by buried under 419s
Mon Sep 12, 2011 10:11 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 12 Sep 2011 02:00:07 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R32Mz-0005Q0-Ob
for ; Mon, 12 Sep 2011 02:00:07 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-03.datacenter.cha.cantv.net (webmail-03.datacenter.cha.cantv.net [200.11.153.86])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p8C8wsZG002475;
Mon, 12 Sep 2011 04:28:54 -0430
X-Matched-Lists: []
Received: from 81.91.229.189 ([81.91.229.189]) by webmail-03.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 12 Sep 2011 04:28:54 -0430 (VET)
Date: Mon, 12 Sep 2011 04:28:54 -0430 (VET)
From: sabaniyaya12 <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <139643727.430829.1315817934284.JavaMail.gess@webmail-03.datacenter.cha.cantv.net>
Subject: Welcome to Western Union
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [81.91.229.189]
X-Spam-Subject: ***SPAM*** Welcome to Western Union
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER. COTONOU BENIN
REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA ROAD LAGOTES PALAR WEB SITE. www..westernunion.com
[email protected] Dear:Benefical, Information reaching us from our
corporate headquarters now, states that you only have 24hours to effect payment
for the activation of your MTCN to enable you cash up your first $5,000:00USD
from your total (fund) So go ahead and pay $105USD for the activation fee
earlier required sum, time is of the essence here. You are to pay $105USD
for the activation fee; we will activate your MTCN upon receipt of this payment.
[...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_FRT_PAYMENT BODY: ReplaceTags: Payment
2.5 URI_OBFU_WWW BODY: Obfuscated URI
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9582]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER.
COTONOU BENIN REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA ROAD
LAGOTES PALAR WEB SITE. www..westernunion.com
[email protected]
Dear:Benefical,
Information reaching us from our corporate headquarters now, states that you
only have 24hours to effect payment for the activation of your MTCN to enable
you cash up your first $5,000:00USD from your total (fund) So go ahead and pay
$105USD for the activation fee earlier required sum, time is of the
essence here.
You are to pay $105USD for the activation fee; we will activate your MTCN upon
receipt of this payment.
This is the Available for pick up by receiver BELOW.
Test question: Honest
Test answer: Trust
Amount: $5,000
MTCN: 9210819947
AFTER YOU HAVE PAY THE UPFRONT PAYMENT OF $75USD FOR THE ACTIVATION FEES.
BELOW HERE IS THE INFORMATION YOU MAY USE TO SEND US THE REQUIRED FEES OF
$105USD VIA WESTERN UNION :
Be Noted That The Fee Of $105usd is upfront Payment not Deductible
from your funds.
It is pertinent to note that this payment is highly negotiable so do
try to make the payment via western union money transfer with this
name stated below
RECEIVER NAME: EMEKA MICHEAL.
CITY: COTONOU
COUNTRY: BENIN REPUBLIC
COUNTRY CODE:00229
QUESTION: COLOR
ANSWER: GREEN,
AMOUNT :$105USD ONLY .
Send us the MTCN number immediately you have send the money and immediately we
confirm the transfer fee we will send you the first receipt of your
$5,000:00USD today and not tomorrow.
Finaly,do send us with western union payment slip information as soon
as you have make the paymernt of $105usd such as Sender
details and mtcn number.
DO RE-SEND ME WITH YOUR
TAKE NOTE: DO RESEND US WITH YOUR FULL NAMES AND HOME ADDRESS,CITY AND COUNTRY WITH YOUR DIRECT PHONE NUMBER,AGE AND STATUS .TO AVOID WRONGLY PAYMENT !!!!!
REGARDS.
MR.LUCKY MARK
TEL: +229-99-81-42-91
REPLY ME BACK : [email protected]
Envelope-to:
Delivery-date: Mon, 12 Sep 2011 02:00:07 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R32Mz-0005Q0-Ob
for ; Mon, 12 Sep 2011 02:00:07 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-03.datacenter.cha.cantv.net (webmail-03.datacenter.cha.cantv.net [200.11.153.86])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p8C8wsZG002475;
Mon, 12 Sep 2011 04:28:54 -0430
X-Matched-Lists: []
Received: from 81.91.229.189 ([81.91.229.189]) by webmail-03.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 12 Sep 2011 04:28:54 -0430 (VET)
Date: Mon, 12 Sep 2011 04:28:54 -0430 (VET)
From: sabaniyaya12 <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <139643727.430829.1315817934284.JavaMail.gess@webmail-03.datacenter.cha.cantv.net>
Subject: Welcome to Western Union
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [81.91.229.189]
X-Spam-Subject: ***SPAM*** Welcome to Western Union
X-Spam-Status: Yes, score=14.6
X-Spam-Score: 146
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER. COTONOU BENIN
REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA ROAD LAGOTES PALAR WEB SITE. www..westernunion.com
[email protected] Dear:Benefical, Information reaching us from our
corporate headquarters now, states that you only have 24hours to effect payment
for the activation of your MTCN to enable you cash up your first $5,000:00USD
from your total (fund) So go ahead and pay $105USD for the activation fee
earlier required sum, time is of the essence here. You are to pay $105USD
for the activation fee; we will activate your MTCN upon receipt of this payment.
[...]
Content analysis details: (14.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_RANDOM_ENVFROM Envelope sender username looks random
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_FRT_PAYMENT BODY: ReplaceTags: Payment
2.5 URI_OBFU_WWW BODY: Obfuscated URI
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 BAYES_95 BODY: Bayes spam probability is 95 to 99%
[score: 0.9582]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
FROM OFFICE OF THE WESTERN UNION MONEY TRANSFER.
COTONOU BENIN REPUBLIC/ADDRESS 455 AGBOKOU,ANKPA ROAD
LAGOTES PALAR WEB SITE. www..westernunion.com
[email protected]
Dear:Benefical,
Information reaching us from our corporate headquarters now, states that you
only have 24hours to effect payment for the activation of your MTCN to enable
you cash up your first $5,000:00USD from your total (fund) So go ahead and pay
$105USD for the activation fee earlier required sum, time is of the
essence here.
You are to pay $105USD for the activation fee; we will activate your MTCN upon
receipt of this payment.
This is the Available for pick up by receiver BELOW.
Test question: Honest
Test answer: Trust
Amount: $5,000
MTCN: 9210819947
AFTER YOU HAVE PAY THE UPFRONT PAYMENT OF $75USD FOR THE ACTIVATION FEES.
BELOW HERE IS THE INFORMATION YOU MAY USE TO SEND US THE REQUIRED FEES OF
$105USD VIA WESTERN UNION :
Be Noted That The Fee Of $105usd is upfront Payment not Deductible
from your funds.
It is pertinent to note that this payment is highly negotiable so do
try to make the payment via western union money transfer with this
name stated below
RECEIVER NAME: EMEKA MICHEAL.
CITY: COTONOU
COUNTRY: BENIN REPUBLIC
COUNTRY CODE:00229
QUESTION: COLOR
ANSWER: GREEN,
AMOUNT :$105USD ONLY .
Send us the MTCN number immediately you have send the money and immediately we
confirm the transfer fee we will send you the first receipt of your
$5,000:00USD today and not tomorrow.
Finaly,do send us with western union payment slip information as soon
as you have make the paymernt of $105usd such as Sender
details and mtcn number.
DO RE-SEND ME WITH YOUR
TAKE NOTE: DO RESEND US WITH YOUR FULL NAMES AND HOME ADDRESS,CITY AND COUNTRY WITH YOUR DIRECT PHONE NUMBER,AGE AND STATUS .TO AVOID WRONGLY PAYMENT !!!!!
REGARDS.
MR.LUCKY MARK
TEL: +229-99-81-42-91
REPLY ME BACK : [email protected]
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces