this 419 scam was sent to net test address nts-ucdbzbbd04d06r14@munged.ext
which decodes to 213.42.2.24	2004-04-06 18:14

May  4 11:38:50 www sendmail[10355]: i44FcmA10355: from=<john_ros2003@yahoo.com>, size=3886, class=0, nrcpts=1, msgid=<200405041538.i44FcmA10355@www.munged.ext>, proto=SMTP, daemon=MTA, relay=de12027.alshamil.net.ae [217.165.80.249] (may be forged)
May  4 11:38:52 www sendmail[10356]: i44FcmA10355: ctladdr=<nts-ucdbzbbd04d06r14@munged.ext> (8/0), delay=00:00:03, xdelay=00:00:02, mailer=prog, pri=33590, dsn=2.0.0, stat=Sent

[06/Apr/2004:00:39:42 -0400] ts 213.42.2.24 "GET /stupid/dispplain/snagster.com_0003 HTTP/1.1" 200 9399 http://www.munged.ext/stupid/disptext/snagster.com_0003
[06/Apr/2004:00:40:45 -0400] ts 213.42.2.24 "GET /stupid/dispplain/snagster.com_0006 HTTP/1.1" 200 8268 http://www.munged.ext/stupid/disptext/snagster.com_0006
[06/Apr/2004:00:50:17 -0400] ts 213.42.2.24 "GET /stupid/dispplain/snagster.com_0006 HTTP/1.1" 200 8274 -
[06/Apr/2004:01:00:15 -0400] ts 213.42.2.24 "GET /stupid/dispplain/snagster.com_0006 HTTP/1.1" 200 8293 -
[06/Apr/2004:18:14:46 -0400] ts 213.42.2.24 "GET /extensions.text HTTP/1.1" 200 546 http://www.munged.ext/
[06/Apr/2004:18:14:46 -0400] ts 213.42.2.24 "GET /nettest/ HTTP/1.1" 200 8554 http://www.munged.ext/
[06/Apr/2004:18:14:50 -0400] cw 213.42.2.24 "GET / HTTP/1.1" 200 6424 http://www.munged.ext/
[06/Apr/2004:18:14:58 -0400] ts 213.42.2.24 "GET /donate HTTP/1.1" 200 3299 http://www.munged.ext/
[06/Apr/2004:18:16:10 -0400] ts 213.42.2.24 "GET /spambots/disptext/211.75.91.19_0001 HTTP/1.1" 200 11999 http://www.munged.ext/spambots/
[06/Apr/2004:18:16:19 -0400] ts 213.42.2.24 "GET /spambots/disptext/65.93.221.4_0001 HTTP/1.1" 200 6164 http://www.munged.ext/spambots/
[06/Apr/2004:18:16:28 -0400] ts 213.42.2.24 "GET /spambots/disptext/adsl-154-2-46.asm.bellsouth.net_0001 HTTP/1.1" 200 4597 http://www.munged.ext/spambots/

inetnum:      213.42.2.0 - 213.42.2.255
netname:      EMIRNET-EMIRNET
descr:        Emirates Internet
descr:        Public Internet Service
descr:        Emirates Telecommunications Corporation
descr:        P.O. Box 1150, Dubai, UAE
country:      AE
remarks:      For any kind of abuse orignating from our network please
remarks:      email abuse@emirates.net.ae
admin-c:      AH1223-RIPE
tech-c:       SMA3-RIPE
tech-c:       SAS88-RIPE
status:       ASSIGNED PA
mnt-by:       ETISALAT-MNT
changed:      sultan@uaenic.ae 20030617
changed:      lir@nic.ae 20040325
source:       RIPE

route:        213.42.0.0/22
descr:        Emirates Telecommunications Corporation
descr:        P.O. Box 1150, Dubai, UAE
origin:       AS5384
remarks:      For any kind of abuse orignating from our network please
remarks:      email abuse@emirates.net.ae
mnt-by:       ETISALAT-MNT
changed:      noc@emix.net.ae 20030630
changed:      lir@nic.ae 20040325
source:       RIPE

person:       Abdulla Hashim
address:      Emirates Telecommunication Corporation
address:      P.O. Box 1150, Dubai, UAE
phone:        +971 4 2025510
fax-no:       +971 4 2948300
e-mail:       lir@nic.ae
remarks:      For any kind of abuse orignating from our network please
remarks:      email abuse@emirates.net.ae
nic-hdl:      AH1223-RIPE
mnt-by:       ETISALAT-MNT
changed:      fareedak@emirates.net.ae 19981026
changed:      sultan@uaenic.ae 20010428
changed:      sultan@uaenic.ae 20020714
changed:      lir@nic.ae 20040325
source:       RIPE

person:       Saleem Mohd Albalooshi
address:      Emirates Telecommunications Corporation.
address:      P.O. Box 1150, Dubai, UAE
phone:        +971 4 2022959
fax-no:       +971 4 2228884
e-mail:       lir@nic.ae
remarks:      For any kind of abuse orignating from our network please
remarks:      email abuse@emirates.net.ae
nic-hdl:      SMA3-RIPE
mnt-by:       ETISALAT-MNT
changed:      fareedak@emirates.net.ae 19981027
changed:      sultan@uaenic.ae 20020714
changed:      lir@nic.ae 20040325
source:       RIPE

person:       Sultan Al Shamsi
address:      Emirates Telecommunications Corporation
address:      P O Box 1150, Dubai, UAE
phone:        +971 4 2025510
fax-no:       +971 4 2948300
e-mail:       lir@nic.ae
remarks:      For any kind of abuse orignating from our network please
remarks:      email abuse@emirates.net.ae
nic-hdl:      SAS88-RIPE
mnt-by:       ETISALAT-MNT
changed:      sultan@uaenic.ae 20010417
changed:      sultan@uaenic.ae 20020714
changed:      sultan@nic.ae 20031212
changed:      lir@nic.ae 20040325
source:       RIPE

This sender has requested network testing services with the following email:

------------------------------------------------------------

Return-path: john_ros2003@yahoo.com Tue May 4 11:38:50 2004 [2004-05-04 11:38:50 72454]
Received: from helimore950.com (de12027.alshamil.net.ae [217.165.80.249] (may be forged))
   by www.munged.ext (8.11.6/8.11.6) with SMTP id i44FcmA10355
   for <nts-ucdbzbbd04d06r14@munged.ext>; Tue, 4 May 2004 11:38:49 -0400
Message-Id: <200405041538.i44FcmA10355@www.munged.ext>
From: "JOHN .ROR" <john_ros2003@yahoo.com>
Reply-To: rosevette@zz6.com
Date: Tue, 4 May 2004 19:39:37 +0400
Subject: Urgent Assistant
X-Mailer: Microsoft Outlook Express 5.00.2919.6900 DM
X-spamfilt: Chienworks* SpamFilt - 2004-05-04 11:38:50 - [72454]
X-spamfilt: s-/s - 1 - urgent
X-spamfilt: bay hits: +0 -1
X-spamfilt: bay head: +4.9 -5.8
X-spamfilt: bay body: +185.3 -436.3
X-spamfilt: bay html: + -
X-spamfilt: bay index: 0.699662098149435
X-spamfilt: #0 +0 -1 =0

Dear, with every hope that my letter to you wouldn't take you totally unawares. I got your contact through a business magazine and your very name reflects to me that you are someone to be trusted. For this very reason I will hold you in trust and confidence. My name is John Rosevette, the former director [financial control] Of the Central Bank of Liberia. In the month of July 2001, I started to receive threats, false allegations and counter accusations from the government of Liberia under President Charles Taylor. Subsequently the Anti-Corruption Commission (ACC) headed by Col. Val Mitu put phony corruption charges on me and an arrest warrant was put on me. I am a man of affluence, no doubt about that. I have acquired enormous wealth, no doubt about that; but my wealth was not acquired illegally neither have I solicited or accepted an illegal advantage as falsely accused by the Anti-Corruption Commissioner. President Taylor did all these injustices to me in other to silence a nd bring my reputation to zero because he has seen me as an obstacle or impediment to his continuous stay in power. Also President Taylor only wants to eliminate me as I have taken side with his opponents [rebels]. As fate would have it, I was fortunate to escape from Liberia and now I am a refugee in Sierra Leone. In the course of my departure from my country, I arrived Freetown safely with members of my immediate family. I also have with me some reasonable quality of precious mineral and cash amount of about $20.5m Million US Dollars) encased in a sealed metal iron box, which for safety measures I have deposited in a reputable private security company, I declared that the contents are precious family valuables in other not raise suspicion. I now solicit for your partnership / assistance to transfer these funds to your country for onward investment. I will furnish you with further details [including my private consultant in Dubai, United Arab Emirates] after receiv
ing your response. Take everything confidential. Note. You wouldn't involve your personal money in the course of the transaction.for the interest of this business you can contact my consultant in dubai mr godwin madu with his email godwin_995@hotmail.com <compose.pl?send_to=godwin_995%40hotmail.com> or call him on 0097150 6871021 God bless you. Mr. J. Rosevette John: I do not know how you reached to the position of Director of Financial control at Central Bank Of Liberia. No wonder Liberia is in financial trouble. Since you are a man of affluence without any doubts of course, you have 20.5 mil in a sealed metal iron box, you are out of your country fortunately and you have a consultant in Dubai, what is stopping you from contacting the nearest bank and making a deposit of the loot? You do not need any partnership or assitance to achieve what you ask. Obviously your consultant can not help you. So what does he do as a consultant? Unfortunately for you your amount is too low for my standards. Small amounts do not interest me. It is too much trouble for a small amount. In fact typing this is also too much trouble for me but today, I am in good mood, so I am replying you. Otherwise I would have just deleted email offers with such small amount. Hope next time you run from your country, you will have a bigger loot to share. Sincerely, You know my name... since my very name reflected to you that I am someone to be trusted.