Mugu Dubletten

[carsten.gentsch]

Hallo ich habe auch einen anzubieten...
Heute kam eine Bestellung rein die auf den ersten blick ok schien aber dann...

J* M*hat am 18.05.2012 um 13:29 unter der IP 41.190.3.173 bestaetigt die AGB usw....

haben wollte er gern die Domain: luchike.de
und das als Daten angegeben:

Vorname: J*
Nachname: M*
E-Mail-Adresse: barris.hudson@yahoo.fr
Postleitzahl: 51373
Stadt: Leverkusen
Land: Germany
Straße: W*
Telefon: 0171*

Leider stimmt die Adresse und Telefonnummer nur sind die Daten geklaut ich hatte ein Gespräch und hab den Besitzer mal auf dieses Forum hingwewiesen
In unseren AGB steht ja auch drin das wir die Bestellungen prüfen, bei angabe falscher Daten die Zahlungen einbehalten weill vorsätzlich gegen die AGB verstoßen wird. Leider bisher keine Zahlung

Es zeigt sich also man sollte doch 3 mal hinsehen und prüfen bzw. mal nachfragen

Gruß

[kjz1]

Zur Vervollständigung der Kollektion würden gerne beitragen:


ein alter Bekannter:

header:

01: Received: from fabmail.rustonneli.ru (fabmail.rustonneli.ru [85.174.231.98])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Mon,  7 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from User (24.73.120.66) by fabmail.rustonneli.ru (192.168.60.14)
05:  with Microsoft SMTP Server ID: [ID filtered]
06: +0400

IP: 24.73.120.66 ---> rrcs-24-73-120-66.se.biz.rr.com

mohd.shafiq@apgmalaysia.com (Strato)

Muguphone: +601 0204 3538 ---> Celcom, Malaysia

header:

01: Received: from col0-omc4-s8.col0.hotmail.com
02: (col0-omc4-s8.col0.hotmail.com [65.55.34.210])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from COL119-W62 ([65.55.34.201]) by
07: col0-omc4-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
08: 	 Mon, 7 May 2012 xx:xx:xx -0700

X-Originating-IP: [175.142.165.188] ---> ADSLSTREAMYX/Telekom Malaysia

sitizalehamddesa@live.com

siti10@msn.com


und wieder da:

header:

01: Received: from fabmail.rustonneli.ru (fabmail.rustonneli.ru [85.174.231.98])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Tue,  8 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from User (24.73.120.66) by fabmail.rustonneli.ru (192.168.60.14)
05:  with Microsoft SMTP Server ID: [ID filtered]
06: +0400

IP: 24.73.120.66 ---> rrcs-24-73-120-66.se.biz.rr.com

shafiq@msiaministryfin.com

mohd.shafiq@apgmalaysia.com


der Sternchen-Mugu:

header:

01: Received: from svr.18pluscash.nl (ns1.18pluscash.nl [93.190.139.145])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed,  9 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from [41.139.117.224] (helo=User)
05: 	by svr.18pluscash.nl with esmtpa (Exim 4.67)
06: 	(envelope-from <scanner [at] att.net>)
07: 	ID: [ID filtered]

IP: 41.139.117.224 ---> Mobitel Nigeria Limited

officecarmanlap@yahoo.com

*/United Nations Office Of International Oversight Services (OIOS)/*//
*/Internal Audit, Monitoring, Consulting And Investigations Division/*//
*/From: Ms. Carman L. Lapointe/*//
*/Head Of United Nations Under-Secretary-/*//
*/General For Internal Oversight Services/*//

Muguphon: +234 812-610-7703 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from okayapower.com (EHLO mail.okayapower.com) [125.19.36.27]
02:   by mx0.gmx.net (mx005) with SMTP; 15 May 2012 xx:xx:xx +0200
03: Received: from User (adsl-99-64-20-254.dsl.sndg02.sbcglobal.net
04: [99.64.20.254])
05: 	by mail.okayapower.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 16 May 2012 xx:xx:xx +0530 (IST)

paymntofficeer@yahoo.co.jp

officer@administrativos.com

[kjz1]

Etwas Mugu hätt' ich noch:

header:

01: Received: from webhost3.isp-thailand.com (EHLO mail.issphosting.com)
02: [202.5.93.24]
03:   by mx0.gmx.net (mx027) with SMTP; 18 May 2012 xx:xx:xx +0200
04: Received: from User ([91.185.204.53]) by issphosting.com with MailEnable
05: ESMTP; Fri, 18 May 2012 xx:xx:xx +0700

IP: 91.185.204.53 ---> SI-TUSMOBIL

alhamali@emirates.net.ae

header:

01: Received: from coyote.nordtelekom.hu (coyote.nordtelekom.hu [213.134.7.218])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from localhost (unknown [213.134.7.221])
06: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
07: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
08: X-Virus-Scanned: Nordtelekom Content Filter
09: Received: from coyote.nordtelekom.hu ([213.134.7.218])
10: 	by localhost (mailserver.nordtelekom.hu [213.134.7.221]) (amavisd-new,
11: port 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from webmail.nordtelekom.hu (gogolak.nordtelekom.hu
14: [213.134.7.220])
15: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
16: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
17: Received: from 41.203.64.132
18:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
19:         by webmail.nordtelekom.hu with HTTP;
20:         Sat, 19 May 2012 xx:xx:xx +0200 (CEST)

header:

01: Received: from coyote.nordtelekom.hu (EHLO coyote.nordtelekom.hu)
02: [213.134.7.218]
03:   by mx0.gmx.net (mx030) with SMTP; 19 May 2012 xx:xx:xx +0200
04: Received: from localhost (unknown [213.134.7.221])
05: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: Nordtelekom Content Filter
08: Received: from coyote.nordtelekom.hu ([213.134.7.218])
09: 	by localhost (mailserver.nordtelekom.hu [213.134.7.221]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from webmail.nordtelekom.hu (gogolak.nordtelekom.hu
13: [213.134.7.220])
14: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
15: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
16: Received: from 41.203.64.132
17:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
18:         by webmail.nordtelekom.hu with HTTP;
19:         Sat, 19 May 2012 xx:xx:xx +0200 (CEST)

header:

01: Received: from coyote.nordtelekom.hu (EHLO coyote.nordtelekom.hu)
02: [213.134.7.218]
03:   by mx0.gmx.net (mx027) with SMTP; 19 May 2012 xx:xx:xx +0200
04: Received: from localhost (unknown [213.134.7.221])
05: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: Nordtelekom Content Filter
08: Received: from coyote.nordtelekom.hu ([213.134.7.218])
09: 	by localhost (mailserver.nordtelekom.hu [213.134.7.221]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from webmail.nordtelekom.hu (gogolak.nordtelekom.hu
13: [213.134.7.220])
14: 	by coyote.nordtelekom.hu (Postfix) with ESMTP ID: [ID filtered]
15: 	Sat, 19 May 2012 xx:xx:xx +0200 (CEST)
16: Received: from 41.203.64.132
17:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
18:         by webmail.nordtelekom.hu with HTTP;
19:         Sat, 19 May 2012 xx:xx:xx +0200 (CEST)

IP: 41.203.64.132 ---> GLO-Mobile Network Services, Nigeria


gecrackt: simbetet@nordtelekom.hu

richardlee44@hotmail.com.hk

richardlee44444@gmail.com

Und noch nicht mal die Ratware bedienen kann der Mugu:

You Are the user of %email% ? Please contact me with your details,full
names,telephone number & address for a profitable deal
Richard Lee

header:

01: Received: from nm8-vm1.bullet.mail.ird.yahoo.com
02: (nm8-vm1.bullet.mail.ird.yahoo.com [77.238.189.198])
03: 	by spammotel.com (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 19 May 2012 xx:xx:xx -0400 (EDT)
05: Received: from [77.238.189.52] by nm8.bullet.mail.ird.yahoo.com with
06: NNFMP; 19 May 2012 xx:xx:xx -0000
07: Received: from [212.82.108.120] by tm5.bullet.mail.ird.yahoo.com with
08: NNFMP; 19 May 2012 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1029.mail.ird.yahoo.com with NNFMP; 19
10: May 2012 xx:xx:xx -0000
11: Received: from [196.201.65.156] by web28705.mail.ir2.yahoo.com via HTTP;
12: Sat, 19 May 2012 xx:xx:xx BST

IP: 196.201.65.156 ---> AVISONET, CI

edward_f0@rediffmail.com

florenceedward10@yahoo.co.jp


der Sternchen-Mugu:

header:

01: Received: from nschwmtas04p.mx.bigpond.com (nschwmtas04p.mx.bigpond.com
02: [61.9.189.146])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun, 20 May 2012 xx:xx:xx +0200 (CEST)
05: Received: from nschwotgx03p.mx.bigpond.com ([165.228.150.40])
06:           by nschwmtas04p.mx.bigpond.com with ESMTP
07:           id
08: <......mx.bigpond.com [at] nschwotgx03p.mx.bigpond.com>;
09:           Sun, 20 May 2012 xx:xx:xx +0000
10: Received: from gsj.net.au ([165.228.150.40]) by nschwotgx03p.mx.bigpond.com
11:           with ESMTP
12:           id
13: <.....mx.bigpond.com [at] gsj.net.au>;
14:           Sun, 20 May 2012 xx:xx:xx +0000
15: Received: from User ([109.231.219.66]) by gsj.net.au with Microsoft
16: SMTPSVC(6.0.3790.4675);
17: 	 Sun, 20 May 2012 xx:xx:xx +1000

IP: 109.231.219.66 ---> 109-231-219-66.cust-109.exponential-e.net

gerhardblikslager6@ibibo.com

gerhardblikslagr6@hotmail.com

*/Re: Bank Payment Notification/Wire Transfer Approvals/*//
*//*//
*//*//
*/We wish to inform you that you have been recommended by my Bank, to
pay you
the sum of US$42,500,000.00 which is based on the understanding and current
proposed legislative payment agreement./*//

Muguphon: +44 700 592 1528 ---> Invomo Ltd., UK

[kjz1]

Als Mugus möchten sich in Erinnerung bringen:

header:

01: Received: from yums.yu.edu (fe5.prod.mis.yu.edu [10.11.12.55])
02: 	by fe7.prod.mis.yu.edu (Postfix) with ESMTP ID: [ID filtered]
03: 	Mon, 21 May 2012 xx:xx:xx -0400 (EDT)
04: Received: from 41.203.64.130
05:         (SquirrelMail authenticated user Blatner)
06:         by yums.yu.edu with HTTP;
07:         Mon, 21 May 2012 xx:xx:xx -0400

IP: 41.203.64.130 ---> Gloworld, Nigeria

gecrackt: Blatner@yu.edu

pchoffice@ovi.com

header:

01: Received: from cdlac1-a1-2-156.ipcom.comunitel.net (EHLO
02: mx4.hotmail.com) [212.145.84.156]
03:   by mx0.gmx.net (mx006) with SMTP; 21 May 2012 xx:xx:xx +0200

imf.eurozone@aol.com


der Mugu setzt auf Brachialgewalt:

header:

01: Received: from iron7.midco.net (iron7.midco.net [24.220.0.83])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 25 May 2012 xx:xx:xx +0200 (CEST)
04: Received: from smtpa.midco.net ([24.220.0.133])
05:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
06: Received: from [10.1.1.1] (unknown [180.75.252.203])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	(Authenticated sender: lwr [at] gra.midco.net)
10: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
11: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron7.midco.net (EHLO iron7.midco.net) [24.220.0.83]
02:   by mx0.gmx.net (mx005) with SMTP; 25 May 2012 xx:xx:xx +0200
03: Received: from smtpa.midco.net ([24.220.0.133])
04:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
05: Received: from [10.1.1.1] (unknown [180.75.252.203])
06: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
07: 	(No client certificate requested)
08: 	(Authenticated sender: lwr [at] gra.midco.net)
09: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
10: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron8.midco.net (EHLO iron8.midco.net) [24.220.0.94]
02:   by mx0.gmx.net (mx027) with SMTP; 25 May 2012 xx:xx:xx +0200
03: Received: from smtpa.midco.net ([24.220.0.133])
04:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
05: Received: from [10.1.1.1] (unknown [180.75.252.203])
06: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
07: 	(No client certificate requested)
08: 	(Authenticated sender: lwr [at] gra.midco.net)
09: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
10: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron5.midco.net (iron5.midco.net [24.220.0.86])
02: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: Received: from smtpa.midco.net ([24.220.0.133])
05:   by out.vip.midco.net with ESMTP; 24 May 2012 xx:xx:xx -0500
06: Received: from [10.1.1.1] (unknown [180.75.252.203])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	(Authenticated sender: lwr [at] gra.midco.net)
10: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
11: 	Thu, 24 May 2012 xx:xx:xx -0500 (CDT)

header:

01: Received: from iron8.midco.net (iron8.midco.net [24.220.0.94])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 25 May 2012 xx:xx:xx +0200 (CEST)
04: Received: from smtpa.midco.net ([24.220.0.133])
05:   by out.vip.midco.net with ESMTP; 25 May 2012 xx:xx:xx -0500
06: Received: from [10.1.1.1] (unknown [180.75.45.0])
07: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
08: 	(No client certificate requested)
09: 	(Authenticated sender: llewellyn [at] wil.midco.net)
10: 	by smtpa.midco.net (Postfix) with ESMTPSA ID: [ID filtered]
11: 	Fri, 25 May 2012 xx:xx:xx -0500 (CDT)

IP: 180.75.252.203/180.75.45.0 ---> Packet One Networks (M) Sdn, Malaysia

gecrackt: lwr@gra.midco.net

gecrackt: llewellyn@wil.midco.net

unwesternunion03@kimo.com

wumtunite@kimo.com

wumt@msn.com


In den letzten Tagen bekam ich vermehrt Mugu-Spam aus Malaysia. Malaysia ist wohl ein beliebtes 'Studienland' für Nigerianer und die Mugus müssen sich ihre Studiengebühren dort anscheinend per 419-Betrug verdienen...

http://thestar.com.my/news/story.asp...190&sec=nation

[kjz1]

Weiterhin drängeln sich nach vorne:


der Yahoo/ATT-Mugu:

header:

01: Received: from [173.245.64.112] by web181216.mail.ne1.yahoo.com via
02: HTTP; Tue, 22 May 2012 xx:xx:xx PDT

IP: 173.245.64.112 ---> Egihosting

webwemer98314@att.net

mr.andrew442@gmail.com

header:

01: Received: from [69.22.170.108] by web84506.mail.ne1.yahoo.com via HTTP;
02: Fri, 25 May 2012 xx:xx:xx PDT

IP: 69.22.170.108 ---> nLayer

web.office_3342_12334@verizon.net

nelson.joe01@gmail.com

header:

01: Received: from cable.sabotronic.co.rs (cable.sabotronic.co.rs
02: [212.200.122.10])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Sat, 26 May 2012 xx:xx:xx +0200 (CEST)
07: Received: from User (c-76-124-108-98.hsd1.pa.comcast.net [76.124.108.98])
08: 	(authenticated bits=0)
09: 	by cable.sabotronic.co.rs (8.14.4/8.14.4) with ESMTP ID: [ID filtered]
10: 	Sat, 26 May 2012 xx:xx:xx +0200

elvintan@malaysianbar.com

maillaw@e-mail.ua

Muguphon: +60102914584 ---> Celcom, Malaysia

header:

01: Received: from mail-ob0-f178.google.com (mail-ob0-f178.google.com
02: [209.85.214.178])
03: 	by mx.kundenserver.de (node=mxeu3) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: by mail-ob0-f178.google.com with SMTP ID: [ID filtered]
07:         for xxxxx; Sat, 26 May 2012 xx:xx:xx -0700 (PDT)
08: Received: by 10.50.135.37 with SMTP ID: [ID filtered]
09:  26 May 2012 xx:xx:xx -0700 (PDT)
10: Received: by 10.64.13.52 with HTTP; Sat, 26 May 2012 xx:xx:xx -0700 (PDT)

header:

01: Received: from mail-ob0-f179.google.com (mail-ob0-f179.google.com
02: [209.85.214.179])
03: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
04: 	for xxxxx; Sat, 26 May 2012 xx:xx:xx -0400 (EDT)
05: Received: by obbup19 with SMTP ID: [ID filtered]
06:         for xxxxx; Sat, 26 May 2012 xx:xx:xx
07: -0700 (PDT)
08: Received: by 10.50.87.198 with SMTP ID: [ID filtered]
09:  26 May 2012 xx:xx:xx -0700 (PDT)
10: Received: by 10.64.13.52 with HTTP; Sat, 26 May 2012 xx:xx:xx -0700 (PDT)

gecrackt: hugs35@students.rowan.edu

loaninvestmentfund01@gmail.com

header:

01: Received: from sydney.orbit-internet.co.uk (unknown [84.21.143.144])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 27 May 2012 xx:xx:xx +0200 (CEST)
04: Received: from User ([41.78.239.194])
05:         by sydney.orbit-internet.co.uk (Sydney Mailserver) with ASMTP id
06: KXE13208; Sat, 26 May 2012 xx:xx:xx +0100

IP: 41.78.239.194 ---> broadband.fibre1.aquiva.co.zw

baykgh@gmail.com

barristersegunfavour@yahoo.com.hk

BarristerSegunFavour@bigmir.net

header:

01: Received: from static-74-100-190-4.lsanca.fios.verizon.net (EHLO
02: tonysmultiservice.com) [74.100.190.4]
03:   by mx0.gmx.net (mx072) with SMTP; 27 May 2012 xx:xx:xx +0200
04: Received: from inheritanceforums.com ([50.56.188.235]) by
05: tonysmultiservice.com with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Sun, 27 May 2012 xx:xx:xx -0700

IP: 50.56.188.235 ---> 50-56-188-235.static.cloud-ips.com/Rackspace

facebookwinner2012@gmail.com


die Madrid-Konnektion:

header:

01: Received: from 194-208-194-212.tele.net (EHLO mx4.hotmail.com)
02: [194.208.194.212]
03:   by mx0.gmx.net (mx079) with SMTP; 27 May 2012 xx:xx:xx +0200

iintterlloto@aim.com

aragonez@consultant.com

Muguphon: +34 662-230-776 ---> Vodafone España, S.a.u.

Mugufax: +34-917 903 754 ---> Colt Telecom España, S.a.


gecracktes Horde:

header:

01: Received: from mail.copesnet.com.ar (EHLO mail.copesnet.com.ar)
02: [201.251.233.3]
03:   by mx0.gmx.net (mx057) with SMTP; 27 May 2012 xx:xx:xx +0200
04: Received: from mail.copesnet.com.ar (mail.nabarro.com.ar [127.0.0.1])
05: 	by mail.copesnet.com.ar (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
06: 	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO);
07: 	Sun, 27 May 2012 xx:xx:xx -0300
08: Received: (from apache [at] localhost)
09: 	by mail.copesnet.com.ar (8.13.8/8.13.8/Submit) ID: [ID filtered]
10: 	Sun, 27 May 2012 xx:xx:xx -0300
11: X-Authentication-Warning: mail.copesnet.com.ar: apache set sender to
12: info [at] copesnet.com.ar using -f
13: Received: from 65.49.68.194 ([65.49.68.194]) by webmail.copesnet.com.ar
14: 	(Horde Framework) with HTTP; Sun, 27 May 2012 xx:xx:xx

gecrackt: info@copesnet.com.ar

shellloan.offer@info.lt

[kjz1]

Fröhliches Mugu-Treiben:

header:

01: Received: from static-74-100-190-4.lsanca.fios.verizon.net (EHLO
02: tonysmultiservice.com) [74.100.190.4]
03:   by mx0.gmx.net (mx061) with SMTP; 29 May 2012 xx:xx:xx +0200
04: Received: from inheritanceforums.com ([50.56.188.235]) by
05: tonysmultiservice.com with Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Mon, 28 May 2012 xx:xx:xx -0700

IP: 50.56.188.235 ---> 50-56-188-235.static.cloud-ips.com

facebookdeafhelp01@gmail.com

header:

01: Received: from server107d.exghost.com (EHLO server107.appriver.com)
02: [204.232.236.207]
03:   by mx0.gmx.net (mx059) with SMTP; 30 May 2012 xx:xx:xx +0200
04: Received: from [10.238.9.126] (HELO mail07.appriver.com)
05:   by server107.appriver.com (CommuniGate Pro SMTP 5.4.4)
06:   with ESMTPS ID: [ID filtered]
07: Received: from [175.100.12.44] (account wwillis [at] helmsbriscoe.com HELO User)
08:   by mail07.appriver.com (CommuniGate Pro SMTP 5.4.3k)
09:   with ESMTPA ID: [ID filtered]

IP: 175.100.12.44] ---> VIETTEL-CAMBODIA

gecrackt: wwillis@helmsbriscoe.com

pamela_confirmationunit@aol.co.uk

header:

01: Received: from echoupal.com (relay.e-choupal.com [125.20.5.166])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed, 30 May 2012 xx:xx:xx -0400 (EDT)
04: Received: (qmail 6242 invoked by UID: [UID filtered]
05: Received: from unknown (HELO echoupal.com) ([192.168.5.13])
06:           (envelope-sender <poor [at] spamvictim.tld>)
07:           by 0 (qmail-ldap-1.03) with SMTP
08:           for xxxxx; 30 May 2012 xx:xx:xx -0000
09: Received: (qmail 26200 invoked by UID: [UID filtered]
10: Received: from 127.0.0.1 by mithimail2 (envelope-from
11: <09000609 [at] echoupal.com>, UID: [UID filtered]
12:  Clear:RC:1(127.0.0.1):. Processed in 0.029996 secs); 30 May 2012
13: xx:xx:xx -0000
14: Received: from unknown (HELO mithimail2) ([127.0.0.1])(envelope-sender
15: <09000609 [at] echoupal.com>)by 0 (qmail-ldap-1.03) with SMTPfor
16: <wrightwilliams2012 [at] yahoo.com.cn>; 30 May 2012 xx:xx:xx -0000

wrightwilliams2012@yahoo.com.cn

09000609@echoupal.com

header:

01: Received: from karaja.e-projeti.com.br (karaja.e-projeti.com.br
02: [200.215.209.150])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Fri,  1 Jun 2012 xx:xx:xx +0200 (CEST)
07: Received: from higra by karaja.e-projeti.com.br with local (Exim 4.77)
08: 	(envelope-from <higra [at] karaja.e-projeti.com.br>)
09: 	ID: [ID filtered]
10: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx -0300
11: X-AntiAbuse: Sender Address Domain - karaja.e-projeti.com.br

gecrackt: higra@karaja.e-projeti.com.br

larrystevenson522@yahoo.com

[kjz1]

Man treibt es weiter:

header:

01: Received: from mail.roamware.com (EHLO roamware.com) [64.68.70.99]
02:   by mx0.gmx.net (mx027) with SMTP; 29 May 2012 xx:xx:xx +0200
03: Received: from User ([87.103.115.202]) by roamware.com with Microsoft
04: SMTPSVC(6.0.3790.4675);
05: 	 Tue, 29 May 2012 xx:xx:xx -0700

IP: 87.103.115.202 ---> smtp.enkrott.pt

c-morgan@inmail24.com

MR.OLIVERNORRIS@REDIFFMAIL.COM

Muguphon: +234-808-180-2556 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from mail.ronda.com.co (EHLO mail.ronda.com.co) [200.91.234.186]
02:   by mx0.gmx.net (mx032) with SMTP; 30 May 2012 xx:xx:xx +0200
03: Received: from localhost (localhost [127.0.0.1])
04: 	by mail.ronda.com.co (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Wed, 30 May 2012 xx:xx:xx -0500 (COT)
06: X-Virus-Scanned: amavisd-new at ronda.com.co
07: Received: from mail.ronda.com.co ([127.0.0.1])
08: 	by localhost (mail.ronda.com.co [127.0.0.1]) (amavisd-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: 	Wed, 30 May 2012 xx:xx:xx -0500 (COT)
11: Received: from User-PC (unknown [41.233.228.189])
12: 	by mail.ronda.com.co (Postfix) with ESMTPSA ID: [ID filtered]
13: 	for xxxxx; Wed, 30 May 2012 xx:xx:xx -0500 (COT)

IP: 41.233.228.189 ---> host-41.233.228.189.tedata.net

yabumual04@gmail.com

yabumuala09@gmail.com

header:

