by buried under 419s
Sun Aug 14, 2011 8:35 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 14 Aug 2011 04:41:37 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QsZ4S-00071k-2r
For ; Sun, 14 Aug 2011 04:41:37 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-01.datacenter.cha.cantv.net (webmail-01.datacenter.cha.cantv.net [200.11.153.84])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p7EBf5Xw021959;
Sun, 14 Aug 2011 07:11:05 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-01.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Sun, 14 Aug 2011 07:11:05 -0430 (VET)
Date: Sun, 14 Aug 2011 07:11:05 -0430 (VET)
From: Umuikwu Kenneth <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <2131640255.123274.1313322065739.JavaMail.gess@webmail-01.datacenter.cha.cantv.net>
Subject: Attention: E-mail owner
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** Attention: E-mail owner
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "“has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: E-mail owner We have concluded to effect your payment
via Western Union Money Transfer,$5,000 twice daily until the total sum of
$500,000.00 which we were mandated by the IMF to transfer to you is completely
transferred. The International Monetary Fund (IMF) is compensating all the
SCAM VICTIMS and your email was found as one of the VICTIMS. We now needed
your information as to where we will be sending the funds, such as; Receivers
name (Your full name), address and phone number. Contact our Customer Care
At ( [email protected] ) with your full information.
For enquiry call +22998789205. Thanks, Mr. Mark James Dir. Western Union
Money Transfer mCotonou, Republic of Benin. Tel/Fax; +22998789205. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.222.192.87>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6478]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Attention: E-mail owner
We have concluded to effect your payment via Western Union Money Transfer,$5,000 twice daily until the total sum of $500,000.00 which we were mandated by the IMF to transfer to you is completely transferred.
The International Monetary Fund (IMF) is compensating all the SCAM VICTIMS and your email was found as one of the VICTIMS.
We now needed your information as to where we will be sending the funds, such as; Receivers name (Your full name), address and phone number
Contact our Customer Care At ( [email protected] ) with your full information. For enquiry call +22998789205.
Thanks,
Mr. Mark James<
Dir. Western Union Money Transfer
mCotonou, Republic of Benin.
Tel/Fax; +22998789205.
Envelope-to:
Delivery-date: Sun, 14 Aug 2011 04:41:37 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QsZ4S-00071k-2r
For ; Sun, 14 Aug 2011 04:41:37 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-01.datacenter.cha.cantv.net (webmail-01.datacenter.cha.cantv.net [200.11.153.84])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p7EBf5Xw021959;
Sun, 14 Aug 2011 07:11:05 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-01.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Sun, 14 Aug 2011 07:11:05 -0430 (VET)
Date: Sun, 14 Aug 2011 07:11:05 -0430 (VET)
From: Umuikwu Kenneth <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <2131640255.123274.1313322065739.JavaMail.gess@webmail-01.datacenter.cha.cantv.net>
Subject: Attention: E-mail owner
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** Attention: E-mail owner
X-Spam-Status: Yes, score=13.9
X-Spam-Score: 139
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "“has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: E-mail owner We have concluded to effect your payment
via Western Union Money Transfer,$5,000 twice daily until the total sum of
$500,000.00 which we were mandated by the IMF to transfer to you is completely
transferred. The International Monetary Fund (IMF) is compensating all the
SCAM VICTIMS and your email was found as one of the VICTIMS. We now needed
your information as to where we will be sending the funds, such as; Receivers
name (Your full name), address and phone number. Contact our Customer Care
At ( [email protected] ) with your full information.
For enquiry call +22998789205. Thanks, Mr. Mark James Dir. Western Union
Money Transfer mCotonou, Republic of Benin. Tel/Fax; +22998789205. [...]
Content analysis details: (13.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.222.192.87>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6478]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
X-Spam-Flag: YES
Attention: E-mail owner
We have concluded to effect your payment via Western Union Money Transfer,$5,000 twice daily until the total sum of $500,000.00 which we were mandated by the IMF to transfer to you is completely transferred.
The International Monetary Fund (IMF) is compensating all the SCAM VICTIMS and your email was found as one of the VICTIMS.
We now needed your information as to where we will be sending the funds, such as; Receivers name (Your full name), address and phone number
Contact our Customer Care At ( [email protected] ) with your full information. For enquiry call +22998789205.
Thanks,
Mr. Mark James<
Dir. Western Union Money Transfer
mCotonou, Republic of Benin.
Tel/Fax; +22998789205.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces