mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
Eine Betrugsfreundschaft wünschen sich ebenfalls noch:
header:01: Received: from mail.amp.com.ua (EHLO spampreserv.ampcorp.local)02: [62.80.174.190]03: by mx0.gmx.net (mx082) with SMTP; 30 Aug 2010 xx:xx:xx +020004: Received: from User ([74.94.231.5]) by spampreserv.ampcorp.local with05: Microsoft SMTPSVC(6.0.3790.3959);06: Mon, 30 Aug 2010 xx:xx:xx +0300
IP: 74.94.231.5 ---> 74-94-231-5-Michigan.hfc.comcastbusiness.net
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from relay1.zappmobile.ro (EHLO relay1.zappmobile.ro)02: [80.97.176.4]03: by mx0.gmx.net (mx101) with SMTP; 30 Aug 2010 xx:xx:xx +020004: Received: from User (windows010-adsl.demon.co.uk [80.176.188.61])05: by relay1.zappmobile.ro (Zapp-SMTP) with ESMTP ID: [ID filtered]06: Mon, 30 Aug 2010 xx:xx:xx +0300 (EEST)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Mugupühon: +234 812 499 3469 ---> Celtel Nigeria Limited/Zain
Muguphon: +234 709 348 3481 ---> Multi-links Telecommunications Ltd., Nigeria
header:01: Received: from unknown (EHLO mx01.utspace.cn) [116.254.252.9]02: by mx0.gmx.net (mx004) with SMTP; 01 Sep 2010 xx:xx:xx03: Received: from User (unknown [82.128.68.85])04: by mx01.utspace.cn (Postfix) with ESMTP05: ID: [ID filtered]
IP: 82.128.68.85 ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from web80011.mail.sp1.yahoo.com (web80011.mail.sp1.yahoo.com02: [69.147.92.116])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Wed, 1 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: (qmail 7725 invoked by UID: [UID filtered]06: Received: from [41.29.197.54] by web80011.mail.sp1.yahoo.com via HTTP;07: Wed, 01 Sep 2010 xx:xx:xx PDT
IP: 41.29.197.54 ---> vc-41-29-197-54.umts.vodacom.co.za
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from mcdermott-construction.co.uk02: (host217-41-4-176.in-addr.btopenworld.com [217.41.4.176])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Fri, 3 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: from User ([82.128.84.250]) by mcdermott-construction.co.uk06: with Microsoft SMTPSVC(6.0.3790.4675);07: Fri, 3 Sep 2010 xx:xx:xx +0100
IP: 82.128.84.250 ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +234-813-1172559 ---> Nigeria
die Madrid-Connection hat sich auf 'Fake-Lotto' spezialisiert:
header:01: Received: from conn.visi.com (EHLO conn.visi.com) [208.42.179.4]02: by mx0.gmx.net (mx099) with SMTP; 03 Sep 2010 xx:xx:xx +020003: Received: from web11.mn2.visi.com (web11.mn2.visi.com [209.98.199.101])04: by conn.visi.com (Postfix) with ESMTPS ID: [ID filtered]05: for xxxxx; Fri, 3 Sep 2010 xx:xx:xx -0500 (CDT)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +44 7922275683 ---> Telefonica O2 (UK) Limited
Muguphon: +44 7092267051 ---> YAC Ltd. UK
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
Als Mugu möchten sich auch vorstellen:
header:01: Received: from mail.dol.go.th (119-46-72-11.static.asianet.co.th02: [119.46.72.11])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Tue, 7 Sep 2010 xx:xx:xx +0200 (CEST)07: Received: from User ([74.95.93.3])08: by mail.dol.go.th (IceWarp 10.0.7) with ASMTP ID: [ID filtered]09: Tue, 07 Sep 2010 xx:xx:xx +0700
IP: 74.95.93.3 ---> 74-95-93-3-WashingtonDC.hfc.comcastbusiness.net
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from correo.canarias.org (EHLO02: manchas2.gobiernodecanarias.org) [93.188.137.42]03: by mx0.gmx.net (mx111) with SMTP; 07 Sep 2010 xx:xx:xx +020004: Received: from bermejo1.gobiernodecanarias.net (unknown [93.188.138.1])05: by manchas2.gobiernodecanarias.org (Postfix) with ESMTP ID: [ID filtered]06: Tue, 7 Sep 2010 xx:xx:xx +0100 (WEST)07: Received: from localhost (bermejo1 [127.0.0.1])08: by localhost.canarias.org (Postfix) with ESMTP ID: [ID filtered]09: Tue, 7 Sep 2010 xx:xx:xx +0100 (WEST)10: X-Virus-Scanned: amavisd-new at canarias.org11: Received: from bermejo1.gobiernodecanarias.net ([127.0.0.1])12: by localhost (bermejo1.gobiernodecanarias.net [127.0.0.1])13: (amavisd-new, port 10023)14: with ESMTP ID: [ID filtered]15: Received: from mantillo4.gobiernodecanarias.org16: (mantillo4.gobiernodecanarias.org [10.140.139.22])17: by bermejo1.gobiernodecanarias.net (Postfix) with ESMTP ID: [ID filtered]18: Tue, 7 Sep 2010 xx:xx:xx +0100 (WEST)19: Received: from boada3.gobiernodecanarias.net20: (boada3.gobiernodecanarias.org [10.140.227.28])21: (using TLSv1 with cipher AES128-SHA (128/128 bits))22: (No client certificate requested)23: by mantillo4.gobiernodecanarias.org (Postfix) with ESMTP ID: [ID filtered]24: Tue, 7 Sep 2010 xx:xx:xx +0100 (WEST)25: Received: from BIELSA.gobiernodecanarias.net ([fe80::b8a6:788b:30fc:adc]) by26: boada3.gobiernodecanarias.net ([::1]) with mapi; Tue, 7 Sep 2010 xx:xx:xx27: +0100
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from usphxmail01.CAVALRYINVESTMENTS.INT02: (Mail.cavalryinvestments.com [208.50.84.132])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Wed, 8 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: from cavalryinvestments.int ([172.19.2.11] RDNS failed) by06: usphxmail01.CAVALRYINVESTMENTS.INT with Microsoft SMTPSVC(6.0.3790.4675);07: Tue, 7 Sep 2010 xx:xx:xx -070008: Received: from User ([82.128.6.187]) by cavalryinvestments.int with09: Microsoft SMTPSVC(6.0.3790.3959);10: Tue, 7 Sep 2010 xx:xx:xx -0400
IP: 82.128.6.187 ---> ml82.128.6.187.multilinks.com, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from edilcrisma.com02: (host242-103-static.33-85-b.business.telecomitalia.it [85.33.103.242])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Thu, 9 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: from leroy-PC ([111.118.168.31]) by edilcrisma.com with06: Microsoft SMTPSVC(6.0.3790.4675);07: Wed, 8 Sep 2010 xx:xx:xx +0200
IP: 111.118.168.31 ---> 111.118.168.31.reverse.crucialx.net
[Link nur für registrierte Mitglieder sichtbar. ]
die Madrid-Konnektion:
header:01: Received: from www.ottomartin.com (EHLO mx4.hotmail.com) [212.223.23.34]02: by mx0.gmx.net (mx105) with SMTP; 08 Sep 2010 xx:xx:xx +0200
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +34672961451 ---> mobile number, Spain
der 'Sternchen-Mugu':
header:01: Received: from bengal-knittex.com (bkl.rad1.aamranetworks.com02: [202.74.243.49])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Fri, 10 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: (qmail 27401 invoked by UID: [UID filtered]06: Received: by simscan 1.4.0 ppID: [ID filtered]07: scanners: attach: 1.4.0 clamav: 0.93.3/m:47/d:765108: Received: from unknown (HELO User) (info [at] 216.214.150.4)09: by bengal-knittex.com with ESMTPA; 10 Sep 2010 xx:xx:xx +0700
IP: 216.214.150.4 ---> mail.svam.com
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +234 813 370 1863 ---> Nigeria
Spamadoo auch wieder dabiei:
header:01: Received: from smtp2f.orange.fr (EHLO smtp2f.orange.fr) [80.12.242.152]02: by mx0.gmx.net (mx053) with SMTP; 10 Sep 2010 xx:xx:xx +020003: Received: from me-wanadoo.net (localhost [127.0.0.1])04: by mwinf2f16.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]05: Fri, 10 Sep 2010 xx:xx:xx +0200 (CEST)06: Received: from me-wanadoo.net (localhost [127.0.0.1])07: by mwinf2f16.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]08: Fri, 10 Sep 2010 xx:xx:xx +0200 (CEST)09: Received: from User (LAubervilliers-151-13-2-141.w217-128.abo.wanadoo.fr10: [217.128.1.141])11: by mwinf2f16.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]12: Fri, 10 Sep 2010 xx:xx:xx +0200 (CEST)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +447024084660 ---> Magrathea Telecommunications Limited, UK
header:01: Received: from aa012msr.fastwebnet.it (aa012msr.fastwebnet.it [85.18.95.72])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Fri, 10 Sep 2010 xx:xx:xx +0200 (CEST)04: Received: from wis2 (10.31.174.233) by aa012msr.fastwebnet.it (8.5.016.6)05: ID: [ID filtered]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
Die Mugus schlagen wieder zu:
header:01: Received: from server1.cabledosse.com.ar (mail.cabledosse.com.ar02: [200.45.135.83])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Mon, 6 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: from localhost (localhost.localdomain [127.0.0.1])06: by server1.cabledosse.com.ar (Postfix) with ESMTP ID: [ID filtered]07: Sun, 5 Sep 2010 xx:xx:xx -0300 (ART)08: X-Virus-Scanned: amavisd-new at cabledosse.com.ar09: Received: from server1.cabledosse.com.ar ([127.0.0.1])10: by localhost (server1.cabledosse.com.ar [127.0.0.1]) (amavisd-new, port11: 10024)12: with ESMTP ID: [ID filtered]13: Received: from localhost (localhost.localdomain [127.0.0.1])14: by server1.cabledosse.com.ar (Postfix) with ESMTP ID: [ID filtered]15: Sun, 5 Sep 2010 xx:xx:xx -0300 (ART)16: Received: from User (unknown [61.142.213.158])17: by server1.cabledosse.com.ar (Postfix) with ESMTP ID: [ID filtered]18: Sun, 5 Sep 2010 xx:xx:xx -0300 (ART)
IP: 61.142.213.158 ---> WENSITIKE, CN
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from hbmail01.helmsbriscoe.com (EHLO02: hbmail01.helmsbriscoe.com) [64.16.17.149]03: by mx0.gmx.net (mx061) with SMTP; 06 Sep 2010 xx:xx:xx +020004: Received: from User ([82.128.107.18]) by hbmail01.helmsbriscoe.com with05: Microsoft SMTPSVC(6.0.3790.1830);06: Sun, 5 Sep 2010 xx:xx:xx -0700
IP: 82.128.107.18 ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
über Web.de:
header:01: Received: from fmmailgate04.web.de ([172.20.7.84])02: by mbizimp001 with bizsmtp03: ID: [ID filtered]04: Received: from mwmweb058 ( [172.20.18.67])05: by fmmailgate04.web.de (Postfix) with ESMTP ID: [ID filtered]06: Mon, 6 Sep 2010 xx:xx:xx +0200 (CEST)07: Received: from [62.145.79.9] by mwmweb058 with HTTP; Mon Sep08: 06 xx:xx:xx CEST 2010
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from smtp101.rog.mail.re2.yahoo.com02: (smtp101.rog.mail.re2.yahoo.com [206.190.36.79])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Mon, 6 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: (qmail 50152 invoked from network); 6 Sep 2010 xx:xx:xx -000006: Received: from User (user-email [at] 60.191.129.2 with login)07: by smtp101.rog.mail.re2.yahoo.com with SMTP; 06 Sep 201008: xx:xx:xx -0700 PDT
IP: 60.191.129.2 ---> ICT-CENTER-TAIZHOU-TELECOM
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +447045767044 ---> Open Telecom International Ltd., UK
header:01: Received: from mail.homevideostudio.com (dswin2201.nexpoint.net02: [128.241.238.51])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Tue, 7 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: from User ([74.95.93.3]) by homevideostudio.com with06: MailEnable ESMTP; Mon, 6 Sep 2010 xx:xx:xx -0400
IP: 74.95.93.3 ---> 74-95-93-3-WashingtonDC.hfc.comcastbusiness.net
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Spamadoo natürlich auch wieder dabei:
header:01: Received: from smtp28.orange.fr (smtp28.orange.fr [80.12.242.101])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Thu, 9 Sep 2010 xx:xx:xx +0200 (CEST)04: Received: from me-wanadoo.net (localhost [127.0.0.1])05: by mwinf2822.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]06: Thu, 9 Sep 2010 xx:xx:xx +0200 (CEST)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf2822.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]09: Thu, 9 Sep 2010 xx:xx:xx +0200 (CEST)10: Received: from User (ADijon-552-1-84-201.w92-148.abo.wanadoo.fr11: [92.148.11.201])12: by mwinf2822.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]13: Thu, 9 Sep 2010 xx:xx:xx +0200 (CEST)
X-ME-User-Auth: [Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +234-807-487-1405 ---> Globacom Ltd., Nigeria
header:01: Received: from mail32a.ssggrp-wc.com (mail32a.ssggrp-wc.com02: [128.121.64.101])03: by xxxxx (Postfix) with SMTP ID: [ID filtered]04: for xxxxx; Sat, 11 Sep 2010 xx:xx:xx +0200 (CEST)05: Received: from ca1-mx09.mlpsca01.us.mxservers.net (128.121.64.167)06: by mail32a.ssggrp-wc.com (RS ver 1.0.95vs) with SMTP ID: [ID filtered]07: for xxxxx; Sat, 11 Sep 2010 xx:xx:xx -0400 (EDT)08: Received: from unknown [204.3.219.4] (EHLO09: mmm3210.hosting.melbourneit.com.au)10: by ca1-mx09.mlpsca01.us.mxservers.net (mxl_mta-3.1.0-05)11: with ESMTP id12: 51c5b8c4.2665913248.70770.00-008.ca1-mx09.mlpsca01.us.mxservers.net13: (envelope-from <zhicxxk [at] zhuhai.gov.cn>);14: Sat, 11 Sep 2010 xx:xx:xx -0400 (EDT)15: Received: (qmail 224 invoked from network); 11 Sep 2010 xx:xx:xx -000016: Received: from unknown (HELO User) (sales [at] 82.128.83.204)17: by with ESMTPA; 11 Sep 2010 xx:xx:xx -0000
IP: 82.128.83.204 ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
gephishter Uni-Account und Spamadoo:
header:01: Received: from mailhost.FernUni-Hagen.de (mailhost.fernuni-hagen.de02: [132.176.114.94])03: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))04: (No client certificate requested)05: by xxxxx (Postfix) with ESMTP ID: [ID filtered]06: for xxxxx; Sat, 11 Sep 2010 xx:xx:xx +0200 (CEST)07: Received: from mailstore.fernuni-hagen.de ([132.176.114.185])08: by mailhost.FernUni-Hagen.de with esmtp (Exim 4.69)09: (envelope-from <poor [at] spamvictim.tld>)10: ID: [ID filtered]11: Received: from [80.13.121.106] (account p0357952 HELO User)12: by mailstore.fernuni-hagen.de (CommuniGate Pro SMTP 5.0.2)13: with ESMTPA ID: [ID filtered]
[Link nur für registrierte Mitglieder sichtbar. ]
die Madrid-Konnektion:
header:01: Received: from smtp.seznam.cz (smtp.seznam.cz [77.75.76.43])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sun, 12 Sep 2010 xx:xx:xx +0200 (CEST)04: Received: from User (host-24-49-95-159.windjammercable.net [24.49.95.159])05: by email-relay1.ng.seznam.cz (Seznam SMTPD 1.2.8 [at] 15355:15357) with ESMTP;06: Sun, 12 Sep 2010 xx:xx:xx +0200 (CEST)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +34 634 112 353 ---> Vodafone España, S.a.u.
Mugufax: +34 917 692 733 ---> Colt Telecom España, S.a.
header:01: Received: from mail.integraonline.com (relay3.integra.net [204.130.255.182])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sun, 12 Sep 2010 xx:xx:xx +0200 (CEST)06: Received: (qmail 18081 invoked from network); 12 Sep 2010 xx:xx:xx -000007: Received: from unknown (HELO User) (lnielson [at] integra.net@[41.138.190.12])08: (envelope-sender <poor [at] spamvictim.tld>)09: by relay3.integra.net (qmail-ldap-1.03) with SMTP10: for <poor [at] spamvictim.tld>; 12 Sep 2010 xx:xx:xx -0000
IP: 41.138.190.12 ---> Visafone Communications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
der Sternchen-Mugu heute mal per Slash:
header:01: Received: from 203186008018.static.ctinets.com (EHLO capitalad.com.hk)02: [203.186.8.18]03: by mx0.gmx.net (mx004) with SMTP; 12 Sep 2010 xx:xx:xx +020004: Received: from User (unknown [82.128.84.9])05: by capitalad.com.hk (Postfix) with ESMTP ID: [ID filtered]06: Sun, 12 Sep 2010 xx:xx:xx +0800 (HKT)
IP: 82.128.84.9 ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]/Miss. Rose Andy/
/Un Agent Officer (UNITED KINGDOM UNITED NATIONS). /
/Tel: +44-703-195-5897/
/Fax +44-172-172-4021 /
Muguphon: +44-703-195-5897 ---> Magrathea Telecommunications Limited, UK
Mugufax: +44-172-172-4021 ---> BT
Und hier einmal mit ganzem Text, da wieder als perfide Hilfs-Masche getarnt:
header:01: Received: from smtp2.vianetworks.de (smtp2.vianetworks.de [212.168.16.99])02: (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Mon, 13 Sep 2010 xx:xx:xx +0200 (CEST)06: Received: from servsmk.server.smk.local (u0-64.dsl.vianetworks.de07: [194.231.190.64])08: by smtp2.vianetworks.de (8.14.3/8.14.3) with ESMTP ID: [ID filtered]09: for xxxxx; Mon, 13 Sep 2010 xx:xx:xx +0200 (CEST)10: (envelope-from poor [at] spamvictim.tld)11: Received: from User ([81.136.228.157]) by servsmk.server.smk.local with12: Microsoft SMTPSVC(6.0.3790.4675);13: Mon, 13 Sep 2010 xx:xx:xx +0200
IP: 81.136.228.157 ---> mail.cesana.co.uk
[Link nur für registrierte Mitglieder sichtbar. ]Attention:
We have carried out investigations and discovered that the transaction
you are involved in from Nigeria is a scam. Just because you are in
contact with someone who alleges to be from an agency or bank, doesn’t
mean that they truly are. That email address with which you are being
contacted is highly suspect. There are several scams originating out of
Nigeria.
For more information on Nigerian e-mail scams, please see
[Link nur für registrierte Mitglieder sichtbar. ]
Please report internet scams on the [Link nur für registrierte Mitglieder sichtbar. ] website. These cases
are routed in real-time to the FBI by the Internet Crime Complaint
Center. You may also file a complaint at [Link nur für registrierte Mitglieder sichtbar. ]
which is hosted by the same organization.
However, this is not to say there are no real or sincere transactions
from Nigeria and this is not to distort the image of the Federal
Republic of Nigeria in anyway. If you are very convinced that you have
money due to you from Nigeria, please allow us look into it so we can be
sure you are in contact with the right people.
You can reach us on: [Link nur für registrierte Mitglieder sichtbar. ]
If you have any further questions, please do not hesitate to contact us
any time.
Sincerely,
American Citizen Services
United States Consulate General
Lagos, Nigeria
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
header:01: Received: from EXCHANGE.riosalado.edu ([140.198.100.109]) by mail.riosalado.edu02: with Microsoft SMTPSVC(6.0.3790.4675);03: Wed, 22 Sep 2010 xx:xx:xx -070004: Content-class: urn:content-classes:message05: MIME-Version: 1.006: Content-Type: multipart/alternative;07: boundary="----_=_NextPart_001_01CB5A86.4CE72139"08: Subject: Will Execution--Contact Dean Harry09: Date: Wed, 22 Sep 2010 xx:xx:xx -070010: Message-ID: [ID filtered]11: From: <jes2064855 [at] mail.riosalado.edu>12: Bcc:13: X-Junkmail-SD-Raw: score=unknown,14: refid=str=0001.0A0B0204.4C9A51CD.01BB,ss=1,fgs=0,15: ip=140.198.111.39,16: so=2009-06-02 xx:xx:xx,17: dmn=5.7.1/2009-08-27,18: mode=single engine19: Return-Path: jes2064855 [at] mail.riosalado.edu
IP: 140.198.111.39 = vacant-111-39.rio.maricopa.edu --> Maricopa Community Colleges
Muguphon: +44 702 4042 815 ---> Magrathea Telecommunications Limited, UK
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Eniac
Die weltweit grösste Fakeseiten-Datenbank: http://db.aa419.org/fakebankslist.php
Viele falsche Escrow-Seiten: http://escrow-fraud.com/search.php
DER HERR ERSCHUF IN SEINEM ZORN - CLOPPENBURG UND BÜTTELBORN
header:01: Received: from metu.edu.tr (allianoi.general.services.metu.edu.tr02: [144.122.144.182])03: by mail.metu.edu.tr (Postfix) with ESMTP ID: [ID filtered]04: Fri, 24 Sep 2010 xx:xx:xx +0300 (EEST)05: Received: from 116.206.174.39 ([116.206.174.39]) by horde.metu.edu.tr06: (Horde Framework) with HTTP; Fri, 24 Sep 2010 xx:xx:xx +030007: Message-ID: [ID filtered]08: Date: Fri, 24 Sep 2010 xx:xx:xx +030009: From: Mrs Joan Pitchell <dyetkin [at] metu.edu.tr>10: Reply-to: mrsjoanpitchell [at] gmail.com11: To: undisclosed-recipients:;12: Subject:13: MIME-Version: 1.014: Content-Type: text/plain;15: charset=ISO-8859-1;16: DelSp="Yes";17: format="flowed"18: User-Agent: Internet Messaging Program (IMP) H3 (4.3.4)19: X-Junkmail-SD-Raw: score=unknown,20: refid=str=0001.0A0B0207.4C9BDB80.0005,ss=1,pt=113351,fgs=0,21: ip=144.122.144.158,22: so=2009-06-02 xx:xx:xx,23: dmn=5.7.1/2009-08-27,24: mode=single engine25: Return-Path: dyetkin [at] metu.edu.tr
IP: 144.122.144.158 = likya.general.services.metu.edu.tr = Middle East Technical University(METU)Greetings,
I am sorry to encroach into your privacy in this manner, I find it
pleasurable to offer you this charitable decision of mine. I only
pray at this time that your email address is still valid. I am Mrs
Joan Pitchell, the wife of Mr Harold J. Pitchell.I need you to help me
handle a charity project of £9,000,000.00 GBP from my late husband
wealth. contact me for further details.
Thank you
Mrs Joan Pitchell
----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Eniac
Die weltweit grösste Fakeseiten-Datenbank: http://db.aa419.org/fakebankslist.php
Viele falsche Escrow-Seiten: http://escrow-fraud.com/search.php
DER HERR ERSCHUF IN SEINEM ZORN - CLOPPENBURG UND BÜTTELBORN
So, dann wollen wir mal wieder, Teil 1:
header:01: Received: from mail.ljjh.tpc.edu.tw (EHLO mail.ljjh.tpc.edu.tw)02: [163.20.65.5]03: by mx0.gmx.net (mx051) with SMTP; 08 Oct 2010 xx:xx:xx +020004: Received: from mail.ljjh.tpc.edu.tw (localhost [127.0.0.1])05: by mail.ljjh.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]06: Fri, 8 Oct 2010 xx:xx:xx +0800 (CST)07: Received: from mail.ljjh.tpc.edu.tw (localhost [127.0.0.1])08: by mail.ljjh.tpc.edu.tw (Postfix) with ESMTP ID: [ID filtered]09: Fri, 8 Oct 2010 xx:xx:xx +0800 (CST)
X-OriginatingIP: 82.128.87.91 (jane) ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
und Teil 2 folgt sogleich:
header:01: Received: from 60-199-254-24.static.tfn.net.tw (HELO hipass.com.tw)02: [60.199.254.24]03: by mx0.gmx.net (mx009) with SMTP; 03 Oct 2010 xx:xx:xx +0200
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +234 7068101992 ---> MTN Nigeria Communications Ltd.
der Sternchen-Mugu ist immer noch dabei:
header:01: Received: from mail.teguhauctioneers.com (88.202.71.108.static.es2u.com02: [202.71.108.88])03: by xxxxx (Postfix) with ESMTP ID: [ID filtered]04: for xxxxx; Sun, 3 Oct 2010 xx:xx:xx +0200 (CEST)05: Received: from User (UnknownHost [41.217.65.4]) by06: mail.teguhauctioneers.com with SMTP;07: Sat, 2 Oct 2010 xx:xx:xx +0800
IP: 41.217.65.4 ---> ZOOM Mobile Nigeria Ltd.
[Link nur für registrierte Mitglieder sichtbar. ]*Anti-Terrorist and Monetary Crimes Division*
*Fbi Headquarters In Washington, D.C.*
*Federal Bureau Of Investigation*
*J. Edgar Hoover Building*
*935 Pennsylvania Avenue, NW Washington, D.C. 20535-0001 )*
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from nm14.bullet.mail.ne1.yahoo.com (HELO02: nm14.bullet.mail.ne1.yahoo.com) [98.138.90.77]03: by mx0.gmx.net (mx010) with SMTP; 03 Oct 2010 xx:xx:xx +020004: Received: from [98.138.90.57] by nm14.bullet.mail.ne1.yahoo.com with05: NNFMP; 03 Oct 2010 xx:xx:xx -000006: Received: from [98.138.89.197] by tm10.bullet.mail.ne1.yahoo.com with07: NNFMP; 03 Oct 2010 xx:xx:xx -000008: Received: from [127.0.0.1] by omp1055.mail.ne1.yahoo.com with NNFMP; 0309: Oct 2010 xx:xx:xx -000010: Received: (qmail 19315 invoked by UID: [UID filtered]11: Received: from [212.52.153.25] by web120120.mail.ne1.yahoo.com via HTTP;12: Sun, 03 Oct 2010 xx:xx:xx PDT
IP: 212.52.153.25 ---> ONATEL, BF
[Link nur für registrierte Mitglieder sichtbar. ]
die Madrid-Konnektion:
header:01: Received: from impaqm1.telefonica.net (EHLO IMPaqm1.telefonica.net)02: [213.4.138.1]03: by mx0.gmx.net (mx011) with SMTP; 04 Oct 2010 xx:xx:xx +020004: Received: from IMPmailhost4.adm.correo ([10.20.102.125])05: by IMPaqm1.telefonica.net with bizsmtp06: ID: [ID filtered]07: Received: from User ([77.209.132.132])08: by IMPmailhost4.adm.correo with BIZ IMP09: ID: [ID filtered]
IP: 77.209.132.132 ---> VODAFONE_SPAIN_NETWORK
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from mail.rooferpro.com (mail.rooferpro.com [209.90.226.219])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Tue, 5 Oct 2010 xx:xx:xx +0200 (CEST)04: Received: from 82.128.25.67 [82.128.25.67] by mail.rooferpro.com with SMTP;05: Tue, 5 Oct 2010 xx:xx:xx -0700
IP: 82.128.25.67 ---> Multilinks Telecommunications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
gecracktes Squirrel-Mail:
header:01: Received: from avas-mr14.fibertel.com.ar (EHLO02: avas-mr14.fibertel.com.ar) [24.232.0.245]03: by mx0.gmx.net (mx060) with SMTP; 09 Oct 2010 xx:xx:xx +020004: Received: from 10-137-49-200.fibertel.com.ar ([200.49.137.10]:37198 "EHLO05: squirrel.jetband.com.ar" smtp-auth: <none> rhost-flags-OK-FAIL-OK-OK)06: by avas-mr14.fibertel.com.ar with ESMTP ID: [ID filtered]07: Fri, 8 Oct 2010 xx:xx:xx -030008: Received: from 41.138.184.21209: (SquirrelMail authenticated user poor [at] spamvictim.tld)10: by squirrel.jetband.com.ar with HTTP;11: Thu, 7 Oct 2010 xx:xx:xx -0300 (ART)
IP: 41.138.184.212 ---> Visafone Communications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +44 704-575-2231 ---> Open Telecom International Ltd., UK
wieder der Sternchen-Mugu:
header:01: Received: from mail05.o2online.de (EHLO mail05.o2online.de) [82.113.101.32]02: by mx0.gmx.net (mx102) with SMTP; 09 Oct 2010 xx:xx:xx +020003: Received: from SGBMCAPP01 (sgbmcapp01.sg.de.pri.o2.com [10.97.206.21])04: by mail05.o2online.de (8.12.11.20060308/8.12.11) with ESMTP id05: o98NQANA003377;06: Sat, 9 Oct 2010 xx:xx:xx +0200
header:01: Received: from mail06.o2online.de (EHLO mail06.o2online.de) [82.113.101.34]02: by mx0.gmx.net (mx077) with SMTP; 09 Oct 2010 xx:xx:xx +020003: Received: from SGBMCGW01 (sgbmcgw01 [10.97.206.31])04: by mail06.o2online.de (8.12.11.20060308/8.12.11) with ESMTP id05: o98NccDH032114;06: Sat, 9 Oct 2010 xx:xx:xx +0200
[Link nur für registrierte Mitglieder sichtbar. ]*Mrs. Grace Smith*
*Leiter Online-Lotterie-Abteilung*
*Die Euro Millions Lotterie Promotion*
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +34 634 112 353 ---> Vodafone España, S.a.u.
Mugufax: +34 917 692 733 ---> Colt Telecom España, S.a.
gecrackter Uni-Account:
header:01: Received: from omr1.sandiego.edu (omr1-ext.sandiego.edu [192.195.154.246])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sat, 9 Oct 2010 xx:xx:xx +0200 (CEST)04: Received: from User (net181.180.94-49.kzn.ertelecom.ru [94.180.181.49]05: (may be forged))06: by omr1.sandiego.edu (MOS 3.10.8-GA)07: with ESMTP ID: [ID filtered]08: Fri, 8 Oct 2010 xx:xx:xx -0700 (PDT)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from imr-ma05.mx.aol.com (imr-ma05.mx.aol.com [64.12.100.31])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sun, 10 Oct 2010 xx:xx:xx +0200 (CEST)04: Received: from mtaout-db05.r1000.mx.aol.com05: (mtaout-db05.r1000.mx.aol.com [172.29.51.197])06: by imr-ma05.mx.aol.com (8.14.1/8.14.1) with ESMTP ID: [ID filtered]07: Sat, 9 Oct 2010 xx:xx:xx -040008: Received: from User (adsl-63-193-186-210.dsl.bkfd14.pacbell.net09: [63.193.186.210])10: by mtaout-db05.r1000.mx.aol.com (MUA/Third Party Client Interface) with11: ESMTPA ID: [ID filtered]12: Sat, 9 Oct 2010 xx:xx:xx -0400 (EDT)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
header:01: Received: from weblinux2.tedata.net (HELO localhost) ([212.103.160.52])02: (envelope-sender <poor [at] spamvictim.tld>)03: by out.tedata.net.eg (qmail-ldap-1.03) with SMTP04: for xxxxx; 8 Oct 2010 xx:xx:xx -000005: Received: from 41.138.179.144 (41.138.179.144 [41.138.179.144]) by06: webmail.tedata.net.eg (Horde MIME library) with HTTP; Fri, 8 Oct 201007: xx:xx:xx +0200
IP: 41.138.179.144 ---> Visafone Communications Limited, Nigeria
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
Muguphon: +44 70457 31487 ---> Open Telecom International Ltd., UK
header:01: Received: from mail-server.hyungji.com (unknown [222.106.70.12])02: (using SSLv3 with cipher DHE-RSA-AES256-SHA (256/256 bits))03: (No client certificate requested)04: by xxxxx (Postfix) with ESMTP ID: [ID filtered]05: for xxxxx; Sat, 9 Oct 2010 xx:xx:xx +0200 (CEST)06: Received: from User ([122.160.138.38])07: by mail-server.hyungji.com (Merak 8.2.4) with ASMTP ID: [ID filtered]08: Fri, 8 Oct 2010 xx:xx:xx +0900
IP: 122.160.138.38 ---> ABTS-North-Static-038.138.160.122.airtelbroadband.in
[Link nur für registrierte Mitglieder sichtbar. ]
via Spamadoo:
header:01: Received: from smtp19.orange.fr (smtp19.orange.fr [80.12.242.17])02: by xxxxx (Postfix) with ESMTP ID: [ID filtered]03: for xxxxx; Sun, 10 Oct 2010 xx:xx:xx +0200 (CEST)04: Received: from me-wanadoo.net (localhost [127.0.0.1])05: by mwinf1912.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]06: Sun, 10 Oct 2010 xx:xx:xx +0200 (CEST)07: Received: from me-wanadoo.net (localhost [127.0.0.1])08: by mwinf1912.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]09: Sun, 10 Oct 2010 xx:xx:xx +0200 (CEST)10: Received: from User (AMontsouris-151-1-61-227.w82-123.abo.wanadoo.fr11: [82.123.10.227])12: by mwinf1912.orange.fr (SMTP Server) with ESMTP ID: [ID filtered]13: Sun, 10 Oct 2010 xx:xx:xx +0200 (CEST)
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
Hier mal ausführlich, weil ein Mugu wieder mal 'Mugu-Hilfe' anbietet:
header:01: Received: from busine41.lnk.telstra.net (EHLO mail.orbcap.com)02: [165.228.115.199]03: by mx0.gmx.net (mx098) with SMTP; 15 Oct 2010 xx:xx:xx +020004: Received: from User (unknown [41.216.40.171])05: by mail.orbcap.com (Postfix) with ESMTP ID: [ID filtered]06: Wed, 13 Oct 2010 xx:xx:xx +1100 (EST)
IP: 41.216.40.171 ---> Benin Telecom
Muguphon: +229-97243908 ---> Bénin CellAttention: Fund Recipient,
We have reviewed your fund record and could not find any cogent reason
on why
the fund has not been transferred to you. The ministry of finance has
received a
mandate from the office of the presidency to resolve all delayed foreign
fund
transfers within 30 days. Internal investigation has revealed that some
alleged
staffs of various banks and institutions here have taking undue
advantage of the
porous banking network to infiltrate the system. They have contacted
more than
30 foreign clients on one particular fund deposited in the bank and have
assigned ownership of the fund to all of them thereby making each of them a
beneficiary to the fund but all in a bid to extort money from them. This is
ridiculous as lots of payments have been made but all to no avail and
this has
brought a strain in our international financial relations and reputation
with
other countries. Republic of Benin is now dubbed the scam capital of
Africa .
This has come to the knowledge of the presidency h
We have made several attempts to reconcile your fund approval which has
been
cancelled severally without reason but to no avail. In view of this and
following the mandate from the office of the presidency to the ministry of
finance for all outstanding delayed funds to be released without any fee
prior
to the receipt of your fund, you are advised to reconfirm to us without
delay
your bank account coordinates for the transfer.
The government approved annual interest on the fund is 3.5% but we
cannot work
out the exact interest on your fund without a proof of your fund
duration here.
You should send to us any evidence of how long the fund has been here
with every
failed attempt to receive the fund.
You are hereby warned to desist from any form of communication with any
person
from Africa (NO EXEMPTION) regarding the above matter so that we can
confirm the
source of this problem. There is a confirmation that these unscrupulous
elements
are equally using their contacts in Togo , Burkina Faso , Ghana ,
Nigeria , and
Cote D’Ivoire to contact you on fund transfer matters using your existing
information which you have sent to them earlier. They have duplicated your
contact hence you are receiving various forms of fund transfer emails
but all in
a bid to defraud you. These people are all but one person so do not be
mislead.
They have told you various versions of their stories but the only thing
you have
not seen is the fund they have always told you about so in your interest
you are
advised to discontinue any contact with such person or group of persons.
They
equally have contacts in UK , Germany , Holland , Malaysia , Dubai ,
India and
Spai n which are extensions of their f
Your prompt response is needed so that we can proceed with the vetting
of your
transfer file for onward approval, release and transfer of the fund to you.
Yours sincerely,
Sandra Osij
Telephone No:+229-97243908
Minister of Foreign Affairs, African Integration, Francophonie and the
Beninese
Diaspora
Post geht an:
[Link nur für registrierte Mitglieder sichtbar. ]
[Link nur für registrierte Mitglieder sichtbar. ]
- kjz
mein Credo: die 10 größten ROKSO-Spammer aus dem Verkehr gezogen, und 80 % des weltweiten Spam-Problems hätte sich mit einem Schlag erledigt....
Ausserdem fordere ich die Abschaffung aller Affiliate-Programme, da mir bis heute niemand ein 100 % seriöses Affiliate-Programm benennen konnte.
Lesezeichen