Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

der neue Mugu-Flashmob:

der Sternchen-Mugu:

header:

01: Received: from mail.clearmail.com.au (EHLO fatbot.day3.com.au)
02: [203.168.34.60]
03:   by mx0.gmx.net (mx049) with SMTP; 01 Aug 2010 xx:xx:xx +0200
04: Received: from User (unknown [82.128.106.170])
05: 	by fatbot.day3.com.au (Postfix) with ESMTPSA ID: [ID filtered]
06: 	Mon,  2 Aug 2010 xx:xx:xx +1000 (EST)

IP: 82.128.106.170 ---> Multilinks Telecommunications Limited, Nigeria

Muguphon: +44 704 571 3136 ---> Open Telecom International Ltd., UK

Mugufax: +44 756 193 1695 ---> Telefonica O2 (UK) Limited

Freenet auch mal wieder dabei:

header:

01: Received: from mout0.freenet.de (EHLO mout0.freenet.de) [195.4.92.90]
02:   by mx0.gmx.net (mx033) with SMTP; 01 Aug 2010 xx:xx:xx +0200
03: Received: from [195.4.92.22] (helo=12.mx.freenet.de)
04: 	by mout0.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.72 #3)
06: 	ID: [ID filtered]
07: Received: from [84.40.9.174] (port=55809 helo=User)
08: 	by 12.mx.freenet.de with esmtpa (ID: [ID filtered]
09: 587) (Exim 4.72 #3)
10: 	ID: [ID filtered]

IP: 84.40.9.174 ---> Hostway EU Network Management

header:

01: Received: from panel.serveiswebferreries.info (unknown [85.238.3.18])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Mon,  2 Aug 2010 xx:xx:xx +0200 (CEST)
06: Received: from panel.serveiswebferreries.info (unknown [127.0.0.1])
07: 	by panel.serveiswebferreries.info (Postfix) with ESMTP ID: [ID filtered]
08: 	for xxxxx; Sun,  1 Aug 2010 xx:xx:xx +0000 (UTC)
09: Received: by panel.serveiswebferreries.info (Postfix, from userID: [ID filtered]
10: 	ID: [ID filtered]

Muguphon: +34 672 560 757 ---> Vodafone España, S.a.u.

Mugufax: +34 912 919 870 ---> Jazz Telecom, S.a.u.

header:

01: Received: from smtpgate1.pacific.net.sg (smtpgate1.pacific.net.sg
02: [192.169.41.31])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  2 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 31429 invoked from network); 2 Aug 2010 xx:xx:xx -0000
06: Received: from 24-197-19-39.dhcp.leds.al.charter.com (HELO
07: santrex-0b61127) (ibha [at] 24.197.19.39)
08:   by smtpgate1.pacific.net.sg with ESMTPA; 2 Aug 2010 xx:xx:xx -0000

header:

01: Received: from web83907.mail.sp1.yahoo.com (HELO
02: web83907.mail.sp1.yahoo.com) [69.147.92.109]
03:   by mx0.gmx.net (mx011) with SMTP; 02 Aug 2010 xx:xx:xx +0200
04: Received: (qmail 25026 invoked by UID: [UID filtered]
05: Received: from [165.146.49.69] by web83907.mail.sp1.yahoo.com via HTTP;
06: Mon, 02 Aug 2010 xx:xx:xx PDT

IP: 165.146.49.69 ---> dsl-146-49-69.telkomadsl.co.za

Muguphon: +27 710 560 595 ---> MTN, ZA

Mugufax: +27 86 218 5124 ---> premium rate number, ZA

Und wieder:

header:

01: Received: from web1207.biz.mail.gq1.yahoo.com
02: (web1207.biz.mail.gq1.yahoo.com [67.195.14.54])
03: 	by xxxxx  (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue,  3 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 30478 invoked by UID: [UID filtered]
06: Received: from [41.245.55.217] by web1207.biz.mail.gq1.yahoo.com via
07: HTTP; Tue, 03 Aug 2010 xx:xx:xx PDT

IP: 41.245.55.217 ---> dsl-245-55-217.telkomadsl.co.za

Muguphon: +27 73 245 3855 ---> MTN, ZA

header:

01: Received: from mta7.hosting.tp.pl (outgoing.hosting.tp.pl [193.110.120.20])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  4 Aug 2010 xx:xx:xx +0200 (CEST)
04: MIME-version: 1.0
05: Content-transfer-encoding: 7BIT
06: Content-type: text/plain; charset=Windows-1251
07: Received: from User ([115.133.223.86]) by mta7.hosting.tp.pl (m7)
08:  with ESMTPA ID: [ID filtered]
09:  xxxxx; Wed, 04 Aug 2010 xx:xx:xx +0200 (CEST)

IP: 115.133.223.86 ---> TELEKOM MALAYSIA BERHAD

Und wieder:

header:

01: Received: from web1201.biz.mail.gq1.yahoo.com
02: (web1201.biz.mail.gq1.yahoo.com [67.195.14.48])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Wed,  4 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 15899 invoked by UID: [UID filtered]
06: Received: from [41.245.32.3] by web1201.biz.mail.gq1.yahoo.com via HTTP;
07: Wed, 04 Aug 2010 xx:xx:xx PDT

IP: 41.245.32.3 ---> dsl-245-32-03.telkomadsl.co.za

Muguphon: +27 7228 4574 ---> Vodacom, ZA

header:

01: Received: from MAIL.starmimi.local (220-128-134-149.HINET-IP.hinet.net
02: [220.128.134.149])
03: 	(using TLSv1 with cipher AES128-SHA (128/128 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Fri,  6 Aug 2010 xx:xx:xx +0200 (CEST)
07: Received: from User (41.138.167.220) by mail.star-mimi.com.tw
08: (192.168.147.1)
09:  with Microsoft SMTP Server ID: [ID filtered]
10: +0800

IP: 41.138.167.220 ---> Visafone Communications Limited, Nigeria

Muguphon: +6687934360 ---> mobile number, Thailand

- kjz

Wer hat noch nicht, wer will noch mal...

header:

01: Received: from gps02-c08d7.vodafone.net (mailer.vodafone.net
02: [212.183.156.227])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  2 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from [10.70.175.75] (127.0.0.1) by gps02-c08d7.vodafone.net
06: (NPlex 6.0.021C4.14)
07:         ID: [ID filtered]

header:

01: Received: from ccta.vwh.net (EHLO skipsmusic.com) [128.121.113.133]
02:   by mx0.gmx.net (mx059) with SMTP; 03 Aug 2010 xx:xx:xx +0200
03: Received: from User ([41.138.167.250])
04: 	(authenticated bits=0)
05: 	by skipsmusic.com (8.12.11.20060614/8.12.11) with ESMTP ID: [ID filtered]
06: 	Tue, 3 Aug 2010 xx:xx:xx -0600 (MDT)

IP: 41.138.167.250 ---> Visafone Communications Limited, Nigeria

header:

01: Received: from smtp2c.orange.fr (EHLO smtp2c.orange.fr) [80.12.242.154]
02:   by mx0.gmx.net (mx046) with SMTP; 03 Aug 2010 xx:xx:xx +0200
03: Received: from me-wanadoo.net (localhost [127.0.0.1])
04: 	by mwinf2c11.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
05: 	Tue,  3 Aug 2010 xx:xx:xx +0200 (CEST)
06: Received: from me-wanadoo.net (localhost [127.0.0.1])
07: 	by mwinf2c11.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
08: 	Tue,  3 Aug 2010 xx:xx:xx +0200 (CEST)
09: Received: from User (AToulon-256-1-119-235.w90-14.abo.wanadoo.fr
10: [90.14.198.235])
11: 	by mwinf2c11.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
12: 	Tue,  3 Aug 2010 xx:xx:xx +0200 (CEST)

Muguphon: +1 208 643 9657 ---> Level 3 Communications

gecracktes SquirrelMail:

header:

01: Received: from mail.polije.ac.ID: [ID filtered]
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Wed,  4 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from mail.polije.ac.ID: [ID filtered]
05: 	by mail.polije.ac.ID: [ID filtered]
06: 	Wed,  4 Aug 2010 xx:xx:xx +0700 (WIT)
07: Received: from 82.128.3.27
08:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
09:         by mail.polije.ac.ID: [ID filtered]
10:         Wed, 4 Aug 2010 xx:xx:xx +0700

IP: 82.128.3.27 ---> ml82.128.3.27.multilinks.com, Nigeria

Muguphon: +234 805 32 88 77 1 ---> Globacom Ltd., Nigeria

der Sternchen-Mugu:

header:

01: Received: from www.mscm.ru (unknown [217.23.156.44])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Thu,  5 Aug 2010 xx:xx:xx +0200 (CEST)
06: Received: from [173.234.16.90] (helo=User)
07: 	by www.mscm.ru with esmtpa (Exim 4.66)
08: 	(envelope-from <jamespatton000ju [at] hotmail.co.uk>)
09: 	ID: [ID filtered]

IP: 173.234.16.90 ---> 173.234.16.90.rdns.ubiquityservers.com

header:

01: Received: from unknown (EHLO zsemail.com) [219.128.51.98]
02:   by mx0.gmx.net (mx025) with SMTP; 05 Aug 2010 xx:xx:xx +0200 
03: Received: from User (unknown [8.9.209.2])
04: 	by zsemail.com (HERMES) with ESMTP ID: [ID filtered]
05: 	Thu,  5 Aug 2010 xx:xx:xx +0800 (CST)

Muguphon: +44 704 573 0596 ---> Open Telecom International Ltd., UK

header:

01: Received: from mail.mcnamaraandaustin.com (EHLO MAFP.mafirm.local)
02: [74.2.87.8]
03:   by mx0.gmx.net (mx112) with SMTP; 05 Aug 2010 xx:xx:xx +0200
04: Received: from User ([82.128.81.224]) by MAFP.mafirm.local with
05: Microsoft SMTPSVC(6.0.3790.1830);
06: 	 Thu, 5 Aug 2010 xx:xx:xx -0500

IP: 82.128.81.224 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from unknown (EHLO aerosun.cn) [61.155.7.59]
02:   by mx0.gmx.net (mx069) with SMTP; 05 Aug 2010 xx:xx:xx +0200 
03: Received: (eyou send program); Thu, 05 Aug 2010 xx:xx:xx +0800
04: Received: from unknown (HELO user) (unknown [at] 195.117.61.5)
05:  by 61.155.7.59 with SMTP; Thu, 05 Aug 2010 xx:xx:xx +0800

IP: 195.117.61.5 ---> INTER-SAT, PL

header:

01: Received: from 254-168.thezone.bg (EHLO mx4.hotmail.com) [85.217.254.168]
02:   by mx0.gmx.net (mx069) with SMTP; 06 Aug 2010 xx:xx:xx +0200

Muguphon: +27 83 687 6562 ---> MTN, ZA

gecracktes SquirrelMail:

header:

01: Received: from mail.skylinemail.dk (skyline02.secnetserver.dk
02: [195.182.204.107])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Fri,  6 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: (qmail 17513 invoked by UID: [UID filtered]
06: Cc: recipient list not shown: ;
07: Received: from 188.65.178.160 (proxying for 41.138.184.186)
08:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
09:         by skylinemail.dk with HTTP;
10:         Fri, 6 Aug 2010 xx:xx:xx +0200 (CEST)

IP: 41.138.184.186 ---> Visafone Communications Limited, Nigeria

header:

01: Received: from unknown (EHLO mail.818.cn) [113.11.202.184]
02:   by mx0.gmx.net (mx043) with SMTP; 06 Aug 2010 xx:xx:xx +0200
03: Received: from localhost (mail [127.0.0.1])
04: 	by mail.818.cn (EMOS V1.5 (Postfix)) with ESMTP ID: [ID filtered]
05: 	Fri,  6 Aug 2010 xx:xx:xx +0800 (CST)
06: X-Virus-Scanned: amavisd-new at 818.cn
07: X-Spam-Flag: YES
08: X-Spam-Score: 12.492
09: X-Spam-Level: ************
10: X-Spam-Status: Yes, score=12.492 tagged_above=-10 required=5
11: 	tests=[DSPAM:Innocent=-1.000, ADVANCE_FEE_2=2.049,
12: 	ADVANCE_FEE_3=1.435, ADVANCE_FEE_4=1.502, ALL_TRUSTED=-1.44,
13: 	DEAR_SOMETHING=2.234, DSPAM_HAM_99=-3.23, FH_DATE_PAST_20XX=3.384,
14: 	FORGED_MUA_OUTLOOK=4.199, MILLION_USD=1.777, MISSING_HEADERS=1.581,
15: 	MISSING_MID=0.001] autolearn=unavailable
16: Received: from mail.818.cn ([127.0.0.1])
17: 	by localhost (mail.818.cn [127.0.0.1]) (amavisd-new, port 10024)
18: 	with ESMTP ID: [ID filtered]
19: Received: from User (ppp-124-120-138-144.revip2.asianet.co.th
20: [124.120.138.144])
21: 	by mail.818.cn (EMOS V1.5 (Postfix)) with ESMTPA ID: [ID filtered]
22: 	Fri,  6 Aug 2010 xx:xx:xx +0800 (CST)

IP: 113.11.202.184 ---> Beijing Digiland media technology Co. Ltd

Ist ja toll, mail.818.cn erhält den Dreck von enem Zombie, führt dann eine Spamprüfung aus (die natürlich voll positiv ausfällt) und bläst den Dreck trotzdem weiterhin in alle Welt? Kann man wirklich so total hirnlos sein oder ist das Vorsatz? Der Webmaster hat sich seinen Eintrag hier jedenfalls redlich verdient:

header:

01: Received: from lon1-post-3.mail.demon.net (EHLO
02: lon1-post-3.mail.demon.net) [195.173.77.150]
03:   by mx0.gmx.net (mx094) with SMTP; 06 Aug 2010 xx:xx:xx +0200
04: Received: from stirling.allengordon.co.uk ([80.177.60.226]
05: helo=AGSTRDC08.allengordon.local)
06: 	by lon1-post-3.mail.demon.net with esmtp (Exim 4.69)
07: 	ID: [ID filtered]
08: Received: from alldc.allengordon.local (192.168.0.100) by
09:  AGSTRDC08.allengordon.local (192.168.160.1) with Microsoft SMTP Server id
10:  14.0.639.21; Fri, 6 Aug 2010 xx:xx:xx +0100
11: Received: from User ([83.70.129.73]) by alldc.allengordon.local with
12: Microsoft
13:  SMTPSVC(6.0.3790.4675); Fri, 6 Aug 2010 xx:xx:xx +0100

