Mugu Dubletten

[kjz1]

Neu hinzugekommen sind:

header:

01: Received: from mail.csdn-inc.net (EHLO mail.csdn-inc.net) [211.103.135.163]
02:   by mx0.gmx.net (mx116) with SMTP; 06 Dec 2011 xx:xx:xx +0100 
03: Received: from localhost (csdn-inc.net [127.0.0.1])
04: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Mon,  5 Dec 2011 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at csdn-inc.net
07: X-Spam-Flag: YES
08: X-Spam-Score: 10.793
09: X-Spam-Level: **********
10: X-Spam-Status: Yes, score=10.793 tagged_above=-10 required=5
11: 	tests=[DSPAM:Innocent=-1.000, ALL_TRUSTED=-1.44, DEAR_FRIEND=2.696,
12: 	DSPAM_HAM_99=-3.23, FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
13: 	MISSING_HEADERS=1.581, MISSING_MID=0.001, SUBJ_ALL_CAPS=1.806,
14: 	XMAILER_MIMEOLE_OL_1ECD5=2.796] autolearn=unavailable
15: Received: from mail.csdn-inc.net ([127.0.0.1])
16: 	by localhost (mail.csdn-inc.net [127.0.0.1]) (amavisd-new, port 10024)
17: 	with ESMTP ID: [ID filtered]
18: Received: from User (unknown [70.91.250.12])
19: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTPA ID: [ID filtered]
20: 	Mon,  5 Dec 2011 xx:xx:xx +0800 (CST)

Also als Spam erkannt und trotzdem weiter in die Welt geblasen, sprich: merkbefreite Admins...

IP: 70.91.250.12 ---> indianatitlenetwork.com/Comcast

gecrackt: sales@csdn-inc.net

paymentfund@yahoo.com.hk

Muguphon: +234-8051006901 ---> Globacom Ltd., Nigeria

header:

01: Received: from server2.eicononline.com (EHLO server2.eicononline.com)
02: [207.45.187.178]
03:   by mx0.gmx.net (mx097) with SMTP; 06 Dec 2011 xx:xx:xx +0100
04: Received: from localhost ([127.0.0.1] helo=User)
05: 	by server2.eicononline.com with smtp (Exim 4.69)
06: 	(envelope-from <norereply [at] cargo.org>)
07: 	ID: [ID filtered]

caroline.diarmid@hotmail.com

header:

01: Received: (qmail invoked by alias); 07 Dec 2011 xx:xx:xx -0000
02: Received: from 41-87-241-73.altechdsl.co.za (EHLO mx4.hotmail.com)
03: [41.87.241.73]
04:   by mx0.gmx.net (mx030) with SMTP; 07 Dec 2011 xx:xx:xx +0100

jonasdube1@live.com

mithljhoztgr@hotmail.com

Muguphon: +27 736260630 ---> MTN, ZA

Mugufax: +27 865127045 ---> premium rate number, ZA

header:

01: Received: from ims-d14.mx.aol.com (ims-d14.mx.aol.com [205.188.249.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  7 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from oms-db04.r1000.mx.aol.com (oms-db04.r1000.mx.aol.com
05: [205.188.58.4])
06: 	by ims-d14.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Wed, 7 Dec 2011 xx:xx:xx -0500
08: Message-ID: [ID filtered]
09: Received: from mtaout-da05.r1000.mx.aol.com
10: (mtaout-da05.r1000.mx.aol.com [172.29.51.133])
11: 	by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 028441C000084;
13: 	Wed,  7 Dec 2011 xx:xx:xx -0500 (EST)
14: Received: from aol.de (unknown [91.123.196.147])
15: 	by mtaout-da05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
16: ESMTPA ID: [ID filtered]
17: 	Wed,  7 Dec 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 91.123.196.147 ---> City Network Hosting AB, SE

mr.nicholas_nyamali@yahoo.es

andygregsullivan@aol.com

header:

01: Received: from mail.csdn-inc.net (EHLO mail.csdn-inc.net) [211.103.135.163]
02:   by mx0.gmx.net (mx095) with SMTP; 09 Dec 2011 xx:xx:xx +0100  
03: Received: from localhost (csdn-inc.net [127.0.0.1])
04: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Thu,  8 Dec 2011 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at csdn-inc.net
07: X-Spam-Flag: YES
08: X-Spam-Score: 11.423
09: X-Spam-Level: ***********
10: X-Spam-Status: Yes, score=11.423 tagged_above=-10 required=5
11: 	tests=[DSPAM:Innocent=-1.000, ADVANCE_FEE_2=2.049,
12: 	ADVANCE_FEE_3=1.435, ADVANCE_FEE_4=1.502, ALL_TRUSTED=-1.44,
13: 	DSPAM_HAM_99=-3.23, FH_DATE_PAST_20XX=3.384, FORGED_MUA_OUTLOOK=4.199,
14: 	MILLION_USD=1.777, MISSING_HEADERS=1.581, MISSING_MID=0.001,
15: 	US_DOLLARS_3=1.165] autolearn=unavailable
16: Received: from mail.csdn-inc.net ([127.0.0.1])
17: 	by localhost (mail.csdn-inc.net [127.0.0.1]) (amavisd-new, port 10024)
18: 	with ESMTP ID: [ID filtered]
19: Received: from User (unknown [113.106.90.199])
20: 	by mail.csdn-inc.net (EMOS V1.5 (Postfix)) with ESMTPA ID: [ID filtered]
21: 	Thu,  8 Dec 2011 xx:xx:xx +0800 (CST)

IP: 113.106.90.199 ---> CHINANET Guangdong

gecrackt: contact@csdn-inc.net

cliff04@rediffmail.com

header:

01: Received: from fep06-svc.tim.it (webmail1.posta.tim.it [213.230.128.226])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  9 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from User ([2.196.3.59]) by fep06-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Fri, 9 Dec 2011 xx:xx:xx +0100

jm45442@gmail.com

john_lightup@aol.com

[kjz1]

aus der Mugu-Liste:

header:

01: Received: from mail.transestiba.com.ec (EHLO mail.transestiba.com.ec)
02: [200.93.205.154]
03:   by mx0.gmx.net (mx112) with SMTP; 12 Dec 2011 xx:xx:xx +0100
04: Received: from [192.168.1.200]
05: (static-68-236-186-128.ny325.east.verizon.net [68.236.186.128])
06: 	by mail.transestiba.com.ec (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 12 Dec 2011 xx:xx:xx -0500 (ECT)

ambassador1@mail.kz

Muguphon: +234 8166599170 ---> Nigeria

header:

01: Received: from oms-da02.r1000.mx.aol.com (oms-da02.r1000.mx.aol.com
02: [205.188.255.12])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 13 Dec 2011 xx:xx:xx +0100 (CET)
05: Received: from mtaout-ma05.r1000.mx.aol.com
06: (mtaout-ma05.r1000.mx.aol.com [172.29.41.5])
07: 	by oms-da02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 4AC123802058B;
09: 	Tue, 13 Dec 2011 xx:xx:xx -0500 (EST)
10: Received: from User (unknown [81.214.84.225])
11: 	by mtaout-ma05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Tue, 13 Dec 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 81.214.84.225 ---> dsl.static8121484225.ttnet.net.tr

hrm401@aol.com

robmuellercrimesdiva8@hotmail.com


der ATT/Yahoo-Mugu:

header:

01: Received: from nm11-vm0.access.bullet.mail.sp2.yahoo.com (HELO
02: nm11-vm0.access.bullet.mail.sp2.yahoo.com) [98.139.44.124]
03:   by mx0.gmx.net (mx074) with SMTP; 14 Dec 2011 xx:xx:xx +0100
04: Received: from [98.139.44.104] by nm11.access.bullet.mail.sp2.yahoo.com
05: with NNFMP; 14 Dec 2011 xx:xx:xx -0000
06: Received: from [98.139.44.67] by tm9.access.bullet.mail.sp2.yahoo.com
07: with NNFMP; 14 Dec 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1004.access.mail.sp2.yahoo.com with
09: NNFMP; 14 Dec 2011 xx:xx:xx -0000
10: Received: from [41.216.50.172] by web181315.mail.ne1.yahoo.com via HTTP;
11: Wed, 14 Dec 2011 xx:xx:xx PST

IP: 41.216.50.172 ---> Benin Telecoms SA

paul_barman@live.com

00000officeduty@att.net

header:

01: Received: from imr-db02.mx.aol.com (imr-db02.mx.aol.com [205.188.91.96])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed, 14 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from mtaout-ma01.r1000.mx.aol.com
05: (mtaout-ma01.r1000.mx.aol.com [172.29.41.1])
06: 	by imr-db02.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Wed, 14 Dec 2011 xx:xx:xx -0500
08: Received: from sexiv133 (unknown [41.58.85.225])
09: 	by mtaout-ma01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
10: ESMTPA ID: [ID filtered]
11: 	Wed, 14 Dec 2011 xx:xx:xx -0500 (EST)

X-AOL-IP: 41.58.85.225 ---> SWIFT NETWORKS LIMITED, Nigeria

sexiv133@aol.com

atmswiftcard50@yahoo.com.ph

Muguphon: +234-7092612921 ---> Multi-links Telecommunications Ltd., Nigeria


Elena darf auch nicht fehlen:

header:

01: Received: from smtp-noauth7.primus.ca (EHLO mail-09.primus.ca)
02: [216.254.180.38]
03:   by mx0.gmx.net (mx111) with SMTP; 16 Dec 2011 xx:xx:xx +0100
04: Received: from dsl-173-206-164-168.tor.primus.ca ([173.206.164.168]
05: helo=93-141-22-236.adsl.net.t-com.hr)
06: 	by mail-09.primus.ca with smtp (Exim 4.72)
07: 	(envelope-from <elenakin [at] nxt.ru>)
08: 	ID: [ID filtered]

IP: 173.206.164.168 ---> dsl-173-206-164-168.tor.primus.ca

elenakin@nxt.ru

[kjz1]

Bei den Mugus ist man um Nachschlag nie verlegen:

header:

01: Received: from out19.wanadoo.es (out19.wanadoo.es [62.36.20.219])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 13 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from [62.36.20.157] (helo=User)
05: 	by out19.wanadoo.es with esmtpa (Exim 4.68)
06: 	(envelope-from <info [at] info.com>)
07: 	ID: [ID filtered]

IP: 62.36.20.157 ---> 62.36.20.157.static.abi.uni2.es

guangchungchung@zing.vn

header:

01: Received: from alabama.gov (smtp-2.alabama.gov [216.226.178.46])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Thu, 15 Dec 2011 xx:xx:xx +0100 (CET)
06: Received: from ([10.2.175.1])
07: 	by gateway-2.alabama.gov with ESMTP with TLS ID: [ID filtered]
08: 	Thu, 15 Dec 2011 xx:xx:xx -0600
09: Received: from ISDACEExHUT03.al.mail (10.131.90.107) by
10: ISDAceExHUT01.al.mail
11:  (10.131.90.105) with Microsoft SMTP Server (TLS) ID: [ID filtered]
12:  2011 xx:xx:xx -0600
13: Received: from ACE04.al.mail ([fe80::4019:6082:13d0:b765]) by
14:  ISDACEExHUT03.al.mail ([::1]) with mapi; Thu, 15 Dec 2011 xx:xx:xx -0600

gecrackt: Billy.Franklin@forestry.alabama.gov

danieltsai11@yahoo.com.hk

danieltsai0@aol.com

header:

01: Received: from 69-64-70-91.dedicated.codero.net (EHLO
02: host101.pagevilla.com) [69.64.70.91]
03:   by mx0.gmx.net (mx092) with SMTP; 17 Dec 2011 xx:xx:xx +0100
04: Received: from 70-89-233-93-smc-va.hfc.comcastbusiness.net
05: ([70.89.233.93] helo=User)
06: 	by host101.pagevilla.com with esmtpa (Exim 4.69)
07: 	(envelope-from <info [at] chrysalis.com>)
08: 	ID: [ID filtered]

chrysalisfinance@live.com

nortoncapitalinc@gmail.com

header:

01: Received: from webmail.morehouse.edu (EHLO webmail.morehouse.edu)
02: [69.87.160.30]
03:   by mx0.gmx.net (mx049) with SMTP; 18 Dec 2011 xx:xx:xx +0100
04: Received: from MCEXCLUSTER01.win.morehouse.edu ([172.16.0.212]) by
05: webmail.morehouse.edu with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 18 Dec 2011 xx:xx:xx -0500

gecrackt: lzatlin@morehouse.edu

mmxyz20002000@mail2consultant.com

header:

01: Received: from 11-115-162-69.servebyte.net (EHLO mx4.hotmail.com)
02: [69.162.115.11]
03:   by mx0.gmx.net (mx010) with SMTP; 18 Dec 2011 xx:xx:xx +0100

robhil12@aol.com

mugqhrzxy@hotmail.com

Muguphon: +277 84919711 ---> MTN, ZA

header:

01: Received: from 50.31.253.61.static.vps.net (EHLO sever2.games.com)
02: [50.31.253.61]
03: by mx0.gmx.net (mx113) with SMTP; 18 Dec 2011 xx:xx:xx +0100
04: Received: from [46.246.112.84] (helo=qz1-PC)
05: by sever2.games.com with esmtpa (Exim 4.69)
06: (envelope-from <noreply [at] baruch.com>)
07: ID: [ID filtered]

IP: 46.246.112.84 ---> NET-VPNTUNNEL-SE5

bernard.baruch@aim.com

header:

01: Received: from eastrmfepo103.cox.net (EHLO eastrmfepo103.cox.net)
02: [68.230.241.215]
03:   by mx0.gmx.net (mx054) with SMTP; 18 Dec 2011 xx:xx:xx +0100
04: Received: from eastrmimpo306.cox.net ([68.230.241.238])
05:           by eastrmfepo103.cox.net
06:           (InterMail vM.8.01.04.00 201-2260-137-20101110) with ESMTP
07:           id
08: <20111218211947.OOEA28068.eastrmfepo103.cox.net [at] eastrmimpo306.cox.net>;
09:           Sun, 18 Dec 2011 xx:xx:xx -0500
10: Received: from eastrmwml108 ([172.18.18.217])
11: 	by eastrmimpo306.cox.net with bizsmtp
12: 	ID: [ID filtered]
13: Received: from 66.225.195.47 by webmail.east.cox.net; Sun, 18 Dec 2011
14: xx:xx:xx -0500

IP: 66.225.195.47 ---> 47.195.225.66.host.nwnx.net

tzgae@cox.net

acac@bitscn.net

claims210@live.com

[kjz1]

Das Jahr ist ja noch nicht zu Ende, also noch ein paar Mugus:

header:

01: Received: from mail.aif.ru (mail.aif.ru [81.23.15.68])
02: 	(using TLSv1 with cipher AES128-SHA (128/128 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Mon, 19 Dec 2011 xx:xx:xx +0100 (CET)
06: Received: from ExchangeHT.aif.local (81.23.15.90) by mail.aif.ru
07: (81.23.15.68)
08:  with Microsoft SMTP Server (TLS) ID: [ID filtered]
09:  +0400
10: Received: from User (95.142.188.94) by ExchangeHT.aif.local
11: (81.23.15.90) with
12:  Microsoft SMTP Server ID: [ID filtered]

josephpeterson@yahoo.cn

josephpetersonimf@yahoo.co.jp

Muguphon: +234-802-989-5459 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from webmail.morehouse.edu (EHLO webmail.morehouse.edu)
02: [69.87.160.30]
03:   by mx0.gmx.net (mx010) with SMTP; 20 Dec 2011 xx:xx:xx +0100
04: Received: from MCEXCLUSTER01.win.morehouse.edu ([172.16.0.212]) by
05: webmail.morehouse.edu with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 18 Dec 2011 xx:xx:xx -0500

gecrackt: lzatlin@morehouse.edu

mmxyz20002000@mail2consultant.com

header:

01: Received: from mail.unsch.edu.pe (HELO unsch.edu.pe) [200.121.72.190]
02:   by mx0.gmx.net (mx019) with SMTP; 22 Dec 2011 xx:xx:xx +0100
03: Received: (qmail 13522 invoked by UID: [UID filtered]
04: X-Virus-Checked: Checked by ClamAV on unsch.edu.pe
05: Received: from localhost (HELO localhost) (127.0.0.1)
06:     by unsch.edu.pe (qpsmtpd/0.40) with ESMTP; Wed, 21 Dec 2011 xx:xx:xx
07: -0500
08: Received: from 82.128.45.141 ([82.128.45.141]) by mail.unsch.edu.pe (Horde
09:  Framework) with HTTP; Wed, 21 Dec 2011 xx:xx:xx -0500

IP: 82.128.45.141 ---> Multilinks Telecommunications Limited, Nigeria

mrserika2@hutchcity.com

mrserika1@hutchcity.com

mrsowen1@hutchcity.com

header:

01: Received: from 33-56-31-64.servebyte.net (EHLO mx4.hotmail.com)
02: [64.31.56.33]
03:   by mx0.gmx.net (mx048) with SMTP; 23 Dec 2011 xx:xx:xx +0100

lampardmabel@rocketmail.com

meritcole@aol.com


GMail hatte anscheinend gerade Mailadressen im Sonderangebot:

header:

01: Received: from mail.taylornash.hu (EHLO mail.taylornash.hu) [212.52.167.31]
02:   by mx0.gmx.net (mx008) with SMTP; 23 Dec 2011 xx:xx:xx +0100
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by mail.taylornash.hu (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)
06: Received: from mail.taylornash.hu ([127.0.0.1])
07: 	by localhost (mail.taylornash.hu [127.0.0.1]) (amavisd-new, port 10024)
08: 	with ESMTP ID: [ID filtered]
09: Received: from User (unknown [31.110.19.191])
10: 	by mail.taylornash.hu (Postfix) with ESMTP ID: [ID filtered]
11: 	Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)

IP: 31.110.19.191 ---> T-Mobile UK

FREDLUCASEMMY@GMAIL.COM

fredlucasemmy03@gmail.com

fredlucasemmy06@gmail.com

Ausserdem ist die Mugu-Mail in recht gutem Deutsch geschrieben, das sieht nicht nach Babelfish aus, da muss jemand schon Deutsch als Muttersprache beherrschen.

Fred Koffie Ayang
No. 899/3 10th Crescent
Asylum Down
Cantonments
Accra-Ghana


Guten Tag,

Ich kontaktiere Sie, weil ich auf der Suche nach einem Partner bei der
Realisierung eines Projekts bin. Zunaechst moechte ich mich vorstellen;
ich bin Barr.

Koffie Ayang, ich lebe in Accra, Ghana und praktiziere als
Rechtsanwalt bei der Akwaaba Solicitors und ich habe ein eher
ungewoehnliches Angebot fьr Sie.

Mein verstorbener Klient Uwe Gembella hat die Dokumente ueber sein
Vermoegen bei mir hinterlegt, bevor er ploetzlich in einem Unfall
verschied. Sein Vermoegen

belaeuft sich auf $120 Millionen U.S. Dollars. Ich werde Ihnen
genauere Informationen gebe, sobald ich weiss, dass ich Ihr Vertrauen
habe. In diesem Link

erfahren Sie die Umstaende seines Ablebens:


^whois:http://www.bild.de/news/2010/news/wurde-bestialisch-erstickt-14563792.bild.html


^whois:http://www.autoblog.com/2010/10/03/breaking-uwe-gemballa-reportedly-found-murdered-in-south-africa/



Hier ist mein Angebot: Ich erklaere Sie als den Erben des Herrn
Gembella und erhebe Anspruch auf das Vermoegen und fuer Ihre
Zusammenarbeit gebe ich Ihnen 30%

des Vermoegen, nach Abzug der Unkosten. Da ich der Anwalt des
Verstorbenen bin, ist es kein Problem die noetigen Dokumente innerhalb
kurzer Zeit zu besorgen

und der Investment Firma vorzulegen. Seit mein Klient verstarb, werde
ich gebeten sein Testament vorzulegen in dem auch der Erbe erwaehnt sein
muss.
Herr

Gembella hat aber kein Testament hinterlassen, deshalb brauche ich
einen Erben. Kann ich keinen Erben benennen, geht das Erbe an den Staat
und ist somit

verloren.

Wie gesagt, wenn der Transaktion erfolgreich verlaufen ist, bekommen
Sie 30 % der Gesamtsumme, 70 % gehen an mich, Unkosten werden vorab
abgezogen.
Lassen Sie

mich bitte wissen, ob Sie sich vorstellen koennen eine Transaktion in
dieser Hoehe durchzufuehren. Sie koennen mir an diese E-Mail Adresse

antworten:fredlucasemmy06@gmail.com


Bitte, antworten Sie mir auch, wenn Sie kein Interesse haben, damit
ich meine Suche zuegig fortsetzen kann. Wenn Sie jedoch Interesse haben
sollten, freue ich

mich jemanden gefunden zu haben, der mir bei der Ausloesung des Erbes
hilft, damit das Vermoegen nicht verloren geht.
Ich moechte Sie bitte, aus Sicherheitgruenden aeusserst diskret
vorzugehen, bitte antworten Sie nur auf diese E-Mail und ich werde Ihnen
in Kuerze meine direkt
Durchwahl mitteilen.

Mit freundlichen Gruessen,

Barr Fred Koffie Ayang
Senior Associate
Akwaaba Solicitors

header:

01: Received: from ww1.whitewolfhosting.com (EHLO ww3.whitewolfhosting.com)
02: [174.123.164.162]
03:   by mx0.gmx.net (mx094) with SMTP; 23 Dec 2011 xx:xx:xx +0100
04: Received: from localhost ([127.0.0.1]:32865 helo=User)
05: 	by ww3.whitewolfhosting.com with smtp (Exim 4.69)
06: 	(envelope-from <info [at] online.com>)
07: 	ID: [ID filtered]

davidjacob0111@gmail.com

platinumassurance@hotmail.com

Muguphon: +60102087903 ---> Celcom, Malaysia

[kjz1]

die Weihnachts-Mugus:

header:

01: Received: from mailout03.t-online.de (mailout03.t-online.de [194.25.134.81])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Thu, 22 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from fwd00.aul.t-online.de (fwd00.aul.t-online.de )
05: by mailout03.t-online.de with smtp
06: ID: [ID filtered]
07: Received: from User
08: (VOgeaiZXQt+xNk9rPMikVvgwSB2eEXM3gTHYQOvdW1evoe944aYJvHt+xfnw7muvrsOkTWYRiF@[188.72.238.224
09: 	#93;)
10: by fwd00.t-online.de
11: with esmtp ID: [ID filtered]

IP: 188.72.238.224 ---> ---> Estro Web Services/Leaseweb (Leasweb mal wieder, wen wundert's....)

gecrackt: pp15@w76284gr5.homepage.t-online.de

mr.benbernankeuk02@yahoo.es


sieht mir nach demselben Mugu aus:

header:

01: Received: from mailout09.t-online.de (mailout09.t-online.de [194.25.134.84])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)
04: Received: from fwd03.aul.t-online.de (fwd03.aul.t-online.de )
05: 	by mailout09.t-online.de with smtp
06: 	ID: [ID filtered]
07: Received: from User
08: (XKciguZfrt5ysRj028v0+L6SOtn5mGFlN26rWKseyv77jR8qRJTndRCPAzMHW03TObZzrgymlM@[46.166.155.124
09: 	#93;)
10: by fwd03.t-online.de
11: 	with esmtp ID: [ID filtered]

IP: 46.166.155.124 ---> Santrex DE routed via LeaseWeb Germany (Leaseweb.....)

gecrackt: info16@wq1dd7c39.homepage.t-online.de

antoniocamatti98@yahoo.com.ph

antoniocamatti@mail.mn

Muguphon: +34-655-497-663 ---> France Telecom España, S.a.

Mugufax: +34-917-903-789 ---> Colt Telecom España, S.a.

Mugufax: +34-917-693-035 ---> Colt Telecom España, S.a.

header:

01: Received: from host230-228-static.32-88-b.business.telecomitalia.it
02: (EHLO smtp.cgilpadova.it) [88.32.228.230]
03:   by mx0.gmx.net (mx113) with SMTP; 23 Dec 2011 xx:xx:xx +0100
04: Received: from User (unknown [213.42.235.4])
05: 	(Authenticated sender: info [at] CGILPADOVA.IT)
06: 	by smtp.cgilpadova.it (Postfix) with ESMTPA ID: [ID filtered]
07: 	Fri, 23 Dec 2011 xx:xx:xx +0100 (CET)

IP: 213.42.235.4 ---> Emirates Telecommunication Corporation

gecrackt: info@CGILPADOVA.IT

kofanna@aol.com

header:

01: Received: from isp6.4u.com.gh (HELO isp6.4u.com.gh) [80.87.72.6]
02:   by mx0.gmx.net (mx112) with SMTP; 23 Dec 2011 xx:xx:xx +0100
03: Received: from webmail.4u.com.gh (localhost [127.0.0.1])
04: 	by isp6.4u.com.gh (Postfix) with ESMTP ID: [ID filtered]
05: 	Fri, 23 Dec 2011 xx:xx:xx +0000 (GMT)
06: Received: from 41.190.90.34
07:         (SquirrelMail authenticated user info-mplaza)
08:         by webmail.4u.com.gh with HTTP;
09:         Fri, 23 Dec 2011 xx:xx:xx -0000

IP: 41.190.90.34 ---> Zain Communications Limited, GH

gecrackt: info-mplaza@4u.com.gh

scb_ghltd@financier.com

equitychamber.ggh@lawyer.com

Muguphon: +233 545 000 209 ---> ScanCom Ltd (MTN), Ghana

header:

