Mugu Dubletten

Druckbare Version

40 Beiträge dieses Themas auf einer Seite anzeigen

16.10.2015, 11:39
Simsalabimbo
Mr. Paul Wilson ist verzweifelt auf der Suche...

Zitat:

My name is Mr. Paul Wilson, NatWest, Director of Commercial Banking, Chelmsford & Romford. United Kingdom. Being a top executive at NATWEST, I discovered a Numbered account with a credit balance of Ј18,300,000 .00 British Pounds plus accumulated interest, which belongs to an American multi-millionaire Crude oil Merchant Mr. David Watkins, who was a victim of Hurricane Katrina in August 2005. Until now, nobody knows about his bank account with NatWest Bank and my further investigation proved that the deceased immediate family also died in the tragedy.

(...blubber-blubber...)

Considering the sensitivity nature and magnitude of this project,i ask your reply to my private Email:
Thanking you in anticipation for your prompt response.

Best Regards,
Mr. Paul Wilson,
NatWest Bank Plc.
Director Commercial Banking,
Chelmsford & Romford.

header:
```
01: Received: from mail.fengli.net ([116.236.233.220]) by mx-ha.web.de (mxweb102)
02:  with ESMTPS (Nemesis) ID: [ID filtered]
03:  Thu, 15 Oct 2015 xx:xx:xx +0200
04: Received: from User (188.207.108.35) by FengliMail.fengli.net (10.30.6.8) with
05:  Microsoft SMTP Server ID: [ID filtered]
06: Reply-To: <paul.wilson22 [at] writeme.com>
07: From: "Mr. Paul Wilson" <test [at] fengli.net>
08: X-Mailer: Microsoft Outlook Express 6.00.2800.1081
09: X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
10: Message-ID: [ID filtered]
```
^whois:116.236.233.220
^whois:188.207.108.35

Ein Griff in die Kiste fördert zutage:

header:

01: Received: from srv01.radlink.com.br ([189.50.192.6]) by mx-ha.gmx.net
02: 	(mxgmx012) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [210.150.117.70] (helo=User) by srv01.radlink.com.br with esmtpa
04: 	(Exim 4.72) (envelope-from <rungsisutan [at] lawyer.com>) ID: [ID filtered]
05: charset="Windows-1251"

Muguphon: +852-6048-8234 ---> mobile number ---> Hutchison - CDMA, Hong Kong

header:

01: Received: from vps.bookcentre.ca ([69.27.107.107]) by mx-ha.gmx.net
02: (mxgmx011) with ESMTPS (Nemesis) ID: [ID filtered]
03:  Sep 2015 xx:xx:xx +0200
04: Received: from vps.bookcentre.ca (localhost [127.0.0.1])
05: 	by vps.bookcentre.ca (8.13.1/8.13.1) with ESMTP ID: [ID filtered]
06: 	Wed, 30 Sep 2015 xx:xx:xx -0600

Man beachte: Microsoft-Geraffel, Zombie in Indien, GMail-Dropbox:

header:

01: Received: from APC01-PU1-obe.outbound.protection.outlook.com
02:  ([104.47.126.201]) by mx-ha.gmx.net (mxgmx002) with ESMTPS (Nemesis) id
03:  0Lm4Cv-1aGv1A1dj7-00ZcDP for xxxxx; Thu, 01 Oct 2015 xx:xx:xx +0200
04: Received: from [100.67.165.254] (116.202.38.151) by
05:  KL1PR04MB1143.apcprd04.prod.outlook.com (10.169.29.149) with Microsoft SMTP
06:  Server (TLS) ID: [ID filtered]
07: Received-SPF: None (protection.outlook.com: [100.67.165.254] does not
08:  designate permitted sender hosts)

X-Originating-IP: [116.202.38.151] ---> PDSNNEW2-DELHI-MTS-INDIA-IN

Col. Wafa Alhalabi Adel ist wieder mal auf Dummen-Fang

Der scheinbar schon weithin bekannte ist wohl immer noch bemüht seine 16½ Millionen ausser Landes zu schaffen.

header:

01: Return-Path: <l***.h****@t-online.de>
02: Received: from mailout09.t-online.de ([194.25.134.84]) by mx-ha.gmx.net
03: 	(mxgmx103) with ESMTPS (Nemesis) ID: [ID filtered]
04: Received: from fwd32.aul.t-online.de (fwd32.aul.t-online.de [172.20.26.144]) by
05: 	mailout09.t-online.de (Postfix) with SMTP ID: [ID filtered]
06: Received: from [104.243.24.167]
07: 	(bNFC8rZQohxOGFMDSYkqk1AnIf0Up3wMtechO+YF6IVw-X-Fa5ovTDFaSml7y6jQ4y@[104.243.24.167])
08: 	by fwd32.t-online.de with (TLSv1:DHE-RSA-AES256-SHA encrypted) esmtp ID: [ID filtered]
09: Content-Type: multipart/alternative; boundary="===============1104327520=="
10: MIME-Version: 1.0
11: Subject: ACHTUNG.
12: To: Recipients <poor [at] spamvictim.tld>
13: From: "Col.Wafa Alhalabi Adel" <l***.h****@t-online.de>
14: Date: Wed, 21 Oct 2015 xx:xx:xx -0700
15: Reply-To: col.waalhalabi85 [at] gmail.com
16: Message-ID: [ID filtered]
17: X-ID: [ID filtered]
18: X-TOI-MSGID: [ID filtered]
19: Envelope-To: <poor [at] spamvictim.tld>
20: X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
21: X-GMX-Antivirus: 0 (no virus found)

Hatte wohl gestern keine Zeit so ausführlich zu schwallen wie bei früheren Versuchen:

Zitat:

Ich weiß, diese Mitteilung wird eine Überraschung für Sie sein. Ich bin ein Offizier Wafa Adel der syrischen Armee . Sie kennen die Situation meines Landes Syrien. Ich brauche deine Hilfe. Ich habe insgesamt USD 16,5 Mio. aus einer Rohöl viel kann ich dir vertrauen ,

Wafa .

header:

01:  
02: Return-Path: <f*****w**@t-online.de>
03: Received: from mailout04.t-online.de ([194.25.134.18]) by mx-ha.gmx.net
04: 	(mxgmx011) with ESMTPS (Nemesis) ID: [ID filtered]
05: Received: from fwd04.aul.t-online.de (fwd04.aul.t-online.de [172.20.26.149]) by
06: 	mailout04.t-online.de (Postfix) with SMTP ID: [ID filtered]
07: Received: from [104.243.24.167]
08: 	(rPFS5rZvQhn271lhJkr58ZfS78MmfBr0dQBOaouv2i1W3FXHcal64U8XADXL0wHgIB@[104.243.24.167])
09: 	by fwd04.t-online.de with (TLSv1:DHE-RSA-AES256-SHA encrypted) esmtp ID: [ID filtered]
10: Content-Type: multipart/alternative; boundary="===============1291008667=="
11: MIME-Version: 1.0
12: Subject: =?utf-8?q?ACHTUNG=2EMy_Namen_Erf=C3=BCllt_ist_COL=2EWAFA_ALHALABI_ADEL_?=
13: 	=?utf-8?q?=2CE-Mail_f=C3=BCr_weitere_Informationen=2E?=
14: To: Recipients <poor [at] spamvictim.tld>
15: From: "Col.Wafa Alhalabi Adel" <f*****w**@t-online.de>
16: Date: Thu, 22 Oct 2015 xx:xx:xx -0700
17: Reply-To: co.a739e [at] dr.com
18: Message-ID: [ID filtered]
19: X-ID: [ID filtered]
20: X-TOI-MSGID: [ID filtered]
21: Envelope-To: <poor [at] spamvictim.tld>
22: X-GMX-Antispam: 6 (nemesis text pattern profiler); Detail=V3;
23: X-GMX-Antivirus: 0 (no virus found)

