Bluewin mail accounts have children adresses (familiy members) mapped to a main one. All children pws are via plain and accessible over the webinterface.
$ nmap -A sam.sso.bluewin.ch
Starting Nmap 6.40 ( http://nmap.org ) at 2014-01-21 21:40 CET
Nmap scan report for sam.sso.bluewin.ch (195.186.145.42)
Host is up (0.027s latency).
Not shown: 998 filtered ports
PORT STATE SERVICE VERSION