by buried under 419s
Mon Sep 19, 2011 3:17 am
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 18 Sep 2011 23:58:41 -0700
Received: from host19.the-web-host.com ([209.239.42.94])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R5XoN-0005Ru-UQ
for ; Sun, 18 Sep 2011 23:58:41 -0700
Received: from localhost.localdomain (localhost [127.0.0.1])
by host19.the-web-host.com (8.14.3/8.12.10) with ESMTP id p8J6ncdW007560;
Mon, 19 Sep 2011 02:49:38 -0400
From: "Western Union Payment" <[email protected]>
Reply-To: [email protected]
Subject: Re: Western Union Payment MTCN to you
Date: Mon, 19 Sep 2011 02:49:38 -0400
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.138.176.38 (marla)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (host19.the-web-host.com [0.0.0.0]); Mon, 19 Sep 2011 02:50:53 -0400 (EDT)
X-Spam-Subject: ***SPAM*** Re: Western Union Payment MTCN to you
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Western Union Payment Office West African Zonal Headquarter
Lagos Nigeria E-mail : [email protected] We have just send the first
US$10,000,00 to you right now due to your inability to receive the total
funds from bank to bank transfer. Down here is the payment information except
Question and answer. You can track the payment online with sender's name
and MTCN on this website below to see the availability of the $10,000.00 .
[...]
Content analysis details: (14.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.9 LOTTO_AGENT BODY: Claims Agent
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paulturner805[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.239.42.94 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paulturner805[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
Western Union Payment Office
West African Zonal Headquarter
Lagos Nigeria
E-mail : [email protected]
We have just send the first US$10,000,00 to you right now due to your
inability to receive the total funds from bank to bank transfer. Down here
is the payment information except Question and answer. You can track the
payment online with sender's name and MTCN on this website below to see the
availability of the $10,000.00 .
Click or copy here and paste:
https://wumt.westernunion.com/asp/order ... try=global
Sender's First Name:...... MASHAYEKHI
Sender's Last Name:....... HOSSEIN
Control-MTCN:........... 4922467329
Amount sent:........ $10,000.00
The total funds on your name here is $600,000.00 .Quickly get back to us to
enable us give you the question and answers so that you can pickup the
available funds .
Sincerely Regards
MR.PAUL TURNER.
Western Union Payment Officer
Envelope-to:
Delivery-date: Sun, 18 Sep 2011 23:58:41 -0700
Received: from host19.the-web-host.com ([209.239.42.94])
by with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1R5XoN-0005Ru-UQ
for ; Sun, 18 Sep 2011 23:58:41 -0700
Received: from localhost.localdomain (localhost [127.0.0.1])
by host19.the-web-host.com (8.14.3/8.12.10) with ESMTP id p8J6ncdW007560;
Mon, 19 Sep 2011 02:49:38 -0400
From: "Western Union Payment" <[email protected]>
Reply-To: [email protected]
Subject: Re: Western Union Payment MTCN to you
Date: Mon, 19 Sep 2011 02:49:38 -0400
Message-Id: <[email protected]>
X-Mailer: OpenWebMail 2.53
X-OriginatingIP: 41.138.176.38 (marla)
MIME-Version: 1.0
Content-Type: text/plain;
charset=iso-8859-1
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-2.0.2 (host19.the-web-host.com [0.0.0.0]); Mon, 19 Sep 2011 02:50:53 -0400 (EDT)
X-Spam-Subject: ***SPAM*** Re: Western Union Payment MTCN to you
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Western Union Payment Office West African Zonal Headquarter
Lagos Nigeria E-mail : [email protected] We have just send the first
US$10,000,00 to you right now due to your inability to receive the total
funds from bank to bank transfer. Down here is the payment information except
Question and answer. You can track the payment online with sender's name
and MTCN on this website below to see the availability of the $10,000.00 .
[...]
Content analysis details: (14.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.9 LOTTO_AGENT BODY: Claims Agent
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(paulturner805[at]gmail.com)
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[209.239.42.94 listed in psbl.surriel.com]
0.8 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
0.1 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (paulturner805[at]gmail.com)
1.0 MISSING_HEADERS Missing To: header
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.4 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 T_TO_NO_BRKTS_FREEMAIL To: misformatted and free email service
X-Spam-Flag: YES
Western Union Payment Office
West African Zonal Headquarter
Lagos Nigeria
E-mail : [email protected]
We have just send the first US$10,000,00 to you right now due to your
inability to receive the total funds from bank to bank transfer. Down here
is the payment information except Question and answer. You can track the
payment online with sender's name and MTCN on this website below to see the
availability of the $10,000.00 .
Click or copy here and paste:
https://wumt.westernunion.com/asp/order ... try=global
Sender's First Name:...... MASHAYEKHI
Sender's Last Name:....... HOSSEIN
Control-MTCN:........... 4922467329
Amount sent:........ $10,000.00
The total funds on your name here is $600,000.00 .Quickly get back to us to
enable us give you the question and answers so that you can pickup the
available funds .
Sincerely Regards
MR.PAUL TURNER.
Western Union Payment Officer
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces