差出人
l@gmail.com
件名
Re: Provide your family with the money in age. Launch the Robot!
返信先
esvvva@gmail.com

REに9つのメールアドレスを入れてBBCに送りつける手法。
BBCは当然見れないため、送られた相手は拡散を想定される。
迷惑メールを、本来のメールに送る。
ほんとうに暇人。

内容
Launch the financial Bot now to start earning. [nmgyfd]
http://tinyurl.com/orq4ffm

中継
maillinkup.in
IP Address 198.23.135.141
Host Name mta-b5.maillinkup.in
Country United States
Network(ASN) ERX-NETBLOCK
IP Prefix 198.0.0.0 – 198.255.255.255
Description Early registration addresses

IP Address 64.45.234.143
Host Name fl-64-45-234-143.sta.embarqhsd.net
Country United States
Network(ASN) ARIN-CIDR-BLOCK
IP Prefix 64.0.0.0 – 64.255.255.255
Description Not allocated by APNIC

hvh.hypodns.com
IP Address 172.245.228.167
Host Name 172-245-228-167-host
.colocrossing.com
Country United States

tinyurl.com
IP Address 64.62.243.82
Host Name 64.62.243.82
Country United States
Network(ASN) ARIN-CIDR-BLOCK
IP Prefix 64.0.0.0 – 64.255.255.255
Description Not allocated by APNIC

ソース

From – Wed Dec 09 08: 2015
X-Account-Key: account2
X-UIDL: 000126f646de9b9e
X-Mozilla-Status: 0011
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path: <l@gmail.com>
X-Original-To: @
Delivered-To: @
Received: from hvh.hypodns.com (mta-b5.maillinkup.in [198.23.135.141])
by mail. (Postfix) with ESMTP id A4A8634C8
for <@>; Tue, 8 Dec 2015 23: +0900 (JST)
Received: from fl-64-45-234-143.sta.embarqhsd.net ([64.45.234.143]:3823 helo=Unknown)
by hvh.hypodns.com with esmtpa (Exim 4.86)
(envelope-from <l@gmail.com>)
id 1a6JJE-0001Na-9G; Tue, 08 Dec 2015 09:32:04 -0500
Message-ID: <2A2F99CAC1153A09D5D0991E0A837468@rxtj>
Reply-To: “2324$” <esvvva@gmail.com>
From: “2324$” <l@gmail.com>
To: <as
Subject: Re: Provide your family with the money in age. Launch the Robot!
Date: Tue, 8 Dec 2015 17: +0300
Organization: 789$
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=”—-=_NextPart_000_23DE_01D131DE.47CA0E20″
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Windows Live Mail 16.4.3528.331
X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname – hvh.hypodns.com
X-AntiAbuse: Original Domain –
X-AntiAbuse: Originator/Caller UID/GID – [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain – gmail.com
X-Get-Message-Sender-Via: hvh.hypodns.com: authenticated_id: pro@arihanttec.com
X-Authenticated-Sender: hvh.hypodns.com: pro@arihanttec.com

This is a multi-part message in MIME format.

——=_NextPart_000_23DE_01D131DE.47CA0E20
Content-Type: text/plain;
charset=”windows-1251″
Content-Transfer-Encoding: quoted-printable

Launch the financial Bot now to start earning. [nmgyfd]
http://tinyurl.com/orq4ffm

——=_NextPart_000_23DE_01D131DE.47CA0E20
Content-Type: text/html;
charset=”windows-1251″
Content-Transfer-Encoding: quoted-printable

=

——=_NextPart_000_23DE_01D131DE.47CA0E20–