Mugu Dubletten

[kjz1]

Aus der Mugu-Kiste:

header:

01: Received: from mout2.freenet.de (EHLO mout2.freenet.de) [195.4.92.92]
02:   by mx0.gmx.net (mx010) with SMTP; 04 Oct 2011 xx:xx:xx +0200
03: Received: from [195.4.92.141] (helo=mjail1.freenet.de)
04: 	by mout2.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.76 #5)
06: 	ID: [ID filtered]
07: Received: from localhost ([::1]:47671 helo=mjail1.freenet.de)
08: 	by mjail1.freenet.de with esmtpa (ID: [ID filtered]
09: 4.76 #1)
10: 	ID: [ID filtered]
11: Received: from [195.4.92.19] (port=56219 helo=9.mx.freenet.de)
12: 	by mjail1.freenet.de with esmtpa (ID: [ID filtered]
13: 4.76 #1)
14: 	ID: [ID filtered]
15: Received: from [178.162.148.72] (port=4696 helo=User)
16: 	by 9.mx.freenet.de with esmtpa (ID: [ID filtered]
17: 25) (Exim 4.76 #1)
18: 	ID: [ID filtered]

IP: 178.162.148.72 ---> netdirekt e. K.

gecrackt: webmaster@willi-kraussg.de

unitedboffice4@gmail.com

unitedboffice@gmail.com

Muguphon: 229-638-0550 ---> Ymax Communications Corp. - Ga

[kjz1]

Natürlich habe ich noch Nachschub parat:

header:

01: Received: from mail.ytit.edu.tw (EHLO mail.ytit.edu.tw) [192.192.200.4]
02:   by mx0.gmx.net (mx082) with SMTP; 03 Oct 2011 xx:xx:xx +0200
03: Received: from mail.ytit.edu.tw (localhost.localdomain [127.0.0.1])
04: 	by mail.ytit.edu.tw (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
05: 	Tue, 4 Oct 2011 xx:xx:xx +0800

X-OriginatingIP: 41.138.179.15 (cdyang) ---> Visafone Communications

gecrackt: cdyang@mail.ytit.edu.tw

p.c.h.onlineprize@xnmsn.com

header:

01: Received: from 59-120-205-245.HINET-IP.hinet.net (EHLO bmail.litai.com)
02: [59.120.205.245]
03:   by mx0.gmx.net (mx046) with SMTP; 05 Oct 2011 xx:xx:xx +0200
04: Received: (from root [at] localhost)
05: 	by bmail.litai.com (8.13.7/8.12.7) ID: [ID filtered]
06: 	Thu, 6 Oct 2011 xx:xx:xx +0800
07: Received: from User
08: 	(authenticated bits=0)
09: 	by bmail.litai.com (8.13.7/8.12.8) with ESMTP ID: [ID filtered]
10: 	Thu, 6 Oct 2011 xx:xx:xx +0800

officefilexx1@gmail.com

mrslilian@mrslilian-dike.tk

header:

01: Received: from mail.shahjalalislamibank.com (EHLO
02: mail.shahjalalislamibank.com) [203.76.102.226]
03:   by mx0.gmx.net (mx050) with SMTP; 05 Oct 2011 xx:xx:xx +0200
04: Received: from mail.shahjalalislamibank.com (localhost [127.0.0.1])
05: 	by mail.shahjalalislamibank.com (8.13.8/8.13.8) with ESMTP id
06: p95GVMmE011767;
07: 	Wed, 5 Oct 2011 xx:xx:xx +0600
08: Received: (from apache [at] localhost)
09: 	by mail.shahjalalislamibank.com (8.13.8/8.13.8/Submit) ID: [ID filtered]
10: 	Wed, 5 Oct 2011 xx:xx:xx +0600
11: X-Authentication-Warning: mail.shahjalalislamibank.com: apache set
12: sender to msmith [at] xnmsn.com using -f
13: Received: from 41.203.64.131
14:         (SquirrelMail authenticated user zahid)
15:         by shahjalalislamibank.com with HTTP;
16:         Wed, 5 Oct 2011 xx:xx:xx +0600 (BDT)

IP: 41.203.64.131 ---> GLO-Mobile Network Services, Nigeria

gecrackt: zahid@shahjalalislamibank.com

msmith@xnmsn.com

mrsmelissasmith@dgoh.org

dgoh@live.ru

header:

01: Received: from 61-218-101-130.HINET-IP.hinet.net (HELO taiship.com.tw)
02: [61.218.101.130]
03:   by mx0.gmx.net (mx019) with SMTP; 05 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 28929 invoked from network); 5 Oct 2011 xx:xx:xx -0000
05: Received: from 144.131.55.5 (HELO User) (postmaster [at] 144.131.55.5)
06:   by 0 with SMTP; 5 Oct 2011 xx:xx:xx -0000

IP: 144.131.55.5 ---> CPE-144-131-55-5.static.vic.bigpond.net.au

nancyjonesocc@aol.com

fsa01@fastwebmail.it

dendbell@live.com

Muguphon: +44 770 0017704 ---> Cloud9, UK


die Madrid-Konnektion:

header:

01: Received: from vsmtp1.tin.it (vsmtp1.tin.it [212.216.176.141])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  8 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from User (77.208.89.74) by vsmtp1.tin.it (8.5.113)
05: (authenticated as penoclarke [at] virgilio.it)
06:         ID: [ID filtered]

IP: 77.208.89.74 ---> VODAFONE_SPAIN_NETWORK

francisco_leon@aol.com

penoclarke@virgilio.it

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.


auch den Mugu hatten wir schon:

header:

01: Received: from nic.fns.uniba.sk (EHLO nic.fns.uniba.sk) [158.195.45.10]
02:   by mx0.gmx.net (mx024) with SMTP; 08 Oct 2011 xx:xx:xx +0200
03: Received: from localhost ([127.0.0.1] helo=nic.fns.uniba.sk)
04: 	by nic.fns.uniba.sk with esmtp (Exim 4.72)
05: 	(envelope-from <unitednation [at] inbox.com>)
06: 	ID: [ID filtered]
07: Received: from 172.129.167.7
08:         (SquirrelMail authenticated user hubka)
09:         by nic.fns.uniba.sk with HTTP;
10:         Sat, 8 Oct 2011 xx:xx:xx +0200

IP: 172.129.167.7 ---> AC81A707.ipt.aol.com

gecrackt: hubka@uniba.sk

unitednation@inbox.com

ups-shippment.offic.ng@dgoh.org

dgoh@live.ru

Muguphon: +234 70673854674 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from p3plwbeout16-04.prod.phx3.secureserver.net
02: (p3plsmtp16-04-2.prod.phx3.secureserver.net [173.201.193.60])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sun,  9 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: (qmail 24996 invoked from network); 9 Oct 2011 xx:xx:xx -0000
06: Received: from unknown (HELO localhost) (173.201.193.117)
07:   by p3plwbeout16-04.prod.phx3.secureserver.net with SMTP; 9 Oct 2011
08: xx:xx:xx -0000
09: Received: (qmail 19055 invoked by UID: [UID filtered]

X-Originating-IP: 41.58.23.225 ---> SWIFT NETWORKS LIMITED, Nigeria

waynebass@eqweop.com

royander2010@aol.com


- kjz

[kjz1]

Als Mugu wollen grüßen:

header:

01: Received: from leon.ac-toulouse.fr (EHLO mta1.ac-toulouse.fr)
02: [194.214.239.143]
03:   by mx0.gmx.net (mx050) with SMTP; 10 Oct 2011 xx:xx:xx +0200
04: Received: from nikita4.in.ac-toulouse.fr (nikita4.in.ac-toulouse.fr
05: [172.29.251.76])
06: 	by mta1.ac-toulouse.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 10 Oct 2011 xx:xx:xx +0200 (CEST)
08: Received: from nikita4.in.ac-toulouse.fr (nikita4.in.ac-toulouse.fr
09: [127.0.0.1])
10: 	by nikita4.in.ac-toulouse.fr (Postfix) with ESMTP
11: 	ID: [ID filtered]
12: Received: from mta1.ac-toulouse.fr (mta1.in.ac-toulouse.fr [172.29.251.67])
13: 	by nikita4.in.ac-toulouse.fr (Postfix) with ESMTP
14: 	ID: [ID filtered]
15: Received: from ac-toulouse.fr (store3.in.ac-toulouse.fr [172.29.240.144])
16: 	by mta1.ac-toulouse.fr (Postfix) with ESMTP ID: [ID filtered]
17: 	Mon, 10 Oct 2011 xx:xx:xx +0200 (CEST)
18: Received: from [172.29.251.67] (Forwarded-For: [82.128.16.131]) by
19:  store3.in.ac-toulouse.fr (mshttpd); Mon, 10 Oct 2011 xx:xx:xx +0100

IP: 82.128.16.131 ---> ml82.128.16.131.multilinks.com, Nigeria

gecrackt: Jean-Franc.Kentzel@ac-toulouse.fr

powerballgames018@gncn.net


die Madrid-Konnektion:

header:

01: Received: from smtp-01.piensasolutions.com (slsa667.piensasolutions.com
02: [217.76.150.252])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 13 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from nec789c (unknown [77.208.118.70])
06: 	by smtp-01.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Thu, 13 Oct 2011 xx:xx:xx +0200 (CEST)

IP: 77.208.118.70 ---> VODAFONE_SPAIN_NETWORK

janny.smith@o2.co.uk

lunaxgestion@luckymail.com

lunaxgestion@terra.es

Muguphon: +34 698-344-600 ---> mobile number, Espana

Mugufax: +34 911-820-312 ---> Jazz Telecom, S.a.u.

[kjz1]

Da hätten wir doch noch was....

Auch der Mugu war schon da:

header:

01: Received: from smtp.ac-rouen.fr (EHLO mta2.ac-rouen.fr) [194.167.196.131]
02:   by mx0.gmx.net (mx113) with SMTP; 10 Oct 2011 xx:xx:xx +0200
03: Received: by mta2.ac-rouen.fr (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: Received: from ac-rouen.fr (localhost.localdomain [127.0.0.1])
06: 	by mta2.ac-rouen.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Mon, 10 Oct 2011 xx:xx:xx +0200 (CEST)
08: Received: from [192.168.71.11] (Forwarded-For: 199.255.211.85) by
09:  mta2.ac-rouen.fr (mshttpd); Mon, 10 Oct 2011 xx:xx:xx -0700

IP: 199.255.211.85 ---> 199-255-211-85.anchorfree.com

gecrackt: anne.behotas1@ac-rouen.fr

mrallenailliams6@hotmail.com

Muguphon: +44 702 4037299 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from es1.gilders.co.uk (EHLO es1.gilders.co.uk) [81.144.178.58]
02:   by mx0.gmx.net (mx097) with SMTP; 12 Oct 2011 xx:xx:xx +0200
03: Received: from es1.gilders.co.uk (localhost.localdomain [127.0.0.1])
04: 	by localhost (Email Security Appliance) with SMTP ID: [ID filtered]
05: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
06: Received: from gilders02.gilders.co.uk (softbank126007022004.bbtec.net
07: [126.7.22.4])
08: 	by es1.gilders.co.uk (Sophos Email Appliance) with ESMTP id
09: 470681F22F44_E95A0E8F;
10: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
11: Received: from gilders06.gilders.co.uk ([192.168.1.250]) by
12: gilders02.gilders.co.uk with Microsoft SMTPSVC(6.0.3790.4675);
13: 	 Wed, 12 Oct 2011 xx:xx:xx +0100
14: Received: from User ([120.141.64.223]) by gilders06.gilders.co.uk with
15: Microsoft SMTPSVC(6.0.3790.4675);
16: 	 Wed, 12 Oct 2011 xx:xx:xx +0100

header:

01: Received: from es1.gilders.co.uk (EHLO es1.gilders.co.uk) [81.144.178.58]
02:   by mx0.gmx.net (mx011) with SMTP; 12 Oct 2011 xx:xx:xx +0200
03: Received: from es1.gilders.co.uk (localhost.localdomain [127.0.0.1])
04: 	by localhost (Email Security Appliance) with SMTP ID: [ID filtered]
05: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
06: Received: from gilders02.gilders.co.uk (softbank126007022004.bbtec.net
07: [126.7.22.4])
08: 	by es1.gilders.co.uk (Sophos Email Appliance) with ESMTP id
09: 32DF51F2371F_E95C7D3F;
10: 	Wed, 12 Oct 2011 xx:xx:xx +0000 (GMT)
11: Received: from gilders06.gilders.co.uk ([192.168.1.250]) by
12: gilders02.gilders.co.uk with Microsoft SMTPSVC(6.0.3790.4675);
13: 	 Wed, 12 Oct 2011 xx:xx:xx +0100
14: Received: from User ([120.141.127.218]) by gilders06.gilders.co.uk with
15: Microsoft SMTPSVC(6.0.3790.4675);
16: 	 Wed, 12 Oct 2011 xx:xx:xx +0100

IP: 120.141.64.223 ---> Packet One Networks (M) Sdn, Malaysia

joseph.tan@mail.com

Texacooil3@mail.com

header:

01: Received: from NORTHMO.NET (mail.northmo.net [208.110.72.155])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]

sms5@london.com

Muguphon: +277 85140561 ---> MTN, South Africa

header:

01: Received: from mv-osn-hcb008.ocn.ad.jp (EHLO mv-osn-hcb008.ocn.ad.jp)
02: [118.23.100.201]
03:   by mx0.gmx.net (mx097) with SMTP; 13 Oct 2011 xx:xx:xx +0200
04: Received: from mzcstore142.ocn.ad.jp (mv-osn-hcb008 [118.23.100.201])
05: 	by mv-osn-hcb008.ocn.ad.jp (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 14 Oct 2011 xx:xx:xx +0900 (JST)

gecrackt: joyce@coffee.ocn.ne.jp

sanusilamido_cbngovernor001@skymail.mn

sanusilamidocbngovernor001@skymail.mn

Muguphon: +234-8028419593 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from control6.tppinternet.net.au (control6.tppinternet.net.au
02: [202.124.245.138])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Fri, 14 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from localhost ([59.104.13.108]) by
06: control6.tppinternet.net.au with MailEnable ESMTP; Sat, 15 Oct 2011
07: xx:xx:xx +1100

IP: 59.104.13.108 ---> 59-104-13-108.adsl.dynamic.seed.net.tw

gecrackt: peter.watson@casamonde.com.au

david.hoffmann@zoho.com

header:

01: Received: from ims-d13.mx.aol.com (EHLO ims-d13.mx.aol.com)
02: [205.188.249.150]
03:   by mx0.gmx.net (mx113) with SMTP; 15 Oct 2011 xx:xx:xx +0200
04: Received: from oms-da02.r1000.mx.aol.com (oms-da02.r1000.mx.aol.com
05: [205.188.255.12])
06: 	by ims-d13.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Sat, 15 Oct 2011 xx:xx:xx -0400
08: Received: from mtaout-db04.r1000.mx.aol.com
09: (mtaout-db04.r1000.mx.aol.com [172.29.51.196])
10: 	by oms-da02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
11: D72FE38000081;
12: 	Sat, 15 Oct 2011 xx:xx:xx -0400 (EDT)
13: Received: from User (unknown [109.230.216.23])
14: 	by mtaout-db04.r1000.mx.aol.com (MUA/Third Party Client Interface) with
15: ESMTPA ID: [ID filtered]
16: 	Sat, 15 Oct 2011 xx:xx:xx -0400 (EDT)

IP: 109.230.216.23 ---> XSSERVER-EU

mslap11@aol.com

lap111@blumail.org

header:

01: Received: from mail.fastballinternet.com (mail2.fastballinternet.com
02: [64.113.227.68])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 15 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from fastballinternet.com (localhost [127.0.0.1])
06: 	by mail.fastballinternet.com (Postfix) with SMTP
07: 	ID: [ID filtered]
08: Received: from 41.58.3.129
09:         (SquirrelMail authenticated user bcurtsinger)
10:         by mail.fastballinternet.com with HTTP;
11:         Sat, 15 Oct 2011 xx:xx:xx +0100 (BST)

IP: 41.58.3.129 ---> SWIFT NETWORKS LIMITED, Nigeria

gecrackt: bcurtsinger@fastballinternet.com

william-lee2012@hotmail.co.uk

william-lee2011@LIVE.CO.UK

[kjz1]

Die Mugu-Büchse öffnet sich wieder:

header:

01: Received: from mail.hasanuddin-airport.com (EHLO
02: mail.hasanuddin-airport.com) [222.124.178.6]
03:   by mx0.gmx.net (mx046) with SMTP; 18 Oct 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.hasanuddin-airport.com (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 18 Oct 2011 xx:xx:xx +0700 (WIT)
07: X-Virus-Scanned: Debian amavisd-new at mail.hasanuddin-airport.com
08: Received: from mail.hasanuddin-airport.com ([127.0.0.1])
09: 	by localhost (mail.hasanuddin-airport.com [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [213.42.240.90])
13: 	by mail.hasanuddin-airport.com (Postfix) with ESMTPA ID: [ID filtered]
14: 	Tue, 18 Oct 2011 xx:xx:xx +0700 (WIT)

IP: 213.42.240.90 ---> Emirates Telecommunications Corporation

tggreg001@gmail.comtggreg001@gmail.com

respond@gmail.com

header:

01: Received: from nm19-vm0.bullet.mail.sp2.yahoo.com (HELO
02: nm19-vm0.bullet.mail.sp2.yahoo.com) [98.139.91.216]
03:   by mx0.gmx.net (mx102) with SMTP; 18 Oct 2011 xx:xx:xx +0200
04: Received: from [98.139.91.67] by nm19.bullet.mail.sp2.yahoo.com with
05: NNFMP; 18 Oct 2011 xx:xx:xx -0000
06: Received: from [98.139.91.5] by tm7.bullet.mail.sp2.yahoo.com with
07: NNFMP; 18 Oct 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1005.mail.sp2.yahoo.com with NNFMP; 18
09: Oct 2011 xx:xx:xx -0000
10: Received: (qmail 74161 invoked by UID: [UID filtered]
11: Received: from [41.191.86.5] by web190009.mail.sg3.yahoo.com via HTTP;
12: Wed, 19 Oct 2011 xx:xx:xx SGT

IP: 41.191.86.5 ---> MICROMEDIA, BJ

www.western-union_benin263@live.com

www.western_union_benin263@hotmail.com

westernunion26330@yahoo.com

Muguphon: +229-98139486 ---> mobile number, Benin

header:

01: Received: from mail.astrus.ru (EHLO mail.astrus.ru) [77.105.152.10]
02:   by mx0.gmx.net (mx037) with SMTP; 19 Oct 2011 xx:xx:xx +0200
03: Received: from [41.203.64.131] (port=6009 helo=User)
04: 	by mail.astrus.ru with esmtpa (Exim 4.69 (FreeBSD))
05: 	(envelope-from <mherminia [at] fortiideias.com.br>)
06: 	ID: [ID filtered]

IP: 41.203.64.131 ---> GLO-Mobile Network Services, Nigeria

mensan00009@qatar.io

mensan0009@live.com

header:

01: Received: from gmmr2.centrum.cz (EHLO gmmr2.centrum.cz) [90.183.38.158]
02:   by mx0.gmx.net (mx017) with SMTP; 20 Oct 2011 xx:xx:xx +0200
03: Received: from mail1003.cent (unknown [10.32.3.101])
04: 	by gmmr2.centrum.cz (Postfix) with ESMTP ID: [ID filtered]
05: 	Thu, 20 Oct 2011 xx:xx:xx +0200 (CEST)
06: Received: by mail1003.cent (Postfix, from userID: [ID filtered]
07: 	ID: [ID filtered]
08: Subject: Ziegler,I am Mr. AZIZ BIN IBRAHIM from Lybia
09: Received: from 175.100.8.189 (X-Forwarded-For: 175.100.8.189)
10: 	by mail1003.centrum.cz (centrum.cz multimail) with HTTP

IP: 175.100.8.189 ---> VIETTEL-CAMBODIA

azizbhim@centrum.cz

azizbhim@w.cn

header:

01: Received: from ims-d13.mx.aol.com (ims-d13.mx.aol.com [205.188.249.150])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 21 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from oms-ma01.r1000.mx.aol.com (oms-ma01.r1000.mx.aol.com
05: [64.12.140.129])
06: 	by ims-d13.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
07: 	Thu, 20 Oct 2011 xx:xx:xx -0400
08: Message-ID: [ID filtered]
09: Received: from mtaout-da03.r1000.mx.aol.com
10: (mtaout-da03.r1000.mx.aol.com [172.29.51.131])
11: 	by oms-ma01.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id
12: 7DA6338000090;
13: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)
14: Received: from omh-da01.r1000.mx.aol.com (omh-da01.r1000.mx.aol.com
15: [172.29.51.136])
16: 	by mtaout-da03.r1000.mx.aol.com (MUA/Third Party Client Interface) with
17: ESMTP ID: [ID filtered]
18: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)
19: Received: from mtaout-da05.r1000.mx.aol.com
20: (mtaout-da05.r1000.mx.aol.com [172.29.51.133])
21: 	by omh-da01.r1000.mx.aol.com (AOL Outbound Holding Interface) with
22: ESMTP ID: [ID filtered]
23: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)
24: Received: from ew2284980 (unknown [46.166.129.205])
25: 	by mtaout-da05.r1000.mx.aol.com (MUA/Third Party Client Interface) with
26: ESMTPA ID: [ID filtered]
27: 	Thu, 20 Oct 2011 xx:xx:xx -0400 (EDT)

IP: 46.166.129.205 ---> Santrex Internet Services Ltd.

kelvincole9999@yahoo.co.jp

ew2284980@aol.com

[kjz1]

Der Deckel bleibt gelupft:

header:

01: Received: from ip3.yam.com (EHLO ip3.yam.com) [60.199.244.218]
02:   by mx0.gmx.net (mx013) with SMTP; 17 Oct 2011 xx:xx:xx +0200
03: Received: from staff.yam.com (61.30.236.226)
04:   by ip3.yam.com with ESMTP; 18 Oct 2011 xx:xx:xx +0800
05: Received: from User (60.230.184.227) by mail.yamoffice.yam.com
06: (61.30.236.226)
07:  with Microsoft SMTP Server ID: [ID filtered]

gecrackt: hr@staff.yam.com

mikejoelinfo@voila.fr

Muguphon: +234 81320 86388 ---> Nigeria

header:

01: Received: from static.vdc.vn (EHLO vosasaigon.com) [113.161.64.80]
02:   by mx0.gmx.net (mx046) with SMTP; 18 Oct 2011 xx:xx:xx +0200
03: Received: from User by vosasaigon.com (MDaemon PRO v10.1.1)
04: 	with ESMTP ID: [ID filtered]
05: 	Tue, 18 Oct 2011 xx:xx:xx +0700
06: X-Spam-Processed: vosasaigon.com, Tue, 18 Oct 2011 xx:xx:xx +0700
07: 	(not processed: message from trusted or authenticated source)
08: X-MDHeloLookup-Result: hardfail smtp.helo=User (does not exist)
09: (vosasaigon.com)

X-MDRemoteIP: 213.42.240.90 ---> Emirates Telecommunications Corporation

gecrackt: X-Authenticated-Sender: fax@vosasaigon.com

tggreg001@gmail.com

header:

01: Received: from nm1-vm6.bullet.mail.ne1.yahoo.com
02: (nm1-vm6.bullet.mail.ne1.yahoo.com [98.138.91.253])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 19 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.138.90.50] by nm1.bullet.mail.ne1.yahoo.com with
06: NNFMP; 19 Oct 2011 xx:xx:xx -0000
07: Received: from [98.138.87.6] by tm3.bullet.mail.ne1.yahoo.com with
08: NNFMP; 19 Oct 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1006.mail.ne1.yahoo.com with NNFMP; 19
10: Oct 2011 xx:xx:xx -0000
11: Received: (qmail 27980 invoked by UID: [UID filtered]
12: Received: from [41.218.212.131] by web190401.mail.sg3.yahoo.com via
13: HTTP; Wed, 19 Oct 2011 xx:xx:xx SGT

IP: 41.218.212.131 ---> 41-218-212-131-adsl-dyn.4u.com.gh

mrjamesnk@yahoo.com.ph

mrjamesn01@gmail.com

header:

01: Received: from mail.zellerplastik.ru (EHLO mail.zellerplastik.ru)
02: [194.85.131.38]
03:   by mx0.gmx.net (mx046) with SMTP; 19 Oct 2011 xx:xx:xx +0200
04: Received: from User by mail.zellerplastik.ru (MDaemon PRO v9.6.6)
05: 	with ESMTP ID: [ID filtered]
06: 	Wed, 19 Oct 2011 xx:xx:xx +0400

gecrackt: X-Authenticated-Sender: alex@zellerplastik.ru

commercialbkk@yahoo.co.jp

petereduohaEkeh@aol.com

header:

01: Received: from mail26.extendcp.co.uk (mail26.extendcp.co.uk [79.170.40.26])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: 	for xxxxx; Wed, 19 Oct 2011 xx:xx:xx +0200 (CEST)
06: Received: from [78.33.90.90] (helo=G5-3.local)
07: 	by mail26.extendcp.com with esmtpa (Exim 4.76)
08: 	ID: [ID filtered]
09: Received: from User ([90.166.229.145])
10: 	(authenticated user postmaster [at] network-pr.co.uk)
11: 	by G5-3.local (Kerio MailServer 6.4.0);
12: 	Wed, 19 Oct 2011 xx:xx:xx +0100

IP: 90.166.229.145 ---> France Telecom Espana

gecrackt: authenticated user postmaster@network-pr.co.uk

richardtang91@yahoo.com.ph

tang_richards@yahoo.com.hk

header:

01: Received: from 263mail182-141.263.sina.com (HELO 263.sina.com)
02: [202.106.182.141]
03:   by mx0.gmx.net (mx116) with SMTP; 21 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 5258 invoked from network); 21 Oct 2011 xx:xx:xx -0000
05: Received: from nation433.lnk.telstra.net (HELO User) (203.45.125.12)
06:   by 263.sina.com with SMTP; 21 Oct 2011 xx:xx:xx -0000

gecrackt: sally@263.sina.com

prof.nnamdimbutu8@skymail.mn

prof.nnamdimbutu@skymail.mn

header:

01: Received: from nm30-vm0.bullet.mail.sp2.yahoo.com
02: (nm30-vm0.bullet.mail.sp2.yahoo.com [98.139.91.238])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 22 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from [98.139.91.66] by nm30.bullet.mail.sp2.yahoo.com with
06: NNFMP; 22 Oct 2011 xx:xx:xx -0000
07: Received: from [98.139.91.38] by tm6.bullet.mail.sp2.yahoo.com with
08: NNFMP; 22 Oct 2011 xx:xx:xx -0000
09: Received: from [127.0.0.1] by omp1038.mail.sp2.yahoo.com with NNFMP; 22
10: Oct 2011 xx:xx:xx -0000
11: Received: (qmail 93045 invoked from network); 22 Oct 2011 xx:xx:xx -0000
12: Received: from 184.151.159.110.tm-hsbb.tm.net.my
13: (chief.tunub [at] 110.159.151.184 with login)
14:         by smtp115.biz.mail.mud.yahoo.com with SMTP; 22 Oct 2011
15: xx:xx:xx -0700 PDT

chief.tunub@hotmail.com

chief.tunubu1@hotmail.com

header:

01: Received: from jasio.evernet.com.pl (EHLO jasio.evernet.com.pl)
02: [195.8.107.12]
03:   by mx0.gmx.net (mx013) with SMTP; 22 Oct 2011 xx:xx:xx +0200
04: Received: from [46.23.64.76] (helo=User)
05: 	by jasio.evernet.com.pl with esmtpa (Exim)
06: 	ID: [ID filtered]
07: Oct 2011 xx:xx:xx +0200

IP: 46.23.64.76 ---> UK2.NET

gecrackt: authid biuro@fizjotech.pl

tbrown@skymail.mn

tbrown@globomail.com

Muguphon: +44 703 59 40876 ---> Open Telecom International Ltd., UK

Mugufax: +44 844 58 83458 ---> shared cost number, UK

header:

01: Received: from unknown (HELO mail.hkdailynews.com.hk) [210.177.98.115]
02:   by mx0.gmx.net (mx046) with SMTP; 22 Oct 2011 xx:xx:xx +0200
03: Received: from 210.177.98.115 (localhost [127.0.0.1])
04: 	by mail.hkdailynews.com.hk (Postfix) with ESMTP ID: [ID filtered]
05: 	Sun, 23 Oct 2011 xx:xx:xx +0800 (HKT)
06: Received: from 41.205.171.12
07:         (SquirrelMail authenticated user sales)
08:         by 210.177.98.115 with HTTP;
09:         Sat, 22 Oct 2011 xx:xx:xx +0100 (GMT-1)

IP: 210.177.98.115 ---> dial-pool14.ph.starcomms.net, Nigeria

gecrackt: sales@hkdailynews.com.hk

drrichard_kklloyd@hotmail.co.uk


dreifache Packung, aus dem Wörterbuch gespammt:

header:

01: Received: from mailmx.520idc.net (EHLO 520dns.com) [61.155.8.200]
02:   by mx0.gmx.net (mx009) with SMTP; 23 Oct 2011 xx:xx:xx +0200
03: Received: from User [41.203.64.129] by 520dns.com with ESMTP
04:   (SMTPD-8.22) ID: [ID filtered]

header:

01: Received: from mailmx.520idc.net (EHLO 520dns.com) [61.155.8.200]
02:   by mx0.gmx.net (mx032) with SMTP; 23 Oct 2011 xx:xx:xx +0200
03: Received: from User [41.203.64.129] by 520dns.com with ESMTP
04:   (SMTPD-8.22) ID: [ID filtered]

header:

01: Received: from 520dns.com (mailmx.520idc.net [61.155.8.200])
02: 	by mx.kundenserver.de (node=mxbap0) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200
05: Received: from User [41.203.64.129] by 520dns.com with ESMTP
06:   (SMTPD-8.22) ID: [ID filtered]

IP: 41.203.64.129 ---> GLO-Mobile Network Services, Nigeria

gecrackt: info@sf-steel.com

loan_site@gncn.net

loan-site@gncn.net

Muguphon: +44 703 5911617 ---> Open Telecom International Ltd., UK

Mugufax: +44 871 5038336 ---> Magrathea Telecommunications Limited, UK

[kjz1]

It's Mugu-Time, Baby....

die Madrid-Konnektion:

header:

01: Received: from 62-2-157-42.static.cablecom.ch (EHLO
02: mail.wegmulleretfils.ch) [62.2.157.42]
03:   by mx0.gmx.net (mx043) with SMTP; 24 Oct 2011 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.wegmulleretfils.ch (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun, 23 Oct 2011 xx:xx:xx +0200 (CEST)
07: X-Virus-Scanned: amavisd-new at wegmulleretfils.ch
08: Received: from mail.wegmulleretfils.ch ([127.0.0.1])
09: 	by localhost (serveurmac.wegmulleretfils.ch [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from weqmuleretils.ch (c-71-198-155-140.hsd1.ca.comcast.net
13: [71.198.155.140])
14: 	by mail.wegmulleretfils.ch (Postfix) with ESMTPA ID: [ID filtered]
15: 	Sun, 23 Oct 2011 xx:xx:xx +0200 (CEST)

info.segurosbilbaoo@gmail.com

info.segurosbilbaooo@gmail.com

Muguphon: +34-672-561-527 ---> Vodafone España, S.a.u.

header:

01: Received: from mailsnd3.chollian.net (HELO mailsnd3.chol.com)
02: [203.252.1.124]
03:   by mx0.gmx.net (mx101) with SMTP; 27 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 12648 invoked from network); Fri, 28 Oct 2011 xx:xx:xx
05: +0900 (KST)
06: message-ID: [ID filtered]
07: Received: from [64.6.39.154] (64.6.39.154)
08:   by mailsnd3.chol.com with ESMTP;
09:  Fri, 28 Oct 2011 xx:xx:xx +0900 (KST)

IP: 64.6.39.154 ---> johbrocon-lan-154.1stel.com

revfrjeanwhite001@reddiffmail.com

Muguphon: +44 792 4226784 ---> mobile number, Manx Telecom

Mugufax: +44 203 1630524 ---> Thus Plc, UK

header:

01: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br [201.2.1.244])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 29 Oct 2011 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 28 Oct 2011 xx:xx:xx -0200 (BRST)
07: X-Virus-Scanned: amavisd-new at agetop.goias.gov.br
08: Received: from mail.agetop.goias.gov.br ([127.0.0.1])
09: 	by localhost (mail.agetop.goias.gov.br [127.0.0.1]) (amavisd-new, port 10024)
10: 	with ESMTP ID: [ID filtered]
11: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br [201.2.1.244])
12: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
13: 	Fri, 28 Oct 2011 xx:xx:xx -0200 (BRST)

gecrackt: keurilenycamargo@agetop.goias.gov.br

barjacquecharles@rocketmail.com

charlesjacque@rocketmail.com

header:

01: Received: from smtp-gw.ficoferragens.com.br (EHLO ficoferragens.com.br)
02: [189.20.202.19]
03:   by mx0.gmx.net (mx004) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: BrmaOutput: ml82.128.2.45.multilinks.com [82.128.2.45]
05: Received: from User (ml82.128.2.45.multilinks.com [82.128.2.45])
06: 	(authenticated bits=0)
07: 	by ficoferragens.com.br (8.12.11.20060308/8.12.11) with ESMTP id
08: p9T3PEHu008917;
09: 	Sat, 29 Oct 2011 xx:xx:xx -0200

IP: 82.128.2.45 ---> ml82.128.2.45.multilinks.com, Nigeria

courier_firstflight@yahoo.com.hk

fflightcourier@yahoo.com.hk

Muguphon: +234 7080707348 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from darboux.math.univ-montp2.fr (EHLO
02: darboux.math.univ-montp2.fr) [162.38.126.4]
03:   by mx0.gmx.net (mx084) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: Received: from euler.math.univ-montp2.fr (euler.math.univ-montp2.fr
05: [162.38.126.6])
06: 	by darboux.math.univ-montp2.fr (Postfix) with ESMTP ID: [ID filtered]
07: 	Sat, 29 Oct 2011 xx:xx:xx +0200 (CEST)
08: Received: from webmail.math.univ-montp2.fr (localhost.localdomain
09: [127.0.0.1])
10: 	by euler.math.univ-montp2.fr (Postfix) with ESMTP ID: [ID filtered]
11: 	Sat, 29 Oct 2011 xx:xx:xx +0200 (CEST)
12: Received: from 82.128.17.20
13:         (SquirrelMail authenticated user olopez)
14:         by webmail.math.univ-montp2.fr with HTTP;
15:         Sat, 29 Oct 2011 xx:xx:xx +0200

IP: 82.128.17.20 ---> ml82.128.17.20.multilinks.com, Nigeria


gecrackt: olopez@univ-montp2.fr

mrharryben@live.com


der Mugu versucht es mit Brute Force:

header:

01: Received: from mail10.syd.optusnet.com.au (EHLO
02: mail10.syd.optusnet.com.au) [211.29.132.191]
03:   by mx0.gmx.net (mx092) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: Received: from localhost.localdomain (webmail06.syd.optusnet.com.au
05: [211.29.133.86])
06: 	by mail10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sat, 29 Oct 2011 xx:xx:xx +1100
08: Received: from gjb58.internetdsl.tpnet.pl ([83.12.235.58]) by
09:     webmail06.syd.optusnet.com.au with http
10: (user=waynegrogan [at] optusnet.com.au);
11:     Sat, 29 Oct 2011 xx:xx:xx +1100

header:

01: Received: from mail10.syd.optusnet.com.au (EHLO
02: mail10.syd.optusnet.com.au) [211.29.132.191]
03:   by mx0.gmx.net (mx092) with SMTP; 29 Oct 2011 xx:xx:xx +0200
04: Received: from localhost.localdomain (webmail06.syd.optusnet.com.au
05: [211.29.133.86])
06: 	by mail10.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sat, 29 Oct 2011 xx:xx:xx +1100

header:

01: Received: from mail13.syd.optusnet.com.au (mail13.syd.optusnet.com.au
02: [211.29.132.194])
03: 	by mx.kundenserver.de (node=mxeu2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from localhost.localdomain (webmail07.syd.optusnet.com.au
07: [211.29.133.88])
08: 	by mail13.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
09: 	Sat, 29 Oct 2011 xx:xx:xx +1100

gecrackt: waynegrogan@optusnet.com.au

hamid_07@live.com

[kjz1]

Die Mugu-Show geht weiter:


der Sternchen-Mugu:

header:

01: Received: from ip3.yam.com (ip3.yam.com [60.199.244.218])
02: 	by spammotel.com (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun, 23 Oct 2011 xx:xx:xx -0400 (EDT)
04: Received: from staff.yam.com (61.30.236.226)
05:   by ip3.yam.com with ESMTP; 24 Oct 2011 xx:xx:xx +0800
06: Received: from User (75.42.124.86) by mail.yamoffice.yam.com (61.30.236.226)
07:  with Microsoft SMTP Server ID: [ID filtered]

*ECONOMIC & FINANCIAL CRIME COMMISSION*
*(EFCC) FOREIGN OPERATIONS DEPT, (ECO WAS),*
*SUBJECT Attn: Beneficiary, Your $1.5 Million Dollars Compensation*

imf.center101@yahoo.com.cn

hr@mail.yamoffice.yam.com

Muguphon: +234-705-300-1051 ---> Globacom Ltd, Nigeria

header:

01: Received: from nm16.bullet.mail.sp2.yahoo.com (HELO
02: nm16.bullet.mail.sp2.yahoo.com) [98.139.91.86]
03:   by mx0.gmx.net (mx053) with SMTP; 25 Oct 2011 xx:xx:xx +0200
04: Received: from [98.139.91.64] by nm16.bullet.mail.sp2.yahoo.com with
05: NNFMP; 25 Oct 2011 xx:xx:xx -0000
06: Received: from [98.139.91.23] by tm4.bullet.mail.sp2.yahoo.com with
07: NNFMP; 25 Oct 2011 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1023.mail.sp2.yahoo.com with NNFMP; 25
09: Oct 2011 xx:xx:xx -0000
10: Received: (qmail 46401 invoked by UID: [UID filtered]
11: Received: from [41.216.50.33] by web190114.mail.sg3.yahoo.com via HTTP;
12: Tue, 25 Oct 2011 xx:xx:xx SGT

IP: 41.216.50.33 ---> Abonnes ADSL de Benin Telecoms a Kandevie

lllllllllll09@yahoo.com.ph

western_union_money229@hotmail.fr

Muguphon: +229-980-649-21 ---> mobile number, Benin

header:

01: Received: from mail27.sea5.speakeasy.net (mail27.sea5.speakeasy.net
02: [69.17.117.31])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Tue, 25 Oct 2011 xx:xx:xx +0200 (CEST)
07: Received: (qmail 30478 invoked from network); 25 Oct 2011 xx:xx:xx -0000
08: Received: by simscan 1.4.0 ppID: [ID filtered]
09:          scanners: clamav: 0.88.2/m:52/d:10739 spam: 3.0.4
10: Received: from magnicominc.com (HELO User) (briane@[216.24.172.57])
11:           (envelope-sender <poor [at] spamvictim.tld>)
12:           by mail27.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
13:           for <poor [at] spamvictim.tld>; 25 Oct 2011 xx:xx:xx -0000

gecrackt: kweiersheuser@prodigy.net

enjoydirving@aol.com

Muguphon: +1-469-941-2656 ---> geographic number, Dallas, TX, Southwestern Bell

header:

01: Received: from 202-177-23-100.kddi.net.hk (EHLO hkp1.coowo.com)
02: [202.177.23.100]
03:   by mx0.gmx.net (mx030) with SMTP; 25 Oct 2011 xx:xx:xx +0200
04: Received: (qmail 73338 invoked from network); 12 Oct 2011 xx:xx:xx +0800
05: Received: from 219-49-31-64.servebyte.net (HELO User) (64.31.49.219)
06:   by 202-177-23-100.kddi.net.hk with SMTP; 12 Oct 2011 xx:xx:xx +0800

b.zumi@hotmail.com

header:

01: Received: from mx1.univ-paris1.fr (EHLO mx1.univ-paris1.fr) [193.55.96.129]
02:   by mx0.gmx.net (mx079) with SMTP; 27 Oct 2011 xx:xx:xx +0200
03: Received: from smtp.univ-paris1.fr (smtp.univ-paris1.fr
04: [IPv6:2001:660:3305::95])
05: 	by mx1.univ-paris1.fr (8.14.3/8.14.3/Debian-9.4) with ESMTP id
06: p9R3oaUr027780
07: 	(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT);
08: 	Thu, 27 Oct 2011 xx:xx:xx +0200
09: Received: from courrier.univ-paris1.fr (courrier.univ-paris1.fr
10: [193.55.96.75])
11: 	by smtp.univ-paris1.fr (8.14.3/8.14.3/Debian-9.4) with ESMTP id
12: p9R3oXP9026437;
13: 	Thu, 27 Oct 2011 xx:xx:xx +0200
14: Received: from ml82.128.14.46.multilinks.com (ml82.128.14.46.multilinks.com
15: 	[82.128.14.46]) by courrier.univ-paris1.fr (Horde MIME library) with HTTP;
16: 	Thu, 27 Oct 2011 xx:xx:xx +0200

IP: 82.128.14.46 ---> Multilinks, Nigeria

gecrackt: mounir.kenniche@univ-paris1.fr

powerballgames014@live.co.uk

header:

01: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br
02: [201.2.1.244])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 27 Oct 2011 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost.localdomain [127.0.0.1])
06: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed, 26 Oct 2011 xx:xx:xx -0200 (BRST)
08: X-Virus-Scanned: amavisd-new at agetop.goias.gov.br
09: Received: from mail.agetop.goias.gov.br ([127.0.0.1])
10: 	by localhost (mail.agetop.goias.gov.br [127.0.0.1]) (amavisd-new, port
11: 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from mail.agetop.goias.gov.br (mail.agetop.goias.gov.br
14: [201.2.1.244])
15: 	by mail.agetop.goias.gov.br (Postfix) with ESMTP ID: [ID filtered]
16: 	Wed, 26 Oct 2011 xx:xx:xx -0200 (BRST)

X-Originating-IP: [60.50.95.79] ---> 79.95.50.60.cbj05-home.tm.net.my

gecrackt: liliapereira@agetop.goias.gov.br

barjacquecharles@rocketmail.com

barrjacquechamb@hotmail.com

[kjz1]

Alle meine 'Lieblinge'....

die Madrid-Konnektion, wie üblich mit Fake-Gewinnen:

header:

01: Received: from smtp-01.piensasolutions.com (slsa667.piensasolutions.com
02: [217.76.150.252])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed,  2 Nov 2011 xx:xx:xx +0100 (CET)
05: Received: from Admin-1 (unknown [77.208.198.42])
06: 	by smtp-01.piensasolutions.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Wed,  2 Nov 2011 xx:xx:xx +0100 (CET)

IP: 77.208.198.42 ---> VODAFONE_SPAIN_NETWORK

janny.smith@o2.co.uk

lunaxgestion@luckymail.com

lunaxgestion@terra.es

Muguphon: +34 698-344-600 ---> mobile number, Espana

Mugufax: +34 911-820-312 ---> Jazz Telecom, S.a.u., Espana


der Sternchen-Mugu (zum Ersten):

header:

01: Received: from unknown (EHLO mail.xxgf.com.cn) [218.64.175.131]
02:   by mx0.gmx.net (mx009) with SMTP; 02 Nov 2011 xx:xx:xx +0100
03: Received: from User (unknown [41.211.204.150])
04: 	by mail.xxgf.com.cn (Postfix) with ESMTP ID: [ID filtered]
05: 	Wed,  2 Nov 2011 xx:xx:xx +0800

*Die EuroMillions Lotterie-Promotion*
*Online Lotterie-Abteilung*
*P.O. Box 1010 Liverpool*
*L70 1NL United Kingdom*

IP: 41.211.204.150 ---> 150.204.211.41.client1.directonpc.net, Nigeria

eduardo_montez56@hotmail.com

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

header:

01: Received: from mail.nostalgie.perm.ru (EHLO mail.nostalgie.perm.ru)
02: [78.159.239.2]
03:   by mx0.gmx.net (mx071) with SMTP; 03 Nov 2011 xx:xx:xx +0100
04: Received: from User (unknown [69.60.110.96])
05: 	(Authenticated sender: test)
06: 	by mail.nostalgie.perm.ru (Postfix) with ESMTPA ID: [ID filtered]
07: 	Tue,  1 Nov 2011 xx:xx:xx +0500 (YEKT)

IP: 69.60.110.96 ---> 96-110-60-69.serverpronto.com

drdosu1950@live.com

danieldr.jason@sapo.pt

Muguphon: +234 815 272 1832 ---> Nigeria

header:

01: Received: from unknown (EHLO aurora.3720-design.co.uk) [91.212.182.176]
02:   by mx0.gmx.net (mx039) with SMTP; 03 Nov 2011 xx:xx:xx +0100
03: Received: from User (rrcs-24-227-49-54.se.biz.rr.com [24.227.49.54])
04: 	by aurora.3720-design.co.uk (Postfix) with ESMTPA ID: [ID filtered]
05: 	Thu,  3 Nov 2011 xx:xx:xx -0400 (EDT)

morgacole1@w.cn

morgacole@w.cn

Muguphon: +44 785 6119721 ---> Telefonica O2 (UK) Limited

Mugufax: +44 208 082 5346 ---> Thus Plc, UK


der Sternchen-Mugu zum Zweiten. Wie man sieht, (bis auf Hotmail) Schwarzhüte von A-Z, da klemmt keiner ab. Und internationale Bandenkriminalität: Versand aus Nigeria, angebliche Adresse aus UK, Handynr. und Email aus Spanien.

header:

01: Received: from unknown (EHLO mail.xxgf.com.cn) [218.64.175.131]
02:   by mx0.gmx.net (mx036) with SMTP; 07 Nov 2011 xx:xx:xx +0100 --->
03: CHINANET jiangxi
04: Received: from User (unknown [41.211.204.150])
05: 	by mail.xxgf.com.cn (Postfix) with ESMTP ID: [ID filtered]
06: 	Mon,  7 Nov 2011 xx:xx:xx +0800 (CST)

IP: 41.211.204.150 ---> 150.204.211.41.client1.directonpc.net, Nigeria

*Die EuroMillions Lotterie-Promotion*
*Online Lotterie-Abteilung*
*P.O. Box 1010 Liverpool*
*L70 1NL United Kingdom*

eduardo_montez23@skymail.mn

eduardo_montez56@hotmail.com

Muguphon: +34-632-225-061 ---> Lycamobile, S.l., Espana

Mugufax: +34-917-692-733 ---> Colt Telecom España, S.a.

[kjz1]

Man 'liebt' mich noch mehr...

header:

01: Received: from exprod7ob104.obsmtp.com (HELO exprod7ob104.obsmtp.com)
02: [64.18.2.160]
03:   by mx0.gmx.net (mx077) with SMTP; 31 Oct 2011 xx:xx:xx +0100
04: Received: from realmail.getfused.com ([216.235.242.38]) by
05: exprod7ob104.postini.com ([64.18.6.12]) with SMTP;
06: 	Sun, 30 Oct 2011 xx:xx:xx PDT 
07: Received: from ip-69-33-37-158.lax.megapath.net [69.33.37.158] by
08: realmail.getfused.com with SMTP;
09:    Mon, 31 Oct 2011 xx:xx:xx -0400

header:

01: Received: from exprod7ob122.obsmtp.com (HELO exprod7ob122.obsmtp.com)
02: [64.18.2.21]
03:   by mx0.gmx.net (mx039) with SMTP; 31 Oct 2011 xx:xx:xx +0100
04: Received: from realmail.getfused.com ([216.235.242.38]) by
05: exprod7ob122.postini.com ([64.18.6.12]) with SMTP;
06: 	Mon, 31 Oct 2011 xx:xx:xx PDT
07: Received: from ip-69-33-37-158.lax.megapath.net [69.33.37.158] by
08: realmail.getfused.com with SMTP;
09:    Mon, 31 Oct 2011 xx:xx:xx -0400

appleclaimunit@qatar.io

Muguphon: +44 703 185 1657 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from mail12.sea5.speakeasy.net (mail12.sea5.speakeasy.net
02: [69.17.117.14])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Tue,  1 Nov 2011 xx:xx:xx +0100 (CET)
07: Received: (qmail 20457 invoked from network); 31 Oct 2011 xx:xx:xx -0000
08: Received: by simscan 1.4.0 ppID: [ID filtered]
09:          scanners: clamav: 0.88.2/m:52/d:10739 spam: 3.0.4
10: Received: from admin.soarescompany.com (HELO User) (kishi@[72.51.39.209])
11:           (envelope-sender <poor [at] spamvictim.tld>)
12:           by mail12.sea5.speakeasy.net (qmail-ldap-1.03) with SMTP
13:           for <poor [at] spamvictim.tld>; 31 Oct 2011 xx:xx:xx -0000

jermainejones690@aol.com

header:

01: Received: from f2.mail.ci-net.com (EHLO f4.mail.ci-net.com) [195.72.171.30]
02:   by mx0.gmx.net (mx108) with SMTP; 04 Nov 2011 xx:xx:xx +0100
03: Received: from ssl.quantumcare.co.uk ([95.152.194.50]:49733
04: helo=GROMIT.quantum.loc)
05: 	by f4.mail.ci-net.com with esmtp (Exim 4.74)
06: 	(envelope-from <infhamelnseguro [at] gmail.com>)
07: 	ID: [ID filtered]
08: Received: from User ([210.75.15.14]) by GROMIT.quantum.loc with
09: Microsoft SMTPSVC(6.0.3790.4675);
10: 	 Fri, 4 Nov 2011 xx:xx:xx +0000

infhamelnseguro@gmail.com

revdrkwamekofi@yahoo.co.jp

Muguphon: +44 702 401 8161 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from dservmail.co.cc (dservmail.co.cc [173.0.59.30])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  5 Nov 2011 xx:xx:xx +0100 (CET)
04: Received: from [192.168.113.15]
05: (host217-41-84-217.in-addr.btopenworld.com [217.41.84.217])
06: 	by dservmail.co.cc (Postfix) with ESMTP ID: [ID filtered]
07: 	for xxxxx; Sat,  5 Nov 2011 xx:xx:xx +0300 (MSK)

kekorogold@hotmail.com

kekorogold@yahoo.fr