Mugu Dubletten

[kjz1]

Als Mugu möchten sich unbedingt outen:

header:

01: Received: from smtprelay01.eggenet.de (smtprelay01.eggenet.de [80.66.0.170])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 20 Jul 2012 xx:xx:xx +0200 (CEST)
04: Received: from DR124.ugos.ugos.de (unknown [80.66.6.82])
05: 	by smtprelay01.eggenet.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri, 20 Jul 2012 xx:xx:xx +0200 (CEST)
07: Received: from CL09DR001.ugos.ugos.de ([172.30.4.23]) by
08: DR124.ugos.ugos.de with Microsoft SMTPSVC(6.0.3790.3959);
09: 	 Fri, 20 Jul 2012 xx:xx:xx +0200
10: Received: from User ([217.166.45.169]) by CL09DR001.ugos.ugos.de with
11: Microsoft SMTPSVC(6.0.3790.3959);
12: 	 Fri, 20 Jul 2012 xx:xx:xx +0200

IP: 217.166.45.169 ---> static.kpn.net/Stichting Muziekschool Gouda

commercialbank0@yahoo.co.jp

commercialbankk@yahoo.co.jp

adieleasobi@aol.com

header:

01: Received: from imr-ma06.mx.aol.com (EHLO imr-ma06.mx.aol.com) [64.12.78.142]
02:   by mx0.gmx.net (mx074) with SMTP; 20 Jul 2012 xx:xx:xx +0200
03: Received: from mtaout-da01.r1000.mx.aol.com
04: (mtaout-da01.r1000.mx.aol.com [172.29.51.129])
05: 	by imr-ma06.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]
06: 	Fri, 20 Jul 2012 xx:xx:xx -0400
07: Message-ID: [ID filtered]
08: Received: from omh-mb01.r1000.mx.aol.com (omh-mb01.r1000.mx.aol.com
09: [172.29.25.150])
10: 	by mtaout-da01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
11: ESMTP ID: [ID filtered]
12: 	Fri, 20 Jul 2012 xx:xx:xx -0400 (EDT)
13: Received: from mtaout-da01.r1000.mx.aol.com
14: (mtaout-da01.r1000.mx.aol.com [172.29.51.129])
15: 	by omh-mb01.r1000.mx.aol.com (AOL Outbound Holding Interface) with
16: ESMTP ID: [ID filtered]
17: 	Fri, 20 Jul 2012 xx:xx:xx -0400 (EDT)
18: Received: from parksrv1.parknasilla.local (unknown [86.43.231.106])
19: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
20: 	(No client certificate requested)
21: 	by mtaout-da01.r1000.mx.aol.com (MUA/Third Party Client Interface) with
22: ESMTPSA ID: [ID filtered]
23: 	Fri, 20 Jul 2012 xx:xx:xx -0400 (EDT)

IP: 86.43.231.106 ---> Eircom Networks

charlesk139@aol.com

unofficemailsmailbox@rediffmail.com

Muguphon: +234-8086700927 ---> Celtel Nigeria Limited/Zain

[kjz1]

Es geht wieder lohos....

header:

01: Received: from cloud.imagempublicitaria.com.br (EHLO
02: cloud1.imagempublicitaria.com.br) [187.108.193.192]
03:   by mx0.gmx.net (mx027) with SMTP; 23 Jul 2012 xx:xx:xx +0200
04: Received: from [41.58.3.69] (port=3213 helo=User)
05: 	by cloud1.imagempublicitaria.com.br with esmtpsa (TLSv1:AES256-SHA:256)
06: 	(Exim 4.77)
07: 	(envelope-from <sosemaryazuma1 [at] gmail.com>)
08: 	ID: [ID filtered]

IP: 41.58.3.69 ---> SWIFT NETWORKS LIMITED, Nigeria

sosemaryazuma1@gmail.com

sosemaryazuma@gmail.com


immer noch gecrackt:

header:

01: Received: from SVTREXCHNG.tr.watsons.com (mail3.watsons.com.tr
02: [81.8.20.164])
03: 	(using TLSv1 with cipher AES128-SHA (128/128 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Tue, 24 Jul 2012 xx:xx:xx +0200 (CEST)
07: Received: from User (217.166.45.169) by mail.watsons.com.tr (10.196.1.5)
08: with
09:  Microsoft SMTP Server ID: [ID filtered]

