Mugu Dubletten

Einen Mugu hätt' ich noch:

header:

01: Received: from mail.aristonthermo.com (mail.aristonthermo.com
02: [212.4.21.142])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Fri,  9 Aug 2013 xx:xx:xx +0200 (CEST)
07: Received: from fasrv07.mtsintra.network ([10.20.30.19])
08: 	by mail.aristonthermo.com  with ESMTP ID: [ID filtered]
09: 	Fri, 9 Aug 2013 xx:xx:xx +0200
10: Received: from mailbox.aristonthermo.com ([172.31.255.16])
11:           by fasrv07.mtsintra.network (Lotus Domino Release 8.5.3FP2)
12:           with ESMTP ID: [ID filtered]
13:           Fri, 9 Aug 2013 xx:xx:xx +0200
14: Received: from User ([89.187.143.152])
15:           by mailbox.aristonthermo.com (Lotus Domino Release 8.5.3FP2)
16:           with ESMTP ID: [ID filtered]
17:           Fri, 9 Aug 2013 xx:xx:xx +0200

IP: 89.187.143.152 ---> 89.187.143.152.coolhousing.net

Es gibt noch Nachschlag:

header:

01: Received:  from smtp301.alice.it ([82.57.200.117]) by mx-ha.gmx.net
02: (mxgmx013) with ESMTP (Nemesis) ID: [ID filtered]
03:  Aug 2013 xx:xx:xx +0200
04: Received: from feu23-alice (82.57.204.78) by smtp301.alice.it (8.6.060.28) ID: [ID
05: 	filtered]
06: Received: from (187.16.51.138) by wmlight.rossoalice.alice.it;  Sat, 10
07: Aug 2013 xx:xx:xx +0200

X-Originating-IP: 187.16.51.138 ---> IPE INFORMATICA LTDA, BR

gecrackt:





Muguphon: +229 96217129 ---> Benin Cell


wohl dieselbe Bande:

header:

01: Received:  from smtp301.alice.it ([82.57.200.117]) by mx-ha.gmx.net
02: (mxgmx008) with ESMTP (Nemesis) ID: [ID filtered]
03:  Aug 2013 xx:xx:xx +0200
04: Received: from feu6-alice (82.57.204.61) by smtp301.alice.it (8.6.060.28) ID: [ID
05: 	filtered]
06: Received: from (79.165.146.246) by wmlight.rossoalice.alice.it;  Sat, 10
07: Aug 2013 xx:xx:xx +0200

X-Originating-IP: 79.165.146.246 ---> host-79-165-146-246.qwerty.ru

gecrackt:

header:

01: Received: from out19.wanadoo.es (out19.wanadoo.es [62.36.20.219])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Sat, 10 Aug 2013 xx:xx:xx +0200 (CEST)
04: Received: from [62.36.20.157] (helo=User)
05: 	by out19.wanadoo.es with esmtpa (Exim 4.68)
06: 	(envelope-from <jinglee190 [at] ymail.com>)
07: 	ID: [ID filtered]
08: charset="Windows-1251"

header:

01: Received:  from kendaycpa.com ([74.95.221.69]) by mx-ha.gmx.net (mxgmx011)
02:  with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([64.120.54.105]) by kendaycpa.com with Microsoft
04: 	MTPSVC(6.0.3790.4675);
05: 	 Sat, 29 Jun 2013 xx:xx:xx -0500

IP: 64.120.54.105 ---> Nobis Technology









Muguphon: +234 8109395660 ---> Nigeria

Muguphon: +1 518 772 2389 ---> Ymax Communications Corp. - Ny

header:

01: Received: from 10ibl21ser04.datacenter.cha.cantv.net
02: (10ibl21ser04.datacenter.cha.cantv.net [200.11.173.10])
03: 	(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
04: 	(No client certificate requested)
05: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
06: 	for xxxxx; Sun, 11 Aug 2013 xx:xx:xx +0200 (CEST)
07: Received: from webmail-06.datacenter.cha.cantv.net
08: (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
09: 	(authenticated bits=0)
10: 	by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP
11: ID: [ID filtered]
12: 	Sat, 10 Aug 2013 xx:xx:xx -0430
13: Received: from 41.71.186.229 ([41.71.186.229]) by
14: webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Sat, 10
15: Aug 2013 xx:xx:xx -0430 (VET)

IP: 41.71.186.229 ---> Visafone Communications Limited, Nigeria





Muguphon: +234-802-934-1610 ---> Airtel Ltd (Celtel), Nigeria

Auch die Mugus kommen nicht zu kurz:

header:

01: Received:  from mail.tupoleva.net ([91.215.8.34]) by mx-ha.gmx.net
02: (mxgmx007) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User (unknown [91.221.234.51]) by mail.tupoleva.net (Postfix)
04: 	with SMTP ID: [ID filtered]
05: charset="Windows-1251"

IP: 91.221.234.51 ---> skomvi.tupoleva.net, Ukraine

header:

01: Received:  from sellersconstructionllc.com ([64.138.197.2]) by mx-ha.gmx.net
02: 	(mxgmx006) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User ([24.236.148.218]) by sellersconstructionllc.com with
04: 	Microsoft SMTPSVC(6.0.3790.4675); Mon, 12 Aug 2013 xx:xx:xx -0400

IP: 24.236.148.218 ---> 24-236-148-218.static.aldl.mi.charter.com



Muguphon: +44 7719885203 ---> Telefonica UK Limited

header:

01: X-Rocket-Received: from 30 (fishmong [at] 64.120.54.106 with ) by smtp211.mail.bf1.yahoo.com
02: 	with SMTP; 14 Aug 2013 xx:xx:xx -0700 PDT

IP: 64.120.54.106 ---> 64.120.54.106.ubiquityservers.com







Muguphon: +234-81-297-82649 ---> Airtel Ltd (Celtel), Nigeria

Verlängerung aufgrund großer Nachfrage:

Ach, den hatten wir ja schon:

header:

01: Received: from mail.tupoleva.net (hosting.tupoleva.net [91.215.8.34])
02: 	by mx.kundenserver.de (node=mxeu0) with ESMTP (Nemesis)
03: 	ID: [ID filtered]
04: Received: from User (unknown [91.221.234.51]) by mail.tupoleva.net (Postfix)
05: 	with SMTP ID: [ID filtered]
06: charset="Windows-1251"

IP: 91.221.234.51 ---> skomvi.tupoleva.net

header:

01: Received:  from mail.sesupply.co.th ([202.162.77.13]) by mx-ha.gmx.net
02: 	(mxgmx111) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from User ([192.69.94.213]) (authenticated user info [at] sesupply.co.th)
04: 	by mail.sesupply.co.th (Kerio MailServer 6.7.3 patch 1); Sat, 17 Aug 2013 xx:xx:xx +0700

IP: 192.69.94.213 ---> VolumeDrive POC



Hier auch mal der Volltext, da an Dreistigkeit kaum zu überbieten:

Zitat:

---

Attention,

The Federal Government of Nigeria through provisions in Section 419 of
the Criminal Code came up with punitive measures to deter and punish
offenders.The Advance Fee Fraud section deal mainly with cases of
advance fee fraud(commonly called 419) such as obtaining by false
pretence through different fraudulent schemes e.g. contract scam, credit
card scam,inheritance scam, job scam, loan scam, lottery scam, “wash
wash” scam (money washing scam), marriage scam. Immigration scam,
counterfeiting and religiousscam. It also investigates cyber crime cases.

This is to officially announce to you that some scam Syndicates were
apprehended in Lagos, Nigeria few days ago and after several
interrogations and tortures your details were among those mentioned by
some of the scam Syndicates as one of the victims of their operations.

After proper investigations and research at Western Union Money Transfer
and Money Gram office to know if you have truly sent money to the scam
Syndicates through Western Union Money Transfer or Money Gram, your name
was found in Western Union Money Transfer database amongst those that
have sent money through Western Union Money Transfer to Nigeria and this
proves that you have truly been swindled by those unscrupulous persons
by sending moneyto them in the course of getting one fund or the other
that is not real,right now we are working hand in hand with Western
Union and Interpol to track every fraudsters down, do not respond to
their e-mails, letters and phone calls any longer they are scammers and
you should be very careful to avoid being a victim to fraudsters any
longer because they have nothing to offer you but to rip-off what you
have worked hard to earn.

In this regard a meeting was held between the Board of Directors of The
Economic and Financial Crimes Commission (EFCC) and as a consequence of
our investigations it was agreed that the sum of Two hundred thousand US
Dollars (US$200,000) should be transferred to you out of the funds that
Federal Government of Nigeria has set aside as a compensation to
everyone who have by one way or the other sent money to fraudsters in
Nigeria.


We have deposited your fund at Western Union Money Transfer agent
location EMS Post office Lagos, Nigeria. We have submitted your details
to them so that your fund can be transferred to you.Contact the Western
Union agent office through the email address stated below inform them
about this notification letter and the transfer of your fund;

Email:.hk

Yours sincerely,
Alan Silberstein (Mr)
Assistant Investigation Officer.
The Economic and Financial Crimes Commission (EFCC)
15A Awolowo Road, Ikoyi, Lagos.
Nigeria
http://www.efccnigeria.org
*****************************************************************************
*************************************
Please note that some fraudsters are claiming to be Directors or staff
of The Ecomomic and Financial Crimes Commission have recently been
sending phony e-mails/letters and also calling unsuspecting persons,
with intent to defraud them. It is important to note that these
fraudsters are criminals engaged in Advanced Fee Fraud known in Nigeria
as 419. Every day, people throughout the world are falling victim to
scams of one kind or another. But remember - if it sounds too good to be
true, it is probably a scam. In the circumstance, we unreservedly advice
you to dissociate yourself from all correspondence and transactions
entered into based on evidently fraudulent and fictitious claims.
*****************************************************************************
"This e-Mail may contain proprietary and confidential information and is
sent for the intended recipient(s) only. If, by an addressing or
transmission error, this mail has been misdirected to you, you are
requested to delete this mail immediately. You are also hereby notified
that any use, any form of reproduction, dissemination,
copying,disclosure, modification, distribution and/or publication of
this e-mail message,contents or its attachment(s), other than by its
intended recipient(s), is strictly prohibited.Any opinions expressed in
this email are those of the individual and not necessarily of the
organization. Before opening attachment(s), please scan for viruses."All
business handled under Standard Trading Conditions. Copy available on
request.
******************************************************************************** *********

---

header:

01: Received:  from fep12.mx.upcmail.net ([62.179.121.32]) by mx-ha.gmx.net
02:  (mxgmx108) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from edge01.upcmail.net ([192.168.13.236]) by viefep12-int.chello.at
04: 	(InterMail vM.8.01.05.05 201-2260-151-110-20120111) with ESMTP ID: [ID filtered]
05: Received: from viepmrape13.upcmail.net ([192.168.13.91]) by edge01.upcmail.net
06: 	with edge ID: [ID filtered]

X-Authenticated-Sender:




Und was wäre es denn nur, wenn es nicht den Ober-Schwarzhut Yahoo gäbe:

header:

01: X-Rocket-Received: from user-d6242dd78c (wilfordc1 [at] 64.120.54.106 with ) by
02: 	smtp220.mail.ne1.yahoo.com with SMTP; 18 Aug 2013 xx:xx:xx -0700 PDT

IP: 64.120.54.106 ---> Nobis Technology Group (die Dreckskiste ist auch schon seit Äonen offen)

Auch die Mugus kommen nicht zu kurz:

header:

01: Received:  from jiazao.com.tw ([125.227.158.42]) by mx-ha.gmx.net (mxgmx111)
02:  with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from User (74-95-48-14-Huntsville.hfc.comcastbusiness.net
04: [74.95.48.14])
05: 	(authenticated bits=0)
06: 	by jiazao.com.tw (8.14.4/8.14.4) with ESMTP ID: [ID filtered]
07: 	Wed, 21 Aug 2013 xx:xx:xx +0800

IP: 125.227.158.42 ---> 125-227-158-42.HINET-IP.hinet.net

header:

01: Received:  from smtpbig006.onecommunications.net ([69.95.226.26]) by 
02: 	mx-ha.gmx.net (mxgmx011) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: (qmail 12363 invoked from network); 21 Aug 2013 xx:xx:xx -0000
04: Received: from unknown (HELO User) (97.67.89.97) by smtpbig006.onecommunications.net
05: 	with SMTP; 21 Aug 2013 xx:xx:xx
06: -0000
07: charset="Windows-1251"

IP: 97.67.89.97 ---> ITCD

header:

01: Received:  from rector0.rector.uoc.gr ([147.52.115.2]) by mx-ha.gmx.net
02: 	(mxgmx010) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from User ([162.13.88.145])
04: 	(authenticated bits=0)
05: 	by rector0.rector.uoc.gr (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
06: 	Thu, 22 Aug 2013 xx:xx:xx +0300

header:

01: Received:  from rector0.rector.uoc.gr ([147.52.115.2]) by mx-ha.gmx.net
02: 	(mxgmx010) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from User ([162.13.88.145])
04: 	(authenticated bits=0)
05: 	by rector0.rector.uoc.gr (8.14.3/8.14.3) with ESMTP ID: [ID filtered]
06: 	Thu, 22 Aug 2013 xx:xx:xx +0300

IP: 162.13.88.145 ---> Rackspace

>

Und noch eine Perle der maschinellen Übersetzung - wenn man es im Google-Translator zurückübersetzt, dann versteht man auch den Sinn :rolleyes:

Zitat:

---

Guten Tag,

Wenn man durch Ihr Land Persönlichkeiten und Eigenschaften ich habe euch erwählt, ich bin Philip Said für die nächsten Verwandten unserer Verstorbenen aussehen Strapton, Insurance Broker mit einem der berühmten Öl-und Gas-Versicherung im Vereinigten Königreich ich von unseren Anspruch wurden angewiesen waren Abteilung Kunden, die als Folge der Naturkatastrophe in Japan sterben.
Er starb nach seinen beiden Schiffen wurde distroyed, He ohne eingetragene nächsten Angehörigen starb, als er für eine lange Zeit geschieden worden und er hatte kein Kind, ich war seine Versicherungsmakler und ich habe bei mir alle notwendigen Unterlagen für Sie als ein Empfänger der nächsten Generalversammlung.
Ich kontaktierte Sie, weil Sie den gleichen Namen Identität mit unserer späten Client haben und perfekt in passen als seine nächsten Angehörigen, können wir zusammenarbeiten, um diesen Fonds zu erreichen. Bitte hören Sie, das ist real und ich bin für eine zuverlässige ausländischen Partner, dass ich den Ausgleichsfonds untersucht in seiner Obhut zum Zwecke der zukünftigen Investitionen in Gebieten mit niedrigen Steuersätzen, die eine möglichst hohe Rendite auf mein Kapital geben versucht gesucht haben gesucht , während ich meine Position zurückziehen können. Drücken Sie Ihr Interesse, Bitte versichern Sie mich über Ihre Beibehaltung dieses oberste Geheimnis in dir und ich brauche Ihre Antwort.

Mit freundlichen Grüßen,
Philip Said Strapton.

---

Zum Glück hat er mich gefunden, da ja mein Name angeblich perfekt als Erbe passt. Zu dem Namen gibts im Telefonbuch etwa 200.000 Einträge - da findet er sicher noch jemand anderes, wenn ich ihm nicht antworte :D

Hier noch der Header:

header:

01: Return-Path: phil [at] statoiliuk.com
02: Received:  from tod.todhost.com ([192.169.55.160]) by mx-ha.web.de (mxweb108)
03:  with ESMTPS (Nemesis) ID: [ID filtered]
04:  26 Aug 2013 xx:xx:xx +0200
05: Received: from localhost ([127.0.0.1]:53816 helo=192.169.55.32)
06: 	by tod.todhost.com with esmtpa (Exim 4.80.1)
07: 	(envelope-from <phil [at] statoiliuk.com>)
08: 	ID: [ID filtered]
09: MIME-Version: 1.0
10: Content-Type: text/plain; charset=UTF-8;
11:  format=flowed
12: Content-Transfer-Encoding: 8bit
13: Date: Fri, 23 Aug 2013 xx:xx:xx -0700
14: From: Phil SaID: [ID filtered]
15: To: poor [at] spamvictim.tld
16: Subject: Ist mir Philip
17: Reply-To: philipsaidstrapton [at] yahoo.co.uk
18: Mail-Reply-To: philipsaidstrapton [at] yahoo.co.uk
19: Message-ID: [ID filtered]
20: X-Sender: phil [at] statoiliuk.com
21: User-Agent: Roundcube Webmail/0.9.2
22: X-AntiAbuse: This header was added to track abuse, please include it with any abuse
23: 	report
24: X-AntiAbuse: Primary Hostname - tod.todhost.com
25: X-AntiAbuse: Original Domain - web.de
26: X-AntiAbuse: Originator/Caller UID/GID: [UID filtered]
27: X-AntiAbuse: Sender Address Domain - statoiliuk.com
28: X-Get-Message-Sender-Via: tod.todhost.com: authenticated_ID: [ID filtered]
29: Envelope-To: <poor [at] spamvictim.tld>

Selbstverständlich kommen die Mugus nicht zu kurz:

header:

01: Received:  from server.skybox1.com ([72.249.150.47]) by mx-ha.gmx.net
02: 	(mxgmx113) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from rrcs-24-43-84-10.west.biz.rr.com ([24.43.84.10]:4629
04: 	helo=apats.apa.local) by server.skybox1.com with esmtpa (Exim 4.80.1) (envelope-from
05: 	<outmail [at] webdesignerarizona.com>) ID: [ID filtered]

gecrackt:

header:

01: Received:  from crm.eubc.ro ([82.77.7.23]) by mx-ha.gmx.net (mxgmx102) with
02: 	ESMTP (Nemesis) ID: [ID filtered]
03: Received: from User (mail.eisele.at [213.182.237.232]) (Authenticated sender:
04: 	angela) by crm.eubc.ro (Postfix) with ESMTPA ID: [ID filtered]
05: charset="Windows-1251"

auch diesen Vollpfosten hatten wir schon:

header:

01: Received:  from rector0.rector.uoc.gr ([147.52.115.2]) by mx-ha.gmx.net 
02: 	(mxgmx010) with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from User ([162.13.88.145]) (authenticated bits=0) by
04: 	rector0.rector.uoc.gr (8.14.3/8.14.3) with ESMTP ID: [ID filtered]

header:

01: X-Rocket-Received: from user30000 (ofhfiofkmfhfjh001 [at] 174.136.62.146 with ) by
02: 	smtp142.mail.ir2.yahoo.com with SMTP; 25 Aug 2013 xx:xx:xx +0000 UTC
03: charset="Windows-1251"

header:

01: Received:  from fep23.mx.upcmail.net ([62.179.121.43]) by mx-ha.gmx.net
02: 	(mxgmx010) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from edge03.upcmail.net ([192.168.13.238]) by viefep23-int.chello.at
04: 	(InterMail vM.8.01.05.05 201-2260-151-110-20120111) with ESMTP ID: [ID filtered]
05: Received: from viepmrape12.upcmail.net ([192.168.13.91]) by edge03.upcmail.net
06: 	with edge ID: [ID filtered]

die malaysische Nigeria-Kolonie:

header:

01: Received: from smtpint.ana.gob.pe (mail.ana.gob.pe [190.102.136.208])
02: 	by xxxxx (Postfix) with ESMTP ID: [ID filtered]
03: 	for xxxxx; Tue, 27 Aug 2013 xx:xx:xx +0200 (CEST)
04: Received: from [10.64.88.113] (unknown [115.164.57.207])
05: 	(Authenticated sender: atoledo)
06: 	by smtpint.ana.gob.pe (Postfix) with ESMTPA ID: [ID filtered]
07: 	Tue, 27 Aug 2013 xx:xx:xx -0500 (PET)

IP: 115.164.57.207 ---> DiGi Telecommunications Sdn Bhd, Malaysia





Muguphon: +1 601-0214-9061 ---> geographic number, Mississippi

header:

01: Received:  from nwlink.spb.ru ([178.252.100.110]) by mx-ha.gmx.net (mxgmx111)
02: 	with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from mail.nwlink.spb.ru ([178.252.100.110] helo=nwlink.spb.ru) by
04: 	nwlink.spb.ru with esmtp (Exim 4.69 (FreeBSD)) (envelope-from
05: 	<mrsridaalmutasim [at] hotmail.com>) ID: [ID filtered]

header:

01: Received:  from relay.nhs.uk ([62.208.144.128]) by mx-ha.gmx.net (mxgmx013)
02: 	with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from nhs-pd1e-esg104.ad1.nhs.net (nhs-pd1e-esg104.ad1.nhs.net
04: 	[127.0.0.1]) by IMSVA80 (Postfix) with ESMTP ID: [ID filtered]
05: Received: from gstt-mm02.gstt.nhs.uk (smtp.gstt.sthames.nhs.uk [10.145.32.249])
06: 	by nhs-pd1e-esg104.ad1.nhs.net (Postfix) with ESMTP ID: [ID filtered]
07: Received: from GSTTV-EX25.gstt.local (Not Verified[10.188.192.116]) by
08: 	gstt-mm02.gstt.nhs.uk with MailMarshal (v6,8,4,9558)
09: 	ID: [ID filtered]
10: Received: from sv-pr-ex47.gstt.local ([10.188.196.47]) by GSTTV-EX25.gstt.local
11: 	with Microsoft SMTPSVC(6.0.3790.3959);
12: 	 Tue, 27 Aug 2013 xx:xx:xx +0100

gecrackt:

Nachschlag....

header:

01: X-Rocket-Received: from 30000 (ben_bernanke11 [at] 108.205.61.198 with ) by
02: 	smtp214.mail.ne1.yahoo.com with SMTP; 31 Aug 2013 xx:xx:xx -0700 PDT
03: charset="Windows-1251"

IP: 108.205.61.198 ---> 108-205-61-198.lightspeed.moblal.sbcglobal.net

Und dieser Mugu ist total bescheuert:

Zitat:

---

UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES
Internal Audit,Monitoring,Consulting And Investigations Division
Date: 31st of August 2013

>From The Desk Of Mrs. Carman Lapointe-Young

Attn: Beneficiary.

This is to inform you that I came to Nigeria yesterday, after series of
complains from the FBI and other Security agencies from Asia, Europe,
Oceania, Antarctica, South America and the United States of America
respectively, against the Federal Government of Nigeria and the British
Government for the rate of scam activities going on in these two nations.

I have met with the new President of Nigeria Dr. Good luck Jonathan, who
claimed that he has been trying his best to make sure you receive your
fund in your account.

Right now, as directed by our secretary general Mr. Ban Ki-Moon, We are
working in collaborations with the Nigerian Economic and Financial Crime
Commission (EFCC) and have decided to waive away all your clearance
fees/Charges and authorise the Government of Nigeria to effect the
payment of your compensation of an amount of $10 Million approved by
both the British government and the UN into your account without any
delay. The only fee you will pay to confirm your fund in your account is
your Notarization fee to the Federal High Court of Nigeria at cost of
$75 dollars only.

Sincerely, you are a lucky person because I have just discovered that
some top Nigerian and British Government Officials are interested in
your fund and they are working in collaboration with One Mr. Wison Kieth
from USA to frustrate you and thereafter divert your fund into their
personal account.

I have a very limited time to stay in Nigeria here so I would like you
to urgently respond to this message so that I can advise you on how best
to confirm your fund in your account within the next 72 hours.

Sincerely yours.
Ms. Carman Lapointe-Young.
The New Appointed United Nations
Under-Secretary General for Internal Oversight

---

Aber dann:

Halllloooo! Ben Bernanke ist für die Fed zuständig, nicht für die UN! Aber was will man schon von Mugus erwarten, die ihre Ratware bei der Russenmafia kaufen...

header:

01: Received:  from mail.mpalaskas.gr ([62.38.249.209]) by mx-ha.gmx.net (mxgmx106)
02: 	with ESMTPS (Nemesis) ID: [ID filtered]
03: Received: from localhost (localhost [127.0.0.1]) by mail.mpalaskas.gr
04: 	(iNODE/1.6.4/MTA-TX) with ESMTP ID: [ID filtered]
05: X-Virus-Scanned: iNODE 1.6.4 Antivirus/Antispam System
06: Received: from User ([36.37.220.160]) (authenticated bits=0) by
07: 	mail.mpalaskas.gr (iNODE/1.6.4/MTA-RX) with ESMTP ID: [ID filtered]
08: charset="Windows-1251"

IP: 36.37.220.160 ---> VIETTEL (CAMBODIA) PTE., LTD.

Und wieder sind die Mugus dran:

header:

01: X-Rocket-Received: from amanda (amanda-johnson908 [at] 75.36.252.251 with ) by
02: 	smtp203.mail.bf1.yahoo.com with SMTP; 05 Sep 2013 xx:xx:xx -0700 PDT

IP: 75.36.252.251 ---> adsl-75-36-252-251.dsl.pltn13.sbcglobal.net









Muguphon: +1 917 732 1687 ---> Telengy L.l.c. - Ny

Mugufax: +1 917 732 1241 ---> Telengy L.l.c. - Ny

header:

01: Received:  from webmail.xinet.com.ar ([190.94.181.2]) by mx-ha.gmx.net
02: 	(mxgmx107) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from localhost (localhost [127.0.0.1]) by webmail.xinet.com.ar
04: 	(Postfix) with ESMTP ID: [ID filtered]
05: Received: from webmail.xinet.com.ar ([127.0.0.1])
06: 	by localhost (webmail.xinet.com.ar [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
07: 	ID: [ID filtered]
08: Received: by webmail.xinet.com.ar (Postfix, from userID: [ID filtered]

Wieviel Mugu darf's denn noch sein?

header:

01: Received:  from dukecmfep04.coxmail.com ([68.99.120.39]) by mx-ha.gmx.net
02:  (mxgmx110) with ESMTP (Nemesis) ID: [ID filtered]
03: Received: from dukecmimpo03.coxmail.com ([68.99.120.137]) by
04: 	dukecmmtar03.coxmail.com      (InterMail vM.8.01.05.06 201-2260-151-112-20120208) with ESMTP
05: 	ID: [ID filtered]
06: Received: from nhbbq.com ([68.15.222.195]) by dukecmimpo03.coxmail.com with
07: 	bizsmtp ID: [ID filtered]
08: Received: from User ([173.164.171.209]) by nhbbq.com with Microsoft
09: 	SMTPSVC(6.0.3790.4675); 	 Fri, 6 Sep 2013 xx:xx:xx -0400

IP: 173.164.171.209 ---> 173-164-171-209-SFBA.hfc.comcastbusiness.net

header:

01: Sep 2013 xx:xx:xx CEST
02: Received: from vm117.jn-hebergement.com (vm117.jn-hebergement.com
03: [85.31.196.37])
04: 	(using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
05: 	(No client certificate requested)
06: 	by xxxxx (Postfix) with ESMTPS ID: [ID filtered]
07: 	for xxxxx; Fri,  6 Sep 2013 xx:xx:xx +0200 (CEST)
08: Received: from vm117.jn-hebergement.com (localhost [127.0.0.1])
09: 	by vm117.jn-hebergement.com (Postfix) with ESMTP ID: [ID filtered]
10: 	Wed,  4 Sep 2013 xx:xx:xx +0200 (CEST)
11: Received: from User (dserver.hrmsi.com [173.167.164.114])
12: 	by vm117.jn-hebergement.com (Postfix) with ESMTPA;
13: 	Wed,  4 Sep 2013 xx:xx:xx +0200 (CEST)

IP: 173.167.164.114 ---> Comcast