0@DM3PR20MB0681.namprd20.prod.outlook.com]
X-Microsoft-Exchange-Diagnostics: 1;DM3PR20MB0681;2:jA9TWrHGFv0neTpbFCaIEVDNHT+U+Y4JLLVOk6E3yutT9ZbENaDqDJTi7F398UkRip0bxBrKjQkEiqE9Bbe/MX+g6NSEV4ey0oUyqRAHI6isGWdpLpFRZEFuTnXCSlKbmwft5VcoDeNpx8kB7LrtkQ==;3:/OoWtPx/FIFMz0qlq5jYr9IQ2y4m6dH28tn04MBmRfW9TwToOCLHP/+ZjA56kmXJYpVT063xjNpuMXrVCR9q9DYNtMGqOUaaCtXe2WUAM3ZaxFHSadDUl6GATIIkOmsD;25:0ue63BzijCmLnl/Ex90yUkxIeTzJtLpgq6u37ZLtjMRsQVP63SpIszipxUy1cV8uBlLP1ITb/XlulPqlLTBL7ZvkZMlSVlyF8viPD062eOKcHS5gyIxEJkR8EVfrPHTUnUvgIYftv+Cfb48TBCReaU4ZrZjFae+S4DoT1QZEI43OxOf29mFVWi0xDy1CbHZvqXq7Hv/0c0w/bce8VhUMgc8yvFrdGuz8pvZlKtoOeU/BsVxPmIXJ/cQHpNrjwA/Z98V/pSt9Cf3qVtWoT2VF3A==;4:BMjaUx9L1HEMKOKcYH+aHyWHY+8LDrxa6C4q8w1oiWhkvcpJiXTNuVkhNhDyzwOH+QPu46DttBjM3Ksi3Y65AN3HLGu1fj+4P/mKtkH401quw5knEnexW3GyWkKu70/2MdHihAP2+KkbaCZDgPvl7wo5no5caSi+wMT1WdR8kCwK5F2RAMqygDubYfhPHCaDD9T4AKNzQkqsqX0iREGwP5Hpr639l753VuvUlGGQKXB7savdnx4D3hUEOWXQ+opOwtxDt89VA7ljOYC7AKbvGLfFaEn9JD3yv/gJNiSjeHUcjzd85pbKEWKvBikuoq2jlOcqOrXufsAqg/IcgtV9xfkMN9RbegOEqSuXrDXY8J56WfT6Q+ZL7O6Pd/2sTNEC
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM3PR20MB0681;
X-Microsoft-Antispam-PRVS: [DM3PR20MB0681FEF9A5761B6B16E34EE9B8EC0@DM3PR20MB0681.namprd20.prod.outlook.com]
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046);SRVR:DM3PR20MB0681;BCL:0;PCL:0;RULEID:;SRVR:DM3PR20MB0681;
X-Forefront-PRVS: 07891BF289
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6009001)(6049001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:DM3PR20MB0681;H:[10.10.10.1];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: None (protection.outlook.com: [10.10.10.1] does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;DM3PR20MB0681;23:vEO6L5Py13BZf56YrJzsaZdoT84kGB+vo2t6sGjrTJpAzoGZ8j5YLZXfPZiFJWYRA87GhJ9F5nAo3xdu3boU8VDYFHoiYhRBSmcxwhoc9Hx7c7JPdkx0dqcwjI6ZTBqpQnxu4TZzyVpJ+2alm9IQ2fdCsK6zFdnpX+fxXEEO9ZvzzybgeC6Vd7tqZkp0Kbk4byPgK6V0ll6JQf7iX7H6237r34hyhpgYsaGl0iwms6avBeT/CfiZRsiqeMUNYCfYPuQOB2ahyAehLBuR1itqY2y9krFcGlLzl4N52MoCLN8=;5:HvOi2pK/PSTXSjZR72cnKW3v3Qxw370539xyiF3g5sqm8Zt+IntyrqiW0mW9KXJ3T1iDni6RpRMx8yD1vbdPqT3hOHW+oOe1Ni01yWb6EVRmCGPqUGuH70WIPOvSfxO1px9bli8XE2J8y6vJvoSAPA==;24:bxBKKem4HoNhYTx3vZ+kMA5rHD6fzUan8ufF1nF8+q/uXb14DXvKCcrObAA44+JizY3l1TOgJhBOAv9UY7QSCQ==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: web112.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Dec 2015 00:26:18.8947 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM3PR20MB0681
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:2jj8IN6w6xs=:XjdIMvEm6xCE7acR+kYsuN6uwTNA oVH5tcgnqo/9KTvjVtw3qdRKcO0mvwp1zUxXFO+Y2bbtorxqpibf7VTd55HLk79AEEOJOZdLM sYZRvtCSSdkfxAhvE1ayN0RgAiuXIJd+YFDOy7KkGQbB+2+vrr/9g/g4O7zN5gtXFkJjA0SZz zILzGYQG6v/2+mhdIg6QAAQyYId1yRdZXOE0vHsKk6FoedIU0fen/xGq6x69UmMH/iFtqNiRO SngzZRvuY5xCpvSjk0NpUoo7cx8I+0uQCFE50CJwiVt1L075UHSpnplC7SYY4UXL4ZVTQUdPj h7Kg6inyjWgfQ3QZgD284DpbaiC+vJht11kBVRg4Glca/O9Y2ZXpmcGuVibEVUhxN9UUZEqXI lrp1xp5O6c/TFH3rurGvVSLXnf2yRA9fZMA56Gsb7BOjY0/cYpNmR8esVcAVbqAU/GiaOOQ0h qM//A7xjSJw8IKOu7a5J24ntuCnpOidQeTwH1G2iDk3ZpPdifMxKVIM+8kmdb8fa2Xb0wBiBS grtaORWqHVvd8J+WEP1JBmLydrzSrHL++3OBPjNgVsib5ivgJVH5MdE+WsEjBBk92D+wXmhmr Awsk8m9qHabxmTYN3LvTjkIKILs8Kou92+1nyqLS73M1dJ6hpTzqZi+FojoHjyA7XxR+TqGJv OUTkQW0xpJkEBpRzOd23/LWf1Y9XhV6zvpYbhnev6m5ZoK8SEJzm4H5KXDTgFxJot8QKzRyPU Yk6UJyHi9FXP27MXWaMT4l+sJWlWnuuOEolUTMRcC2GtKiEmpUwERyyVAQN1Wcqfjj6B+TcOM cT2Irh9whJtO1WP31TbisG6LIVO8GV+0Y3J+PUnPUomZYuKs9uQSO3ZYokvqdYedEFs3/AoGN X28XhZ8kXdymQ0nn3mquWnF0zODXSsh+/3pzdZsMU1L/jjJ+AQFGXjMpbRygBYpOYVJMX09Wz +SPpszYWb0C7SAyOW8xVZ8GHmt3WzHAZTDPkLPaYYgGZQinl8AI1DSlCfLBqSiHXpMoZKNPKd 9vOQyOvfqPnao56D9mLgmSt3fWkpvjQEcm3grzgsN0AHVS6Cm3BPIaK0vsuWvpHn2xmb2tI1j SsVwfE6A/D5XBEZM8uElpR6WifkuBB2wPWExO69ho9HCsW0GmXZFcrn2xKNbiFqs0pD2CJtz1 VSNnY7+0i9b7E8Q91+krWq/7/jsgIQM0DI0ru/FYSpQdoBiabwG04tLMB8QkDxKX+mX++tp6F VeFLwhO9UyD3Tk7bFIi8yMF5oPFYWD8vpfRrxJsrODs/EZen/hgmyP7DdcM/yy7stOcd6IL+i Se1Ba4VEkJa400CFHvqIDNMaV2igH3o8jDSZB4KREtbvJ36uScP4XgjAeGmD9660NbVO1d5F0 FUvWxPw/tlalgreMf/wxUYYnLtjOZz/Q08ieU2uU41eXIXHNWUBahtstNK9UP2E49Sh/7K2Pe Hbn3GgMjQ/FYplgBpU/3CZn6W2o=


------------------------------------

Return-Path: []
Received: from na01-bl2-obe.outbound.protection.outlook.com ([65.55.169.250]) by mx-ha.gmx.net (mxgmx111) with ESMTPS (Nemesis) id 0MB2OO-1ZxxVe0xwi-00A0pD for [contact@succun.su]; Sun, 13 Dec 2015 00:34:02 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=web112.onmicrosoft.com; s=selector1-web112-onmicrosoft-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mJg+gHwlrK+cv/Pwf9oThry99sNficUzZfQTtkmZjqI=; b=SNdkh7amPuRCP18xoYn77LRg0AeI/6t0wgYKCmSNG6kcwth1WWPBs1VM5/saLvqyNQOwV9sdFs105kG/kydy6f0dpGEsSXLVWWrGcn6nFqRi6YsQhf9WZkSkAjt71WVB4bzysU2i8g828bx1m6Kug7Q5uENEtSktOpq0r5VImTA=
Received: from [10.10.10.1] (216.84.25.90) by BLUPR20MB0225.namprd20.prod.outlook.com (10.162.238.148) with Microsoft SMTP Server (TLS) id 15.1.355.16; Sat, 12 Dec 2015 23:33:58 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Your Fund Approved For Transfer
To: Recipients
From: CHARTERED STANDARD BANK GROUP
Date: Sat, 12 Dec 2015 17:34:12 -0600
Reply-To: [chanteredstandardgruops@yandex.com]
X-Originating-IP: [216.84.25.90]
X-ClientProxiedBy: CY1PR13CA0011.namprd13.prod.outlook.com (25.162.30.149) To BLUPR20MB0225.namprd20.prod.outlook.com (25.162.238.148)
Message-ID: [BLUPR20MB02259F94CE734D2CCB0C7A10B8EB0@BLUPR20MB0225.namprd20.prod.outlook.com]
X-Microsoft-Exchange-Diagnostics: 1;BLUPR20MB0225;2:ZgvfD5jYmo6AdxPc2MIwd093Wm7mzzXP2032nzqbRRfgPmlIFiQbBkTDVWuB1MiBC07YZzlKBS2wqpUlPyZx1DyayAW0D3d/VEGb8mWeQ87N8tMmHVsF0DwcfPRfkrbH7gr6wUWU80pTEt6cVd9RjA==;3:zTahvtmryP2XDRS+07RZZ+8KPWul8XAxd7Z/Xr4gid+zzqQz8j7mG8DlupbPZrTirHOWg3ubp3WhrswW97QPA6BawnIL8N1X+cERz9AhRzF0R5BZqPEE8kobM7bSXMB4;25:sW2mrpNZwvcPR1SV/7ioAOoxSRjodfpSaUTjCb2afrKfxMC1HQfjHHsaA3w5/+l1IY3RPVV32FKiPPMdJrxqpcWsmn4mEZBX6YE1/Y+G0d60Rc9qnn7qAyTiW/IMW7Y0yUBJjBkeAgNVxTTwBm2C75mF5lX+BBpTyidNrSkSt4j/HmgCOHSfcp4zjdwGIs26BJZAcdHt9nN49ctFw9f8fShCMjGvoLlt2xtEkJ5bUPar9Eav3F1H5Md45CWS2NzL6jYJ4z6AomMyYEM8J261ig==;4:UN2FDD02kuYBHJCCgsatEPhIPugnr9DBCtVKRSTyllIt5cXb7aLyqJVTLK4bd1GjneotcAszYbV9l2/ZkBG5zB4R6xGAH5xt1jjjBlOjFaAoZjlaTioLCXGH8If4iw0U5/x5lxrqG7b/tlMupwzOtdD14uDOlCyis+9Uc6XQ+TReiIiv3nii/CX2BPh7Xv6iQD5eZwrbzuCnwNH1l+XkcTypvtopX7IWsR2w3nkHoormBZZBepkkV4vhu0P+hJwNBsszD3+CnOqb8HzDRx1ItOh4Os7oONWhXITtPCiyq8p4LqHss2OhCbt5jPGJPY1QE4EHWHma5WNtJR2R4DuvRTMDophU8QHR5jBp/5QfQ9kyk5ZCiqx9+ygY9JnAhIXB
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR20MB0225;
X-Microsoft-Antispam-PRVS: [BLUPR20MB0225606199B28724280905A2B8EB0@BLUPR20MB0225.namprd20.prod.outlook.com]
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046);SRVR:BLUPR20MB0225;BCL:0;PCL:0;RULEID:;SRVR:BLUPR20MB0225;
X-Forefront-PRVS: 07880C4932
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6009001)(6049001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:BLUPR20MB0225;H:[10.10.10.1];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: None (protection.outlook.com: [10.10.10.1] does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;BLUPR20MB0225;23:2w209tufNY/kKx8lhXPuORr8GqrSvkblYgR2VP/3YfuMTZFo2CaoPB4Q52btWIv4up786sH9pftVDETccatZRmcJu3FWnWjqgNHXtW9GtttNzWk9q+UfX4ZGRKcQO3+hxYr2KLqOAlZSftXTHh8MKw7coTGZG+dSphP/r8KU5o03ESgeRwLRdCPDEfpVrO8vJov37SVKyS7LRudOs6jdS/1fLAtw8FWMXeP8WpljpCnYFtnbWncnk0WB5FcnhRdi7UaeSKc9xNfxZzvuYLqSesWZKHHVHESKKG39yvlCpuk=;5:TorkhhUhTn8FtnHvBUwIceIAzIuFiKgnyohNgjxy58Xq9fYVDJM+FG8TAI+R0Gsl5XfZ0DPPsIYBK4gk8GEyt6eLZP6MZmi0Ru+TCem6NJs0Abgsm73HnKhpXibeRq52KUDWVuzdDvxSEXQTrdkWhA==;24:+uQ9xPoQlK1KadDhh/vEot8wQ1y50qe1eYZJqea8MBr/3e9Vqzw9HsJV2BtMBsk6QD/tf9idyqkCATz2Cy96iA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: web112.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Dec 2015 23:33:58.1851 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR20MB0225
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:HHrxKVBZDoA=:8152j40oBp7z9Vb6WK6EXbw827zQ yj63Qs11VyULpL52Fc8abHY2DBtsSfWj6BzoYHs/0pM+tzO24D9rbryxqpF5rahfabvEoYGQk ekZtmjvWRA6hwf/lSHQftCFr1C5lACTVvUuOlPEj1Vv1X1VyvthSMpVSQD0V4SOcY/M3mbdFG fwNV5REd7HttPV2iUj1aFJ51XK8Xl29uQMDXxEAHG9+yeVuuBLQ/S/Aoe+pP/+LKD1bIjYfOH +/FDtUQPoL1Fo0Evyf0ChsR5IcOfaWFpvMUsFB8eQfQ463o0rWoIxBhtl3E4MmmL6sbjW9cPg C9xW8nlCbDr9Da2wLjSn5yuosusTBJSSKpbVfGTflIO3n40pHNAySsBBIVND+DiDVkSCGt9UB 6nEzmWiP+uy9u6mXJbWcLOJ2Cb2Ffa8D2ILpOc4rcwXiiKDcSonLkjrtEF6c9kCUyJ1yVsm1F Cjs5LXYwz5g2qJdH983FbSnL8WdXGbMTXZrdIjtMkwKm6382cZ+4NrmUb8ZAPdU33h8YlxwkV liEePj7an1K562pkKNzjpht3TnT/WCdR2JUhAu/Fb2HHm1W+xE3DNwQZ6mbdBa2qUBxs5VRw9 bK2ZSng/OrA30e6+/biFgy6RKT8eKXHlZluxepbFGD8z35rXDMBwqw/qWFTd7qtjrIMtJKZ/z PLjuJzcPwj2BErJSLRID3itk17jGoITDCP0LpUcjmermJxd7OQOItzSR0vMCqdUvFBfYIQw0o sOcrHrC0Ho5H3pM51RI+JLXodN6I0jAmT8U0assy3r/MDu1Yj/OcaXUsmjkOFXADdf5TtimC+ xVS7CmqdvW21Ed+iYxgZJB3fMZmXxpyMX6mN3IMAoH3XF6gB+gnE/eeACCk7PWSiF58VFTSfa zOmtFXvLgWS+603G3njMr7o7f/AvkcRgUy++vT88/KuKVIiFvjV6/Iq39bCPakkUDQU9S2Bpk L2RJq46LrKxLJJmWlrxirbUscr6Of002Nir8WShbWarMimQSkEWU5xNeaoVqU1FMahl81UUNQ JMFprZdQ5car+R+pNso/YKrwx0AF/bHZbmH5FhQ3kJFh7rKvZCvaKe7WsBr0yuyW1H719MgTv jlVjr+VvxbPIyIdPe8XI6ubI8TFd7eDm7vZDQqubEAHa5ULW52bEGsQ/BtBN+oZ1kUvg+CFmH AkODSeCPq0hsdxrkQ6eGgxjfNS7eNfiJrGECDjsbKMow9mzThVBbHIpJsJklZi2YwOxhifDpi IWVo8ou7W4S/9GEMqHDMiBZX4+7KKxVDN9QPsjmkleGpim6Mnigd+W+oX7GhGJ22iqhvN/9A3 4I0IXwfumHKkWw9rfRPTYBVL+K/CR4SdxOE44rDBPuUsYveWox0E4uJc8bzOiqMG9b



From the desk of:
Mr. Davis Antonio,
Head of Administration,
Chartered Standard Bank Group.
United States of America.

Release of Your Outstanding Fund Valued at US$15,500,000.00

Dear Beneficiary,

We write to inform you that we have received an authorization order from the Africa Continent Government prior to the US Government intervention to release/transfer your long approved fund valued at US$15,500,000.00 through our enhanced Banking operation system here in United State of America in order to avoid any further delay in releasing/transferring of your funds to you.

After today's board meeting of the management of this Bank, States Department of the Treasury, Federal Homeland Security Agency, US Federal Reserve Board, The Reserve Bank and the World Bank Directorate it was concluded to deposit your overdue compensation fund worth US$15,500,000.00 with this Bank for onward payment/transfer to your designated/choose Bank Account, the reason for this is because your name is among the lucky winners they funds have been delay or denied by Impostors/Fraudsters.

It is important for you to note that your fund transfer process was over delay in Africa/Asia/Europe due to their poor banking system and desire of the corrupt Government officials to extort your hard earned money. This has been the reason you have not been able to receive your fund in a bid to claim it.

Furthrmore, you are hereby advised without delay to stop all contact going on between you and anybody on Internet because you will end up at nothing, as we are here to ensure that you receive your fund (US$15,500,000.00) with direct assistance from United State Treasury Department, Federal Homeland Security and US Federal Reserve Board in order to complete the transfer of your funds within three (3) Bank working days.

FOR RE-CONFIRMATION AND VERIFICATION PURPOSE, WE ADVICE YOU TO FILL UP THE BELOW DETAILS TO AVOID WRONG TRANSFER OF FUNDS,

Your Full Name__________________________

Your Current Residential Address (if any Old Address also fill it out) ________________

Your Sex/Age___________________________

Occupation______________________________

Telephone/Fax___________________________

Next of Kin_____________________________

Next of Kin Telephone/Fax_______________

We look forward to your anticipated response with the above details, so as to enable us commence with the immediate release/transfer of your fund to you.

The Chartered Standard Bank Group will immediately release/transfer your fund to you upon your reconfirmation of your details.

Your utmost response is needed to enable us proceed with your payment.

We are looking forward to hear from you.

Thank you for choosing Chartered Standard Bank Group the one customer Bank.

Signed,

Mr. Davis Antonio,
Head of Administration,
Chartered Standard Bank Group
United States of America.

20151209

Die nächste Phishing-Spam im Namen von Apple

Nach der letzten Spam im Namen von Apple vom Sonntag heute nun eine ohne Text. Die Bitmap, die dieses Teil enthält, ist natürlich wieder zu einer Phishing-Domain verlinkt, die diesmal unter der IP 181.224.143.217 bei "SingleHop" in den USA zu finden ist:



Return-Path: [ph5s607@s007-ct-ffm-r01.ec-c.net]
Received: from s007-ct-ffm-r01.ec-c.net ([85.190.1.220]) by mx-ha.web.de (mxweb105) with ESMTP (Nemesis) id 0MCbl8-1ZxA530cdO-009Ndh for [MeinNameInFalscherSchreibweise@web.de]; Wed, 09 Dec 2015 02:41:15 +0100
Received: by s007-ct-ffm-r01.ec-c.net (Postfix, from userid 1798) id 45219A34F97; Wed, 9 Dec 2015 02:37:54 +0100 (CET)
To: MeinNameInFalscherSchreibweise@web.de
Subject: Problem auf Ihrem Konto
Date: Wed, 9 Dec 2015 02:37:54 +0100
From: Apple [apple@service.de]
Message-ID: [4eb759103bfe74848696e95bbc1241af@bunker-knacker.de]
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Envelope-To: [MeinNameInFalscherSchreibweise@web.de]




[http://www.comradeapparel.co.uk/errors/cgishell/online]





20151203

georgia löst eleana ab

Nach einer etwas mehr als eine Woche andauernden Pause kam heute einmal wieder eine BGO-Spam. Diesmal wirbt georgia für das Euromoon-Casino, die Antwort geht jedoch an eleana;)



Return-Path: [web.de.869010.MeinName@mta67.boriq.com]
Received: from mta67.boriq.com ([198.102.11.30]) by mx-ha.web.de (mxweb008) with ESMTP (Nemesis) id 0Lw2CD-1aLORJ26zl-017oIc for [MeinName@web.de]; Thu, 03 Dec 2015 14:07:21 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1449753684; h=From:To:Subject:Content-Type: Date:Message-ID; b=du6bVzK6xG3I1uLEfQJ/AQp6Fd9SLsF8oQVYxtQ8F3Lc8 wAb4ehVNyCXJZ3UqkEA0qdff093/YsjHvCqHeskKQ==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1449753684; h=From:To:Subject:Content-Type: Date:Message-ID; bh=Ft84ibqpUf3ERF/cHFgZBShi4Rs=; b=wTFN3nnEhlmC mvcMDL6pTotkW+N5HqJvKaFlRu5OiAna79hLeczPgkIJJdH1t0rSztPHJYrmBLh7 ISU9brzxCQ==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=boriq.com; b=xXC0e2SY9gq6jVfrPrGN064qocTOgedV/ZsZ/CcJxFQD0+egAcY6Xt/KRUJNq0t+kElZsgKzpJ8dCQDPnm764Q==;
Received: from boriq.com [198.102.11.30] by boriq.com [198.102.11.30]; Wed, 2 Dec 2015 22:15:49 +0100
MIME-Version: 1.0
From: georgia[georgiaf@boriq.com]
To: MeinName@web.de
Reply-To: eleana[eleana@boriq.com]
Subject: Get lucky with us!
Content-Type: multipart/alternative; boundary="-=c1df7e031db5bdaf48952633382f59e3";
Date: Wed, 2 Dec 2015 22:15:49 +0100
Message-ID: [2-869010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta67.boriq.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]

[http://boriq.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=869010&l=0.]



20151128

Verbalerotik von freesexnearyou.com

Seit Donnerstag erhalte ich eine bisher noch nicht empfangene Art von Sex-Spams. Sie kommen aus unterschiedlichen Zeitzonen und führen zunächst zu unterschiedlichen Domains in den USA, die auch unter unterschiedlichen IPs auf unterschiedlichen Servern gehostet werden.

Von diesen Domains geht es weiter zu den IPs 104.24.xxx.xxx in den USA und dann zur IP 95.213.186.52 in der Russischen Föderation:




Hier die ersten vier Spams dieser Art, die ich von Donnerstag früh bis heute früh empfangen habe:


Return-Path: [joanne_austin@kfszombathely.hu]
Received: from kfszombathely.hu ([77.221.39.241]) by mx-ha.gmx.net (mxgmx112) with ESMTP (Nemesis) id 0LhjRt-1ag1W21waP-00mqUE for [MeinName@gmx.de]; Sat, 28 Nov 2015 10:47:19 +0100
Date: Sat, 28 Nov 2015 12:49:00 +0300
To: MeinName@gmx.de
From: Joanne Austin [joanne_austin@kfszombathely.hu]
Subject: Sex right now
Message-ID: [4bf685f35657c8ae2a815a2464aa79ed@kfszombathely.hu]
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_4bf685f35657c8ae2a815a2464aa79ed"
Content-Transfer-Encoding: 8bit
Envelope-To: [MeinName@gmx.de]




Hi, do you want to have some quickie?
I am a tired mother who needs a good f@ck Take me right on the couch My portfolio contains the hottest images[http://katherinemcintosh.com/functions.php?f=45] Either you rape me, or I come over and suck you off right now


208.38.164.216 USA >>> 104.24.98.142 USA >>> 95.213.186.52 Russische Föderation


------------------------------------

Return-Path: [kelly_simon@pretty-mistress.com]
Received: from s18166788.onlinehome-server.com ([74.208.161.233]) by mx-ha.gmx.net (mxgmx012) with ESMTP (Nemesis) id 0LtW1E-1aTnIT43nQ-010pss for [MeinName@gmx.de]; Fri, 27 Nov 2015 20:52:50 +0100
Received: from s18166788.onlinehome-server.com (localhost [127.0.0.1]) by s18166788.onlinehome-server.com (8.14.4/8.14.4) with ESMTP id tAQ9FvBj004836 for [MeinName@gmx.de]; Thu, 26 Nov 2015 03:15:57 -0600
Received: (from pretty@localhost) by s18166788.onlinehome-server.com (8.14.4/8.14.4/Submit) id tAQ9FvRR004835; Thu, 26 Nov 2015 03:15:57 -0600
X-Authentication-Warning: s18166788.onlinehome-server.com: pretty set sender to kelly_simon@pretty-mistress.com using -f
To: MeinName@gmx.de
Subject: A Fast H00kupFinder Match
X-PHP-Originating-Script: 10010:view.php(1973) : eval()'d code
Date: Thu, 26 Nov 2015 03:15:56 -0600
From: Kelly Simon [kelly_simon@pretty-mistress.com]
Message-ID: [439f24d2515a240547321fba6e25072c@pretty-mistress.com]
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_439f24d2515a240547321fba6e25072c"
Content-Transfer-Encoding: 8bit
Envelope-To: [MeinName@gmx.de]



Hello sweetie, I want to have some fun in my bedroom with you
I am gonna suck you off for the whole night Come and be inside of me
Look through my pics and f@ck me[http://fdrbillofrights.net/general.php?y=45]
If I was close, I would sucked your d@ck instead of saying goodbye



74.220.207.183 USA >>> 104.24.99.142 USA >>> 95.213.186.52 Russische Föderation

------------------------------------

Return-Path: [carmen_wolfe@dalindgren.com]
Received: from dalindgren.com ([74.208.44.17]) by mx-ha.gmx.net (mxgmx108) with ESMTP (Nemesis) id 0MfjmS-1ZehX5395I-00N8Y9 for [MeinName@gmx.de]; Thu, 26 Nov 2015 10:51:40 +0100
Date: Thu, 26 Nov 2015 09:51:54 +0000
To: MeinName@gmx.de
From: Carmen Wolfe [carmen_wolfe@dalindgren.com]
Subject: The most pleasurable blowjob ever
Message-ID: [4b758b9fe5f898e3bdf5150d97dfd4e3@dalindgren.com]
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_4b758b9fe5f898e3bdf5150d97dfd4e3"
Content-Transfer-Encoding: 8bit
Envelope-To: [MeinName@gmx.de]




Hey! I have some wet thing needed to be penetrated right now! I want a big black guy right now!
I am a nymphomaniac

I want you to glance through my portfolio and assess my naked body[http://coolerpros.com/dir.php?i=45] If I was close, I would sucked your d@ck instead of saying goodbye



104.250.126.54 USA  >>>  104.24.96.9 USA  >>> 95.213.186.52 Russische Föderation

------------------------------------

Return-Path:[bessie_boyd@freshflavour.fr]
Received: from freshflavour.fr ([195.154.116.136]) by mx-ha.gmx.net (mxgmx107) with ESMTP (Nemesis) id 0LfHCm-1ahalP303M-00olFy for [MeinName@gmx.de]; Thu, 26 Nov 2015 09:40:11 +0100
Date: Thu, 26 Nov 2015 01:40:11 -0700
To: MeinName@gmx.de
From: Bessie Boyd [bessie_boyd@freshflavour.fr]
Subject: The horniest wife request
Message-ID: [86e12be093814e0b034904808e3187e4@freshflavour.fr]
X-Priority: 3
X-Mailer: PHPMailer 5.2.9 (https://github.com/PHPMailer/PHPMailer/)
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_86e12be093814e0b034904808e3187e4"
Content-Transfer-Encoding: 8bit
Envelope-To: [MeinName@gmx.de]




Hello there, can you help me to fulfill my sexual desires?

I want you to c+m in my naughty mouth
I can’t stop thinking about that huge thing in your pants I hope you like my pictures[http://purringstation.com/sql.php?c=45]

See you later



192.169.57.154 USA >>> 104.24.96.9 USA >>> 95.213.186.52 Russische Föderation

20151124

Wie gehabt: Casino und Sex

Seit der letzten veröffentlichten BGO-Spam von Samstag abend ging es mit den folgenden beiden weiter:

Die erste von Sonntag abend führt mit einem Link über die bekannten Malwaredomains zu "fristemeg.no" (IP 193.142.245.131 / Großbritannien). Der zweite Link dieser Sex-Spam führt über "frtyb.com" zu "sexy.com".

Die zweite kam gestern abend und ist wieder eine Casino-Spam von eleana, die erneut ins Euromoon-Casino einlädt ...


Return-Path: [web.de.858010.MeinName@mta12.boriq.com]
Received: from mta12.boriq.com ([198.102.10.40]) by mx-ha.web.de (mxweb105) with ESMTP (Nemesis) id 0LzuBz-1aMDtI1XhD-0150h3 for [MeinName@web.de]; Mon, 23 Nov 2015 17:17:00 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9239; x=1448901033; h=From:To:Subject:Content-Type: Date:Message-ID; b=BK8UgLT6XMQO9sHoaPCL1wQeAEgQPCbqnVIs7CqqotL1m dfYJ43eZFSOmymqZGGRPh8wdV31nsKl46VgFydTPQ==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9239; x=1448901033; h=From:To:Subject:Content-Type: Date:Message-ID; bh=hZdYIMWE7OQo7YIMWW1QmNTcgzc=; b=CuDxZuaZZEx2 qiYD8XejXxWqVlZOdqlGAYryfXWqOUkEIFP06vaoJ4ntAqJPnzzW+2De17mK1Tpf ej8oVxk9Bg==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=boriq.com; b=ho95ZRWoqendKEOA42by1f7iZSfGzLL85EPj2TogUpp2vZXVFPSgb2NYiUQOCU0FmSfT1RdwfAfRS0CcAXRg7A==;
Received: from boriq.com [198.102.10.40] by boriq.com [198.102.10.40]; Mon, 23 Nov 2015 09:12:56 +0100
MIME-Version: 1.0
From: eleana[eleana@boriq.com]
To: MeinName@web.de
Reply-To: eleana[eleana@boriq.com]
Subject: 200% up to £/€/$1000 welcome bonus + £/€/$15 Free
Content-Type: multipart/alternative; boundary="-=6d820a4747feacd02dd04429661b883f";
Date: Mon, 23 Nov 2015 09:12:56 +0100
Message-ID: [2-858010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta12.boriq.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]




[http://boriq.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=858010&l=0.]



------------------------------------

Return-Path: [web.de.13134010.MeinName@host22.karineleo.com]
Received: from host22.karineleo.com ([177.223.142.72]) by mx-ha.web.de (mxweb002) with ESMTP (Nemesis) id 0MYPsf-1Zniak12Yr-00V9Kn for [MeinName@web.de]; Sun, 22 Nov 2015 23:06:40 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=karineleo.com; s=s1024; l=10851; x=1448834866; h=From:To:Subject:Content-Type: Date:Message-ID:List-Unsubscribe; b=3R1q7WLTfQMfMR66ad+OT3naO1mU uY0e0Etk16Y25Ymx5jcCj1NP/DFaOZOiOP1Saslid393d2q8UQ2e/zl2EMdMkIls IZPVR5dofQ3VHBttngApZsRsajYbVSVFjpNl1e6699og9Ct0ERJwh4WG4VyOiJrq FKcPn7z3wZAafwY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=karineleo.com; s=s1024; l=10851; x=1448834866; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=c0pUZF TRUzztabAYS+/eSv31fjQ=; b=hz5gkG5w5cD55AYIDevHcPk6kteQW0ILHzRZ42 udDp8I8MymZvtH1vd1ThBedK/lOYrobNjKgLRp+S4FwJidbEGGK5mgC4GgduUy3I 79i+XNBakXl9jsnligKPMuG0Pp3bGzOeSmGYVjMSIIzwsk4CbNurEl6c8JFKhiJ6 j8URc=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=karineleo.com; b=lVPkTEwhEZ7G7J3VH2loWD+3tQuUkdmbn2rsv+e1eCt30IpGUbIPgKdnaq7EEgie/vqoEsbXvh30bPmN1wPW+2lP99st5ytndEfoi6Bzw8WFnKdTxXjphWiO5RBvvHYZfRRgdnHWicD1W2NJltQKyt4vDUeUqkGjq9uzow3Q8RU=;
Received: from karineleo.com [177.223.142.72] by karineleo.com [177.223.142.72]; Sun, 22 Nov 2015 22:32:25 +0100
MIME-Version: 1.0
From: eyecandi213[eyecandi213@karineleo.com]
To: MeinName@web.de
Subject: eyecandi213 sent you sex request and 3 other girls want massage from you!
Content-Type: multipart/alternative; boundary="-=3dd50ab53cbc3687629d3fdc88fccf7d";
Date: Sun, 22 Nov 2015 22:32:25 +0100
X-Mailer: Universal
Message-ID: [1-13134010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@host22.karineleo.com]
List-Unsubscribe: http://karineleo.com/1/acc1.pl?e=MeinName@web.de&m=13134010
Precedence: bulk
X-Admin: postmaster@karineleo.com
Abuse-Reports-To: abuse@karineleo.com
X-Complaints-To: abuse@karineleo.com
X-Report-Abuse-To: abuse@karineleo.com
Envelope-To: [MeinName@web.de]




[http://karineleo.com/sovsel?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=13134010&l=0.] (+ 1.)






---




20151120

Mit eleana ins Euromoon-Casino

Die BGO-Casino-Spam von heute nacht führt ins Euromoon-Casino, das schon vor sechs Tagen vorgestellt wurde ...


Return-Path: [web.de.856010.MeinName@mta2.bzwdadate.com]
Received: from mta2.bzwdadate.com ([198.102.10.82]) by mx-ha.web.de (mxweb004) with ESMTP (Nemesis) id 0Lkvwr-1aXqTf0tVd-00aig2 for [MeinName@web.de]; Fri, 20 Nov 2015 03:46:42 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=bzwdadate.com; s=s512; l=9267; x=1448593206; h=From:To:Subject:Content-Type: Date:Message-ID; b=26zIJvE0VQuPh+fACQaL1nvJ7S4xhaS7kWlzAFV9SPhcJ RLiyaB8jIv5hYjHpMAKZO/qcdpzrdYjvLT7OVe//w==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=bzwdadate.com; s=s512; l=9267; x=1448593206; h=From:To:Subject: Content-Type:Date:Message-ID; bh=VkOaeERCa+ENUIz4iliowdyb+dc=; b=MaT2QItohM/hiCO1CpNPXA5MDhb+2EkPrbLuH23KEDtcWmPf0SEe457qaYiQff tJlToqK9aN6v2Ovc6HSKUApA==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=bzwdadate.com; b=dOugJX4Jud2OFnSo0zX8uU74ZoNPat6Gi1rMkTxNciPHvWw03Ix8h0ribKYFq+iYE9UnDvE7Bd45k7ZKCYRF4g==;
Received: from bzwdadate.com [198.102.10.82] by bzwdadate.com [198.102.10.82]; Thu, 19 Nov 2015 22:04:48 +0100
MIME-Version: 1.0
From: eleana[eleana@bzwdadate.com]
To: MeinName@web.de
Reply-To: eleana[eleana@bzwdadate.com]
Subject: 200% up to £/€/$1000 welcome bonus + £/€/$15 Free
Content-Type: multipart/alternative; boundary="-=2902c632abe9291e362ac911b553baf3";
Date: Thu, 19 Nov 2015 22:04:48 +0100
Message-ID: [2-856010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta2.bzwdadate.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]




[http://bzwdadate.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=856010&l=0.]
 


20151118

Ein Angebot von Jude Omoh

ATTN.: BENEFICIARY,

AFTER SERIOUS THOUGHT, I DECIDED TO REACH YOU DIRECTLY AND PERSONALLY BECAUSE I DO NOT HAVE ANYTHING AGAINST YOU BUT YOUR PARTNERS.
I AM THE DIRECTOR OF THE COMPUTER/TELEX DEPARTMENT OF THE CENTRAL BANK. SOMETIME IN THE PAST YOUR PARTNERS APPROACHED ME THROUGH A FRIEND OF MINE WHO WORKS WITH ONE OF THE FERERAL PARASTATALS HERE IN NIGERIA AND REQUESTED THAT I ASSIST THEM CONCLUDE A MONEY TRANSFER DEAL. THEY GAVE ME YOUR NAME, YOUR COMPANY'S NAME AND BANK ACCOUNT PARTICULARS AND TOLD ME TO PUT THEM IN THE COMPUTER SYSTEM IN THE LAB SO THAT IT WILL APPEAR AS IF YOU ARE ONE OF THE GENIUNE CONTRACTORS CLEARED FOR PAYMENT.
ACCORDING TO THEM, THEY WANTED TO USE THIS STRATEGY TO TRANSFER A HUGE AMOUNT OF U.S. DOLLARS WHICH THEY ACCUMULATED THROUGH INFLATED CONTRACT AWARDS AND THE MONEY HAS BEEN FLOATING IN THE CBN SINCE THE ORIGINAL CONTRACTORS HAVE BEEN PAID OFF, SO THEY WANTED TO USE YOUR ACCOUNT FOR TRANSFER.
WE AGREED THAT ONCE I DO THIS, THEY WOULD GIVE ME US$100,000.00 AND GIVE ME ANOTHER US$100,000.00 WHEN I RELEASE THE FUNDS TO YOUR ACCOUNT. WHEN THEY SAW THAT I HAVE DONE WHAT THEY REQUESTED AND YOUR NAME HAD BEEN APPROVED AMONG THE LIST OF THOSE TO BE PAID, INSTEAD OF GIVING ME THE AGREED DEPOSIT OF US$100,000.00 THEY STARTED AVOIDING ME AND RESORTED TO THREATS. I IMMEDIATELY DELETED THE TRANSFER CODE OF THE FUNDS, WHICH IS ONLY KNOWN TO ME BECAUSE OF MY POSITION AND RELEASED OTHER CONTRACTORS FUND WITHOUT YOURS.
THEY BECAME ANGRY THE MORE WHEN THEY REALISED THAT THEIR THREAT DID NOT WORK, AND STARTED BRIBING OTHER OFFICIALS TO GET ANOTHER APPROVAL TO TRANSFER THE MONEY TO YOU WITHOUT SUCCESS. APPROVALS ARE FREE. I AM 100% RESPONSIBLE FOR THE DELAY AND OBSTRUCTION BECAUSE OF THEIR BREACH OF AGREEMENT. IF YOU DOUBT WHAT I HAVE JUST TOLD YOU, PAY ANY AMOUNT THAT THEY WILL ASK YOU TO PAY NOW AND AFTER A SHORT WHILE THEY WILL COME UP WITH ANOTHER REASON FOR YOU TO PAY AGAIN AND IT GOES ON AND ON.
IF YOU WANT US TO WORK TOGETHER, THESE ARE MY CONDITIONS:
1. I WILL HAVE 30% OF THE MONEY BECAUSE IT IS ONLY TWO OF US LEFT FOR NOW
2. YOU WILL BEAR THE FULL COST OF THE TRANSFER
3. AS YOU CAN SEE, IT WILL BE USELESS AND A MERE WASTE OF TIME AND MONEY IF YOU CONTINUE WITH ANY OTHER PERSON, SO WE WILL CONCLUDE THIS TRANSACTION TOGETHER AND WITH UTMOST SECRECY.
IF THESE CONDITIONS ARE SUITABLE AND ACCEPTABLE TO YOU, CONTACT ME IMMEDIATELY TO LET US FINALIZE SO THAT I WILL FAX YOU OUR OFFICIAL KTT WIRE TRANSFER FORM TO COMPLETE AND I WILL RELEASE THE MONEY TO YOUR ACCOUNT.
BUT IF YOU ARE NOT INTERESTED, I ADVICE YOU TO FORGET THE FUNDS AS IT WILL BE RETURNED TO OUR CONSOLIDATED NATIONAL RESERVE.

FINALLY, YOU WILL HAVE TO ACCEPT TO KEEP THIS TRANSACTION STRICTLY CONFIDENTIAL, IF YOU ACCEPT MY SUBMISSION, KINDLY GET BACK TO ME IMMEDIATELY ON MY ABOVE PRIVATE TEL: +2348100510327

YOU CAN REACH ME ON MY PRIVATE TELEPHONE NUMBER 24 HOURS OF THE DAY.

CONFIRM YOUR PARTICULARS ON REPLY.

REGARDS,
Jude Omoh





Return-Path: [jomoh1102@gmail.com]
Received: from smtp9.itsol.it ([164.138.48.109]) by mx-ha.gmx.net (mxgmx109) with ESMTPS (Nemesis) id 0MIxfh-1Zx1Lo0m1B-002Xjl for [contact@spammirr.or]; Wed, 18 Nov 2015 08:28:13 +0100
Received: from [41.71.150.220] ([41.71.150.220]) (authenticated bits=0) by smtp9.itsol.it (8.14.7/8.14.7) with ESMTP id tAI7HRs2020695; Wed, 18 Nov 2015 08:26:28 +0100
Message-Id: [201511180726.tAI7HRs2020695@smtp9.itsol.it]
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: COMPUTER/TELEX DEPARTMENT
To: Recipients [jomoh1102@gmail.com]
From: jomoh1102@gmail.com
Date: Wed, 18 Nov 2015 08:26:22 +0100
Reply-To: jude_omoh@yahoo.com
Envelope-To: [contact@spammirr.or]



20151116

Ein "c-date" im "hustlestudio"

Der Linkverlauf der ersten BGO-Spam für heute ähnelt einer Spam vom Freitag, jedoch geht es heute nicht zu "naughtydate.com", sondern zu "c-date.no", die nicht etwa in Norwegen, sondern unter der IP 93.104.242.20 bei der "M-net Telekommunikations GmbH" in Deutschland gehostet wird ...




Die IP Adresse 93.104.242.20 ist nicht gerade als harmlos zu bezeichnen ...






Return-Path: [web.de.12820010.MeinName@vmt46.hustlestudio.com]
Received: from vmt46.hustlestudio.com ([177.223.154.246]) by mx-ha.web.de (mxweb003) with ESMTP (Nemesis) id 0MH1ms-1aB4PS3xQI-00DoRx for [MeinName@web.de]; Mon, 16 Nov 2015 17:58:25 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=hustlestudio.com; s=s1024; l=7346; x=1448297967; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; b=cngpNZt wzzbhzwutOaRsv0Y6V+ci1wMTZ3Q4FRtDBTxgl1B18o/udrSIP3FzxZ5UPUTg5It k59Cba4jS0m4nNrlGkhafRF7evj+4LC/3ayZy/EXUogqnYb7Fi377y1RGiPdJBzy +ccF0m8IrKOXn9iIIwMU6zfsLNXIiHZYnNjM=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=hustlestudio.com; s=s1024; l=7346; x=1448297967; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=5CXfYI 6avMuGr16PUd17nabhNPE=; b=sx8fDX/6y2zhBfaIi9x80c7n0j6TmgfcP/+pAQ mRPjPTOxuS/HF4mkWG6gR+1bbdgo4xCTA0ELfIZIidNS/ztFyPRu9f2GFByyW1/s W6b5MGwETMFCl3ZTV1tSGCfTAH2Dcq6ON8jdIy46DLjZ7ZK+YTJn4OmZmNSN6GXX fImIQ=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=hustlestudio.com; b=Ua3z9oXWjmUXgtxtqFlpxicDOljmTkF5RldOugpf6LaaHAZ0bnrKI/vqf+rx6y8RzRkeTSUgwyU32cwKaSIi1XmyL+SppFUeMd2YaK/x8IJyBW6pMYzfiTCAjk3AK6UL+h9MFF3Opbgf3Co0KhU0cgSGXQ0JWM3D06oBLK/j/8k=;
Received: from hustlestudio.com [177.223.154.246] by hustlestudio.com [177.223.154.246]; Mon, 16 Nov 2015 13:40:50 +0100
MIME-Version: 1.0
From: Message from members[messagecenter@hustlestudio.com]
To: MeinName@web.de
Subject: Hey MeinName, 94 members checked you out this week!
Content-Type: multipart/alternative; boundary="-=d302c272b45a882ef9604fbd040f47a4";
Date: Mon, 16 Nov 2015 13:40:50 +0100
X-Mailer: Universal
Message-ID: [1-12820010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@vmt46.hustlestudio.com]
List-Unsubscribe: http://hustlestudio.com/1/acc1.pl?e=MeinName@web.de&m=12820010
Precedence: bulk
X-Admin: postmaster@hustlestudio.com
Abuse-Reports-To: abuse@hustlestudio.com
X-Complaints-To: abuse@hustlestudio.com
X-Report-Abuse-To: abuse@hustlestudio.com
Envelope-To: [MeinName@web.de]




[http://hustlestudio.com/sovsel?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=12820010&l=0.]


20151114

Ein "naughtydate" im "hustlestudio"

Diese zweite von gestern kam eine Stunde nach der Einladung zu "freelifetimefuckbook.com". Den Linkverlauf dieses Teils schaut man sich am besten auf der Grafik weiter unten an - die Malwaredomains "seethisinaction.com" und "frtya.com" sind jedenfalls auch wieder dabei ...


Return-Path: [web.de.12715010.MeinName@vmt32.hustlestudio.com]
Received: from vmt32.hustlestudio.com ([177.223.154.232]) by mx-ha.web.de (mxweb102) with ESMTP (Nemesis) id 0Lnyy4-1adDYE0bbE-00fyHN for [MeinName@web.de]; Fri, 13 Nov 2015 17:21:18 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=hustlestudio.com; s=s1024; l=4136; x=1448036538; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; b=V6cQnuI pRebsnGVs4HE1uLB7ulMop1zquELYduUPj0gI44iJwHappcKCLYfx0Uk5JJRUfMl tVMmn4HF1qWViObxuOnsqTVzA9ul9ffhyGY4t1iy2uKolbWeHj176En6pSyLaHvV LYm4oiC461TrtzNI2vRt7AkePOikWbUjQDA8=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=hustlestudio.com; s=s1024; l=4136; x=1448036538; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=9uABl3 kBmwZZw+iFZdwXVtabLgY=; b=IWQR1UzeUhSUKaRP1yByb4QeVXwm7OjI6lofPR A4H5EVorxE7Kvkhog+MNJDi67iCdAoi2Z/oMJRtwUxzO5ODqlTWYvkZUr7Ywv5ng 3BENUvN1Q6fJCYQ4vISVnzAiA8oSKxl/r9qMnz6zO/c5XYMT2Z9X114M/BA4BMZ7 nwTpM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=hustlestudio.com; b=gxEdZu3hCsYC5VQ1hH25Sk3Tdj8kNtiauC3kVOr2hFPDM2L0ZphPg2W++JUXrXlC+pA0zjcO6hQIx4aYQzPb7cjVD3fIny3zWgW6akzlVCtZZ/ako3096z7eEJwMGBCG7ZKYF6odXXXmLkM7IcaomLKFZ1wWpi4EBkXL2bxMHfE=;
Received: from hustlestudio.com [177.223.154.232] by hustlestudio.com [177.223.154.232]; Fri, 13 Nov 2015 15:04:02 +0100
MIME-Version: 1.0
From: pimpmyrack[pimpmyrack@hustlestudio.com]
To: MeinName@web.de
Subject: Sexually Explicit: pimpmyrack want sex with you! ready ?
Content-Type: multipart/alternative; boundary="-=1ed277187a442a7e0d0bf242ef4b79b9";
Date: Fri, 13 Nov 2015 15:04:02 +0100
X-Mailer: Universal
Message-ID: [1-12715010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@vmt32.hustlestudio.com]
List-Unsubscribe: http://hustlestudio.com/1/acc1.pl?e=MeinName@web.de&m=12715010
Precedence: bulk
X-Admin: postmaster@hustlestudio.com
Abuse-Reports-To: abuse@hustlestudio.com
X-Complaints-To: abuse@hustlestudio.com
X-Report-Abuse-To: abuse@hustlestudio.com
Envelope-To: [MeinName@web.de]


[http://hustlestudio.com/sovsel?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=12715010&l=1.]



20151113

Mein Mallorca-Blog??

Die Links dieser an meine Blogkontaktadresse gesendeten Spam führen zunächst zur IP-Adresse 137.116.218.31 (Microsoft Corporation in den Niederlanden):


Return-Path:[tim@stappz.me]
Received: from smtp01.udag.de ([62.146.106.17]) by mx-ha.gmx.net (mxgmx003) with ESMTPS (Nemesis) id 0MMp8p-1a2nek2ECF-008eYN for [contact@spammirr.or]; Fri, 13 Nov 2015 02:19:41 +0100
Received: from www.stappz.com (unknown [137.116.218.31]) by smtp01.udag.de (Postfix) with ESMTPA id 2830125E for [contact@spammirr.or]; Fri, 13 Nov 2015 02:19:41 +0100 (CET)
Date: Fri, 13 Nov 2015 01:20:04 +0000
To: contact@spammirr.or
From: Tim Frey [tim@stappz.me]
Subject: Mallorca Blog Inhalte - Kooperation STAPPZ Map und App
Message-ID: [4b3cf08297f57db23757d10e33c4f74e@www.stappz.com]
X-Priority: 3
X-Mailer: PHPMailer 5.2.10 (https://github.com/PHPMailer/PHPMailer/)
List-Unsubscribe: [http://www.stappz.com?na=u&nk=11601-80ff181815]
Precedence: bulk
X-Newsletter-Email-Id: 14
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="b1_4b3cf08297f57db23757d10e33c4f74e"
Envelope-To: [contact@spammirr.or]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:1iXsZ/mDRIg=:kdbL10pXvlfwPKNj54Xm4I4RsUAb RzmqZUOolhaCTUVMofQtbxHaAkqC3XQaBg+JW2xmivnlkU0azo28gmyGRo9boIhWyPknJUD+i EMd1ccjxi7WpRDrqTICFWSkUNpx7n1OmjpHldydAK7Zd9DBaGAN2OYjjUVN5Q8rDlK13b/ru3 tFgCHmEcyI+uqQzYAlMnr6L7D/PibkpjGXgoqWYQPfBQSm5VE2WNRpgyKXXyenD/kAlMzyMSC AObG9ZS4Ye/kCLzJzd++kHIcTclvJgKiFQ3qgiMD3HVsL4+du4HpE7bDhTq6MKiAm0f83wABD FViNCjQ08v5HDvl61zjYGA9SelE04K2oynMa3sjfycnHKoEdN8I8qP+/uNXVVOD12uA4EjVkb t97gwm6OO4YDUl7lFkU2hEJBXzhQIoy6VgGVqYxd7m5TR3aTe62hXGTCjaBbQtgfq0SmXdNJY rnopqzgVZoTMlzkFYK1JGlcg1Ew9/bpPxCx+aVbVIhaDIKoEtW4PND40aBpceMqua4qvms1Ca P0AeRtvK3G7Fm0sFBJgnAA4E9Dy9YDvsD/7K7T+db2xJmJvtr1wgLuvDwb4DTng4q+te5kVsE vrXt9yMfguGvpHyV6UwlC6v9Fu+lOpRNdagDrUx0EoWUlWfDUklV45kAef5To6yGV2iIJPVvz 2bIEmIpoktt9jYgJiPFEeNgVV0ygLJ2Ey0SX+b9XAlZ1pYqJ9fErAikksU4adgDefsJISo02E 5CJjmQo0LvDBrbirfoEwlR7e2R1EpdcU4vUMmqo0a2dDLurfAP7bJj3UVwpToq/5FZWs666fp HgGkizO1hK+vBDE2iZO3ECpqW3PDx6A1u3BBOFOoEKMhDjAQZUn/fdVYcOQVL/zDWdzPhGyE+ QdRemrHOuFWLuPn/ldyr9Ml2rEvSZpUcXVmsgBHFIrcDeuDyvPlAaTt/j4IuZkF0D1jcXaGm5 mw8qj6J5Wy/cLDZ5AqD27mPUu2F0aHUeSeD17VJATmEQSlNgGDePHjlsTEVtapwgpKq5BruqC /AKbYm/7YMNOGd4PQKdz3me2A40bX4aD0pGkGVYsFgiV8Zgd4kN8WvR8MOXf+k+gKYm2BcCmI hRyPu7CTHR+w553jVmTaNY1ukJHIt6aAYvuUtv/HFoh/8LM+X/t8KaxEn1pCjG1D/ilUxDP+M O7jE0kHV+9e9B2ADCzjebHKnHl/srUTFMpCyv+brC8jJiuJbZFFQcdo9hXTz89gkjpi2XZoW2 F6lUihFvp1UWxgVv837hfzuo0t58uOSc6zw7QDYyZT+of5VWscFbU4wh7itpVwVJvlnYBh1DF tEYsxEdAWTg6U0diRUCy4cFw==



Sehr geehrte Damen und Herren,

english version below

ich melde mich im Bezug auf Ihren Mallorca Blog bei Ihnen. Ich denke unsere STAPPZ app und Webkarte ist interessant für Ihren Blog oder Webseite und ich würde mich freuen, wenn wir hier kooperieren können und sie einen persönlichen Mallorca Karten-Widget einbinden. Ich möchte mich jedoch erst kurz vorstellen: Mein Name ist Tim Frey und ich bin Mitgründer der Firma Iunera GmbH & Co. KG in Karlsruhe. (Demovideo hier: https://www.youtube.com/watch?v=MDBh-VrU2Ig ).

Benutzererstellte Mallorca Karte: http://maps.stappz.com/region/mallorca?c=39.7209:3.1023:10

Kurz zu unserer STAPPZ app und Map Platform: Stappz ist die "Benutzer-für-Benutzer" Reiseführer App. Hier erstellen Benutzer gemeinsam den Echtzeit-Reiseführer der Welt. Dies funktioniert wie folgt: Mit Stappz markiert man Erlebnisse durch das Posten von Bildern auf einer persönlichen Weltkarte. Das Smartphone ermittelt automatisch die aktuelle Position des Benutzers, wodurch persönliche Insidertipps, Ausflüge und Eindrücke direkt am Ort des Geschehens festgehalten werden können. Jeder Benutzer erhält durch die eigenen Posts seine persönliche Reisekarte, die im Web und in der Stappz-App verfügbar ist. Zugleich kann man in den Erinnerungen, Bildern und oder Eventtipps anderer Benutzer stöbern und das derzeitige Umfeld erforschen. Durch Kommentare zu den Empfehlungen und Tipps von anderen Benutzern entwickelt sich eine Interaktion und ein Echtzeit Reiseführer entsteht. Die Karten und Inhalte in der App werden offline gecached und sind Open Streetmap basiert, damit man die App auch offline im Urlaub nutzen kann.

Derzeit führen wir verschiedene Kooperationen mit unserer Plattform durch. Z.B. erstellen wir ins Karlsruhe zusammen mit Stadtbewohnern einen Insider City Guide. Informationen über Kooperation sind hier zu finden: http://www.ka-news.de/region/karlsruhe/Karlsruhe~/Mein-liebster-Ort-in-Karlsruhe-ka-news-Leser-erstellen-Insider-Reisefuehrer;art6066,1752463

Auf Mallorca haben wir schon einige Inhalte und sie können diese in einem Iframe einbinden. Dies geht ganz leicht: Einfach einen user in der app machen und dann <iframe src="http://maps.stappz.com/YOURUSERNAME_in_der_App/pins?viewtype=widget" style="width: 100%; height: 515px; border: 0"></iframe>  einbinden.

Die Mallorca Inhalte kann man schon hier im Web sehen und in der App können sie diese „pinnen“ worauf sie dann in ihrer persönlichen Karte vorhanden sind:

Vielleicht eignet sich die Sache für eine Newsmeldung oder fürihre persönliche Mallorca Karte?  Generell freuen wir uns auch immer sehr über Feedback. Gerne lasse ich Ihnen auch weitere Informationen (Bilder, Beschreibung usw.) zukommen.
Was meinen Sie dazu? 
Ich würde mich sehr freuen kurz von Ihnen zu hören ob das interessant für Sie ist.

Viele Grüße
Tim Frey
Check the STAPPZ Map: http://maps.stappz.com
Get our STAPPZ App: http://stappz.com/get


English

Dear Sir or Madam,

 my name is Tim Frey and I’m co-founder of the STAPPZ app. From your web presence, I got the impression you are open minded person what is my key reason to reach out to you. In short STAPPZ is a personal map and travel guide that everybody can fill just by posting with the smartphone app. (Android Download http://stappz.com/get Web-travel-map: http://maps.stappz.com Demo Video: https://www.youtube.com/watch?v=MDBh-VrU2Ig Description below).

Mallorca Map: http://maps.stappz.com/region/mallorca?c=39.7209:3.1023:10

Our STAPPZ app is for Android and IOS will be released soon. I’d be curious for your opinion about the app and to get feedback if you are the right “target group” person. Furthermore, I think our web widget is interesting for your blog or fellow bloggers that you can expand just by posting in STAPPZ with the smartphone. Also, we will soon add some kind of “bio/profile” in the app and webmap that you increase your web traffic.

The STAPPZ app goal  is to create the ultimate smartphone travel guide by leveraging the potential of everyone to participate in the creation of a personal travel guide. At the same time, the personal travel guides work collaboratively together to create a holistic travel guide of the world. With STAPPZ you just take a picture and enter a text and the information gets saved at the current geoposition where you are at the moment. Succeeding, it gets saved automatically in our cloud and it is visible to other people  in the app and available on a webmap of a user – super easy. Our app even works offline and uses offline available maps and an automatic delayed upload in case you have no network. Altogether, is the world’s first real-time and collaborative travel guide.

When you want to embed your personal travel map it works like that: Install the app and click the share button on your profile and open it with a browser. Adjust it in the browser like you want and copy the url in an IFrame like this and add “?viewtype=widget”:
<iframe src="http://maps.stappz.com/YOURUSERNAME/pins?viewtype=widget"> style="width: 100%; height: 515px; border: 0"></iframe> Example: <iframe src="http://maps.stappz.com/uhura/pins?viewtype=widget&c=49.9861:7.4808:11" style="width: 100%; height: 515px; border:0”> </iframe>

That is all then you got your own map on your blog. In case it does not work – please reach out to me– I’ll not give up to help you until it runs ;)

If you got any questions, please just get back to me – I’d be so glad for your feedback. Also about desired functionality (and yes upload of old pictures is already in progress- many asked for that). 
Looking forward to hear back from you – and if you got IOS and you are interested, just tell me and I’ll get back to you in roundabout 1 -2 month.

Best regards from Germany
Tim

Check the STAPPZ Map: http://maps.stappz.com
Get our STAPPZ App: http://stappz.com/get
Demo Video: https://www.youtube.com/watch?v=MDBh-VrU2Ig
Sample of an embedded map: http://www.ka-news.de/region/karlsruhe/Karlsruhe~/Mein-liebster-Ort-in-Karlsruhe-ka-news-Leser-erstellen-Insider-Reisefuehrer;art6066,1752463





Zwei der Links habe ich mal bei "urlquery.net" eingegeben:

[http://www.stappz.com/wp-content/plugins/newsletter/statistics/link.php?r=MTQ7MTE2MDE7aHR0cHM6Ly93d3cueW91dHViZS5jb20vd2F0Y2g%2Fdj1NREJoLVZyVTJJZzs%3D]






[http://www.stappz.com/wp-content/plugins/newsletter/statistics/link.php?r=MTQ7MTE2MDE7aHR0cDovL3N0YXBwei5jb20vZ2V0Ow%3D%3D]




20151112

Zwei neue vom AppStore

Zwei identische Spams vom AppStore erreichten meine Blogkontaktadresse gestern abend. Der Phishing-Link führt diesmal zur IP-Adresse 209.191.185.195 (Internap Network Services Corporation / USA) ...


Return-Path: [asey@aqua-aplz.deviantart.com]
Received: from euve58419.serverprofi24.eu ([85.25.204.253]) by mx-ha.gmx.net (mxgmx103) with ESMTPS (Nemesis) id 0MQcld-1ZqsAh2oRh-00U3Z7 for [contact@spammirr.or]; Wed, 11 Nov 2015 21:44:34 +0100
Received: from erversa (193.164.101.11.ip.redstone-isp.net [193.164.101.11]) by euve58419.serverprofi24.eu (Postfix) with ESMTPA id 65C47EF837C9 for [contact@spammirr.or]; Wed, 11 Nov 2015 20:44:34 +0000 (UTC)
Message-ID: [43052AAE02294EF8B35A567B701181CA@erversa]
Reply-To: "AppStore" [noreply@aqua-aplz.deviantart.com]
From: "AppStore" [asey@aqua-aplz.deviantart.com]
To: [contact@spammirr.or]
Subject: Your order id nr AP3DIE928D02
Date: Wed, 11 Nov 2015 20:44:23 +0000
Organization: dasa
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0C5E_01D11CC1.BF6EF1C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
Envelope-To: [contact@spammirr.or]



------------------------------------


Return-Path: [asey@aqua-aplz.deviantart.com]
Received: from euve58419.serverprofi24.eu ([85.25.204.253]) by mx-ha.gmx.net (mxgmx103) with ESMTPS (Nemesis) id 0LZlAG-1ahlCx3Z0u-00lRVO for [contact@spammirr.or]; Wed, 11 Nov 2015 22:41:31 +0100
Received: from erversa (193.164.101.11.ip.redstone-isp.net [193.164.101.11]) by euve58419.serverprofi24.eu (Postfix) with ESMTPA id 8ABF4EF854ED for [contact@spammirr.or]; Wed, 11 Nov 2015 21:41:31 +0000 (UTC)
Message-ID: [4D6693369B604E33A53A58D6B920483C@erversa]
Reply-To: "AppStore" [noreply@aqua-aplz.deviantart.com]
From: "AppStore" [asey@aqua-aplz.deviantart.com]
To: [contact@spammirr.or]
Subject: Your order id nr AP3DIE928D02
Date: Wed, 11 Nov 2015 21:41:21 +0000
Organization: dasa
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0C58_01D11CC9.B4E78110"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Envelope-To: [contact@spammirr.or]




Your AppID was just used to download GPS Maps PRO 2015 from the AppStore on a computer or device that had not previously been associated with that AppID.

Order ID Number: AP3DIE928D02
Order total: 45.00 $

Cancellation Form[http://terzic.net/gmz/a/] to cancel this order.




20151107

Mein nicht vorhandener Netflix-Account

Da musste ich erstmal "googeln", um herauszufinden, dass es sich bei "Netflix" um eine Streamingplattform handelt, die es im Apple App Store gibt. Da war mir dann auch klar, warum diese Spam von den Leuten kommt, die mir immer die AppStore-Spams schicken und warum der Link zu derselben Malwaredomain führt, zu welcher schon der Link der letzten "AppStore"-Spam vom Montag führte ...



Return-Path: [can@netx.net]
Received: from smtpsrv3.mailsys.q-x.ch ([91.221.118.221]) by mx-ha.gmx.net (mxgmx004) with ESMTP (Nemesis) id 0LubDM-1acVbE1hDM-00zp9D for [contact@spammirr.or]; Fri, 06 Nov 2015 18:21:20 +0100
Received: by smtpsrv3.mailsys.q-x.ch (Postfix, from userid 500) id 177E041A79; Fri, 6 Nov 2015 18:21:20 +0100 (CET)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on smtpsrv3.mailsys.q-x.ch
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0 tests=BAYES_50,HTML_MESSAGE, HTML_TAG_BALANCE_HEAD,RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSWL_NONE autolearn=no version=3.3.1
Received: from websrv6.q-x.ch (websrv6.q-x.ch [91.221.118.95]) by smtpsrv3.mailsys.q-x.ch (Postfix) with ESMTP id ABB7E418A6 for [contact@spammirr.or]; Fri, 6 Nov 2015 18:19:59 +0100 (CET)
Received: from 193.164.101.11.ip.redstone-isp.net ([193.164.101.11] helo=erversa) by websrv6.q-x.ch with esmtpa (Exim 4.69) (envelope-from [can@netx.net]) id 1ZukgB-00005E-7c for contact@spammirr.or; Fri, 06 Nov 2015 18:19:59 +0100
Message-ID: [A61FB2A5E8764C9E8BDAEAEF103D4EAE@erversa]
Reply-To: "Netflix Inc" [noreply@netx.net]
From: "Netflix Inc" [can@netx.net]
To: [contact@spammirr.or]
Subject: Netflix: 1 New Alert
Date: Fri, 6 Nov 2015 17:19:46 +0000
Organization: dasa
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_05C6_01D118B7.559E8930"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18000
Envelope-To: [contact@spammirr.or]




Your account has 1 New Alert, received on 06/11/2015. Please click here to visit MyNetflix Message Center[http://guvenagro.com.tr/zax/].

We recommend that you check your email frequently for notifications that impact your account activity.

 




20151103

LeidyForU von marblestore.net

Nachdem mich am Sonntag "I Want you" über die Domain "marblestore.net" ausnahmsweise mit einer Textmail bespammt hatte, heute wie gewohnt eine Bild-Spam von "LeidyForU":



Return-Path: [web.de.12094010.MeinName@host17.marblestore.net]
Received: from host17.marblestore.net ([177.223.147.67]) by mx-ha.web.de (mxweb107) with ESMTP (Nemesis) id 0Le6sa-1aEJkO13Rk-00pu8n for [MeinName@web.de]; Tue, 03 Nov 2015 14:20:05 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=marblestore.net; s=s1024; l=4320; x=1447161660; h=From:To:Subject:Content-Type: Date:Message-ID:List-Unsubscribe; b=EDlD0eyWA63FUcnxFinLDbn+VXO3 1Dz2B9HOH5nXcc7aH+P7kn21IswQDEX9X/X1LtWG6hvP1zWo0ongNqLNjTVRvuzN OArV7Z7IwHjXkk2CdaQXtDcdWToVAloVuc3qaBf18WkQh7RTYatdgEdsnM2HTWkz wKn9t0unz59MOCE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=marblestore.net; s=s1024; l=4320; x=1447161660; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=IKkFYJ wzW/cqFsobL/+W47vXMaU=; b=BnePsbfTcGeQCBncN/qshfpb5x4v5NyZcg7pAy er3wYveW3FSgZe/aXt0DSlPYUDVh8JERaPcsFRuhU7HeIoA6IPF5yUd2SrQJLZwI eGb39RdfQlLnzEoOIosEMhNlLFenbLWhphsI5CmnJy5ZGKvCbCyDVMx4te14L5TG j3MX8=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=marblestore.net; b=L636dE6sKQ/ZQyEFi+SCXg+IXYBIHOOmgYI9czxalaRCchc9NikSuFPJ2G5IQ/q2LJgejVuzCOTNqi2N+nXKS+1hduhXA4x427KtVi4SIaP/QfwGhxC7EohajvypJ2ovVNruX47hiHeBPlxzggF2kj3g1PYOcs6lLAiwC4WmY6g=;
Received: from marblestore.net [177.223.147.67] by marblestore.net [177.223.147.67]; Tue, 3 Nov 2015 12:43:56 +0100
MIME-Version: 1.0
From: LeidyForU [LeidyForUe65@marblestore.net]
To: MeinName@web.de
Subject: LeidyForU sent you a message! read now
Content-Type: multipart/alternative; boundary="-=9452d48f28119d96bc062a6ec68a8793";
Date: Tue, 3 Nov 2015 12:43:56 +0100
X-Mailer: Universal
Message-ID: [1-12094010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@host17.marblestore.net]
List-Unsubscribe: http://marblestore.net/1/acc1.pl?e=MeinName@web.de&m=12094010
Precedence: bulk
X-Admin: postmaster@marblestore.net
Abuse-Reports-To: abuse@marblestore.net
X-Complaints-To: abuse@marblestore.net
X-Report-Abuse-To: abuse@marblestore.net
Envelope-To: [MeinName@web.de]




[http://marblestore.net/sovsel?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=12094010&l=0.] >>> ertya.com

20151102

AppStore heute von blogspot.com


Return-Path: [cancel@appitor.blogspot.com]
Received: from smtpsrv3.mailsys.q-x.ch ([91.221.118.221]) by mx-ha.gmx.net (mxgmx104) with ESMTP (Nemesis) id 0LfY7Z-1aHJfX1AN7-00p1if for [contact@spammirr.or]; Mon, 02 Nov 2015 13:25:46 +0100
Received: by smtpsrv3.mailsys.q-x.ch (Postfix, from userid 500) id 1755D41ABA; Mon, 2 Nov 2015 13:25:46 +0100 (CET)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on smtpsrv3.mailsys.q-x.ch
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=5.0 tests=AWL,BAYES_50,HTML_MESSAGE, HTML_TAG_BALANCE_HEAD,RCVD_IN_BRBL_LASTEXT,RCVD_IN_DNSWL_NONE autolearn=no version=3.3.1
Received: from websrv6.q-x.ch (websrv6.q-x.ch [91.221.118.95]) by smtpsrv3.mailsys.q-x.ch (Postfix) with ESMTP id 3649F41731 for [contact@spammirr.or]; Mon, 2 Nov 2015 13:25:41 +0100 (CET)
Received: from [46.254.14.63] (helo=server-1102-122) by websrv6.q-x.ch with esmtpa (Exim 4.69) (envelope-from [cancel@appitor.blogspot.com]) id 1ZtEBA-0007ck-2p for contact@spammirr.or; Mon, 02 Nov 2015 13:25:40 +0100
Message-ID: [25753F69E1D14B098E36570B8C09790B@server-1102-122]
Reply-To: "AppStore" [noreply@appitor.blogspot.com]
From: "AppStore" [cancel@appitor.blogspot.com]
To: [contact@spammirr.or]
Subject: Order number AO9EUBEUS
Date: Mon, 2 Nov 2015 12:25:21 +0000
Organization: =?windows-1251?B?ICIgIg==?=
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_03E0_01D11569.8AABF690"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Mail 6.0.6001.18000
X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6001.18049
Envelope-To: [contact@spammirr.or]




Thank you for buying the following product:

Product Name: Fifa 2016
Order Number: AO9EUBEUS
Receipt Date: 02/11/2015
Order total: 49.35 €

If you did not authorize this purchase, please visit the AppStore Order Cancellation[http://guvenagro.com.tr/system/] Form within the next 6 hours in order to cancel the payment.

You can find the AppStore Terms of Sale and Sales Policies by launching your AppStore application and clicking on Terms of Sale or Sales Policies.