Return-Path: <brightansah@rexia.com>
Received: from n126.sc0.he.tucows.com (64.97.144.126) by studio42.com with 
ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Sat, 26 Jan 2008 16:16:00 -0800
Received: from sc0-out01.emaildefenseservice.com (64.97.131.2) by 
n126.sc0.he.tucows.com (7.2.069.1)
        id 476BFC7E004F1181; Sat, 26 Jan 2008 23:49:32 +0000
Message-ID: <476BFC7E004F1181@n126.sc0.he.tucows.com> (added by 
postmaster@bouncemessage.net)
X-SpamScore: 50
X-Spamcatcher-Summary: 50,3,0,a505a911d8bdb6c7,f273bff0fdffcbee,brightansah@rexia.com,-
X-Spamcatcher-Explanation: (67%)	BODY: contains "for immediate release";(33%)	BODY: 
contains text similar to "usd millions";
Received: from mail.rexian.com (ml82.128.23.13.multilinks.com [82.128.23.13])	
(Authenticated sender: ukuna7@rexian.com)	by sc0-out01.emaildefenseservice.com 
(Postfix) with ESMTP;	Sat, 26 Jan 2008 23:48:23 +0000 (UTC)
Reply-To: <crbinc@live.com>
From: "United Nation"<brightansah@rexia.com>
Subject: Payment Notification From United Nations 2008
Date: Sat, 26 Jan 2008 23:49:29 -0000
MIME-Version: 1.0
Content-Type: text/plain;	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
To: undisclosed-recipients:;

                                                                 United Nation (Un)
                                                               Debt Reconciliation Department.
                                                                 Geneva-Switzerland.
                                                              Our Ref: Un-0xx2/987/2008
 
Chairman Committee On Foreign 
Contract On Payment Notification From United 
Nations And USA Government
Sir. Eric Ben.
 
Attn: Beneficiary
 
U.S.A Government, World Bank, United Nations Organization Official Has Approved To Pay You Part Payment Valued $8.5m For 2008 Fund Approval.
 
The British Prime Minister in conjunction with U.S.A GOVERNMENT, WORLD BANK, UNITED NATIONS ORGANIZATION do hereby give this irrevocable approval order with your Release Code: GNC/3480/02/08 in your favor for your contract entitlement Been Your Inheritance Fund Or Award Winning Payment With The UNITED NATIONS. So You Are Advised To Present Any Of Your Choice, On How You Want To Receive Your Fund, Either By BANK DRAFT OR BY ATM CARD OR WIRE TRANSFER, So In Regards To The Transfer You Can Provide Any Of Your BANK ACCOUNT DETAILS For The Transfer Of Your Fund With Out Delay. I Am Contacting You In Regards To The Instruction Given By United Nations, Please I Will Urge You To Try And Indicate On How You Want Your Fund To Be Released To You From The Three Options Above.
 
Now your new Payment, United nations Approval No; UN5685P, White House Approved No: WH44CV, Reference No.-35460021, Allocation No: 674632 Password No: 339331, Pin Code No: 55674 and your Certificate of Merit Payment No: 103, Released Code No: 0763; Immediate Citibank Telex confirmation No: -1114433; Secret Code No: XXTN013, Having received these vital payment number, therefore You are qualified now to received and confirm Your payment with the United Nation immediately within the next 72hrs.
 
As a matter of fact, you are required to Deal and Communicate only with MR. ROBERT BISCHOFF, HEAD OF INTERNATIONAL REMMITTANCE CITIBANK, UNITED KINGDOM, with the help of monitory team from the CITIBANK OF NEW YORK which is our official remitting bank, Committee On Foreign Payment Matters in United Nations, has look up to make sure you receive your Fund. So contact: MR ROBERT BISCHOFF on his contact information, Direct Citibank Telephone No +44-700-5964577, Cell/mobile +44-7045743915 or cell/mobile +44-7045743915 Fax Number: +44 870 288 7323, Telephone Number: +44-870 288 7101, Email: crbinc@yahoo.it. For immediate release of your contract/inheritance/Award Winning claim be informed that you are not allowed to correspond with any person or office anymore, you are required to send bellow information for your transfer.
 
1) YOUR FULL NAME:
2) ADDRESS, CITY, STATE AND COUNTRY:
3) PERSONAL CELL PHONE, FAX AND MOBILE:
4) COMPANY NAME (IF ANY) POSITION AND ADDRESS:
5) BANK NAME:
6) BANK ADDRESS:
7) ACCOUNT NUMBER:
8) ROUTING NUMBER OR SWIFT CODE NO:
9) OCCUPATION, AGE AND MARITAL STATUS:
10) COPY OF YOUR INT'L PASSPORT/DRIVERS LICENSE:
 
Note: Your Personal Contact/Communication Code With Citibank Is (011), You Are Advice To Send Your Full Banking Information To The Citibank London, International Remittance Director Headed By Mr. Robert Bischoff And Make Sure You Speak With Him, With Your New Payment Code For The Release Of Your Payment And Send To Him All Your Banking Information Now.
 
Contact Person: Mr. Robert Bischoff
Position: Head Of International Remittance Citibank Of London.
Telephone Office/Bank: 44-700-5964577,
Fax Number: +44 870 286 0893, +44 870 286 0893
Cell/Mobile, +44-7045743915 Or Cell/Mobile +44-7045743915.
Email: crbinc@yahoo.it.
 
Chairman Committee On Foreign Contract, on Payment Notification from United Nations And USA Government.
Sir. Eric Ben.


[studio42@flatus studio42]$ host 64.97.144.126
126.144.97.64.in-addr.arpa domain name pointer smtpout1126.sc0.he.tucows.com.
[studio42@flatus studio42]$ whois 64.97.144.126@whois.arin.net
[whois.arin.net]

OrgName:    Tucows.com Co.
OrgID:      TUCOW
Address:    96 Mowat Avenue
City:       Toronto
StateProv:  ON
PostalCode: M6K-3M1
Country:    CA

NetRange:   64.96.0.0 - 64.99.255.255
CIDR:       64.96.0.0/14
NetName:    TUCOWS-BLK2
NetHandle:  NET-64-96-0-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.HE.TUCOWS.COM
NameServer: NS2.HE.TUCOWS.COM
NameServer: NS3.HE.TUCOWS.COM
Comment:
RegDate:    2000-05-18
Updated:    2006-02-28

OrgTechHandle: NOC2038-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-416-535-0123
OrgTechEmail:  arin-maint@tucows.com

# ARIN WHOIS database, last updated 2008-01-25 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Flags as spam yet passes it along anyways.

Onto scammer:

[studio42@flatus studio42]$ host 82.128.23.13
13.23.128.82.in-addr.arpa domain name pointer ml82.128.23.13.multilinks.com.
[studio42@flatus studio42]$ whois 82.128.23.13@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '82.128.0.0 - 82.128.23.255'

inetnum:        82.128.0.0 - 82.128.23.255
netname:        INET-MLTL
descr:          CDMA 1x Dialup Pool
country:        NG
admin-c:        RIA27
tech-c:         RIA27
status:         ASSIGNED PA
mnt-by:         MLTL-INT-MNT
mnt-lower:      MLTL-INT-MNT
source:         AFRINIC # Filtered
parent:         82.128.0.0 - 82.128.31.255

person:       IP Admin-RIPE
address:      Multilinks Telecommunications Limited
address:      231 Adeola Odeku Str.
address:      Victoria Island, Lagos, Nigeria
e-mail:       ipadmin@multilinks.com
remarks:      complaints/spam report : abuse@multilinks.com
phone:        +2341774000
nic-hdl:      RIA27
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered