Final Warning – Your e-mail account is on the limit

Dear xxxxxxx@xxxxxx.xxx ,
1969MB                 2000MB

We noticed your e-mail account has almost exceeded it’s limit. And you may not be able to send or receive messages any moment from now.

Click Here to renew your account

NOTICE:

Failure to renew your e- mail account. It will be permanently disabled.

Thanks,

Mail Administrator

Egal was man als Mailadresse in der Url verwendet, es wird auf der Seite auch angezeigt. Hier will einfach jemand die Zugangsdaten zu dem eigenen Mailacount Phishen um dann Schindluder damit zu treiben

Versandadresse der Spammail:

Versandadresse: Administrator – yamamoto@vvp.jp

Verlinkung in der Spammail:

In der Mail wird auf diese Url verlinkt: http://payasgo.org/MailAdmin/renew/index.php?name=xxxxxxxx@web.com

Inhaberdaten der verwendeten Domain(s):

Mailheader der Spammail:

Return-path: <yamamoto@vvp.jp>
Delivery-date: Tue, 25 Apr 2017 00:41:39 +0200
Received: from [195.4.92.19] (helo=mx9.freenet.de)
by mbox153.freenet.de with esmtpa (ID exim) (Exim 4.85 #1)
id 1d2mfr-0001xg-LW
for nerv@mich.net; Tue, 25 Apr 2017 00:41:39 +0200
Received: from 122x215x126x158.ap122.ftth.ucom.ne.jp ([122.215.126.158]:42395 helo=vvp.jp)
by mx9.freenet.de with esmtp (port 25) (Exim 4.85 #1)
id 1d2mfq-00010o-J4
for nerv@mich.net; Tue, 25 Apr 2017 00:41:39 +0200
Received: from [10.0.0.100] (unknown [59.60.28.232])
by vvp.jp (Postfix) with ESMTP id 09A071882D50
for <nerv@mich.net>; Tue, 25 Apr 2017 07:24:09 +0900 (JST)
Content-Type: multipart/alternative; boundary=”===============0861736202==”
MIME-Version: 1.0
Subject: Final Warning !
To: nerv@mich.net
From: “Administrator” <yamamoto@vvp.jp>
Date: Tue, 25 Apr 2017 06:24:01 +0800
Reply-To: peters777@1email.eu
Message-Id: <2x170424222x410.09A0x1882D50@vvp.jp>
X-purgate-ID: 149×285::14×3073699-000x003E4-2577xCB6C/0/0
Delivered-To: nerv@mich.net
Envelope-to: nerv@mich.net
X-Originated-At: 122.215.126.158!42395
Delivered-To: nerv@mich.net