Weiter geht's mit Sex

Nach der letzten veröffentlichten Spam von vorgestern nacht, in welcher es diesmal um eine neue Masche neben Casino und Sex ging, befassen sich die folgenden von vorgestern abend und heute nacht wieder mit Sex.

Da bei "urlquery.net" seit gestern nacht nichts mehr geht, konnte ich die Links nicht testen lassen, daher unterstelle ich jetzt einmal, dass sie wie alle bisherigen Sex-Spams von BGO wieder entweder zu "ertya.com", oder aber zu "frtya.com" führen. Da beide Seiten mit der Malwaredomain "ckstatic.com" verbunden sind, ist es auch unwichtig, auf welcher Domain man landet ...

 
Return-Path: web.de.3944010.MeinName@mta16.pinkruk.com
Received: from mta16.pinkruk.com ([177.223.147.215]) by mx-ha.web.de (mxweb008) with ESMTP (Nemesis) id 0M5tY9-1Yab6636zJ-00xuxh for [MeinName@web.de]; Thu, 13 Aug 2015 00:10:03 +0200
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=pinkruk.com; s=s1024; l=8435; x=1440022309; h=From:To:Subject:Content-Type: Date:Message-ID; b=G2XTUsUocrr9U81K22cBynaCAiXpIhpfJy76pO4qxwfdK Nw0tnrSXzn7UylQssRk92I2kmpQMltczL458dKcHihFMpUW97NKS5l25jP9vVa6z Ur6Sv32+7UZ88oA7tRXpeRCzLNLC6jlrWCaVAixM8IeiqR3QUU9xyE21DvY+tQ=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=pinkruk.com; s=s1024; l=8435; x=1440022309; h=From:To:Subject: Content-Type:Date:Message-ID; bh=6QYela5m30LaJkz+RwXm7+GLmPQ=; b=PJ7+qaRb9xy208YUgPmG3qW0QbyMpihS6jhiDi48LxJT4LazHpyYjOs9NvvCCX H1HuM9oLaxOUdMOjbZ6cQjGirq+X4jTc9siooZ7msP5lAuUkjrkpIJjC9c6DLzrP fHiBgtv+bWVjJmaNnCdEU5HdwhQ9qIjm+XckJUfdwZGwo=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=pinkruk.com; b=Y6i1PETlPOqwZ5fmPWqvtZ+zQWsARDsXHuRkQ8/Tq3tn0xczENKv89MGM5tSDV9lKaTrwLtRq7CybbE6JomHTN3niA+WhSxJtaMhyjDHWF23LHvpD7j/Ww+/TxRSQ8zxwOeiaBA8kFIrhoQTVA+1ilVrvoui1IMwVBfoM9QwcPw=;
Received: from mta16.pinkruk.com [177.223.147.215] by mta16.pinkruk.com [177.223.147.215]; Wed, 12 Aug 2015 17:50:40 -0300
MIME-Version: 1.0
From: 5 pending messages[5pendingmessages4@pinkruk.com]
To: MeinName@web.de
Subject: MeinName.Private message received from 5 hot girls. talk with them today..read now!
Content-Type: multipart/alternative; boundary="-=654eee3f1401ad0ff2da31529aa3986e";
Date: Wed, 12 Aug 2015 17:50:40 -0300
Message-ID: [2-3944010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@pinkruk.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]



[http://pinkruk.com/sossaht?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=3944010&l=0.]

------------------------------------
 
Return-Path: web.de.3943010.MeinName@track1b.bramjtop.net
Received: from track1b.bramjtop.net ([177.223.139.4]) by mx-ha.web.de (mxweb104) with ESMTP (Nemesis) id 0MN1nw-1ZRs9o1voW-006cUh for [MeinName@web.de]; Thu, 13 Aug 2015 00:06:37 +0200
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=bramjtop.net; s=s1024; l=19485; x=1440022103; h=From:To:Subject:Content-Type: Date:Message-ID; b=qTYCVJ6aoq527rGdS7yHEmlEl+u991G7XmslFl/OM+R9M xZv9Nucdm+eGCrfmwMF4W0/HvqFSI8ecdGnrkBBxEtzcPOr3ZR3X5z5nC6wGBbCr o8phX5aqVRo4w8yNZMw8DjfBvRRzfV6kv4bJdPAQ+Ic/DE8jY/EXCkfw7/9QLQ=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=bramjtop.net; s=s1024; l=19485; x=1440022103; h=From:To: Subject:Content-Type:Date:Message-ID; bh=T3qfE/vQni091lS4APrLKwJ 0v0A=; b=ebEXY2Sp/pKr5XReJbVlSYNyPCo3iYIc/EifN+iDK+/RY1L6782DZhW 20MxwCTS9VA/7posBx1GMcRWnGeqQo6aadXjtcsGiVC1ZMSJV2rcSyGQeD+ZWBsA URs0n73AfGYjs2S/X7NO+PEMNEnFssF7pnL3fZIYtTo9frQ73wiE=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=bramjtop.net; b=prf8+YVBs1UaKJw6CGNMJPvUH6NmsbCl7rwQ7TsL84YZ76ooF/PmC8i4fX+1xG/yOnpqZAdIQBdio17TB3XpccF5nK0oqnm+7jT5jPxdACMJ2xKAi5LnFktp9ZfH9QeQpM8n1utIlFHyRdSi8qdHxEoSnL9nYaEmClohs7ubkpc=;
Received: from track1b.bramjtop.net [177.223.139.4] by track1b.bramjtop.net [177.223.139.4]; Wed, 12 Aug 2015 17:50:40 -0300
MIME-Version: 1.0
From: PendingMessages[pendingmessage4@bramjtop.net]
To: MeinName@web.de
Subject: Sexually Explicit: 10 Messages pending from sexy girls.. talk to them today. Do not lose time!
Content-Type: multipart/alternative; boundary="-=66a2a90d19deaf389c11a61dab2811ed";
Date: Wed, 12 Aug 2015 17:50:40 -0300
Message-ID: [2-3943010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@bramjtop.net]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]



[http://bramjtop.net/sossaht?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=3943010&l=5.]

------------------------------------

Return-Path: web.de.3936010.MeinName@track14.bramjtop.net
Received: from track14.bramjtop.net ([177.223.139.17]) by mx-ha.web.de (mxweb102) with ESMTP (Nemesis) id 0McCkN-1Z8OIG3WzP-00JdjA for [MeinName@web.de]; Tue, 11 Aug 2015 20:58:54 +0200
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=bramjtop.net; s=s1024; l=4811; x=1439924440; h=From:To:Subject:Content-Type: Date:Message-ID; b=qLu8q1/+VHIersSKm7v3ml4zi1XltW72B2wu9LXL+Zrw2 0LOtPEx1AmlzBoAdpimHJB7kO7eJeT3cw6vvYB1ZEtsI4v/rtD/pGdxqeUz8WfLE KXx+USfj1pe2/fFckS2YrwihDddJ7eAuObFoEUUhpWqaKidckpdPYKlIkmcph0=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=bramjtop.net; s=s1024; l=4811; x=1439924440; h=From:To:Subject: Content-Type:Date:Message-ID; bh=AeB94iZwDJy1O9RM0TW27/7/GdA=; b=WFXxAy87dALsKBdAFz0lyJ9I4N36vRGn+8ennzmelsJvm2zDxEFJlw1IHqRG0K 8N5RVglRsh10ImDd0JvNmbl/Bm0JMXv0EVrvaEmlC1eBFiBQ5MsJDRXbND4IfGFO JTzrlD23e9AX4tTBK9FUNsN1rj4AmUOEalXhrMOmJ15XQ=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=bramjtop.net; b=YKCNBAkE0YNrjBpVTicjk+EDgDsO4UlK5jG3fd3DqvvXB9rOizN+qSc1ANAsi7TYdzTHJJVdnqV1PeuPOwd4ElROByxbJkNp9wp1Halc7BiZYeysnhiW9EfPzA+rRW2J4ZKPjdFrz40DReqrqUcty4ORKqNVnGBQIVzdJXiT1kw=;
Received: from track14.bramjtop.net [177.223.139.17] by track14.bramjtop.net [177.223.139.17]; Tue, 11 Aug 2015 15:40:39 -0300
MIME-Version: 1.0
From: luvdontcostath [luvdontcostath76a@bramjtop.net]
To: MeinName@web.de
Subject: Private message received from luvdontcostath
Content-Type: multipart/alternative; boundary="-=dd69a9190cb06c283d804790b5a12ff1";
Date: Tue, 11 Aug 2015 15:40:39 -0300
Message-ID: [2-3936010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@bramjtop.net]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]



[http://bramjtop.net/sossaht?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=3936010&l=7.]