Und heute hatte ers wohl ganz eilig:

Zitat:

Email mich

Alle meine Mugu-Freunde:

header:

01: Received: from mail.inunisonkids.com ([65.15.51.214]) by mx-ha.gmx.net
02:  (mxgmx111) with ESMTP (Nemesis) ID: [ID filtered]
03:  Tue, 20 Oct 2015 xx:xx:xx +0200 
04: Received: from User ([45.46.148.200] RDNS failed) by
05: mail.inunisonkids.com with Microsoft SMTPSVC(6.0.3790.4675);
06: 	 Tue, 20 Oct 2015 xx:xx:xx -0400

header:

01: Received: from sever54.websiteposition.org ([78.46.74.210]) by mx-ha.gmx.net
02:  (mxgmx011) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [192.207.61.215] (port=63906 helo=User)
04: 	by sever54.websiteposition.org with esmtpa (Exim 4.85)
05: 	(envelope-from <hyolee [at] gmail.com>)
06: 	ID: [ID filtered]
07: charset="Windows-1251"

gecrackt:

header:

01: Received: from ingresomatico.vservers.es ([91.142.215.143]) by mx-ha.gmx.net
02:  (mxgmx007) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: (qmail 10995 invoked from network); 17 Oct 2015 xx:xx:xx +0200
04: Received: from softdnserror (HELO User) (41.71.177.183)
05:   by ingresomatico.vservers.es with ESMTPA; 17 Oct 2015 xx:xx:xx +0200

IP: 41.71.177.183 ---> Visafone Communications Limited, Nigeria

Muguphon: +234-81-3918-0751 ---> Nigeria

header:

01: Received: from mx1.ironport.et ([213.55.96.134]) by mx-ha.gmx.net (mxgmx102)
02:  with ESMTP (Nemesis) ID: [ID filtered]
03:  Oct 2015 xx:xx:xx +0200  
04: Received: from unknown (HELO lgh-mail-b-1.etcmailserver.com.et)
05: ([10.154.9.4]) by mx1.ironport.et with ESMTP; 18 Oct 2015 xx:xx:xx +0300

gecrackt:

header:

01: Received: from mx1.ironport.et ([213.55.96.134]) by mx-ha.gmx.net (mxgmx004)
02:  with ESMTP (Nemesis) ID: [ID filtered]
03:  Oct 2015 xx:xx:xx +0200
04: Received: from unknown (HELO lgh-mail-b-1.etcmailserver.com.et)
05: ([10.154.9.4]) by mx1.ironport.et with ESMTP; 20 Oct 2015 xx:xx:xx +0300

gecrackt:

header:

01: Received: from emea01-am1-obe.outbound.protection.outlook.com
02:  ([157.56.112.251]) by mx-ha.gmx.net (mxgmx004) with ESMTPS (Nemesis) id
03:  0Lmepv-1aOdSr0g3X-00aDA2 for xxxxx; Fri, 23 Oct 2015 xx:xx:xx +0200
04: Received: from AMSPR05MB519.eurprd05.prod.outlook.com (10.242.224.21) by
05:  AMSPR05MB081.eurprd05.prod.outlook.com (10.242.89.140) with Microsoft SMTP
06:  Server (TLS) ID: [ID filtered]
07: Received: from [10.27.20.183] (197.211.52.22) by
08:  AMSPR05MB519.eurprd05.prod.outlook.com (10.242.224.21) with Microsoft SMTP
09:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [197.211.52.22] ---> GLOMOBILE, Nigeria

Muguphon: +234 8165039508 ---> Nigeria

header:

01: Received: from nm36-vm0.bullet.mail.ne1.yahoo.com
02: (nm36-vm0.bullet.mail.ne1.yahoo.com [98.138.229.112])
03: 	by xxxxx (Postfix) with ESMTPS
04: 	for xxxxx; Fri, 23 Oct 2015 xx:xx:xx +0200 (CEST)
05: Received: from [127.0.0.1] by nm36.bullet.mail.ne1.yahoo.com with NNFMP;
06: 23 Oct 2015 xx:xx:xx -0000
07: Received: from [98.138.226.178] by nm36.bullet.mail.ne1.yahoo.com with
08: NNFMP; 23 Oct 2015 xx:xx:xx -0000
09: Received: from [98.138.89.198] by tm13.bullet.mail.ne1.yahoo.com with
10: NNFMP; 23 Oct 2015 xx:xx:xx -0000
11: Received: from [127.0.0.1] by omp1056.mail.ne1.yahoo.com with NNFMP; 23
12: Oct 2015 xx:xx:xx -0000
13: Received: by 98.138.101.183; Fri, 23 Oct 2015 xx:xx:xx +0000

Noch mehr Freunde:

Und wieder: Microsoft-Geraffel, Zombie in Indien, GMail-Dropbox

header:

01: Received: from IND01-BO1-obe.outbound.protection.outlook.com
02:  ([104.47.101.249]) by mx-ha.gmx.net (mxgmx013) with ESMTPS (Nemesis) id
03:  0MbcOb-1a4Txm1EKz-00J1mN for xxxxx; Mon, 19 Oct 2015 xx:xx:xx +0200
04: Received: from [100.78.195.8] (101.57.196.177) by
05:  MAXPR01MB0089.INDPRD01.PROD.OUTLOOK.COM (10.164.149.6) with Microsoft SMTP
06:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [101.57.196.177] ---> RELIANCE-COMMUNICATIONS, India

Und wieder: Microsoft-Geraffel, Zombie in Indien, GMail-Dropbox

header:

01: Received: from IND01-MA1-obe.outbound.protection.outlook.com
02:  ([104.47.100.216]) by mx-ha.gmx.net (mxgmx008) with ESMTPS (Nemesis) id
03:  0LdLmL-1aFYRw2tFp-00iRwE for xxxxx; Thu, 22 Oct 2015 xx:xx:xx +0200
04: Received: from [100.73.185.141] (101.59.251.218) by
05:  MA1PR01MB0264.INDPRD01.PROD.OUTLOOK.COM (10.164.120.15) with Microsoft SMTP
06:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [101.59.251.218] ---> Reliance Communications Ltd, India

Von der Mugu-Front gibt es zu melden:

header:

01: Received: from iscan2.cbssc.com ([206.13.75.32]) by mx-ha.gmx.net (mxgmx105)
02:  with ESMTP (Nemesis) ID: [ID filtered]
03:  Oct 2015 xx:xx:xx +0100
04: Received: from mail.mptp.com ([206.13.68.11])
05:   by iscan2.cbssc.com with ESMTP; 25 Oct 2015 xx:xx:xx -0700
06: Received: from User [202.69.74.82] by mail.mptp.com with ESMTP
07:   (SMTPD-12.4.2.27) ID: [ID filtered]

header:

01: Received: from amf-vw.amf.de (amf-vw.amf.de [88.79.72.236])
02: 	by xxxxx (Postfix) with ESMTP
03: 	for xxxxx; Wed, 28 Oct 2015 xx:xx:xx +0100 (CET)
04: Received: from localhost (localhost [127.0.0.1])
05: 	by amf-vw.amf.de (Postfix) with ESMTP ID: [ID filtered]
06: 	Wed, 28 Oct 2015 xx:xx:xx +0100 (CET)
07: Received: from amf-vw.amf.de ([127.0.0.1])
08: 	by localhost (srv-zimbra.amf.de [127.0.0.1]) (amavisd-new, port 10032)
09: 	with ESMTP ID: [ID filtered]
10: Received: from localhost (localhost [127.0.0.1])
11: 	by amf-vw.amf.de (Postfix) with ESMTP ID: [ID filtered]
12: 	Wed, 28 Oct 2015 xx:xx:xx +0100 (CET)
13: Received: from amf-vw.amf.de ([127.0.0.1])
14: 	by localhost (srv-zimbra.amf.de [127.0.0.1]) (amavisd-new, port 10026)
15: 	with ESMTP ID: [ID filtered]
16: Received: from srv-zimbra.amf.de (srv-zimbra.amf.de [172.16.0.190])
17: 	by amf-vw.amf.de (Postfix) with ESMTP ID: [ID filtered]
18: 	Wed, 28 Oct 2015 xx:xx:xx +0100 (CET)

Gecrackt:

header:

01: Received: from ns.inazawa.jaaikosei.or.jp ([210.227.163.114]) by
02: mx-ha.gmx.net (mxgmx005) with ESMTP (Nemesis) ID: [ID filtered]
03:  Thu, 29 Oct 2015 xx:xx:xx +0100
04: Received: from User (82.159.123.133.dyn.user.ono.com [82.159.123.133])
05: 	by ns.inazawa.jaaikosei.or.jp (Postfix) with ESMTPA ID: [ID filtered]
06: 	Wed, 28 Oct 2015 xx:xx:xx +0900 (JST)

Weitere Mugu-Kämpfer:

wieder mal: abgekübelt über M$, Proxy in Indien, Wegwerfadresse:

header:

01: Received: from APC01-SG2-obe.outbound.protection.outlook.com
02:  ([104.47.125.215]) by mx-ha.gmx.net (mxgmx011) with ESMTPS (Nemesis) id
03:  0LoZS6-1aPBLa1lak-00gZiJ for xxxxx; Wed, 28 Oct 2015 xx:xx:xx +0100
04: Received: from [100.65.1.3] (116.203.76.4) by
05:  HK2PR04MB0675.apcprd04.prod.outlook.com (10.162.241.145) with Microsoft
06: SMTP  Server (TLS) ID: [ID filtered]

X-Originating-IP: [116.203.76.4] ---> PDSNNEW3-MUMBAI-MTS-INDIA-IN

header:

01: Received: from APC01-SG2-obe.outbound.protection.outlook.com
02:  ([104.47.125.218]) by mx-ha.gmx.net (mxgmx001) with ESMTPS (Nemesis) id
03:  0MEWoj-1ZiCTe2v9t-00Flij for xxxxx; Sun, 01 Nov 2015 xx:xx:xx +0100
04: Received: from [192.168.1.100] (116.202.32.88) by
05:  HK2PR04MB0706.apcprd04.prod.outlook.com (10.162.241.151) with Microsoft
06: SMTP
07:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [116.202.32.88] ---> DELHI-MTS-INDIA-IN

Auch die Mugus werden nicht vergessen:

header:

01: Received: from emea01-am1-obe.outbound.protection.outlook.com
02:  ([157.56.112.250]) by mx-ha.gmx.net (mxgmx111) with ESMTPS (Nemesis) id
03:  0Lkk36-1aTmNU1oRw-00aSP6 for xxxxx; Tue, 03 Nov 2015 xx:xx:xx +0100
04: Received: from [10.153.226.42] (105.112.19.42) by
05:  VI1PR09MB0464.eurprd09.prod.outlook.com (10.161.110.24) with Microsoft SMTP
06:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [105.112.19.42] ---> Airtel-Nigeria

header:

01: Received: from emea01-db3-obe.outbound.protection.outlook.com
02:  ([157.55.234.247]) by mx-ha.gmx.net (mxgmx103) with ESMTPS (Nemesis) id
03:  0MEKhw-1ZfE6b1vtA-00FQOT for xxxxx; Fri, 06 Nov 2015 xx:xx:xx +0100
04: Received: from AM4PR07MB1380.eurprd07.prod.outlook.com (10.164.82.30) by
05:  AM4PR07MB1380.eurprd07.prod.outlook.com (10.164.82.30) with
06: ShadowRedundancy
07:  ID: [ID filtered]
08: Received: from HE1PR07MB1387.eurprd07.prod.outlook.com (10.164.52.29) by
09:  AM4PR07MB1380.eurprd07.prod.outlook.com (10.164.82.30) with Microsoft SMTP
10:  Server (TLS) ID: [ID filtered]

Microsoft Office365 entwickelt sich langsam aber sicher zur Mugu-Müllhalde...

Micosoft Office 365 macht den Mugus Freude:

header:

01: Received: from emea01-am1-obe.outbound.protection.outlook.com
02:  ([157.56.112.252]) by mx-ha.gmx.net (mxgmx109) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [41.145.88.191] (45.55.136.149) by
04:  HE1PR07MB1387.eurprd07.prod.outlook.com (10.164.52.29) with Microsoft SMTP
05:  Server (TLS) ID: [ID filtered]

header:

01: Received: from emea01-am1-obe.outbound.protection.outlook.com
02:  ([157.56.112.252]) by mx-ha.gmx.net (mxgmx010) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [41.145.88.191] (45.55.136.149) by
04:  DB5PR07MB0856.eurprd07.prod.outlook.com (10.161.196.15) with Microsoft SMTP
05:  Server (TLS) ID: [ID filtered]

header:

01: Received: from emea01-am1-obe.outbound.protection.outlook.com
02:  ([157.56.112.252]) by mx-ha.gmx.net (mxgmx105) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from [41.145.88.191] (45.55.136.149) by
04:  DB4PR07MB266.eurprd07.prod.outlook.com (10.242.230.142) with Microsoft SMTP
05:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [45.55.136.149] ---> vpn-29102015-as5340.tunnelbear.com

IP: 41.145.88.191 ---> 8ta-145-88-191.telkomadsl.co.za

header:

01: Received: from onncce.org.mx ([187.210.168.130]) by mx-ha.gmx.net (mxgmx005)
02:  with ESMTP (Nemesis) ID: [ID filtered]
03:  Nov 2015 xx:xx:xx +0100
04: Received: from localhost (localhost [127.0.0.1])
05: 	by onncce.org.mx (Postfix) with ESMTP ID: [ID filtered]
06: 	Fri,  6 Nov 2015 xx:xx:xx -0600 (CST)
07: Received: from tracking.techlight.local (unknown [74.7.156.90])
08: 	by onncce.org.mx (Postfix) with ESMTPSA ID: [ID filtered]
09: 	Fri,  6 Nov 2015 xx:xx:xx -0600 (CST)

Etwas Mugu-Futter gibt's noch:

Autschlook!?!

header:

01: Received: from IND01-BO1-obe.outbound.protection.outlook.com
02:  ([104.47.101.218]) by mx-ha.gmx.net (mxgmx008) with ESMTPS (Nemesis) id
03:  0LoaJm-1acPQe0FMA-00gW15 for xxxxx; Tue, 10 Nov 2015 xx:xx:xx +0100
04: Received: from PN1PR01MB0367.INDPRD01.PROD.OUTLOOK.COM (10.164.140.147) by
05:  PN1PR01MB0078.INDPRD01.PROD.OUTLOOK.COM (10.164.138.150) with Microsoft
06: SMTP
07:  Server (TLS) ID: [ID filtered]
08: Received: from [10.204.182.228] (197.211.53.21) by
09:  PN1PR01MB0367.INDPRD01.PROD.OUTLOOK.COM (10.164.140.147) with Microsoft
10: SMTP
11:  Server (TLS) ID: [ID filtered]

X-Originating-IP: [197.211.53.21] ---> GLOMOBILE, Nigeria

X-OriginatorOrg: ^whois:

40 Beiträge dieses Themas auf einer Seite anzeigen