[email protected] Mr Frank Johnson

[buried under 419s]

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 30 Jul 2013 02:31:16 -0700
Received: from 10ibl20ser04.datacenter.cha.cantv.net ([200.11.173.11]:57779)
by with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80)
(envelope-from <[email protected]>)
id 1V46Gt-0005Xd-Lj
for ; Tue, 30 Jul 2013 02:31:16 -0700
X-Virus-Scanned: amavisd-new at cantv.net
Received: from webmail-02.datacenter.cha.cantv.net (webmail-02.datacenter.cha.cantv.net [200.11.153.85])
(authenticated bits=0)
by 10ibl20ser04.datacenter.cha.cantv.net (8.14.3/8.14.3/3.0) with ESMTP id r6U9UQsU023697;
Tue, 30 Jul 2013 05:00:26 -0430
X-Matched-Lists: []
Received: from 41.79.217.126 ([41.79.217.126]) by webmail-02.datacenter.cha.cantv.net (Cantv Webmail) with HTTP; Tue, 30 Jul 2013 05:00:26 -0430 (VET)
Date: Tue, 30 Jul 2013 05:00:26 -0430 (VET)
From: Mr Frank Johnson <[email protected]>
Reply-To: [email protected]
To: [email protected]
Message-ID: <2079690329.2263386.1375176626132.JavaMail.gess@webmail-02.datacenter.cha.cantv.net>
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-Mailer: Cantv Webmail
X-Originating-IP: [41.79.217.126]
X-Spam-Status: Yes, score=7.3
X-Spam-Score: 73
X-Spam-Bar: +++++++
X-Spam-Report: Spam detection software, running on the system "server.trucidodolusloricaproject.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Contact western Union now I have deposited the check as we
agreed with western Union. All you have to do is to contact them at:- ([email protected])
they will give you direction on how you will be receiving the funds daily.
[...]

Content analysis details: (7.3 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[200.11.173.11 listed in list.dnswl.org]
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?200.11.153.85>]
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.79.217.126 listed in zen.spamhaus.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.7 RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
1.5 BAYES_60 BODY: Bayes spam probability is 60 to 80%
[score: 0.6814]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.4 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
3.6 HK_NAME_MR_MRS HK_NAME_MR_MRS
0.3 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
X-Spam-Flag: YES
Subject: ***SPAM*** Contact western Union now
Contact western Union now

I have deposited the check as we agreed with western Union. All you have to do is to contact them at:- ([email protected]) they will give you direction on how you will be receiving the funds daily.

My agreement with them is 5,000 USD two time daily until the whole of 1.5USD is transferred. You are not expected to pay for the transfer charge as that will be deducted from the funds once the remittance is done.

send the below information to them:

Receiver name: _________
Country:__________
Mobile Phone:________

The only fee you will send to them before the transfer is 75USD for paper work and remittance. E-mail them with above address, the contact person is Mr Williams Mark, with phone number:- +229 9692-8934

Thank you.
Mr FrankJohnson