IP: 83.70.129.73 ---> Eircom Customer Assignment/KARLMCDONALDACCOUNTANTS

Und wieder mal gecracktes SquirrelMail (gibt's für die Mugus bei den Russkis anscheinend gerade im Sonderangebot...):

header:

01: Received: from in200.mailtempresas.com.ar (in200.mailtempresas.com.ar
02: [200.51.80.116])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
06: 	for xxxxx; Sat,  7 Aug 2010 xx:xx:xx +0200 (CEST)
07: Received: by memta200.backend.mailempresas.net (Postfix, from userID: [ID filtered]
08: 	ID: [ID filtered]
09: Received: from meprx203.backend.mailempresas.net
10: (meprx203.backend.mailempresas.net [10.105.179.203])
11: 	by memta200.backend.mailempresas.net (Postfix) with ESMTP ID: [ID filtered]
12: 	Sat,  7 Aug 2010 xx:xx:xx -0300 (ART)
13: Received: by meprx203.backend.mailempresas.net (Postfix, from userID: [ID filtered]
14: 	ID: [ID filtered]
15: Received: from 85.214.149.35 (proxying for unknown)
16:         (SquirrelMail authenticated user poor [at] spamvictim.tld)
17:         by webmail.adecco.com.ar with HTTP;
18:         Sat, 7 Aug 2010 xx:xx:xx -0300 (ART)

IP: 85.214.149.35 ---> ems03.your-freedom.de/Strato

Muguphon: +2348066206773 ---> MTN Nigeria Communications Ltd.

header:

01: Received: from smtp.seznam.cz (unknown [77.75.72.43])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  7 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from User (unknown [195.117.61.4])
05: 	by email-relay2.go.seznam.cz (Seznam SMTPD 1.1.7 [at] 13984) with ESMTP;
06: 	Sat, 07 Aug 2010 xx:xx:xx +0200 (CEST)

IP: 195.117.61.4 ---> INTER-SAT, PL

auch mal die Rumänen:

header:

01: Received: from mail.trailmax.com (EHLO trailmax.com) [70.102.142.202]
02:   by mx0.gmx.net (mx069) with SMTP; 08 Aug 2010 xx:xx:xx +0200
03: Received: from User ([89.39.202.40]) by trailmax.com with Microsoft
04: SMTPSVC(6.0.3790.3959);
05: 	 Sat, 7 Aug 2010 xx:xx:xx -0600

IP: 89.39.202.40 ---> 89-39-202-40-broadband.gemenii.ro

Muguphon: +0786.104.485 ---> Zapp Mobile (CDMA2000), RO

header:

01: Received: from proxy.incompany.ru (EHLO hoster.incompany.ru) [83.167.0.5]
02:   by mx0.gmx.net (mx028) with SMTP; 08 Aug 2010 xx:xx:xx +0200
03: Received: by hoster.incompany.ru (Postfix, from userID: [ID filtered]
04: 	ID: [ID filtered]
05: Received: from User (unknown [41.211.233.178])
06: 	by hoster.incompany.ru (Postfix) with ESMTP ID: [ID filtered]
07: 	Sun,  8 Aug 2010 xx:xx:xx +0600 (YEKST)

IP: 41.211.233.178 ---> 178.233.211.41.client178.directonpc.net, Nigeria

header:

01: Received: from satu.pelayanweb.com (EHLO satu.pelayanweb.com)
02: [202.71.109.31]
03:   by mx0.gmx.net (mx041) with SMTP; 07 Aug 2010 xx:xx:xx +0200
04: Received: from [127.0.0.1] (helo=satu.pelayanweb.com)
05: 	by satu.pelayanweb.com with esmtpa (Exim 4.69)
06: 	(envelope-from <women [at] rights.com.my>)
07: 	ID: [ID filtered]
08: Received: from User ([58.8.132.140] helo=User) with IPv4:25 by
09: 	satu.pelayanweb.com; 8 Aug 2010 xx:xx:xx +0800

IP: 58.8.132.140 ---> ppp-58-8-132-140.revip2.asianet.co.th

Muguphon: +66-892-290-016 ---> mobile number, Thailand

- kjz

11.08.2010, 11:58
cmds

Neuer Mitspieler?
header:
```
01: Received: (qmail 13957 invoked from network); 11 Aug 2010 xx:xx:xx +0000
02: Received-SPF: pass (XXXXX.netfabrik.de: domain of juventusmember.com designates
03: 	212.66.107.150 as permitted sender) client-ip=212.66.107.150;
04: 	envelope-from=denise [at] juventusmember.com; helo=mailserver.juventusmember.com;
05: Received: from mail.juventusmember.com (HELO mailserver.juventusmember.com)
06: 	(212.66.107.150)
07:   by XXXXXX.vserver.de with SMTP; 11 Aug 2010 xx:xx:xx +0000
08: Received: by mailserver.juventusmember.com (Postfix, from userID: [ID filtered]
09:     ID: [ID filtered]
10: To: undisclosed-recipients:;
11: Subject: PERSONALLY TO YOU!!!
12: MIME-Version: 1.0
13: Date: Wed, 11 Aug 2010 xx:xx:xx +0200
14: From: "Mr. George Padmore" <denise [at] juventusmember.com>
15: Reply-To: <gpadmore3030 [at] gmail.com>
```
zuerst sollte er lernen, sein Script korrekt auszufüllen.
?? Mio irgendwas in 0.00 Noten?

Zitat:

From: Mr.George Padmore
Tel: +44 7024076915

Dearest Friend,

I want

to bring to your knowledge of a very lucrative business opportunity that I

have.Well I work as an
agent that accompanies contractors funds to be paid

to them i have this deal and i won't mind you in it if
you promise to keep

optimum confidentiality.

The consignment consists of two boxes, the boxes

contains about million all in 0.00 bills this money
was accompanied by me

to U.S.A and was handed over to a diplomat .The name of the Diplomat will

be
given to you as soon as you indicate your interest.

You will Call the

diplomat and tell him that you are calling on behalf of Mr. George Padmore

that handed
the consignment to him, Also ask him how much it will cost to

clear out this consignments, bear in mind
that he is not aware of the

content of the boxes, it was registered as FAMILY VALUABLES, you know

that
this consignment has been there for the past 4 month where I am

looking for a trust worthy person to get it
out.

This money was meant for

the contractors that executed their contracts bear in mind that i am ready

to
release 40% of the total money to you for your help; I will be expecting

your reply today and also a call on
(+44) 7024034781 and please send to me

your phone and fax number if interested.

Regards,

Mr. George

Padmore
(+44) 7024076915

geärgert werden möchte:
11.08.2010, 21:09
kjz1
Ausnahmsweise mal in ganzer Länge, da eine besonders perfide Masche. Unter dem Vorwand zu helfen, versucht man Mugu-Opfer ein zweites Mail abzuzocken:

header:
```
01: Received: from www.youtake.com.tw (59-124-5-69.HINET-IP.hinet.net
02: [59.124.5.69])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 11 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost.localdomain [127.0.0.1])
06: 	by www.youtake.com.tw (Postfix) with SMTP ID: [ID filtered]
07: 	Tue, 10 Aug 2010 xx:xx:xx +0800 (CST)
08: Received: from User (mail.cesana.co.uk [81.136.228.157])
09: 	by www.2youtake.com.tw (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 10 Aug 2010 xx:xx:xx +0800 (CST)
```
Zitat:

Attn: My Dear,

I am Acton Crystal Leann, I am a US citizen, 48 years Old. I reside here in
New Braunfels Texas. My residential address is as follows. 385 Briar Oak Lane
Round Rock, Texas United States, am thinking of relocating since I
am now rich. I am one of those that took part in the Compensation in Nigeria
many years ago and they refused to pay me, I had paid over US$20,000 while in
the US, trying to get my payment all to no avail.

So I decided to travel down to Nigeria with all my compensation documents, And I
was directed to meet Barrister Ben Onyido, who is the member of COMPENSATION
AWARD COMMITTEE, and I contacted him and he explained everything to me. He said
whoever is contacting us through emails are fake.

He took me to the paying bank for the claim of my Compensation payment. Right
now I am the most happiest woman on earth because I have received my
compensation funds of $1,500,000.00 Moreover, Barrister Ben Onyido, showed me
the full information of those that are yet to receive their payments and I saw
your name as one of the beneficiaries, and your email address, that is why I
decided to email you to stop dealing with those people, they are not with your
fund, they are only making money out of you. I will advise you to contact
Barrister Ben Onyido.

You have to contact him directly on this information below.

COMPENSATION AWARD HOUSE
Name : Barrister Ben Onyido (Esq)
Email:

You really have to stop dealing with those people that are contacting you and
telling you that your fund is with them, it is not in anyway with them, they are
only taking advantage of you and they will dry you up until you have nothing.

The only money I paid after I met Barrister Ben Onyido was just US$480 for
the paper works, take note of that.

Once again stop contacting those people, I will advise you to contact Barrister
Ben Onyido so that he can help you to Deliver your fund instead of dealing
with those liars that will be turning you around asking for different kind of
money to complete your transaction.

Thank You and Be Blessed.

Truly,
Acton, Crystal Leann.

- kjz

Und wieder eine Woche vorbei....

header:

01: Received: from ario.com.tw (59-120-61-52.HINET-IP.hinet.net [59.120.61.52])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon,  9 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by ario.com.tw (Postfix) with SMTP ID: [ID filtered]
06: 	Sat,  7 Aug 2010 xx:xx:xx +0800 (CST)
07: Received: from User (unknown [201.194.134.138])
08: 	by ario.com.tw (Postfix) with ESMTPA ID: [ID filtered]
09: 	Sat,  7 Aug 2010 xx:xx:xx +0800 (CST)

IP: 201.194.134.138 ---> HEREDIA, CR

Muguphon: +234 802 075 2155 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from BESTSHOWTICKETSLASVEGAS.COM (bestshowticketslasvegas.com
02: [70.101.240.88])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Mon,  9 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from User [89.39.202.40] by BESTSHOWTICKETSLASVEGAS.COM with ESMTP
06:   (SMTPD-8.22) ID: [ID filtered]

IP: 89.39.202.40 ---> 89-39-202-40-broadband.gemenii.ro

header:

01: Received: from mout7.freenet.de (EHLO mout7.freenet.de) [195.4.92.97]
02:   by mx0.gmx.net (mx109) with SMTP; 09 Aug 2010 xx:xx:xx +0200
03: Received: from [195.4.92.21] (helo=11.mx.freenet.de)
04: 	by mout7.freenet.de with esmtpa (ID: [ID filtered]
05: (port 25) (Exim 4.72 #3)
06: 	ID: [ID filtered]
07: Received: from [194.187.213.194] (port=53716 helo=User)
08: 	by 11.mx.freenet.de with esmtpa (ID: [ID filtered]
09: (port 587) (Exim 4.72 #3)
10: 	ID: [ID filtered]

IP: 194.187.213.194 ---> TENUE-NET, FI

Muguphon: +234 802 721 2958 ---> Celtel Nigeria Limited/Zain

header:

01: Received: from 208.43.64.143-static.strong-sl2.reliablehosting.com (EHLO
02: mx4.hotmail.com) [208.43.64.143]
03:   by mx0.gmx.net (mx046) with SMTP; 10 Aug 2010 xx:xx:xx +0200

Muguphon: +27 83 687 6562 ---> MTN, ZA

header:

01: Received: from iport1.isc.cl (EHLO iport1.isc.cl) [64.76.162.208]
02:   by mx0.gmx.net (mx042) with SMTP; 11 Aug 2010 xx:xx:xx +0200
03: Received: from ms01.isc (HELO mail.isc.cl) ([172.31.1.8])
04:   by iport1.isc.cl with ESMTP; 11 Aug 2010 xx:xx:xx -0400
05: Received: from User (58.11.100.197) by mail.isc.cl (8.0.010)
06: (authenticated as contacto [at] compass-group.cl)
07:         ID: [ID filtered]

IP: 8.11.100.197 ---> ppp-58-11-100-197.revip2.asianet.co.th

Muguphon: +66-892-290-016 ---> mobile number, Thailand

header:

01: Received: from unknown (EHLO mx4.hotmail.com) [67.21.81.50]
02:   by mx0.gmx.net (mx077) with SMTP; 11 Aug 2010 xx:xx:xx +0200

IP: 67.21.81.50 ---> SHARKTECH

Muguphon: +27 735 537 484 ---> MTN, ZA

header:

01: Received: from servermail.perusat.net.pe (mail.perusat.net.pe
02: [190.12.82.217])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Thu, 12 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([87.28.250.168]) by servermail.perusat.net.pe with
06: Microsoft SMTPSVC(6.0.3790.4675);
07: 	 Thu, 12 Aug 2010 xx:xx:xx -0500

IP: 87.28.250.168 ---> host168-250-static.28-87-b.business.telecomitalia.it

header:

01: eceived: from server1.vaahoo.com (EHLO server1.vaahoo.com) [188.72.244.188]
02:   by mx0.gmx.net (mx105) with SMTP; 12 Aug 2010 xx:xx:xx +0200
03: Received: from ml82.128.1.44.multilinks.com ([82.128.1.44] helo=User)
04: 	by server1.vaahoo.com with esmtpa (Exim 4.69)
05: 	(envelope-from <jsnhoker [at] gmail.com>)
06: 	ID: [ID filtered]

IP: 82.128.1.44 ---> Multilinks, Nigeria

header:

01: Received: from auron.gtechnics.com (unknown [92.45.83.16])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Fri, 13 Aug 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 5329 invoked from network); 11 Aug 2010 xx:xx:xx +0300
07: Received: from unknown (HELO User) (41.217.65.14)
08:   by ozgul.gtechnics.com with SMTP; 11 Aug 2010 xx:xx:xx +0300

IP: 41.217.65.14 ---> ZOOM Mobile Nigeria Ltd.

header:

01: Received: from outgoing.hosting.tp.pl (EHLO mta7.hosting.tp.pl)
02: [193.110.120.20]
03:   by mx0.gmx.net (mx083) with SMTP; 13 Aug 2010 xx:xx:xx +0200
04: Received: from User ([120.140.75.187]) by mta7.hosting.tp.pl (m7)
05:  with ESMTPA ID: [ID filtered]
06:  13 Aug 2010 xx:xx:xx +0200 (CEST)

IP: 120.140.75.187 ---> Packet One Networks (M) Sdn, MY

- kjz

Da sind noch mehr, da draussen:

header:

01: Received: from mailout2-15.pacific.net.au (EHLO mailout2.pacific.net.au)
02: [125.255.80.142]
03:   by mx0.gmx.net (mx007) with SMTP; 10 Aug 2010 xx:xx:xx +0200
04: Received: from User (220-245-167-141.static.tpgi.com.au [220.245.167.141])
05: 	by mailout2.pacific.net.au (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 11 Aug 2010 xx:xx:xx +1000 (EST)

header:

01: Received: from www.youtake.com.tw (59-124-5-69.HINET-IP.hinet.net
02: [59.124.5.69])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 11 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from localhost (localhost.localdomain [127.0.0.1])
06: 	by www.youtake.com.tw (Postfix) with SMTP ID: [ID filtered]
07: 	Tue, 10 Aug 2010 xx:xx:xx +0800 (CST)
08: Received: from User (mail.cesana.co.uk [81.136.228.157])
09: 	by www.youtake.com.tw (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 10 Aug 2010 xx:xx:xx +0800 (CST)

header:

01: Received: from mx4.hotmail.com ([67.21.81.50])
02: 	by mx.kundenserver.de (node=mxeu5) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: xx:xx:xx +0200

IP: 67.21.81.50 ---> SHARKTECH

Muguphon: +27 735 537 484 ---> MTN, ZA

Mugufax: +27 865 182 547 ---> premium rate number, South Africa

header:

01: Received: from fwj.mosac.cn (unknown [202.106.110.151])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 12 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([82.128.6.144]) by fwj.mosac.cn with Microsoft
05: SMTPSVC(6.0.3790.4675);
06: 	 Thu, 12 Aug 2010 xx:xx:xx +0800

IP: 82.128.6.144 ---> ml82.128.6.144.multilinks.com, Nigeria

Muguphon: +234-702-774-8537 ---> Multi-links Telecommunications Ltd., Nigeria

header:

01: Received: from 1730-server.outer-net.com (EHLO ceml.ca) [207.112.3.5]
02:   by mx0.gmx.net (mx114) with SMTP; 14 Aug 2010 xx:xx:xx +0200
03: Received: from User ([24.229.246.237]) by ceml.ca with Microsoft
04: SMTPSVC(6.0.3790.4675);
05: 	 Tue, 3 Aug 2010 xx:xx:xx -0400

IP: 24.229.246.237 ---> 24.229.246.237.res-cmts.sm.ptd.net

Muguphon: +34-672-885-729 ---> Vodafone España, S.a.u.

auch diesen Mugu kennen wir schon:

header:

01: Received: from 208.43.64.143-static.strong-sl2.reliablehosting.com (EHLO
02: mx4.hotmail.com) [208.43.64.143]
03:   by mx0.gmx.net (mx102) with SMTP; 14 Aug 2010 xx:xx:xx +0200

Muguphon: +27 83 687 6562 ---> MTN, ZA

der Sternchen-Mugu:

header:

01: Received: from email01.automs.com (mmm.automatedmarketingsolutions.com
02: [69.46.127.92])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sat, 14 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from User (222-27-74-65.gci.net [65.74.27.222])
06: 	by email01.automs.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Sat, 14 Aug 2010 xx:xx:xx -0400 (EDT)

Muguphon: +44 704 5762469 ---> Open Telecom International Ltd., UK

Mugufax: +44 702 4045741 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from auron.gtechnics.com (unknown [92.45.83.16])
02: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: 	(No client certificate requested)
04: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
05: 	for xxxxx; Sun, 15 Aug 2010 xx:xx:xx +0200 (CEST)
06: Received: (qmail 25104 invoked from network); 14 Aug 2010 xx:xx:xx +0300
07: Received: from unknown (HELO User) (41.217.65.13)
08:   by 3oto.gtechnics.com with SMTP; 14 Aug 2010 xx:xx:xx +0300

IP: 41.217.65.13 ---> ZOOM Mobile Nigeria Ltd.

thomasadeniran1@gmail .com

Muguphon: +44 702 4013818 ---> Magrathea Telecommunications Limited, UK

header:

01: Received: from unknown (HELO jiayuesoft.com) [125.72.127.13]
02:   by mx0.gmx.net (mx026) with SMTP; 15 Aug 2010 xx:xx:xx +0200
03: Received: from User ([82.128.69.211])
04: 	(envelope-sender <drfredazumgbala [at] yahoo.cn>)
05: 	by 125.72.127.13 with ESMTP
06: 	for <poor [at] spamvictim.tld>; Sun, 15 Aug 2010 xx:xx:xx +0800

IP: 82.128.69.211 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from unknown (EHLO pdinc.co.jp) [210.160.156.84]
02:   by mx0.gmx.net (mx052) with SMTP; 15 Aug 2010 xx:xx:xx +0200
03: Received: from User (unknown [82.128.36.207])
04: 	by pdinc.co.jp (Postfix) with ESMTP ID: [ID filtered]
05: 	Thu, 12 Aug 2010 xx:xx:xx +0900 (JST)

IP: 82.128.36.207 ---> Multilinks Telecommunications Limited, Nigeria

- kjz

Weiter geht's im Mugu-Land:

der Sternchen-Mugu:

header:

01: Received: from SQL.PSCJ.EDU.SA (unknown [88.85.251.243])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Mon, 16 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([82.128.6.0]) by PSCJ.EDU.SA with MailEnable ESMTP;
05: Sat, 14 Aug 2010 xx:xx:xx +0300

IP: 82.128.6.0 ---> Multilinks Telecommunications Limited, Nigeria

Zitat:

*UNITED NATIONS*
*(WORLD BANK ASSISTED PROGRAMMED)*
*DIRECTORATE OF INTERNATIONAL*
*PAYMENT AND TRANSFERS.*
*870 UNITED NATIONS PLAZA*
*20-A NEW YORK NY 10017*
*WIRE TRANSFER/AUDIT U NIT*
*Our Ref: WB/NF/UN/XX027*......

auch aus Rumänien:

header:

01: Received: from sagerowe.com (host81-149-116-208.in-addr.btopenworld.com
02: [81.149.116.208])
03: 	by xxxxx (Postfix) with SMTP ID: [ID filtered]
04: 	for xxxxx; Tue, 17 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([89.39.202.40]) by sagerowe.com with Microsoft
06: SMTPSVC(6.0.3790.1830);
07: 	 Mon, 16 Aug 2010 xx:xx:xx +0100

header:

01: Received: from mail.mrfconstruction.com (EHLO mail.mrfconstruction.com)
02: [65.101.146.229]
03:   by mx0.gmx.net (mx040) with SMTP; 17 Aug 2010 xx:xx:xx +0200
04: Received: from User ([89.39.202.40]) by mail.mrfconstruction.com with
05: Microsoft SMTPSVC(6.0.3790.3959);
06: 	 Mon, 16 Aug 2010 xx:xx:xx -0700

IP: 89.39.202.40 ---> 89-39-202-40-broadband.gemenii.ro

header:

01: Received: from oldmail2.nju.edu.cn (EHLO mail1.nju.edu.cn) [202.119.32.136]
02:   by mx0.gmx.net (mx095) with SMTP; 17 Aug 2010 xx:xx:xx +0200
03: Received: from User ([41.138.188.236])
04: 	(authenticated bits=0)
05: 	by mail1.nju.edu.cn (8.13.8/8.13.8) with ESMTP ID: [ID filtered]
06: 	Wed, 30 Jun 2010 xx:xx:xx +0800

IP: 41.138.188.236 ---> VISAFONE, LAGOS

header:

01: Received: from mail.frontlineprinting.com (EHLO
02: production-01.frontlineprinting.com) [63.162.82.203]
03:   by mx0.gmx.net (mx095) with SMTP; 17 Aug 2010 xx:xx:xx +0200
04: Received: by production-01.frontlineprinting.com with Internet Mail
05: Service (5.5.2656.59)
06: 	ID: [ID filtered]
07: Received: from User (82.128.83.208 [82.128.83.208]) by
08: production-01.frontlineprinting.com with SMTP (Microsoft Exchange
09: Internet Mail Service Version 5.5.2656.59)
10: 	ID: [ID filtered]

IP: 82.128.83.208 ---> Multilinks Telecommunications Limited, Nigeria

header:

01: Received: from freesia.mschosting.com (EHLO freesia.mschosting.com)
02: [110.4.45.125]
03:   by mx0.gmx.net (mx055) with SMTP; 20 Aug 2010 xx:xx:xx +0200
04: Received: from cpe-76-180-138-158.buffalo.res.rr.com
05: ([76.180.138.158]:1515 helo=User)
06: 	by freesia.mschosting.com with esmtpa (Exim 4.69)
07: 	(envelope-from <loans [at] sentral.edu.my>)
08: 	ID: [ID filtered]

- kjz

Da war doch noch was....

und wieder ein gecrackter Account, Speedy zum ersten:

header:

01: Received: from mout7.freenet.de (EHLO mout7.freenet.de) [195.4.92.97]
02:   by mx0.gmx.net (mx004) with SMTP; 17 Aug 2010 xx:xx:xx +0200
03: Received: from [195.4.92.26] (helo=16.mx.freenet.de)
04: 	by mout7.freenet.de with esmtpa (ID: [ID filtered]
05: 25) (Exim 4.72 #3)
06: 	ID: [ID filtered]
07: Received: from 201-251-63-26.static.speedy.com.ar ([201.251.63.26]:1333
08: helo=User)
09: 	by 16.mx.freenet.de with esmtpa (ID: [ID filtered]
10: 587) (Exim 4.72 #3)
11: 	ID: [ID filtered]

IP: 201.251.63.26 ---> 201-251-63-26.static.speedy.com.ar

Muguphon: +234-805-370-3511 ---> Globacom Ltd., Nigeria

via Spamadoo:

header:

01: Received: from smtp20.orange.fr (smtp20.orange.fr [80.12.242.26])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 17 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2016.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Tue, 17 Aug 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2016.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Tue, 17 Aug 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (LMontsouris-152-62-31-188.w80-13.abo.wanadoo.fr
11: [80.13.30.188])
12: 	by mwinf2016.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Tue, 17 Aug 2010 xx:xx:xx +0200 (CEST)

1. Versuch:

header:

01: Received: from mail.centralfilms.net (EHLO centralfilms.net)
02: [201.144.241.226]
03:   by mx0.gmx.net (mx060) with SMTP; 18 Aug 2010 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by centralfilms.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 18 Aug 2010 xx:xx:xx -0500 (CDT)
07: Received: from centralfilms.net ([127.0.0.1])
08:  by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
09:  ID: [ID filtered]
10: Received: from User (unknown [82.128.62.249])
11: 	by centralfilms.net (Postfix) with ESMTP ID: [ID filtered]
12: 	Wed, 18 Aug 2010 xx:xx:xx -0500 (CDT)

IP: 82.128.62.249 ---> Multilinks Telecommunications Limited, Nigeria

2. Versuch:

header:

01: Received: from mail.centralfilms.net (EHLO centralfilms.net)
02: [201.144.241.226]
03:   by mx0.gmx.net (mx028) with SMTP; 19 Aug 2010 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by centralfilms.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 19 Aug 2010 xx:xx:xx -0500 (CDT)
07: Received: from centralfilms.net ([127.0.0.1])
08:  by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
09:  ID: [ID filtered]
10: Received: from User (unknown [82.128.84.28])
11: 	by centralfilms.net (Postfix) with ESMTP ID: [ID filtered]
12: 	Thu, 19 Aug 2010 xx:xx:xx -0500 (CDT)

IP: 82.128.84.28 ---> Multilinks Telecommunications Limited, Nigeria

1. Versuch, da wurden dem Mugus wohl die Mail-Accounts gekillt...:D:

2. Versuch, und dann kam Panik auf:p:

Speedy zum zweiten:

header:

01: Received: from csmail.cstramp.com (HELO csmail.cstramp.com) [211.155.17.245]
02:   by mx0.gmx.net (mx009) with SMTP; 20 Aug 2010 xx:xx:xx +0200
03: Received: from 201-251-63-26.static.speedy.com.ar (HELO user)
04: (root [at] 201.251.63.26)
05:   by localhost with SMTP; 20 Aug 2010 xx:xx:xx -0000

IP: 211.155.17.245 ---> Guangzhou Cstel company

X-FROMIP: 201.251.63.26 ---> 201-251-63-26.static.speedy.com.ar

Muguphon: +44 702 405 6665 ---> Magrathea Telecommunications Limited, UK

und wieder Spamadoo:

header:

01: Received: from smtp2c.orange.fr (smtp2c.orange.fr [80.12.242.155])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Fri, 20 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from me-wanadoo.net (localhost [127.0.0.1])
05: 	by mwinf2c16.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
06: 	Fri, 20 Aug 2010 xx:xx:xx +0200 (CEST)
07: Received: from me-wanadoo.net (localhost [127.0.0.1])
08: 	by mwinf2c16.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
09: 	Fri, 20 Aug 2010 xx:xx:xx +0200 (CEST)
10: Received: from User (AMarseille-152-1-2-27.w81-251.abo.wanadoo.fr
11: [81.251.96.27])
12: 	by mwinf2c16.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
13: 	Fri, 20 Aug 2010 xx:xx:xx +0200 (CEST)

header:

01: Received: from mail.shadafny.net (unknown [212.179.107.50])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 21 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from ([127.0.0.1]) with MailEnable ESMTP; Sat, 21 Aug 2010
05: xx:xx:xx +0300

Muguphon: +234-7027950399 ---> Multi-links Telecommunications Ltd., Nigeria

Speedy zum dritten (da gibt's wohl gerade gecrackte Kisten zum Sonderpreis :sick:)

header:

01: Received: from mail.fitsite.ne.jp (EHLO mail.fitsite.ne.jp)
02: [210.157.236.132]
03:   by mx0.gmx.net (mx102) with SMTP; 21 Aug 2010 xx:xx:xx +0200
04: Received: from User [201.251.63.26] by mail.fitsite.ne.jp with ESMTP
05:   (SMTPD-8.22) ID: [ID filtered]

IP: 201.251.63.26 ---> 201-251-63-26.static.speedy.com.ar

Muguphon: +234-70-35131795 ---> MTN Nigeria Communications Ltd.

Auch die Kiste bei 'Reliablehosting' hatten wir schon?

header:

01: Received: (qmail invoked by alias); 21 Aug 2010 xx:xx:xx -0000
02: Received: from 208.43.64.143-static.strong-sl2.reliablehosting.com (EHLO
03: mx4.hotmail.com) [208.43.64.143]
04:   by mx0.gmx.net (mx009) with SMTP; 21 Aug 2010 xx:xx:xx +0200

Muguphon: +27 83 687 6562 ---> MTN, ZA

Schaut man sich die Seite von 'Reliablehosting' an:

Zitat:

Our team is a mix of Americans and Belarussians.

So, so. Und auch noch von Gala.net:

Zitat:

это информационно....

da hört man halt wieder die Nachtigall trappsen. Muss man dreimal raten, um zu sagen, wo der Mugu einkauft....

- kjz

Auf geht's zur neuen Mugu-Runde:

und wieder mal die Dreckskiste aus Argentinien:

header:

01: Received: from ns1.gorny.ru (EHLO axe.gorny.ru) [87.103.168.71]
02:   by mx0.gmx.net (mx071) with SMTP; 23 Aug 2010 xx:xx:xx +0200
03: Received: from [87.103.171.154] (helo=elf.gorny.ru)
04: 	by axe.gorny.ru with esmtp (Exim 4.69 (FreeBSD))
05: 	(envelope-from <mike.ellis [at] sohu.com>)
06: 	ID: [ID filtered]
07: Received: from User ([201.251.63.26])
08: 	by elf.gorny.ru ([127.0.0.1])
09: 	with SMTP (MDaemon.PRO.v6.7.9.R);
10: 	Sat, 21 Aug 2010 xx:xx:xx +0700

IP: 201.251.63.26 ---> 201-251-63-26.static.speedy.com.ar

Muguphon: +44 702 405 6665 ---> Magrathea Telecommunications Limited, UK

der Sternchen-Mugu:

header:

01: Received: from mail.allo34.ru (EHLO mail.allo34.ru) [212.44.157.237]
02:   by mx0.gmx.net (mx058) with SMTP; 23 Aug 2010 xx:xx:xx +0200
03: Received: from mail pickup service by mail.allo34.ru with Microsoft SMTPSVC;
04: 	 Sun, 22 Aug 2010 xx:xx:xx +0400
05: Received: from User ([82.128.104.118]) by mail.allo34.ru with Microsoft
06: SMTPSVC(6.0.3790.4675);
07: 	 Sun, 22 Aug 2010 xx:xx:xx +0400

IP: 82.128.104.118 ---> Multilinks Telecommunications Limited, Nigeria

Zitat:

*Microsoft Award Team*
*Promotion/Claims Department*
*Po Box 1030 London Wc2r 0qs*
*England,United Kindom*
*(Customer Services)*

Muguphon: +44 701 004 5579 ---> FleXtel Limited, UK

Muguphon: +44 702 404 1573 ---> Magrathea Telecommunications Limited, UK

Mugufax: +44 756 193 1695 ---> Telefonica O2 (UK) Limited

header:

01: Received: from mail3.ysh001.com (unknown [58.68.226.16])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 24 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by mail3.ysh001.com (tmailer) with ESMTP ID: [ID filtered]
06: 	Tue, 24 Aug 2010 xx:xx:xx +0800 (CST)
07: Received: from mail3.ysh001.com ([127.0.0.1])
08: 	by localhost (mail3.ysh001.com [127.0.0.1]) (theinterface-new, port 10024)
09: 	with ESMTP ID: [ID filtered]
10: Received: from User (unknown [217.174.183.56])
11: 	by mail3.ysh001.com (tmailer) with ESMTPA ID: [ID filtered]
12: 	Tue, 24 Aug 2010 xx:xx:xx +0800 (CST)

IP: 217.174.183.56 ---> 217-174-183-56.intelcom.su

header:

01: Received: from mail.glassballfactory.com
02: (static-ip-198-66-56-61.rev.dyxnet.com [61.56.66.198])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 25 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from mail.glassballfactory.com (localhost [127.0.0.1])
06: 	by mail.glassballfactory.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Tue, 24 Aug 2010 xx:xx:xx +0800 (CST)
08: Received: from glassballfactory.com (localhost [127.0.0.1])
09: 	by mail.glassballfactory.com (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 24 Aug 2010 xx:xx:xx +0800 (CST)

header:

01: Received: from mail.glassballfactory.com
02: (static-ip-198-66-56-61.rev.dyxnet.com [61.56.66.198])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Wed, 25 Aug 2010 xx:xx:xx +0200 (CEST)
05: Received: from mail.glassballfactory.com (localhost [127.0.0.1])
06: 	by mail.glassballfactory.com (Postfix) with ESMTP ID: [ID filtered]
07: 	Tue, 24 Aug 2010 xx:xx:xx +0800 (CST)
08: Received: from glassballfactory.com (localhost [127.0.0.1])
09: 	by mail.glassballfactory.com (Postfix) with ESMTP ID: [ID filtered]
10: 	Tue, 24 Aug 2010 xx:xx:xx +0800 (CST)

X-OriginatingIP: 41.203.64.247 (web) ---> GLO-Mobile Network Services, Nigeria

header:

01: Received: from tv2.jay.net (EHLO tv2.jay.net) [86.58.129.98]
02:   by mx0.gmx.net (mx003) with SMTP; 26 Aug 2010 xx:xx:xx +0200
03: Received: (qmail 8437 invoked by UID: [UID filtered]
04: Cc: recipient list not shown: ;
05: Received: from 82.128.1.129 ( [82.128.1.129])
06: 	as user mrsmby [at] tv2.jay.net@tv2.jay.net by tv2.jay.net with HTTP;
07: 	Thu, 26 Aug 2010 xx:xx:xx +0200

IP: 82.128.1.129 ---> ml82.128.1.129.multilinks.com, Nigeria

header:

01: Received: from smtp.fidelityaccess.net (unknown [66.94.70.115])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Thu, 26 Aug 2010 xx:xx:xx +0200 (CEST)
04: Received: from mail.nfpmedcenter.org (unknown [66.6.161.158])
05: 	by smtp.fidelityaccess.net (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 25 Aug 2010 xx:xx:xx -0400 (EDT)
07: Received: from User ([41.211.229.143]) by mail.nfpmedcenter.org with
08: Microsoft SMTPSVC(6.0.3790.4675);
09: 	 Wed, 25 Aug 2010 xx:xx:xx -0400

IP: 41.211.229.143 ---> Direct-on-PC Limited, Nigeria

Muguphon: +234-7033504277 ---> MTN Nigeria Communications Ltd.

- kjz

In der letzten Woche sind angetreten:

header:

01: Received: from mail.udom.ac.tz (EHLO mail.udom.ac.tz) [196.43.67.97]
02:   by mx0.gmx.net (mx054) with SMTP; 01 Sep 2010 xx:xx:xx +0200
03: Received: from User (unknown [12.170.18.92])
04: 	by mail.udom.ac.tz (Postfix) with ESMTPA ID: [ID filtered]
05: 	Wed,  1 Sep 2010 xx:xx:xx +0300 (EAT)

zweimal über web.de abgekübelt:

header:

01: Received: from fmmailgate05.web.de ([172.20.7.85])
02: 	by mbizimp003 with bizsmtp
03: 	ID: [ID filtered]
04: Received: from mwmweb058  ( [172.20.18.67])
05: 	by fmmailgate05.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  3 Sep 2010 xx:xx:xx +0200 (CEST)
07: Received: from [82.128.84.202]  by  mwmweb058  with HTTP; Fri
08:  Sep 03 xx:xx:xx CEST 2010

header:

01: Received: from fmmailgate07.web.de ([172.20.1.53])
02: 	by mbizimp001 with bizsmtp
03: 	ID: [ID filtered]
04: Received: from mwmweb058  ( [172.20.18.67])
05: 	by fmmailgate07.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  3 Sep 2010 xx:xx:xx +0200 (CEST)
07: Received: from [82.128.84.202]  by  mwmweb058  with HTTP; Fri
08:  Sep 03 xx:xx:xx CEST 2010

IP: 82.128.84.202 ---> Multilinks Telecommunications Limited, Nigeria

die Madrid-Konnektion:

header:

01: Received: from static-190-253-62-95.ipcom.comunitel.net (EHLO
02: mx4.hotmail.com) [95.62.253.190]
03:   by mx0.gmx.net (mx111) with SMTP; 03 Sep 2010 xx:xx:xx +0200

Muguphon: +34-672-972-024 ---> mobile number, Espana

Mugufax: +34 911 849 813 ---> Jazz Telecom, S.a.u., Espana

Und wieder web.de:

header:

01: Received: from fmmailgate09.web.de (EHLO fmmailgate09.web.de)
02: [217.72.192.184]
03:   by mx0.gmx.net (mx015) with SMTP; 03 Sep 2010 xx:xx:xx +0200
04: Received:  from mwmweb060  ( [172.20.18.69])
05: 	by fmmailgate09.web.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  3 Sep 2010 xx:xx:xx +0200 (CEST)
07: Received:  from [41.138.184.173]  by  mwmweb060  with HTTP; Fri
08:  Sep 03 xx:xx:xx CEST 2010

IP: 41.138.184.173 ---> Visafone Communications Limited, Nigeria

Der Mugu hat auch eine Website: ^whois:

header:

01: Received: from mail.brosnan.ie (EHLO lssales.ie) [83.70.200.123]
02:   by mx0.gmx.net (mx085) with SMTP; 03 Sep 2010 xx:xx:xx +0200
03: Received: from User ([174.136.39.72]) by lssales.ie with Microsoft
04: SMTPSVC(6.0.3790.3959);
05: 	 Fri, 3 Sep 2010 xx:xx:xx +0100

IP: 174.136.39.72 ---> Colo4Dallas LP

header:

01: Received: from mail02do.versatel.de (mail02do.versatel.de [89.245.129.22])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat,  4 Sep 2010 xx:xx:xx +0200 (CEST)
04: Received: (qmail 2993 invoked from network); 4 Sep 2010 xx:xx:xx -0000
05: Received: from cpe-72-133-251-209.new.res.rr.com (HELO User)
06: (kamilihs [at] versanet.de@[72.133.251.209])
07:           (envelope-sender <poor [at] spamvictim.tld>)
08:           by mail02do.versatel.de (qmail-ldap-1.03) with ESMTPA
09:           for <poor [at] spamvictim.tld>; 4 Sep 2010 xx:xx:xx -0000

gecrackter Uni-Account:

header:

01: Received: from msec3.sdu.dk (EHLO msec3.sdu.dk) [130.225.156.17]
02:   by mx0.gmx.net (mx018) with SMTP; 05 Sep 2010 xx:xx:xx +0200
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by msec3.sdu.dk (Postfix) with ESMTP ID: [ID filtered]
05: 	Sun,  5 Sep 2010 xx:xx:xx +0200 (CEST)
06: Received: from msec3.sdu.dk ([127.0.0.1])
07:  by localhost (msec3.sdu.dk [127.0.0.1]) (amavisd-maia, port 10024) with
08: ESMTP
09:  ID: [ID filtered]
10: Received: from adm-exhub.adm.c.sdu.dk (adm-exhub0b.adm.c.sdu.dk [10.9.2.97])
11: 	by msec3.sdu.dk (Postfix) with ESMTP ID: [ID filtered]
12: 	Sun,  5 Sep 2010 xx:xx:xx +0200 (CEST)
13: Received: from ADM-EXMBX0CD.adm.c.sdu.dk ([fe80::4011:54cb:8c9c:a450]) by
14:  adm-exhub0b.adm.c.sdu.dk ([fe80::c48a:e1c8:ca45:b7a2%13]) with mapi; Sun, 5
15:  Sep 2010 xx:xx:xx +0200

header:

01: Received: from mail.developmentconsultant.com
02: (mail.developmentconsultant.com [75.99.36.10])
03: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: 	for xxxxx; Sun,  5 Sep 2010 xx:xx:xx +0200 (CEST)
05: Received: from User ([122.169.39.194]) by mail.developmentconsultant.com
06: with Microsoft SMTPSVC(6.0.3790.1830);
07: 	 Sun, 5 Sep 2010 xx:xx:xx -0500

IP: 122.169.39.194 ---> ABTS-MH-dynamic-194.39.169.122.airtelbroadband.in

Muguphon: +234-809-467-2677 ---> EMTS, Nigeria (Etisalat)

header:

01: Received: from irongw5b.sproxy.kddi.ne.jp (EHLO
02: irongw5b.sproxy.kddi.ne.jp) [210.188.175.152]
03:   by mx0.gmx.net (mx056) with SMTP; 05 Sep 2010 xx:xx:xx +0200
04: Received: from ns.pyramidfilm.co.jp (HELO pyramidfilm.co.jp)
05: ([202.218.5.120])
06:   by irongw4a.sproxy.kddi.ne.jp with SMTP; 06 Sep 2010 xx:xx:xx +0900
07: Received: (qmail 20292 invoked from network); 6 Sep 2010 xx:xx:xx +0900
08: Received: from unknown (HELO User) (johnny [at] 61.158.163.227)
09:   by ns.pyramidfilm.co.jp with SMTP; 6 Sep 2010 xx:xx:xx

IP: 61.158.163.227 ---> China Unicom Henan

header:

01: Received: from awpackaging.com.au (awholl.lnk.telstra.net [165.228.217.186])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sun,  5 Sep 2010 xx:xx:xx +0200 (CEST)
04: Received: from User ([98.218.232.138]) by awpackaging.com.au with
05: Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Sun, 5 Sep 2010 xx:xx:xx +1000

IP: 98.218.232.138 ---> c-98-218-232-138.hsd1.dc.comcast.net

Der Trend: mittlerweile verkaufen die Russkis den Mugus im 'Rundum-419-Sorglos-Paket' nicht nur gecrackte Mailserver und GMail-Adressen im Hunderterpack, sondern anscheinend auch Zombie-Proxies. Das dürfte wohl einen Grund haben: ob irgendein nigerianischer ISP überhaupt noch Mails irgendwohin los wird? Die dürften doch mittlerweile mit den meisten IPs bis zum Sankt-Nimmerleinstag in den meisten Blocklisten verrotten...

- kjz

40 Beiträge dieses Themas auf einer Seite anzeigen