01: Received: from mail165.messagelabs.com (mail165.messagelabs.com
02: [216.82.253.147])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx +0200 (CEST)
07: Received: (qmail 27945 invoked from network); 31 May 2012 xx:xx:xx -0000
08: Received: from eth220-139.vic.adsl.internode.on.net (HELO
09: ?150.101.220.139?) (150.101.220.139)
10:   by server-8.tower-165.messagelabs.com with DHE-RSA-AES256-SHA
11: encrypted SMTP; 31 May 2012 xx:xx:xx -0000
12: Received: from localhost (localhost [127.0.0.1])
13: 	by e-v.vic (Postfix) with ESMTP ID: [ID filtered]
14: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx +1000 (EST)
15: Received: from HARVESTTIME-PC (unknown [111.90.151.105])
16: 	by e-v.vic (Postfix) with ESMTP ID: [ID filtered]
17: 	for xxxxx; Thu, 31 May 2012 xx:xx:xx +1000 (EST)

IP: 111.90.151.105 ---> PIRADIUS NET, Malaysia (HARVESTTIME-PC, soso....)

clarketaylor35@yahoo.com.sg

GIA@consultant.com


die Madrid-Konnektion:

header:

01: Received: from User (europrom12 [at] 76.164.199.59 with login)
02:         by smtp104.mail.gq1.yahoo.com with SMTP; 31 May 2012 xx:xx:xx
03: -0700 PDT

IP: 76.164.199.59 ---> three15.pixiedustallergy.com/Versaweb

euro_promo02@e-mail.ua

europrom12@live.com

europromo2012@e-mail.ua

Muguphon: +34-634-119-039 ---> Vodafone España, S.a.u.

Mugufax: +34-911-820-118 ---> Jazz Telecom, S.a.u.

header:

01: Received: from action-uk.com (mx10.action-uk.com [213.170.130.250])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri,  1 Jun 2012 xx:xx:xx +0200 (CEST)
04: Received: from User ([115.236.19.233]) by action-uk.com with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Fri, 1 Jun 2012 xx:xx:xx +0100

IP: 115.236.19.233 ---> HANGZHOU-XIAOSHAN

mkurien@e-mail.ua

mkurien@malaysianbar.com

Muguphon: +60102914584 ---> Celcom, Malaysia

header:

01: Received: from c2bthomr11.btconnect.com (EHLO mail.btconnect.com)
02: [213.123.20.129]
03:   by mx0.gmx.net (mx025) with SMTP; 01 Jun 2012 xx:xx:xx +0200
04: Received: from mail.btconnect.com (c2bthomr14.ncs.ibs-infra.bt.com
05: [10.87.69.235])
06: 	by c2bthomr11.btconnect.com (MOS 3.10.10a-GA)
07: 	with ESMTP ID: [ID filtered]
08: 	Fri, 1 Jun 2012 xx:xx:xx +0100 (BST)
09: Received: (from localhost [127.0.0.1])
10: 	by c2bthomr14.btconnect.com (MOS 4.3.3-GA)
11: 	ID: [ID filtered]
12: 	Fri,  1 Jun 2012 xx:xx:xx +0100 (BST)
13: Received: from serverr3.vscloud-cust.net (EHLO User) ([217.16.182.82])
14: 	by c2bthomr14.btconnect.com
15: 	with ESMTP ID: [ID filtered]
16: 	Fri, 01 Jun 2012 xx:xx:xx +0100 (BST)

IP: 217.16.182.82 ---> VSHosting

gecrackt: ian.sandford@btconnect.com

saragracia22@globomail.com

saragracia1@globomail.com

header:

01: Received: from oms-db04.r1000.mx.aol.com (EHLO
02: oms-db04.r1000.mx.aol.com) [205.188.58.4]
03:   by mx0.gmx.net (mx076) with SMTP; 02 Jun 2012 xx:xx:xx +0200
04: Received: from mtaout-mb02.r1000.mx.aol.com
05: (mtaout-mb02.r1000.mx.aol.com [172.29.41.66])
06: 	by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
07: A36751C0002DA;
08: 	Sat,  2 Jun 2012 xx:xx:xx -0400 (EDT)
09: Received: from user (precivps.securesites.net [161.58.71.38])
10: 	by mtaout-mb02.r1000.mx.aol.com (MUA/Third Party Client Interface) with
11: ESMTPA ID: [ID filtered]
12: 	Sat,  2 Jun 2012 xx:xx:xx -0400 (EDT)

X-AOL-IP: 161.58.71.38 ---> precivps.securesites.net/Verio/NTT

ajrted22@wmconnect.com

unofficemails48@rediffmail.com

revrichardmoore@ovi.com

header:

01: Received: from smtpna.posta.tim.it (EHLO fepna02-svc.tim.it)
02: [217.200.184.87]
03:   by mx0.gmx.net (mx028) with SMTP; 03 Jun 2012 xx:xx:xx +0200
04: Received: from User ([2.196.116.223]) by fepna02-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Sun, 3 Jun 2012 xx:xx:xx +0200

martinallezio@yahoo.it

martinallezio@gmail.com

header:

01: Received: from blu0-omc2-s24.blu0.hotmail.com (EHLO
02: blu0-omc2-s24.blu0.hotmail.com) [65.55.111.99]
03:   by mx0.gmx.net (mx064) with SMTP; 03 Jun 2012 xx:xx:xx +0200
04: Received: from BLU164-W33 ([65.55.111.73]) by
05: blu0-omc2-s24.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 3 Jun 2012 xx:xx:xx -0700

X-Originating-IP: [41.181.71.38] ---> MTN Business Solutions (Pty) Ltd.

xx.gbagbo3@msn.com

diana.gbagbo@gmail.com

[kjz1]

Als Mugus lassen grüßen:

header:

01: Received: from draco.telkomsa.net (draco.telkomsa.net [196.25.211.120])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  4 Jun 2012 xx:xx:xx -0400 (EDT)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by draco.telkomsa.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  4 Jun 2012 xx:xx:xx +0200 (SAST)
07: X-Virus-Scanned: amavisd-new at draco.telkomsa.net
08: Received: from draco.telkomsa.net ([127.0.0.1])
09: 	by localhost (draco.telkomsa.net [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail8.telkomsa.net (unknown [192.168.16.221])
12: 	by draco.telkomsa.net (Postfix) with ESMTP ID: [ID filtered]
13: 	Mon,  4 Jun 2012 xx:xx:xx +0200 (SAST)

stmatts@telkomsa.net

vanessaelbadri@ymail.com

header:

01: Received: from intranet.sejmh.ro (EHLO intranet.sejmh.ro) [86.127.173.101]
02:   by mx0.gmx.net (mx024) with SMTP; 05 Jun 2012 xx:xx:xx +0200
03: Received: from User ([71.243.113.103]) by intranet.sejmh.ro with
04: Microsoft SMTPSVC(6.0.3790.3959);
05: 	 Tue, 5 Jun 2012 xx:xx:xx +0300

IP: 71.243.113.103 ---> static-71-243-113-103.bos.east.verizon.net

privatepos@live.com


Der Tag geht, Johnny Walker kommt...

header:

01: Received: from oms-db03.r1000.mx.aol.com (oms-db03.r1000.mx.aol.com
02: [205.188.58.3])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  5 Jun 2012 xx:xx:xx +0200 (CEST)
05: Received: from mtaout-ma04.r1000.mx.aol.com
06: (mtaout-ma04.r1000.mx.aol.com [172.29.41.4])
07: 	by oms-db03.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: A9AA91C000085;
09: 	Tue,  5 Jun 2012 xx:xx:xx -0400 (EDT)
10: Received: from User (unknown [219.139.76.173])
11: 	by mtaout-ma04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Tue,  5 Jun 2012 xx:xx:xx -0400 (EDT)

X-AOL-IP: 219.139.76.173 ---> CHINANET hubei

efcc.infooffice00@yahoo.com.hk

pasoranch@aol.com

mr.johnwalker00@yahoo.com.hk

Muguphon: +234 8050633240 ---> Globacom Ltd., Nigeria

header:

01: Received: from fepna01-svc.tim.it (smtpna.posta.tim.it [217.200.184.87])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  6 Jun 2012 xx:xx:xx +0200 (CEST)
04: Received: from User ([2.196.116.223]) by fepna01-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Wed, 6 Jun 2012 xx:xx:xx +0200

martinallezio@gmail.com

martinallezio@yahoo.it

[kjz1]

An der Mugu-Börse tummeln sich noch:

header:

01: Received: from oms-mb02.r1000.mx.aol.com (oms-mb02.r1000.mx.aol.com
02: [64.12.102.138])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  8 Jun 2012 xx:xx:xx +0200 (CEST)
05: Received: from mtaout-da06.r1000.mx.aol.com
06: (mtaout-da06.r1000.mx.aol.com [172.29.51.134])
07: 	by oms-mb02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
08: 4C7EB1C00008B;
09: 	Fri,  8 Jun 2012 xx:xx:xx -0400 (EDT)
10: Received: from User (unknown [174.128.249.227])
11: 	by mtaout-da06.r1000.mx.aol.com (MUA/Third Party Client Interface) with
12: ESMTPA ID: [ID filtered]
13: 	Fri,  8 Jun 2012 xx:xx:xx -0400 (EDT)

X-AOL-IP: 174.128.249.227 ---> SHARKTECH

rbarilla@aol.com

ali_husain2012@hotmail.com


ein alter Bekannter der Madrid-Konnektion, die Mugus leisten sich sogar einen Zombie:

header:

01: Received: from User (euro.prom012 [at] 76.114.125.191 with login)
02:         by smtp201.mail.bf1.yahoo.com with SMTP; 09 Jun 2012 xx:xx:xx
03: -0700 PDT

IP: 76.114.125.191 ---> c-76-114-125-191.hsd1.tn.comcast.net

euro_promo02@e-mail.ua

euro.prom012@live.com

europromo2012@e-mail.ua

Muguphon: +34-634-119-039 ---> Vodafone España, S.a.u.

Mugufax: +34-911-820-118 ---> Jazz Telecom, S.a.u.

header:

01: Received: from hurrican.hg1.mil.ec (hg1.mil.ec [190.95.217.102])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 10 Jun 2012 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by hurrican.hg1.mil.ec (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 10 Jun 2012 xx:xx:xx -0500 (ECT)
07: X-Virus-Scanned: amavisd-new at hg1.mil.ec
08: Received: from hurrican.hg1.mil.ec ([127.0.0.1])
09: 	by localhost (hurrican.hg1.mil.ec [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from hurrican.hg1.mil.ec (hurrican.hg1.mil.ec [172.16.60.46])
12: 	by hurrican.hg1.mil.ec (Postfix) with ESMTP ID: [ID filtered]
13: 	Sun, 10 Jun 2012 xx:xx:xx -0500 (ECT)

Nephrologie im Militärkrankenhaus gecrackt, peinlich...: nefrologia@hg1.mil.ec

united_nations2012@admin.in.th

header:

01: Received: from mail4.novara.ie (mail4.novara.ie [80.93.17.5])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Sun, 10 Jun 2012 xx:xx:xx -0400 (EDT)
04: Received: (qmail 22787 invoked by UID: [UID filtered]
05: Received: from 31.200.191.117 ([31.200.191.117]) by 80.93.17.5 (Horde
06: 	Framework) with HTTP; Sun, 10 Jun 2012 xx:xx:xx +0100

IP: 31.200.191.117 ---> Hutchison 3G Ireland Limited

gecrackt: sales@absolutehotel.com

wrightwilliams2012@yahoo.com.cn

[kjz1]

Die Mugus lassen nicht lange bitten:

header:

01: Received: from mail.meline.com.sg (EHLO mail.meline.com.sg) [119.73.202.51]
02:   by mx0.gmx.net (mx061) with SMTP; 10 Jun 2012 xx:xx:xx +0200
03: Received: from User ([64.120.54.106]) by mail.meline.com.sg with
04: Microsoft SMTPSVC(6.0.3790.4675);
05: 	 Sun, 10 Jun 2012 xx:xx:xx +0800

IP: 64.120.54.106 ---> 64.120.54.106.ubiquityservers.com

mrsemilly32132@superposta.com

fbioff33@9.cn

Muguphon: +234-8055853338 ---> Globacom Ltd., Nigeria

header:

01: Received: from [109.228.240.181] by web132105.mail.ird.yahoo.com via
02: HTTP; Tue, 12 Jun 2012 xx:xx:xx BST

IP: 109.228.240.181 ---> MILLENICOM-DSLNET2

denyseyyzro@yahoo.com

nellie.casella@yahoo.com


Mugu zum Ersten:

header:

01: Received: from webmail1.posta.tim.it (EHLO fep01-svc.tim.it)
02: [213.230.128.226]
03:   by mx0.gmx.net (mx064) with SMTP; 15 Jun 2012 xx:xx:xx +0200
04: Received: from User ([2.196.116.223]) by fep07-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Thu, 14 Jun 2012 xx:xx:xx +0200

IP: 2.196.116.223 ---> Telecom Italia Mobile

navidyahya@yahoo.co.jp

wahidyahaya@wahid.com

header:

01: Received: from relay3.ptmail.sapo.pt (HELO sapo.pt) [212.55.154.23]
02:   by mx0.gmx.net (mx074) with SMTP; 15 Jun 2012 xx:xx:xx +0200
03: Received: (qmail 1807 invoked from network); 15 Jun 2012 xx:xx:xx -0000
04: Received: from unknown (HELO sapo.pt) (10.134.37.164)
05:   by relay3 with SMTP; 15 Jun 2012 xx:xx:xx -0000
06: Received: (qmail 9251 invoked from network); 15 Jun 2012 xx:xx:xx -0000
07: Received: from unknown (HELO User) (vdawq [at] sapo.pt@[115.236.19.233])
08:           (envelope-sender <poor [at] spamvictim.tld>)
09:           by mta14 (qmail-ptmail-1.0.0) with SMTP

IP: 115.236.19.233 ---> CHINANET-ZJ Hangzhou

nnpc.office.ngra@e-mail.ua


Mugu zum Zweiten:

header:

01: Received: from smtpna.posta.tim.it (EHLO fepna02-svc.tim.it)
02: [217.200.184.87]
03:   by mx0.gmx.net (mx027) with SMTP; 18 Jun 2012 xx:xx:xx +0200
04: Received: from User ([2.196.116.223]) by fepna02-svc.tim.it
05:           (InterMail vM.6.01.06.03 201-2131-130-104-20060516) with SMTP
06:           ID: [ID filtered]
07:           Mon, 18 Jun 2012 xx:xx:xx +0200

IP: 2.196.116.223 ---> Telecom Italia Mobile

kagerer_gerhard@aol.com

kagerer.gerhard@gmail.com