[email protected] Mrs. Cyril Wesner

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Sun, 03 Aug 2014 13:05:13 -0700
Received: from rebelo.petroamazon.com.br ([186.233.95.232]:47113 helo=mozart.petroamazon.com.br)
by with esmtp (Exim 4.80)
(envelope-from <[email protected]>)
id 1XE21j-0003cy-Tk
for ; Sun, 03 Aug 2014 13:05:13 -0700
Received: from localhost (localhost [127.0.0.1])
by mozart.petroamazon.com.br (Postfix) with ESMTP id DADC911A149E;
Sun, 3 Aug 2014 14:48:34 -0400 (AMT)
Received: from mozart.petroamazon.com.br ([127.0.0.1])
by localhost (mozart.petroamazon.com.br [127.0.0.1]) (amavisd-new, port 10032)
with ESMTP id 0wTCccStAA4Y; Sun, 3 Aug 2014 14:48:31 -0400 (AMT)
Received: from localhost (localhost [127.0.0.1])
by mozart.petroamazon.com.br (Postfix) with ESMTP id EAFBC11A712B;
Sun, 3 Aug 2014 14:47:54 -0400 (AMT)
X-Virus-Scanned: amavisd-new at mozart.petroamazon.com.br
Received: from mozart.petroamazon.com.br ([127.0.0.1])
by localhost (mozart.petroamazon.com.br [127.0.0.1]) (amavisd-new, port 10026)
with ESMTP id EUXwgggryzq8; Sun, 3 Aug 2014 14:47:54 -0400 (AMT)
Received: from [115.242.62.157] (unknown [115.242.62.157])
by mozart.petroamazon.com.br (Postfix) with ESMTPA id 2276411A7136;
Sun, 3 Aug 2014 14:47:37 -0400 (AMT)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
To: Recipients <[email protected]>
From: Mrs. Cyril Wesner <[email protected]>
Date: Mon, 04 Aug 2014 00:16:56 +0530
Reply-To: [email protected]
Message-Id: <[email protected]>
X-Spam-Status: Yes, score=14.3
X-Spam-Score: 143
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Congratulations!!! We have registered your email winning award
cashable cheque at any Bank worldwide worth £500,000.00 with DHL, to be delivered
to your point of contact. This is one of our thirty six lucky Promotional
award prize in the Microsoft Windows Promotion, it is also to promote & encourage
the user of Microsoft Products Worldwide [...]

Content analysis details: (14.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?186.233.95.232>]
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FILL_THIS_FORM Fill in a form with personal information
3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
0.4 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.6 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
3.8 MONEY_FRAUD_3 Lots of money and several fraud phrases
3.9 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** Package registered with DHL

Congratulations!!!

We have registered your email winning award cashable cheque at any Bank worldwide worth £500,000.00 with DHL, to be delivered to your point of contact. This is one of our thirty six lucky Promotional award prize in the Microsoft Windows Promotion, it is also to promote & encourage the user of Microsoft Products Worldwide

We have also paid the delivery charges of your parcel and your information is needed for the delivery to take place, Full Name: Home Address: Occupation: Cell Phone: Country of Origin: Age: Id Proof. Scan copy
Contact Dispatch officer Mr. Jensen McLean
Tel: +44(0)7017888982
Fax +44(0) 8445001405
Email: [email protected]
Once again,
Congratulations

Mrs. Cyril Wesner
Head Customer care Service
Microsoft Promotion Award Dept
Thames Valley Park
Reading Berkshire RG6 1WG (UK)

[different script]

Delivered-To:
Received: by 10.107.128.163 with SMTP id k35csp177046ioi;
Sun, 10 Aug 2014 11:04:48 -0700 (PDT)
X-Received: by 10.224.64.201 with SMTP id f9mr58765781qai.64.1407693888653;
Sun, 10 Aug 2014 11:04:48 -0700 (PDT)
Return-Path: <[email protected]>
Received: from spanishbroadcasting.com (mail.lamusica.com. [38.106.70.68])
by mx.google.com with ESMTP id c6si10076903qce.49.2014.08.10.11.04.48
for <>;
Sun, 10 Aug 2014 11:04:48 -0700 (PDT)
Received-SPF: neutral (google.com: 38.106.70.68 is neither permitted nor denied by domain of [email protected]) client-ip=38.106.70.68;
Authentication-Results: mx.google.com;
spf=neutral (google.com: 38.106.70.68 is neither permitted nor denied by domain of [email protected]) [email protected]
Received: from [115.240.26.139] (account [email protected] HELO [127.0.0.1])
by spanishbroadcasting.com (CommuniGate Pro SMTP 5.2.3)
with ESMTPA id 1187329; Sun, 10 Aug 2014 13:53:02 -0400
Message-Id: <[email protected]>
Mime-Version: 1.0
From: Century Transformers Pvt. Ltd <[email protected]>
To: Undisclosed-Recipients:;
Reply-To: [email protected]
Subject: Parcel. registered with Dhl
Date: Sun, 10 Aug 2014 23:34:43 +0530
Content-type: multipart/alternative; Boundary="--=BOUNDARY_8102334_VCIM_FKRE_OFEN_LCED"

This message is in MIME format. Since your mail reader does not understandthis format, some or all of this message may not be legible.

----=BOUNDARY_8102334_VCIM_FKRE_OFEN_LCED
Content-type: text/plain; charset=iso-8859-1; format=flowed
Content-transfer-encoding: quoted-printable

Attn Dear
ATM MasterCard Valued US $800,000.00

We refer to our earlier mail on the above subject matter and apologize for the delay in transferring your overdue contract inheritance fund due to the fact that our database was attacked which resulted in shutting down of our entire system. Our professional team has worked endlessly & tirelessly to restore our system but still some data is amiss.

Your ATM MasterCard has finally been registered with the secret PIN CODE with DHL to be delivered to your point of contact being part payment of $ 800,000.00 USD.
We have also paid the delivery charges of your parcel except the Security Fee which DHL insisted that it will be paid only upon receipt of the claimant due to demurrages as they don't know when you will be contacting them for the claim.

Kindly reconfirm your current mailing addresses to avoid wrong delivery: Full Name: Home Address: Occupation: Cell Phone: Country of Origin: Age: Id Proof Scan Copy
DHL Dispatch Officer Mr. Jensen McLean
Email: [email protected]
Phone +918285020781
Fax +91-80-22231417

Accept our apology for the delay

Regards,
Mrs. Rita E. Benjamin
Assistant Secretary
Century Transformers Pvt. Ltd