by buried under 419s
Wed Sep 21, 2011 12:14 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 21 Sep 2011 07:31:54 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R6Nq4-0006Ez-60
for ; Wed, 21 Sep 2011 07:31:54 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-06.datacenter.cha.cantv.net (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p8LEVDQB016941;
Wed, 21 Sep 2011 10:01:13 -0430
X-Matched-Lists: []
Received: from 81.91.229.189 ([81.91.229.189]) by webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 21 Sep 2011 10:01:13 -0430 (VET)
Date: Wed, 21 Sep 2011 10:01:13 -0430 (VET)
From: "Mr. Morris Campos." <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <203384238.568254.1316615473851.JavaMail.gess@webmail-06.datacenter.cha.cantv.net>
Subject: CONTACT FEDEX EXPRESS COURIER COMPANY FOR YOUR PACKAGE.
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [81.91.229.189]
X-Spam-Subject: ***SPAM*** CONTACT FEDEX EXPRESS COURIER COMPANY FOR YOUR PACKAGE.
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, This is to bring to your notice that I have been
able to pay the re-activation fee and the delivery of your ATM Card. I paid
it because the ATM Card worth of $2.5m has less than Seven days to expire
and when it expires,the money will lost to the Federal Government treasury
account . [...]
Content analysis details: (13.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.91.229.189>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5977]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
1.6 MONEY_ATM_CARD Lots of money on an ATM card
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.1 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Dear Friend,
This is to bring to your notice that I have been able to pay the re-activation fee and the delivery of your ATM Card.
I paid it because the ATM Card worth of $2.5m has less than Seven days to expire and when it expires,the money will lost = to the Federal Government treasury account .
With that,I d= ecided to help you pay off the money so that the ATM Card will not expire, because I trust that when you receive your ATM Card definitely
you mus= t pay me back my expenditure and even compensate me for helping you.
Now i want you to contact Fedex Express with your physical address and your preffer of the delivery so that they can deliver your Card to your designated address without any delay.
Like i stated earlier, The delivery charges has
been paid but i did not pay their official keeping fees since they refused.
They refused and the reason is that they do not know when you are going to
contact them and the dumurrage might have increased.
They told me that their keeping fees is $25 per day as i made the deposit yesterday,
So you are advised to contact them immediately = to avoid the security keeping charge increase.
Bellow is their C= ontact Informations,
Contact Person: Mr.Mike Koffi. Fedex Express Email:( [email protected] ) TEl: +229
99 399 085 Contact them Today to avo= id increase of their keeping fees and let me know once you receive your car= d.
Best Regards,
Mr. Morris Campos.
Envelope-to:
Delivery-date: Wed, 21 Sep 2011 07:31:54 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1R6Nq4-0006Ez-60
for ; Wed, 21 Sep 2011 07:31:54 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-06.datacenter.cha.cantv.net (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p8LEVDQB016941;
Wed, 21 Sep 2011 10:01:13 -0430
X-Matched-Lists: []
Received: from 81.91.229.189 ([81.91.229.189]) by webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 21 Sep 2011 10:01:13 -0430 (VET)
Date: Wed, 21 Sep 2011 10:01:13 -0430 (VET)
From: "Mr. Morris Campos." <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <203384238.568254.1316615473851.JavaMail.gess@webmail-06.datacenter.cha.cantv.net>
Subject: CONTACT FEDEX EXPRESS COURIER COMPANY FOR YOUR PACKAGE.
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [81.91.229.189]
X-Spam-Subject: ***SPAM*** CONTACT FEDEX EXPRESS COURIER COMPANY FOR YOUR PACKAGE.
X-Spam-Status: Yes, score=13.1
X-Spam-Score: 131
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Friend, This is to bring to your notice that I have been
able to pay the re-activation fee and the delivery of your ATM Card. I paid
it because the ATM Card worth of $2.5m has less than Seven days to expire
and when it expires,the money will lost to the Federal Government treasury
account . [...]
Content analysis details: (13.1 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.11 listed in psbl.surriel.com]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?81.91.229.189>]
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
-0.5 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5977]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS T_HK_NAME_MR_MRS
1.6 MONEY_ATM_CARD Lots of money on an ATM card
0.8 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
1.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
0.1 AWL AWL: From: address is in the auto white-list
X-Spam-Flag: YES
Dear Friend,
This is to bring to your notice that I have been able to pay the re-activation fee and the delivery of your ATM Card.
I paid it because the ATM Card worth of $2.5m has less than Seven days to expire and when it expires,the money will lost = to the Federal Government treasury account .
With that,I d= ecided to help you pay off the money so that the ATM Card will not expire, because I trust that when you receive your ATM Card definitely
you mus= t pay me back my expenditure and even compensate me for helping you.
Now i want you to contact Fedex Express with your physical address and your preffer of the delivery so that they can deliver your Card to your designated address without any delay.
Like i stated earlier, The delivery charges has
been paid but i did not pay their official keeping fees since they refused.
They refused and the reason is that they do not know when you are going to
contact them and the dumurrage might have increased.
They told me that their keeping fees is $25 per day as i made the deposit yesterday,
So you are advised to contact them immediately = to avoid the security keeping charge increase.
Bellow is their C= ontact Informations,
Contact Person: Mr.Mike Koffi. Fedex Express Email:( [email protected] ) TEl: +229
99 399 085 Contact them Today to avo= id increase of their keeping fees and let me know once you receive your car= d.
Best Regards,
Mr. Morris Campos.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces