Samstag, 28. November 2015

Dicker FakePal-Phish

Im Namen von PayPal habe ich ja schon einige (nicht ungefährliche) Spams erhalten. Diese hier von gestern hat jedoch die meisten Phishing-Warnungen bislang hervorgebracht:



Der Inhalt in Zusammenhang mit der Absenderadresse könnten einen Menschen mit PayPal-Konto (der ich nicht bin) schon verunsichern - wäre die Empfängeradresse richtig geschrieben und der Text ohne Fehler;)

Die Spam kam von einem deutschen Server und gelangte über einen Server in Venezuela in den normalen Posteingang meines Kontos bei web.de.

Der angebliche Kontoumstellungslink führt zur Domain "carpastravesia.cl" in Chile ...




Return-Path: [service@paypal.de]
Received: from nk.auno.com.ar ([200.47.83.238]) by mx-ha.web.de (mxweb107) with ESMTP (Nemesis) id 0Lyo83-1aQCoQ0tGx-0164Me for [MeinNameInFalscherSchreibweise@web.de]; Fri, 27 Nov 2015 20:51:30 +0100
Received: from [217.160.110.88] (unknown [217.160.110.88]) by nk.auno.com.ar (Postfix) with ESMTPA id 9B5ED5FCFED for [MeinNameInFalscherSchreibweise@web.de]; Fri, 27 Nov 2015 16:47:24 -0300 (ART)
Content-Type: multipart/alternative; boundary="===============0672720975=="
MIME-Version: 1.0
Subject: Ihr Paypal Konto wurde eingeschränkt Vollansicht !
To: MeinNameInFalscherSchreibweise@web.de
From: "service@paypal.de" [service@paypal.de]
Date: Fri, 27 Nov 2015 20:51:29 +0100
Message-Id: [20151127194724.9B5ED5FCFED@nk.auno.com.ar]
Envelope-To: [MeinNameInFalscherSchreibweise@web.de]




   
Eingabe Ihrer hinterlegten Daten erforderlich!

Sehr geehrte Damen & Herren,

Ihr Nutzerkonto wurde eingeschrankt.

Die Sicherheit unserer Nutzer nehmen wir ausnahmlos ernst.

Dies war auch eines der Grunde, warum wir unser Sicherheitskonzept umgestellt haben. Aus diesem Grund ist es Ihnen furs Erste nicht moglich, Zahlungen zu empfangen oder zu tatigen. Ihr eventuell vorhandenes Guthaben wurde eingefroren.

Fur die Aufhebung der Einschrankung, ist die Eingabe ihrer hinterlegten Daten notwendig. Die Eingabe sorgt in erster Hinsicht dafur, dass die hinterlegten Daten stets aktuell sind. Ein weiterer, wichtiger Faktor hierbei ist: der Sicherheitsabgleich.

Anschliebend wird Ihr Nutzerkonto nach Abgleich der Daten freigeschaltet.

Kommen Sie diesem Abgleich innerhalb 14 Werktagen nicht nach, ist die Aufhebung der Einschränkung nicht mehr moglich.


   
Umstellung ausfuhren[http://carpastravesia.cl/PPl-Secure/]
   
   

Wir bitten Sie herzlichst die Unannehmlichkeiten zu verzeihen.

Mit freundlichen Grußen
Ihr PayPal-Team 2015




Dienstag, 24. November 2015

Dreimal Post aus Nigeria

Jude Omoh hatte schon letzte Woche die Blogkontaktadresse von "spam mirror" kontaktiert, heute macht nun eine angebliche Connie Dutton Werbung für seine Dienste - und zwar gleich an die Blogkontaktadressen von "spam mirror", "unannehmlichkeiten" und dieses Blogs.

Wie auch die Spam von Jude Omoh wurden diese drei von einem nigerianischen Mailserver gesendet. Diesmal irrten sie dann eine Weile auf einem französischen Server umher, bevor sie an die jeweiligen Blogkontaktadressen weitergingen:






Return-Path: [duttonconni1111@gmail.com]
Received: from copper.nahhas.org ([217.13.48.250]) by mx-ha.gmx.net (mxgmx001) with ESMTP (Nemesis) id 0MbgOL-1ZiuoN3dBN-00J3Zn for [contact@succun.su]; Tue, 24 Nov 2015 17:29:59 +0100
Received: from localhost (localhost.localdomain [127.0.0.1]) by copper.nahhas.org (Postfix) with ESMTP id 31E1D149A7B; Tue, 24 Nov 2015 12:00:56 +0100 (CET)
X-Virus-Scanned: amavisd-new at nahhas.com
Received: from copper.nahhas.org ([127.0.0.1]) by localhost (copper.nahhas.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id CNnIFkiU5PlZ; Tue, 24 Nov 2015 12:00:56 +0100 (CET)
Received: from [41.71.208.162] (unknown [41.71.208.162]) by copper.nahhas.org (Postfix) with ESMTPA id 4DE04149D37; Tue, 24 Nov 2015 12:00:50 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: READ I HAVE PAID AGAIN.
To: Recipients [duttonconni1111@gmail.com]
From: duttonconni1111@gmail.com
Date: Tue, 24 Nov 2015 13:04:10 +0100
Reply-To: conniedutton777@yahoo.com
Message-Id: [20151124110050.4DE04149D37@copper.nahhas.org]
Envelope-To: [contact@succun.su]

------------------------------------

Return-Path: [duttonconni1111@gmail.com]
Received: from copper.nahhas.org ([217.13.48.250]) by mx-ha.gmx.net (mxgmx106) with ESMTP (Nemesis) id 0MfBPq-1Zi4wH25UI-00OmaD for [contact@spammirr.or]; Tue, 24 Nov 2015 17:29:59 +0100
Received: from localhost (localhost.localdomain [127.0.0.1]) by copper.nahhas.org (Postfix) with ESMTP id 34F61149C8E; Tue, 24 Nov 2015 12:00:10 +0100 (CET)
X-Virus-Scanned: amavisd-new at nahhas.com
Received: from copper.nahhas.org ([127.0.0.1]) by localhost (copper.nahhas.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id DaWgGi4cQ0a4; Tue, 24 Nov 2015 12:00:09 +0100 (CET)
Received: from [41.71.208.162] (unknown [41.71.208.162]) by copper.nahhas.org (Postfix) with ESMTPA id 8B198149CD6; Tue, 24 Nov 2015 12:00:04 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: READ I HAVE PAID AGAIN.
To: Recipients [duttonconni1111@gmail.com]
From: duttonconni1111@gmail.com
Date: Tue, 24 Nov 2015 13:03:24 +0100
Reply-To: conniedutton777@yahoo.com
Message-Id: [20151124110004.8B198149CD6@copper.nahhas.org]
Envelope-To: [contact@spammirr.or]

------------------------------------

Return-Path: [duttonconni1111@gmail.com]
Received: from copper.nahhas.org ([217.13.48.250]) by mx-ha.gmx.net (mxgmx011) with ESMTP (Nemesis) id 0LddEA-1ajhpq0ZGs-00iiZ5 for [contact@unan.ne]; Tue, 24 Nov 2015 17:24:48 +0100
Received: from localhost (localhost.localdomain [127.0.0.1]) by copper.nahhas.org (Postfix) with ESMTP id C14C41E2B91; Tue, 24 Nov 2015 12:01:50 +0100 (CET)
X-Virus-Scanned: amavisd-new at nahhas.com
Received: from copper.nahhas.org ([127.0.0.1]) by localhost (copper.nahhas.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id YQ+-0x1UzNuI; Tue, 24 Nov 2015 12:01:49 +0100 (CET)
Received: from [41.71.208.162] (unknown [41.71.208.162]) by copper.nahhas.org (Postfix) with ESMTPA id 686A31E2A10; Tue, 24 Nov 2015 12:01:42 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: READ I HAVE PAID AGAIN.
To: Recipients [duttonconni1111@gmail.com]
From: duttonconni1111@gmail.com
Date: Tue, 24 Nov 2015 13:05:03 +0100
Reply-To: conniedutton777@yahoo.com
Message-Id: [20151124110143.686A31E2A10@copper.nahhas.org]
Envelope-To: [contact@unan.ne]





Attn: My Dear,

I am Mrs Connie Dutton, I am a US citizen, 51 years Old. I reside here in Silver Springs Florida. My residential address is as follows. 7008 E Hwy 326 Silver Springs Florida 34488, United States, am thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Nigeria many years ago and they refused to pay me, I had paid over US$200,000 while in the US, trying to get my payment all to no avail.

So I decided to travel down to Nigeria with all my compensation documents, And I was directed to meet Barrister George Alex, who is the member of COMPENSATION AWARD COMMITTEE, and I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake.

He took me to the paying bank for the claim of my Compensation payment. Right now I am the most happiest woman on earth because I have received my compensation funds of $1.5 Million US Dollars Moreover, Barrister George Alex, showed me the full information of those that are yet to receive their payments and I saw your email address as one of the beneficiaries, that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Barrister George Alex.

You have to contact him directly on this information below.

COMPENSATION AWARD HOUSE
Name : Barrister Jude Omoh(Esq)
Email: jude_omoh@yahoo.com
Direct Telephone: +234-8103021422

You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing.

The only money I paid after I met Barrister George Alex was just US$570 for the paper works, take note of that.

As soon as you contact him he will send you the payment information which you are to use in sending the payment to him in order for him to obtain the document from the court of law there in Nigeria so that your fund can be transfer to you without any delay just the way mine was being transfer to me.

Send him the following details if you know you are ready to have your FUNDS so that as soon as he receive your information he will send to you the payment details for sending him the $570USD that is needed for him to get the document that is needed to make the transfer a successful one and that is that only payment i made to Barrister George Alex and he help me in the
transferring of my FUNDS and i most say that you have to contact him so that he will help you the way he help me to Get my FUNDS without any further payment.

Fill Out the information to him if you are ready to get your FUNDS

Your Full Name:...............
Direct Phone:....................
Country.................
Occupation:.....................
Gender:.........
Age:..............

Once again stop contacting those people, I will advise you to contact Barrister George Alex so that he can help you to Deliver your fund instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction.

Thank You and Be Blessed.

Mrs Connie Dutton.
7008 E Hwy 326 Silver Springs
Florida 34488, United States



Freitag, 20. November 2015

Amateur-Cams im Murmelladen

Diese Zusammenfassung ist nicht verfügbar. Klicke hier, um den Post aufzurufen.

Donnerstag, 19. November 2015

Was hat das mit Amazon zu tun?

Wieder mal ein seltsames Angebot an meine Blogkontaktadresse ...


Return-Path: [anonymous@webxc48s05.ad.aruba.it]
Received: from smtplqs-out29.aruba.it ([62.149.158.69]) by mx-ha.gmx.net (mxgmx011) with ESMTP (Nemesis) id 0LyzbM-1aU5qW3LJQ-014BSd for [contact@succun.su]; Thu, 19 Nov 2015 10:27:40 +0100
Received: from webxc48s05.ad.aruba.it ([62.149.145.83]) by smartcmd03.ad.aruba.it with bizsmtp id jMTf1r00n1oAyHa01MTf0o; Thu, 19 Nov 2015 10:27:39 +0100
Received: (qmail 32758 invoked by uid 19194229); 19 Nov 2015 09:27:39 -0000
To: contact@succun.su
Subject: you should update your account
X-PHP-Originating-Script: 19194229:app.php
From: Amazon [actionalerts-nan619716@care2.com]
Reply-To: [actionalerts-nan619716@care2.com]
Message-ID: [8601c16340f399952789c5d5b7ae7399@www.novellisrl.it]
MIME-Version: 1.0
Date: 2015-11-19
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
Envelope-To: [contact@succun.su]


   
Hostnet[http://www.hostnet.nl]
Hostnet.nl[http://www.hostnet.nl]         Klantenservice[http://www.hostnet.nl/helpdesk]
   
   
Beste meneer Malkuh,

Wij hebben het volgende klantnummer voor u aangemaakt: 6335590.

Wat is Mijn Hostnet?
Mijn Hostnet is een online klantenportaal waar u gratis kunt inloggen op uw eigen, persoonlijke pagina. In Mijn Hostnet kunt u onder andere:
- uw gegevens wijzigen;
- facturen en contracten inzien;
- snel en eenvoudig bestellen en upgraden;
- zelf DNS beheren en nameservers wijzigen;
- contact opnemen met alle afdelingen van Hostnet.

Inloggen op Mijn Hostnet
Uw loginnaam voor Mijn Hostnet is: gtf4u@hotmail.com
Stel uw wachtwoord in[https://mijn.hostnet.nl/hash/6868bfbf9b270df8c873603b6b0802c5]
De link is 24 uur geldig.
Na het instellen van uw wachtwoord kunt u met uw gegevens inloggen op Mijn Hostnet via https://mijn.hostnet.nl.

Vragen
Heeft u vragen? Bekijk dan onze klantenservicepagina[http://www.hostnet.nl/helpdesk]. Hier vindt u onder andere onze veelgestelde vragen en Helpdesk.


Met vriendelijke groet,
Hostnet bv
Hostnet.nl         Algemene Voorwaarden         KvK-nummer: 34130993
   
Deze e-mail is automatisch gegenereerd, u kunt niet op deze e-mail reageren. 





Montag, 16. November 2015

Wieder geht's zu "sexy.com"

Wie schon die erste Spam von gestern führt auch diese zweite von gestern abend über die bekannten Malwareumleitungen "seethisinaction.com" und "frtya.com" zur Domain "sexy.com" ...



Return-Path: [web.de.12771010.MeinName@mta11.howtosew.org]
Received: from mta11.howtosew.org ([177.223.143.12]) by mx-ha.web.de (mxweb004) with ESMTP (Nemesis) id 0M2KNI-1aGYwr2Xsy-00s7PY for [MeinName@web.de]; Sun, 15 Nov 2015 22:18:38 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=howtosew.org; s=s1024; l=11423; x=1448227180; h=From:To:Subject:Content-Type: Date:Message-ID:List-Unsubscribe; b=GO+yMnKljM/FKTPcHBQI8uKV8Ys9 XaadCGYWjp4tQlkzGspw2irUorUpHEQhOBIZaKfQX5PA9sKzu1SC4tiUeYaDXbSd 0urtLtYl4hT+cI0nk1Qh91XKW8mI7uSyyekREJ1+RPmGwI3mzhxhyKi/xyRkbbD5 eJRiYMV0txbfZQI=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=howtosew.org; s=s1024; l=11423; x=1448227180; h=From:To: Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=9AJ0Tf I1KrYBsulF/Sarc2JYfms=; b=rqCwFbO67ezBKFrJw19jDIhidebAjXXrccOReC XuGngLeVyM4YBOTh1CUVJbq35Qh9g7g5r3voFAzcI4bikAYp9KNTqrr/Pnpsxset zbkCUZgP5ehbaAlSw5IiQFqAyU1JqaAVZZYmW22Suh4WCJxRjzblX7Uh1aRlVdHn /GmeM=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=howtosew.org; b=sE0YHDYQWJdJ26fv7DypV8xbnEESaPBZZa0fKWBHXg42bf8P9qmooRTmWHabAIjjVwArSg6mRbyC+ozzR6e1ZgIMIncdMQRbuXgHBycbqf/tflxjfxf0wolT2XwqhcH5tilU/5J2rGfQS1Voq9062wSZh4ddpk1TfiCEryPd7FU=;
Received: from howtosew.org [177.223.143.12] by howtosew.org [177.223.143.12]; Sun, 15 Nov 2015 21:25:32 +0100
MIME-Version: 1.0
From: I Want you [iwantyou@howtosew.org]
To: MeinName@web.de
Subject: Sexually Explicit:IwantYouTofuckMe sent you sex request!
Content-Type: multipart/alternative; boundary="-=21aa0cb607959a0ba25e35011d6dd819";
Date: Sun, 15 Nov 2015 21:25:32 +0100
X-Mailer: Universal
Message-ID: [1-12771010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta11.howtosew.org]
List-Unsubscribe: http://howtosew.org/1/acc1.pl?e=MeinName@web.de&m=12771010
Precedence: bulk
X-Admin: postmaster@howtosew.org
Abuse-Reports-To: abuse@howtosew.org
X-Complaints-To: abuse@howtosew.org
X-Report-Abuse-To: abuse@howtosew.org
Envelope-To: [MeinName@web.de]




[http://howtosew.org/sovsel?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=12771010&l=1.]


Samstag, 14. November 2015

"I Want you" von "datawordcomputers"

Gestern kamen nach der letzten vom Donnerstag wieder zwei Sex-Spams von BGO. Die erste ist eine Text-Spam und führt über die Malwaredomain "ertya.com" zu "freelifetimefuckbook.com":





Return-Path: [web.de.12706010.MeinName@mta14.datawordcomputers.com]
Received: from mta14.datawordcomputers.com ([177.223.139.64]) by mx-ha.web.de (mxweb106) with ESMTP (Nemesis) id 0Le6oS-1akYGf3oOy-00pq0F for [MeinName@web.de]; Fri, 13 Nov 2015 16:13:02 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=datawordcomputers.com; s=s1024; l=11531; x=1448032443; h=From: To:Subject:Content-Type:Date:Message-ID:List-Unsubscribe; b=Ge8m zuBJ3q9AvaM7yuyrXd+NagQV682A/Ba9nAxu7eITaaJC+y7wUKMxd0xlhW24jmnl kivZkfWAnBvbG+GtSwc/IwoDD5wXjn+v9FaNdfbPagCA5Fp619IG3hoXrCcZI26u usjYWG/WglPdb4v/tOkTfKR1+8ah7BxQ6TravoY=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=datawordcomputers.com; s=s1024; l=11531; x=1448032443; h=From: To:Subject:Content-Type:Date:Message-ID:List-Unsubscribe; bh=8N7 WYp4g5cEn/GSNbrDwBcEJ2uw=; b=JLRxeiE8QoTgXY5GN0JKV+eiMZUG++lK/WT beObhN6t3sEh0EtWpRAtOrsyuhtnm/OxjhTOQQYU2YfCTmFCtgrV3bVga7X7T/QW 10sduY+wwaftdsoqllne6PJ6b2ZrCrqH0DKYj3KehATTGGDW1aKZeI1pp2/BqX+L hA0/s1sA=
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=datawordcomputers.com; b=E0016fF7jpK8cYysJ+nU0gDqzB3OXhxZ3qagntPDB/sBTckAst9Iev/wbMk9LUz6nrJMfeEH6Gj14EXd8nCd2sGisKpR0HPMnKr4uAur559HsCLC0MuwslCBd4x8z6WSQW7Zl2u9t/QcQCQY6Vc+jmNjl4/1p68buwH/457p+Qo=;
Received: from datawordcomputers.com [177.223.139.64] by datawordcomputers.com [177.223.139.64]; Fri, 13 Nov 2015 14:21:10 +0100
MIME-Version: 1.0
From: I Want you [iwantyou@datawordcomputers.com]
To: MeinName@web.de
Subject: Sexually Explicit:IwantYouTofuckMe sent you sex request!
Content-Type: multipart/alternative; boundary="-=70d7eebef161a81a9cc536369c8d1b53";
Date: Fri, 13 Nov 2015 14:21:10 +0100
X-Mailer: Universal
Message-ID: [1-12706010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@mta14.datawordcomputers.com]
List-Unsubscribe: http://datawordcomputers.com/1/acc1.pl?e=MeinName@web.de&m=12706010
Precedence: bulk
X-Admin: postmaster@datawordcomputers.com
Abuse-Reports-To: abuse@datawordcomputers.com
X-Complaints-To: abuse@datawordcomputers.com
X-Report-Abuse-To: abuse@datawordcomputers.com
Envelope-To: [MeinName@web.de]



Hey
Our website specialize on new encounters. But not simple encounters, they're with some purpose ;)
Girls for you
Filter girls on theirh height, weight, hair color. Pick the ones fit you the most near you :) In other words, enjoy.

Meet and enjoy




[http://datawordcomputers.com/sovsel?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=12706010&l=1.]





Mittwoch, 11. November 2015

PrettyInPink7, Pending Messages und Jesdaughte90

Diese Zusammenfassung ist nicht verfügbar. Klicke hier, um den Post aufzurufen.

Donnerstag, 5. November 2015

100 unerledigte Nachrichten aus dem Murmelladen ...

Diese Zusammenfassung ist nicht verfügbar. Klicke hier, um den Post aufzurufen.

Dienstag, 3. November 2015

Apple und die Bunker-Knacker

Diese nur mit einer verlinkten Bitmap versehene Spam im Namen von Apple an mein Postfach bei web.de (wieder in falscher Schreibweise) kommt aus Deutschland und führt nicht etwa nach Indien, sondern in die USA. Ob sie von dort noch weitergeleitet wird und wie gefährlich sie ist, kann ich leider nicht sagen, da "urlquery.net" seit gestern "down" ist ...


 

Return-Path: [ph5s607@s007-ct-ffm-r01.ec-c.net]
Received: from s007-ct-ffm-r01.ec-c.net ([85.190.1.220]) by mx-ha.web.de (mxweb107) with ESMTP (Nemesis) id 0M0fnm-1akXYI1970-00uppM for [MeinNameInFalscherSchreibweise@web.de]; Tue, 03 Nov 2015 00:57:00 +0100
Received: by s007-ct-ffm-r01.ec-c.net (Postfix, from userid 1798) id 42D5783CC1E; Tue, 3 Nov 2015 00:53:21 +0100 (CET)
To: MeinNameInFalscherSchreibweise@web.de
Subject: Verifizierung Ihres persönlichen Kontos
Date: Tue, 3 Nov 2015 00:53:21 +0100
From: Apple [apple@service.de]
Message-ID: [1ad0649773eefb50ee05c5e454e982e2@bunker-knacker.de]
X-Priority: 3
X-Mailer: PHPMailer [version 1.73]
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Envelope-To: [MeinNameInFalscherSchreibweise@web.de]




[https://campusmall.in/sendy/css/font/apps/]


Montag, 2. November 2015

Georgia von legendchance.com ...

... macht heute wieder Werbung für das Hippozino-Casino:

 
Return-Path: [web.de.838010.MeinName@host59.legendchance.com]
Received: from host59.legendchance.com ([198.102.11.93]) by mx-ha.web.de (mxweb002) with ESMTP (Nemesis) id 0MWkvL-1Zz1hc0OPD-00XtRC for [MeinName@web.de]; Mon, 02 Nov 2015 08:59:03 +0100
DKIM-Signature: a=rsa-sha1; c=relaxed/relaxed; d=legendchance.com; s=s512; l=30662; x=1447056695; h=From:To: Subject:Content-Type:Date:Message-ID; b=pP/0r68TW62xVOM22Wp8gcP+ uQj9MMT69+8G25zbdfYD3/GWWWFHQY/ihOpy/q0fRDQLsoku45mhrAoPuAMb6w==
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=legendchance.com; s=s512; l=30662; x=1447056695; h=From:To: Subject:Content-Type:Date:Message-ID; bh=ZGqZOPwHu0loV0ehqrxjWkJ 0Yms=; b=zn/wdEZe0ofPJFp8TblHs48HmLPobnUr8GXh5ZGEuldxQOp8O4lj/fs aL/90+VOKJeL/wv+meSMlIZhtgSIjlA==
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s512; d=legendchance.com; b=LFkaBd7nF1+IGZj1/fEYeq0V45fdYvulEdhKRu+mTzN8yAqj1X0zxKET9HQTSAdBHthozUWwZoj7HbuAGi9OGQ==;
Received: from legendchance.com [198.102.11.93] by legendchance.com [198.102.11.93]; Sun, 1 Nov 2015 09:47:00 +0100
MIME-Version: 1.0
From: Georgia [georgiaS@legendchance.com]
To: MeinName@web.de
Subject: Play your favorite games here.
Content-Type: multipart/alternative; boundary="-=4184ff01460e4372472c4b410378a62f";
Date: Sun, 1 Nov 2015 09:47:00 +0100
Message-ID: [2-838010-lRmLiV2dA5mbh1mclhWbph2Yh9maP@host59.legendchance.com]
X-Mailer: 4.2.8-134 [Aug 22 2012, 22:57:59]
Envelope-To: [MeinName@web.de]




View this email in your browser
Hippozino Casino
Hippozino presents 21 Free Spins on Sign Up
Hippozino presents you great chance for to come out of the daily routine mayhem. Enjoy 141 Free spins on sign up on Pandamania video slot in April. Let the chirping birds and roaring animals win you huge jackpots.
Free Spins Offer for New Players

    Sign up and use the promo code: PM21
    Go to slot section and press play now on the Pandamania
    Set the bet at 0.01 and enjoy the game.
    Deposit 20 and get 120 free spins in form of bonus value of 30.

   
Hippozino Casino[http://legendchance.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=838010&l=0.]
This offer is only valid for new customers. The total Free Spins value of 5.25 is seen as a complementary bonus and wager requirements is set to 200 times. The full wager has to be met within seven days. Start date 1st April and end date is 30th April. General Terms and Conditions[http://legendchance.com/sohtaiks?e=lRmLiV2dA5mbh1mclhWbph2Yh9maP&m=838010&l=1.] Applies.
Copyright © *|CURRENT_YEAR|* *|LIST:COMPANY|*, All rights reserved.
*|IFNOT:ARCHIVE_PAGE|* *|LIST:DESCRIPTION|*

Our mailing address is:
*|HTML:LIST_ADDRESS_HTML|* *|END:IF|*

unsubscribe from this list    update subscription preferences

*|IF:REWARDS|* *|HTML:REWARDS|* *|END:IF|*


Click here to unsubscribe.