Return-Path: <rose05_kone@yahoo.cn>
Received: from n1b.bullet.cnb.yahoo.com (202.43.216.211) by studio42.com 
with SMTP (Eudora Internet Mail Server 3.2.10) for  <webmaster@studio42.com>; 
Fri, 5 Sep 2008 07:26:13 -0700
Received: from [202.43.217.102] by n1.bullet.cnb.yahoo.com with NNFMP; 
05 Sep 2008 14:26:06 -0000
Received: from [203.209.230.77] by t2.bullet.cnb.yahoo.com with NNFMP; 
05 Sep 2008 14:26:06 -0000
Received: from [127.0.0.1] by omp106.mail.cnb.yahoo.com with NNFMP; 
05 Sep 2008 14:26:06 -0000
X-Yahoo-Newman-Property: ymail-5
X-Yahoo-Newman-Id: 20879.36643.bm@omp106.mail.cnb.yahoo.com
Received: (qmail 12222 invoked by uid 60001); 5 Sep 2008 14:26:05 -0000
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;  s=s1024; d=yahoo.cn;  h=X-YMail-OSG:Received:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type:
Content-Transfer-Encoding:Message-ID;  b=DxSyI2TERaFNrZok8tkSxSML604Ha6LyH2QmGlyp+1rUNPoD5Xk+9qq6fnfu8G5SlhwXldBqJbdf
GAtgHRt2xFPbqiGsFHioL+WCh2fj1W68x6mdNUcbt5hFtv2PUs3TWwwLvMuw1eAfNjfuSfYM4dJIcn
3DYq3rwiCkQOWYXNQ=;
X-YMail-OSG: hthBjgkVM1mWCbPBVHL.rjfA.i6qTlydQC.ShFiaOxznSmgAeH5OE0okau.tGG5io
MhMFAXOfdCOQsj
ZK6HDoQqflcfeFTMiTGnEB5Li8D1OI8ctdF7eC71bJzkID1o-
Received: from [41.207.27.143] by web92204.mail.cnh.yahoo.com via HTTP; 
Fri, 05 Sep 2008 22:26:05 CST
Date: Fri, 5 Sep 2008 22:26:05 +0800 (CST)
From: Rose Kone <rose05_kone@yahoo.cn>
Reply-To: rose03_kone@yahoo.com
Subject: Hi
To: rose05_kone@yahoo.cn
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-74561596-1220624765=:11934"
Content-Transfer-Encoding: 8bit
Message-ID: <530318.11934.qm@web92204.mail.cnh.yahoo.com> 

Dearest one, 
   
  I am Miss Rose Kone, Please I am seeking for your attention to help me retrieve a Trunk Box Deposited in a Security Copmany by My late father. The trunk box contains ($5.5 000 000.00) five million five hundred thousand Us Dollars. 
   
  Thanks and God bless you.
   
  Miss Rose Kone

       
---------------------------------
 ‹‰ͺ’² ¦”£¨Ÿ™΅ŸχΉŠ™² ¦”£°


[studio42@flatus studio42]$ host 202.43.216.211
211.216.43.202.in-addr.arpa domain name pointer n1b.bullet.cnb.yahoo.com.
[studio42@flatus studio42]$ whois 202.43.216.211@whois.apnic.net
[whois.apnic.net]
% [whois.apnic.net node-2]
% Whois data copyright terms    http://www.apnic.net/db/dbcopyright.html

inetnum:      202.43.192.0 - 202.43.223.255
netname:      YAHOO-ASIA-1
descr:        Internet Content Crovider
country:      US
admin-c:      YI12-AP
tech-c:       YI12-AP
status:       ALLOCATED PORTABLE
mnt-by:       APNIC-HM
mnt-lower:    MAINT-AP-YAHOO-INC
remarks:      -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
remarks:      This object can only be modified by APNIC hostmaster
remarks:      If you wish to modify this object details please
remarks:      send email to hostmaster@apnic.net with your organisation
remarks:      account name in the subject line.
remarks:      -+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
changed:      hm-changed@apnic.net 20030807
changed:      hm-changed@apnic.net 20041013
changed:      hm-changed@apnic.net 20050311
source:       APNIC

route:        202.43.216.0/23
descr:        Yahoo China
country:      CN
origin:       AS10228
mnt-by:       MAINT-AP-YAHOO-INC
changed:      gnelson@yahoo-inc.com 20030813
source:       APNIC

role:         YAHOO INC
address:      701 First Avenue
address:      Sunnyvale, CA 94089
country:      US
phone:        +1 408 349 3300
fax-no:       +1 408 349 3301
e-mail:       netblockadmin@yahoo-inc.com
trouble:      send spam and abuse reports to abuse@yahoo.com
trouble:      or visit http://abuse.yahoo.com
admin-c:      KW133-AP
tech-c:       KW133-AP
tech-c:       SD210-AP
nic-hdl:      YI12-AP
notify:       netops@yahoo-inc.com
mnt-by:       MAINT-AP-YAHOO-INC
changed:      kirkw@yahoo-inc.com 20061211
source:       APNIC

Yahoo. China. Nails two bad places at once.

Can we get a trifecta?

[studio42@flatus studio42]$ host 41.207.27.143
Host 143.27.207.41.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 41.207.27.143@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.207.16.0 - 41.207.31.255'

inetnum:        41.207.16.0 - 41.207.31.255
netname:        AVISONET
descr:          ISP Cote d'Ivoire
country:        CI
admin-c:        CTA1-AFRINIC
tech-c:         CTA1-AFRINIC
status:         ASSIGNED PA
mnt-by:         CIT-DT
mnt-lower:      CIT-DT
source:         AFRINIC # Filtered
parent:         41.207.0.0 - 41.207.31.255

role:           CONTACTS TEHNIQUE AVISO
address:        CI2M
address:        Avenue Houdaille
address:        Bp 310 cedex 01 Abidjan
address:        Ivoiry Coast
phone:          +225 20 30 09 94
e-mail:         eric.assi@aviso.ci
e-mail:         tanoh@aviso.ci
admin-c:        AE496-AFRINIC
tech-c:         ET3-AFRINIC
mnt-by:         CIT-DT
nic-hdl:        CTA1-AFRINIC
source:         AFRINIC # Filtered

I was expecting Nigeria, but this place is just as scummy. Nailed!