Return-Path: <users111@globo.com>
Received: from sc2.he.tucows.com (64.97.154.90) by studio42.com with 
ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Mon, 10 Mar 2008 15:27:05 -0800
Received: from [82.128.14.81] by sc2.he.tucows.com with HTTP; 
Mon, 10 Mar 2008 22:26:02 +0000
Date: Mon, 10 Mar 2008 23:26:02 +0100
Message-ID: <47C6817A0002BB3A@mail12.sc2.he.tucows.com>
From: "Abdoulaye Bio-Tchan" <users111@globo.com>
Subject: Re: Intercepted Transfer
Reply-To: infoafricaimf@gmail.com
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-15"
Content-Transfer-Encoding: quoted-printable
X-Mailer: GloboMail
X-Originating-IP: 82.128.14.81
To: undisclosed-recipients:;

Headquarters building
International Monetary Fund (I.M.F),
Washington, D.C.



Re: Intercepted Transfer

Dear Beneficiary,

It has come to our notice in our Headquarters building (I.M.F) that your
impending funds from Africa, which was intercepted,has not been released
to you ,We noticed that you made several attempt to transfer your funds but
to no avail. Our investigation continued to the African Department (I.M.F),The
monitoring team gave an unsatisfactory report to your transaction, hence
the chairman is presently under investigation for conspiracy with your representative
with intention to divert your funds.

You are advised to desist from contacting anyone including your agent or
representative in these regard, International Monetary Fund has taken full
responsibility to transfer your fund to you,respond to these mail by providing
your full name and phone number.

Yours Faithfully,

Abdoulaye Bio-Tchan?.
African Department Director
I.M.F




[studio42@flatus studio42]$ host 64.97.154.90
90.154.97.64.in-addr.arpa domain name pointer mail12.sc2.he.tucows.com.
[studio42@flatus studio42]$ whois 64.97.154.90@whois.arin.net
[whois.arin.net]

OrgName:    Tucows.com Co.
OrgID:      TUCOW
Address:    96 Mowat Avenue
City:       Toronto
StateProv:  ON
PostalCode: M6K-3M1
Country:    CA

NetRange:   64.96.0.0 - 64.99.255.255
CIDR:       64.96.0.0/14
NetName:    TUCOWS-BLK2
NetHandle:  NET-64-96-0-0-1
Parent:     NET-64-0-0-0-0
NetType:    Direct Allocation
NameServer: NS1.HE.TUCOWS.COM
NameServer: NS2.HE.TUCOWS.COM
NameServer: NS3.HE.TUCOWS.COM
Comment:
RegDate:    2000-05-18
Updated:    2006-02-28

OrgTechHandle: NOC2038-ARIN
OrgTechName:   Network Operations Center
OrgTechPhone:  +1-416-535-0123
OrgTechEmail:  arin-maint@tucows.com

# ARIN WHOIS database, last updated 2008-03-09 19:10
# Enter ? for additional hints on searching ARIN's WHOIS database.

Tucows seems to have problems stopping abusers in any way, shape or form. Or rather refusing to stop them.

Onto scammer:

[studio42@flatus studio42]$ host 82.128.14.81
81.14.128.82.in-addr.arpa domain name pointer ml82.128.14.81.multilinks.com.
[studio42@flatus studio42]$ whois 82.128.14.81@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '82.128.0.0 - 82.128.23.0'

inetnum:        82.128.0.0 - 82.128.23.0
netname:        INET-MLTL
descr:          CDMA 1x Dialup Pool
country:        NG
admin-c:        RIA27
tech-c:         RIA27
status:         ASSIGNED PA
mnt-by:         MLTL-INT-MNT
mnt-lower:      MLTL-INT-MNT
source:         AFRINIC # Filtered
parent:         82.128.0.0 - 82.128.23.255

person:       IP Admin-RIPE
address:      Multilinks Telecommunications Limited
address:      231 Adeola Odeku Str.
address:      Victoria Island, Lagos, Nigeria
e-mail:       ipadmin@multilinks.com
remarks:      complaints/spam report : abuse@multilinks.com
phone:        +2341774000
nic-hdl:      RIA27
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

Ah, MultiLinks. OK to abuse, doesn't want to hear complaints.