Hi friend!
I’m planning an expedition to the Nort Pole, please take a look at some photos of my preparations http://frihasyfu.senellyworld.com/aelzncvx
Rushing, l.peeters
Lachhaft. Hier will angeblich jemand zum Nordpol und will man sich die Bilder ansehen, so landet man auf einer Seite die für Binäres Handeln wirbt. Achja, eine Virenmeldung kommt auch noch!
Versandadresse der Spammail:
Versandadresse: [email protected]
Rückantwort:
Verlinkung in der Spammail:
In der Mail wird auf diese Url verlinkt: http://frihasyfu.senellyworld.com/aelzncvx
Inhaberdaten der verwendeten Domain(s):
Der Domaininhaber von finances24x247.com-page323899913.com/[Id entfernt] ist mittels Whoisprotection.cc verschleiert worden
senellyworld.com
Registrant Contact Information:
Name Richard Senelly
Organization Senelly World
Address 35 Meadowbrook Lane
City Trophy Club
State / Province Texas
Postal Code 76262
Country US
Phone +1.8178980068
Fax +1.8772568075
Email [email protected]
Mailheader der Spammail:
Return-path:
Delivery-date: Sat, 27 Aug 2016 15:22:09 +0200
Received: from [195.4.92.24] (helo=mx14.freenet.de)
by mbox153.freenet.de with esmtpa (ID exim) (Exim 4.85 #1)
id 1bddYn-0005aw-TX
for [email protected]; Sat, 27 Aug 2016 15:22:09 +0200
Received: from tea.teachservices.com ([192.232.206.62]:57515)
by mx14.freenet.de with esmtps (TLSv1:DHE-RSA-AES256-SHA:256) (port 25) (Exim 4.85 #1)
id 1bddYn-0007bk-Km
for [email protected]; Sat, 27 Aug 2016 15:22:09 +0200
Received: from dynamic-198-105-229-222.tsb.tcw.co ([198.105.229.222]:58010 helo=lfhvc.com)
by tea.teachservices.com with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.87)
(envelope-from )
id 1bddYk-0005ma-JR; Sat, 27 Aug 2016 08:22:06 -0500
From: l.peeters
To: “Schmitz SC” , “Sachbearbeiter Amazon GmbH”
<[email protected]>, “KFPS” , “Schmid GmbH”
, “0c300f3ad3bb67fcf0513a8424f8d94f”
<[email protected]>
Subject: expedition
Date: Sat, 27 Aug 2016 16:21:53 +0300
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”—-=_NextPart_000_0006_01791F4D.3AB629D2″
Thread-Index: AdH0e95QzPLSUpmdGmi++UuT3P5B3g==
X-Mailer: Microsoft Office Outlook, Build 17.551210
Content-Language: en-ca
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – tea.teachservices.com
X-AntiAbuse: Original Domain – freenet.de
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – gmx.de
X-Get-Message-Sender-Via: tea.teachservices.com: authenticated_id: [email protected]
X-Authenticated-Sender: tea.teachservices.com: [email protected]
X-purgate-ID: 149285::1472304129-000003CA-DB4BFF51/0/0
Delivered-To: [email protected]
Envelope-to: [email protected]
X-Originated-At: 192.232.206.62!57515
Delivered-To: [email protected]
Linkcode für Webseiten, Gästebücher usw.:
<a href="https://www.spammails.net/expedition-to-the-nort-pole/">Expedition to the Nort Pole</a>
in Germany 