Von: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
An: xyz@web.de
Betreff: Returned mail: User unknown [Spam][97.4%]

Received: from [64.12.138.23] (helo=omr-m11.mx.aol.com)
by mx17.web.de with esmtp (WEB.DE 4.107 #114)
id 1GEsg7-0002hi-00
for xyz@web.de; Sun, 20 Aug 2006 21:09:47 +0200
Received: from rly-yj01.mx.aol.com (rly-yj01.mail.aol.com [172.18.180.139]) by omr-m11.mx.aol.com (v107.10) with ESMTP id
RELAYIN10-b44e8b358203; Sun, 20 Aug 2006 15:09:12 -0400
Received: from localhost (localhost)
by rly-yj01.mx.aol.com (8.8.8/8.8.8/AOL-5.0.0)
with internal id PAD21135;
Sun, 20 Aug 2006 15:09:12 -0400 (EDT)
Date: Sun, 20 Aug 2006 15:09:12 -0400 (EDT)
From: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
Message-Id: <200608201909.PAD21135@rly-yj01.mx.aol.com>
To: <xyz@web.de>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="PAD21135.1156100952/rly-yj01.mx.aol.com"
Subject: Returned mail: User unknown [Spam][97.4%]
Auto-Submitted: auto-generated (failure)
X-AOL-IP: 172.18.180.139
Sender:

The original message was received at Sun, 20 Aug 2006 15:09:02 -0400 (EDT)
from hababai.ispgateway.de [80.67.17.92]


*** ATTENTION ***

Your e-mail is being returned to you because there was a problem with its
delivery. The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".

The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".

The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered. The next line contains a second error message which is a
general translation for other e-mail servers.

Please direct further questions regarding this message to your e-mail
administrator.

--AOL Postmaster



----- The following addresses had permanent fatal errors -----
<abbagabby81@aol.com>

----- Transcript of session follows -----
... while talking to air-yj01.mail.aol.com.:
>>> RCPT To:<abbagabby81@aol.com>
<<< 550 We would love to have gotten this email to abbagabby81@aim.com. But, your recipient never logged onto their free AIM Mail
account. Please contact them and let them know that they're missing out on all the super features offered by AIM Mail. And by the way,
they're also missing out on your email. Thanks.
550 <abbagabby81@aol.com>... User unknown

Du solltest aber unbedingt nochmal nachsehen, ob nicht in
einer der Fehlermeldungen eine der original Nachrichten
mit Mailpfad enthalten ist (Das sollte der Fall sein). Nur so
wäre es möglich dem Absender auf die Spur zu kommen.

Von: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
An: xyz@web.de
Betreff: Mail Delivery Problem [Spam][97.6%]

Received: from [64.12.138.20] (helo=omr-m08.mx.aol.com)
by mx11.web.de with esmtp (WEB.DE 4.107 #114)
id 1GEuR7-0003C7-00
for xyz@web.de; Sun, 20 Aug 2006 23:02:25 +0200
Received: from air-yj01.mail.aol.com (air-yj01.mail.aol.com [172.18.180.145]) by omr-m08.mx.aol.com (v107.10) with ESMTP id
RELAYIN6-744e8c2021a8; Sun, 20 Aug 2006 16:11:46 -0400
from: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
Date: Sun, 20 Aug 2006 16:06:46 EDT
To: <xyz@web.de>
Subject: Mail Delivery Problem [Spam][97.6%]
Mailer: AIRmail [v111.7]
X-AOL-IP: 172.18.180.145
Message-ID: <200608201611.744e8c2021a8@omr-m08.mx.aol.com>
Sender:


Your mail to the following recipients could not be delivered because they are not accepting mail from Annamarie@netz-pla.net:
adorableone93Received: from [64.12.138.20] (helo=omr-m08.mx.aol.com)
by mx11.web.de with esmtp (WEB.DE 4.107 #114)
id 1GEuR7-0003C7-00
for xyz@web.de; Sun, 20 Aug 2006 23:02:25 +0200
Received: from air-yj01.mail.aol.com (air-yj01.mail.aol.com [172.18.180.145]) by omr-m08.mx.aol.com (v107.10) with ESMTP id
RELAYIN6-744e8c2021a8; Sun, 20 Aug 2006 16:11:46 -0400
from: Mail Delivery Subsystem <MAILER-DAEMON@aol.com>
Date: Sun, 20 Aug 2006 16:06:46 EDT
To: <xyz@web.de>
Subject: Mail Delivery Problem [Spam][97.6%]
Mailer: AIRmail [v111.7]
X-AOL-IP: 172.18.180.145
Message-ID: <200608201611.744e8c2021a8@omr-m08.mx.aol.com>
Sender:


Your mail to the following recipients could not be delivered because they are not accepting mail from Annamarie@netz-pla.net:
adorableone93

Von: MAILER-DAEMON@hababai.ispgateway.de
An: xyz@web.de
Betreff: failure notice [Spam][98.5%]

errors/554hvub1.html
554 TRANSACTION FAILED

<mlehman39@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<shrimpo025@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<jeananders@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<fsutep186@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<icing02@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<gmmstwrt@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<htraffey@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<marcymuder@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<crulong@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<midnightluv45@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<linz14701@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<oliviermarquez@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<deniseypowell@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<cjjorstadi@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<tlg8863@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<dl880@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<immanuelbrown@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<anthonylomas@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<ewamops@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<leetledove@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<yahritebiteme@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<covm@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<midnite205@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<schweitz19@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<nicole1255642639@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<lorensutherland1@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<fivecentone@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<resinnc@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<cindyjreinhardt@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<onesweetmonster@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<markpbuck@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<qoltemp99@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<herbertschroth@aol.com>:
205.188.157.217 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<jocelyn1013jeff@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<thadges@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<lfoley292@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<michiekitty@aol.com>:
205.188.158.121 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<rolfmoldehn@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<srevangelista@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<lcliff4@aol.com>:
205.188.156.249 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<bowlingnut300@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<pcarlberg913@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

<jgbasker@aol.com>:
205.188.157.25 failed after I sent the message.
Remote host said: 554-: (HVU:B1) http://postmaster.info.aol.com/errors/554hvub1.html
554 TRANSACTION FAILED

--- Below this line is a copy of the message.

Return-Path: <xyz@web.de>
Received: (qmail 2011 invoked by uid 0); 20 Aug 2006 19:56:01 -0000
Received: from unknown (HELO hababai.ispgateway.de) (127.0.0.1)
by localhost with SMTP; 20 Aug 2006 19:56:01 -0000
Received: (from u76668@localhost)
by hababai.ispgateway.de (8.13.6/8.13.6/Submit) id k7KJtrZk005860;
Sun, 20 Aug 2006 21:55:53 +0200
Date: Sun, 20 Aug 2006 21:55:53 +0200
Message-Id: <200608201955.k7KJtrZk005860@hababai.ispgateway.de>
To: zyx@netz-pla.net
Subject:
X-DFOptimize: BUFfRE5PRAUdHBwcEnUeHRwZEgVdT0hZT0NeT0QFRE9eUAdaRktET14FR0tDRllPRE5PWARaQlo=
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain
From: Annamarie@netz-pla.net
Subject: A medical marvel..

hi...

Introducing H,G,H,, the most incredible wonderdrug to come out of the medic=
al research establishment in a long while, and a substance used by the soci=
o-economic elites of the world for years. The difference? the actors and ac=
tresses and politicians and extremely wealthy of all walks of life that hav=
e been acquiring it for so long to shed pounds and wrinkles and look and fe=
el younger and fitter and healthier have had to pay thousands of dollars fo=
r each dose, and endure painful injections. No longer! Medical technology h=
as advanced so far as to allow users to take a simple pill each day and att=
ain the same effects that once required very large amounts of money, time, =
and patience (not to mention pain tolerance!).

Lose weight, increase lean muscle mass, get rid of external signs of age li=
ke wrinkles and lines, improve your mood and reduce or eliminate signs or s=
ymptoms of depression, dramatically boost your energy levels and physical s=
tamina, refresh and revitalize your brain, memory and mental energy, help e=
liminiate stress, fatigue and depression, and so much more. How can one pro=
duct do all of this? It\'s simple, actually.. our produces produce H G H nat=
urally, all throughout our lives. The problem is that over time our bodies =
begin to produce less and less, which is one of the main causes of aging (a=
nd all signs of aging), sickness, wrinkles and cellulite and loss of energy=
, mental function, sex drive/function, decreased metabolism and even depres=
sion and poor quality sleep.

This medical marvel can help cure or eliminate ALL of those woes, as soon a=
s a week or two after you begin usage, and is like a shot of youth that can=
allow you to turn back the clock in many extremely important ways. <A HREF=
=3Dhttp://www.sethgnow.com/>Click here</A>
<BR>
<BR>
<BR>
<BR>
<BR>












07ae8aaff6ee4335248f3059a5823472
.


Name:
Emailadresse:
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain
From: Annamarie@netz-pla.net
Subject: A medical marvel..
bcc: notgrownup7@aol.com,valerieverrier@aol.com,sdb92290@aol.com,
nylaxplayer2@aol.com,alxbrendel@aol.com,vgreen1072@aol.com,
nilequen19@aol.com,haveaseatchair@aol.com,fittnut1@aol.com,
mrhood311@aol.com,southfldy@aol.com,mickeyswts@aol.com,
haztekenv@aol.com,sr1924@aol.com,steve1903@aol.com,officerj03@aol.com,
klfitzgerald1@aol.com,drgerhardbolz@aol.com,djeffr@aol.com,
kkobolde@aol.com,smokin5182@aol.com,luvpurple1116@aol.com,
ayttf@aol.com,bpmpandover@aol.com,judgeshowjunkie@aol.com,
lucia3810@aol.com,hmenger@aol.com,virtualworkshops@aol.com,
blazinalf21@aol.com,juergenmaier01@aol.com,jge3706@aol.com,
blind8@aol.com,xzlr8ting@aol.com,ltdoughty@aol.com,star8fire@aol.com,
jminty@aol.com,bhokr1962@aol.com,ddelpit@aol.com,labomba0303@aol.com,
maennele@aol.com,nelscabral@aol.com,HUGHESCLn@aol.com,
genesismag@aol.com,chrisb1953@aol.com,wfmj2@aol.com,jodlam@aol.com,
snkindy@aol.com,danielhopper1@aol.com,xobabikriss26ox@aol.com,
flyhighlisa@aol.com,equuschic9@aol.com,yshep6236@aol.com,
kuhngube@aol.com,rennerlck@aol.com,keishagroves@aol.com,
wright755@aol.com,mikehickman50@aol.com,jeanpierrel07@aol.com,
surfmaus01@aol.com,tigerpawgirl@aol.com,hgr4181653@aol.com,
nellie3717@aol.com,amassiny@aol.com,alamowebgraphics@aol.com,
wtony52@aol.com,kevindo1@aol.com,frobertbarbara1@aol.com,
stoutface@aol.com,skipjayjack@aol.com,savage2055@aol.com,
pindeo@aol.com,mclarenjef@aol.com,doctriton@aol.com,shager23@aol.com,
ncchick187@aol.com,pnthr171@aol.com,hugabugone@aol.com,
flob1919@aol.com,darcix20@aol.com,heinerbackte@aol.com,
bfkkayuta@aol.com,sbeard719@aol.com,stonef6172@aol.com,
irscalderon@aol.com,xoxanyaxox@aol.com,laneybeec@aol.com,
anitadward@aol.com,cboone1060@aol.com,elad1231@aol.com,
criskirk01@aol.com,ooxstephiexoo@aol.com,wimpbynature@aol.com,
bksearch@aol.com,cohollis@aol.com,rfcunning@aol.com,pe487@aol.com,
carolsid@aol.com,kenanderson45ken@aol.com,sweetshave1@aol.com,
savannahgentile@aol.com,mizone23@aol.com,heyuchad@aol.com,
ooobrittxxx@aol.com,ratzolino@aol.com,sonyaatj@aol.com,hrj551@aol.com,
wgeorge1@aol.com,youdahman@aol.com,p1castagna@aol.com,lsolero@aol.com,
tjdjpieper@aol.com,hiblotporcin@aol.com,cates20@aol.com,
jmiodusz@aol.com,fhrayjr@aol.com,neliloren@aol.com,dbzboy0805@aol.com,
mobatt@aol.com,denisperson@aol.com,legallybl0nd38@aol.com,
jdyck94897@aol.com,goodgirl786@aol.com,hartmutmiller@aol.com,
jaguar55princess@aol.com,midamiart@aol.com,luvulas@aol.com,
mlvad@aol.com,ccbstallings@aol.com,nathandavid313@aol.com,
yaopelz@aol.com,jscarps@aol.com,cocoualmci@aol.com,
adorableone93@aol.com,jimsse3@aol.com,dendicook@aol.com,
shanakyle@aol.com,dad2jjs@aol.com,hevean@aol.com,rjerry72@aol.com,
wanjon@aol.com,onetallniceguy@aol.com,naokokashimura@aol.com,
bannanawagon@aol.com,kaem1978@aol.com,bkay2743@aol.com,
ladyindybug@aol.com,helminator2000@aol.com,pla4kicks@aol.com,
gogettherr@aol.com,roznice@aol.com,grfina@aol.com,yoneka126@aol.com,
natalyahandal@aol.com,synet4@aol.com,schmittbriard@aol.com,
jmonscvitz@aol.com,biskiran@aol.com,danyuschi@aol.com,
simonsimonjohn@aol.com,bpmts77@aol.com,rvrgirl2000@aol.com,
hermine832897147@aol.com,cuddlyandsmart@aol.com,jaxxzson@aol.com,
toledodon@aol.com,bsassym7@aol.com,bronxgirl127@aol.com,
kjcable@aol.com,ccstrayer@aol.com,lbigred87@aol.com,zzaaq2@aol.com,
tomkurl@aol.com,rpetry2511@aol.com,quirinpeschel@aol.com,
cnswagner@aol.com,rdheb0519@aol.com,rharms1946@aol.com,
cheryl2cute@aol.com,husky4039@aol.com,judithnaumann@aol.com,
atlantaroper@aol.com,otreasuredone@aol.com,ygbstar@aol.com,
ojgthered@aol.com,robertwagner8227@aol.com,cskleiner@aol.com,
baronkestor@aol.com,tagadajones56@aol.com,victorsbu27@aol.com,
serina1259@aol.com,coachgm@aol.com,olfrtsrgnz@aol.com,
soonergirl94@aol.com,shm65359435@aol.com,toogood440@aol.com,
brivel8@aol.com,warningsexmaniac@aol.com,rootsnurseries1@aol.com,
nunfio@aol.com,sabrinanr5@aol.com,j4world@aol.com,twos2d@aol.com,
cybernaut12@aol.com,rww1940@aol.com,gftentertainment@aol.com,
ato1995@aol.com,scarynnoe@aol.com,starpond24@aol.com,
pascalkrause@aol.com,itsimbratisback@aol.com,xkrazdx@aol.com,
sparil@aol.com,ant2tall4u@aol.com,arabianr0se@aol.com,
bosslady999@aol.com,dkursh@aol.com,niknak888@aol.com,curlyhart@aol.com,
pmart90064@aol.com,shaase001@aol.com,kim121681@aol.com,
bowlnelwood@aol.com,shadylion21@aol.com,chad121388@aol.com,
iprov@aol.com,annielo71@aol.com,antieru@aol.com,faeriemajiq@aol.com,
criketm2@aol.com,dottybtoo@aol.com,sina2112@aol.com,scotman000@aol.com,
kotiwfamily@aol.com,dchazell@aol.com,rollin32xtc@aol.com,
redleslie6@aol.com,passionbowzer@aol.com,listrac@aol.com,
sailcatcal@aol.com,dlj020202@aol.com,boatnbabe@aol.com,
lamwilson22@aol.com,jets2533@aol.com,sprowellp@aol.com,
fabulaireny@aol.com,joeypiazza5493@aol.com,judhrib@aol.com,
sara16x@aol.com,halffullprds@aol.com,fontgaillarde@aol.com,
chartfarm@aol.com,heartlight2001@aol.com,denkershausen@aol.com,
barleyvh@aol.com,zarusoba@aol.com,gamygamine@aol.com,mikkigrim@aol.com,
thewangsta10@aol.com,spoiledsuss@aol.com,whousam@aol.com,
pmonta33@aol.com,scott4huskers@aol.com,gmaxf64714@aol.com,
lulu895@aol.com,aeller4552@aol.com,bvlhls@aol.com,pqueen69@aol.com,
elainehrh@aol.com,nysey@aol.com,wehertzner4@aol.com,bpf3504x4@aol.com,
carelana@aol.com,tysonpbynum@aol.com,tgehris28@aol.com,
gibbon86@aol.com,and1huff@aol.com,melindakolson@aol.com,
rickbatrt@aol.com,nbp555@aol.com,ronazee@aol.com,shaffer635@aol.com,
johnrichardswcu@aol.com,starletboy@aol.com,suesun7670@aol.com,
fonzie1568@aol.com,thief9111@aol.com,f45678943@aol.com,payjd@aol.com,
mom2bfirst1@aol.com,onelouderthanyou@aol.com,jphalewv@aol.com,
unityandstrength@aol.com,wollepetriheil@aol.com,sowhatsoftware@aol.com,
bigdhm@aol.com,chefwylie5@aol.com,harry1265@aol.com,
cygnusx1man@aol.com,sighbrrr@aol.com,dagwynfryn@aol.com,rjkcle@aol.com,
nlvprincez@aol.com,djivaspaule@aol.com,juanaesther@aol.com,
eireoriole@aol.com,cswgoldfinger@aol.com,mlehman39@aol.com,
robeilmann@aol.com,kirain4474@aol.com,launa21@aol.com,kimost1@aol.com,
fool550@aol.com,zanniegurl@aol.com,kz1906@aol.com,mnh111222333@aol.com,
skidooer624@aol.com,ars0789@aol.com,triangleinvest@aol.com,
kjfras@aol.com,crystallllp@aol.com,alblcsw@aol.com,mom4951@aol.com,
chris7978@aol.com,dmh275@aol.com,soulbrotha22@aol.com,
grahamemiles1@aol.com,chrispsg77@aol.com,donnamdd@aol.com,
oneandonly1805@aol.com,ace1893@aol.com,passagesx4@aol.com,
webspyder14@aol.com,rcrns@aol.com,dolfan3466494@aol.com,
immanuelbrown@aol.com,kenavde@aol.com,shrimpo025@aol.com,
jeananders@aol.com,pcoffeeand@aol.com,trialkevin@aol.com,
crulong@aol.com,midnightluv45@aol.com,red101614@aol.com,
icing02@aol.com,farrellsff@aol.com,lcliff4@aol.com,
deniseypowell@aol.com,linz14701@aol.com,fsutep186@aol.com,
marcymuder@aol.com,srevangelista@aol.com,cjjorstadi@aol.com,
gmmstwrt@aol.com,htraffey@aol.com,oliviermarquez@aol.com,
dunedepila@aol.com,tlg8863@aol.com,dl880@aol.com,rolfmoldehn@aol.com,
poole127@aol.com,anthonylomas@aol.com,ewamops@aol.com,
bowlingnut300@aol.com,jochenkoenig123@aol.com,leetledove@aol.com,
jdamjm@aol.com,pcarlberg913@aol.com,yahritebiteme@aol.com,
jfcayne@aol.com,covm@aol.com,fivecentone@aol.com,jgbasker@aol.com,
nicole1255642639@aol.com,midnite205@aol.com,schweitz19@aol.com,
lorensutherland1@aol.com,resinnc@aol.com,markpbuck@aol.com,
ssmithsurfer@aol.com,cindyjreinhardt@aol.com,onesweetmonster@aol.com,
qoltemp99@aol.com,herbertschroth@aol.com,jocelyn1013jeff@aol.com,
thadges@aol.com,lfoley292@aol.com,michiekitty@aol.com

hi...

Introducing H,G,H,, the most incredible wonderdrug to come out of the medic=
al research establishment in a long while, and a substance used by the soci=
o-economic elites of the world for years. The difference? the actors and ac=
tresses and politicians and extremely wealthy of all walks of life that hav=
e been acquiring it for so long to shed pounds and wrinkles and look and fe=
el younger and fitter and healthier have had to pay thousands of dollars fo=
r each dose, and endure painful injections. No longer! Medical technology h=
as advanced so far as to allow users to take a simple pill each day and att=
ain the same effects that once required very large amounts of money, time, =
and patience (not to mention pain tolerance!).

Lose weight, increase lean muscle mass, get rid of external signs of age li=
ke wrinkles and lines, improve your mood and reduce or eliminate signs or s=
ymptoms of depression, dramatically boost your energy levels and physical s=
tamina, refresh and revitalize your brain, memory and mental energy, help e=
liminiate stress, fatigue and depression, and so much more. How can one pro=
duct do all of this? It\'s simple, actually.. our produces produce H G H nat=
urally, all throughout our lives. The problem is that over time our bodies =
begin to produce less and less, which is one of the main causes of aging (a=
nd all signs of aging), sickness, wrinkles and cellulite and loss of energy=
, mental function, sex drive/function, decreased metabolism and even depres=
sion and poor quality sleep.

This medical marvel can help cure or eliminate ALL of those woes, as soon a=
s a week or two after you begin usage, and is like a shot of youth that can=
allow you to turn back the clock in many extremely important ways. <A HREF=
=3Dhttp://www.sethgnow.com/>Click here</A>
<BR>
<BR>
<BR>
<BR>
<BR>












07ae8aaff6ee4335248f3059a5823472
.

Nachricht:




Diese E-Mail wurde am 20.08.2006 um 21:55 Uhr versandt.

Die IP-Adresse des Absenders ist: 70.187.220.73 : 53415

Die aufgelöste IP des Absenders lautet:

Von: technik<ä-t>domainfactory.de
An: xyz@web.de
Betreff: Missbrauch Ihrer Scripte // AN: 123456

Sehr geehrter Herr X,

wir mussten leider feststellen, dass Ihr Skript

/kunden/123456/webseiten/netz-planet/mailsender.php

zur Versendung von Massenmails durch Dritte mißbraucht wurde. Dadurch kam es zudem zu einer Überfüllung unserer Mailqueue, wodurch andere Kundenmails nur mit großer Verzögerung zugestellt wurden. Wir mussten das Script daher im Interesse aller umbenennen und somit deaktivieren.

Überprüfen Sie bitte Ihr Script auf Sicherheitslücken. In den meisten Fällen werden die Scripte mit modifizierten Parametern aufgerufen, in denen entweder die Zieladresse geändert wird, oder durch das Einfügen von Umbruchzeichen zusätzliche Bcc-Zeilen/Empfänger eingefügt werden.

Am besten, Sie fügen alle Headerangaben hartkodiert ein (z.B. From, To, Subject usw.), so dass diese nicht durch falsche Parameter modifiziert werden können. Falls dies in Ihrem Fall nicht möglich ist, müssen (!) Sie die übergebenen Parameter auf Herz und Nieren prüfen. E-Mails müssen mit Regulären Ausdrücken auf syntaktische Korrektheit geprüft werden. In PHP geht das z.B. mit folgendem, beispielhaftem Ausdruck:

preg_match(\'/^[a-z0-9_\\.\\-]+@[a-z0-9\\.\\-]+\\.[a-z]{2,}$/i\', $_POST[\'email\'])

Dieses Suchmuster ist zwar nicht perfekt, filtert jedoch schon 99% aller Manipulationsversuche heraus.

Zudem müssen (!) alle Variablen, die Sie im Mailheader verwenden (z.B. From, Subject, Name, To usw.) auf Umbrüche geprüft werden. Wird in den Variablen ein Umbruch entdeckt, so liegt mit Sicherheit ein Hackversuch vor, da ein solches Umbruchzeichen über ein normales Input-Eingabefeld nicht eingegeben werden kann und der POST-Request definitiv gefälscht wurde. Folgendes Codebeispiel in PHP prüft die POST-Variable \"email\" auf Umbrüche und beendet das Script mit einer Fehlermeldung an den Spamer:

if ( strstr($_POST[\'email\'], \"\\n\") ) die (\"Forget it, Spamer!\");

Wenden Sie diese Prüfung auch auf alle anderen Variablen an, die im Mailheader verwendet werden. Bei Verwendung des PHP-Befehls mail() sind die Parameter 1,2,4 und 5 betroffen:

mail( _BETROFFEN_ , _BETROFFEN_ , Mailbody [, _BETROFFEN_ [, _BETROFFEN_]])

Sehen Sie hierzu auch:
http://de.php.net/manual/de/function.mail.php
http://www.heise.de/security/artikel/66815

Benennen Sie Ihr Script erst wieder um, wenn alle Sicherheitslücken behoben wurden. Bei Mißachtung dieser Anweisung müssten wir eine Sperrung der betroffenen Domain erwägen, was wir nur sehr ungern machen möchten.

Für weitere Fragen stehen wir Ihnen gerne zur Verfügung.



Mit freundlichen Grüßen

Team Techniksupport & Operations