X-Originating-IP: [217.166.45.169] ---> static.kpn.net/Stichting
Muziekschool Gouda EO

commercialbankk@yahoo.co.jp

adieleasobi@aol.com

header:

01: Received: from [41.58.27.179] by web140404.mail.bf1.yahoo.com via HTTP;
02: Tue, 24 Jul 2012 xx:xx:xx PDT

IP: 41.58.27.179 ---> SWIFT NETWORKS LIMITED, Nigeria

consultingdproffice002@gmail.com

willieobiano@e-mail.ua


der Mugu hat den Adressgenerator angeworfen:

header:

01: Received: from static-217-133-203-34.clienti.tiscali.it (EHLO
02: smtp.teletu.it) [217.133.203.34]
03:   by mx0.gmx.net (mx070) with SMTP; 24 Jul 2012 xx:xx:xx +0200
04: Received: from User (unknown [184.105.241.51])
05: 	(Authenticated sender: ospite)
06: 	by smtp.teletu.it (Postfix) with ESMTPA ID: [ID filtered]
07: 	Tue, 24 Jul 2012 xx:xx:xx +0200 (CEST)

header:

01: Received: from static-217-133-203-34.clienti.tiscali.it (EHLO
02: smtp.teletu.it) [217.133.203.34]
03:   by mx0.gmx.net (mx076) with SMTP; 24 Jul 2012 xx:xx:xx +0200
04: Received: from User (unknown [184.105.241.51])
05: 	(Authenticated sender: ospite)
06: 	by smtp.teletu.it (Postfix) with ESMTPA ID: [ID filtered]
07: 	Tue, 24 Jul 2012 xx:xx:xx +0200 (CEST)

header:

01: Received: from smtp.teletu.it (static-217-133-203-34.clienti.tiscali.it
02: [217.133.203.34])
03: 	by mx.kundenserver.de (node=mxbap1) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from User (unknown [184.105.241.51])
07: 	(Authenticated sender: ospite)
08: 	by smtp.teletu.it (Postfix) with ESMTPA ID: [ID filtered]
09: 	Tue, 24 Jul 2012 xx:xx:xx +0200 (CEST)

IP: 184.105.241.51 --> Hurricane Electric, Inc.

ospite@teletu.it

lambiedavid01@excite.co.uk

header:

01: Received: from mail.hyundaiit.com (EHLO mail.hyundaiit.com) [121.254.176.82]
02:   by mx0.gmx.net (mx030) with SMTP; 26 Jul 2012 xx:xx:xx +0200
03: Received: from User (66.194.16.39) by hditgwweb.hyundaiit.com
04: (155.100.20.82)
05:  with Microsoft SMTP Server ID: [ID filtered]
06: +0900

rain@hyundaiit.com

magaret_collins@terra.com

header:

01: Received: from unknown (EHLO mail1.zjlib.cn) [61.175.198.132]
02:   by mx0.gmx.net (mx069) with SMTP; 02 Aug 2012 xx:xx:xx +0200
03: Received: from zjlib.cn (mail1.zjlib.cn [61.175.198.132])
04: 	by mail1.zjlib.cn (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
05: 	Thu, 2 Aug 2012 xx:xx:xx +0800

IP: 61.175.198.132 ---> Zhejiang Library

X-OriginatingIP: 82.128.15.98 (chenying) ---> ml82.128.15.98.multilinks.com, Nigeria

abdoulhazizamadou@yahoo.com.ph

header:

01: Received: from mail-lb0-f179.google.com (mail-lb0-f179.google.com
02: [209.85.217.179])
03: 	(using TLSv1 with cipher RC4-SHA (128/128 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Sat,  4 Aug 2012 xx:xx:xx +0200 (CEST)
07: Received: by mail-lb0-f179.google.com with SMTP ID: [ID filtered]
08:         for xxxxx; Fri, 03 Aug 2012 xx:xx:xx -0700 (PDT)
09: Received: by 10.112.83.228 with SMTP ID: [ID filtered]
10: Fri,  03 Aug 2012 xx:xx:xx -0700 (PDT)

ooofujairahnatiuonal@gmail.com

alqadri_tammer@yahoo.com.ph

unlotouk@yahoo.co.jp

header:

01: Received: from [196.28.249.144] by web29806.mail.ird.yahoo.com via HTTP;
02: Sun, 05 Aug 2012 xx:xx:xx BST

IP: 196.28.249.144 ---> ONATEL, BF

vandiallo2@gmail.com

atm_payment@voila.fr

Muguphon: +226 786 020 53 ---> Telecel Faso S.A., Burkina Faso

Muguphon: +226 776 064 02 ---> Airtel Burkina Faso S.A.

[kjz1]

Ein kleines Mugulein:

header:

01: Received: from blu0-omc2-s9.blu0.hotmail.com (EHLO
02: blu0-omc2-s9.blu0.hotmail.com) [65.55.111.84]
03:   by mx0.gmx.net (mx073) with SMTP; 10 Aug 2012 xx:xx:xx +0200
04: Received: from BLU166-W62 ([65.55.111.71]) by
05: blu0-omc2-s9.blu0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Thu, 9 Aug 2012 xx:xx:xx -0700

X-Originating-IP: [115.49.36.216] ---> hn.kd.ny.adsl/China Unicom Henan

stabinki@188.com

naldoshineray@hotmail.com

[Wowoka]

Leider ist Beda Said Mohamed jetzt Waise. Vielleicht möchte ja jemand mit ihr spielen.

header:

01: Received: by 10.76.174.105 with SMTP ID: [ID filtered]
02:         Mon, 13 Aug 2012 xx:xx:xx -0700 (PDT)
03: Received: by 10.180.86.106 with SMTP ID: [ID filtered]
04:         Mon, 13 Aug 2012 xx:xx:xx -0700 (PDT)
05: Return-Path: <myzmail [at] lajt.hu>
06: Received: from nm22-vm4.bullet.mail.ird.yahoo.com (nm22-vm4.bullet.mail.ird.yahoo.com.
07: 	[212.82.109.254])
08:         by mx.google.com with SMTP ID: [ID filtered]
09:         Mon, 13 Aug 2012 xx:xx:xx -0700 (PDT)
10: Received-SPF: fail (google.com: domain of myzmail [at] lajt.hu does not designate
11: 	212.82.109.254 as permitted sender) client-ip=212.82.109.254;
12: Authentication-Results: mx.google.com; spf=hardfail (google.com: domain of
13: 	myzmail [at] lajt.hu does not designate 212.82.109.254 as permitted sender)
14: 	smtp.mail=myzmail [at] lajt.hu; dkim=pass (test mode) header.i=@yahoo.com
15: Received: from [77.238.189.54] by nm22.bullet.mail.ird.yahoo.com with NNFMP; 14
16: 	Aug 2012 xx:xx:xx -0000
17: Received: from [212.82.108.132] by tm7.bullet.mail.ird.yahoo.com with NNFMP; 14
18: 	Aug 2012 xx:xx:xx -0000
19: Received: from [127.0.0.1] by omp1037.mail.ird.yahoo.com with NNFMP; 14 Aug
20: 	2012 xx:xx:xx -0000
21: X-Yahoo-Newman-Property: ymail-3
22: X-Yahoo-Newman-ID: [ID filtered]
23: Received: (qmail 57890 invoked by UID: [UID filtered]
24: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024;
25: 	t=1344903842; bh=oMJu+cLRa+367SzO1iCJ3divGqw2C6GjUHwG1bqRRIo=;
26: 	h=X-YMail-OSG:Received:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Ver
27: 	ion:Content-Type;
28: 	b=aZXi1J789FxY856xbCQlNUHpXLjoOjUiDfxkmLaIn67+mKrgvF+3Ujccsk6eIctiB7G2+bv6J41+Kkx/H7OgQ0anZhTo
29: 	Opf7PA4jNBr5cZyW7qWhTjBHKid5DQn0Drv29fX+qjK/PX6qrbhd29UFEO73h1N9E7fqJ7IwtcW+IU=
30: X-YMail-OSG: [filtered]
31: Received: from [41.203.230.18] by web171604.mail.ir2.yahoo.com via HTTP; Tue,
32: 	14 Aug 2012 xx:xx:xx BST
33: X-RocketYMMF: abdulhamiddoc
34: X-Mailer: YahooMailClassic/15.0.8 YahooMailWebService/0.8.120.356233
35: Message-ID: [ID filtered]
36: Date: Tue, 14 Aug 2012 xx:xx:xx +0100 (BST)
37: From: Beda SaID: [ID filtered]
38: Reply-To: bedasaidx [at] yahoo.com

Es wird auch mit der stattlichen Summe von 4,8 Mio. $ geködert.

Hello dear,

It is with profound respect and humble submission, I beg to state the following few lines for your kind consideration. I hope you will spare some of your valuable minutes to read the following appeal with sympathetic mind. I must confess that it is with great hope, joy and enthusiasm to write you this mail and I believe that it must surely find you in good condition of health.

My name is Beda Said Mohamed, Somalian citizen, female, age 21 years old. I`m the daughter of Late Said Mohamed, former Somali Football Federation chief. My father were among at least 10 people killed in the explosion on Wednesday at the newly reopened national theater in Mogadishu during a ceremony. I lost my mother many years ago when I was just 6 years old and since then, my father loved me so dearly may he rest in peace and may the great God give him a safe entry in Paradise. Amen.

Before my father died, he told me that he made a fixed deposit of the sum of Four Million, Eight Hundred thousand United States Dollars(4.8Million USD) in one of the Banks in Burkina Faso with my name as his next of kin. I have traveled to Burkina Faso to clear the money but the Bank manager told me that my refugee status is not authorized by the laws of Burkina Faso to clear the money. He advised me to appoint a trustee.

Now, I am Soliciting your help for transfer of the money into your bank account and investment assistance in your Country. I have suffered lots of set back as a result of my parents death. I left Somalia because of incessant family feuds. Presently, am living in Ouagadougou,Burkina Faso. Hence, I want to settle abroad to continue my studies and spend the rest of my life overseas. Please consider my request as my life is being hugely affected.

Thanks a lot in anticipation of your prompt response.

Yours sincerely,
Beda Said Mohamed.

[kjz1]

Für die Mugu-Liste wollen sich unbedingt noch bewerben:

header:

01: Received: from m.petroleumproductsinc.com (EHLO
02: petroleum03.petrocom.com) [208.180.143.71]
03:   by mx0.gmx.net (mx063) with SMTP; 10 Aug 2012 xx:xx:xx +0200
04: Received: from User ([190.247.244.208]) by petroleum03.petrocom.com with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Fri, 10 Aug 2012 xx:xx:xx -0400

IP: 190.247.244.208 ---> 208-244-247-190.fibertel.com.ar

jonburns@e-mail.ua

jonburns247@hotmail.com


da hat sich das Mugulein aber viiieeel Mühe gemacht und extra Mail-Domains bei Strato besorgt:

header:

01: Received: from static.vnpt-hanoi.com.vn (EHLO dolab.gov.vn) [222.252.8.149]
02:   by mx0.gmx.net (mx025) with SMTP; 11 Aug 2012 xx:xx:xx +0200
03: Received: from User by dolab.gov.vn (MDaemon PRO v9.6.5)
04: 	with ESMTP ID: [ID filtered]
05: 	Sat, 11 Aug 2012 xx:xx:xx +0700

X-MDRemoteIP: 85.214.63.232 ---> h2018545.stratoserver.net

admin@dolab.gov.vn

admin@winmadridsa.com

gulffinancecorporation@promdebtmd.com

creditcomissionae@hotmail.com

credunittmdcredundunit@yahoo.com

andaonsultsaonsults@yahoo.com

header:

01: Received: from mail.contactosatelital.com.pe
02: (mail.contactosatelital.com.pe [190.41.107.130])
03: 	by mx.kundenserver.de (node=mxbap2) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from localhost (localhost.localdomain [127.0.0.1])
07: 	by mail.contactosatelital.com.pe (Postfix) with ESMTP ID: [ID filtered]
08: 	Sun, 12 Aug 2012 xx:xx:xx -0500 (PET)
09: X-Virus-Scanned: amavisd-new at contactosatelital.com.pe
10: Received: from mail.contactosatelital.com.pe ([127.0.0.1])
11: 	by localhost (mail.contactosatelital.com.pe [127.0.0.1]) (amavisd-new,
12: port 10024)
13: 	with ESMTP ID: [ID filtered]
14: Received: from mail.contactosatelital.com.pe
15: (mail.contactosatelital.com.pe [192.168.1.70])
16: 	by mail.contactosatelital.com.pe (Postfix) with ESMTP ID: [ID filtered]
17: 	Sun, 12 Aug 2012 xx:xx:xx -0500 (PET)

gecrackt: amontes@contactosatelital.com.pe

kennedywalker@london.com

[kjz1]

Da hätte ich noch:

der Mugu hier spammt per Wörterbuch-Attacke wild drauflos, kann sich noch nicht mal eine Adressliste leisten...:

header:

01: Received: from nschwmtas01p.mx.bigpond.com (nschwmtas01p.mx.bigpond.com
02: [61.9.189.137])
03: 	by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
04: 	ID: [ID filtered]
05: xx:xx:xx +0200
06: Received: from nschwcmgw07p ([61.9.190.167]) by nschwmtas01p.mx.bigpond.com
07:           with ESMTP
08:           id
09: <20120814224147.GGMW24679.nschwmtas01p.mx.bigpond.com [at] nschwcmgw07p>;
10:           Tue, 14 Aug 2012 xx:xx:xx +0000
11: Received: from wfmachinery.com.au ([110.142.90.181])
12: 	by nschwcmgw07p with BigPond Outbound
13: 	ID: [ID filtered]
14: Received: from User ([75.118.54.166]) by wfmachinery.com.au with
15: Microsoft SMTPSVC(6.0.3790.4675);
16: 	 Tue, 14 Aug 2012 xx:xx:xx +1000

header:

01: Received: from nschwmtas01p.mx.bigpond.com (EHLO
02: nschwmtas01p.mx.bigpond.com) [61.9.189.137]
03:   by mx0.gmx.net (mx032) with SMTP; 15 Aug 2012 xx:xx:xx +0200
04: Received: from nschwcmgw07p ([61.9.190.167]) by nschwmtas01p.mx.bigpond.com
05:           with ESMTP
06:           id
07: <20120814224147.GGMW24679.nschwmtas01p.mx.bigpond.com [at] nschwcmgw07p>;
08:           Tue, 14 Aug 2012 xx:xx:xx +0000
09: Received: from wfmachinery.com.au ([110.142.90.181])
10: 	by nschwcmgw07p with BigPond Outbound
11: 	ID: [ID filtered]
12: Received: from User ([75.118.54.166]) by wfmachinery.com.au with
13: Microsoft SMTPSVC(6.0.3790.4675);
14: 	 Tue, 14 Aug 2012 xx:xx:xx +1000

header:

01: Received: from nschwmtas01p.mx.bigpond.com (EHLO
02: nschwmtas01p.mx.bigpond.com) [61.9.189.137]
03:   by mx0.gmx.net (mx073) with SMTP; 15 Aug 2012 xx:xx:xx +0200
04: Received: from nschwcmgw07p ([61.9.190.167]) by nschwmtas01p.mx.bigpond.com
05:           with ESMTP
06:           id
07: <20120814224147.GGMW24679.nschwmtas01p.mx.bigpond.com [at] nschwcmgw07p>;
08:           Tue, 14 Aug 2012 xx:xx:xx +0000
09: Received: from wfmachinery.com.au ([110.142.90.181])
10: 	by nschwcmgw07p with BigPond Outbound
11: 	ID: [ID filtered]
12: Received: from User ([75.118.54.166]) by wfmachinery.com.au with
13: Microsoft SMTPSVC(6.0.3790.4675);
14: 	 Tue, 14 Aug 2012 xx:xx:xx +1000

IP: 75.118.54.166 ---> d118-75-166-54.col.wideopenwest.com

remmitance_22@fm.bb

remmitance_21@rocketmail.com


die Madrid-Konnektion leistet sich sogar Zombie-PCs:

header:

01: Received: from User (euro_promo012 [at] 58.56.108.35 with login)
02:         by smtp150.mail.ukl.yahoo.com with SMTP; 14 Aug 2012 xx:xx:xx
03: -0700 PDT

header:

01: Received: from User (europromo112 [at] 68.53.40.209 with login)
02:         by smtp106.mail.ukl.yahoo.com with SMTP; 17 Aug 2012 xx:xx:xx
03: -0700 PDT

IP: 68.53.40.209 ---> c-68-53-40-209.hsd1.tn.comcast.ne

IP: 58.56.108.35 ---> CHINANET SHANDONG

euro_promo012@e-mail.ua

eurolotto012@e-mail.ua

europromo2012@e-mail.ua

Muguphon: +34-634-119-039 ---> Vodafone España, S.a.u.

Mugufax: +34-911-820-118 ---> Jazz Telecom, S.a.u., Espana

header:

01: Received: from mail.cevlink.com ([218.247.180.194])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200 
05: Received: from User (mail.vpn-solution.net [70.88.191.233])
06: 	by mail.cevlink.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Fri, 17 Aug 2012 xx:xx:xx -0400 (EDT)

gatyjean@yahoo.cn

[kjz1]

Da geht noch was:


Die Madrid-Konnektion, nur echt mit dem Vodafone-Handy...

header:

01: Received: from mailhost.mft.com (EHLO mx4.hotmail.com) [71.125.60.99]
02:   by mx0.gmx.net (mx061) with SMTP; 16 Aug 2012 xx:xx:xx +0200

eenalottint@ozu.es

hernandez.offiicial@gmx.us

Muguphon: + 34 672 513 122 ---> Vodafone España, S.a.u.

header:

01: eceived: from mail.contactosatelital.com.pe
02: (mail.contactosatelital.com.pe [190.41.107.130])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 16 Aug 2012 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost.localdomain [127.0.0.1])
06: 	by mail.contactosatelital.com.pe (Postfix) with ESMTP ID: [ID filtered]
07: 	Sun, 12 Aug 2012 xx:xx:xx -0500 (PET)
08: X-Virus-Scanned: amavisd-new at contactosatelital.com.pe
09: Received: from mail.contactosatelital.com.pe ([127.0.0.1])
10: 	by localhost (mail.contactosatelital.com.pe [127.0.0.1]) (amavisd-new,
11: port 10024)
12: 	with ESMTP ID: [ID filtered]
13: Received: from mail.contactosatelital.com.pe
14: (mail.contactosatelital.com.pe [192.168.1.70])
15: 	by mail.contactosatelital.com.pe (Postfix) with ESMTP ID: [ID filtered]
16: 	Sun, 12 Aug 2012 xx:xx:xx -0500 (PET)

X-Originating-IP: [74.115.0.33] ---> 74-115-0-33.anchorfree.com

amontes@contactosatelital.com.pe

kennedywalker@london.com


zum Ersten:

header:

01: Received: from mail.pcu.net (EHLO mail.pcu.net) [71.37.91.163]
02:   by mx0.gmx.net (mx073) with SMTP; 18 Aug 2012 xx:xx:xx +0200
03: Received: from User (97-89-193-190.static.slid.la.charter.com
04: [97.89.193.190])
05:         by mail.pcu.net (PCU.NET Mail Server) with ASMTP ID: [ID filtered]
06:         Fri, 17 Aug 2012 xx:xx:xx -0600

rubenlord@yahoo.cn

test2@nixlawfirm.com

Muguphon: +234-813-112-1034 ---> Nigeria


zum Zweiten:

header:

01: Received: from unknown (EHLO chukotstat.gks.ru) [83.229.252.144]
02:   by mx0.gmx.net (mx020) with SMTP; 18 Aug 2012 xx:xx:xx +0200
03: Received: from User ([72.16.192.8])
04: 	(authenticated user test [at] chukotstat.gks.ru)
05: 	by chukotstat.gks.ru;
06: 	Sat, 18 Aug 2012 xx:xx:xx +1200

IP: 72.16.192.8 ---> CBEYOND COMMUNICATIONS, LLC

test@chukotstat.gks.ru

test@haroldhillonline.com

richgary@yahoo.cn

header:

01: Received: from mail.warestgroup.com
02: (0-239.static.highlandsfibernetwork.com [216.9.0.239])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 18 Aug 2012 xx:xx:xx +0200 (CEST)
05: Received: from User ([41.203.65.215]) by mail.warestgroup.com with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Sat, 18 Aug 2012 xx:xx:xx -0700

IP: 41.203.65.215 ---> GLO-Mobile Network Services, Nigeria

pvenoreply@e-mail.ua

charlie.metcalfe@e-mail.ua

Muguphon: +1-940-238-5400 ---> Choice Wireless Lc

header:

01: Received: from imsantv96c.netvigator.com (EHLO imsantv96.netvigator.com)
02: [210.87.250.83]
03:   by mx0.gmx.net (mx060) with SMTP; 18 Aug 2012 xx:xx:xx +0200
04: Received: from corpmail1.netvigator.com ([218.102.48.25])
05: 	by imsantv96.netvigator.com with bizsmtp
06: 	ID: [ID filtered]

header:

01: Received: from imsantv95.netvigator.com (imsantv95c.netvigator.com
02: [210.87.250.81])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 18 Aug 2012 xx:xx:xx +0200 (CEST)
05: Received: from corpmail1.netvigator.com ([218.102.48.25])
06: 	by imsantv95.netvigator.com with bizsmtp
07: 	ID: [ID filtered]

X-Originating-IP: [175.136.1.45] ---> TELEKOM MALAYSIA BERHAD

sunnyco@biznetvigator.net

mervynking0093@live.co.uk

Muguphon: + (44) 703 199 7824 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from unknown (EHLO idKorea.com) [210.219.173.88]
02:   by mx0.gmx.net (mx005) with SMTP; 18 Aug 2012 xx:xx:xx +0200 ---> SK
03: Broadband Co Ltd, KR
04: Received: from User ([80.121.186.6])
05: 	(authenticated bits=0)
06: 	by idKorea.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
07: 	Sun, 19 Aug 2012 xx:xx:xx +0900

IP: 80.121.186.6 ---> HIGHWAY194/Aon, Austria

test@www22041u.sakura.ne.jp

inspepoli@hotmail.com


mit freundlichen Grüßen von Frankreichs Schwarzhut Nr. 1...

header:

01: Received: from server2.datafilesoftware.com
02: (server2.datafilesoftware.com [216.7.172.196])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Sun, 19 Aug 2012 xx:xx:xx +0200 (CEST)
07: Received: (qmail 21593 invoked by UID: [UID filtered]
08: Received: from ks39220.kimsufi.com by server2.datafilesoftware.com
09: (envelope-from <info [at] winwebmail.com>, UID: [UID filtered]
10:  (clamdscan: 0.95.2/15270. spamassassin: 3.2.5. perlscan: 2.06st.
11:  Clear:RC:0(91.121.21.8):SA:0(?/?):.
12:  Processed in 3.118688 secs); 19 Aug 2012 xx:xx:xx -0000
13: Received: from ks39220.kimsufi.com (HELO User) (91.121.21.8)
14:   by 216.7.172-201.static.data393.net with SMTP; 19 Aug 2012 xx:xx:xx
15: +0100

IP: 91.121.21.8 ---> OVH

fundawardpanelminna@virgilio.it

admin@nigerstatejudicialcommission.org

ezeemoi@yahoo.com

Muguphon: +234-8-101-3062 ---> Nigeria

Muguphon: +234-1-881-2104 ---> Lagos, Nigeria

[kjz1]

Einen Mugu hätt' ich noch:

header:

01: Received: from mail.unwired.com.fj (EHLO mail.unwired.com.fj)
02: [202.151.16.164]
03:   by mx0.gmx.net (mx058) with SMTP; 23 Aug 2012 xx:xx:xx +0200
04: Received: from vms1.unwired.com.fj (localhost [127.0.0.1])
05: 	by mail.unwired.com.fj (ReinMail) with ESMTP ID: [ID filtered]
06: 	Thu, 23 Aug 2012 xx:xx:xx +1200 (FJT)
07: X-Virus-Scanned: amavisd-new at mail.unwired.com.fj
08: Received: from mail.unwired.com.fj ([127.0.0.1])
09: 	by vms1.unwired.com.fj (mail.unwired.com.fj [127.0.0.1]) (amavisd-new,
10: port 10024)
11: 	with ESMTP ID: [ID filtered]
12: Received: from User (unknown [41.203.65.220])
13: 	by mail.unwired.com.fj (ReinMail) with ESMTPA ID: [ID filtered]
14: 	Thu, 23 Aug 2012 xx:xx:xx +1200 (FJT)

IP: 41.203.65.220 ---> GLO-Mobile Network Services, Nigeria

kimj919@hotmail.co.uk

kimj919@hsonline.com

[kjz1]

Und der hier kann's auch nicht lassen:

der Yahoo/ATT-Mugu wieder mal:

header:

01: Received: from [173.245.64.187] by web182205.mail.bf1.yahoo.com via
02: HTTP; Tue, 21 Aug 2012 xx:xx:xx PDT

IP: 173.245.64.187 ---> egihosting.com

webq09091@att.net

mr.victoredward3@yahoo.com.hk

[kjz1]

Und wieder mal ist Mugu-Time:

header:

01: Received: from [196.209.239.92] by web2818.biz.mail.ne1.yahoo.com via
02: HTTP; Wed, 29 Aug 2012 xx:xx:xx PDT

IP: 196.209.239.92 ---> 196-209-239-92.dynamic.isadsl.co.za

infomation492@gmail.com

ronidamba2012@gmail.com

Muguphone: + 277 39726031 ---> MTN, South Africa


Heute wahrscheinlich derselbe Mugu (beide Male war der Mugu zu blöd, sich ein eigenes Märchen auszudenken; jedesmal deshalb das Dokument eines anderen Märchenfabulierers als Anhang):

header:

01: Received: from [41.241.186.183] by web2815.biz.mail.ne1.yahoo.com via
02: HTTP; Mon, 03 Sep 2012 xx:xx:xx PDT

IP: 41.241.186.183 ---> dsl-241-186-183.telkomadsl.co.za

iinfo880@gmail.com

dredwardnelson30@gmail.com

Muguphon: +277-12 823 442 ---> Vodacom, South Africa


der Sternchen-Mugu:

header:

01: Received: from srv13.cineteck.net (EHLO srv13.cineteck.net) [194.24.228.53]
02:   by mx0.gmx.net (mx020) with SMTP; 29 Aug 2012 xx:xx:xx +0200
03: Received: (qmail 27814 invoked from network); 29 Aug 2012 xx:xx:xx +0200
04: Received: from h-68-165-251-98.nycmny83.static.covad.net (HELO User)
05: (68.165.251.98)
06:   by srv13.cineteck.net with SMTP; 29 Aug 2012 xx:xx:xx +0200

*THE PRESIDENCY. FEDERAL REPUBLIC OF NIGERIA.*
**
**
*From the desk of Chief Anyim Pius Anyim,*
*Secretary to the Government of the Federation.*

sec.gov.nig@gmail.com

sec.gov.nig2@gmail.com

Muguphon: +234 8020745180 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from ms1.cangqi.com (unknown [61.177.59.11])
02: 	by spammotel.com (Postfix) with ESMTPS ID: [ID filtered]
03: 	for xxxxx; Wed, 29 Aug 2012 xx:xx:xx -0400 (EDT)

IP: 61.177.59.11 ---> CHINANET SHANDONG

lin@cangqi.com

atkin@adexec.com

Muguphon: +44-790 2796233 ---> Telefonica UK Limited/O2


die Madrid-Konnektion:

header:

01: Received: from User (europromo0012 [at] 86.96.200.78 with login)
02:         by smtp113.mail.ne1.yahoo.com with SMTP; 02 Sep 2012 xx:xx:xx
03: -0700 PDT

IP: 86.96.200.78 ---> Emirates Telecommunications

europromo012@yahoo.es

europromo0012@e-mail.ua

euro.promo012@e-mail.ua

Muguphon: +34-634-119-039 ---> Vodafone España, S.a.u.

Mugufax: +34-911-820-118 ---> Jazz Telecom, S.a.u., Espana