[email protected] Mr.Phoenix Mcferrin

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sat, 20 Aug 2011 12:03:57 -0700
Received: from ip242.microuniverso.com.br ([201.45.114.242] helo=microuniverso.share.netsol.com.br)
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1Quqpk-0005Iq-Re
for m; Sat, 20 Aug 2011 12:03:57 -0700
Received: from localhost (localhost [127.0.0.1])
by microuniverso.share.netsol.com.br (Postfix) with ESMTP id 5D18D302E40;
Sat, 20 Aug 2011 15:55:58 -0300 (BRT)
X-Virus-Scanned: amavisd-new at microuniverso.com.br
X-Amavis-Alert: BAD HEADER SECTION, Non-encoded 8-bit data (char AE hex):
Subject: \256 Money
Received: from microuniverso.share.netsol.com.br ([127.0.0.1])
by localhost (microuniverso.share.netsol.com.br [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id nnLSgce4Un9U; Sat, 20 Aug 2011 15:55:58 -0300 (BRT)
Received: from User (unknown [41.203.64.252])
by microuniverso.share.netsol.com.br (Postfix) with ESMTPSA id 02F98302E8F;
Sat, 20 Aug 2011 15:55:30 -0300 (BRT)
Reply-To: <[email protected]>
From: "Western Union"<[email protected]>
Subject: ® Money
Date: Sat, 20 Aug 2011 19:55:55 +0100
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Antivirus: avast! (VPS 110120-0, 01/20/2011), Outbound message
X-Antivirus-Status: Clean
Message-Id: <[email protected]>
To: undisclosed-recipients:;
X-Spam-Subject: ***SPAM*** ® Money
X-Spam-Status: Yes, score=19.5
X-Spam-Score: 195
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I write to inform you that we have transferred USD$400,000
dollars. I called to give you the information through on phone number but
we could not reach you even this morning.So,I decided to email you the information
so that you can start cashing your money in USD5000.00 daily installment
with the same MTCN and sender's name which will be valid for 20 days until
you cash the full $400,000.00usd as it automatically activates for use for
80 days after the first reactivation. [...]
Content analysis details: (19.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.203.64.252>]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.203.64.252 listed in dnsbl.sorbs.net]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[201.45.114.242 listed in psbl.surriel.com]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 SUBJECT_NEEDS_ENCODING SUBJECT_NEEDS_ENCODING
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.6 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE
0.7 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed
1.5 FROM_MISSP_USER From misspaced, from "User"
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES


I write to inform you that we have transferred USD$400,000 dollars.
I called to give you the information through on
phone number but we could not reach you even this
morning.So,I decided to email you the
information so that you can start cashing your
money in USD5000.00 daily installment with the same
MTCN and sender's name which will be valid for
20 days until you cash the full $400,000.00usd
as it automatically activates for use for 80 days
after the first reactivation.

The money is available for pick up which was deposited
for transfer to you by one MR Bernard Harry from
BLACKBERRY MOBILE LOTTERY. The money is available
for pick up by receiver(you) but when you track it, it
will display PICKED UP due to the fact that it has been
deactivated from our head office for security reason
because it has stayed too long in the air as we have been trying
to reach you on the phone for some days now but it was not reachable,
so it was blocked. therefore you can not cash it out
in any western union office due to its restriction
from our head office,which was a security measure
because the money has been in the air for three days
now and maybe in danger, hence the mtcn has to be
reactivated to enable you cash out the money
in any western union office in your area, the
reactivation of the MTCN will cost you a token of $100,
once this is paid, our head office will release the fund on
hold to enable you cash it.To be sure of this please
log on to www.westernunion.com and click on track to
and enter the sender's info and mtcn below.

Sender's Fist name: Jennifer
Sender's Last Name: Pruett
MTCN: 5122879187
Question: Who Is Great
Answer: God
Amount: $5000.00USD
Total Amount To be cashed:$400,000usd

With due respect please get back to me urgently after
tracking the money online so i can instruct you on how
to send the $100 to us for the reactivation of the MTCN.



Thanks
Best Regards
Mr.Phoenix Mcferrin.
western union Office,
NIGERIA OFFICE.
Western Union® Money Transfer