by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Mon, 20 Jun 2011 21:14:46 -0700
Received: from rs25s6.datacenter.cha.cantv.net ([200.11.173.18])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QYsMO-0008AU-DR
for ; Mon, 20 Jun 2011 21:14:46 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-06.datacenter.cha.cantv.net (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
(authenticated bits=0)
by rs25s6.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p5L4DXD1013175;
Mon, 20 Jun 2011 23:43:34 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 20 Jun 2011 23:43:33 -0430 (VET)
Date: Mon, 20 Jun 2011 23:43:33 -0430 (VET)
From: WESTERN UNION <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <1336188693.626028.1308629614100.JavaMail.gess@webmail-06.datacenter.cha.cantv.net>
Subject: ARE YOU TRULY DEAD?
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** ARE YOU TRULY DEAD?
X-Spam-Status: Yes, score=10.0
X-Spam-Score: 100
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DEAR VALUED CUSTOMER, I NEED TO CONFIRM THAT THIS IS TRUTH
BEFORE WE RELEASE YOUR FUNDS TO THIS GENTLE MAN. THIS OFFICE WAS CONTACTED
BY MR. SCOTT E U. ANTHONY WHO CLAIMED TO BE YOUR BROTHER. HE PROMISED TO
PAY THE NEEDED FEE AND CLAIM THE FUND AS YOUR NEXT OF KIN. [...]
Content analysis details: (10.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_SCAM_N2 BODY: HK_SCAM_N2
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.18 listed in psbl.surriel.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(westeunio011[at]live.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
DEAR VALUED CUSTOMER,
I NEED TO CONFIRM THAT THIS IS TRUTH= BEFORE WE RELEASE YOUR FUNDS TO THIS GENTLE MAN. THIS OFFICE WAS CONTACTED BY MR. SCOTT E U. ANTHONY WHO CLAIMED TO BE YOUR BROTHER. HE PROMISED TO P= AY THE NEEDED FEE AND CLAIM THE FUND AS YOUR NEXT OF KIN.
HE SAID THAT YOU WERE INVOLVED IN A CAR ACCIDENT LAST WEEK AND DIE. WE NEED TO CONFIRM THAT YOU ARE TRULY DEAD BEFORE WE CAN RELEASE THE FUND TO HIM. WE BELIEVED THAT YOU ARE DEAD BUT AS A FEDERAL OFFICE, WE NEED A PROOF FOR RECOR= D PURPOSES BEFORE WE CAN RELEASE THE FUNDS TO HIM. THEREFORE, YOUR SILENT I= S A CLEAR PROOF THAT YOU ARE DEAD.
NOTE; WE WILL COMMENCE ON TH= E RELEASE OF YOUR FUNDS TO YOUR NEXT OF KIN FROM FRIDAY 24th JUNE 2011. BY THEN: MAY YOUR SOUL REST IN PERFECT PEACE, AMEN!!! DO NOT FORGET TO CALL US IMMEDIATELY AT ( +229 988 564 01 ) E-MAIL CUSTOMER CARE.......( [email protected] )
THANKS AND GOD BLESS,
WESTERN UNION DIRECTOR = BENIN REPUBLIC
MR, MARK JAMES
+229 988 564 01
Envelope-to:
Delivery-date: Mon, 20 Jun 2011 21:14:46 -0700
Received: from rs25s6.datacenter.cha.cantv.net ([200.11.173.18])
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1QYsMO-0008AU-DR
for ; Mon, 20 Jun 2011 21:14:46 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-06.datacenter.cha.cantv.net (webmail-06.datacenter.cha.cantv.net [200.11.153.89])
(authenticated bits=0)
by rs25s6.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id p5L4DXD1013175;
Mon, 20 Jun 2011 23:43:34 -0430
X-Matched-Lists: []
Received: from 41.222.192.87 ([41.222.192.87]) by webmail-06.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Mon, 20 Jun 2011 23:43:33 -0430 (VET)
Date: Mon, 20 Jun 2011 23:43:33 -0430 (VET)
From: WESTERN UNION <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <1336188693.626028.1308629614100.JavaMail.gess@webmail-06.datacenter.cha.cantv.net>
Subject: ARE YOU TRULY DEAD?
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Mailer: Cantv Webmail
X-Originating-IP: [41.222.192.87]
X-Spam-Subject: ***SPAM*** ARE YOU TRULY DEAD?
X-Spam-Status: Yes, score=10.0
X-Spam-Score: 100
X-Spam-Bar: ++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: DEAR VALUED CUSTOMER, I NEED TO CONFIRM THAT THIS IS TRUTH
BEFORE WE RELEASE YOUR FUNDS TO THIS GENTLE MAN. THIS OFFICE WAS CONTACTED
BY MR. SCOTT E U. ANTHONY WHO CLAIMED TO BE YOUR BROTHER. HE PROMISED TO
PAY THE NEEDED FEE AND CLAIM THE FUND AS YOUR NEXT OF KIN. [...]
Content analysis details: (10.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 HK_SCAM_N2 BODY: HK_SCAM_N2
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.222.192.87 listed in zen.spamhaus.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[200.11.173.18 listed in psbl.surriel.com]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(westeunio011[at]live.com
)
0.0 HTML_MESSAGE BODY: HTML included in message
0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
[score: 0.5000]
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
0.0 RFC_ABUSE_POST Both abuse and postmaster missing on sender domain
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
DEAR VALUED CUSTOMER,
I NEED TO CONFIRM THAT THIS IS TRUTH= BEFORE WE RELEASE YOUR FUNDS TO THIS GENTLE MAN. THIS OFFICE WAS CONTACTED BY MR. SCOTT E U. ANTHONY WHO CLAIMED TO BE YOUR BROTHER. HE PROMISED TO P= AY THE NEEDED FEE AND CLAIM THE FUND AS YOUR NEXT OF KIN.
HE SAID THAT YOU WERE INVOLVED IN A CAR ACCIDENT LAST WEEK AND DIE. WE NEED TO CONFIRM THAT YOU ARE TRULY DEAD BEFORE WE CAN RELEASE THE FUND TO HIM. WE BELIEVED THAT YOU ARE DEAD BUT AS A FEDERAL OFFICE, WE NEED A PROOF FOR RECOR= D PURPOSES BEFORE WE CAN RELEASE THE FUNDS TO HIM. THEREFORE, YOUR SILENT I= S A CLEAR PROOF THAT YOU ARE DEAD.
NOTE; WE WILL COMMENCE ON TH= E RELEASE OF YOUR FUNDS TO YOUR NEXT OF KIN FROM FRIDAY 24th JUNE 2011. BY THEN: MAY YOUR SOUL REST IN PERFECT PEACE, AMEN!!! DO NOT FORGET TO CALL US IMMEDIATELY AT ( +229 988 564 01 ) E-MAIL CUSTOMER CARE.......( [email protected] )
THANKS AND GOD BLESS,
WESTERN UNION DIRECTOR = BENIN REPUBLIC
MR, MARK JAMES
+229 988 564 01
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
