by buried under 419s
Sat Sep 10, 2011 12:31 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 09 Sep 2011 20:29:48 -0700
Received: from 10ibl21ser04.datacenter.cha.cantv.net ([200.11.173.10])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R2EGI-0006l7-Hv
for ; Fri, 09 Sep 2011 20:29:48 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-06.datacenter.cha.cantv.net (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p8A3S7nT022688;
Fri, 9 Sep 2011 22:58:07 -0430
X-Matched-Lists: []
Received: from 41.191.85.45 ([41.191.85.45]) by webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 9 Sep 2011 22:58:07 -0430 (VET)
Date: Fri, 9 Sep 2011 22:58:07 -0430 (VET)
From: Mr Charles Soludo <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <849462612.440475.1315625287610.JavaMail.gess@webmail-06.datacenter.cha.cantv.net>
Subject: YOUR PAYMENT MTCN 5778611772
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.191.85.45]
X-Spam-Subject: ***SPAM*** YOUR PAYMENT MTCN 5778611772
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My Dearest Friend, My working partner has helped me to send
your first $6500.Usd to you .Here is the information; MTCN: 5778611772 SENDER
NAME FIRST NAME:Joye)SECOND NAME..Nelson. Make sure you track it now; www.westernunion.com
then click tracking and put sender first name and second name then click
check status to see that your money is available for you.So I told him to
keep sending you $6500.Usd daily untill the payment of $5.8 Million Dollars
is completed. [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.10 listed in psbl.surriel.com]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(western_union6[at]hotmail.com
)
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9858]
0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are
non-standard
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
My working partner has helped me to send your first $6500.Usd to you .Here is the information; MTCN: 5778611772 SENDER NAME FIRST NAME:Joye)SECOND NAME..Nelson.
Make sure you track it now; www.westernunion.com then click tracking and put sender first name and second name then click check status to see that your money is available for you.So I told him to keep sending you $6500.Usd daily untill the payment of $5.8 Million Dollars is completed.
Please if there is any problem again you contact the Western Union Office with this informations below:
CONTACT PERSON:Mr. JOHN WHITE
TEL:+229_98_11_52_12
EMAIL:---( [email protected] )
Here is the information they may need from you for more confirmation.
Beneficiarey name-------
Address-----------------
Country----------------
Tel phone--------------
From Central Bank Of Africa
Manager.
Mr Charles Soludo
Envelope-to:
Delivery-date: Fri, 09 Sep 2011 20:29:48 -0700
Received: from 10ibl21ser04.datacenter.cha.cantv.net ([200.11.173.10])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R2EGI-0006l7-Hv
for ; Fri, 09 Sep 2011 20:29:48 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-06.datacenter.cha.cantv.net (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p8A3S7nT022688;
Fri, 9 Sep 2011 22:58:07 -0430
X-Matched-Lists: []
Received: from 41.191.85.45 ([41.191.85.45]) by webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Fri, 9 Sep 2011 22:58:07 -0430 (VET)
Date: Fri, 9 Sep 2011 22:58:07 -0430 (VET)
From: Mr Charles Soludo <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <849462612.440475.1315625287610.JavaMail.gess@webmail-06.datacenter.cha.cantv.net>
Subject: YOUR PAYMENT MTCN 5778611772
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.191.85.45]
X-Spam-Subject: ***SPAM*** YOUR PAYMENT MTCN 5778611772
X-Spam-Status: Yes, score=15.5
X-Spam-Score: 155
X-Spam-Bar: +++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: My Dearest Friend, My working partner has helped me to send
your first $6500.Usd to you .Here is the information; MTCN: 5778611772 SENDER
NAME FIRST NAME:Joye)SECOND NAME..Nelson. Make sure you track it now; www.westernunion.com
then click tracking and put sender first name and second name then click
check status to see that your money is available for you.So I told him to
keep sending you $6500.Usd daily untill the payment of $5.8 Million Dollars
is completed. [...]
Content analysis details: (15.5 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.10 listed in psbl.surriel.com]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(western_union6[at]hotmail.com
)
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9858]
0.0 HTML_NONELEMENT_30_40 BODY: 30% to 40% of HTML elements are
non-standard
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
X-Spam-Flag: YES
My working partner has helped me to send your first $6500.Usd to you .Here is the information; MTCN: 5778611772 SENDER NAME FIRST NAME:Joye)SECOND NAME..Nelson.
Make sure you track it now; www.westernunion.com then click tracking and put sender first name and second name then click check status to see that your money is available for you.So I told him to keep sending you $6500.Usd daily untill the payment of $5.8 Million Dollars is completed.
Please if there is any problem again you contact the Western Union Office with this informations below:
CONTACT PERSON:Mr. JOHN WHITE
TEL:+229_98_11_52_12
EMAIL:---( [email protected] )
Here is the information they may need from you for more confirmation.
Beneficiarey name-------
Address-----------------
Country----------------
Tel phone--------------
From Central Bank Of Africa
Manager.
Mr Charles Soludo
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces