by buried under 419s
Wed Jul 17, 2013 7:27 pm
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Wed, 17 Jul 2013 14:50:13 -0700
Received: from 10ibl21ser04.datacenter.cha.cantv.net ([200.11.173.10]:38629)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UzZbs-0007PD-RP
for ; Wed, 17 Jul 2013 14:50:13 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id r6HLnleC012409;
Wed, 17 Jul 2013 17:19:47 -0430
X-Matched-Lists: []
Received: from 41.85.161.126 ([41.85.161.126]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 17 Jul 2013 17:19:47 -0430 (VET)
Date: Wed, 17 Jul 2013 17:19:47 -0430 (VET)
From: "Mr.John Zikuo" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <981419273.3045950.1374097787842.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [41.85.161.126]
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: WESTERN UNION HEAD OFFICE BENIN REPUBLIC COTONOU Mr.John Zikuo.
TEL: +229 99356570 EMAIL: ([email protected]) Attn;Beneficiary,
Information reaching us from our corporate headquarters now, states that
you only have 72hours to effect payment for the activation of your MTCN to
enable you cash up your first $4,000.00 from your total (fund) since you
are finding it difficult to make this payment we have decided that you are
to go ahead and pay whatever you have from $39 USD above for the activation
fee since you are not able to come up with the required sum, time is of the
essence here. [...]
Content analysis details: (13.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.11.173.10 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.126 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.126>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.85.161.126 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(w.u.m.transfer1010[at]live.com
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
4.0 MONEY_FROM_41 Lots of money from Africa
X-Spam-Flag: YES
Subject: ***SPAM*** Attn;Beneficiary,
WESTERN UNION HEAD OFFICE
BENIN REPUBLIC COTONOU
Mr.John Zikuo.
TEL: +229 99356570
EMAIL: ([email protected])
Attn;Beneficiary,
Information reaching us from our corporate headquarters now, states that you only have 72hours to effect payment for the activation of your MTCN to enable you cash up your first $4,000.00 from your total (fund) since you are finding it difficult to make this payment we have decided that you are to go ahead and pay whatever you have from $39 USD above for the activation fee since you are not able to come up with the required sum, time is of the essence here.
You are to pay what ever you have from $39 USD above for the activation fee we will activate your MTCN upon receipt of this payment.here is the payment for the $4,000 usd but you can not pick it up because the chairman of the western union say that before you pick that money you must pay the any amount you have from $39USD above OK
Hear is the payment information that we send you today,
MTCN #----------- 324-093-4179(pending)
SENDERS FIRST NAME.....ELAINE
SECOND NAME..............SLOUGH
AMOUNT...................$4,000
TEST QUESTION:.......HOW LONG?
ANSWER: ...........24HOURS
Be informed that you will have to pay the balance sum of your activation upon cashing up of your first 4,000.00 usd, also i am using this medium to inform you that failure to pay the balance sum will leave us with no option but to deactivate your mtcn of which you will and can never cash up the balance sum i want you to send the renewing and transfer fee with the information bellow.
1.Receiver name:...Micheal Edochie Emeka.
2.Country:.........Benin Republic.
3.City :...........Cotonou
4.Test question:....In God
5.Test answer:.....We Trust
6.Amount you sent.....
Sender Name.......
Send us the mtcn number immediately you send the money and immediately we
confirm the transfer fee we will send you the first receipt of your $4,000
today and not tomorrow.
Mr.John Zikuo.
TEL: +229 99356570
EMAIL: ( [email protected] )
WESTERN UNION HEAD OFFICE BENIN REPUBLIC COTONOU
Envelope-to:
Delivery-date: Wed, 17 Jul 2013 14:50:13 -0700
Received: from 10ibl21ser04.datacenter.cha.cantv.net ([200.11.173.10]:38629)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1UzZbs-0007PD-RP
for ; Wed, 17 Jul 2013 14:50:13 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-05.datacenter.cha.cantv.net (webmail-05.datacenter.cha.cantv.net [200.11.153.88])
(authenticated bits=0)
by 10ibl21ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id r6HLnleC012409;
Wed, 17 Jul 2013 17:19:47 -0430
X-Matched-Lists: []
Received: from 41.85.161.126 ([41.85.161.126]) by webmail-05.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Wed, 17 Jul 2013 17:19:47 -0430 (VET)
Date: Wed, 17 Jul 2013 17:19:47 -0430 (VET)
From: "Mr.John Zikuo" <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <981419273.3045950.1374097787842.JavaMail.gess@webmail-05.datacenter.cha.cantv.net>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [41.85.161.126]
X-Spam-Status: Yes, score=13.4
X-Spam-Score: 134
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: WESTERN UNION HEAD OFFICE BENIN REPUBLIC COTONOU Mr.John Zikuo.
TEL: +229 99356570 EMAIL: ([email protected]) Attn;Beneficiary,
Information reaching us from our corporate headquarters now, states that
you only have 72hours to effect payment for the activation of your MTCN to
enable you cash up your first $4,000.00 from your total (fund) since you
are finding it difficult to make this payment we have decided that you are
to go ahead and pay whatever you have from $39 USD above for the activation
fee since you are not able to come up with the required sum, time is of the
essence here. [...]
Content analysis details: (13.4 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.11.173.10 listed in list.dnswl.org]
0.8 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server
[41.85.161.126 listed in dnsbl.sorbs.net]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?41.85.161.126>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.85.161.126 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(w.u.m.transfer1010[at]live.com
)
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
0.0 T_FRT_BELOW2 BODY: ReplaceTags: Below (2)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.0 LOTS_OF_MONEY Huge... sums of money
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
4.0 MONEY_FROM_41 Lots of money from Africa
X-Spam-Flag: YES
Subject: ***SPAM*** Attn;Beneficiary,
WESTERN UNION HEAD OFFICE
BENIN REPUBLIC COTONOU
Mr.John Zikuo.
TEL: +229 99356570
EMAIL: ([email protected])
Attn;Beneficiary,
Information reaching us from our corporate headquarters now, states that you only have 72hours to effect payment for the activation of your MTCN to enable you cash up your first $4,000.00 from your total (fund) since you are finding it difficult to make this payment we have decided that you are to go ahead and pay whatever you have from $39 USD above for the activation fee since you are not able to come up with the required sum, time is of the essence here.
You are to pay what ever you have from $39 USD above for the activation fee we will activate your MTCN upon receipt of this payment.here is the payment for the $4,000 usd but you can not pick it up because the chairman of the western union say that before you pick that money you must pay the any amount you have from $39USD above OK
Hear is the payment information that we send you today,
MTCN #----------- 324-093-4179(pending)
SENDERS FIRST NAME.....ELAINE
SECOND NAME..............SLOUGH
AMOUNT...................$4,000
TEST QUESTION:.......HOW LONG?
ANSWER: ...........24HOURS
Be informed that you will have to pay the balance sum of your activation upon cashing up of your first 4,000.00 usd, also i am using this medium to inform you that failure to pay the balance sum will leave us with no option but to deactivate your mtcn of which you will and can never cash up the balance sum i want you to send the renewing and transfer fee with the information bellow.
1.Receiver name:...Micheal Edochie Emeka.
2.Country:.........Benin Republic.
3.City :...........Cotonou
4.Test question:....In God
5.Test answer:.....We Trust
6.Amount you sent.....
Sender Name.......
Send us the mtcn number immediately you send the money and immediately we
confirm the transfer fee we will send you the first receipt of your $4,000
today and not tomorrow.
Mr.John Zikuo.
TEL: +229 99356570
EMAIL: ( [email protected] )
WESTERN UNION HEAD OFFICE BENIN REPUBLIC COTONOU
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces