by buried under 419s
Fri Aug 19, 2011 12:20 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 19 Aug 2011 06:57:11 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QuPZN-0004rn-L8
for ; Fri, 19 Aug 2011 06:57:11 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-03.datacenter.cha.cantv.net (webmail-03.datacenter.cha.cantv.net [200.11.153.86])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p7JDtqmR001639;
Fri, 19 Aug 2011 09:25:52 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-03.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 19 Aug 2011 09:25:52 -0430 (VET)
Date: Fri, 19 Aug 2011 09:25:52 -0430 (VET)
From: Umuikwu Kenneth <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <919782755.186637.1313762152205.JavaMail.gess@webmail-03.datacenter.cha.cantv.net>
Subject: Attention: E-mail owner
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** Attention: E-mail owner
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: E-mail owner We have concluded to effect your payment
via Western Union Money Transfer,$5,000 twice daily until the total sum of
$500,000.00 which we were mandated by the IMF to transfer to you is completely
transferred. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9980]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
-0.3 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
We have concluded to effect your payment via Western Union Money Transfer,$5,000 twice daily until the total sum of $500,000.00 which we were mandated by the IMF to transfer to you is completely transferred.
The International Monetary Fund (IMF) is compensating all the SCAM VICTIMS and your email was found as one of the VICTIMS.
We now needed your information as to where we will be sending the funds, such as; Receivers name (Your full name), address and phone number.
Contact our Customer Care At ( [email protected] ) with your full information.
For enquiry call +22998679345.
Thanks,
Mr. Mark James
Dir. Western Union Money Transfer
mCotonou, Republic of Benin.
Tel/Fax; +22998679345
Envelope-to:
Delivery-date: Fri, 19 Aug 2011 06:57:11 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QuPZN-0004rn-L8
for ; Fri, 19 Aug 2011 06:57:11 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-03.datacenter.cha.cantv.net (webmail-03.datacenter.cha.cantv.net [200.11.153.86])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p7JDtqmR001639;
Fri, 19 Aug 2011 09:25:52 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-03.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 19 Aug 2011 09:25:52 -0430 (VET)
Date: Fri, 19 Aug 2011 09:25:52 -0430 (VET)
From: Umuikwu Kenneth <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <919782755.186637.1313762152205.JavaMail.gess@webmail-03.datacenter.cha.cantv.net>
Subject: Attention: E-mail owner
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** Attention: E-mail owner
X-Spam-Status: Yes, score=14.2
X-Spam-Score: 142
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Attention: E-mail owner We have concluded to effect your payment
via Western Union Money Transfer,$5,000 twice daily until the total sum of
$500,000.00 which we were mandated by the IMF to transfer to you is completely
transferred. [...]
Content analysis details: (14.2 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 0.9980]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
-0.3 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
We have concluded to effect your payment via Western Union Money Transfer,$5,000 twice daily until the total sum of $500,000.00 which we were mandated by the IMF to transfer to you is completely transferred.
The International Monetary Fund (IMF) is compensating all the SCAM VICTIMS and your email was found as one of the VICTIMS.
We now needed your information as to where we will be sending the funds, such as; Receivers name (Your full name), address and phone number.
Contact our Customer Care At ( [email protected] ) with your full information.
For enquiry call +22998679345.
Thanks,
Mr. Mark James
Dir. Western Union Money Transfer
mCotonou, Republic of Benin.
Tel/Fax; +22998679345
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces