论坛

 找回密码
 注册
                  
查看: 850|回复: 3

来自Weekly News的垃圾邮件

[复制链接]
发表于 2009-3-22 09:00 | 显示全部楼层 |阅读模式
来自Weekly News的邮件最近大量出现,标题是Weekly News,但是每天都发无数垃圾邮件。下面我来分析一下这个垃圾邮件的内容。

  1. X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
  2. X-Message-Status: n:0
  3. X-SID-PRA: Weekly News <news@[b][size=4]MAXCASINOBONUSES.COM[/size][/b]>
  4. X-SID-Result: Pass
  5. X-Message-Info: 36VzpOhYwiF4WB+8j8KT02wya8e6aecRi2kbj01l/IN5Yb4JdUx07Jb7Ml5pRi3ykKrd+Sv0s/11n72sb6Yi0IcGVtYar01f
  6. Received: from MAXCASINOBONUSES.COM ([81.91.121.180]) by col0-mc2-f28.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
  7.          Sat, 21 Mar 2009 14:54:05 -0700
  8. From: Weekly News <[email protected]>
  9. To: <[email protected]>
  10. Subject: Bonuses are now following you on Twitter!
  11. Date:Sat, 21 Mar 2009 17:54:04 -0400
  12. Message-ID: <[email protected]>
  13. MIME-Version: 1.0
  14. Content-type: multipart/alternative; boundary="----------020203050107080902040708";
  15. Return-Path: [email protected]
  16. X-OriginalArrivalTime: 21 Mar 2009 21:54:06.0143 (UTC) FILETIME=[8E4024F0:01C9AA6F]


  17. ------------020203050107080902040708
  18. Content-type: text/plain

  19. You're receiving this newsletter because you registered on our web page.

  20. Having trouble viewing this email? Please view the HTML version. Thank you.

  21. ------------020203050107080902040708
  22. Content-Type: text/html
  23. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  24. <head>
  25.    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  26. </head>
  27. <body style="text-align:center;text-decoration: none; margin: 0px; font-family: arial; font-style: normal; font-variant: normal; font-weight: bold; font-size: 14px; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none; color: rgb(37, 188, 137);">
  28. <div>
  29. <p style="margin:auto">This bonus will be happy if you will check it out. Please</p>
  30. </div>
  31. <br />
  32. <a style="color:black;text-decoration: none;" href="[b]http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/10.htm[/b]">
  33. <img style="width:80%" src="http://viewstatsview.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/10.jpg" alt="Please Display Image" />
  34. </a>

  35. <div style="text-align:center;width:100%">
  36. <div style="text-align:center;margin:auto;padding:50px;border: 1px solid green; width:300px;margin-top:50px;">

  37. <h2 style="font-family: Arial;font-size: 15px;font-weight: bold;color: #333333;margin: 0;padding: 0;">Important</h2>
  38. <h3>We work very hard on these bonuses, We look for the best deals on the net every day</h3>
  39. <h3>Please choose only one</h3>


  40. <div style="text-align:left;color:#333333;">
  41.    <ul style="text-align:left">
  42.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/1.htm">Hidden Bonus #2</a></li>
  43.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/2.htm">Hidden Bonus #3</a></li>
  44.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/3.htm">Hidden Bonus #1</a></li>
  45. </ul>

  46. </div>

  47. </div>
  48. <p style="color:rgb(37, 47, 137);">
  49. If this mail disturbs you in any way please
  50. <a style="color:black;" href="http://unsub.MAXCASINOBONUSES.COM/c/u/54615/1077013">unsubscribe</a> here.<br />
  51. Thank you and we wish you a great and happy week.
  52. <br /><br />
  53. </p>
  54. <p style="color:rgb(37, 47, 137); font-size:12px;">Starzone - 11 Florinis Street Nicosia Cyprus 1065</p>
  55. </div>
  56. </body>
  57. </html>
  58. ------------020203050107080902040708--
  59. </
复制代码


主要链接和网址:
MAXCASINOBONUSES.COM,打开这个网址,其实就是垃圾邮件内容。
http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/10.htm
转到http://www.quatrocasino.com/?btag=11038&cli=5329213&lang=en

http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/1.htm
转到http://www.vegasred.com/

http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/2.htm
转到http://www.vegasred.com/

http://clickstatsview1.MAXCASINOBONUSES.COM/cs/Server2/robo54615-1077013/3.htm
转到http://www.casinotropez.com/
 楼主| 发表于 2009-3-22 09:03 | 显示全部楼层
  1. X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
  2. X-Message-Status: n:0
  3. X-SID-PRA: Weekly News <news@[size=4][b]MYPAPERFORYOU.COM[/b][/size]>
  4. X-SID-Result: Pass
  5. X-Message-Info: 36VzpOhYwiF4WB+8j8KT02X1/vFtB5IzX6uRXX8S3x0obLYRIICu6y+JxDoiM6c2Clq2IbZovLE0+6Q5MppA5EsubJUic1I6
  6. Received: from MYPAPERFORYOU.COM ([81.91.121.196]) by COL0-MC1-F4.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
  7.          Sat, 21 Mar 2009 08:51:29 -0700
  8. From: Weekly News <[email protected]>
  9. To: <[email protected]>
  10. Subject: 5 minutes can change life
  11. Date:Sat, 21 Mar 2009 11:51:28 -0400
  12. Message-ID: <[email protected]>
  13. MIME-Version: 1.0
  14. Content-type: multipart/alternative; boundary="----------040108070905010705080005";
  15. Return-Path: [email protected]
  16. X-OriginalArrivalTime: 21 Mar 2009 15:51:29.0354 (UTC) FILETIME=[E6319AA0:01C9AA3C]


  17. ------------040108070905010705080005
  18. Content-type: text/plain

  19. You're receiving this newsletter because you registered on our web page.

  20. Having trouble viewing this email? Please view the HTML version. Thank you.

  21. ------------040108070905010705080005
  22. Content-Type: text/html
  23. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  24. <head>
  25.    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  26. </head>
  27. <body style="text-align:center;text-decoration: none; margin: 0px; font-family: arial; font-style: normal; font-variant: normal; font-weight: bold; font-size: 14px; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none; color: rgb(37, 188, 137);">
  28. <div>
  29. <p style="margin:auto">This bonus will be happy if you will check it out. Please</p>
  30. </div>
  31. <br />
  32. <a style="color:black;text-decoration: none;" href="http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/10.htm">
  33. <img style="width:80%" src="http://viewstatsview.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/10.jpg" alt="Please Display Image" />
  34. </a>

  35. <div style="text-align:center;width:100%">
  36. <div style="text-align:center;margin:auto;padding:50px;border: 1px solid green; width:300px;margin-top:50px;">

  37. <h2 style="font-family: Arial;font-size: 15px;font-weight: bold;color: #333333;margin: 0;padding: 0;">Important</h2>
  38. <h3>We work very hard on these bonuses, We look for the best deals on the net every day</h3>
  39. <h3>Please choose only one</h3>


  40. <div style="text-align:left;color:#333333;">
  41.    <ul style="text-align:left">
  42.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/1.htm">Hidden Bonus #2</a></li>
  43.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/2.htm">Hidden Bonus #3</a></li>
  44.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/3.htm">Hidden Bonus #1</a></li>
  45. </ul>

  46. </div>

  47. </div>
  48. <p style="color:rgb(37, 47, 137);">
  49. If this mail disturbs you in any way please
  50. <a style="color:black;" href="http://unsub.MYPAPERFORYOU.COM/c/u/54614/1077013">unsubscribe</a> here.<br />
  51. Thank you and we wish you a great and happy week.
  52. <br /><br />
  53. </p>
  54. <p style="color:rgb(37, 47, 137); font-size:12px;">Starzone - 11 Florinis Street Nicosia Cyprus 1065</p>
  55. </div>
  56. </body>
  57. </html>
  58. ------------040108070905010705080005--
  59. </
复制代码


主要链接分析:
mypaperforyou.com打开就是垃圾电邮内容

http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/10.htm
转到http://www.vegasred.com/

http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/1.htm
转到http://www.titancasino.com/

http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/2.htm
转到http://www.vegasred.com/

http://clickstatsview1.MYPAPERFORYOU.COM/cs/Server2/robo54614-1077013/3.htm
转到http://www.casinotropez.com/
 楼主| 发表于 2009-3-22 09:06 | 显示全部楼层
  1. X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9Ng==
  2. X-Message-Status: n:0
  3. X-SID-PRA: Weekly News <[email protected]>
  4. X-SID-Result: Pass
  5. X-Message-Info: 36VzpOhYwiF4WB+8j8KT0wMwvUCk6ONH9khW1uI67YgVWJ5UOqBqPYShKqTCB1+QjQvd2IHAV5v+NjLIzAEWWUu4GjLcriWU
  6. Received: from ONLINECASINOACCEPTINGAMERICANEXPRESS.COM ([81.91.121.214]) by COL0-MC1-F3.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);
  7.          Sat, 21 Mar 2009 01:35:05 -0700
  8. From: Weekly News <[email protected]>
  9. To: <[email protected]>
  10. Subject: New friends are now following you on Twitter!
  11. Date:Sat, 21 Mar 2009 04:35:04 -0400
  12. Message-ID: <FQD7O608GK286UX7P.54613.1077013@ONLINECASINOACCEPTINGAMERICANEXPRESS.COM>
  13. MIME-Version: 1.0
  14. Content-type: multipart/alternative; boundary="----------030902000800030702020208";
  15. Return-Path: [email protected]
  16. X-OriginalArrivalTime: 21 Mar 2009 08:35:05.0989 (UTC) FILETIME=[EFB12B50:01C9A9FF]


  17. ------------030902000800030702020208
  18. Content-type: text/plain

  19. You're receiving this newsletter because you registered on our web page.

  20. Having trouble viewing this email? Please view the HTML version. Thank you.

  21. ------------030902000800030702020208
  22. Content-Type: text/html
  23. <html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
  24. <head>
  25.    <meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
  26. </head>
  27. <body style="text-align:center;text-decoration: none; margin: 0px; font-family: arial; font-style: normal; font-variant: normal; font-weight: bold; font-size: 14px; line-height: normal; font-size-adjust: none; font-stretch: normal; -x-system-font: none; color: rgb(37, 188, 137);">
  28. <div>
  29. <p style="margin:auto">This bonus will be happy if you will check it out. Please</p>
  30. </div>
  31. <br />
  32. <a style="color:black;text-decoration: none;" href="http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/10.htm">
  33. <img style="width:80%" src="http://viewstatsview.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/10.jpg" alt="Please Display Image" />
  34. </a>

  35. <div style="text-align:center;width:100%">
  36. <div style="text-align:center;margin:auto;padding:50px;border: 1px solid green; width:300px;margin-top:50px;">

  37. <h2 style="font-family: Arial;font-size: 15px;font-weight: bold;color: #333333;margin: 0;padding: 0;">Important</h2>
  38. <h3>We work very hard on these bonuses, We look for the best deals on the net every day</h3>
  39. <h3>Please choose only one</h3>


  40. <div style="text-align:left;color:#333333;">
  41.    <ul style="text-align:left">
  42.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/1.htm">Hidden Bonus #2</a></li>
  43.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/2.htm">Hidden Bonus #3</a></li>
  44.   <li><a style="color:black;text-decoration: none;" href="http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/3.htm">Hidden Bonus #1</a></li>
  45. </ul>

  46. </div>

  47. </div>
  48. <p style="color:rgb(37, 47, 137);">
  49. If this mail disturbs you in any way please
  50. <a style="color:black;" href="http://unsub.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/c/u/54613/1077013">unsubscribe</a> here.<br />
  51. Thank you and we wish you a great and happy week.
  52. <br /><br />
  53. </p>
  54. <p style="color:rgb(37, 47, 137); font-size:12px;">Starzone - 11 Florinis Street Nicosia Cyprus 1065</p>
  55. </div>
  56. </body>
  57. </html>
  58. ------------030902000800030702020208--
复制代码


ONLINECASINOACCEPTINGAMERICANEXPRESS.COM
http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/10.htm
http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/1.htm
http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/2.htm
http://clickstatsview1.ONLINECASINOACCEPTINGAMERICANEXPRESS.COM/cs/Server2/robo54613-1077013/3.htm
 楼主| 发表于 2009-3-22 09:10 | 显示全部楼层
ONLINECASINOACCPETING.COM
happyeuropes.com
MAXCASINOBONUSES.COM
MYPAPERFORYOU.COM
onlinecasinoacceptingamericanexpress.com
的注册信息
Registrant [1280362]:
dave green
公司是 Starzone Enterprises Inc.
点与是 [email protected]
5th Floor, City Forum, Office 503, 11 Florinis Street
Nicosia
1065
CY (塞浦路斯)

dave green 拥有850多个域名。

职业发送EuroPartner的几个赌场!到底是不是赌场发来的,谁知道呢?!极有可能。

2009年3月22日:
再添一个,邮件内容一样,只是链接里的主域名改了:HTMLMARKETS.COM, LIVECASINOSDEALERS.COM
您需要登录后才可以回帖 登录 | 注册

本版积分规则



小黑屋|手机版|Archiver|论坛

GMT+8, 2024-12-27 09:48 , Processed in 0.073744 second(s), 22 queries .

Powered by Discuz! X3.4

© 2001-2017 Comsenz Inc.

快速回复 返回顶部 返回列表