Montag, 1. Juli 2013

Eine Mail von morgen

Diese Spam kommt wieder aus der Zeitzone +0800, wurde morgen verschickt und heute empfangen:

Return-Path: richmaurice25@yahoo.com
Received: from nm29-vm4.bullet.mail.sg3.yahoo.com ([106.10.151.163]) by mx-ha.gmx.net (mxgmx012) with ESMTP (Nemesis) id 0MaEDg-1UeNdx375E-00Jpai for [MeinName@gmx.de]; Mon, 01 Jul 2013 19:09:23 +0200
Received: from [106.10.166.127] by nm29.bullet.mail.sg3.yahoo.com with NNFMP; 01 Jul 2013 17:09:19 -0000
Received: from [106.10.167.147] by tm16.bullet.mail.sg3.yahoo.com with NNFMP; 01 Jul 2013 17:09:18 -0000
Received: from [127.0.0.1] by smtp120.mail.sg3.yahoo.com with NNFMP; 01 Jul 2013 17:09:18 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1372698558; bh=AETHKHtCPgaLH+NUF22AikLqoYUj76usprfvrEdD6wg=; h=X-Yahoo-Newman-Id:X-Yahoo-Newman-Property:X-YMail-OSG:X-Yahoo-SMTP:X-Rocket-Received:Message-ID:From:To:Subject:Date:MIME-Version:Content-Type:X-Priority:X-MSMail-Priority:X-Mailer:X-MimeOLE; b=OBfV+JjdOlabmmjDrTqy/bv6mrHZe9zw7gTwDSu4i7iubXnTJuBY6TQnGzGyCrFNkYdqUVViZNQPSUx88R2KUHslwW0fMr+FJnORHDXA18rtFx3Wje7TIEdKOm2keaAJGbzjPm/lXk/IZbFnadDtk3kAt9s9eVG0ue77h+/m6Kc=
X-Yahoo-Newman-Id: 865688.92664.bm@smtp120.mail.sg3.yahoo.com
X-Yahoo-Newman-Property: ymail-3
X-YMail-OSG: 8E6OPrwVM1ksfOoVsBFm2AbF8dqEkuAhPypLem2e3hwy_qH hk.ID9D1PMjJceX0FHkNRjb7ddfE8wZAcd2WH3fyVEwQ6HHBkmJ6vpLVFrnR 5eJXKoSw3WsPyd6Bl5qM080iLEbQTPytNzTowy51OI8QuVbzRZ3J.Z.QnAjT FHaNXGOvzCyaeDJBmSf47RV_jyA22i4Vq50mnm0QFD4SOQXIDlWaJGXoqhdM ABL1ZtyCIlcxBalZ1U6A_u8JHOW8BJZaL08xJmRBpATvH74kMaO.CVjcZ601 yURTHqvMANXQ8FHbvWxHoIhAPE07mlaJdxnGS7UZesCi0tu7YefxW_zb658_ ZCuObA5KlSLIhPuX.G3.xy201LGklU4Rdlh9DI3aIRFpy88pevMh4BEmO1Hc MET4LFZZ1Q9YjKd6p15IJue8GfnXsabCz7UPHKwvk5fXt3555J1oke_Dap5p igPZIggw.gjfdGMok4n3Pz9JtVS58HhZ6N_hkLS3ARRFUsBjlbIXDVc_zAeC LaobeNpmyra0cIacnUDcNexeohOlIWzPkDI9WSQjLYJP3fHu_WIbLGUZedAx 04XuIM6kr3UasBz1JXxMByf8rPpC3Mhu.TgN8mWlShNazzHMV7EUCBZXViVM JRRXAzwnkrVTHaAOrOJbRdOMJejQj8GbCXSEbwzx.E4hfzM5rGixs0oFuW2h WwOjGUalzJ4dIllSaPGV8y9qiIJLB18rfKEIsxMwUXnaoIj0jysXYdf0GYQY ceIAs.9SR9A--
X-Yahoo-SMTP: mO8g85.swBDbV.BqMCyYemgdNHKqTXyPZ.o-
X-Rocket-Received: from wr (richmaurice25@27.156.2.108 with ) by smtp120.mail.sg3.yahoo.com with SMTP; 01 Jul 2013 17:09:18 +0000 UTC
Message-ID: [2B72077BD3F0DE4509CB0F03CFC247C9@wr]
From: Diablo III™ [richmaurice25@yahoo.com]
To: [MeinName@gmx.de]
Subject: Verstößt gegen unsere Richtlinien für Battle.net
Date: Tue, 2 Jul 2013 01:07:26 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0A24_01287571.18FA50C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5512
Envelope-To: [MeinName@gmx.de]
X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
X-GMX-Antivirus: 0 (no virus found)
X-UI-Filterresults: junk:10;V01:K0:gzBpBYot9OU=:Re2ghAmjkOlCj01JsJEDaQg7 PUR6VPEEgM008On+KRAW+U8okv8UqqJhHpPxwBCzXgNZIfaOXA4/zvxhB4YfPXrIJRj6jum /mScvcDumR9c6zew8/Opv2rx3egTMtYMspm4QtDf45tvx9Zlser1dw6of/aWqluAuqfeLsu zAS5Wtm7OTvJy3fEdoN/T/vgclOQvnOeNNtzNo8o0fcqPE7fhKNa/e30KnpR72qLuLAgk6f CNlXRzGz0cTihQhyrQcbT7KHMCr3m3q3IQQvm6l0eIn4Z0/9TZaDNG6Vkdhm4x/+S+fhSOA 7pJkbrYzELOhmSxB0eFghXKaEBSWd6M50oJmpYxLqV5wKoZFDObodhtqu7Tf5Q7h3bZ/PQe GkThjqVb3+wksfMdkz6SpdA8rb4bEv1zB/ohZ35AOuStmDoy1vDBZ1nUwpV22f+h0kcP4J9 NEYbw1weL65Jp7naKlx4NuhkyEv2LtYHWN+zzn2/k8dR0jpjm90EV9Z6nA+1U2H4rmgKPx1 nGF7bcNXRKFCrihTmemoNKBgsM3hucyk1dJEyAG/v3/dKqohrIIit3aBTYJx7tMZsoXlhQV CpiVqvizbauekbnyo1gnpJLbCJsS22aWdFiW0zKTRlq8dDI93Y4cHy1BUztYNNJw4Zvnmft Pbhwwf23VD+edsftcSk5xxMw6ZR2ZRkcdQWVBib0EHL8T3agMiKqWJ4HurioBqCwN15QtSx aok2iS+J4CHPHeYv8il/yWkQKvWvyXlLF0yrLJkGGND2ZKkmvz8w79NUmAqpYgJHtHXibPJ OBC4m9/pHAHogTnAXbxpX6OXXtbKSp7Dp7ti0JZaQ95g85SafPsK1QB0H0++OPG38bRmeyq S0FSjw+K+2uSOvtYPbaGVKbIWImib0nL8s54BzWyQe5Ko38GBAkG7DP7qKM19NcW9zvdTRk r7eUOweYTki2GgGmL6RyEEqbrOWcp5nt009k3AwON0IN4c8KNQ4n2yzFtmZXMUwyxgPOzH/ zuSBosWW4QfNS4Sa4paMTBR/Xkjy7+i4VUdlIwSk8CqTXkpeyDEk8IwtoL49CuzD3JuDhoy 4jmcEUng3r38jLm2CGrdoNR6aIwABzO2XloFNmg98vV+AhpKGGEwryjabFX+zLNmnLN9xig 1SOZfnO/s99EI2MoAivozy0czVag5m9ETQZgSGoE+IYakv4coAp4ZKDVj8r2Ll+/+OQDy64 hzcAhLbUDCV9xOBIz0GSrVZJ+oN/aYqgjRooab//AacUVVGFhhqXr30jReAsi2HzOLBMlxg ZvDoh4mKgljn6jo4Y2jTwmcJ15RQXvR062p5N4A7aqJi+zYiUsihdOBI+R5mimzyxKHKrsV WewHIepqwJF8ADt7cXIHj5avbf/O4MaZjxu/Yst0ZaEK1dV/3b7HF3ZypET1bOistbIznP6 ngJDaIrkazhafJQHURW8ufpaMox8bahM3IjKJbOnfnm3e0vqSLcRgyjbLq9AjkjAqVzCKGZ 3K09m7jiQSsFgw5I2MezPjwf7lIBCSPrQu66WVMwpbIplvE5MxSjcgJDUHUmJTNWzSM2soV fUjel+KAgPlVPrN0bTnTgsd8rOZi+BZqv6lYBRE6GlIfr7/M0JHJ7XkS9xT15N6ARX73IGP cFtk49g
Ordner: Spamverdacht
Größe: 9 KB



Es handelt sich wieder um eine Spam mit bekanntem Text von Blizzard Entertainment 2013, jedoch führt die URL der angeblich sicheren Webseite zur Kontobestätigung

https://eu.battle.net/support/de/
diesmal zu der Adresse 
http://www.armory-blizcons.tk

Keine Kommentare:

Kommentar veröffentlichen

Hinweis: Nur ein Mitglied dieses Blogs kann Kommentare posten.