01: Received: from mail.phoenixmed2000.ro (EHLO pansiprod.ro) [81.12.136.170]
02:   by mx0.gmx.net (mx040) with SMTP; 24 Dec 2011 xx:xx:xx +0100
03: Received: (qmail 31840 invoked by UID: [UID filtered]
04: Received: from mail.phoenixmed2000.ro (HELO mail.pansiprod.ro)
05: (sales [at] pansiprod.ro@81.12.136.170)
06:   by pansiprod.ro with SMTP; 22 Dec 2011 xx:xx:xx +0200
07: Received: from host109-157-36-177.range109-157.btcentralplus.com
08: (109.157.36.177)
09:  by mail.pansiprod.ro (F-Secure/fsigk_smtp/302/mail.pansiprod.ro);
10:  Thu, 22 Dec 2011 xx:xx:xx +0200 (EET)

IP: 109.157.36.177 ---> host109-157-36-177.range109-157.btcentralplus.com

gecrackt: sales@pansiprod.ro

infclam101@live.co.uk

Drwest101@yahoo.cn

Drwestnewton@yahoo.cn

Muguphon: +44 755-022-7803 ---> Everything Everywhere Limited (TM), UK

[kjz1]

Die Neujahrs-Mugus:

header:

01: Received: from unknown (EHLO ablestor.able.or.kr) [115.91.87.6]
02:   by mx0.gmx.net (mx004) with SMTP; 28 Dec 2011 xx:xx:xx +0100
03: Received: from User (u15259122.onlinehome-server.com [74.208.44.111])
04: 	(Authenticated sender: admin)
05: 	by ablestor.able.or.kr (Postfix) with ESMTPA ID: [ID filtered]
06: 	Tue, 27 Dec 2011 xx:xx:xx +0900 (KST)

gecrackt: admin@u15259122.onlinehome-server.com

imf.foreigndepartment12@yahoo.com

Muguphon: +234 8086-989-523 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from e.dealextreme.com (EHLO e.dealextreme.com) [67.228.151.195]
02:   by mx0.gmx.net (mx053) with SMTP; 28 Dec 2011 xx:xx:xx +0100
03: Received: from User (unknown [120.141.123.178])
04: 	by e.dealextreme.com (iRedMail) with ESMTPA ID: [ID filtered]
05: 	Tue, 27 Dec 2011 xx:xx:xx -0600 (CST)

IP: 120.141.123.178 ---> P1NETWORKS, Malaysia

edward.j.j.halliday@hallidayco.com

header:

01: Received: from gdn.com.bh (EHLO gdneditorial.gdn) [89.148.15.213]
02:   by mx0.gmx.net (mx045) with SMTP; 31 Dec 2011 xx:xx:xx +0100
03: Received: from localhost (localhost [127.0.0.1])
04: 	by gdneditorial.gdn (Postfix) with ESMTP ID: [ID filtered]
05: 	Sat, 31 Dec 2011 xx:xx:xx +0300 (AST)
06: X-Virus-Scanned: amavisd-new at gdneditorial.gdn
07: Received: from gdneditorial.gdn ([127.0.0.1])
08: 	by localhost (gdn.com.bh [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from User (unknown [120.140.16.202])
11: 	by gdneditorial.gdn (Postfix) with ESMTPA ID: [ID filtered]
12: 	Sat, 31 Dec 2011 xx:xx:xx +0300 (AST)

IP: 120.140.16.202 ---> Packet One Networks (M) Sdn, Malaysia

m.king@blumail.org

mervynking202@xnmsn.com

Muguphon: +44 703 188 8562 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from 33-56-31-64.servebyte.net (EHLO mx4.hotmail.com)
02: [64.31.56.33]
03:   by mx0.gmx.net (mx106) with SMTP; 30 Dec 2011 xx:xx:xx +0100

lmnxzbhmnzgbp@hotmail.com

wrightsusan90@gmail.com

[kjz1]

Die Mugus kommen wieder in die Puschen:


der Sternchen-Mugu:

header:

01: Received: from web01.scitomedia.com (EHLO web01.scitomedia.com)
02: [213.189.27.105]
03:   by mx0.gmx.net (mx118) with SMTP; 02 Jan 2012 xx:xx:xx +0100
04: Received: from [82.128.5.238] (helo=User)
05: 	by web01.scitomedia.com with esmtpsa (TLSv1:AES256-SHA:256)
06: 	(Exim 4.69)
07: 	(envelope-from <test [at] scitomedia.com>)
08: 	ID: [ID filtered]

IP: 82.128.5.238 ---> Multilinks Telecommunications Limited, Nigeria

gecrackt: test@scitomedia.com

msclaimsdept@ymail.com

*MasterCard / Microsoft INTERNATIONAL MEGA JACKPOT*
*Bradford City Centre Branch*
*7 Stamford New Road, London*
*MICROSOFT OFFICE, UNITED KINGDOM*

Muguphon: +44 708 646 5033 ---> Magrathea Telecommunications Limited, UK

Muguphon: +44 701 004 5579 ---> FleXtel Limited, UK

Mugufax: +44 701 989 5999 ---> Skytel Ltd, UK

header:

01: Received: from snt0-omc2-s41.snt0.hotmail.com (EHLO
02: snt0-omc2-s41.snt0.hotmail.com) [65.54.61.92]
03:   by mx0.gmx.net (mx026) with SMTP; 04 Jan 2012 xx:xx:xx +0100
04: Received: from SNT129-W49 ([65.55.90.73]) by
05: snt0-omc2-s41.snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 3 Jan 2012 xx:xx:xx -0800

