by buried under 419s
Thu Jul 14, 2011 3:08 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 13 Jul 2011 21:21:32 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by m with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QhDQX-00042K-PE
for \; Wed, 13 Jul 2011 21:21:32 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p6E4L05I001898;
Wed, 13 Jul 2011 23:51:00 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 13 Jul 2011 23:51:00 -0430 (VET)
Date: Wed, 13 Jul 2011 23:51:00 -0430 (VET)
From: "I.M.F BENIN BRANCH" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <2093364061.865210.1310617260700.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: =?UTF-8?B?Q09OVEFDVCBUSEUgTU9ORVkgR1JBTSBESVJFQ1RPUiBHRU5FUg==?=
=?UTF-8?B?QUwgVE8gUkVDRUlWRSBZT1VSIEZVTkQgSU1NRURJQVRFTFkhIeKAjw==?=
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** CONTACT THE MONEY GRAM DIRECTOR GENERAL TO RECEIVE YOUR FUND IMMEDIATELY!!â€Â
X-Spam-Status: Yes, score=15.7
X-Spam-Score: 157
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION BENEFICIARY, WE THE INTERNATIONAL MONETARY FUND
(IMF) HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $1.500,000,00 USD THROUGH
MONEY GRAM, YOU WILL BE RECEIVING 4,500.00USD PER DAY. NOW WE HAVE SEND THE
FIRST PAYMENT TO YOU. SO CONTACT OUR DIRECTOR DR.FAVOUR UCHE AND ASK HIM
TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO
PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM. [...]
Content analysis details: (15.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
-5.7 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
ATTENTION BENEFICIARY,
WE THE INTERNATIONAL MONETARY FUND (IMF) HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $1.500,000,00 USD THROUGH MONEY GRAM, YOU WILL BE RECEIVING 4,500.00USD PER DAY.
NOW WE HAVE SEND THE FIRST PAYMENT TO YOU. SO CONTACT OUR DIRECTOR DR.FAVOUR UCHE AND ASK HIM TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM.
HERE IS THE CONTACT INFORMATION OF MONEY GRAM
DIRECTOR GENERAL DR. FAVOUR UCHE
EMAIL ADDRESS ( [email protected] )
PHONE NUMBER :+229-9786-1084
CONTACT HIM WITH YOUR FULL INFORMATION TO GIVE YOU THE REFERENCE NUMBER TO COLLECT YOUR $4,500 USD.YOUR NAME:AGE/SEX / CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS FAST AS POSSIBLE.
THANKS AND GOD BLESSING YOU.
CHARLES TOLIVER
Envelope-to:
Delivery-date: Wed, 13 Jul 2011 21:21:32 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by m with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QhDQX-00042K-PE
for \; Wed, 13 Jul 2011 21:21:32 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p6E4L05I001898;
Wed, 13 Jul 2011 23:51:00 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 13 Jul 2011 23:51:00 -0430 (VET)
Date: Wed, 13 Jul 2011 23:51:00 -0430 (VET)
From: "I.M.F BENIN BRANCH" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <2093364061.865210.1310617260700.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: =?UTF-8?B?Q09OVEFDVCBUSEUgTU9ORVkgR1JBTSBESVJFQ1RPUiBHRU5FUg==?=
=?UTF-8?B?QUwgVE8gUkVDRUlWRSBZT1VSIEZVTkQgSU1NRURJQVRFTFkhIeKAjw==?=
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** CONTACT THE MONEY GRAM DIRECTOR GENERAL TO RECEIVE YOUR FUND IMMEDIATELY!!â€Â
X-Spam-Status: Yes, score=15.7
X-Spam-Score: 157
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: ATTENTION BENEFICIARY, WE THE INTERNATIONAL MONETARY FUND
(IMF) HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $1.500,000,00 USD THROUGH
MONEY GRAM, YOU WILL BE RECEIVING 4,500.00USD PER DAY. NOW WE HAVE SEND THE
FIRST PAYMENT TO YOU. SO CONTACT OUR DIRECTOR DR.FAVOUR UCHE AND ASK HIM
TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO
PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM. [...]
Content analysis details: (15.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.3 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
-5.7 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
ATTENTION BENEFICIARY,
WE THE INTERNATIONAL MONETARY FUND (IMF) HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $1.500,000,00 USD THROUGH MONEY GRAM, YOU WILL BE RECEIVING 4,500.00USD PER DAY.
NOW WE HAVE SEND THE FIRST PAYMENT TO YOU. SO CONTACT OUR DIRECTOR DR.FAVOUR UCHE AND ASK HIM TO GIVE YOU THE MONEY GRAM PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK UP YOUR FUNDS THROUGH MONEY GRAM WITHOUT ANY PROBLEM.
HERE IS THE CONTACT INFORMATION OF MONEY GRAM
DIRECTOR GENERAL DR. FAVOUR UCHE
EMAIL ADDRESS ( [email protected] )
PHONE NUMBER :+229-9786-1084
CONTACT HIM WITH YOUR FULL INFORMATION TO GIVE YOU THE REFERENCE NUMBER TO COLLECT YOUR $4,500 USD.YOUR NAME:AGE/SEX / CALL OR EMAIL HIM NOW SO THAT HE CAN PROVIDE THE MONEY GRAM INFORMATION TO YOU AS FAST AS POSSIBLE.
THANKS AND GOD BLESSING YOU.
CHARLES TOLIVER
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces