Re: Kommerzspam aus Fernost

From	Nico Hoffmann <oxensepp@gmx.de>
Newsgroups	de.admin.net-abuse.mail
Subject	Re: Kommerzspam aus Fernost
Date	2024-12-17 19:49 +0000
Organization	Thermisches Gleichgewicht A.G.
Message-ID	<slrnvm3l9n.k99.oxensepp@haydn.lewonze.de> (permalink)
References	<slrnvkkhp5.52t.oxensepp@haydn.lewonze.de> <AABnSpqXNjcAAAZc.A3.flnews@ferrat.uplawski.eu> <slrnvklpt3.52t.oxensepp@haydn.lewonze.de>

Show all headers | View raw

Nico Hoffmann schreibt:

> Michael Uplawski schreibt:
>
>> Nico Hoffmann hat geschrieben:
>>
>>>Hauptspamquelle ist 45.195.24.*, aber auch 103.209.128.* und
>>>103.129.254.* sehe ich immer wieder. Beschwerden verhallen offenbar
>>>ungehört, auch wenn ich sie über Spamhaus/Spamcop schicke.
>>
>> Zumindest was die Hong-Kong Mails angeht, lohnt es sich (vielleicht),
>> die Abuse-Adressen direkt anzuschreiben.
>
> Das tue ich ja auch immer wieder, zusätzlich. Bisher keine Reaktion.
>
> 45.195.24.0/24 ist Hongkong: https://bgpview.io/prefix/45.195.24.0/24
> 103.209.128.0/24 ebenso: https://bgpview.io/prefix/103.209.128.0/24
> und 103.129.254.0/23 auch: https://bgpview.io/prefix/103.129.254.0/23

45.195.24.0/24 scheint jetzt Ruhe zu geben, der Rest ist offenbar noch
aktiv. Heute kam das da von mail-m6039.netease.com / 210.79.60.39:

   Return-Path: <SRS0=YfvogG=TK=gaodisenlock.com=lisa@lewonze.de>
   X-Original-To: nico@localhost
   Delivered-To: nico@localhost
   Received: from schubert.lewonze.de (schubert.lewonze.de [IPv6:::1])
       by schubert.localdomain (Postfix) with ESMTP id 8C00868E17F
       for <nico@localhost>; Tue, 17 Dec 2024 19:11:59 +0100 (CET)
   Received: from pop3.variomedia.de [2a00:1c38:1:1:511c:e01d::]
       by schubert.lewonze.de with POP3 (fetchmail-6.4.39)
       for <nico@localhost> (single-drop); Tue, 17 Dec 2024 19:11:59 +0100 (CET)
   Received: from mx1.mail.vrmd.de ([10.0.1.21])
        by mb08.mail.vrmd.de (Cyrus 3.0.13-Debian-3.0.13-5) with LMTPA;
        Tue, 17 Dec 2024 14:42:01 +0100
   X-Cyrus-Session-Id: cyrus-3815745-1734442921-1-4452366485564005497
   X-Sieve: CMU Sieve 3.0
   Envelope-to: aaa@sss.ddd
   Delivery-date: Tue, 17 Dec 2024 14:42:01 +0100
   Authentication-Results: mx1.mail.vrmd.de;
       iprev=pass (mail-m6039.netease.com) smtp.remote-ip=210.79.60.39;
       spf=pass smtp.mailfrom=gaodisenlock.com;
       dkim=pass header.d=gaodisenlock.com header.s=default header.a=rsa-sha256;
       dmarc=pass header.from=gaodisenlock.com
   Received-SPF: pass (mx1.mail.vrmd.de: domain of gaodisenlock.com designates
       210.79.60.39 as permitted sender) client-ip=210.79.60.39;
       envelope-from=lisa@gaodisenlock.com; helo=mail-m6039.netease.com;
   Received: from mail-m6039.netease.com ([210.79.60.39])
       by mx1.mail.vrmd.de with esmtps  (TLS1.3) tls TLS_AES_256_GCM_SHA384
       (Exim 4.95)
       (envelope-from <lisa@gaodisenlock.com>)
       id 1tNXpo-0050iq-7v
       for aaa@sss.ddd;
       Tue, 17 Dec 2024 14:42:01 +0100
   Content-Type: multipart/alternative;
       BOUNDARY="=_Part_39873_1605791888.1734442912293"
   Message-ID:
       <AJEAlgCnIhEg1JMYaYO5Vqqm.1.1734442912293.Wmail.lisa@gaodisenlock.com>
   To: aaa@sss.ddd
   Subject:
       =?UTF-8?B?UmU6IFVwZ3JhZGUgWW91ciBIb21lIFNlY3VyaXR5IHdpdGggU21hcnQgTG9ja3M=?=
   X-Priority: 3
   MIME-Version: 1.0
   Received: from lisa@gaodisenlock.com( [10.156.30.48] ) by ajax-webmail (
       [127.0.0.1] ) ; Tue, 17 Dec 2024 21:41:52 +0800 (GMT+08:00)
   From: lisa <lisa@gaodisenlock.com>
   Date: Tue, 17 Dec 2024 21:41:52 +0800 (GMT+08:00)
   X-WM-Spam-Status: e1kfGhgUHx5ZQUhXWQgPGg8OCBgUHx5ZQUlOS1dZFg8aDwILHllBWSg2Ly
       tZV1koWUFDSUNOSEtLS0k3V1ktWUFJV1kPCRoVCBIfWUFZQ0oaHVZOHh5IT0hKSh8eSE1WDBZVEw
       ETFhoSFyQUDg9ZV1kYEgtZQVlKS1VKTk1VSEtVT0NZV1kWGg8SFR0UWUFZT0tIVUpLSEtOTEtVT1
       VKT1kG
   X-WM-Tid: 0a93d4da897a0732kunm193d4652e83
   X-WM-MType: 2
   X-WM-Sender-Digest: e1kMHhlZQQ8JDh5XWRIfHhUPWUFZRzoxPjoXHDgVMhM#HEoxNiIaIjRO
       LQoKFlVKVUpMSE9PT0lCSklMTklVMxYaEhdVFxIIGjscGhQfEggeFRcUGBBVGBQWRVlXWRILWUFZ
       SktVSk5NVUhLVU9DWVdZCAFZQUpKSU9NN1dZFAsPEhQVCFlBTDcG
   DKIM-Signature:a=rsa-sha256;
       b=cMm62zxf8cJMjvASSY74Vx2TBPVlygYwSGNAcDnoXzuOGMaWgsnVTKdtfsohK/RWJmj3XlZnsx
       Xs8pzCQyl9zkXX+GFyXN2JgSbfsO1rqF646lkwkBsY45XXybJI1l/hfKTSb+VhkGzbHOtwFC1OSI
       29OmQ33NgicInoWZN6jvk=; c=relaxed/relaxed; s=default; d=gaodisenlock.com;
       v=1;
       bh=iQu0+lb1hIIv/v2RU8Y2RLl2j7QiohU6j3OPnUBmiyM=;
       h=date:mime-version:subject:message-id:from;
   X-purgate: clean
    X-purgate-type: clean
    X-purgate-ID: 150741::1734442921-155A6E05-82A4CB59/0/0
    X-purgate-Ad: Categorized by eleven eXpurgate (R) https://www.eleven.de
   X-Spam-Suspicion: No


   Hi Dear,

   It's Lisa again.
   It's a bit sad that I haven't got any reply from you after I sent you two 
   e-mails. I believe maybe you don't want to expand the smart door locks line
   now. But it is OK. I believe smart locks have become a must-have in modern
   homes, offices, and commercial locations because they offer unmatched
   security.

   We are a leading OEM original manufacturer specializing in Smart locks with
   multiple unlocking methods.

   Our products are known for their leading technology advantage, comprehensive
   solutions, excellent customer service, and strong R&D team.

   We would appreciate if can get opportunity to discuss further how our
   products can meetyour requirements.

   We invite you to explore our innovative products and see how they can
   transform your security needs.

   If I've got the right person, can we connect in the next few days? If not,
   who would you recommend I speak with?

   Really appreciate your help, it means a lot.

   Best regards,

   Lisa

   Hit subscribe now to receive regular updates and our product’s latest
   features![svg+xml;base64,ICAgICAgPHN2ZyBzdHlsZT0icG9zaXRpb246IHJlbGF0aXZlOyB0b3A6IDF
   weDsiIHdpZHRoPSIxNCIgaGVpZ2h0PSIxNCIgdmlld0JveD0iMCAwIDE0IDE0IiBmaWxsPSJub
   25lIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjxyZWN0IHdpZHRoPSIxNCI
   gaGVpZ2h0PSIxNCIgZmlsbD0id2hpdGUiLz48cGF0aCBkPSJNNyAxMS44MTI1QzcgMTEuODEyN
   SA1LjAzMTI1IDkuODQzNzUgNC4zNzUgOS4xODc1QzMuNSA4LjMxMjUgMS43NSA3LjAzOTMxIDE
   uNzUgNS40Njg3NUMxLjc1IDMuODk4MTkgMy4wMjMxOSAyLjYyNSA0LjU5Mzc1IDIuNjI1QzUuN
   jA2OSAyLjYyNSA2LjQ5NjMgMy4xNTQ4MiA3IDMuOTUyNTFDNy41MDM3IDMuMTU0ODIgOC4zOTM
   xIDIuNjI1IDkuNDA2MjUgMi42MjVDMTAuOTc2OCAyLjYyNSAxMi4yNSAzLjg5ODE5IDEyLjI1I
   DUuNDY4NzVDMTIuMjUgNy4wMzkzMSAxMS4zNzUgNy40Mzc1IDEwLjA2MjUgOC43NUM5LjQwNjI
   1IDkuNDA2MjUgNyAxMS44MTI1IDcgMTEuODEyNVoiIHN0cm9rZT0iIzRDNkFGRiIgc3Ryb2tlL
   XdpZHRoPSIwLjg3NSIvPjwvc3ZnPgo=] Subscribe

   If you don't want to receive our emails, you can easily unsubscribe here.

   Lisa Xie
   Business Development Manager
   Foshan Gaoyuan Intelligent Technology Co., Ltd
   Web: http://www.gaodisen.com
   0086 15814515236
   Service:🔸Brand Manufacturer 🔸ODM/OEM 🔸Door Hardware
   签名由 网易灵犀办公 定制
   [read?sign=V2.3noNqJ16nj78YsH_eJjBdAKm_UXFwrXIdtKUZHt8pOvFxkKN-gL7läg0i84jv
   1aucnzFNI_OjnAVJ3zIRDq3c1hwEh0XgOXs9fYCZyxc6bU]


Evtl. ein Chatbot...


N.
-- 
Allmächd!

Back to de.admin.net-abuse.mail | Previous | Next — Previous in thread | Next in thread | Find similar

Thread

Kommerzspam aus Fernost Nico Hoffmann <oxensepp@gmx.de> - 2024-11-29 23:00 +0000
  Re: Kommerzspam aus Fernost Michael Uplawski <michael.uplawski@uplawski.eu> - 2024-11-30 05:54 +0100
    Re: Kommerzspam aus Fernost Nico Hoffmann <oxensepp@gmx.de> - 2024-11-30 10:24 +0000
      Re: Kommerzspam aus Fernost Nico Hoffmann <oxensepp@gmx.de> - 2024-12-17 19:49 +0000
        Re: Kommerzspam aus Fernost Nico Hoffmann <oxensepp@gmx.de> - 2025-01-06 18:46 +0000

csiph-web