Return-Path: <dubjones148@earthlink.net>
Received: from elasmtp-kukur.atl.sa.earthlink.net (209.86.89.65) by  
studio42.com with ESMTP (Eudora Internet Mail Server 3.2.10) for 
<chris@studio42.com>; Sat, 16 Feb 2008 12:19:15 -0800
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;  s=dk20050327; d=earthlink.net;  
b=mhuUCT8QPOaSrMudq7Mg7CHKvodMiQhj7YkZStWU0VDcTXJWbGCrq0fCwZDB2+By;  h=Message-ID:Date:From:Reply-To:Subject:Mime-Version:Content-Type:
Content-Transfer-Encoding:X-Mailer:X-ELNK-Trace:X-Originating-IP;
Received: from [209.86.224.46] (helo=elwamui-royal.atl.sa.earthlink.net)	by 
elasmtp-kukur.atl.sa.earthlink.net with asmtp (Exim 4.34)	id 1JQTJr-0001fy-VA; 
Sat, 16 Feb 2008 15:07:32 -0500
Received: from 41.210.5.48 by webmail.pas.earthlink.net with HTTP; 
Sat, 16 Feb 2008 15:07:26 -0500
Message-ID: <2419412.1203192446759.JavaMail.root@elwamui-royal.atl.sa.earthlink.net>
Date: Sat, 16 Feb 2008 20:07:26 +0000 (GMT+00:00)
From: Derry Jones <dubjones148@earthlink.net>
Reply-To: Derry Jones <derryjones29@myway.com>
Subject: FAVOUR.
Mime-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: EarthLink Zoo Mail 1.0
X-ELNK-Trace: 792b512e0007b0a4a6e77431344ac65e9ef193a6bfc3dd48a07e305bcfed4e2653e16b5b98275ea72601a10902912494350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 209.86.224.46
To: undisclosed-recipients:;

Mr. Derry Jones
Permanent Tsb
56/59 St. Stephen Green, Dublin
Corporate     Tel: +353-1-6864064
Corporate     Tel: +353-873292566
Confidential  Tel: +871-764107753
Confidential  Fax: +871-764107751
Email: derryjones11@myway.com

Hello,

I am contacting you on a business transaction of a huge sum of money
from a deceased account. Though I know that a transaction of this
magnitude will make any one apprehensive and worried, but I am  
assuring you that all will be well at the end of the day. 
we decided to contact you due to the urgency of this transaction.

We discovered an abandoned sum of (Twenty seven million five hundred 
thousand United States dollars) in an account that belongs to one of 
our foreign customer who died along with his entire family. Since his 
death, none of His next-of-kin or relations has come forward to lay 
claims for this money as the heir.

We cannot release the funds from His account unless someone applies for
claim as the next-of-kin to the deceased as indicated in our banking
guidelines. Upon this discovery, we now seek your permission to have
you stand as a next of kin to the deceased as all documentations
will be carefully worked out by us for the funds (Twenty seven million 
five hundred thousand United States dollars) to be released in your favor 
as the beneficiary's next of kin. It may interest you to know that we
have secured from the probate an order of mandamus to locate any of
the deceased beneficiaries.

Please acknowledge receipt of this message in acceptance of
our mutual business endeavor by furnishing me with the
following;

1. Beneficiary name and address.
2. Direct telephone and fax numbers.

These requirements will enable us file letter of claim to the
appropriate departments for necessary approvals in your favor before
the transfer can be made. We shall be compensating you with thirty percent
of the total funds, on final Conclusion of this project, while the rest 
shall be for us. Your share stays while the rest shall be for us for 
investment purposes. If this proposal is acceptable by you, do not take undue
advantage of the trust we have bestowed in you.

NB: If you are willing to assist me, including the information's i have
requested from you, call me on my confidential tel: +871-7641077533 for
further details and discussions on what to do next.

And reply to my alternative email: derryjones11@myway.com

I await your call.

Best regards,
Mr. Derry Jones.
Corporate    Tel: +353-1-6864064
Corporate    Tel: +353-873292566
Confidential Tel: +871-764107753
Confidential Fax: +871-764107751



[studio42@flatus studio42]$ host 209.86.89.65
65.89.86.209.in-addr.arpa domain name pointer elasmtp-kukur.atl.sa.earthlink.net
.
[studio42@flatus studio42]$ whois 209.86.89.65@whois.arin.net
[whois.arin.net]

OrgName:    EarthLink, Inc.
OrgID:      ERMS
Address:    1375 PEACHTREE ST, LEVEL A
City:       ATLANTA
StateProv:  GA
PostalCode: 30309
Country:    US

NetRange:   209.86.0.0 - 209.86.255.255
CIDR:       209.86.0.0/16
NetName:    EARTHLINK2000-E
NetHandle:  NET-209-86-0-0-1
Parent:     NET-209-0-0-0-0
NetType:    Direct Allocation
NameServer: ITCHY.EARTHLINK.NET
NameServer: SCRATCHY.EARTHLINK.NET
Comment:
RegDate:    2000-04-20
Updated:    2007-03-30

RTechHandle: DAE4-ARIN
RTechName:   Domain Administrator, Administrator
RTechPhone:  +1-404-815-0770
RTechEmail:  arinpoc@corp.earthlink.net

OrgAbuseHandle: ABUSE60-ARIN
OrgAbuseName:   ABUSE TEAM
OrgAbusePhone:  +1-404-815-0770
OrgAbuseEmail:  abuse@abuse.earthlink.net

OrgTechHandle: ELNK-ORG-ARIN
OrgTechName:   EarthLink, Inc.
OrgTechPhone:  +1-404-815-0770
OrgTechEmail:  arin_tech@lists.corp.earthlink.net

# ARIN WHOIS database, last updated 2008-02-15 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Seems it's all Earthlink.

One last check to see if this is the zombie:

[studio42@flatus studio42]$ host 209.86.224.46
46.224.86.209.in-addr.arpa domain name pointer elwamui-royal.atl.sa.earthlink.net.

Doesn't sound like a zombie.

I think this needs more looking:

[studio42@flatus studio42]$ host 41.210.5.48
;; connection timed out; no servers could be reached
[studio42@flatus studio42]$ whois 41.210.5.48@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.210.0.0 - 41.210.31.255'

inetnum:        41.210.0.0 - 41.210.31.255
netname:        ghanatel
descr:          Ghana Telecom ADSL DYNAMIC ADDRESS POOL
country:        GH
admin-c:        MKN4-AFRINIC
admin-c:        DAA7-AFRINIC
admin-c:        EAK16-AFRINIC
tech-c:         MKN4-AFRINIC
tech-c:         DAA7-AFRINIC
tech-c:         EAK16-AFRINIC
status:         ASSIGNED PA
mnt-by:         GHANATEL-MNT
mnt-by:         MNT-DAA7
source:         AFRINIC # Filtered
parent:         41.210.0.0 - 41.210.63.255

person:       Michael Komla Nfodzo
address:      Ghana Telecommunications Ltd.
address:      Telecom House, GTnet/xDSL,
address:      PMB 221
address:      Accra North
phone:        +233 20 2003504
phone:        +233 21 247081
phone:        +233 21 257848
fax-no:       +233 21 247082
e-mail:       mnfodzo@ghanatel.com.gh
nic-hdl:      MKN4-AFRINIC
mnt-by:       MNT-MKN4
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:       Daniel Adjei Asante
address:      Ghana Telecom, FASTnet Department, Accra-North
phone:        +233 21 247081
fax-no:       +233 21 251277
e-mail:       daasante@ghanatel.com.gh
nic-hdl:      DAA7-AFRINIC
mnt-by:       MNT-DAA7
source:       AFRINIC # Filtered

person:       EMMANUEL ANTWI KWARTENG
address:      GHANA TELECOM COMPANY LIMITED
address:      HEADQUARTERS, ACCRA-NORTH
phone:        +233 21 247081
phone:        +233 20 2005526
fax-no:       +233 21 247082
e-mail:       kwarteng@ghanatel.com.gh
nic-hdl:      EAK16-AFRINIC
remarks:      THIS IS PERSON OBJECT FOR KWARTENG
mnt-by:       EAK16-MNT
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered