Return-Path: <john_ma586@hotmail.com>
Received: from manganese.onspeed.com (83.138.172.77) by studio42.com with 
ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Wed, 23 Apr 2008 17:41:30 -0700
Received: from mxcson2041.com (localhost [127.0.0.1])	by manganese.onspeed.com 
(Postfix) with SMTP id 8447E3E14B8	for <chris@studio42.com>; 
Thu, 24 Apr 2008 01:41:15 +0100 (BST)
Received: from 41.208.176.131 (trLxgNQtuC@41.208.176.131 [41.208.176.131])	
by manganese.onspeed.com (SlipStream SP Server 6.0.19	built 2007/11/22 15:27:31 -0500 
(EST)); Thu, 24 Apr 2008 01:41:16 +0100 (BST)
X-Originating-IP: [41.208.176.131]
X-Originating-User: [trLxgNQtuC]
Message-ID: <trLxgNQtuC$41.208.176.131$.480fd72c.38347.33b1.1798@manganese.onspeed.com>
From: "JOHN MAX" <john_ma586@hotmail.com>
Reply-To: john_max586@hotmail.com
To: chris@studio42.com
Date: Thu, 24 Apr 2008 00:41:15 +0000
Subject: SECOND NOTICE
X-Priority: 1
X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable


THIS IS FOR YOUR ATTENTION. 

We wish to notify you again that you were listed as a beneficiary to the total sum of £10,600,000.00GBP (Ten Million Six Hundred Thousand British Pounds) in the codicil and last testament of the deceased. (Name now withheld since this is our second letter to you). We contacted you because you bear the surname identity and therefore can present you as the beneficiary to the inheritance. 

We therefore reckoned that you could receive these funds as you are qualified by your name identity. All the legal papers will be processed in your acceptance. In your acceptance of this deal, we request that you kindly forward to us your letter of acceptance; your current telephone and fax numbers and a forwarding address to enable us file necessary documents at our high court probate division for the release of this sum of money.

Please contact me immediatley so that we can get this done immediately.

Best Regard,
Mr.John Max.




77.172.138.83.in-addr.arpa domain name pointer manganese.onspeed.com.
[studio42@flatus studio42]$ whois 83.138.172.77@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '83.138.172.64 - 83.138.172.95'

inetnum:        83.138.172.64 - 83.138.172.95
netname:        RSPC-UK-Net2Roam-Ltd
descr:          Net2Roam-Ltd- IP Space
country:        GB
admin-c:        IA247-RIPE
tech-c:         IA247-RIPE
rev-srv:        ns.rackspace.com
status:         ASSIGNED PA
mnt-by:         RSPC-MNT
source:         RIPE # Filtered

person:       IP Admin
address:      Rackspace Managed Hosting
              112 E. Pecan St. Suite 600
              San Antonio, Texas 78205
phone:        +1 210 892 4000
fax-no:       +1 210 892 4329
e-mail:       ipadmin@rackspace.com
nic-hdl:      IA247-RIPE
remarks:        ###  Rackspace Abuse Department
remarks:        ###  Please send any complaints to the following:
remarks:        ###  abuse@rackspace.com
mnt-by:       RSPC-MNT
source:       RIPE # Filtered

Right, like Rackspace gives a damn about abuse.

Onto scammer:

[studio42@flatus studio42]$ host 41.208.176.131
Host 131.176.208.41.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 41.208.176.131@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.208.176.0 - 41.208.176.255'

inetnum:        41.208.176.0 - 41.208.176.255
netname:        BAS3
descr:          SONATEL
country:        SN
admin-c:        MN1281-AFRINIC
tech-c:         FN4-AFRINIC
status:         ASSIGNED PA
mnt-by:         SMM-MNT
mnt-lower:      SMM-MNT
source:         AFRINIC # Filtered
parent:         41.208.128.0 - 41.208.191.255

person:       Mody Ndiaye
address:      SOCIETE NATIONALES DES TELECOMMUNICATIONS
address:      Sonatel
address:      Dakar
address:      Senegal
e-mail:       modyndiaye@sentoo.sn
phone:        +221 8392337
fax-no:       +221 8233698
nic-hdl:      MN1281-AFRINIC
mnt-by:       SMM-MNT
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:         Fatoumata Ndiaye
address:        Sonatel
address:        Direction des Reseaux
address:        Direction des Operations Reseaux
address:        Technopole
address:        SENEGAL
phone:          +221 8793223
fax-no:         +221 8330026
nic-hdl:        FN4-AFRINIC
e-mail:         fatoumata.ndiaye@orange-sonatel.com
source:         AFRINIC # Filtered