Return-Path: <darrell@gci.net>
Received: from msgmmp-4.gci.net (209.165.130.14) by studio42.com with 
ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Sat, 2 Feb 2008 09:32:12 -0800
Received: from gci.net ([209.165.130.77]) by msgmmp-1.gci.net (Sun 
Java System Messaging Server 6.2-3.03 (built Jun 27 2005)) with ESMTP id 
<0JVM001N183HVY60@msgmmp-1.gci.net>; Sat, 02 Feb 2008 05:26:28 -0900 (AKST)
Received: from UNKNOWN[61.19.148.233] by mailstore-7.gci.net (mshttpd); 
Sat, 02 Feb 2008 15:26:05 +0100
Date: Sat, 02 Feb 2008 15:26:05 +0100
From: Darrell Hibbs <darrell@gci.net>
Subject: Donazione
Bcc:
Reply-to: martino_nino_fdf1@hotmail.com
Message-id: <f807a15a2369.47a48b8d@gci.net>
MIME-version: 1.0
X-Mailer: Sun Java(tm) System Messenger Express 6.2-4.03 (built Sep 22 2005)
Content-type: multipart/alternative; boundary="Boundary_(ID_JX1XGSYIq9tjFk9pNmaL7g)"
Content-language: en
X-Accept-Language: en
Priority: normal 

Donazione
16 Rue Lanterne,
Lyon 69001, France.
The Fondation  would like to notify you that you have been chosen by
the board of trustees as one of the final recipients of a cash Grant.
You are required to contact the Executive Secretary below, for
qualification documentation and processing of your claims. You were
selected among the lucky recipients to receive the award sum of
 US$1,350,000.00 After
contacting our office, you will be given your donation pin number,which
 you will use in collecting the funds. Please endeavor to quote your
 Qualification numbers(FDF-444-6647-9163)  in all discussions.
 France(FDF)
 documentation form, requesting your required particulars.You are to
 immediately fill the form and return as soon as possible.
             VERIFICATION FORM
FULL NAMES:______
ADDRESS: ________
COUNTRY________
SEX:_____AGE:_____
MARITAL:________
OCCUPATION:_____________
TELEPHONE NUMBER:___
Executive Sec. Mr. Martino Nino
Email: martino_nino_fdf12@hotmail.com
Please note that these are strictly administered by the EU,
ECOWAS,UNO.You are by all means hereby advised to keep this whole
information confidential until you have been able to collect your grant
 as there
have been many cases  of double and unqualified claim, due to
 beneficiaries
informing third parties about his/her grant.
Regards.
Mrs.Arvid Waisanen



[studio42@flatus studio42]$ host 209.165.130.14
14.130.165.209.in-addr.arpa domain name pointer msgmmp-4.gci.net.
[studio42@flatus studio42]$ whois 209.165.130.14@whois.arin.net
[whois.arin.net]

OrgName:    GCI Communications, Inc.
OrgID:      GCOM
Address:    2550 Denali St.
Address:    Suite 1000
City:       Anchorage
StateProv:  AK
PostalCode: 99503
Country:    US

ReferralServer: rwhois://rwhois.gci.net:4321/

NetRange:   209.165.128.0 - 209.165.191.255
CIDR:       209.165.128.0/18
NetName:    GCI-ALASKA-0BLK
NetHandle:  NET-209-165-128-0-1
Parent:     NET-209-0-0-0-0
NetType:    Direct Allocation
NameServer: VANS-1.GCI.NET
NameServer: VANS-2.GCI.NET
Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
RegDate:    1997-12-10
Updated:    2003-12-12

RTechHandle: GDA5-ORG-ARIN
RTechName:   GCI IP Administrator
RTechPhone:  +1-907-868-0100
RTechEmail:  ipadmin@gci.net

OrgAbuseHandle: GNS10-ARIN
OrgAbuseName:   GCI Network Security
OrgAbusePhone:  +1-907-868-5330
OrgAbuseEmail:  abuse@gci.net

OrgNOCHandle: GCNCC-ARIN
OrgNOCName:   GCI Customer Network Control Center
OrgNOCPhone:  +1-907-868-0100
OrgNOCEmail:  intcncc@gci.net

OrgTechHandle: GDA5-ORG-ARIN
OrgTechName:   GCI IP Administrator
OrgTechPhone:  +1-907-868-0100
OrgTechEmail:  ipadmin@gci.net

# ARIN WHOIS database, last updated 2008-02-01 19:03
# Enter ? for additional hints on searching ARIN's WHOIS database.

I've had problems with this ISP recent.

If I can trust it, then the spammer or zombie is:

[studio42@flatus studio42]$ host 61.19.148.233
Host 233.148.19.61.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 61.19.148.233@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      61.19.148.0 - 61.19.149.255
netname:      CAT-Northeast
country:      TH
descr:        294/1 M.13 suanrajkharn road muang KHONGHAN 40000 ***send spam abu
se to
descr:        ouychai@northeast.cat.net.th ***
admin-c:      TC476-AP
tech-c:       IC174-AP
status:       ALLOCATED NON-PORTABLE
changed:      suchok@cat.net.th 20040430
mnt-by:       MAINT-TH-THIX-CAT
source:       APNIC

person:       THIX network staff CAT Telecom
nic-hdl:      TC476-AP
e-mail:       admin-thix@cat.net.th
address:      Data Comm. Dept.(Internet)
address:      address:      CAT Telecom Public Company Ltd,
address:      address:      72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone:        +66-2-6142374
fax-no:       +66-2-6142270
country:      TH
changed:      suchok@cat.net.th 20051202
mnt-by:       MAINT-TH-THIX-CAT
source:       APNIC

person:       IP-network CAT Telecom
nic-hdl:      IC174-AP
e-mail:       ip-noc@cat.net.th
address:      Data Comm. Dept.(Internet)
address:      address:      CAT Telecom Public Company Ltd,
address:      address:      72 Charoenkrung Road Bangrak Bangkok THAILAND 10501
phone:        +66-2-6142374
fax-no:       +66-2-6142270
country:      TH
changed:      suchok@cat.net.th 20051202
mnt-by:       MAINT-TH-THIX-CAT
source:       APNIC