X-Originating-IP: [41.138.89.38] ---> ETISALAT BENIN

zonal_coordinator@skymail.mn

barrlouis35@msn.com

[kjz1]

Und steigern sich zu neuer Form:

header:

01: Received: from RSTironp2.gijima.com (rst-ironp2.gijima.com [196.15.163.9])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	Mon,  2 Jan 2012 xx:xx:xx +0100 (CET)
04: Received: from webmail.iemas.co.za (HELO iemas.co.za) ([196.15.163.34])
05:   by RSTironp2.gijima.com with ESMTP; 02 Jan 2012 xx:xx:xx +0200
06: Received: from WorldClient by iemas.co.za (MDaemon PRO v10.1.2)
07: 	with ESMTP ID: [ID filtered]
08: 	Mon, 02 Jan 2012 xx:xx:xx +0200
09: Received: from [41.82.83.79] by iemas.co.za via WorldClient with HTTP;
10: 	Mon, 02 Jan 2012 xx:xx:xx +0200

IP: 41.82.83.79 ---> Sonatel Multimedia, SN

gecrackt: X-Authenticated-Sender: bonds@iemas.co.za

ms.dorathy_bonds@yahoo.fr

header:

01: Received: from ims-m11.mx.aol.com (EHLO ims-m11.mx.aol.com) [64.12.207.144]
02:   by mx0.gmx.net (mx047) with SMTP; 06 Jan 2012 xx:xx:xx +0100
03: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
04: [64.12.102.138])
05: 	by ims-m11.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Fri, 6 Jan 2012 xx:xx:xx -0500
07: Received: from mtaout-da06.r1000.mx.aol.com
08: (mtaout-da06.r1000.mx.aol.com [172.29.51.134])
09: 	by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
10: 95F9C1C000081;
11: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)
12: Received: from AOL.DE (207-170-223-176.static.twtelecom.net
13: [207.170.223.176])
14: 	by mtaout-da06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
15: ESMTPA ID: [ID filtered]
16: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)

header:

01: Received: from oms-da01.r1000.mx.aol.com (oms-da01.r1000.mx.aol.com
02: [205.188.255.11])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  6 Jan 2012 xx:xx:xx +0100 (CET)
05: Received: from mtaout-db04.r1000.mx.aol.com
06: (mtaout-db04.r1000.mx.aol.com [172.29.51.196])
07: 	by oms-da01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 3258638000083;
09: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)
10: Received: from AOL.DE (207-170-223-176.static.twtelecom.net
11: [207.170.223.176])
12: 	by mtaout-db04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
13: ESMTPA ID: [ID filtered]
14: 	Fri,  6 Jan 2012 xx:xx:xx -0500 (EST)

X-AOL-IP: 207.170.223.176 ---> 207-170-223-176.static.twtelecom.net

wuoffice07@zing.vn

bq73wp@aol.com

header:

01: Received: from mail.portolub.com.br (EHLO mail.portolub.com.br)
02: [201.41.60.3]
03:   by mx0.gmx.net (mx023) with SMTP; 07 Jan 2012 xx:xx:xx +0100
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.portolub.com.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat,  7 Jan 2012 xx:xx:xx -0200 (BRST)
07: X-Virus-Scanned: Debian amavisd-new at portolub.com.br
08: Received: from mail.portolub.com.br ([127.0.0.1])
09: 	by localhost (mail.portolub.com.br [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from User (unknown [180.74.139.186])
12: 	(Authenticated sender: maria [at] mail.portolub.com.br)
13: 	by mail.portolub.com.br (Postfix) with ESMTPA ID: [ID filtered]
14: 	Sat,  7 Jan 2012 xx:xx:xx -0200 (BRST)

IP: 180.74.139.186 ---> ---> Packet One Networks, Malaysia

gecrackt: maria@mail.portolub.com.br

latifahsananezaharil@w.cn

header:

01: Received: from exprod6ob108.obsmtp.com (HELO exprod6ob108.obsmtp.com)
02: [64.18.1.20]
03:   by mx0.gmx.net (mx062) with SMTP; 08 Jan 2012 xx:xx:xx +0100
04: Received: from mail.tnjones.com ([74.165.157.26]) by
05: exprod6ob108.postini.com ([64.18.5.12]) with SMTP
06: 	ID: [ID filtered]

IP: 64.18.5.12 ---> mail.tnjones.com/ATT

gecrackt: FAX@tnjones.com

felicia_anita_xenta@live.com

[kjz1]

Und nochmal kurz die Mugus:

header:

01: Received: from mail.winonanationalbank.com (EHLO
02: zixvpm.winonanationalbank.com) [65.126.96.198]
03:   by mx0.gmx.net (mx103) with SMTP; 09 Jan 2012 xx:xx:xx +0100

davidvogt@skymail.mn

drghanems@gmail.com

header:

01: Received: from unknown (HELO zhoukangfdc.com.cn) [58.40.124.248]
02:   by mx0.gmx.net (mx048) with SMTP; 10 Jan 2012 xx:xx:xx +0100
03: Received: from User ([212.30.80.36])
04: 	(envelope-sender <test1 [at] qdport.com>)
05: 	by 192.168.1.200 with ESMTP
06: 	for <poor [at] spamvictim.tld>; Tue, 10 Jan 2012 xx:xx:xx +0800

IP: 212.30.80.36 ---> itf.itf-fund.si

kelvin.williams2012@admin.in.th

header:

01: Received: from mailgate.premierecarehomes.co.uk.196.49.62.in-addr.arpa
02: (EHLO server.premierehouse.local) [62.49.196.74]
03:   by mx0.gmx.net (mx018) with SMTP; 12 Jan 2012 xx:xx:xx +0100
04: Received: from User ([74.63.213.139]) by server.premierehouse.local with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Wed, 11 Jan 2012 xx:xx:xx +0000

IP: 74.63.213.139 ---> 139-213-63-74.servebyte.net

jessicapedro@rediffmail.com

info@davidjohnsonlawfirm.org

philclark901@yahoo.com

header:

01: Received: from mail.sulanet.hn (mail.sulanet.hn [190.6.205.3])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 12 Jan 2012 xx:xx:xx +0100 (CET)
04: Received-PRA: none (mail.sulanet.hn: domain of jerryperdomo [at] sulanet.net
05: does not designate permitted sender hosts)
06: Received-SPF: none (mail.sulanet.hn: domain of jerryperdomo [at] sulanet.net
07: does not designate permitted sender hosts)
08: Received: from (mail.sulanet.hn [190.6.205.3]) by webshield.sulanet.net
09: with smtp
10: 	 ID: [ID filtered]
11: 	Thu, 12 Jan 2012 xx:xx:xx -0600
12: MIME-version: 1.0
13: Content-type: multipart/alternative;
14:  boundary="Boundary_(ID_XcF2g+EV4bQSrignyBCODQ)"
15: Received: from sulanet.hn ([127.0.0.1])
16:  by mail.sulanet.hn (Servidor ESMTP - SULANET)
17:  with ESMTP ID: [ID filtered]
18:  Thu, 12 Jan 2012 xx:xx:xx -0600 (CST)
19: Received: from [190.6.205.3] by mail.sulanet.hn (mshttpd); Thu,
20:  12 Jan 2012 xx:xx:xx +0100

jerryperdomo@sulanet.net

tekothom12@gmail.com

[kjz1]

Meine Mugus sind natürlich noch lange nicht am Ende:

header:

01: Received: from mail2.pph.org (EHLO mail2.pph.org) [70.234.7.78]
02:   by mx0.gmx.net (mx040) with SMTP; 10 Jan 2012 xx:xx:xx +0100
03: Received: from zixvpm.pph.org (zixvpm01.pph.org [172.31.1.27]) by
04: mail2.pph.org (Axway MailGate
05:  3.8.1) with ESMTP ID: [ID filtered]
06: xx:xx:xx -0800 (PST)
07: Received: from zixvpm01.pph.org (ZixVPM [127.0.0.1]) by Outbound.pph.org
08: (Proprietary) with ESMTP id
09:  92964738150 for xxxxx; Tue, 10 Jan 2012 xx:xx:xx -0800 (PST)
10: Received: from MAIL1.pph.local (exch1.pph.local [167.119.11.143]) by
11: zixvpm.pph.org (Proprietary)

ups.dispatch.ng@cpll.cn

christine.gleason@pph.org

header:

01: Received: from 89-96-73-68.ip11.fastwebnet.it (EHLO mx4.hotmail.com)
02: [89.96.73.68]
03:   by mx0.gmx.net (mx037) with SMTP; 14 Jan 2012 xx:xx:xx +0100

normanr@tiscali.it

vfqyeegzydthm@hotmail.com

header:

01: Received: from 50.31.254.89.static.vps.net (EHLO sever8.games.com)
02: [50.31.254.89]
03:      by mx0.gmx.net (mx106) with SMTP; 14 Jan 2012 xx:xx:xx +0100
04: Received: from [46.246.112.90] (helo=qz1-PC)
05:      by sever8.localdomain with esmtpa (Exim 4.69)
06:      (envelope-from <poor [at] spamvictim.tld>)
07:      ID: [ID filtered]

IP: 46.246.112.90 ---> VPNTunnel.se

header:

01: Received: from 50.31.254.89.static.vps.net (EHLO sever8.games.com)
02: [50.31.254.89]
03:      by mx0.gmx.net (mx009) with SMTP; 14 Jan 2012 xx:xx:xx +0100
04: Received: from [46.246.112.90] (helo=qz1-PC)
05:      by sever8.localdomain with esmtpa (Exim 4.69)
06:      (envelope-from <poor [at] spamvictim.tld>)
07:      ID: [ID filtered]

bernard_b@aim.com


die Madrid-Connection:

header:

01: Received: from mail.tclawaz.com (207-114-195-162.static.twtelecom.net
02: [207.114.195.162])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 15 Jan 2012 xx:xx:xx +0100 (CET)
05: Received: from User ([173.8.28.113]) by mail.tclawaz.com with Microsoft
06: SMTPSVC(6.0.3790.4675);
07: 	 Sat, 14 Jan 2012 xx:xx:xx -0700

IP: 173.8.28.113 ---> 173-8-28-113-WashingtonDC.hfc.comcastbusiness.net

jpocaso2@gmail.com

ocasoseguros@consultant.com

Muguphon: ++34 632482552 ---> Lycamobile, S.l., Espana