by buried under 419s
Fri May 20, 2011 9:10 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 20 May 2011 08:29:36 -0700
Received: from rs26s4.datacenter.cha.cantv.net ([200.11.173.16])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QNRdu-0004dm-Dw
for ; Fri, 20 May 2011 08:29:36 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-01.datacenter.cha.cantv.net (webmail-01.datacenter.cha.cantv.net [200.11.153.84])
(authenticated bits=0)
by rs26s4.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p4KFS7Fv002637;
Fri, 20 May 2011 10:58:10 -0430
X-Matched-Lists: []
Received: from 41.138.89.39 ([41.138.89.39]) by webmail-01.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 20 May 2011 10:58:07 -0430 (VET)
Date: Fri, 20 May 2011 10:58:07 -0430 (VET)
From: officefile7 <[email protected]>
To: [email protected]
Message-ID: <342283114.237885.1305905290746.JavaMail.gess@webmail-01.datacenter.cha.cantv.net>
Subject: My Dearest Friend
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.138.89.39]
X-Spam-Subject: ***SPAM*** My Dearest Friend
X-Spam-Status: Yes, score=16.4
X-Spam-Score: 164
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My Dearest Friend I am very happy to inform you about my success
in getting that fund transferred, Now I want you to contact my secretary
on the information below: NAME: Frank Ben EMAIL: [email protected]
[...]
Content analysis details: (16.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
1.2 HK_SCAM_N8 BODY: HK_SCAM_N8
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.16 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.138.89.39>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.138.89.39 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5084]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
My Dearest Friend
I am very happy to inform you about my success in getting that fund transferred, Now I want you to contact my secretary on the information below:
NAME: Frank Ben
EMAIL: [email protected]
Ask him to send you the total sum of ($1,950,000.00) One Million Nine Hundred and fifty Thousand usd Cashier's Cheque, which I kept for your compensation contact my secretary on this Email: [email protected] and Also Forward Your Name,Current Address and Your Direct Phone number To him.
Please do let me know immediately you receive it so that we can share the joy after all the sufferies at that time. In the moment,I am very busy here in London because of the investment projects me and my new partners are having at hand.
Yours faithfully.
Mr Robert Williams
Envelope-to:
Delivery-date: Fri, 20 May 2011 08:29:36 -0700
Received: from rs26s4.datacenter.cha.cantv.net ([200.11.173.16])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QNRdu-0004dm-Dw
for ; Fri, 20 May 2011 08:29:36 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-01.datacenter.cha.cantv.net (webmail-01.datacenter.cha.cantv.net [200.11.153.84])
(authenticated bits=0)
by rs26s4.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p4KFS7Fv002637;
Fri, 20 May 2011 10:58:10 -0430
X-Matched-Lists: []
Received: from 41.138.89.39 ([41.138.89.39]) by webmail-01.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 20 May 2011 10:58:07 -0430 (VET)
Date: Fri, 20 May 2011 10:58:07 -0430 (VET)
From: officefile7 <[email protected]>
To: [email protected]
Message-ID: <342283114.237885.1305905290746.JavaMail.gess@webmail-01.datacenter.cha.cantv.net>
Subject: My Dearest Friend
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.138.89.39]
X-Spam-Subject: ***SPAM*** My Dearest Friend
X-Spam-Status: Yes, score=16.4
X-Spam-Score: 164
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My Dearest Friend I am very happy to inform you about my success
in getting that fund transferred, Now I want you to contact my secretary
on the information below: NAME: Frank Ben EMAIL: [email protected]
[...]
Content analysis details: (16.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.2 MILLION_USD BODY: Talks about millions of dollars
1.2 HK_SCAM_N8 BODY: HK_SCAM_N8
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.16 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.138.89.39>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.138.89.39 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5084]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
My Dearest Friend
I am very happy to inform you about my success in getting that fund transferred, Now I want you to contact my secretary on the information below:
NAME: Frank Ben
EMAIL: [email protected]
Ask him to send you the total sum of ($1,950,000.00) One Million Nine Hundred and fifty Thousand usd Cashier's Cheque, which I kept for your compensation contact my secretary on this Email: [email protected] and Also Forward Your Name,Current Address and Your Direct Phone number To him.
Please do let me know immediately you receive it so that we can share the joy after all the sufferies at that time. In the moment,I am very busy here in London because of the investment projects me and my new partners are having at hand.
Yours faithfully.
Mr Robert Williams
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces