Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

Und weiter geht's:

header:

01: Received: from mail.07d02.mspz7.gob.ec ([181.196.137.211]) by mx-ha.gmx.net
02:  (mxgmx017 [212.227.15.9]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  for <xxxxx>; Tue, 21 Nov 2017 xx:xx:xx +0100
04: Received: from localhost (localhost.localdomain [127.0.0.1])
05: 	by mail.07d02.mspz7.gob.ec (Postfix) with ESMTP ID: [ID filtered]
06: 	Tue, 21 Nov 2017 xx:xx:xx -0500 (ECT)
07: Received: from mail.07d02.mspz7.gob.ec ([127.0.0.1])
08: 	by localhost (mail.07d02.mspz7.gob.ec [127.0.0.1]) (amavisd-new, port
09: 10032)
10: 	with ESMTP ID: [ID filtered]
11: Received: from localhost (localhost.localdomain [127.0.0.1])
12: 	by mail.07d02.mspz7.gob.ec (Postfix) with ESMTP ID: [ID filtered]
13: 	Tue, 21 Nov 2017 xx:xx:xx -0500 (ECT)
14: X-Virus-Scanned: amavisd-new at 07d02.mspz7.gob.ec
15: Received: from mail.07d02.mspz7.gob.ec ([127.0.0.1])
16: 	by localhost (mail.07d02.mspz7.gob.ec [127.0.0.1]) (amavisd-new, port
17: 10026)
18: 	with ESMTP ID: [ID filtered]
19: Received: from [107.189.34.89] (unknown [107.189.34.89])
20: 	by mail.07d02.mspz7.gob.ec (Postfix) with ESMTPSA ID: [ID filtered]
21: 	Tue, 21 Nov 2017 xx:xx:xx -0500 (ECT)

gecrackt:

header:

01: Received: from EUR01-HE1-obe.outbound.protection.outlook.com
02: ([104.47.0.243])
03:  by mx-ha.gmx.net (mxgmx115 [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
04: Received: from [192.168.8.100] (41.247.219.100) by
05:  VI1PR0402MB2910.eurprd04.prod.outlook.com (2603:10a6:800:b7::12) with
06:  Microsoft SMTP Server (version=TLS1_2,
07:  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) ID: [ID filtered]
08:  Nov 2017 xx:xx:xx +0000

X-Originating-IP: [41.247.219.100] ---> 8ta-247-219-100.telkomadsl.co.za

Und auch diesen Mugu hatten wir schon:

header:

01: Received: from smta1.fr.ch ([156.25.4.9]) by mx-ha.gmx.net (mxgmx115
02:  [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  <xxxxx>; Sun, 10 Dec 2017 xx:xx:xx +0100
04: Received: from smta1.fr.ch (unknown [127.0.0.1])
05: 	by IMSVA (Postfix) with ESMTP ID: [ID filtered]
06: 	Sat,  9 Dec 2017 xx:xx:xx +0100 (CET)
07: Received: from smta1.fr.ch (unknown [127.0.0.1])
08: 	by IMSVA (Postfix) with ESMTP ID: [ID filtered]
09: 	Sat,  9 Dec 2017 xx:xx:xx +0100 (CET)
10: Received: from SPEDUEX02.edu.net.fr.ch (unknown [172.23.240.47])
11: 	by smta1.fr.ch (Postfix) with ESMTPS;
12: 	Sat,  9 Dec 2017 xx:xx:xx +0100 (CET)
13: Received: from SPEDUEX01.edu.net.fr.ch ([fe80::a95c:704e:470:ccaa]) by
14:  SPEDUEX02.edu.net.fr.ch ([::1]) with mapi ID: [ID filtered]
15: 2017 xx:xx:xx +0100

gecrackt:

Und wie man sieht, klemmt Schwarzhut Foxmail auch keine Spammer ab. Kein Wunder, denn 'Mutter' ist die einschlägig bekannte Butze Tencent in China.

Der Montags-Mugu:

header:

01: Received: from BELEXFE02.proclub.com ([209.221.188.18]) by mx-ha.gmx.net
02:  (mxgmx114 [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  for <xxxxx>; Mon, 18 Dec 2017 xx:xx:xx +0100
04: Received: from BELEXBE02.proclub.com ([fe80::dce1:9888:ca09:fd1b]) by
05:  BELEXFE02.proclub.com ([fe80::5ddd:7484:e740:7a0e%14]) with mapi ID: [ID filtered]

x-originating-ip: [173.244.48.177] ---> ip-177-48-244-173.california.us.northamericancoax.com

gecrackt:

It's Mugu time again, wieder zweimal der gleiche Mugu:

header:
01: Received: from mail.arp.tn ([193.95.27.66]) by mx-ha.gmx.net (mxgmx117
02:  [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  <x>; Sat, 30 Jun 2018 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.arp.tn (Postfix) with ESMTP ID: [ID filtered]
06: 	Thu, 28 Jun 2018 xx:xx:xx +0200 (CEST)
07: Received: from mail.arp.tn ([127.0.0.1])
08: 	by localhost (mail.arp.tn [127.0.0.1]) (amavisd-new, port 10032)
09: 	with ESMTP ID: [ID filtered]
10: Received: from localhost (localhost [127.0.0.1])
11: 	by mail.arp.tn (Postfix) with ESMTP ID: [ID filtered]
12: 	Thu, 28 Jun 2018 xx:xx:xx +0200 (CEST)
13: X-Virus-Scanned: amavisd-new at mail.arp.tn
14: Received: from mail.arp.tn ([127.0.0.1])
15: 	by localhost (mail.arp.tn [127.0.0.1]) (amavisd-new, port 10026)
16: 	with ESMTP ID: [ID filtered]
17: Received: from [172.93.148.194] (unknown [172.93.148.194])
18: 	by mail.arp.tn (Postfix) with ESMTPSA ID: [ID filtered]
19: 	Thu, 28 Jun 2018 xx:xx:xx +0200 (CEST)
Zitat:

My company needs an individual or a company as agent in your region.
Write me if you are interested for details and discussion.
Best regards Peter Schofield
Eli Lilly and Company Global Headquarters Lilly Corporate Center
Indianapolis, Indiana 46285 USA Phone: +1 940-602-1674

IP: 172.93.148.194 ---> Nexeon Technologies

header:
01: Received: from mail.arp.tn ([193.95.27.66]) by mx-ha.gmx.net (mxgmx016
02:  [212.227.15.9]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  <x>; Tue, 03 Jul 2018 xx:xx:xx +0200
04: Received: from localhost (localhost [127.0.0.1])
05: 	by mail.arp.tn (Postfix) with ESMTP ID: [ID filtered]
06: 	Sun,  1 Jul 2018 xx:xx:xx +0200 (CEST)
07: Received: from mail.arp.tn ([127.0.0.1])
08: 	by localhost (mail.arp.tn [127.0.0.1]) (amavisd-new, port 10032)
09: 	with ESMTP ID: [ID filtered]
10: Received: from localhost (localhost [127.0.0.1])
11: 	by mail.arp.tn (Postfix) with ESMTP ID: [ID filtered]
12: 	Sun,  1 Jul 2018 xx:xx:xx +0200 (CEST)
13: X-Virus-Scanned: amavisd-new at mail.arp.tn
14: Received: from mail.arp.tn ([127.0.0.1])
15: 	by localhost (mail.arp.tn [127.0.0.1]) (amavisd-new, port 10026)
16: 	with ESMTP ID: [ID filtered]
17: Received: from [172.93.148.194] (unknown [172.93.148.194])
18: 	by mail.arp.tn (Postfix) with ESMTPSA ID: [ID filtered]
19: 	Sun,  1 Jul 2018 xx:xx:xx +0200 (CEST)
Zitat:

Dear Sir
My name is Mr. Ibrahima Yaya,I wish to announce to you the product we
have presently and ready to sell to any interested serious buyer. Im
Representing Village Mining Site and they wishes to sell some large
quantity of gold in Bar / dust form which is from our mine, We are
able to present 50kgs belonging to several gold mining communities for
sale-on stop - by weekly supply - by monthly supply.
The specifications are ; Item...... (Alluvial Gold Metal)
Form.................BAR / DUST Purity.............96.6% BETTER
Carat........ 22/24.carats.
Total quantity 26 26 26 26 26 26 26... 50kgs
Price.............$24,000usd (FOB/ CIF) Shipment.....50kgs (FOB/CIF)
First Shipment. Origine..... R�publique du Mali.
Our FOB procedure requires buyer to travel to sellers country, test and
analyse the gold at a notable government laboratory, where also a
confirmation Analysis Certificate will be issue for analysed raw gold.
The local export taxes shall be paid by Seller.If you are interested to
start a long term supply relationship with us, I would like you to
honorably request for our Soft Offer, which i will forward on your
request. I would like to have your reply regarding this offer if you are
a serious gold buyer.
Regards
Mr. Ibrahima Yaya

Und wieder mal einer, dank Microsoft und Googlemail:

header:
01: Received: from NAM05-DM3-obe.outbound.protection.outlook.com
02: ([40.107.73.96])
03:  by mx-ha.gmx.net (mxgmx115 [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
04: Received: from BN7P163CA0003.NAMP163.PROD.OUTLOOK.COM (2603:10b6:406:ea::17)
05:  by BN7P163MB0052.NAMP163.PROD.OUTLOOK.COM (2603:10b6:406:ea::27) with
06:  Microsoft SMTP Server (version=TLS1_2,
07:  cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) ID: [ID filtered]
08:  2018 xx:xx:xx +0000
09: Received: from BL2NAM02FT018.eop-nam02.prod.protection.outlook.com
10:  (2a01:111:f400:7e46::204) by BN7P163CA0003.outlook.office365.com
11:  (2603:10b6:406:ea::17) with Microsoft SMTP Server (version=TLS1_2,
12:  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) ID: [ID filtered]
13:  Transport; Sun, 15 Jul 2018 xx:xx:xx +0000
14: Received-SPF: Pass (protection.outlook.com: domain of us.stores.mcd.com
15:  designates 23.103.227.52 as permitted sender)
16:  receiver=protection.outlook.com; client-ip=23.103.227.52;
17:  helo=027-smtp-out.mcd.com;
18: Received: from 027-smtp-out.mcd.com (23.103.227.52) by
19:  BL2NAM02FT018.mail.protection.outlook.com (10.152.77.170) with
20: Microsoft SMTP  Server (version=TLS1_2,
21: cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) ID: [ID filtered]
22: Received: from CO2PR91MB026.027d.mgd.msft.net (141.251.114.214) by
23:  CO2PR91MB027.027d.mgd.msft.net (141.251.114.215) with Microsoft SMTP Server
24:  (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) ID: [ID filtered]
25: Received: from CO2PR91MB026.027d.mgd.msft.net ([141.251.114.214]) by
26:  CO2PR91MB026.027d.mgd.msft.net ([141.251.114.214]) with mapi ID: [ID filtered]
27: Reply-To: "info [at] jameswu-hk.com" <info [at] jameswu-hk.com>
28: Accept-Language: en-US
29: Content-Language: en-US
30: X-MS-Has-Attach:
31: X-MS-TNEF-Correlator:
32: x-originating-ip: [86.187.166.189]
33: x-ms-publictraffictype: Email
34: X-MS-TrafficTypeDiagnostic: CO2PR91MB027:|BN7P163MB0052:
35: X-OriginatorOrg: us.stores.mcd.com
---> Google

Zitat:

Hallo

Mein Name ist Herr J. Wu, Executive Officer und Direktor der Far Eastern
International Bank China.

Ich schreibe heimlich, um Sie wissen zu lassen, dass ein Kunde
bei meiner Bank, Alexandra, gestorben ist und eine Anzahlung von 78
Millionen Dollar auf seinem Bankkonto hinterließ, ohne dass irgendein
überlebender Verwandter das Geld erbte.

Sein Konto in meiner Bank ist derzeit gesperrt. Jetzt, am Ende des
nächsten Monats, will meine Bank die nicht beanspruchten 78 Millionen
Dollar an die japanische Staatskasse zurückgeben.

Ich bin Leiter der Abteilung meiner Bank, die nach überlebenden
Verwandten des toten Kunden suchte, um das Geld für Jahre erfolglos zu
erben.

Ich habe bemerkt, dass Sie beide einen ähnlichen Nachnamen haben.
Also, ich will dem Gesetz von Japan und dem Bankwesen folgen und Sie die
einzigen überlebenden Verwandten des toten Kunden machen, um dieses Geld
von meiner Bank zu erben. Ich habe alle gesetzlichen und Bankabkommen
sorgfältig getroffen.

Es ist streng geheim. Ich würde nur eine Antwort erwarten, wenn Sie
interessiert sind

22.07.2018, 21:09
kjz1
Da wurde wohl gleich eine ganze Domain gekapert:

header:
```
01: Received: from smtpcmd10108.aruba.it (smtpcmd10108.aruba.it [62.149.156.108])
02: 	by xxxxx (Postfix) with ESMTP
03: 	for <x>; Sun, 22 Jul 2018 xx:xx:xx +0200 (CEST)
04: Received: from hrsa.it ([62.149.156.220])
05: 	by smtpcmd10.ad.aruba.it with bizsmtp
06: 	ID: [ID filtered]
```
X-SenderIP: 41.207.201.71 ---> Adsl-41.207.201.71.aviso.ci

Zitat:

Sehr geehrter,

Wie geht es dir und deiner Arbeit?

Ich bin Frau Cecilia Alfonso, aus Spanien. Ich schreibe Ihnen, um Ihnen von meiner Absicht zu erzählen, mein Geld (3,5 Millionen Euro) für wohltätige Zwecke in Ihrem Land zu verwenden. Ich war mit Late verheiratet

Herr Bernardo Alfonso, der mit der Regierung von Spanien ein Auftragnehmer war, bevor er nach einigen Tagen im Krankenhaus starb.

Ich litt an Lung-Krebs, ich möchte wissen, ob ich Ihnen vertrauen kann, dass ich diese Mittel für wohltätige Zwecke, weniger Privilegien, Waisenhaus-Heime, verwende.
Bitte kontaktieren Sie mich, damit ich Ihnen weitere Einzelheiten mitteilen kann.

Dein im Herrn,

Frau Cecilia Alfonso.
23.07.2018, 09:55
kjz1
It's Mugu time again:

header:
```
01: Received: from mail.drgsharepoint.com ([68.109.221.201]) by mx-ha.gmx.net
02:  (mxgmx016 [212.227.15.9]) with ESMTP (Nemesis) ID: [ID filtered]
03:  for <x>; Mon, 23 Jul 2018 xx:xx:xx +0200
04: Received: from Server2016-PC.gateway (Unknown [203.52.55.51]) by
05: 	mail.drgsharepoint.com; Thu, 21 Jun 2018 xx:xx:xx -0500
```
Zitat:

We received a letter of attestation from an attorney representing you in
respect to your overdue fund demanding for issuance of letter of
Authorization(LOA) from our office to transfer the fund ownership to
another person stating that you are dead. Though we are yet to authorize
such approvals to legally give the attorney the right to present a
change of ownership certificate in favor of the new person, not until we
receive a confirmation of your death certificate which we are still
expecting to receive.

We are constantly being pressured by the new Governor , as a result of
the last world leaders summit held in the United States in Washington
D.C. few days ago, hence, i was left with no other option than to send
you this reminder mail to ascertain the fact of your death, after
several unsuccessful attempt to contact your through your telephone number.

But if, peradventure you are still alive, do respond without further
delays, for direction on how to be paid your overdue fund. And note,
that If your responses are not gotten after 48hours of sending this
email to you, then i will be left with no other option than to release
your files to your attorney.

1. Full Names:........................
............

2. Resident Contact Address:.............................

3. Direct Telephone Number or Cell Number:..........................

4. Copy of your Identity if possible:...........................

Finally send an urgent reply to enable us educate you further on the
next step to take.

NOTE. PLEASE REPLY ME HERE.

Best Regards,

Mr. Mike Akwa
Bank of Nigeria
West Africa Monetary Intelligent Unit, Nigeria.
27.07.2018, 10:10
kjz1
Ein weiterer Mugu:

header:
```
01: Received: from omr-m006e.mx.aol.com ([204.29.186.6]) by mx-ha.gmx.net
02:  (mxgmx114 [212.227.17.5]) with ESMTPS (Nemesis) ID: [ID filtered]
03:  for <x>; Thu, 26 Jul 2018 xx:xx:xx +0200
04: Received: from mtaomg-mbe01.mx.aol.com (mtaomg-mbe01.mx.aol.com
05: [172.26.254.175])
06: 	by omr-m006e.mx.aol.com (Outbound Mail Relay) with ESMTP ID: [ID filtered]
07: 	Thu, 26 Jul 2018 xx:xx:xx -0400 (EDT)
08: Received: from core-abc01b.mail.aol.com (core-abc01.mail.aol.com
09: [172.27.9.11]) by mtaomg-mbe01.mx.aol.com (OMAG/Core Interface) with ESMTP id
10: 0307E38000081; Thu, 26 Jul 2018 xx:xx:xx -0400 (EDT)
11: Received: from 197.239.65.6 by webjas-vad145.srv.aolmail.net
12: (10.96.35.148) with HTTP (WebMailUI); Thu, 26 Jul 2018 xx:xx:xx -0400
```
X-Originating-IP: [197.239.65.6] ---> AIRTEL Burkina Faso

Zitat:

Dear Friend,

With due respect to your person and much sincerity of purpose . I have
a business proposal which I will like to handle with you. $35 Million
USD is involve. But be rest assured that everything is legal and risk
free as I have concluded all the arrangements and the legal papers
that will back the transaction up. Kindly indicate your interest as to
enable me tell you more detail of the proposal.
After reading this mail please contact me at my private email:

Waiting for your urgent response.
Yours Faithfully,
Mr.Salah Ibrahim

Randnotiz:

X-GMX-Antispam: 6

also 6 Scoring-Punkte und damit (im Gegensatz zu anderen Spams) im GMX-Spamordner gelandet. Was dreht da UI am Rad, dass 6 Punkte (eigentlich ein sicheres Spam-Kennzeichen) bei manchen Spams nicht zum Verschieben in den Spamordner führen. Sind da etwa 'einige Spams gleicher als andere' ...
04.08.2018, 18:22
kjz1
Und mal wieder eine Russenbraut:

header:
```
01: Received: from wironout2b.netvigator.com ([219.76.94.33]) by mx-ha.gmx.net
02:  (mxgmx017 [212.227.15.9]) with ESMTP (Nemesis) ID: [ID filtered]
03:  for <x>; Sat, 04 Aug 2018 xx:xx:xx +0200
04: Received: from yckviprion01-02smtp.netvigator.com (HELO
05: yironoah02.netvigator.com) ([203.198.23.151])
06:   by wironout2.netvigator.com with ESMTP; 04 Aug 2018 xx:xx:xx +0800
07: Received: from oicofoklahomacounty.org (HELO
08: www.simonedelarue.tomkel.com) ([IPv6:2607:f298:6:a016::c76:cdd1])
09:   by yironoah02.netvigator.com with ESMTP; 04 Aug 2018 xx:xx:xx +0800
```
Zitat:

Guten Abend!!! Wie die Stimmung du??? Was machst sie??Ich habe mich nie
im online getroffen, jedoch beschlossen, es zu versuchen... Ich will
dich wohlgefallig Bekanntschaft machen. Ich mochtesuche eine mannlich
fur ein ernsthafte Verhaltnisse!!!!Ich wunschen ein mannlich
kennenlernen....! Ich hoffe, Sie bist eine Single mannlich , Sie wirst
froh sein, mich besser zu kennen!!!!Ich habe ernst Einstellung. Ich bin
Tatyana....!
Ich bin ein liebenswurdig , gut Frau. Ich habe keine ungesund
Gewohnheit!!!! Ich gefallt mir bereitwillig Schwimmen beschaftigen..Wenn
du daran wollen, unsere Kenntnis Fortsetzung, dann erzahle ich sie mehr
uber mein Leben!!Ich hoffe, du wirst mir bald Antwortbrief... Tatyana
16.08.2018, 09:36
kjz1
Und auch diesen Mugu hatten wir schon, jetzt wurde die Webpräsenz des Careum-Verlages gecrackt:

header:
```
01: Received: from care-ch-gtg-vsv-001.cyberlink.ch (careum.eu [62.12.142.84])
02: 	by xxxxx (Postfix) with ESMTP
03: 	for <x>; Wed, 15 Aug 2018 xx:xx:xx +0200 (CEST)
04: Received: from care-ch-gtg-vsv-001 (localhost [127.0.0.1])
05: 	by care-ch-gtg-vsv-001.cyberlink.ch (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 15 Aug 2018 xx:xx:xx +0200 (CEST)
07: Subject: Artikel in www.careum-verlag.ch: Band J: Steuerung des Organismus
```
Zitat:

This product suggestion was sent to you by
with the following personal message:

BENÖTIGEN SIE IHREN KREDIT BEI 3% ZINS FÜR GESCHÄFT UND PRIVAT
ZWECKE? FALLS JA:
FÜLLEN UND ZURÜCKGEBEN
Name: ===
Benötigter Betrag: ===
Dauer: ==
Land ===
Zweck: ===
Handynummer

Please take this into account:
Careum has not checked the identity of the sender

40 Beiträge dieses Themas auf einer Seite anzeigen