Return-Path: <Falcon@consultant.co.uk>
Received: from smtp-out5.blueyonder.co.uk (195.188.213.8) by studio42.com 
with ESMTP (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>; 
Wed, 25 Jun 2008 16:45:20 -0700
Received: from [172.23.170.144] (helo=anti-virus03-07)	by smtp-out5.blueyonder.co.uk 
with smtp (Exim 4.52)	id 1KBeZ6-00041V-U7; Thu, 26 Jun 2008 00:38:16 +0100
Received: from [213.154.68.18] (helo=chime-10a273132)	by asmtp-out3.blueyonder.co.uk 
with esmtpa (Exim 4.52)	id 1KBeYx-0000KY-RZ; Thu, 26 Jun 2008 00:38:10 +0100
Date: Wed, 25 Jun 2008 23:38:08 GMT
Mime-version: 1.0
Subject: SECOND LETTER
From: JOHN MAX <Falcon@consultant.co.uk>
To: Falcon@consultant.co.uk
Message-Id: <6252338.SQFJIFKT@consultant.co.uk>
Reply-To: johnconsultant1954@hotmail.com
X-Mailer: MBM 5.7.1-US
Content-type: text/plain; charset="ISO-8859-1"; format=flowed
Content-transfer-encoding: quoted-printable 

THIS IS FOR YOUR ATTENTION.

We wish to notify you again that you were listed as a beneficiary to the total sum of £10,600,000.00GBP (Ten Million Six Hundred Thousand British Pounds) in the codicil and last testament of the deceased.(Name now withheld since this is our second letter to you). We contacted you because you bear the surname identity and therefore can present you as the beneficiary to the inheritance.

We therefore reckoned that you could receive these funds as you are qualified by your name identity. All the legal papers will be processed in your acceptance.

 In your acceptance of this deal, we request that you kindly forward to us your letter of acceptance; your current telephone and fax numbers and a forwarding address to enable us file necessary documents at our high court probate division for the release of this sum of money.

Please contact me via my private email so that we can get this done immediately.

Kind regards,

John Max.
DX: 408 Lond/Chancery Lane
Telephone:.+447035904058
Fax: 020 7353 1261






[studio42@flatus studio42]$ host 195.188.213.8
8.213.188.195.in-addr.arpa domain name pointer smtp-out5.blueyonder.co.uk.
[studio42@flatus studio42]$ whois 195.188.213.8@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #3.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '195.188.213.0 - 195.188.213.255'

inetnum:      195.188.213.0 - 195.188.213.255
netname:      TW-KNOWSLEY-CENTRAL-OFFICE
descr:        INTERNET
country:      GB
admin-c:      TWIP1-RIPE
tech-c:       TWIP2-RIPE
status:       ASSIGNED PA
mnt-by:       AS5462-MNT
remarks:      report abuse to abuse@blueyonder.co.uk
remarks:      All reports via other channels will be ignored.
source:       RIPE # Filtered

role:           Telewest Broadband IP Network Services
address:        Genesis Business Park
address:        Albert Drive
address:        Woking
address:        Surrey UK
address:        GU21 5RW
e-mail:         ripe@telewest.net
remarks:        To report abuse:
remarks:        file an online case @ http://netreport.virginmedia.com/netreport
/
admin-c:        JH15424-RIPE
tech-c:         SA3620-RIPE
tech-c:         SB5110-RIPE
tech-c:         JH15424-RIPE
nic-hdl:        TWIP1-RIPE
mnt-by:         AS5462-MNT
source:         RIPE # Filtered

role:           Telewest Broadband Business Internet
address:        Genesis Business Park
address:        Albert Drive
address:        Woking
address:        Surrey UK
address:        GU21 5RW
e-mail:         ripe@telewest.net
admin-c:        JH15424-RIPE
tech-c:         AB9978-RIPE
tech-c:         AM2111-RIPE
tech-c:         PB5236-RIPE
nic-hdl:        TWIP2-RIPE
mnt-by:         as5462-mnt
source:         RIPE # Filtered

% Information related to '195.188.0.0/16AS5462'

route:          195.188.0.0/16
descr:          Telewest Broadband
descr:          UK Broadband ISP
origin:         AS5462
mnt-by:         AS5462-MNT
remarks:        report abuse to www.virginmedia.com/netreport  +44(0)1633 710142
source:         RIPE # Filtered

Abused service located.

Onto scammer or the zombie he used/abused:

[studio42@flatus studio42]$ host 213.154.68.18
Host 18.68.154.213.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 213.154.68.18@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '213.154.68.0 - 213.154.68.255'

inetnum:      213.154.68.0 - 213.154.68.255
netname:      SONATELNET
descr:        Pool ADSL BAS 1 Medina
country:      SN
admin-c:      SBT7-AFRINIC
tech-c:       BAW1-AFRINIC
status:       ASSIGNED PA
mnt-by:       SMM-MNT
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered
parent:         213.154.64.0 - 213.154.95.255

person:       Seydou Bocar THIAM
address:      SOCIETE NATIONALES DES TELECOMMUNICATIONS
address:      Direction des Reseaux
address:      6 Rue Wagane DIOUF
address:      BP 69 Dakar
address:      SENEGAL
phone:        +221 839 23 39
fax-no:       +221 839 22 36
e-mail:       sbthiam@sentoo.sn
nic-hdl:      SBT7-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:       Babacar Wagne
address:      6, Rue Wagne Diouf
phone:        +221 839 27 41
nic-hdl:      BAW1-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered