Return-Path: <mr_nouri@libero.it>
Received: from cp-out1.libero.it (212.52.84.101) by studio42.com with ESMTP 
(Eudora Internet Mail Server 3.2.10) for <chris@indiciumtechnologies.com>; 
Fri, 26 Dec 2008 12:25:21 -0800
Received: from libero.it (192.168.17.6) by cp-out1.libero.it (8.5.016.1)
        id 494F57880055C487; Fri, 26 Dec 2008 17:48:34 +0100
Date: Fri, 26 Dec 2008 17:48:34 +0100
Message-Id: <KCHTCY$18068D2200BF954F0072FA9C28EFA141@libero.it>
Subject: Asalamaleku
MIME-Version: 1.0
X-Sensitivity: 3
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
From: "mr_nouri" <mr_nouri@libero.it>
X-XaM3-API-Version: 4.3 (R1) (B3pl25)
X-SenderIP: 41.203.231.31
To: undisclosed-recipients:;

I am Mr Peter Nouri bank manager of B.O.A Bank in Burkina faso.I would like you to indicate your interest to receive the transfer of 8.2M Dollars.I will like you to stand as the next of kin to my late Descease customer Mr Thomas Stockley whose account is presently dormant for claim.
now you can visit the web site below for more information:www.cnn.com/2000/US/02/01/alaska.airlines.list





[studio42@flatus studio42]$ host 212.52.84.101
101.84.52.212.in-addr.arpa domain name pointer cp-out1.libero.it.
[studio42@flatus studio42]$ whois 212.52.84.101@whois.ripe.net
[whois.ripe.net]
% This is the RIPE Whois query server #1.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/db/copyright.html

% Note: This output has been filtered.
%       To receive output for a database update, use the "-B" flag.

% Information related to '212.52.79.0 - 212.52.88.255'

inetnum:      212.52.79.0 - 212.52.88.255
netname:      IOL-5
descr:        Italia OnLine S.P.A
descr:        Via Lorenteggio 257 - 20152 Milano
country:      IT
admin-c:      IHM1-RIPE
tech-c:       IHM1-RIPE
rev-srv:      ns1.libero.it
rev-srv:      ns2.libero.it
status:       ASSIGNED PA
mnt-by:       AS1267-MNT
mnt-routes:   AS1267-MNT
source:       RIPE # Filtered

person:       IOL Host Master
address:      Italia Online S.p.A.
address:      Via Lorenteggio, 257
address:      I-20153 Milano
address:      Italy
phone:        +39 02 30111
fax-no:       +39 02 30114182
e-mail:       hostmaster@iol.it
nic-hdl:      IHM1-RIPE
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

% Information related to '212.52.64.0/19AS1267'

route:        212.52.64.0/19
descr:        IOL
origin:       AS1267
remarks:      removed cross-mnt:    AS1267-MNT
mnt-lower:    AS1267-MNT
mnt-routes:   AS1267-MNT
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

% Information related to '212.52.64.0/18AS1267'

route:        212.52.64.0/18
descr:        IOL
origin:       AS1267
remarks:      removed cross-mnt:    AS1267-MNT
mnt-lower:    AS1267-MNT
mnt-routes:   AS1267-MNT
mnt-by:       AS1267-MNT
source:       RIPE # Filtered

This abuse-friendly ISP has been trying to get spam into me all year.
Now that one got through, I can blacklist more of them now that this block
has been discovered.

Onto scammer:

[studio42@flatus studio42]$ host 41.203.231.31
Host 31.231.203.41.in-addr.arpa not found: 3(NXDOMAIN)
[studio42@flatus studio42]$ whois 41.203.231.31@whois.afrinic.net
[whois.afrinic.net]
% This is the AfriNIC Whois server.

% Note: this output has been filtered.

% Information related to '41.203.224.0 - 41.203.239.255'

inetnum:        41.203.224.0 - 41.203.239.255
netname:        ONDT1-20080103
descr:          ONATEL
country:        BF
admin-c:        JAL5-AFRINIC
tech-c:         ADB39-AFRINIC
tech-c:         AD671-AFRINIC
org:            ORG-ONdT1-AFRINIC
status:         ALLOCATED PA
mnt-by:         AFRINIC-HM-MNT
mnt-lower:      LIR-BF-ONATEL-MNT
mnt-domains:    LIR-BF-ONATEL-MNT
source:         AFRINIC # Filtered
parent:         41.0.0.0 - 41.255.255.255

organisation:   ORG-ONdT1-AFRINIC
org-name:       ONATEL (Office National des Telecommunications, PTT)
country:        BF
org-type:       LIR
address:
address:        01 BP 10 000
address:        Ouagadougou 01
address:        Burkina Faso
phone:          +226 334001 ext. 476
fax-no:         +226 310331
e-mail:         registry@onatel.bf
admin-c:        JAL5-AFRINIC
admin-c:        LO52-AFRINIC
admin-c:        PO329-AFRINIC
admin-c:        ADB39-AFRINIC
admin-c:        AD671-AFRINIC
mnt-ref:        LIR-BF-ONATEL-MNT
mnt-by:         AFRINIC-HM-MNT
remarks:        data has been transferred from RIPE Whois Database 20050221
source:         AFRINIC # Filtered

person:       Jacques Arsene LOUARI
address:      01 BP 10000 ONATEL Ouaga BF
phone:        +226 33 64 76
fax-no:       +226 31 03 31
e-mail:       jacques.louari@onatel.bf
nic-hdl:      JAL5-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:       Ali Drissa BADIEL
address:      01 BP 10000 ONATEL Ouaga BF
phone:        +226 30 74 14
phone:        +226 20 10 35
fax-no:       +226 30 74 14
e-mail:       badiel@onatel.bf
nic-hdl:      ADB39-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

person:       Adama DIALGA
address:      01 BP 10000 ONATEL Ouaga BF
phone:        +226 30 58 48
phone:        +226 20 10 34
fax-no:       +226 30 74 14
e-mail:       dialga@onatel.bf
nic-hdl:      AD671-AFRINIC
remarks:      data has been transferred from RIPE Whois Database 20050221
source:       AFRINIC # Filtered

Country where crime is law and law is crime.