Guardate l'whois per 213.215.136.243 che è il server di posta usato...
alla faccia delle misure minime di sicurezza eh !
IP di origine = 84.16.230.32 = Netdirekt Germania
mail server abusato = 213.215.136.243 su rete Colt
Siccome dal sito Netdirekt mi pare che non diano connessioni, ma solo
hosting e simili, mi sa che l'IP di iniezione effettiva dello scam non
c'è.
Qualcuno ha idee in merito ?
Ho segnalato manualmente ai vari intestatari degli IP.
Gabriele
--- start scam ---
From - Fri Feb 26 19:02:19 2010
X-Account-Key: account4
X-UIDL: 00006d52c7adbd17
X-Mozilla-Status: 0000
X-Mozilla-Status2: 00000000
X-Mozilla-
Keys:
Return-Path: <low...@iraq.centcom.mil>
Received: from servermail.Studio.ripa (213.215.136.243) by
mail.onenet.it with ESMTP (EIMS 3.3.9) for <x>;
Fri, 26 Feb 2010 19:01:59 +0100
Received: from User ([84.16.230.32]) by servermail.Studio.ripa with
Microsoft SMTPSVC(6.0.3790.3959); Fri, 26 Feb 2010 18:42:20 +0100
Reply-To: <low...@bellsouth.net>
From: "SGT. Matt Lowell"<low...@iraq.centcom.mil>
Subject: Hello
Date: Fri, 26 Feb 2010 17:44:16 -0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Bcc:
Return-Path: low...@iraq.centcom.mil
Message-ID: <x...@servermail.Studio.ripa>
X-OriginalArrivalTime: 26 Feb 2010 17:42:21.0331 (UTC)
FILETIME=[0C5B3E30:01CAB70B]
Hello,
I need your assistance, I Am SGT. Matt Lowell and i'm with the
Engineering unit here in Ba'qubah Iraq for the United States, I have
about 12.5 million US dollars that I want to move out of the country.
I need a good partner,someone I can trust to actualize this
venture.The money is from oil deal and legal.
But I am moving it by diplomatic means to your house directly or a
safe and secured location of your choice using diplomatic courier
services. But can I trust you? Once the funds get to you, you take
your 30% out and keep 70% until i come to meet with you. Your own
part of this deal is to find a safe place where the funds can be sent
to. Mine is sending it to you.
If you are interested reply and I will furnish you with more details.
Urgently awaiting your response.
SGT. Matt Lowell
--- END ---