DirectPerform™ Inc. löst BGO ab

Die erste Spam, als deren technischer Versender sich die sog. "DirectPerform™ Inc." zu erkennen gab, kam am Samstag abend und war von der Thematik her eher der I. WEB LTD bzw. der Freien Verbraucherberatung zuzuordnen.

Gestern abend kam nun wieder eine von diesem technischen Versender. Es handelt sich um eine Casino-Spam, also eher die bisherige Baustelle von BGO Entertainment Limited, zumal der Link letztendlich wieder zu "mrgreen.com" in den USA führt, einem lange Zeit von BGO beworbenen Casino.

Bevor man dort jedoch ankommt, gelangt man erstmal wieder zu einem Server südwestlich von Bad Wildungen, nämlich zur IP-Adresse 94.249.252.131 (GHOSTnet GmbH / Deutschland). Von hier wurde die Spam auch wieder versendet:


Return-Path: [no-reply@vorteilsaktion24.de]
Received: from mx034.directperform.net ([94.249.251.77]) by mx-ha.web.de (mxweb101) with ESMTP (Nemesis) id 0MMDBp-1aLyUH1Nmf-0082dI for [MeinName@web.de]; Tue, 29 Dec 2015 22:39:44 +0100
Message-ID: [09F3B99FA377598A56531AA6B239A87D@vorteilsaktion24.de]
Reply-To: "Vorteilsaktion24" [no-reply@vorteilsaktion24.de]
From: "Vorteilsaktion24" [no-reply@vorteilsaktion24.de]
To: "MeinVorname MeinNachname" [MeinName@web.de]
Subject: MeinVorname, sicher dir dein Willkommensgeschenk: 100 Freispiele + 350 Euro Bonus
Date: Tue, 29 Dec 2015 22:39:44 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="4a2d7e83b9ee36fe2c562c0071d5"
Envelope-To: [MeinName@web.de]
X-UI-Filterresults: unknown:2;V01:K0:u1d6xz/P6pE=:O/2Bz88vmQ8uyrjZvAPKBlh2Yr 6hXcyNsZH6sjGpbj1CNQYJdOHC3+NVRsfJ+p3EKjPornW0BF77x+PO1mXyFI3DYBDgH9zgvRj v9qKMuqJiaZ50O0jP++RgL5dew4enR1PuG++Ro+azOI75s4rygiXWIKVQcYnd2QKFjPWeO7Pu fBsIFZu587GvIcgEpXft8llwLkGrhieMr147cE8fU1DepKN1yLlYi9dnkHisZ9S1m35JPUkeb kj9IkmipdOwDmN54G4uAsQsxrJN+/1nfPRYXhZSWN1Ij/HwRWDzNsp2nxAHn+hvvwn6mNYh87 mZkpJ94BeYlwk+bXhaosEBgk4OQ2Qe8KlsfxRKjWIT8J5t8wxUfelTJ4VbNttFmpKjHMuWJAr yCBWCOy7PKjbk4gDAqSZJNzrkuIybvAyRW1ZCvY5JpemFs526A5ewHcTqAXpJu5HQYkSYYJF0 hQK2vVUfKR9JXjsj4BJk/MJtGoPWox0fIPB8pYT1z65ncmVaqKNd28O8dZ1LvljzDZl9v63K1 XOY/OKHhsXaE2ZAjAT2B+om4nxdCnDiROPLUmJT+p8rcMJ0+ZgUxA+6hgtKvANqCOWIbWJ9SP s/jptSLBjWCIaBfILxwpg89lmy2Wj5Pv58/U4vVnFPirgfM9WAPRvuY/3yOM60uYEWLgPlLn9 BVY+YO+YHnj+74hGhBn51Ir69Jy6URxnWUsu539MZPimoTM7+GR+XtiZIv2N/nCAV9qJONlcQ kKi29CgMKL1tAJouaRMuvsG8wb4zA4nBJDjhAcmY613VAPH2eY5Gxfg5hvJ8P1bZVlQG69twb Zfg/u8beolytUwbhIzZSPQ2gTSQ33XYpkP54WBri1El8blfB/6TAtWwE9XV4q7pmuD8yUAzT9 +OvObJvU/oxzTbfdwnn+m9cKmQreNbg+NRV2mzFZiwlDgPfa1XO/e5FJOK4Khm88VAKQDSg83 I9YfYOp+qFu9wmaNwHVfnFqayZvea/gM7nCbYg6zZwFOduKQ4Bkfu1mBBKt/RgQq+VK8eKnwl F0mrsq73JSUsrZJkLz8PXr45CFo5QpQ7UDrUqjvlX3k2jbWvpbAS67ESiwxUx6zQVVjEf9QG9 fmEuAqCIRGEaPgXaUANv8eHDHCKi3Mqf2/Iv3+aM/OYabc40WAHoFGEBF35mxFwfazS7qxW6B uf0GUrVSbabkiGoBLh1b3fknKz6y/zUDWaOws5mTjLVPQALHvA0Xcxfm2MW9rwyELKd6UjdjA jLnIYjtsvQclpF+LOl7nNYJ8oHDdHPt9of3PJO1e/GSrGtzW5GKQmTtS2n6nOaOWaYpq9lpBS Q1JyA0Bf1Z8CaNAElF3TjN5gWMS4wjp9qesXHxdhgaGfWheYshoiBSIfVd3qbg5qADk5BgJtm J2WtGGNj2X5QrUfW2HlKBrL5L0bvU4flHK51+4WJqRkppjkQa8n2VMKJKNvaVv14v7jNyU3Ep J9Ldo9/Sc143uEp6ngYi+9zoo5lI67EPAvDIE1ea8Pu6sAFtMGi3oP2Hu+GDst6sgRw87kQMa AUeQSGpy0atUlMmiLWzkrkgseZULcQFPrfomqIQuXf6MwurzfG/4rKnZJSDOOQQdxE1RevG9P bAYWjK9VPCdzO8HG+by5YStUXZo4av3pylEaslZ9pJ/4A6Qwqd0+Z45Y/qH8mgNIo+fOllzps S8=



Sehr geehrter Herr MeinVorname MeinNachname,

das mehrfach ausgezeichnete Online-Casino Mr Green schenkt Ihnen 100 Freispiele + bis zu € 350,00 Bonus.

Registrieren Sie sich jetzt kostenlos und lösen Sie Ihren Bonus sofort ein.

Mehr als 400 Casino-Spiele und Jackpots über 20 Mio. Euro warten auf Sie.

>> Jetzt 100 Freispiele + 350 Euro Bonus einlösen

Viel Spaß beim Spielen!
Ihr Mr Green-Team

» Jetzt Willkommensgeschenk sichern

[http://www.vorteilsaktion24.de/?campaign=mg]






Hinweise zum Newsletter:
Sie können sich aus diesem Newsletterverteiler selbstverständlich jederzeit abmelden. Wir nehmen den Schutz Ihrer Daten sehr ernst und führen Abmeldungen täglich durch. Um sich aus diesem Verteiler auszutragen, klicken Sie bitte auf folgenden Link: abmelden

Sie erhalten diese E-Mail, da Sie sich auf einem unserer Portale oder einem von uns gesponserten Projekt mit der E-Mailadresse MeinName@web.de angemeldet haben. Die auf den Seiten jeweils hinterlegten AGB fanden Ihre Zustimmung. Sollten Sie hierzu Fragen haben, so können Sie sich an uns wenden und wir werden hierzu Ihr Anliegen umgehend bearbeiten. Bei Fragen zu dem beworbenen Produkt wenden Sie sich bitte direkt an den Anbieter. Bitte richten sie Ihre Anfrage an abuse@vorteilsaktion24.de .

Die DirectPerform™ Inc. ist technischer Versender. Regressansprüche gegen die DirectPerform™ Inc., die den Inhalt der Ihnen zugesandten Nachricht betreffen, sind ausgeschlossen.

Mit freundlichen Grüßen
- DirectPerform™ Inc. -
2105 Madison Avenue
38104 Memphis

Kein Spam, sondern Bla Bla

Attention;

NOTE: If you received this message in your SPAM/BULK folder, it is because of the restrictions imposed by your Mail/Internet Service Provider, we urge you to treat it genuinely.

This is coming to you in regards to the recent meeting between the United Nations Compensation Commission to restore the dignity and Economy of Nations based on the Agreement with the World Bank Assistance Project.

This email come to those who are yet to receive their compensation/inheritance/winnings and who have been scammed in any part of the world, this includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or Compensation payments that failed due to Government problems etc. The UNITED NATIONS have agreed to compensate you with the sum of $4,700,000.00 USD (Four Million, Seven Hundred Thousand United States Dollars).

Your name and email was in the list submitted by our Monitoring Team observers and this is why we are contacting you, this have been agreed upon and have been signed, so you are advised to contact Mr. Alex Bates of the United Nations Compensation Commission, as he is our representative in the USA. Contact him immediately for your Compensation payment of $4,700,000.00 USD (Four Million, Seven Hundred Thousand United States Dollars) which will be released directly to you in accordance with legal clearance and procedures.

However, you should send him your Full Name/Telephone Number/Residential Address/Gender and Occupation.

Contact Mr. Alex Bates immediately for your compensation payment by replying to this email or emailing the address below:

Mr. Alex Bates
Email: unccpayunit@uncc.twomini.com
Phone: (347)-796-1552

He is obliged to give you a call and treat your case with utmost urgency as soon as you contact him and fill out your correct details including all reachable phone numbers for him to get in touch with you via phone and email.

Good luck and kind regards,
Making the world a better place!

Tamara Tomlinson.

Return-Path: [info@uncc.org]
Received: from s17417007.onlinehome-server.info ([87.106.230.75]) by mx-ha.gmx.net (mxgmx006) with ESMTPS (Nemesis) id 0MUUGR-1ZlfKg19oh-00RJe3 for [contact@spammirr.or]; Tue, 22 Dec 2015 03:28:45 +0100
Received: from [192.168.1.107] (unknown [178.209.88.99]) by s17417007.onlinehome-server.info (Postfix) with ESMTPA id 118FB25F40; Tue, 22 Dec 2015 03:10:16 +0100 (CET)
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Your Payment Notification (Urgent Update)!!!
To: me [info@uncc.org]
From: "UNCC" [info@uncc.org]
Date: Tue, 22 Dec 2015 05:10:13 +0300
Reply-To: unccpayunit@uncc.twomini.com
Envelope-To: [contact@spammirr.or]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:/WByHBwc0kg=:hsL7dtqq/t6VJHsYdbEtXkU+7Vv0 yzlqqHzoPsZnRBPUpf9DihjHNGZR3j4IXZ9bsr5+FwaNJRrpXl9stPCQbMtIWzoVp2jEEkHOE LFFNf/lDNnUWqMFSLFKgnt8ASYEVsWf4fsLGpMQRjHU72jNawRah1vIdxnYUdkxLOvg1HKxQf no3IG8nirXQSVxpWhHlSBfC5Z1IUa8UXAlZD/BF508eH3DATgXYrPbZZDK4sy2+23yVF1W93D YZOEh+70eB3gSlpnLHyX+D9KNV1RhBhrTmfI6X9sHo2Tdoc+ia0G/Z4GCc7menij4cUvMwYW1 vfKELGZYzRgkMv0ZZEKNifPtvd5wr2uj+Id3ESRGs7LqSldTPfJLnF64oJRx1BuhG4eeaNMuS 1RGenUT2eddbXmNsIDXeGtVw2Xr4s5qqsINhMkUPfaJFlLcTZugq8Pxjc8ONBD4JYDSl2fOJl 1a8t2yPnl41gA2wEsaKS9WjQx6AkJj+i1WPQQfcNEvIcs6SBytXmrtkk8YAbmbA8aLSwK9Ezz gan0kuqMoM+U0QHwXIbxlhSdc5beXseeqW2kFUVma7MDodN4xIDj5YyN6qgQ3v/ymgfM2o8io Mqbwa7ncl8Aygec67fg7uxdsdxVYMo1kTYna4RyvM8Y9HyWoCTzoEpt4faY6nTbswLnqB01zg 4F7fJg7MkGRTy1mjDCt3vRMQlLjYZcvQnlJ9KmGcGlRwvKOnXswkA2sddkIm1QzacSfM1GwTT Bv1JUbk59nFe1oZcRyrJJHf3Ha3O9hrdfvbzYBxUTJHhgScC9SDFgIo8hVCDQX0ZINP9YxICx mFU8xGS05qrNB2bzvgeXaF+X8BbiEceX7MO+dv4im7UCIieCnVobcuq6zyCxyeSQaei4sgDMB Gsqz8TXCE3iEilYS2DuuTvoERlZc9GfDmvLocyZAocRoHufuGTFdpee31sd2U57f1C/AZ+8K7 EUqUm4QzpJXg5LXKCyS8XtMH3RUtoEfN4Gvl36QEXjPTxbUZp6YJ2xUOkkYnT2X5ilFoYAGvM iCnE3huBJxa0s8VkN/OJxFTdbBryCcAg8nbpud3CKSDsoXZ3PkiEPEaAlBnOMjdIEoJYyPvFP QJRuSATz8wPSSuElPpHF3lmkNvvkBloZVqk/9aWW0fdJsWM95ekK5wMIax5rxSe1NdRgVa/Fb yZr9JyhHGREl7lApeyinEKe89o+Pj1YK1sFe/T9fPXJD4vRe4KlP1RpRL7LMC3uf25XaY0IH5 f61Je8zjMe1Gv/T+SiZYd07aoVVKXogha/WihWgGvPt1k34DrgXinE2OktSvMKVcK3/MULcmP VfCCLDps6/8k/uXaTjCQRcAwLxZYlsqVG8LSHTjcdb0Oxeo1blGAueKpHuZbATfAZoEridM+n 2ooPTJhDqd2nPaHENtGFM4IrDSPY/YjeDmnyvtbyLyPOHpxQZai2AfXqvXKwe29/rlNV0MdgQ +zAeijOcYVeT69qOXkfXBS1gSrBpBks+9uWyLS12YBd8O1vqS49e34WRkY+hjDdiUVOs/fpzM kK/lUOPxvIJgFOa5gh3jngnfJN/kYgU80ls3ckALCObu1TgKRZVBHXXc+UFPYt2c4PdXLiIj6 iDWba/t1kMaz8fANZqkwuWw0ktsl5t

Wieder geht's zu Euromoon

Diese Casino-Spams alle paar Tage von GeorgiaEleana sind im Moment die einzigen Spams, die ich von BGO erhalte ...



Return-Path: [web.de.887010.MeinName@mta35.boriq.com]
Received: from mta35.boriq.com ([198.102.12.169]) by mx-ha.web.de (mxweb108) with ESMTP (Nemesis) id 0MXrpb-1Zg6HT3Yrn-00Wlsu for [MeinName@web.de]; Wed, 16 Dec 2015 05:53:57 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1450847316; h=From:To:Subject:Content-Type: Date:Message-ID; b=hd8bMvJvdbzz7ChV7KH8h5grJrhlLm5jUAtSymSW5zdX2 G1qXYbRRP44WLqz4bso8LMb92ZEFRTdSbQHFd4e5Q==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1450847316; h=From:To:Subject:Content-Type: Date:Message-ID; bh=zKbOXuSZETGD8kkFfQEU3ZxVs3Y=; b=Ahl3dfUdZuQf yJBQ/dVI6gaik6rT1/U32VVXHE42pqGegg1TAC8TrcINEJh0HrK5cTBPi+Nf5j1+ WNyFNsT4kw==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=boriq.com; b=nkbXdA3921CCR8zS1hL9I9X9OZFnVlSuiYAnBLLnMSSMZsM1l0tVb+JvX6bBuRP7mIZnyktk30jpOF6RbuNKcw==;
Received: from boriq.com [198.102.12.169] by boriq.com [198.102.12.169]; Tue, 15 Dec 2015 22:34:58 +0100
MIME-Version: 1.0
From: georgia[georgiaf@boriq.com]
To: MeinName@web.de
Reply-To: eleana[eleana@boriq.com]
Subject: Get lucky with us!
Content-Type: multipart/alternative; boundary="-=4a8d8c6d88edbacd44a3c2e951b3b1f1";
Date: Tue, 15 Dec 2015 22:34:58 +0100
Message-ID: [2-887010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta35.boriq.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]



[http://boriq.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=887010&l=0.]

Erinnerung im Doppelpack

Mr. Davis Antonio von der sog. "Chartered Standard Bank Group" kontaktierte die Blogkontaktadresse von "successfully unsubscribed ;)" zuletzt vor eineinhalb Wochen. Heute nochmal das Angebot im Doppelpack - allerdings nicht mehr aus Nigeria versendet, sondern, wie auch schon die gestrige Spam im Namen der UN, aus den USA:

Return-Path: []
Received: from na01-by2-obe.outbound.protection.outlook.com ([207.46.100.247]) by mx-ha.gmx.net (mxgmx011) with ESMTPS (Nemesis) id 0LsxBq-1aEwk93MuQ-012Zh9 for [contact@succun.su]; Sun, 13 Dec 2015 01:26:24 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=web112.onmicrosoft.com; s=selector1-web112-onmicrosoft-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mJg+gHwlrK+cv/Pwf9oThry99sNficUzZfQTtkmZjqI=; b=KbFPl6ODzFXwXy5ljG5RSsD7vmx2nu7uSLNrOmK59s8/f0t2LYKdJE9MbaNhD8nugluqtraSV+nlmVd33jq9G1gamV6zUGMpP5FHjciB3s/A5bxXMq/sV3+8F+ztQT7EBIZCILjeyh5gXKm22IE1jkVibQExhihXmq8Druq4i1E=
Received: from [10.10.10.1] (216.84.25.90) by DM3PR20MB0681.namprd20.prod.outlook.com (10.164.250.145) with Microsoft SMTP Server (TLS) id 15.1.355.16; Sun, 13 Dec 2015 00:26:18 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Your Fund Approved For Transfer
To: Recipients
From: CHARTERED STANDARD BANK GROUP
Date: Sat, 12 Dec 2015 18:26:35 -0600
Reply-To: [chanteredstandardgruops@yandex.com]
X-Originating-IP: [216.84.25.90]
X-ClientProxiedBy: SN2PR80CA014.lamprd80.prod.outlook.com (10.141.39.152) To DM3PR20MB0681.namprd20.prod.outlook.com (25.164.250.145)
Message-ID: [DM3PR20MB068149CFD01D91D0CBF7C6D4B8EC0@DM3PR20MB0681.namprd20.prod.outlook.com]
X-Microsoft-Exchange-Diagnostics: 1;DM3PR20MB0681;2:jA9TWrHGFv0neTpbFCaIEVDNHT+U+Y4JLLVOk6E3yutT9ZbENaDqDJTi7F398UkRip0bxBrKjQkEiqE9Bbe/MX+g6NSEV4ey0oUyqRAHI6isGWdpLpFRZEFuTnXCSlKbmwft5VcoDeNpx8kB7LrtkQ==;3:/OoWtPx/FIFMz0qlq5jYr9IQ2y4m6dH28tn04MBmRfW9TwToOCLHP/+ZjA56kmXJYpVT063xjNpuMXrVCR9q9DYNtMGqOUaaCtXe2WUAM3ZaxFHSadDUl6GATIIkOmsD;25:0ue63BzijCmLnl/Ex90yUkxIeTzJtLpgq6u37ZLtjMRsQVP63SpIszipxUy1cV8uBlLP1ITb/XlulPqlLTBL7ZvkZMlSVlyF8viPD062eOKcHS5gyIxEJkR8EVfrPHTUnUvgIYftv+Cfb48TBCReaU4ZrZjFae+S4DoT1QZEI43OxOf29mFVWi0xDy1CbHZvqXq7Hv/0c0w/bce8VhUMgc8yvFrdGuz8pvZlKtoOeU/BsVxPmIXJ/cQHpNrjwA/Z98V/pSt9Cf3qVtWoT2VF3A==;4:BMjaUx9L1HEMKOKcYH+aHyWHY+8LDrxa6C4q8w1oiWhkvcpJiXTNuVkhNhDyzwOH+QPu46DttBjM3Ksi3Y65AN3HLGu1fj+4P/mKtkH401quw5knEnexW3GyWkKu70/2MdHihAP2+KkbaCZDgPvl7wo5no5caSi+wMT1WdR8kCwK5F2RAMqygDubYfhPHCaDD9T4AKNzQkqsqX0iREGwP5Hpr639l753VuvUlGGQKXB7savdnx4D3hUEOWXQ+opOwtxDt89VA7ljOYC7AKbvGLfFaEn9JD3yv/gJNiSjeHUcjzd85pbKEWKvBikuoq2jlOcqOrXufsAqg/IcgtV9xfkMN9RbegOEqSuXrDXY8J56WfT6Q+ZL7O6Pd/2sTNEC
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:DM3PR20MB0681;
X-Microsoft-Antispam-PRVS: [DM3PR20MB0681FEF9A5761B6B16E34EE9B8EC0@DM3PR20MB0681.namprd20.prod.outlook.com]
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046);SRVR:DM3PR20MB0681;BCL:0;PCL:0;RULEID:;SRVR:DM3PR20MB0681;
X-Forefront-PRVS: 07891BF289
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6009001)(6049001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:DM3PR20MB0681;H:[10.10.10.1];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: None (protection.outlook.com: [10.10.10.1] does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;DM3PR20MB0681;23:vEO6L5Py13BZf56YrJzsaZdoT84kGB+vo2t6sGjrTJpAzoGZ8j5YLZXfPZiFJWYRA87GhJ9F5nAo3xdu3boU8VDYFHoiYhRBSmcxwhoc9Hx7c7JPdkx0dqcwjI6ZTBqpQnxu4TZzyVpJ+2alm9IQ2fdCsK6zFdnpX+fxXEEO9ZvzzybgeC6Vd7tqZkp0Kbk4byPgK6V0ll6JQf7iX7H6237r34hyhpgYsaGl0iwms6avBeT/CfiZRsiqeMUNYCfYPuQOB2ahyAehLBuR1itqY2y9krFcGlLzl4N52MoCLN8=;5:HvOi2pK/PSTXSjZR72cnKW3v3Qxw370539xyiF3g5sqm8Zt+IntyrqiW0mW9KXJ3T1iDni6RpRMx8yD1vbdPqT3hOHW+oOe1Ni01yWb6EVRmCGPqUGuH70WIPOvSfxO1px9bli8XE2J8y6vJvoSAPA==;24:bxBKKem4HoNhYTx3vZ+kMA5rHD6fzUan8ufF1nF8+q/uXb14DXvKCcrObAA44+JizY3l1TOgJhBOAv9UY7QSCQ==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: web112.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 13 Dec 2015 00:26:18.8947 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DM3PR20MB0681
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:2jj8IN6w6xs=:XjdIMvEm6xCE7acR+kYsuN6uwTNA oVH5tcgnqo/9KTvjVtw3qdRKcO0mvwp1zUxXFO+Y2bbtorxqpibf7VTd55HLk79AEEOJOZdLM sYZRvtCSSdkfxAhvE1ayN0RgAiuXIJd+YFDOy7KkGQbB+2+vrr/9g/g4O7zN5gtXFkJjA0SZz zILzGYQG6v/2+mhdIg6QAAQyYId1yRdZXOE0vHsKk6FoedIU0fen/xGq6x69UmMH/iFtqNiRO SngzZRvuY5xCpvSjk0NpUoo7cx8I+0uQCFE50CJwiVt1L075UHSpnplC7SYY4UXL4ZVTQUdPj h7Kg6inyjWgfQ3QZgD284DpbaiC+vJht11kBVRg4Glca/O9Y2ZXpmcGuVibEVUhxN9UUZEqXI lrp1xp5O6c/TFH3rurGvVSLXnf2yRA9fZMA56Gsb7BOjY0/cYpNmR8esVcAVbqAU/GiaOOQ0h qM//A7xjSJw8IKOu7a5J24ntuCnpOidQeTwH1G2iDk3ZpPdifMxKVIM+8kmdb8fa2Xb0wBiBS grtaORWqHVvd8J+WEP1JBmLydrzSrHL++3OBPjNgVsib5ivgJVH5MdE+WsEjBBk92D+wXmhmr Awsk8m9qHabxmTYN3LvTjkIKILs8Kou92+1nyqLS73M1dJ6hpTzqZi+FojoHjyA7XxR+TqGJv OUTkQW0xpJkEBpRzOd23/LWf1Y9XhV6zvpYbhnev6m5ZoK8SEJzm4H5KXDTgFxJot8QKzRyPU Yk6UJyHi9FXP27MXWaMT4l+sJWlWnuuOEolUTMRcC2GtKiEmpUwERyyVAQN1Wcqfjj6B+TcOM cT2Irh9whJtO1WP31TbisG6LIVO8GV+0Y3J+PUnPUomZYuKs9uQSO3ZYokvqdYedEFs3/AoGN X28XhZ8kXdymQ0nn3mquWnF0zODXSsh+/3pzdZsMU1L/jjJ+AQFGXjMpbRygBYpOYVJMX09Wz +SPpszYWb0C7SAyOW8xVZ8GHmt3WzHAZTDPkLPaYYgGZQinl8AI1DSlCfLBqSiHXpMoZKNPKd 9vOQyOvfqPnao56D9mLgmSt3fWkpvjQEcm3grzgsN0AHVS6Cm3BPIaK0vsuWvpHn2xmb2tI1j SsVwfE6A/D5XBEZM8uElpR6WifkuBB2wPWExO69ho9HCsW0GmXZFcrn2xKNbiFqs0pD2CJtz1 VSNnY7+0i9b7E8Q91+krWq/7/jsgIQM0DI0ru/FYSpQdoBiabwG04tLMB8QkDxKX+mX++tp6F VeFLwhO9UyD3Tk7bFIi8yMF5oPFYWD8vpfRrxJsrODs/EZen/hgmyP7DdcM/yy7stOcd6IL+i Se1Ba4VEkJa400CFHvqIDNMaV2igH3o8jDSZB4KREtbvJ36uScP4XgjAeGmD9660NbVO1d5F0 FUvWxPw/tlalgreMf/wxUYYnLtjOZz/Q08ieU2uU41eXIXHNWUBahtstNK9UP2E49Sh/7K2Pe Hbn3GgMjQ/FYplgBpU/3CZn6W2o=

------------------------------------

Return-Path: []
Received: from na01-bl2-obe.outbound.protection.outlook.com ([65.55.169.250]) by mx-ha.gmx.net (mxgmx111) with ESMTPS (Nemesis) id 0MB2OO-1ZxxVe0xwi-00A0pD for [contact@succun.su]; Sun, 13 Dec 2015 00:34:02 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=web112.onmicrosoft.com; s=selector1-web112-onmicrosoft-com; h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=mJg+gHwlrK+cv/Pwf9oThry99sNficUzZfQTtkmZjqI=; b=SNdkh7amPuRCP18xoYn77LRg0AeI/6t0wgYKCmSNG6kcwth1WWPBs1VM5/saLvqyNQOwV9sdFs105kG/kydy6f0dpGEsSXLVWWrGcn6nFqRi6YsQhf9WZkSkAjt71WVB4bzysU2i8g828bx1m6Kug7Q5uENEtSktOpq0r5VImTA=
Received: from [10.10.10.1] (216.84.25.90) by BLUPR20MB0225.namprd20.prod.outlook.com (10.162.238.148) with Microsoft SMTP Server (TLS) id 15.1.355.16; Sat, 12 Dec 2015 23:33:58 +0000
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: Your Fund Approved For Transfer
To: Recipients
From: CHARTERED STANDARD BANK GROUP
Date: Sat, 12 Dec 2015 17:34:12 -0600
Reply-To: [chanteredstandardgruops@yandex.com]
X-Originating-IP: [216.84.25.90]
X-ClientProxiedBy: CY1PR13CA0011.namprd13.prod.outlook.com (25.162.30.149) To BLUPR20MB0225.namprd20.prod.outlook.com (25.162.238.148)
Message-ID: [BLUPR20MB02259F94CE734D2CCB0C7A10B8EB0@BLUPR20MB0225.namprd20.prod.outlook.com]
X-Microsoft-Exchange-Diagnostics: 1;BLUPR20MB0225;2:ZgvfD5jYmo6AdxPc2MIwd093Wm7mzzXP2032nzqbRRfgPmlIFiQbBkTDVWuB1MiBC07YZzlKBS2wqpUlPyZx1DyayAW0D3d/VEGb8mWeQ87N8tMmHVsF0DwcfPRfkrbH7gr6wUWU80pTEt6cVd9RjA==;3:zTahvtmryP2XDRS+07RZZ+8KPWul8XAxd7Z/Xr4gid+zzqQz8j7mG8DlupbPZrTirHOWg3ubp3WhrswW97QPA6BawnIL8N1X+cERz9AhRzF0R5BZqPEE8kobM7bSXMB4;25:sW2mrpNZwvcPR1SV/7ioAOoxSRjodfpSaUTjCb2afrKfxMC1HQfjHHsaA3w5/+l1IY3RPVV32FKiPPMdJrxqpcWsmn4mEZBX6YE1/Y+G0d60Rc9qnn7qAyTiW/IMW7Y0yUBJjBkeAgNVxTTwBm2C75mF5lX+BBpTyidNrSkSt4j/HmgCOHSfcp4zjdwGIs26BJZAcdHt9nN49ctFw9f8fShCMjGvoLlt2xtEkJ5bUPar9Eav3F1H5Md45CWS2NzL6jYJ4z6AomMyYEM8J261ig==;4:UN2FDD02kuYBHJCCgsatEPhIPugnr9DBCtVKRSTyllIt5cXb7aLyqJVTLK4bd1GjneotcAszYbV9l2/ZkBG5zB4R6xGAH5xt1jjjBlOjFaAoZjlaTioLCXGH8If4iw0U5/x5lxrqG7b/tlMupwzOtdD14uDOlCyis+9Uc6XQ+TReiIiv3nii/CX2BPh7Xv6iQD5eZwrbzuCnwNH1l+XkcTypvtopX7IWsR2w3nkHoormBZZBepkkV4vhu0P+hJwNBsszD3+CnOqb8HzDRx1ItOh4Os7oONWhXITtPCiyq8p4LqHss2OhCbt5jPGJPY1QE4EHWHma5WNtJR2R4DuvRTMDophU8QHR5jBp/5QfQ9kyk5ZCiqx9+ygY9JnAhIXB
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:BLUPR20MB0225;
X-Microsoft-Antispam-PRVS: [BLUPR20MB0225606199B28724280905A2B8EB0@BLUPR20MB0225.namprd20.prod.outlook.com]
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(5005006)(520078)(8121501046)(3002001)(10201501046);SRVR:BLUPR20MB0225;BCL:0;PCL:0;RULEID:;SRVR:BLUPR20MB0225;
X-Forefront-PRVS: 07880C4932
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6009001)(6049001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:BLUPR20MB0225;H:[10.10.10.1];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: None (protection.outlook.com: [10.10.10.1] does not designate permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;BLUPR20MB0225;23:2w209tufNY/kKx8lhXPuORr8GqrSvkblYgR2VP/3YfuMTZFo2CaoPB4Q52btWIv4up786sH9pftVDETccatZRmcJu3FWnWjqgNHXtW9GtttNzWk9q+UfX4ZGRKcQO3+hxYr2KLqOAlZSftXTHh8MKw7coTGZG+dSphP/r8KU5o03ESgeRwLRdCPDEfpVrO8vJov37SVKyS7LRudOs6jdS/1fLAtw8FWMXeP8WpljpCnYFtnbWncnk0WB5FcnhRdi7UaeSKc9xNfxZzvuYLqSesWZKHHVHESKKG39yvlCpuk=;5:TorkhhUhTn8FtnHvBUwIceIAzIuFiKgnyohNgjxy58Xq9fYVDJM+FG8TAI+R0Gsl5XfZ0DPPsIYBK4gk8GEyt6eLZP6MZmi0Ru+TCem6NJs0Abgsm73HnKhpXibeRq52KUDWVuzdDvxSEXQTrdkWhA==;24:+uQ9xPoQlK1KadDhh/vEot8wQ1y50qe1eYZJqea8MBr/3e9Vqzw9HsJV2BtMBsk6QD/tf9idyqkCATz2Cy96iA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: web112.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 12 Dec 2015 23:33:58.1851 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BLUPR20MB0225
Envelope-To: [contact@succun.su]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:HHrxKVBZDoA=:8152j40oBp7z9Vb6WK6EXbw827zQ yj63Qs11VyULpL52Fc8abHY2DBtsSfWj6BzoYHs/0pM+tzO24D9rbryxqpF5rahfabvEoYGQk ekZtmjvWRA6hwf/lSHQftCFr1C5lACTVvUuOlPEj1Vv1X1VyvthSMpVSQD0V4SOcY/M3mbdFG fwNV5REd7HttPV2iUj1aFJ51XK8Xl29uQMDXxEAHG9+yeVuuBLQ/S/Aoe+pP/+LKD1bIjYfOH +/FDtUQPoL1Fo0Evyf0ChsR5IcOfaWFpvMUsFB8eQfQ463o0rWoIxBhtl3E4MmmL6sbjW9cPg C9xW8nlCbDr9Da2wLjSn5yuosusTBJSSKpbVfGTflIO3n40pHNAySsBBIVND+DiDVkSCGt9UB 6nEzmWiP+uy9u6mXJbWcLOJ2Cb2Ffa8D2ILpOc4rcwXiiKDcSonLkjrtEF6c9kCUyJ1yVsm1F Cjs5LXYwz5g2qJdH983FbSnL8WdXGbMTXZrdIjtMkwKm6382cZ+4NrmUb8ZAPdU33h8YlxwkV liEePj7an1K562pkKNzjpht3TnT/WCdR2JUhAu/Fb2HHm1W+xE3DNwQZ6mbdBa2qUBxs5VRw9 bK2ZSng/OrA30e6+/biFgy6RKT8eKXHlZluxepbFGD8z35rXDMBwqw/qWFTd7qtjrIMtJKZ/z PLjuJzcPwj2BErJSLRID3itk17jGoITDCP0LpUcjmermJxd7OQOItzSR0vMCqdUvFBfYIQw0o sOcrHrC0Ho5H3pM51RI+JLXodN6I0jAmT8U0assy3r/MDu1Yj/OcaXUsmjkOFXADdf5TtimC+ xVS7CmqdvW21Ed+iYxgZJB3fMZmXxpyMX6mN3IMAoH3XF6gB+gnE/eeACCk7PWSiF58VFTSfa zOmtFXvLgWS+603G3njMr7o7f/AvkcRgUy++vT88/KuKVIiFvjV6/Iq39bCPakkUDQU9S2Bpk L2RJq46LrKxLJJmWlrxirbUscr6Of002Nir8WShbWarMimQSkEWU5xNeaoVqU1FMahl81UUNQ JMFprZdQ5car+R+pNso/YKrwx0AF/bHZbmH5FhQ3kJFh7rKvZCvaKe7WsBr0yuyW1H719MgTv jlVjr+VvxbPIyIdPe8XI6ubI8TFd7eDm7vZDQqubEAHa5ULW52bEGsQ/BtBN+oZ1kUvg+CFmH AkODSeCPq0hsdxrkQ6eGgxjfNS7eNfiJrGECDjsbKMow9mzThVBbHIpJsJklZi2YwOxhifDpi IWVo8ou7W4S/9GEMqHDMiBZX4+7KKxVDN9QPsjmkleGpim6Mnigd+W+oX7GhGJ22iqhvN/9A3 4I0IXwfumHKkWw9rfRPTYBVL+K/CR4SdxOE44rDBPuUsYveWox0E4uJc8bzOiqMG9b



From the desk of:
Mr. Davis Antonio,
Head of Administration,
Chartered Standard Bank Group.
United States of America.

Release of Your Outstanding Fund Valued at US$15,500,000.00

Dear Beneficiary,

We write to inform you that we have received an authorization order from the Africa Continent Government prior to the US Government intervention to release/transfer your long approved fund valued at US$15,500,000.00 through our enhanced Banking operation system here in United State of America in order to avoid any further delay in releasing/transferring of your funds to you.

After today's board meeting of the management of this Bank, States Department of the Treasury, Federal Homeland Security Agency, US Federal Reserve Board, The Reserve Bank and the World Bank Directorate it was concluded to deposit your overdue compensation fund worth US$15,500,000.00 with this Bank for onward payment/transfer to your designated/choose Bank Account, the reason for this is because your name is among the lucky winners they funds have been delay or denied by Impostors/Fraudsters.

It is important for you to note that your fund transfer process was over delay in Africa/Asia/Europe due to their poor banking system and desire of the corrupt Government officials to extort your hard earned money. This has been the reason you have not been able to receive your fund in a bid to claim it.

Furthrmore, you are hereby advised without delay to stop all contact going on between you and anybody on Internet because you will end up at nothing, as we are here to ensure that you receive your fund (US$15,500,000.00) with direct assistance from United State Treasury Department, Federal Homeland Security and US Federal Reserve Board in order to complete the transfer of your funds within three (3) Bank working days.

FOR RE-CONFIRMATION AND VERIFICATION PURPOSE, WE ADVICE YOU TO FILL UP THE BELOW DETAILS TO AVOID WRONG TRANSFER OF FUNDS,

Your Full Name__________________________

Your Current Residential Address (if any Old Address also fill it out) ________________

Your Sex/Age___________________________

Occupation______________________________

Telephone/Fax___________________________

Next of Kin_____________________________

Next of Kin Telephone/Fax_______________

We look forward to your anticipated response with the above details, so as to enable us commence with the immediate release/transfer of your fund to you.

The Chartered Standard Bank Group will immediately release/transfer your fund to you upon your reconfirmation of your details.

Your utmost response is needed to enable us proceed with your payment.

We are looking forward to hear from you.

Thank you for choosing Chartered Standard Bank Group the one customer Bank.

Signed,

Mr. Davis Antonio,
Head of Administration,
Chartered Standard Bank Group
United States of America.

Die nächste Phishing-Spam im Namen von Apple

Nach der letzten Spam im Namen von Apple vom Sonntag heute nun eine ohne Text. Die Bitmap, die dieses Teil enthält, ist natürlich wieder zu einer Phishing-Domain verlinkt, die diesmal unter der IP 181.224.143.217 bei "SingleHop" in den USA zu finden ist:



Return-Path: [ph5s607@s007-ct-ffm-r01.ec-c.net]
Received: from s007-ct-ffm-r01.ec-c.net ([85.190.1.220]) by mx-ha.web.de (mxweb105) with ESMTP (Nemesis) id 0MCbl8-1ZxA530cdO-009Ndh for [MeinNameInFalscherSchreibweise@web.de]; Wed, 09 Dec 2015 02:41:15 +0100
Received: by s007-ct-ffm-r01.ec-c.net (Postfix, from userid 1798) id 45219A34F97; Wed, 9 Dec 2015 02:37:54 +0100 (CET)
To: MeinNameInFalscherSchreibweise@web.de
Subject: Problem auf Ihrem Konto
Date: Wed, 9 Dec 2015 02:37:54 +0100
From: Apple [apple@service.de]
Message-ID: [4eb759103bfe74848696e95bbc1241af@bunker-knacker.de]
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Envelope-To: [MeinNameInFalscherSchreibweise@web.de]



[http://www.comradeapparel.co.uk/errors/cgishell/online]

georgia löst eleana ab

Nach einer etwas mehr als eine Woche andauernden Pause kam heute einmal wieder eine BGO-Spam. Diesmal wirbt georgia für das Euromoon-Casino, die Antwort geht jedoch an eleana;)



Return-Path: [web.de.869010.MeinName@mta67.boriq.com]
Received: from mta67.boriq.com ([198.102.11.30]) by mx-ha.web.de (mxweb008) with ESMTP (Nemesis) id 0Lw2CD-1aLORJ26zl-017oIc for [MeinName@web.de]; Thu, 03 Dec 2015 14:07:21 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1449753684; h=From:To:Subject:Content-Type: Date:Message-ID; b=du6bVzK6xG3I1uLEfQJ/AQp6Fd9SLsF8oQVYxtQ8F3Lc8 wAb4ehVNyCXJZ3UqkEA0qdff093/YsjHvCqHeskKQ==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=boriq.com; s=s512; l=9974; x=1449753684; h=From:To:Subject:Content-Type: Date:Message-ID; bh=Ft84ibqpUf3ERF/cHFgZBShi4Rs=; b=wTFN3nnEhlmC mvcMDL6pTotkW+N5HqJvKaFlRu5OiAna79hLeczPgkIJJdH1t0rSztPHJYrmBLh7 ISU9brzxCQ==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=boriq.com; b=xXC0e2SY9gq6jVfrPrGN064qocTOgedV/ZsZ/CcJxFQD0+egAcY6Xt/KRUJNq0t+kElZsgKzpJ8dCQDPnm764Q==;
Received: from boriq.com [198.102.11.30] by boriq.com [198.102.11.30]; Wed, 2 Dec 2015 22:15:49 +0100
MIME-Version: 1.0
From: georgia[georgiaf@boriq.com]
To: MeinName@web.de
Reply-To: eleana[eleana@boriq.com]
Subject: Get lucky with us!
Content-Type: multipart/alternative; boundary="-=c1df7e031db5bdaf48952633382f59e3";
Date: Wed, 2 Dec 2015 22:15:49 +0100
Message-ID: [2-869010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta67.boriq.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]

[http://boriq.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=869010&l=0.]