by buried under 419s
Mon Aug 29, 2011 7:22 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 29 Aug 2011 10:09:46 -0700
Received: from 10ibl21ser12.datacenter.cha.cantv.net ([200.11.173.12])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qy5LF-0005xT-GH
for ; Mon, 29 Aug 2011 10:09:46 -0700
X-Virus-Scanned: amavisd-new at cantv.net
X-Spam-Flag: YES
X-Spam-Score: 22.447
X-Spam-Level: **********************
X-Spam-Status: Yes, score=22.447 tagged_above=-9999 required=6.2
tests=[ADVANCE_FEE_2=1.198, ADVANCE_FEE_3=3.505, ADVANCE_FEE_4=0.001,
BAYES_99=3.8, DOS_RCVD_IP_TWICE_C=3.292, HTML_MESSAGE=0.001,
HTML_MIME_NO_HTML_TAG=0.001, MIME_HTML_ONLY=1.199, NA_DOLLARS=3.599,
RDNS_NONE=1.228, TVD_PH_SUBJ_URGENT=2.255, T_HK_NAME_MR_MRS=0.01,
T_LOTS_OF_MONEY=0.01, URG_BIZ=0.568, US_DOLLARS_3=1.78]
autolearn=unavailable
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl21ser12.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p7TH9Hll016692;
Mon, 29 Aug 2011 12:39:18 -0430
X-Matched-Lists: []
Received: from 82.128.87.197 ([82.128.87.197]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 29 Aug 2011 12:39:17 -0430 (VET)
Date: Mon, 29 Aug 2011 12:39:17 -0430 (VET)
From: Mr mark Hills <[email protected]>
To: [email protected]
Message-ID: <1572477272.288716.1314637757953.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: ***SPAM*** Urgent Reply
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [82.128.87.197]
X-Spam-Subject: ***SPAM*** ***SPAM*** Urgent Reply
X-Spam-Status: Yes, score=19.9
X-Spam-Score: 199
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I wish to notify you again that you were listed as a Heir
to the total sum of Five Million US Dollars (US$5,000,000.00) only in the
codicil and last testament of our deceased client. A regular mail was dispatched
to you but yet no reply from you. I am contacting you again because his instruction
stipulates that this fund should be paid directly to you upon his demise
and, besides, both of you share same last name. [...]
Content analysis details: (19.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.12 listed in psbl.surriel.com]
0.6 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[82.128.87.197 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8845]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
I wish to notify you again that you were listed as a Heir to the total sum of Five Million US Dollars (US$5,000,000.00) only in the codicil and last
testament of our deceased client. A regular mail was dispatched to you but yet no reply from you. I am contacting you again because his instruction
stipulates that this fund should be paid directly to you upon his demise and, besides, both of you share same last name.
I request you to kindly acknowledge officially, enabling us file all necessary legal documents to the paying bank for the urgent release of
your inheritance. Please send an acknowledgment email and to enable us process your inheritance.I shall furnish you with details upon response.
Contact Email; [email protected]
Yours Truly,
Contact Email; [email protected]
Miracle Eze Esq.
Envelope-to:
Delivery-date: Mon, 29 Aug 2011 10:09:46 -0700
Received: from 10ibl21ser12.datacenter.cha.cantv.net ([200.11.173.12])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Qy5LF-0005xT-GH
for ; Mon, 29 Aug 2011 10:09:46 -0700
X-Virus-Scanned: amavisd-new at cantv.net
X-Spam-Flag: YES
X-Spam-Score: 22.447
X-Spam-Level: **********************
X-Spam-Status: Yes, score=22.447 tagged_above=-9999 required=6.2
tests=[ADVANCE_FEE_2=1.198, ADVANCE_FEE_3=3.505, ADVANCE_FEE_4=0.001,
BAYES_99=3.8, DOS_RCVD_IP_TWICE_C=3.292, HTML_MESSAGE=0.001,
HTML_MIME_NO_HTML_TAG=0.001, MIME_HTML_ONLY=1.199, NA_DOLLARS=3.599,
RDNS_NONE=1.228, TVD_PH_SUBJ_URGENT=2.255, T_HK_NAME_MR_MRS=0.01,
T_LOTS_OF_MONEY=0.01, URG_BIZ=0.568, US_DOLLARS_3=1.78]
autolearn=unavailable
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl21ser12.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p7TH9Hll016692;
Mon, 29 Aug 2011 12:39:18 -0430
X-Matched-Lists: []
Received: from 82.128.87.197 ([82.128.87.197]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 29 Aug 2011 12:39:17 -0430 (VET)
Date: Mon, 29 Aug 2011 12:39:17 -0430 (VET)
From: Mr mark Hills <[email protected]>
To: [email protected]
Message-ID: <1572477272.288716.1314637757953.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
Subject: ***SPAM*** Urgent Reply
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [82.128.87.197]
X-Spam-Subject: ***SPAM*** ***SPAM*** Urgent Reply
X-Spam-Status: Yes, score=19.9
X-Spam-Score: 199
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system ", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: I wish to notify you again that you were listed as a Heir
to the total sum of Five Million US Dollars (US$5,000,000.00) only in the
codicil and last testament of our deceased client. A regular mail was dispatched
to you but yet no reply from you. I am contacting you again because his instruction
stipulates that this fund should be paid directly to you upon his demise
and, besides, both of you share same last name. [...]
Content analysis details: (19.9 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.12 listed in psbl.surriel.com]
0.6 URG_BIZ BODY: Contains urgent matter
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[82.128.87.197 listed in dnsbl.sorbs.net]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.8 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
2.0 BAYES_80 BODY: Bayes spam probability is 80 to 95%
[score: 0.8845]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
2.4 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
1.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
I wish to notify you again that you were listed as a Heir to the total sum of Five Million US Dollars (US$5,000,000.00) only in the codicil and last
testament of our deceased client. A regular mail was dispatched to you but yet no reply from you. I am contacting you again because his instruction
stipulates that this fund should be paid directly to you upon his demise and, besides, both of you share same last name.
I request you to kindly acknowledge officially, enabling us file all necessary legal documents to the paying bank for the urgent release of
your inheritance. Please send an acknowledgment email and to enable us process your inheritance.I shall furnish you with details upon response.
Contact Email; [email protected]
Yours Truly,
Contact Email; [email protected]
Miracle Eze Esq.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces