Received: from cp-out2.libero.it (212.52.84.102) by studio42.com with ESMTP
 (Eudora Internet Mail Server 3.2.10) for <chris@studio42.com>;
 Sat, 29 Nov 2008 13:29:07 -0800
Received: from libero.it (192.168.17.13) by cp-out2.libero.it (8.5.016.1)
        id 492C02E6008A4123; Sat, 29 Nov 2008 22:28:37 +0100
Date: Sat, 29 Nov 2008 22:28:37 +0100
Message-Id: <KB46BP$BF277885A7BB943D8554A2B06F828C2D@libero.it>
Subject: CONFIDENTIAL, URGENTREPLY
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "nuru_din2" <nuru_din2@libero.it>
X-XaM3-API-Version: 4.3 (R1) (B3pl25)
X-SenderIP: 41.203.231.178





[studio42@flatus counter]$ host 212.52.84.102
102.84.52.212.in-addr.arpa domain name pointer cp-out2.libero.it.
[studio42@flatus counter]$ whois 212.52.84.102@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #2.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag

% Information related to '212.52.79.0 - 212.52.88.255'

inetnum:      212.52.79.0 - 212.52.88.255
netname:      IOL-5
descr:        Italia OnLine S.P.A
descr:        Via Lorenteggio 257 - 20152 Milano
country:      IT
admin-c:      IHM1-RIPE
tech-c:       IHM1-RIPE
rev-srv:      ns1.libero.it
rev-srv:      ns2.libero.it
status:       ASSIGNED PA
mnt-by:       AS1267-MNT
mnt-routes:   AS1267-MNT
source:       RIPE # Filtered

person:       IOL Host Master
address:      Italia Online S.p.A.
address:      Via Lorenteggio, 257
address:      I-20153 Milano
address:      Italy
phone:        +39 02 30111
fax-no:       +39 02 30114182
e-mail:       hostmaster@iol.it
nic-hdl:      IHM1-RIPE
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

% Information related to '212.52.64.0/19AS1267'

route:        212.52.64.0/19
descr:        IOL
origin:       AS1267
remarks:      removed cross-mnt:    AS1267-MNT
mnt-lower:    AS1267-MNT
mnt-routes:   AS1267-MNT
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

% Information related to '212.52.64.0/18AS1267'

route:        212.52.64.0/18
descr:        IOL
origin:       AS1267
remarks:      removed cross-mnt:    AS1267-MNT
mnt-lower:    AS1267-MNT
mnt-routes:   AS1267-MNT
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

I'll tighten up that filter a bit.

Onto the scammer:

[studio42@flatus counter]$ host 41.203.231.178
Host 178.231.203.41.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus counter]$ whois 41.203.231.178@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.203.224.0 - 41.203.239.255'

inetnum:        41.203.224.0 - 41.203.239.255
netname:        ONDT1-20080103
descr:          ONATEL
country:        BF
admin-c:        JAL5-AFRINIC
tech-c:         ADB39-AFRINIC
tech-c:         AD671-AFRINIC
org:            ORG-ONdT1-AFRINIC
status:         ALLOCATED PA
mnt-by:         AFRINIC-HM-MNT
mnt-lower:      LIR-BF-ONATEL-MNT
mnt-domains:    LIR-BF-ONATEL-MNT
source:         AFRINIC # Filtered
parent:         41.0.0.0 - 41.255.255.255

organisation:   ORG-ONdT1-AFRINIC
org-name:       ONATEL (Office National des Telecommunications, PTT)
country:        BF
org-type:       LIR
address:
address:        01 BP 10 000
address:        Ouagadougou 01
address:        Burkina Faso
phone:          +226 334001 ext. 476
fax-no:         +226 310331
e-mail:         registry@onatel.bf
admin-c:        JAL5-AFRINIC
admin-c:        LO52-AFRINIC
admin-c:        PO329-AFRINIC
admin-c:        ADB39-AFRINIC
admin-c:        AD671-AFRINIC
mnt-ref:        LIR-BF-ONATEL-MNT
mnt-by:         AFRINIC-HM-MNT
remarks:        data has been transferred from RIPE Whois Database 20050221
source:         AFRINIC # Filtered

person:       Jacques Arsene LOUARI
address:      01 BP 10000 ONATEL Ouaga BF
phone:        +226 33 64 76
fax-no:       +226 31 03 31
e-mail:       jacques.louari@onatel.bf
nic-hdl:      JAL5-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:       Ali Drissa BADIEL
address:      01 BP 10000 ONATEL Ouaga BF
phone:        +226 30 74 14
phone:        +226 20 10 35
fax-no:       +226 30 74 14
e-mail:       badiel@onatel.bf
nic-hdl:      ADB39-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:       Adama DIALGA
address:      01 BP 10000 ONATEL Ouaga BF
phone:        +226 30 58 48
phone:        +226 20 10 34
fax-no:       +226 30 74 14
e-mail:       dialga@onatel.bf
nic-hdl:      AD671-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered