Seite 28 von 168 ErsteErste ... 1826272829303878128 ... LetzteLetzte
Ergebnis 271 bis 280 von 1676

Thema: Mugu Dubletten

  1. #271
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.439

    Standard

    Wie war das noch mit Wochenende und Mugus....


    header:
    01: Received: from smtp23.orange.fr (smtp23.orange.fr [193.252.22.126])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User (unknown [78.56.136.208])
    05: by mwinf2317.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
    06: Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)

    [Link nur für registrierte Mitglieder sichtbar. ]

    Muguphon: +27-78-130-2165 ---> MTN, ZA



    header:
    01: Received: from poczta.o2.pl (mx12.go2.pl [193.17.41.142])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from poczta.o2.pl (mx12 [127.0.0.1])
    05: by poczta.o2.pl (Postfix) with ESMTP ID: [ID filtered]
    06: Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)
    07: Received: from User (dsl-146-51-162.telkomadsl.co.za [165.146.51.162])
    08: by poczta.o2.pl (Postfix) with ESMTP;
    09: Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from mail.cultura.ro (mail.cultura.ro [89.45.181.74])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sat, 4 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User [198.186.190.167] by mail.cultura.ro with ESMTP
    05: (SMTPD-10.02) ID: [ID filtered]

    IP: 198.186.190.167 ---> Prescient Software, Inc.

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    Muguphon: +234-806-6899964 ---> MTN Nigeria Communications Ltd.


    die Madrid-Konnektion:


    header:
    01: Received: from IMPaqm5.telefonica.net (impaqm5.telefonica.net
    02: [213.4.129.20])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)
    05: Received: from IMPmailhost1.adm.correo ([10.20.102.38])
    06: by IMPaqm5.telefonica.net with bizsmtp
    07: ID: [ID filtered]
    08: Received: from User ([87.223.63.91])
    09: by IMPmailhost1.adm.correo with BIZ IMP
    10: ID: [ID filtered]

    IP: 87.223.63.91 ---> 91.63.223.87.dynamic.jazztel.es

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    auch der Dauer-Mugu kommt zum Einsatz:


    header:
    01: Received: from ms04-i.ethome.com.tw (ms04.ethome.com.tw [211.76.112.37])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Fri, 3 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from localhost (localhost.ethome.com.tw [127.0.0.1])
    05: by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
    06: 102F02EBCDE;
    07: Sat, 4 Jul 2009 xx:xx:xx +0800 (CST)
    08: X-Virus-Scanned: amavisd-new at ethome.com.tw
    09: Received: from ms04-i.ethome.com.tw ([127.0.0.1])
    10: by localhost (ms04-i.ethome.com.tw [127.0.0.1]) (amavisd-new, port 10024)
    11: with ESMTP ID: [ID filtered]
    12: Received: from kbronet.com.tw (unknown [192.168.88.25])
    13: by ms04-i.ethome.com.tw (Rmail v1.9 Gaghiel(v1.9p0211)) with ESMTP id
    14: 26C402EBCA3;
    15: Sat, 4 Jul 2009 xx:xx:xx +0800 (CST)

    Man beachte:

    X-OriginatingIP: 41.220.75.3 ( [Link nur für registrierte Mitglieder sichtbar. ].tw) ---> MTN Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    Muguphon: +2347031375938 ---> MTN Nigeria Communications Ltd.


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  2. #272
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.439

    Standard

    Es ist noch immer Wochenende....


    header:
    01: Received: from server10.host2day.com (server10.host2day.com [193.33.20.4])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    06: Received: from server10.host2day.com (unknown [127.0.0.1])
    07: by server10.host2day.com (Postfix) with ESMTP ID: [ID filtered]
    08: for xxxxx; Sun, 5 Jul 2009 xx:xx:xx +0000 (UTC)
    09: Received: by server10.host2day.com (Postfix, from userID: [ID filtered]
    10: ID: [ID filtered]

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    Und dieser Mugu versucht's direkt zweimal über Spamadoo:


    header:
    01: Received: from smtp2b.orange.fr (smtp2b.orange.fr [80.12.242.146])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from me-wanadoo.net (localhost [127.0.0.1])
    05: by mwinf2b23.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
    06: Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    07: Received: from SERVEUR-01.groupe-esi.local
    08: (LAubervilliers-153-51-12-12.w193-252.abo.wanadoo.fr [193.252.187.12])
    09: by mwinf2b23.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
    10: Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    11: X-ME-UUID: [UID filtered]
    12: Received: from SERVEUR-01.ceder.local ([193.252.43.188]) by
    13: SERVEUR-01.groupe-esi.local with Microsoft SMTPSVC(6.0.3790.3959);
    14: Sun, 5 Jul 2009 xx:xx:xx +0200
    15: Received: from User ([80.255.61.29]) by SERVEUR-01.ceder.local with
    16: Microsoft SMTPSVC(6.0.3790.1830);
    17: Sun, 5 Jul 2009 xx:xx:xx +0200


    header:
    01: Received: from smtp21.orange.fr (unknown [80.12.242.48])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from me-wanadoo.net (localhost [127.0.0.1])
    05: by mwinf2113.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
    06: Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    07: Received: from SERVEUR-01.groupe-esi.local
    08: (LAubervilliers-153-51-12-12.w193-252.abo.wanadoo.fr [193.252.187.12])
    09: by mwinf2113.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]
    10: Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    11: X-ME-UUID: [UID filtered]
    12: Received: from SERVEUR-01.ceder.local ([193.252.43.188]) by
    13: SERVEUR-01.groupe-esi.local with Microsoft SMTPSVC(6.0.3790.3959);
    14: Sun, 5 Jul 2009 xx:xx:xx +0200
    15: Received: from User ([80.255.61.29]) by SERVEUR-01.ceder.local with
    16: Microsoft SMTPSVC(6.0.3790.1830);
    17: Sun, 5 Jul 2009 xx:xx:xx +0200

    IP: 80.255.61.29 ---> INTELSAT-CUST-globalcom-NG

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  3. #273
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.439

    Standard

    Noch ein paar Mugu-Nachzügler:


    header:
    01: Received: from fw.com.hk (fw.com.hk [202.181.234.242])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Sun, 5 Jul 2009 xx:xx:xx +0200 (CEST)
    06: Received: from fw.com.hk (localhost.fw.com.hk [127.0.0.1])
    07: (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
    08: (No client certificate requested)
    09: by fw.com.hk (Postfix) with ESMTP ID: [ID filtered]
    10: Sun, 5 Jul 2009 xx:xx:xx +0800 (HKT)
    11: Received: from User (unknown [83.229.48.149])
    12: by fw.com.hk (Postfix) with ESMTP ID: [ID filtered]
    13: Sun, 5 Jul 2009 xx:xx:xx +0800 (HKT)

    IP: 83.229.48.149 ---> Cyberspace Link 4 PHC, Nigeria/SkyVision Network Services

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    Katherine ist wieder daaaaa.....


    header:
    01: Received: from mail.spw.info (mail.spw.info [86.59.99.202])
    02: by mx.kundenserver.de (node=mxbap3) with ESMTP (Nemesis)
    03: ID: [ID filtered]
    04: Received: from User ([202.67.44.125])
    05: by mail.spw.info (IceWarp 9.4.2) with ASMTP ID: [ID filtered]
    06: Mon, 06 Jul 2009 xx:xx:xx +0200

    IP: 202.67.44.125 ---> 125.44.67.202.static.ipnet.net.id

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from calpop.advancelitigation.com (mail.advancelitigation.com
    02: [216.240.145.241])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Mon, 6 Jul 2009 xx:xx:xx +0200 (CEST)
    05: Received: from UnknownHost [82.128.70.224] by
    06: calpop.advancelitigation.com with SMTP;
    07: Mon, 6 Jul 2009 xx:xx:xx -0700

    IP: 82.128.70.224 ---> Multilinks Telecommunications Limited, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from relay02.kiev.sovam.com (relay02.kiev.sovam.com
    02: [62.64.120.197])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Mon, 6 Jul 2009 xx:xx:xx +0200 (CEST)
    07: Received: from [212.82.219.106] (helo=mt.host)
    08: by relay02.kiev.sovam.com with esmtps (TLSv1:AES256-SHA:256)
    09: (Exim 4.69)
    10: (envelope-from <jamesbalard2009 [at] aim.com>)
    11: ID: [ID filtered]
    12: Received: from User ([82.128.70.166])
    13: (authenticated user test [at] mt.ua)
    14: by mt.host (Kerio MailServer 6.6.0 patch 1);
    15: Mon, 6 Jul 2009 xx:xx:xx +0300

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  4. #274
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.439

    Standard

    Aus allen Ecken und Enden....


    gecracktes SquirrelMail:


    header:
    01: Received: from web3.heritagewebdesign.com
    02: (host-117.pl1211120-1.fiber.net [209.90.87.117])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    05: Received: from www.heritagewebdesign.com (localhost [127.0.0.1])
    06: by web3.heritagewebdesign.com (Postfix) with ESMTP ID: [ID filtered]
    07: Mon, 6 Jul 2009 xx:xx:xx -0600 (MDT)
    08: Received: from 82.128.55.202
    09: (SquirrelMail authenticated user poor [at] spamvictim.tld)
    10: by www.heritagewebdesign.com with HTTP;
    11: Mon, 6 Jul 2009 xx:xx:xx -0400 (EDT)

    IP: 82.128.55.202 ---> Multilinks Telecommunications Limited, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    wieder SquirrelMail gecrackt:


    header:
    01: Received: from cp.offshorededi.com (unknown [93.174.93.46])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    06: Received: from localhost ([127.0.0.1] helo=webmail.abbeygroupplc.com)
    07: by cp.offshorededi.com with esmtpa (Exim 4.69)
    08: (envelope-from <jsmith.t88 [at] gmail.com>)
    09: ID: [ID filtered]
    10: Received: from 82.128.32.29 ([82.128.32.29])
    11: (SquirrelMail authenticated user poor [at] spamvictim.tld)
    12: by webmail.abbeygroupplc.com with HTTP;
    13: Mon, 6 Jul 2009 xx:xx:xx -0400 (EDT)

    IP: 82.128.32.29 ---> Multilinks Telecommunications Limited, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from jccapitals.com (unknown [65.59.190.45])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    04: Received: from User [58.51.197.246] by jccapitals.com with ESMTP
    05: (SMTPD32-7.07) ID: [ID filtered]

    IP:58.51.197.246 ---> CHINANET Hubei

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from web4210.mail.ogk.yahoo.co.jp
    02: (web4210.mail.ogk.yahoo.co.jp [124.83.212.30])
    03: by xxxxx (Postfix) with SMTP ID: [ID filtered]
    04: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    05: Received: (qmail 78721 invoked by UID: [UID filtered]
    06: DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
    07: s=yj20050223; d=yahoo.co.jp;
    08: h=Message-ID:Received:X-RocketDSI:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
    09: b=pdTN7I86LCLDvP0SBozORsDXgxMh/q9a1WQFLWo9IlkqBGpNUI2leIByIsEUWJTqzmi7PHCDp/LYKgq802GkDlVEzt/W/
    10: Hw3CjSKgj0//G+Sc1jb71V6/6FgHgJROQK
    11: ;
    12: Message-ID: [ID filtered]
    13: Received: from [82.128.32.230] by web4210.mail.ogk.yahoo.co.jp via HTTP;
    14: Tue, 07 Jul 2009 xx:xx:xx JST

    IP: 82.128.32.230 ---> Multilinks Telecommunications Limited, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    die Amsterdam-Konnektion:


    header:
    01: Received: from mailscanner.connect.com.fj (smtp.connect.com.fj
    02: [202.62.124.233])
    03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    04: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    05: Message-ID: [ID filtered]
    06: X-IronPort-Anti-Spam-Filtered: true
    07: X-IronPort-Anti-Spam-Result:
    08: AtH+AHjQUkpN+6t8PGdsb2JhbAAEAY5KiT93AQEBHxgnhi2zTg
    09: X-IronPort-AV: E=McAfee;i="5300,2777,5668"; a="17675997"
    10: X-IronPort-AV: E=Sophos;i="4.42,362,1243771200";
    11: d="scan'208";a="17675997"
    12: Received: from dhcp-077-251-171-124.chello.nl (HELO User) ([77.251.171.124])
    13: by mailscanner.connect.com.fj with ESMTP; 07 Jul 2009 xx:xx:xx +1200

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]


    Der Mugu-Preis des Tages geht an:

    Multilinks Nigeria, your friendly, criminal, mugu-owned company.....

    Und nicht zu vergessen: besonderer Dank an alle unfähigen Admins, die noch nicht mal eine sichere SquirrelMail-Installation gebacken bekommen, aber meinen, sie müssten unbedingt einen eigenen Mailserver betreiben....


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  5. #275
    Graue Pestilenz Avatar von Fidul
    Registriert seit
    16.07.2005
    Beiträge
    6.405

    Standard

    Zitat Zitat von kjz1 Beitrag anzeigen
    wieder SquirrelMail gecrackt:


    header:
    01: Received: from cp.offshorededi.com (unknown [93.174.93.46])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    06: Received: from localhost ([127.0.0.1] helo=webmail.abbeygroupplc.com)
    07: by cp.offshorededi.com with esmtpa (Exim 4.69)
    08: (envelope-from <jsmith.t88 [at] gmail.com>)
    09: ID: [ID filtered]
    10: Received: from 82.128.32.29 ([82.128.32.29])
    11: (SquirrelMail authenticated user poor [at] spamvictim.tld)
    12: by webmail.abbeygroupplc.com with HTTP;
    13: Mon, 6 Jul 2009 xx:xx:xx -0400 (EDT)

    IP: 82.128.32.29 ---> Multilinks Telecommunications Limited, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]
    Nicht unbedingt: whois:abbeygroupplc.com = 93.174.93.46

    Ist das nicht eine schöne Bank?
    Wir kriegen euch alle!

  6. #276
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.439

    Standard

    Zitat Zitat von Fidul Beitrag anzeigen
    Ist das nicht eine schöne Bank?
    Und so toll vertrauenerweckend, da würde auch ein Crack prima zu passen....

    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  7. #277
    Graue Pestilenz Avatar von Fidul
    Registriert seit
    16.07.2005
    Beiträge
    6.405

    Standard

    Na sowas, jemand muß es kaputtgespielt haben.
    Wir kriegen euch alle!

  8. #278
    Urgestein
    Registriert seit
    18.07.2005
    Beiträge
    9.439

    Standard

    Noch ein paar zum abgewöhnen:


    header:
    01: Received: from 69-55-236-248.in-addr.arpa.johncompanies.com (EHLO
    02: kevinvescc-inc.com) [69.55.236.248]
    03: by mx0.gmx.net (mx099) with SMTP; 06 Jul 2009 xx:xx:xx +0200
    04: Received: from kevinvescc-inc.com (unknown [127.0.0.1])
    05: by kevinvescc-inc.com (Postfix) with ESMTP ID: [ID filtered]
    06: Mon, 6 Jul 2009 xx:xx:xx +0000 (UTC)
    07: Received: from User (unknown [81.199.63.115])
    08: by kevinvescc-inc.com (Postfix) with ESMTP;
    09: Mon, 6 Jul 2009 xx:xx:xx +0000 (UTC)

    IP: 81.199.63.115 ---> 81.199.63.115.satcom-systems.net

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from server.ashiwi.org (unknown [68.177.234.140])
    02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    03: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    Muguphon: +44-7035926447 ---> Open Telecom International Ltd., UK

    Mugufax: +44-7006094035 ---> Call Sciences Limited, UK/Yac


    gecracktes Squirrelmail:


    header:
    01: Received: from utmi.net (mail.utmi.net [67.59.33.133])
    02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    03: (No client certificate requested)
    04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    05: for xxxxx; Tue, 7 Jul 2009 xx:xx:xx +0200 (CEST)
    06: Received: (qmail 2857 invoked by UID: [UID filtered]
    07: Received: from unknown (HELO www.utmi.net) (127.0.0.1)
    08: by 0 with SMTP; 7 Jul 2009 xx:xx:xx -0000
    09: Received: from 83.138.172.72 (proxying for 196.3.183.72)
    10: (SquirrelMail authenticated user millie)
    11: by www.utmi.net with HTTP;
    12: Tue, 7 Jul 2009 xx:xx:xx -0400 (EDT)

    IP: 196.3.183.72 ---> Suburban Telecom, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]



    header:
    01: Received: from mail.easternhousing.com (ip-58-147-170-110.aitlbd.net
    02: [58.147.170.110])
    03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
    04: (No client certificate requested)
    05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]
    06: for xxxxx; Thu, 9 Jul 2009 xx:xx:xx +0200 (CEST)
    07: Received: from easternhousing.com (mail.easternhousing.com [127.0.0.1])
    08: by mail.easternhousing.com (8.12.8/8.12.8) with ESMTP ID: [ID filtered]
    09: Thu, 9 Jul 2009 xx:xx:xx +0600

    X-OriginatingIP: 82.128.71.101 (flat) ---> Multilinks Telecommunications Limited, Nigeria

    [Link nur für registrierte Mitglieder sichtbar. ]

    [Link nur für registrierte Mitglieder sichtbar. ]

    Muguphon: +447031980792 ---> Magrathea Telecommunications Limited, UK


    - kjz
    mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
    Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.

  9. #279
    Mitglied Avatar von syntax
    Registriert seit
    06.11.2008
    Ort
    Oberbayern
    Beiträge
    50

    Standard

    Jemand Interesse an einer Diskussion mit dem nigerianischen FBI?


    header:
    01: X-Envelope-From: <info [at] fbi.gov>
    02: X-Envelope-To: <meine Mail-Adresse>
    03: X-Delivery-Time: 1247120002
    04: X-UID: [UID filtered]
    05: Return-Path: <info [at] fbi.gov>
    06: X-RZG-FWD-BY: meine Mail-Adresse
    07: Received: from RZmta-intern (client mail forwarder)
    08: by mailin.webmailer.de (voltan mi38) (RZmta 18.46)
    09: for <meine Mail-Adresse>; Thu, 9 Jul 2009 xx:xx:xx +0200 (MEST)
    10: X-RZG-CLASS-ID: [ID filtered]
    11: Received: from colegiosdiaconales.cl
    12: (mail.colegiosdiaconales.cl [201.238.235.132])
    13: by mailin.webmailer.de (voltan mi38) (RZmta 18.46)
    14: with ESMTP ID: [ID filtered]
    15: Thu, 9 Jul 2009 xx:xx:xx +0200 (MEST)
    16: Received: from colegiosdiaconales.cl (localhost [127.0.0.1])
    17: by colegiosdiaconales.cl (Postfix) with ESMTP ID: [ID filtered]
    18: Thu, 9 Jul 2009 xx:xx:xx -0400 (CLT)
    19: From: "FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC" <info [at] fbi.gov>
    20: Reply-To: securitywatch [at] fed-bureau-investigations.org
    21: Subject: FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC
    22: Date: Thu, 9 Jul 2009 xx:xx:xx -0400
    23: Message-ID: [ID filtered]
    24: X-Mailer: Open WebMail 2.51 20050504
    25: X-OriginatingIP: 41.191.108.130 (ccaasnd)
    26: MIME-Version: 1.0
    27: Content-Type: text/plain;
    28: charset=iso-8859-2
    29: To: undisclosed-recipients:;

    Und diesmal geht es um lächerliche 8 Millionen Öcken:

    ROBERT MUELLER III
    EXECUTIVE DIRECTOR FBI
    FEDERAL BUREAU OF INVESTIGATION FBI.WASHINGTON DC.
    FBI SEEKING TO WIRETAP INTERNET


    ATTENTION:


    We believe this notification meets you in a very good present state of mind
    and health. The Federal bureau of investigation (FBI) Washington, DC in
    conjunction with some other relevant Investigation Agencies here in the United
    states of America have recently been informed through our Global intelligence
    monitoring network that you presently have a transaction going on with the
    Central Bank of Nigeria (CBN) as regards to your over-due contract payment
    which was fully endorsed in your favor accordingly.

    We will find a way to fix a schedule for you to come to our head-quarter in
    Washington DC to enable us advise you on what to do, but meanwhile you are
    further advised to be contacting us via email for now because we are having
    various investigations that we are working on now. Keep everything regarding
    to your transaction confidential for security reasons and note that we have
    not informed the local FBI department in your state regarding this matter
    because we want to keep everything secret until your fund is been transferred
    to you accordingly.

    For the main time we the Federal Bureau of Investigation Washington D.C will
    be helping you to monitor all the transaction with the central bank of
    Nigeria. We want you to have in mind that we are trying to protect you because
    your inheritance fund that is about to be transferred to you is a large amount
    of money, and we will advise you not to inform any one about this transaction
    until the corresponding bank have successfully transferred your inheritance fund.

    It might interest you to know that we have taken out time in screening through
    this project as stipulated on our protocol of operation and have finally
    confirmed that your contract payment is 100% genuine and hitch free from all
    facet and of which you have the lawful right to claim your fund without any
    further delay. Having said all this, we will further advise that you go ahead
    in dealing with the Central Bank office accordingly as we will be monitoring
    all their services with you as well as your correspondence at all level.

    In addition, also be informed that we recently had a meeting with the
    Executive Governor of the Central Bank of Nigeria, in the person of Dr. Lamido
    Sanusi, and Mr. Kingsley Agwor along with some of the top officials of the
    Ministry regarding your case and they made us to understand that your file has
    been held in abase depending on when you personally come for the claim. They
    also told us that the only problem they are facing right now is that some
    unscrupulous element are using this project as an avenue to scam innocent
    people off their hard earned money by impersonating the Executive Governor and
    the Central Bank office.

    We were also made to understand that a lady with name Mrs. Joan C. Bailey from
    OHIO has already contacted them and also presented to them all the necessary
    documentations evidencing your claim purported to have been signed personally
    by you prior to the release of your contract fund valued at about
    US$8,000,000.00 (Eight million united states dollars), but the Central Bank
    office did the wise thing by insisting on hearing from you personally before
    the go ahead on wiring your fund to the Bank information's which was forwarded
    to them by the above named Lady so that was the main reason why they contacted
    us so as to assist them in making the investigations.

    They further informed us that we should warn our dear citizens who must have
    been informed of the contract payment which was awarded to them from the
    Central Bank of Nigeria, to be very careful prior to this irregularities so
    that they don't fall victim to this ugly circumstance. And should in case you
    are already dealing with anybody or office claiming to be from the Central
    Bank of Nigeria, you are further advised to STOP further contact with them in
    your best interest and then contact immediately the real office of the Central
    Bank of Nigeria (CBN) only with the below information's accordingly:


    NAME: MR. KINGSLEY AGWOR

    OFFICE ADDRESS: Central Bank of Nigeria, Central Business
    District,Cad astral Zone, Abuja,
    Federal Capital Territory,
    Nigeria.

    TEL: +234-8079-322-197
    +234-1221-5892

    Email: [Link nur für registrierte Mitglieder sichtbar. ]



    NOTE:


    In your best interest, any message that doesn't come from the above official
    email address and phone numbers should not be replied to and should be
    disregarded accordingly for security reasons. Meanwhile, we will advise that
    you contact the Central Bank office immediately with the above email address
    and request that they attend to you payment file as directed so as to enable
    you receive your contract fund accordingly.

    Ensure you follow all their procedure as may be required by them as that will
    further help hasten up the whole procedures as regards to the transfer of your
    fund to you as designated. Also have in mind that the Central Bank of Nigeria
    equally have their own protocol of operation as stipulated on their banking
    terms, so delay could be very dangerous. Once again, we will advise that you
    contact them with the above email address and make sure you forward to them
    all the necessary information's which they may require from you prior to the
    release of your fund to you accordingly.

    All modalities has already been worked out even before you were contacted and
    note that we will be monitoring all your dealings with them as you proceed so
    you don't have anything to worry about. All we require from you henceforth is
    an update so as to enable us be on track with you and the Central Bank of
    Nigeria. Without wasting much time, will want you to contact them immediately
    with the above email address so as to enable them attend to your case
    accordingly without any further delay as time is already running out.

    Should in case you need any more information's in regards to this
    notification, feel free to get back to us so that we can brief you more as we
    are here to guide you during and after this project has been completely
    perfected and you have received your contract fund as stated.Thank you very
    much for your anticipated co-operation in advance as we earnestly await your
    urgent response to this matter.


    Best Regards,

    Robert S. Mueller III
    Federal Bureau of Investigation
    J. Edgar Hoover Building
    935 Pennsylvania Avenue,
    NW Washington, D.C.
    20535-0001, USA
    Wenn jemand Interesse hat, ich lösch die Mail mal von meinem Server...

    Gruß,
    - syntax
    "You can build a perfect machine out of imperfect parts." - Urza

  10. #280
    Graue Pestilenz Avatar von Fidul
    Registriert seit
    16.07.2005
    Beiträge
    6.405

    Standard

    [Link nur für registrierte Mitglieder sichtbar. ]
    [Link nur für registrierte Mitglieder sichtbar. ]

    Irgendwo kann man sich bei Microsoft auch wegen der Seiten beschweren, aber deren Server sind gerade wieder einmal so entsetzlich grottenlahm, daß ich keine Lust auf größere Suchaktionen in deren unübersichtlichem Dschungel habe.
    Wir kriegen euch alle!

Lesezeichen

Lesezeichen

Berechtigungen

  • Neue Themen erstellen: Nein
  • Themen beantworten: Nein
  • Anhänge hochladen: Nein
  • Beiträge bearbeiten: Nein
  •  
Partnerlink:
REDDOXX Anti-Spam Lösungen