Mugu Dubletten

Mal eine etwas andere Masche.

header:

01: Received: from impulsedjs.com (EHLO impulsedjs.com) [206.130.99.109] by
02: 	mx0.gmx.net (mx034) with SMTP; 26 Aug 2008 xx:xx:xx +0200
03: Received: from User (75-3.vgccl.net [41.220.75.3] (may be forged))
04: 	(authenticated bits=0) by impulsedjs.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]

header:

01: Received: from impulsedjs.com (EHLO impulsedjs.com) [206.130.99.109] by
02: 	mx0.gmx.net (mx034) with SMTP; 26 Aug 2008 xx:xx:xx +0200
03: Received: from User (75-3.vgccl.net [41.220.75.3] (may be forged))
04: 	(authenticated bits=0) by impulsedjs.com (8.13.1/8.13.1) with ESMTP ID: [ID filtered]

Sieht zunächst wie Mortgage Leadz Spam aus:

Zitat:

---

Goodday Sir/Madam,

My names are Mrs. Carlson Nicole,I am a marketer with seven bell yard lenders.We
Offer Private, Commercial and Personal Loans with very Minimal annual Interest
Rates as Low as 0.5% within a 1year to 50 years repayment duration period to any
part of the world. We give out loans within the range of $5,000 to $100,000,000
USD. Our loan Services Rendered include:

*Refinance
*Home Improvement
*Inventor Loans
*Auto Loans
*Debt Consolidation
*Line of Credit
*Second Mortgage
*Business Loans
*Personal Loans
*International Loans

Our loans are well insured for maximum security is our priority, Are you losing
sleep at nights worrying how to get a Legit Loan Lender?Are you biting your
finger nails to the quick? Instead of beating yourself up, contact SEVEN BELL
YARD LENDERS ( Loan Services ) now, Loan specialists who help stop Bad Credit
History, to discover a win solution which is Our Mission.

We also render Collateral And Non- Collateral Loans For Your Business Start up,
If you are interested in this offer please kindly fill out the application
details below so that i can start the processing of your loan sum.

APPLICATION DETAILS
Full Name:..........................................
Contact Address:.............................
Phone:...................................................
Purpose of your loan.......................
Amount Needed as Loan:...............
Loan Duration:...................................
Annual Income:.................................
Occupation:........................................
Sex.............................
Date of Birth............................
Marital Status........................

In acknowledgement to these details, I will send you a well calculated Terms and
Condition which will include the agreement.
Furthermore be informed that you will also need a form of Identification which
can be either a Driver's Licence or your working Identity card.
Interested Persons should contact me through the following email address and
telephone number below which is;

Name;Barrister Paul John Lockett
Email;
Direct Mobile: +44 703 194 2899 ---> Magrathea Telecommunications Limited, UK
Yours truly,
Mrs. Carlson Nicole
(PUBLICITY MANAGER)
Copyright © 2008 Seven Bell Yard Lenders.

---

Aaaber:

Abgekippt über impulsedjs.com (da hat die Maschine wohl den Hosenlatz offen) von 75-3.vgccl.net (absoluter Mugu-Provider in Nigeria).

Und dann wieder das Muguphon: +44 703 194 2899 ---> Magrathea Telecommunications Limited, UK

Ob Magrathea ausser Mugus überhaupt noch reguläre Kunden hat?

Also wieder Mugu-Vorschussbetrug.

Post also an:

- kjz

Es geht weiter.

Abgekippt über Earthlink von Zombie in Kolumbien:

header:

01: Received: from elasmtp-dupuy.atl.sa.earthlink.net (EHLO
02: elasmtp-dupuy.atl.sa.earthlink.net) [209.86.89.62] by mx0.gmx.net (mx018) with SMTP;
03: 	28 Aug 2008 xx:xx:xx +0200 
04: DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
05:   s=dk20050327; d=earthlink.net;
06:   b=hV9mRBn0Fcld+D4VbwjVAGrNrkoTO9VNtlWtkXUyP8BXSzPrtrlBpvBCZ5muH59E;
07:  
08: h=Message-ID:Date:From:Reply-To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:X-M
09: 	iler:X-ELNK-Trace:X-Originating-IP;
10: Received: from [209.86.224.30] (helo=mswamui-chipeau.atl.sa.earthlink.net) by
11: 	elasmtp-dupuy.atl.sa.earthlink.net with esmtpa (Exim 4.67)   (envelope-from
12: 	<officenm8899000988 [at] earthlink.net>) ID: [ID filtered]
13: Received: from 190.144.58.170 by webmail.earthlink.net with HTTP; Thu, 28 Aug 2008
14: 	xx:xx:xx -0400

header:

01: Received: from elasmtp-dupuy.atl.sa.earthlink.net (EHLO
02: elasmtp-dupuy.atl.sa.earthlink.net) [209.86.89.62] by mx0.gmx.net (mx018) with SMTP;
03: 	28 Aug 2008 xx:xx:xx +0200
04: DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
05:   s=dk20050327; d=earthlink.net;
06:   b=hV9mRBn0Fcld+D4VbwjVAGrNrkoTO9VNtlWtkXUyP8BXSzPrtrlBpvBCZ5muH59E;
07:  
08: h=Message-ID:Date:From:Reply-To:Subject:Mime-Version:Content-Type:Content-Transfer-Encoding:X-M
09: 	iler:X-ELNK-Trace:X-Originating-IP;
10: Received: from [209.86.224.30] (helo=mswamui-chipeau.atl.sa.earthlink.net) by
11: 	elasmtp-dupuy.atl.sa.earthlink.net with esmtpa (Exim 4.67)     (envelope-from
12: 	<officenm8899000988 [at] earthlink.net>) ID: [ID filtered]
13: Received: from 190.144.58.170 by webmail.earthlink.net with HTTP; Thu, 28 Aug 2008
14: 	xx:xx:xx -0400

Lebt Soludo immer noch?

Zitat:

---

CENTRAL BANK OF NIGERIA
TINUBU SQUARE VICTORIA
ISLAND LAGOS NIGERIA
[OFFICE OF THE GOVERNOR]
CONTRACT #: MAV/NNPC/FGN/MIN/009,
SWIFT CODE: BPH KPL PK ,
CENTRAL BANK NIGERIA
OUR REF: CBN/IRD/CBX/021/04
PRIVATE EMAIL;
MAV/NNPC/FGN/MIN/008
IMMEDIATE CONTRACT CASH PAYMENT NOTIFICATION

---

Abgekippt über Spamadoo von chines. Proxy:

header:

01: Received: from smtp21.orange.fr (EHLO smtp21.orange.fr) [80.12.242.46] by
02: 	mx0.gmx.net (mx069) with SMTP; 29 Aug 2008 xx:xx:xx +0200
03: Received: from User (unknown [222.223.71.138]) by mwinf2128.orange.fr (SMTP
04: 	Server) with ESMTP ID: [ID filtered]

header:

01: Received: from smtp21.orange.fr (EHLO smtp21.orange.fr) [80.12.242.46] by
02: 	mx0.gmx.net (mx071) with SMTP; 29 Aug 2008 xx:xx:xx +0200
03: Received: from User (unknown [222.223.71.138]) by mwinf2128.orange.fr (SMTP
04: 	Server) with ESMTP ID: [ID filtered]

Zitat:

---

CENTRAL BANK OF NIGERIA
Tinubu Square, Lagos- Nigeria.
Our ref: Cbn/Ohg/Oxd1/2008
Your ref: ...............................
Telex: Cenbank.
Reference Number CBN/UNRC/XX1/08

CONTACT DETAILS:

CHAIRMAN OF THE COMMITTEE.
ALHAJI ALI MOHEMMED.
UNITED NATIONS RECONCILIATION COMMITTEE
WEST AFRICA ZONE ANNEX OFFICE IN ACCRA.
GHANA
EMAIL:

---

- kjz

Anscheinend haben die Russkis die Adressen an die Mugus vertickert. Das kann ja Eiter werden....

header:

01: Received: from unknown (EHLO spike.bangkokdns.com) [203.107.132.132] by
02: 	mx0.gmx.net (mx091) with SMTP; 29 Aug 2008 xx:xx:xx +0200

header:

01: Received: from unknown (EHLO spike.bangkokdns.com) [203.107.132.132] by
02: 	mx0.gmx.net (mx054) with SMTP; 29 Aug 2008 xx:xx:xx +0200

Zitat:

---

Yours in the sincerely,
Louisa Wilson
N.B
PLEASE REPLY TO ()

---

Wie war das noch:





- kjz

Heute:

header:

01: Received: from server21.joeswebhosting.net (EHLO
02: server21.joeswebhosting.net) [202.228.204.130] by mx0.gmx.net (mx061) with SMTP; 30
03: 	Aug 2008 xx:xx:xx +0200

header:

01: Received: from server21.joeswebhosting.net (EHLO
02: server21.joeswebhosting.net) [202.228.204.130] by mx0.gmx.net (mx084) with SMTP; 30
03: 	Aug 2008 xx:xx:xx +0200

Mail an:





- kjz

Hier war der Mugu selbst für den ganzen Text zu blöd. Oder Ratware nur geklauft?

header:

01: Received: from starburst.dnsprotect.com (EHLO starburst.dnsprotect.com)
02: 	[209.51.136.26] by mx0.gmx.net (mx002) with SMTP; 31 Aug 2008 xx:xx:xx +0200

header:

01: Received: from starburst.dnsprotect.com (EHLO starburst.dnsprotect.com)
02: 	[209.51.136.26] by mx0.gmx.net (mx043) with SMTP; 31 Aug 2008 xx:xx:xx +0200

Zitat:

---

FROM: MR. ZULU MOHAMMED
EXECUTIVE DIRECTOR
DOMICILLIARY ACCOUNTS DEPT.
UNION BANK OF NIGERIA PLC
APAPA BRANCH - LAGOS.

First, I have to introduce myself. My name is Mr.Zulu Mohammed, an
executive director with the union bank of Nigeria plc. I came to know
you in my private search for a reliable and reputable person to handle
this confidential transaction which involves the transfer of a huge sum
of money to foreign bank account.

The proposal is this - An American, CARL J. HACKSON, an Oil Merchant /
Contractors with the Federal Government of Nigeria, died of an
undisclosed illness five years ago. Before his death, he was one of our
most valuable comtomer.

He left a balance of USD$10,233,000.00 (Ten Million, Two Hundred and
Thirty three thousand Dollars only). This said sum of money can only be
claimed by Mr. Hackson's wife, children or Next of Kin. Efforts made by
the Bank to get in touch with any member of his family have proved
abortive. Mr. Hackson left no WILL nor Instructions and there is no
trace that he had wife and kids, so his money remains in the vault of
our bank.

For three years, I have personally monitored this account and now feel
that this is the time to move the whole fund into the foreign bank
account. Therefore, I and my trusted colleagues now seek your permission
to have you stand as next of kin to Late Carl J. Hackson so that the
funds (USD$10,233,000.00) be paid into your account as next of kin.

Be assured that all documents and proves to enable you get this fund
will carefully worked out and I guarantee you a risk free involvement.
You will get a negotiable percentage of the total sum for your
assistance. We shall map out a percentage of this money to take care of
minor expenses that could arise in the cause of this transaction.
Please note, that I and my colleagues would resigned our positions
quietly in the bank if this transaction is successful. We put all our
hope and the success of this transaction in you, I hope you will not
take undue advantage of us.

If you are interested in this proposal, get back to me through my email
address. Furthermore, you must include your personal information,

---

Mail hätte gerne:



- kjz

Diesmal der NL Mugu aus NG:

Eingeworfen von 80.255.59.246 (ViennaTech, trotz des Namens ein Satellitenanbieter aus NG) über Bezequint in IL.

header:

01: Received: from sa4.bezeqint.net (EHLO sa4.bezeqint.net) [192.115.104.18]
02:   by mx0.gmx.net (mx003) with SMTP; 02 Sep 2008 xx:xx:xx +0200
03: Received: from localhost (sa4 [127.0.0.1])
04:         by sa4.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id
05: CA9D33002F;
06:         Tue,  2 Sep 2008 xx:xx:xx +0300 (IDT)
07: X-Virus-Scanned: amavisd-new at bezeqint.net
08: Received: from sa4.bezeqint.net ([127.0.0.1])
09:         by localhost (sa4.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024)
10:         with ESMTP ID: [ID filtered]
11: Received: from mas26.bezeqint.net (mas26.bezeqint.net [192.115.104.156])
12:         by sa4.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP;
13:         Tue,  2 Sep 2008 xx:xx:xx +0300 (IDT)
14: Received: (from mas26.bezeqint.net [80.255.59.246]) 
15:         by mas26.bezeqint.net (MOS 3.8.6-GA)
16:         with HTTP/1.1 ID: [ID filtered]
17:         Tue,  2 Sep 2008 xx:xx:xx +0300 (IDT)

header:

01: Received: from sa4.bezeqint.net (EHLO sa4.bezeqint.net) [192.115.104.18]
02:   by mx0.gmx.net (mx002) with SMTP; 02 Sep 2008 xx:xx:xx +0200
03: Received: from localhost (sa4 [127.0.0.1])
04:         by sa4.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP id
05: CA9D33002F;
06:         Tue,  2 Sep 2008 xx:xx:xx +0300 (IDT)
07: X-Virus-Scanned: amavisd-new at bezeqint.net
08: Received: from sa4.bezeqint.net ([127.0.0.1])
09:         by localhost (sa4.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024)
10:         with ESMTP ID: [ID filtered]
11: Received: from mas26.bezeqint.net (mas26.bezeqint.net [192.115.104.156])
12:         by sa4.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP;
13:         Tue,  2 Sep 2008 xx:xx:xx +0300 (IDT)
14: Received: (from mas26.bezeqint.net [80.255.59.246])
15:         by mas26.bezeqint.net (MOS 3.8.6-GA)
16:         with HTTP/1.1 ID: [ID filtered]
17:         Tue,  2 Sep 2008 xx:xx:xx +0300 (IDT)

Das übliche Lotteriemärchen aus NL. Muguphone und -fax:

Tel:0031-626-415-837 ---> Telfort B.V., NL
Fax:0031-847-375-060 ---> Jump B.V., NL

Mit Jump und Telfort haben wir mal wieder so 2 Rogue Companies aus den NL. Aus meiner Sicht nur Mugus als Kunden und beide bei RFC-Ignorant wegen disfunktionaler Abuse-Adressen gelistet.

Post bitte an:



- kjz

Mal wieder der 'doppelte Mugu':

Abgekippt über webmail.internet.gr von dial-pool8.ph.starcomms.net (Mugu-Provider in Nigeria).

header:

01: Received: from qmail7.internet.gr (EHLO qmail7.internet.gr) [62.1.1.44] by
02: 	mx0.gmx.net (mx020) with SMTP; 07 Sep 2008 xx:xx:xx +0200
03: Received: (qmail 6936 invoked from network); 7 Sep 2008 xx:xx:xx -0000
04: Received: by simscan 1.0.8 ppID: [ID filtered]
05:          scanners: clamav: 0.93/m:
06: Received: from unknown (HELO webmail.internet.gr) ([62.1.1.41])
07:           (envelope-sender <poor [at] spamvictim.tld>) by 0 (qmail-ldap-1.03) with SMTP for
08: 	<poor [at] spamvictim.tld>; 7 Sep 2008 xx:xx:xx -0000
09: Received: from 212.100.250.230 (proxying for 41.205.165.167) (SquirrelMail
10: 	authenticated user katsabas) by webmail.internet.gr with HTTP; Sun, 7 Sep 2008 xx:xx:xx +0300
11: 	(EEST)

header:

01: Received: from qmail7.internet.gr (EHLO qmail7.internet.gr) [62.1.1.44] by
02: 	mx0.gmx.net (mx074) with SMTP; 07 Sep 2008 xx:xx:xx +0200
03: Received: (qmail 6936 invoked from network); 7 Sep 2008 xx:xx:xx -0000
04: Received: by simscan 1.0.8 ppID: [ID filtered]
05:          scanners: clamav: 0.93/m:
06: Received: from unknown (HELO webmail.internet.gr) ([62.1.1.41])
07:           (envelope-sender <poor [at] spamvictim.tld>) by 0 (qmail-ldap-1.03) with SMTP for
08: 	<poor [at] spamvictim.tld>; 7 Sep 2008 xx:xx:xx -0000
09: Received: from 212.100.250.230 (proxying for 41.205.165.167) (SquirrelMail
10: 	authenticated user katsabas) by webmail.internet.gr with HTTP; Sun, 7 Sep 2008 xx:xx:xx +0300
11: 	(EEST)

Zitat:

---

Fondazion Di Vittorio, ITALY
^whois:

NOTIFICATION FOR CASH AID

This is to acknowledge the receipt of the requested data and
theconfirmation of your reliability in this universal programme.

Do note that I have forwarded the produced data, to the head office of
the Vittorio Foundation (ITALY) and the ECOWAS head office (Organisation
assigned to handle your payment) in NIGERIA. Included in this letter is
your donation pin number to be used when claiming your donation. Your
donation pin number is "21556770665477". This number should be kept
strictly confidential by you, as you will use it in receiving your
donation.

You are to immediately contact the Payment officer in the ECOWAS office
in Abuja, Nigeria for claim of your donation. Please do contact the
officer in the below information.

CONTACT INFOS.
MR. ALFRED UDEH
COUNSELLOR, ECOWAS HEAD OFFICE ABUJA.
PLOT 4, BLOCK 23,GARKI, ABUJA.NIGERIA
E-MAIL:
PHONE NUMBER: +2347033356828

Do note that your contact with MR. ALFRED UDEH, you are to provide
him with your full name,full address,phone number,sex,age,occupation,
and your country This will enable the ECOWAS office prepare a cheque
valued US$850,000.00 and all necessary documents required to clear/cash
the check in your name.

Please contact MR. ALFRED UDEH immediately. Thank you for your
cooperation in this matter.

Signed,

Fondazione Presidente
Mr. Carlo Ghezzi.

---

Post bitte an:




- kjz

Auch hier:

header:

01: Received: from mail09.syd.optusnet.com.au (EHLO
02: mail09.syd.optusnet.com.au) [211.29.132.190] by mx0.gmx.net (mx082) with SMTP; 10 Sep
03: 	2008 xx:xx:xx +0200
04: Received: from User (c220-237-70-71.ipswc2.qld.optusnet.com.au
05: [220.237.70.71]) 	(authenticated sender nomatterwhat [at] optusnet.com.au) by
06: 	mail09.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]

header:

01: Received: from mail09.syd.optusnet.com.au (EHLO
02: mail09.syd.optusnet.com.au) [211.29.132.190] by mx0.gmx.net (mx082) with SMTP; 10 Sep
03: 	2008 xx:xx:xx +0200
04: Received: from User (c220-237-70-71.ipswc2.qld.optusnet.com.au
05: [220.237.70.71]) 	(authenticated sender nomatterwhat [at] optusnet.com.au) by
06: 	mail09.syd.optusnet.com.au (8.13.1/8.13.1) with ESMTP ID: [ID filtered]

Zitat:

---

Payment/Notification
UNITED NATIONS ORGANIZATION IN CONJUNCTION WITH THE INTERNATIONAL
MONETARY FUND WORLD BANK FACT-FINDING & SPECIAL DUTIES OFFICE Office of
The Director Special duties.Cotonou,Republic of Benin

PLEASE REPLY TO MY PRIVATE BOX Email:

Special duties reference
UNO/WBF LM-05-371
ORDERING CONTRACTOR:
UNO/WBF ? SG
DIPLOMATIC BOX 55KG

To the Beneficiary,

The World Bank Group, Fact Finding & Special Duties office I conjunction
with the United Nations Organization, has received part of your pending
payment with reference number (LM-05-371) amounting to
($15.5million(Fifteen million five hundred thousand USA Dollars) out of
your contractual/inheritance funds from our ordering contractor Bank
quoting reference to UNO/WBF LM-05-371, the said payment is been
arranged in a Security-proof trunk box weighing 75kg padded with
synthetic nylon.According to information gathered from the bank's
security computer we were notified that you have waited for so long to
receive this payment without success, we also confirmed that you have
not met all statutory requirements in respect of your pending payment.
You are therefore advised to contact our Payment Clearance Department to
obtain necessary information to the Security courier service company
that is specialized in sending diplomatic materials and information from
one country to another,w!
hich also has diplomatic immunity

This office has met with this Security courier service and concluded
shipping arrangement with them, therefore shipment will commence as soon
as we have your go ahead order, the diplomat who will be bringing in
this Consignment trunk (Box) to you is an expert and has been in this
line of work for so many years now, so you have noting to worry about.
After all arrangements we have concluded ! that you must donate (Five
Hundred Thousand United States Dollars) to a charity organization we
designate to you as soon as you receive your inheritance fund. To this
effect,in your response you should send to us a promissory note
promising to donate the stated amount and also with your address where
you will like the consignment trunk Box to be delivered to.

Please maintain topmost secrecy as it may cause a lot of problems if
found out that we are using this media to help you. Therefore you are
advised not to inform anyone about this until you received your
consignment box.

The above requirement qualifies you for final remittance process of the
received sum.

The below information would be needed for proper filing and to enable
safe delivery.

Full Name
Address
Occupation
Nationality
Mobile/phone number
Fax
Age
Sex

Please confirm message granted with "GO AHEAD ORDER"on MY PRIVATE BOX
Email;

Congratulations.
Yours Faithfully
Father Gorge.Moore
Director, Special Duties UNO/WBF.

---

Post geht an:

Was aber auch wieder ein Indiz dafür ist, dass Botnetze zusammen mit den Adressdatenbanken vermietet werden. Welchen (und teilweise auch wieviel) Spam man erhält, hängt also teilweise davon ab, welchem Herder die eigene Adresse in die schmierigen Griffel gefallen ist.

- kjz

Heute:

header:

01: Received: from sa10.bezeqint.net (EHLO sa10.bezeqint.net) [192.115.104.24]
02:   by mx0.gmx.net (mx052) with SMTP; 13 Sep 2008 xx:xx:xx +0200
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by sa10.bezeqint.net (Bezeq International SMTP out Mail Server) with
05: ESMTP ID: [ID filtered]
06: 	Sat, 13 Sep 2008 xx:xx:xx +0300 (IDT)
07: Received: from sa10.bezeqint.net ([127.0.0.1])
08:  by localhost (sa10.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024)
09:  with ESMTP ID: [ID filtered]
10: Received: from mas26.bezeqint.net (mas26.bezeqint.net [192.115.104.156])
11: 	by sa10.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP;
12: 	Sat, 13 Sep 2008 xx:xx:xx +0300 (IDT)
13: Received: (from mas26.bezeqint.net [80.255.59.245])
14: 	by mas26.bezeqint.net (MOS 3.8.6-GA)
15: 	with HTTP/1.1 ID: [ID filtered]
16: 	Sat, 13 Sep 2008 xx:xx:xx +0300 (IDT)

header:

01: Received: from sa10.bezeqint.net (EHLO sa10.bezeqint.net) [192.115.104.24]
02:   by mx0.gmx.net (mx110) with SMTP; 13 Sep 2008 xx:xx:xx +0200
03: Received: from localhost (localhost.localdomain [127.0.0.1])
04: 	by sa10.bezeqint.net (Bezeq International SMTP out Mail Server) with
05: ESMTP ID: [ID filtered]
06: 	Sat, 13 Sep 2008 xx:xx:xx +0300 (IDT)
07: Received: from sa10.bezeqint.net ([127.0.0.1])
08:  by localhost (sa10.bezeqint.net [127.0.0.1]) (amavisd-new, port 10024)
09:  with ESMTP ID: [ID filtered]
10: Received: from mas26.bezeqint.net (mas26.bezeqint.net [192.115.104.156])
11: 	by sa10.bezeqint.net (Bezeq International SMTP out Mail Server) with ESMTP;
12: 	Sat, 13 Sep 2008 xx:xx:xx +0300 (IDT)
13: Received: (from mas26.bezeqint.net [80.255.59.245])
14: 	by mas26.bezeqint.net (MOS 3.8.6-GA)
15: 	with HTTP/1.1 ID: [ID filtered]
16: 	Sat, 13 Sep 2008 xx:xx:xx +0300 (IDT)

Zitat:

---

MR. Densmore Stewart
Tel:0031-626-415-837 ---> Telfort B.V., NL
Fax:0031-847-375-060 ---> Jump B.V., NL
EMAIL:

---

Post also an:


Somit abgekippt über Bezeqint (von diesem israel. Provider habe ich bisher absolut nur Spam erhalten, scheint hochgradig durchseucht zu sein) von VIENNA TECHNOLOGIES LTD. frisch aus Nigeria.

Und Telfort und Jump in den Niederlanden scheinen auch so 'Mugu only' Firmen zu sein. Das aber auch viele Geschäftsleute sich ihre Griffel gerne mit Banditen dreckig machen, sobald nur ein paar Cents herausspringen... Oder hat man seine Dienste nicht abgesichert, so dass die Scheunentore zum Missbrauch offenstehen? Das wäre heutzutage dann schon 'vorsätzlich grob fahrlässig'.

- kjz

Ein kurzer Blick in die Statistik (man sieht, der Mugu nutzt offene Squirrel-Mail Zugänge aus):

Oktober 2007(!):

header:

01: Received: from 41.220.75.3 (SquirrelMail authenticated user phlame) by 84.95.249.10
02: 	with HTTP; Tue, 23 Oct 2007 xx:xx:xx +0200 (IST)

---> 75-3.vgccl.net, Nigeria

August 2008:

header:

01: Received: from 41.220.75.3 (SquirrelMail authenticated user acfsl [at] sierratel.sl) by
02: 	webmail.sierratel.sl with HTTP; Sat, 9 Aug 2008 xx:xx:xx -0000 (GMT)

---> 75-3.vgccl.net

September 2008:

header:

01: Received: from 75-3.vgccl.net (75-3.vgccl.net [41.220.75.3]) by
02: 	webmail.kyani.net (Horde MIME library) with HTTP; Sun, 14 Sep 2008 xx:xx:xx -0500

September 2008:

header:

01: Received: from 212.100.250.218 (proxying for 41.220.75.3) (SquirrelMail authenticated
02: 	user kanate) by webmail.wic.co.th with HTTP; Sun, 21 Sep 2008 xx:xx:xx +0700 (ICT)

---> 75-3.vgccl.net, Nigeria

Soviel zu dem Märchen, die nigerian. Regierung unternähme angeblich was gegen die Mugus....

- kjz