Zur Komplettierung der Sammlung:
header:
01: Received: from server01.almacis.it (server01.almacis.it [93.51.137.51])
02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: for xxxxx; Tue, 23 Dec 2014 xx:xx:xx +0100 (CET)
04: Received: from User ([223.197.83.12]) by server01.almacis.it with
05: Microsoft SMTPSVC(6.0.3790.4675); Tue, 23 Dec 2014 xx:xx:xx +0100
06: charset="Windows-1251"
header:
01: Received: from email.pka.gov.my ([58.26.183.37]) by mx-ha.gmx.net (mxgmx111)
02: with ESMTPS (Nemesis) ID: [ID filtered]
03: Dec 2014 xx:xx:xx +0100
04: Received: from mail.pka.gov.my (Not Verified[10.100.100.19]) by
05: email.pka.gov.my with MailMarshal (v7,1,2,5326)
06: ID: [ID filtered]
07: Received: from [192.168.1.10] (10.100.100.2) by mail.pka.gov.my
08: (10.100.100.29) with Microsoft SMTP Server ID: [ID filtered]
09: xx:xx:xx +0800
gecrackt:
header:
01: Received: from www.direzionalepontina.com ([212.66.110.58]) by mx-ha.gmx.net
02: (mxgmx113) with ESMTP (Nemesis) ID: [ID filtered]
03: Thu, 25 Dec 2014 xx:xx:xx +0100
04: Received: from User (unknown [41.138.188.76])
05: by www.direzionalepontina.com (Postfix) with ESMTPA ID: [ID filtered]
06: Sun, 21 Dec 2014 xx:xx:xx +0100 (CET)
07: charset="Windows-1251"
IP: 41.138.188.76 ---> VISAFONE-LAGOS-PDSN2
header:
01: Received: from mail.cloudjumper.co ([54.68.100.83]) by mx-ha.gmx.net
02: (mxgmx106) with ESMTP (Nemesis) ID: [ID filtered]
03: Mon, 29 Dec 2014 xx:xx:xx +0100
04: Received: from User (unknown [88.250.122.12])
05: by mail.cloudjumper.co (Postfix) with ESMTPA ID: [ID filtered]
06: Sun, 28 Dec 2014 xx:xx:xx +0800
07: charset="Windows-1251"
gecrackt:
Muguphon: +234 812-642-4564 ---> Airtel Ltd (Celtel), Nigeria
header:
01: Received: from web.webservices.com.co (unknown [198.1.99.24])
02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
03: (No client certificate requested)
04: by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
05: for xxxxx; Wed, 31 Dec 2014 xx:xx:xx +0100 (CET)
06: Received: from localhost ([127.0.0.1]:36835 helo=webmail.gatoperez.com)
07: by web.webservices.com.co with esmtpa (Exim 4.82)
08: (envelope-from <gatoperez [at] gatoperez.com>)
09: ID: [ID filtered]
10: Received: from 41.189.61.6 ([41.189.61.6]) (proxying for 41.189.61.6)
11: (SquirrelMail authenticated user poor [at] spamvictim.tld)
12: by webmail.gatoperez.com with HTTP;
13: Tue, 30 Dec 2014 xx:xx:xx -0700
gecrackt:
IP: 41.189.61.6 ---> 3G-ORANGE-41.189.61.6.aviso.ci
Muguphon: +225 44 91 77 43 ---> MTN Côte d'Ivoire
Mugufax: +225 20 32 62 92 ---> Côte d’Ivoire Telecom
header:
01: Received: from nm9-vm1.bullet.mail.ir2.yahoo.com ([212.82.96.144]) by
02: mx-ha.gmx.net (mxgmx105) with ESMTPS (Nemesis) ID: [ID filtered]
03: for xxxxx; Wed, 31 Dec 2014 xx:xx:xx +0100
04: Received: from [212.82.98.55] by nm9.bullet.mail.ir2.yahoo.com with
05: NNFMP; 31 Dec 2014 xx:xx:xx -0000
06: Received: from [212.82.98.112] by tm8.bullet.mail.ir2.yahoo.com with
07: NNFMP; 31 Dec 2014 xx:xx:xx -0000
08: Received: from [127.0.0.1] by omp1049.mail.ir2.yahoo.com with NNFMP; 31
09: Dec 2014 xx:xx:xx -0000
10: Received: by 212.82.98.116; Wed, 31 Dec 2014 xx:xx:xx +0000
header:
01: Received: from www.milestonehk.com ([42.99.130.109]) by mx-ha.gmx.net
02: (mxgmx008) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [36.37.195.32] (helo=User)
04: by www.milestonehk.com with esmtpa (Exim 4.72)
05: (envelope-from <phanyin [at] hotmail.com>)
06: ID: [ID filtered]
07: charset="Windows-1251"
header:
01: Received: from web.kohlandfrisch.com ([69.90.78.232]) by mx-ha.gmx.net
02: (mxgmx011) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [212.76.143.11] (port=2727 helo=User)
04: by web.kohlandfrisch.com with esmtpa (Exim 4.77)
05: (envelope-from <mb47907 [at] gmail.com>)
06: ID: [ID filtered]
07: charset="Windows-1251"
header:
01: Received: from na01-by2-obe.outbound.protection.outlook.com
02: (mail-by2hn0246.outbound.protection.outlook.com [207.46.100.246])
03: (using TLSv1 with cipher AES256-SHA (256/256 bits))
04: (No client certificate requested)
05: by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: for xxxxx; Thu, 18 Dec 2014 xx:xx:xx +0100 (CET)
07: Received: from BY1PR0201CA0029.namprd02.prod.outlook.com (25.160.191.167) by
08: CY1PR0201MB1004.namprd02.prod.outlook.com (25.161.211.146) with Microsoft
09: SMTP Server (TLS) ID: [ID filtered]
10: Received: from BL2FFO11FD022.protection.gbl (2a01:111:f400:7c09::165) by
11: BY1PR0201CA0029.outlook.office365.com (2a01:111:e400:4814::39) with
12: Microsoft
13: SMTP Server (TLS) ID: [ID filtered]
14: xx:xx:xx +0000
15: Received: from kedge3.utk.tennessee.edu (160.36.179.135) by
16: BL2FFO11FD022.mail.protection.outlook.com (10.173.161.101) with Microsoft
17: SMTP Server (TLS) ID: [ID filtered]
18: xx:xx:xx +0000
19: Received: from User (192.249.6.212) by smtpout.utk.edu (160.36.179.196) with
20: Microsoft SMTP Server ID: [ID filtered]
21: charset="Windows-1251"
der Sternchen-Mugu:
header:
01: Received: from pop-satin.atl.sa.earthlink.net
02: (pop-satin.atl.sa.earthlink.net [207.69.195.63])
03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: for xxxxx; Thu, 18 Dec 2014 xx:xx:xx +0100 (CET)
05: Received: from h-69-3-0-250.mcln.va.megapath.net ([69.3.0.250] helo=User)
06: by pop-satin.atl.sa.earthlink.net with smtp (Exim 3.36 #1)
07: ID: [ID filtered]
Zitat:
**
*UBA GROUP Adresse: Carrefour des trois Banques *
*Avenue Pape Jean Paul II, Abuja, Nigeria.*
**
Muguphon: +234 8054080167 ---> Globacom Ltd., Nigeria
header:
01: Received: from pop-altamira.atl.sa.earthlink.net
02: (pop-altamira.atl.sa.earthlink.net [207.69.195.62])
03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
04: for xxxxx; Sat, 20 Dec 2014 xx:xx:xx +0100 (CET)
05: Received: from 66-90-195-195.dyn.grandenetworks.net ([66.90.195.195]
06: helo=User)
07: by pop-altamira.atl.sa.earthlink.net with smtp (Exim 3.36 #1)
08: ID: [ID filtered]
09: charset="Windows-1251"
Zitat:
*_NIGERIANFOREIGNPAYMENTINVESTIGATIONDEPARTMENT_*
*_RE: FRAUD ALERT/FINAL!!!_*
**
Muguphon: +234 803 716 5537 ---> MTN Nigeria Communications Ltd.
header:
01: Received: from msgw007-01.ocn.ad.jp ([180.37.203.146]) by mx-ha.gmx.net
02: (mxgmx103) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User (p4013-ipbf6409marunouchi.tokyo.ocn.ne.jp
04: [114.145.235.13])
05: by msgw007-01.ocn.ad.jp (Postfix) with SMTP ID: [ID filtered]
06: Sat, 20 Dec 2014 xx:xx:xx +0900 (JST)
07: charset="Windows-1251"
Zitat:
*Sie haben erfolgreich die Anforderungen , gesetzlichen Verpflichtungen,
Ьberprьfungen und unsere zufriedenstellenden Bericht Test fьr alle unsere
Online- Gewinner durchgefьhrt weitergegeben. Eine gewinnende Scheck von
450.000,00 Euro wird in Ihrem Namen von Google Fцrderpreis Teams
ausgegeben.
Fьllen Sie das untenstehende Formular Verarbeitung:*
**
Muguphon: +44-7087-6403-59 ---> universal access number, UK
Muguphon: +44-7087-6403-61 ---> universal access number, UK
Und wie man sieht, immer wieder mit freundlicher Unterstützung der Russenmafia. (charset="Windows-1251" ist kyrillisch, die Mugu sind selbst zu blöde, den Zeichensatz der bei der Russenmafia gekauften Ratware umzustellen.)