Logo



If you cannot click the link above, Copy & Paste this link: http://playonlineewe.com/keyJjIjogOTYzNCwgImYiOiAwLCAibSI6IDg3MTksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playonlineewe.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: playonlineewe.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playonlineewe.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://playonlineewe.com/jeyJjIjogOTYzMywgImYiOiAwLCAibSI6IDg3MTgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playonlineewe.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playonlineewe.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: playonlineewe.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
¯µ¾|MACA¤?M°¶­ô ¦­¬ª ¶§µä ¤£Á| «ù¤[°¶­ô VIVID¤G¥N «ù¤[¥??¹¼W¤j¤Y ¡¸µ?ê¡AµÇ??¤£¦A¬O§Aªº§xÂZ¡Aµw«?º§?¡A¨?Aªº³±²ô¹F¨ìµL¤?°? ¡¸§i§O©?æ«?¯h³?P¡AÁYµu©?¡·²®?¡¡A¦^¨ì¤G¤Q·³®?º¥R¨Kºë¤O ¡¸­ì¸?¶­ô¡B§§¶§Ã?~¡B«ù¤[²G¡B¬KÃ?ÊÃ?~¡B§?t¶?v¤ô¡B«¦?û ¡¸¥xÆW¤k©Ê70%µLªk±o¨ì©?ª¼é¡A¨k¤H«ç¥i¥H¤£¦æ! ³±²ô¼W²?W¤j¤Y ¥¿©f²n¨ì¤?G §tÃz§AªºÎx ½??sºô§} http://www.sex399.com ©?N¥»«H¥?°?ì ¦¬¥ó§¨ §Y¥i¥¿±ÂI¿ï³sµ² ¥¼º¡18·³??´¶i¤J puwyyacdfghjklnoprtuvxzbdeghijlmoqqstu SpamAssassin Report (spam score: 13.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: sex399.com] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: sex399.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 UNRESOLVED_TEMPLATE Headers contain an unresolved template 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.8 PERCENT_RANDOM Message has a random macro in it 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129795 - Sent on June 16, 2015, 11:51 pm by defhjkln@mail.zbefhjklnoprstv.cl
U.S Internal Revenue Service DepartmentInternal Revenue Service United States Department of the TreasuryAccessibility Skip to Top Navigation2283 3rd Ave New York, NY 10035, United StatesGreeting from IRS USAWe the Internal Revenue Service, believed that you received the previous messagewe sent to you, prior to your dealings with the U.S Custom Authority at (JFK)John F. Kennedy International Airport New York as regards to your over-duecontract payment consignment trunk box worth USD10,500.000.00 (Ten Million FiveHundred Thousand United States Dollars only), which was endorsed in your favorand like we stated earlier, we have dully screened through this project asstipulated on our protocols of operation and have finally confirmed that yourcontract payment is 100 percent genuine and hitch free from all facet and of which youhave the lawful right to claim your fund without any further delay.This is to bring to your notice that we have just been informed through secretsource that the U.S Custom Authority at (JFK) John F. Kennedy InternationalAirport New York are making arrangement to have your contract fund wired intothe Bank account of Mrs. Jane Frederick, the lady that contacted them, earlierand presented some documentations evidencing your claim purported to have beensigned personally by you for the release of your contract fund to her, since youhave chose to ignore their messages and refuse to pay the required USD240.00 forCustom Clearance Certificate C.C.C. charges as imposed, despite the advise wegave to you.I want to personally assure you once again that you will have every course tosmile and be happy upon conclusion of this project, as we will continuemonitoring all your services with them at all level as well as yourcorrespondence, until you have received your Metal Trunk Box accordingly, we arehere to protect your interest and that is the reason why we are doing all we canto make sure all goes well. This is a huge amount of money which we don't wishfor you to lose.We understand that the imposed fee might be too much for you to pay so tofurther make things easier for you, we have discussed with the U.S CustomAuthority at (JFK) John F. Kennedy International Airport New York pleaded onyour behalf for them to give you the grace of sending half of the charges whichwill be only USD120.00 Us Dollar for now after which the Diplomatic Agent deliveryour consignment trunk box to you then once you receive your fund, you can thenpay the remaining balance of USD120.00All we want you to do right now is to send the half payment of the money withthe name listed below so we can forward it to Montgomery Alabama Customs authorityto help us obtain the Custom Clearance Certificate C.C.C. and  the diplomat willmake the delivery to your home address tomorrow morning.Description of Your Consignment box to be delivered:Type:.....CONSIGNMENT TRUNK BOXSize:....../ 2:1 CM.Weight:...5.6KG.Colour:.....BLACK BOXRegistration NO: #98952457Serial #5267843156Pin numberContact us right away and let me know when you will send half of the charges aswe discussed with them to enable them route your fund to you with immediateeffect. This is a life time opportunity and we will advise you to take advantageof it, before it will become too late for consideration. Note, the money shouldbe sending through Money Gram money transfer network as U.S Customs Benininstructed.Receiver's Data / information: Send Via Money Gram, western union or wallmart money transfer.Receiver's name:::::::::::: Ann Brownaddress Montgomery Alabama, USA Text question:::::::::::::: WhenText answer:::::::::::::::: NowAmount::::::::::::::::::::: USD120.00Sender's name::::::::::::::  Sender's Address:::::::::::Reff#mtcn No::::::::::::::::::::::Also be informed that we came to an agreement with the U.S Custom Authority at(JFK) John F. Kennedy International Airport New York that you will be sendinghalf of the fee, latest before the end of tomorrow so please we will advise thatyou send the fee right away because if you fail to do that, then they will haveno other choice than to release your fund to Mrs. Jane Frederick who is ready towork with them, and am sure it will be a very great loss to you as we will notbe able to help you then, hence your fund will be lost forever.This is an official notification and we advise you treat it with utmost urgency,in your best interest.Happy New Year and God bless you!!!Yours Sincerely,IRS Commissioner,Douglas H. ShulmanUSA Department of TreasurySpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.193 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (governmentmail[at]qq.com) 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
Click to view scam #129790 - Sent on June 16, 2015, 11:34 pm by governmentmail@qq.com
Sent from my iPadBegin forwarded message:From: PayPal Service <secure@sec.net>Date: 16 June 2015 16:53:34 BSTSubject: We Notice Unusual Activity Login .ExternalClass div, .ExternalClass p, .ExternalClass a, .ExternalClass li, .ExternalClass td, .ExternalClass span { } .ExternalClass img { display:block; } Dear, You may have noticed that some blocked have been placed on your Paypal account access. We know this can be frustrating but you can remove these blocked in a few steps. HOW TO REMOVE MY BLOCKED ACCESS You can resolve by following these simple steps: Logggin your account Updates your profile Unlock Successfully     If you need further assistance, simply click on the Contact us link in the footer to get in touch with our customer service. Yours Sincerely, Paypal Support Department
Click to view scam #129793 - Sent on June 16, 2015, 11:33 pm by secure@sec.net
Sent from my iPhoneBegin forwarded message:From: Flora Patterson <flora_patterson@j-ext.net>Date: 16 June 2015 16:59:35 BSTSubject: You Have 1 InstaH00kup Request hi! are u h0rny? i?m a 26/f and just want a h00kup buddy. my username is nasty_babe18 my profile here TALK S00N .
Click to view scam #129796 - Sent on June 16, 2015, 11:30 pm by
Begin forwarded message:From: ??????? <152@cardhome.com.tw>Date: 16 June 2015 21:45:00 BSTTo: <joke01@dmdeliver.net>, <xjl022@mail.ustc.edu.cn>, <sales@acorid.com>, <info-asia@com-sit.com>, <sophie@egotins.com>, <Jonafang@aol.com>, <jonag@geomatics.kth.se>, <jonah.pitts@fastmail.fm>, <gagej@afge.org>, <moe2554@tpnet.pl>, <jonandracheldoerr@verizon.net>, <Jonas.Emsley@NOTTINGHAM.AC.UK>, <rlinders@xs4all.nl>, <NOV@CM1.HINET.NET>, <lan@dardi.cn>, <jonas.orring@telia.com>, <ecity@eim.ae>, <cadottvillage@centurytel.net>, <khchen@mail.csu.edu.cn>, <jonathan.abramczyk@mandar.fr>Subject: ????????? ???150?        ????????4.5%???????????????????????????????? ????????????????????????????????????????,???????????????????????? ?????????????50?????????50???????6????200??80????PS??80?????????????? ????????????????????????100????????????????????150???????????????? ??????????????????http://affiliate.lufax.com/action/tRvCa  
Click to view scam #129792 - Sent on June 16, 2015, 11:27 pm by 152@cardhome.com.tw
If you cannot click the link above, Copy & Paste this link: http://playonlineewe.com/zeyJjIjogOTYzMiwgImYiOiAwLCAibSI6IDg3MTcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: playonlineewe.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playonlineewe.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playonlineewe.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129787 - Sent on June 16, 2015, 11:25 pm by golfmates@playonlineewe.com
If you cannot click the link above, Copy & Paste this link: http://playonlineewe.com/veyJjIjogOTYyMywgImYiOiAxLCAibSI6IDg3MTAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: ) pts rule name undefined
   On Tuesday, June 16, 2015 6:49 AM, office western <officewesternu1@gmail.com> wrote: Dear Customer.I write to inform you that we already issued those documents to accompany your $6,000 payment each day. But the only problem we are having right here is your personal signatures which the Federal Administer of Fund Benin Republic requested that you must sign those documents before we can transfer funds to you. However, I told the officer in charge that it will not be necessary for you to come down here due to your occupation or some other thing that may not allow you to come down here to sign those documents yourself. The Minster Administrator of Fund said that you should get an attorney to sign on your behalf if you are unable to come down here in person.I think this way is the best and the only way forward for you to receive the funds. I have negotiated with an attorney who would sign on your behalf. His name is Henry Floyd.. According to him you are to pay for the accredited attorney. He is charging $110.00 to be paid before he gets those documents signed in your favor. I told him to consider signing those documents on your behalf today with a promise that you would pay him back from the $6,000 payment you suppose to receive today if he gets those documents signed today.And his respond is that you have to pay the accredited attorney fee of $110.00 before signing those documents. Well, I asked him for the very last time if he could allow you pay half of his fee today with a promise that you would pay him the Remain balance from your $6,000 payment at the western union office once you pick up the $6,000 payment today. Well, he said that you should pay the half of the fee $55.00 through western union today. He want me to ask you if you would be so kind to pay him back the remaining $55.00 balance at the western union office once you picked up the $6,000 pay out each day. I am hereby this writing to ask you to let me know if you would pay his balance immediately you pick up the $6,000 payment.He wants you to pay half of $55.00 today if you are so kind to pay the balance at the western union office once you picked up the $6,000 payment also today. But if you are not kind enough to pay his balance after picking the first transfer just do not bother yourself not to reply because I won?t see another attorney here to do this. Here is information for you to pay $55.00 half of his fee through western union today.Send the half of the fee $55.00 today via Western Union;Receiver name; DAVID UDOKACountry: Benin RepublicCity: CotonouText question; SentAnswer; YesAmount; $55Sender?s name;MTCNThe attorney will get those documents signed as soon as he confirms the half of his fee from you. I will advice you to pay him the half of $55.00 and let him sign the documents and you will then pay the other balance of $55.00 form your $6,000 payment.I await your compliance.Sincerely,Mr. Desmond Phillip Mark the Manager Of Western union departmentBenin Republic; Call +229 96193299
Click to view scam #129788 - Sent on June 16, 2015, 11:22 pm by officewesternu1@gmail.com
My child what seem to be the problem, we haven't heard from you no response at all, this to notify you that there will be initiation this month of June, if you still wish to join the Illuminati, you are to quickly get back to us as soon as possible. May the gods be with you. From Father Davis. ______________________________________________________________________________ Mon enfant ce qui semble être le problème, on n'a pas entendu de vous aucune réponse du tout, esta pour vous informer qu'il y aura initiation mois esta de Juin, si vous souhaitez toujours rejoindre les Illuminati, vous êtes pour revenir rapidement à nous dès que possible. Que les dieux soient avec vous. De Père Davis. SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (luminatiforsuccessandfamous[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.45 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Attention Dear Customer , This is to inform you that we have finally transferred your $7.500,000,00 into your new online Account, we credit your fund into online banking as matter of fact information below is the online banking info. Here is the transfer access code to enable you make the final transfer of your $7.500,000,00 to your nominated bank account Cot Code: xxh2Qyvvx121 Please log on to the link below to access the banks and fill it accordingly to enable your fund reflected into your Bank Account within 24Hours and don,t make any mistake to avoid transfer error. Click at (http://finance.fundcontrols. uni.me) And please take all note of the instruction given, Meanwhile when you find this email in your Spam folder try and make sure you forward it to your inbox before clicking, You can as well copy the lick and paste For your easy transfer (http://finance.fundcontrols. uni.me) You are advised to make the transfer to your nominated bank account as Scheduled on 06/12/2015 so as to actively completion of your fund transfer and deposition of your funds into your nominated account in a timely fashion. Best Regard, Dr. Johnson AmedE-mail inforconsultance@inbox.lv COMPLETED YOUR TRANSFER IMMEDIATELY SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (engkanloo[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.68 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #129785 - Sent on June 16, 2015, 11:17 pm by engkanloo@gmail.com
If you cannot click the link above, Copy & Paste this link: http://playonlineewe.com/keyJjIjogOTYzMSwgImYiOiAwLCAibSI6IDg3MTYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playonlineewe.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playonlineewe.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129784 - Sent on June 16, 2015, 10:47 pm by Email.Lookup@playonlineewe.com
  Hi,   I am contacting you on behalf of your partner to initiate an order transaction.   Please download the attachement below to view the document on Google Drive.   Upon login and view of the document please email me your best quotation and let me know the price with MOQ, FOB.   Thanks, Iraj Janali Add:  Bin Zayed Street, Ajman Tel: +971-4-3324798 1 attachment(120.2 KB)     SpamAssassin Report (spam score: 1.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129783 - Sent on June 16, 2015, 10:41 pm by tfarley@turnkeytechnologies.com
    If you cannot click the link above, Copy & Paste this link: http://playonlineewe.com/yeyJjIjogOTYzMCwgImYiOiAxLCAibSI6IDg3MTUsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playonlineewe.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playonlineewe.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129781 - Sent on June 16, 2015, 9:50 pm by Jen@playonlineewe.com
.zjfqktsqg{color:#858c4f;} Get Funding for Your Small Business Today! SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: discordancetraitcomplexhj.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.178 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: discordancetraitcomplexhj.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: discordancetraitcomplexhj.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Dear Sir,We have already made the payment into your account today,Kindly check the attached swift copy and keep us informed assoon as you received our payment from your Bank.Best Regards,Maheshwari Harish SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (geepeetextiles[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.173 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129780 - Sent on June 16, 2015, 9:31 pm by geepeetextiles@gmail.com
If you cannot click the link above, Copy & Paste this link: http://addmeonlinee.com/xeyJjIjogOTYxOCwgImYiOiAwLCAibSI6IDg3MDYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: addmeonlinee.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: addmeonlinee.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: addmeonlinee.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Advert
Please all i need from you in this project is total honesty and trust.
Click to view scam #129774 - Sent on June 16, 2015, 8:43 pm by
Dear Sir, I work directly as a broker to the financier of an African Gold Miner who own the Attached FCO to this message. This said financier does all the pre financing of his African Miner Operation in Mali and Guinea from the USA and he have mandated me to help get them a serious Gold Buyer who can be a major Joint Venture Partner with his local Miners in the near future after a 12 Month Contract delivery to such Buyers Refinery. He have right now the Attach offer for sale through his USA Office. Kindly send to all your RWA AU Gold Buyers for their perusals This financier am working with directly is right now looking for a honest Private Buyer who can meet with him in person to buy his 50KG AU Gold Nuggets and Gold Dust of his local Miners Gold either in the TEXAS IN THE USA, BRUSSELS IN BELGIUM, AMSTERDAM IN HOLLAND OR DUBAI with the Attached FCO Procedure. This is strictly a CIF Offer. He will pay you and I a commission of $1000 per kg if we are able to get him the right Buyer for the offer as attached to this email message. I have an agreement signed already with him for our commision and you can reply to him directly on his email address on this offer if you have the right Buyer and putting me on cc to the replies for faster communication to proceed to close this transaction at the earliest. N.B I HAVE 3 MINING CONCESSIONS IN GHANA WHO IS WILLING TO SELL 1 OUT OF THOSE CONCESSIONS AND HE IS ALSO SEEKING INVESTORS OR J-V PARTNERS WITH THE REMAINING 2 GOLD CONCESSIONS, EVERYTHING WILL BE DONE VIA THE GHANA GOVT. IN ACCRA AT A TTM. I SHALL SEND YOU ALL THE DOCUMENTATIONS OF THESE CONCESSIONS AND ALSOTHE BUSINESS PLAN OF THE SAID GOLD CONCESSIONS FROM THE OWNER IFYOUCAN GET A LETTER OF INTEREST FROM YOUR INTERESTED INVESTOR TO ME FIRST TO ENABLE ME LINK YOU TO THE OWNER DIRECTLY IN GHANA FOR PROCEEDING. Best Regards. Ernest A SpamAssassin Report (spam score: 8.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 1.0 HK_RANDOM_REPLYTO Reply-To username looks random 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (international.enterpriseuk[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.9 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
 Special Agent in Charge of the FBI?s Atlanta DivisionFederal Bureau of InvestigationIntelligence field unit2635 Century Parkway N.E,Suite 400 Atlanta, GA 30345 USAE-Mail:  johneedward@yahoo.com Urgent Attention    I am Special Agent John Edward from the Federal Bureau of Investigation (Atlanta Division) Intelligence Unit. We have just intercepted and confiscated two (2) trunk boxes at Harts field Jackson Atlanta international airport, and are on the verge of moving it to our bureau head quarters.   We have scanned the said boxes, and have found it to contain a total sum of USD$4.5M and also backup document which bears your name as the receiver of the money contained in the boxes. Investigations carried out on the diplomat who accompanied the boxes into the United States has it that he was to deliver this fund to your residence as your contract/inheritance payment which was due you from the office of finance Minster of the federal government of Nigeria. We cross-checked all legal documentation in the boxes, and were about to release the consignment to the diplomat, when we found out that the boxes is lacking one very important documentation which as a result, the boxes have been confiscated until the required document is provided.   According to section 229 subsections 31 of the 1991 constitution on release of unclaimed consignment payment, your consignment lacks funds ownership certificate and for that reason you must contact me for direction on how to procure this certificate, so that your consignment can be legally cleared and okay for delivery to you.You are required to contact this bureau within 72 hours or we would take it that you do not want your consignment, and would move it to the treasury Also, you must not contact any other bank for any payment, because your payment is here in care of our storage vault team and will be released to you once you follow my directives.Yours in service,Agent John EdwardReply to:johneedward@yahoo.comSpecial Agent in Charge of the FBI?s Atlanta Division. SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (financial.intelligent.unit33[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Good day to you my beloved one, I am writing this mail to you with tears and sorrow from my heart. I am Justina Laboso, a 23 years old girl from Kenya, My father was Late Lorna Laboso the former Kenyan Assistant Minister of Home and affairs, who was among the plan that crashed in a remote area called Kalong?s, in western Kenya. The plane crashed occurred on Tuesday 10th, June, 2008. You can read more about the crash with the below web site. http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html After the burial of my late father, my stepmother and my uncles conspired and sold my father?s properties to an Expert rate in Switzerland which the shared the money among themselves and left me nothing, One faithful morning, I opened my father's briefcase and found out a documents that my Late Father deposited a huge amount of money in Coris bank Burkina Faso with my name as the next of kin. After then I visit Burkina Faso to withdraw the money for a better life so that I can take care of myself and start a new life, on my arrival over there, the Bank Director whom I meet in person Mr. Batish Zongo told me that my father left an instruction to the bank, that the money should be release to me when I am married or I present a trustee who will help me and invest the money overseas. That is the reason why I am in search of a honest and reliable person who will help me and stand as my trustee for the Bank to transfer the money to his bank account. I will like you to help me to relocate to your country because my stepmother has threatened to assassinate me once she knows my were about. The amount is($9.4 USD nine point four million United State Dollars, I have confirmed from the bank in Burkina Faso, You will also help me to place the money in a more profitable business venture in your Country. However, you will help me by recommending a nice University in your country so that I can complete my studies. It will be my pleasure to compensate you with 30% of the total money for your services and the balance shall be my capital, with your kind idea for me to invest under your control over there in your country. As soon as I receive your positive response showing your interest I will put things in order immediately. I shall appreciate an urgent message indicating your ability and willingness to handle this transaction trustfully and sincerely. I thank God Today that I am out from my country (KENYA) right now In (Burkina Faso) where my father deposited the money with my name as the next of kin, and I have confirmed from the bank with the Documents I have at hand which I will be sending to you after receiving a good respond from you, I will also be sending to you my picture's in my next mail, thanks and have a nice day. Sincerely yours Justina Laboso SpamAssassin Report (spam score: 10.0) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (justina.laboso1[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.193 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (aishagadaffi999[at]gmail.com) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129767 - Sent on June 16, 2015, 8:06 pm by justina.laboso1@gmail.com
Navy Federal Security Zone.
Click to view scam #129768 - Sent on June 16, 2015, 8:03 pm by MyNavyFederal@response.nfcu.org
Details Attached. SpamAssassin Report (spam score: 8.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (webvcxaq1f[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129766 - Sent on June 16, 2015, 7:56 pm by webvcxaq1f@outlook.com
If you cannot click the link above, Copy & Paste this link: http://addmeonlinee.com/meyJjIjogOTYxNSwgImYiOiAwLCAibSI6IDg3MDQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: addmeonlinee.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: addmeonlinee.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: addmeonlinee.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Attn: Beneficiary,Goodluck, I am waiting to hear good news from you again. After a concluded meeting among the board, the office of the presidency Federal Republic of Nigeria under the leadership of our new president Alhaji Muhamudu Buhari has mandated that all foreign payment be release without any further delay.This is a result of several meetings held with international committee and Our Corresponding Bank In Cabodia against the fight on corruption and misappropriation of public funds allocated for the payment of foreign beneficiaries and settlement of dept. This advisory board has been shouldered with the responsibility of making sure that all foreign beneficiaries allocation as approved is released hitch free.As the case maybe, the new government of the Federal Republic of Nigeria has setup up several foreign with funds and also ready to instruct release of funds as soon as beneficiary is satisfied as a true beneficiary. Without any further delay,(1) If you want to receive your fund by consignment box face to face there in your country with our Diplomat. You should email our Diplomat shipment Head Office.Name: Mr. Ken James,Telephone No: +234-80-2507-8474email: (headof_airwaybill@hotmail.com)(2) If you want to receive your fund by KTT wire transfer or ATM Debit Card. You should get back to me immediately. I am trying my best for you and your family. It's your time to end your suffering. The ball is now in your hands. You should not miss this opportunity.Name:Mr. David Gates,From The Payment Office Director Of Foreign Remittance Department.Call me with my Direct hotline Telephone No: +234-80-7352-6252I have told you that keeping me silent cannot settle the issue. I am not hear because of your money. I have also told you that i will like to see you here in Nigeria. So that you can go with your fund that worth million of dollars.As soon as this information is received, be rest assured that full attention will be given to beneficiary towards immediate release of approved funds.Thanks for your understanding/co-operation towards the conclusion of your approve fund.Yours in Service.Jack Lew, SpamAssassin Report (spam score: 4.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [65.55.90.225 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mjacklew9[at]hotmail.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header
Click to view scam #129762 - Sent on June 16, 2015, 7:37 pm by mjacklew9@hotmail.com
    In a message dated 6/12/2015 11:07:55 A.M. Pacific Daylight Time, jdavid0@mobiletorque.co.za writes: I am John David the personal Assistant to Christine Lagarde Managing director International monetary fund IMF in USA. I know this will come to you as a surprise but it is a blessing for life and this transaction will be beneficial to you even on your retired. During my investigation, I discovered funds that have been seized through the past government and due to my position now, I have discovered and confirmed that it can be released to you without any hitches. You are very lucky for me to contact you now because this is the best time to accomplish this transaction. This is an opportunity that comes which I cannot afford to lose because it is painful when you do not utilize a real opportunity. The details of the fund will be disclosed to you once you reply and bear in mind that your name will be used as the true beneficiary to the fund. Be happy because you are not spending any money from your pocket on this project. Also give me a number I can call you.Mr. John DavidPersonal Assistant and chief spokesman of Managing director (IMF)Contact me directly on the email: jdavid0011@she.com
Click to view scam #129763 - Sent on June 16, 2015, 7:36 pm by jdavid0@mobiletorque.co.za
    In a message dated 6/14/2015 7:30:07 A.M. Pacific Daylight Time, SELYNE418@earthlink.net writes: Assistance Inspection Director McCarran International Airport Las Vegas Nevada, WMO 72386, United States. Tel:+17759810211 Date: 13/06/2015   Hello:  My Good Friend                                                                                                                                                       Re: Your Abandoned Package For Delivery   I have very vital information to give to you, but first I must have your trust before I review it to you because it may cause me my job, so I need somebody that I can trust for me to be able to review the secret to you.   I am Mr.Neil E. Waudby, head of luggage/baggage storage facilities here at the McCarran International Airport,Nevada USA. During my recent withheld package routine check at the Airport Storage Vault, I discovered an abandoned shipment from a Diplomat from London and when scanned it revealed an undisclosed sum of money in a metal trunk box. The consignment was abandoned because the Contents of the consignment was not properly declared by the consignee as ?MONEY? rather it was declared as personal effect to avoid interrogation and also the inability of the diplomat to pay for the United States Non Inspection Charges which is $3,700USD. On my assumption the consignment is still left in our Storage House here at the International Airport Nevada till date. The details of the consignment including your name, your email address and the official documents from the United Nations office in Geneva are tagged on the  Trunk box.   However, to enable me confirm if you are the actual recipient of this consignment as the assistant director of the Inspection Unit, I will advise you provide your current Phone Number and Full Address, to enable me cross check if it corresponds with the address on the official documents including the name of nearest Airport around your city. Please note that this consignment is supposed to have been returned to the United States Treasury Department as unclaimed delivery due to the delays in concluding the clearance processes so as a result of this, I will not be able to receive your details on my official email account. So in order words to enable me cross check your details, I will advise you send the required details to my private email address for quick processing and response. Once I confirm you as the actual recipient of the trunk box, I can get everything concluded within 48hours upon your acceptance and proceed to your address for delivery.   Lastly, be informed that the reason I have taken it upon myself to contact you personally about this abandoned consignment is because I want us to transact this business and share the money 80% for you and 20% for me since the consignment has not yet been returned to the United States Treasury Department after being abandoned by the diplomat so immediately the confirmation is made, I will go ahead and pay for the United States Non Inspection Fee of $3,700 dollars and arrange for the box to be delivered to your doorstep Or I can bring it by myself to avoid any more trouble but you have to assure me of my 20% share.   I wait to hear from you urgently if you are still alive and I will appreciate if we can keep this deal confidential. Please get back to me via my private Email: (auditlogisticdept001@gmail.com) for further directives: You can call me on my telephone number: +17759810211  for verbal conversation.   Thank you.   Mr. Neil Waudby Assistance Inspection Director McCarran International Airport Las Vegas Nevada, WMO 72386, United States.  
Click to view scam #129758 - Sent on June 16, 2015, 7:33 pm by SELYNE418@earthlink.net
    In a message dated 6/14/2015 3:44:12 P.M. Pacific Daylight Time, apexf@mail.ru writes: Ref Number:APLUK/9GM/3688Batch Number:APEX-ENGINE0537Dear E-mail User,We are happy to inform you that your E-mail has just won you the sum ofGBP1,500,000 in our annual electronic online sweepstakes organized by the Apex Charity Organization for humanitarian aid.Do contact this email address: apexfdclaimsunit@qq.com  for more details on how you are to claim your cash prize.These are the requirements for claim:Name:Home Address:Tel:occupation:Age:Warm RegardsApex Charity Org Int'l.ALT: apexfdationhome@qq.com---This email has been checked for viruses by Avast antivirus software.https://www.avast.com/antivirus
Click to view scam #129761 - Sent on June 16, 2015, 7:31 pm by apexf@mail.ru
r
    From: jrtaylor8@liberty.eduTo: info_customer41@yahoo.comSent: 6/14/2015 6:52:30 P.M. Pacific Daylight TimeSubj: r  
Click to view scam #129757 - Sent on June 16, 2015, 7:30 pm by jrtaylor8@liberty.edu
If you cannot click the link above, Copy & Paste this link: http://addmeonlinee.com/ieyJjIjogOTYxNCwgImYiOiAwLCAibSI6IDg3MDMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: addmeonlinee.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: addmeonlinee.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: addmeonlinee.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Dear Old Friend, With due respect to your person and much sincerity of purpose I make this contact with you as I believe that you can be of great assistance to me, my name is Dr Alasane Ouattara, from Ouagadougou  BURKINA FASO, West Africa Presently i work in the Bank as telex manager. I have been searching for your contact since you left our country some years ago . I do not know whether this is your correct email address or not because I only used your name initials to search for your contact in the internet .In case you are not the person I am supposed to contact,please see this as a confidential message and do not reveal it to another person but if you are not the intended receiver, do let me know whether you can be of assistance regarding my proposal below because it is top secret. I am about to retire from active Bank service to start a new life but I am sceptical to reveal this particular secret to a stranger. You must assure me that everything will be handing confidentially because we are not going to suffer again in life. It has been 10 years now that most of the greedy African Politicians used our bank to launder money overseas through the help of their Political advisers. Most of the funds which they transferred out of the shores of Africa were gold and oil money that was supposed to have been used to develop the continent. Their Political advisers always inflated the amounts before transfer to foreign accounts so I also used the opportunity to divert part of the funds hence I am aware that there is no official trace of how much was transferred as all the accounts used for such transfers were being closed after transfer. I acted as the Bank Officer to most of the politicians and when I discovered that they were using me to succeed in their greedy act; I also cleaned some of their banking records from the Bank files and no one cared to ask me because the money was too much for them to control. They laundered over$5b Dollars during the process .As I am sending this message to you; I was able to divert ($10.5M) to an escrow account belonging to no one in the bank. The bank is anxious now to know who the beneficiary to the funds is because they have made a lot of profits with the funds. It is more than Eight years now and most of the politicians are no longer using our bank to transfer funds overseas. The ($10.5M) laying waste but I don't want to retire from the bank without transferring the funds to a foreign account to enable me share the proceeds with the receiver. The money will be shared 60% for me and 40% for you and 10% will be set aside for expenses both of us might occur during the transaction.There is no one coming to ask you about the funds because I secured everything. I only want you to assist me by providing a bank account where the funds can be transferred. You are not to face any difficulties or legal implications as I am going to handle the transfer personally. If you are capable of receiving the funds, do let me know immediately to enable me give you a detailed information on what to do. For me, I have not stolen the money from anyone because the other people that took the whole money did not face any problems. This is my chance also to grab my own but you must keep the details of the funds secret to avoid leakages as no one in the bank knows about the funds. Please supply me the following: Your current contact address and Telephone Numbers. I shall intimate you on what to do when I get your confirmation and acceptance. If you are capable of being my trusted associate, do declare your Consent to me through this.Best Regard?sDr Alasane Ouattara.   SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (alasaneouattara70[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129756 - Sent on June 16, 2015, 7:18 pm by alasaneouattara70@gmail.com
Begin forwarded message:From: Paypal Inc Service <Paypal@service.com>Date: 15 June 2015 13:42:22 BSTSubject: You Must Confirm Your Information Letter Ppl By Me PayPal This is an automated email, please do not reply Dear User You Must Confirm Your Information! Please click on the following link to Confirm It: Check It Here You Must Confirm Your Information To Save It . Thanks You For Helping, The Team Need Assistance? We're happy to help by phone at 1-518-741-2708, Monday to Friday 9:00am to 5:00 pm EST, or by email Copyright 2015. All rights reserved. Email ID: 90147
Click to view scam #129754 - Sent on June 16, 2015, 6:42 pm by Paypal@service.com
If you cannot click the link above, Copy & Paste this link: http://addmeonlinee.com/heyJjIjogOTYxMiwgImYiOiAwLCAibSI6IDg3MDIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: addmeonlinee.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: addmeonlinee.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: addmeonlinee.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
My Dear Friend. compensation for all the past efforts, I'm happy to inform you about my success in getting those funds transferred under the cooperation of a new partner from London . Presently I am in London for investment projects with my own share of the total sum. Meanwhile, I didn't forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how. Now please I will advice you to contact my secretary in Ouagadougou Burkina Faso, his name is Mr.Mohammed. and here is his private e-mail address (mohammedmashie123@gmail.com) You can also to call him through his direct mobile telephone: +226 78459271, ask him to send you the total ATM VISA CARD Draft of us three million $3Million USD dollars which i kept for your compensation for all the past efforts and attempt to assist me in this matter. I appreciated your efforts at that time very much. So feel free and get in touched with Mr.Mohammed. and instruct him where to send the draft to you. Please do let me know immediately you receive it so that we can share the joy after all the sofa ness at that time. In the moment, I am very busy here because of the investment projects which I and the new partner are having at hand. Finally, remember that I had forwarded instruction to the secretary on your behalf to receive that money, so feel free to get in touch with Mr.Mohammed. and arrange with him on how to send the draft to you as soon as you contact him. Thanks Mr.Simon Presently in London SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.195 listed in list.dnswl.org] 0.7 MILLION_USD BODY: Talks about millions of dollars 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (usman.adams12[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (usman.adams12[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 3.5 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Click to view scam #129752 - Sent on June 16, 2015, 6:15 pm by usman.adams12@gmail.com
Advert
NEED A LOANREPLY TO: clienteleloanservices1@yahoo.co.za"Clientele Finance Loan" Offer 3% loan with no credit check from R10,000.00 TO R30 Million.E-mail:clienteleloanservices1@yahoo.co.za SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jordaanrja5y[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.66 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #129750 - Sent on June 16, 2015, 6:12 pm by jordaanrja5y@gmail.com
  From: "TNT DIPLOMATIC AGENT"<chrisherbert551@yahoo.com> Date: June 16, 2015 at 5:42:09 AM CDT Subject: Urgent Response Is Needed Reply-To: <chrishebert104@yahoo.com.ph> Attention:   I AM DIPLOMATIC MR.CHRIS HEBERT I have been trying to reach you on your telephone about an hour now just to inform you about my successful arrival in Austin Texas, International Airport? with your two boxes of consignment worth $7.5million USA dollars which I have been instructed by TNT DIPLOMATIC COURIER COMPANY to be delivered to you.   The Airport authority demanded for all the legal back up to prove to them that the fund is no way related with drug nor fraud money,I have presented the papers and handed it over to them and they are very much pleased with the papers I presented, but the only thing that is still keeping me here is the airport Authority demanded for the delivery Clearance Tag which is not  placed on the boxes,   one of the Airport Authority has advise that we get the delivery tag so that I can exit the airport immediately and make my delivery successful.I try to reason with them and they stated the delivery tag will cost us just $135.00 Dollars only to get the two tags placed on the boxes as that tag will enable me get to your house successfully without any interference, they scanned the boxes and found out that the fund is 100 % spend able and accepted by any bank in the whole world.   As I can not afford to spend more time here due to other delivery I have to take care of in Japan. Here are the papers backing the funds together with my ID CARD as I can accompany you to your bank were you will deposit the fund successfully with these papers. I have more vital paper with me but I can only present you the hard copy when I reach your house as that it is the diplomatic rules, such as authorization to deliver.Reconfirm the following information below so that I can deliver your consignment box to you today.   I WILL BE WAITING FOR YOUR CALL  OR EMAIL SO I WILL DIRECT YOU ON HOW TO SEND THE NEEDED $135USD FOR THE CLEARANCE TAG SO I WILL COMPLETE THE DELIVERY TO YOUR HOME . CONFIRM INFORMATION BELOW   NAME: ===== ADDRESS: ==. home phone Cellphone :==== NAME OF YOUR NEAREST AIRPORT: ============== A COPY OF YOUR IDENTIFICATION: ==============       You can direct the tag fee to Cargo Unti WASHINGTON STATE they will get the tags here for you. Here is my cell phone to contact me. +1 512-368-8826 or you can as well email with this email address ( chrishebert104@yahoo.com.ph )  so they can get the tags obtain and Fax it to me one hand so I can make my next step to your address today.   (Here Is Your Package Unlocking CODE (AWB33XZS) Urgent Response is needed because here is very busy and hot Email me :chrishebert104@yahoo.com.ph Celphone +1 512-368-8826 or text SMS   Regard DIPLOMATIC MR CHRIS HEBERT TNT DIPLOMATIC AGENT BENIN. Celphone +1 512-368-8826 or text SMS  
Click to view scam #129748 - Sent on June 16, 2015, 6:05 pm by chrisherbert551@yahoo.com
Attention, Please see attached final documents relating to the above shipments. Originals will be dispatched today by DHL courier under tracking number 64 4607 9006. Best Regards, Janet Zhu Supply Chain Co-Ordinate VAR International Ltd. No 14 Lipscomb Park Soulbury Leighton Buzzard LU7 0GA Tel : 01296 689422 Fax : 01296 689400 Email: info@gkvana.com **COLLECTIONS TO BE MADE BETWEEN 9AM AND 3PM MONDAY - FRIDAY**SpamAssassin Report (spam score: 4.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129751 - Sent on June 16, 2015, 6:02 pm by info@mvws.jp
Steve Bright & Co (Legal practitioners, Will, Finance & Probate Solicitor) Campden Hill House, 192-196 Campden Hill Road, London W8 7TH. E-mail: barrstevebright20@yandex.com Phone: +44-797-835-7339 Dear Friend, I am Barrister Steve Bright, a Legal practitioner here in London and I wish to solicit your assistance in a deal that involves reasonable amount of money. This deal by virtue of its nature must be utterly confidential and top secret. Though I know that transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that this will be done under a legitimate arrangement that will protect both of us from any breach of the law. Like I stated above, I am a Legal practitioner here in London and I came to know you in my private search for a reliable and reputable Business Person/individual that can handle this confidential deal with me, which requires maximum confidence and trust from both sides. MY PROPOSITION: I had a client by name Mr. Paul Louis Halley who was one of the richest men in France but does most of his business in London, Asia, USA and Canada. He was into several businesses before his untimely death by air crash. This BBC news website will give you comprehensive picture of what I am talking about (http://newswww.bbc.net.uk/2/hi/uk_news/england/oxfordshire/4537663.stm ). My client who died along with his lovely wife deposited the Sum of $31.7 Million (Thirty One million, Seven Hundred Thousand United States Dollars Only) with a bank in Canada. During the bank audit exercise, the bank discovered my late client's deposit as an unclaimed credit balance, hence issued me a notice to provide any relatives of my client otherwise they will have the account closed and the fund confiscated. I have made several inquiries to his high commission to locate my client's extended relatives, but all my efforts proved abortive, I then decided to trace his relatives or family member over the internet, and hence I found you as my instinct convinces me that you will be a trustworthy and honest business partner and I decided to contact you to assist me in repatriating my late client's deposit before it got confiscated or declared unserviceable by the Financial institution where the fund is lodged. The bank wants me to provide the next of kin because I signed as a witness when the money was deposited into the bank and secondly the bank knows that I am the personal attorney to late Mr. Paul Louis Halley and they trust me and believe that I can provide the next of kin since the late customer did not indicate any next of kin on his account before his death. This is a life changing business opportunity which you will not like to miss and I can assure you 100% success if only you can work with me in trust and honesty. I now seek your permission to present you as my deceased client relative and have you stand as the Next of Kin to my deceased client so that the funds of $31.7 Million (Thirty One million, Seven Hundred Thousand United States Dollars Only) can be released and paid into your account as the beneficiary and next of kin. I will provide all necessary legal documents that can be used to back up our claim. Please get in touch with me immediately if you are interested to assist me and send to me your contact address, and direct telephone number, then I will commence work in your name. Be informed that this transaction is risk free otherwise my chambers will not contact you because it is against our ethics. Acknowledge the receipt of this mail by replying with the bellow info. Your full name Your occupation Your telephone number Your home address Your marital status Your sex (male or female) These requirements will enable us file letters of claim to the appropriate departments for necessary approvals in your favor. NOTE: We will share the proceed from this deal 50/50 percent, you will take 50% of the money and I will take 50%. Looking forward to your prompt response. you can call me on this phone +44-797-835-7339 for more details. Yours Sincerely, Barr. Steve Bright. Steve Bright & Co Phone: +44-797-835-7339 SpamAssassin Report (spam score: 30.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.7 MILLION_USD BODY: Talks about millions of dollars 2.7 HK_SCAM_N3 BODY: HK_SCAM_N3 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 NSL_RCVD_HELO_USER Received from HELO User 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [202.158.114.178 listed in bb.barracudacentral.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbc.net.uk] 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 2.2 FOUND_YOU I found you... 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 3.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #129746 - Sent on June 16, 2015, 6:02 pm by info@bauservice-schimmel.de
If you cannot click the link above, Copy & Paste this link: http://addmeonlinee.com/ieyJjIjogOTYxMSwgImYiOiAwLCAibSI6IDg3MDEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: addmeonlinee.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: addmeonlinee.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: addmeonlinee.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129749 - Sent on June 16, 2015, 6:00 pm by Norton.Security@addmeonlinee.com
Please See The Attached and revert as soon as possible BEST REGARDS =============SpamAssassin Report (spam score: 0.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (chikarito889[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.175 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #129745 - Sent on June 16, 2015, 5:45 pm by chikarito889@gmail.com
Subject: We Notice Unusual Activity LoginFrom: secure@sec.netDate: Tue, 16 Jun 2015 17:11:41 +0100 Dear, You may have noticed that some blocked have been placed on your Paypal account access. We know this can be frustrating but you can remove these blocked in a few steps. HOW TO REMOVE MY BLOCKED ACCESS You can resolve by following these simple steps: Logggin your account Updates your profile Unlock Successfully     If you need further assistance, simply click on the Contact us link in the footer to get in touch with our customer service. Yours Sincerely, Paypal Support Department Copyright© 2014 Paypal Inc. All rights reserved. Paypal, 12312 Port Grace BoulevardLa Vista, Nebraska 68128, United StatesPlease do not reply to this email. We are unable to respond to inquiries sent to this address. For immediate answers to your questions, visit our Help Center by clicking "Help" at the top of any Paypal page.
Click to view scam #129742 - Sent on June 16, 2015, 5:16 pm by secure@sec.net
 Dear I know that this letter may come to you as a surprise, I got your contact address from the computerized search. My name is Dr Frank Saidu, I am the Bill and Exchange (assistant) Manager of Bank of Africa Ouagadougou, Burkina Faso. In my department I discovered an abandoned sum of Ten million Four hundred thousand United State of American dollars (10.4MILLION USA DOLLARS) in an account that belongs to one of our foreign customer Mr Kurt Kuhle from Alexandra Egypt who died along with his family in Siber airline that crashed into sea at Isreal on 4th October 2001. Since I got information about his death I have been expecting his next of kin to come over and claim his money because we can not release it unless somebody applies for it as the next of kin or relation to the deceased as indicated in our banking guidelines, but unfortunately we learnt that all his supposed next of kin or relation died alongside with him in the plane crash leaving nobody behind for the claim. It is therefore upon this discovery that I decided to make this business proposal to you and release the money to you as next of kin or relation to the deceased for safety and subsequent disbursement since nobody is coming for it and I don't want the money to go into the bank treasury as unclaimed bill. Am contacting you because our deceased customer is a foreigner and a Burkinabe can not stand as a next of kin to foreign customer. The banking guidelines stipulate that the fund should be transferred into the bank treasury after (12) years if nobody is coming for the claim. I have agreed that 33% of this money will be for you as foreign partner in respect to the provision of your account for the transfer, 2% will be set aside for expenses that might occurred during the business and 65% would be for me, after which I shall visit your country for disbursement according to the percentage as indicated. Please I would like you to keep this transaction confidential and as a top secret as you may wish to know that I am a bank official. Yours sincerely, Dr Frank Saidu.SpamAssassin Report (spam score: 10.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (andyjerrywilliams[at]ymail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.136.217.25 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.4 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 2.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
Click to view scam #129741 - Sent on June 16, 2015, 5:15 pm by drfrank_saidu001@voila.fr
Attention: I have registered your ATM CARD of US$4.5Mwith TNT Courier Company with registration code of(Shipment Code awb 33xzs).please Contact with delivery information such as,Your Name, Your Address and Your Telephone Number: Shiping company Office: Note you are to pay $74.00 for delivery charge. Name of Dir Douglas Hall E-mail:(upscouriers01@gmail.com) Tel:+229 99315608 Best Regards, Mr. Jim Michael SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.84.243.231 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
Click to view scam #129735 - Sent on June 16, 2015, 4:54 pm by electrojb@speedy.com.ar
Sent from my iPhoneBegin forwarded message:From: Airport Parking <info@marketing.e360media.com>Date: 16 June 2015 13:06:55 BSTSubject: Proven Investment -  UK Airport Parking Offering Up to 12% AnnuallyReply-To: info <info@e360media.com>To unsubscribe from this newsletter, click here. Untitled Document .one { width:600px; } body { font-family:arial; font-size:12px; background:#ecf0f1; } @media only screen and (max-width: 480px) { table { width:100% } .one { width:100%; } } @media only screen and (min-width: 500px) and (max-width: 600px) { table { width:100% } .one { width:100%; } #per{margin-top:0px} } A Commercial Property Investment A High Yielding Proven Investment Opportunity in Airport Car Parking Offering up to 12% Returns Annually with Quarterly Income   The Investment Opportunity: A new and exciting opportunity for investors to purchase long-stay airport parking spaces within close proximity to Glasgow Airport. Each parking space is available to purchase from only £20,000 and is leased back and managed on your behalf by a well-established airport parking company with over 20 years experience. Each investor will have their own personal title deed, registered at the land registry, following completion. It has a 6 year leaseback option with 8% guaranteed rental income for the first two years rising to 10% in years 3 & 4, and surpassing 12% in years 5 & 6. Investment £20,000 per car parking space 8% guaranteed returns in years 1 & 2, 10% in years 3 & 4, and 12% in years 5 & 6 Buy-back option after 5 years I Income paid quarterly Low risk tangible commercial real estate asset Capital growth investment opportunity SIPP approved by HRMC in the UK Personal title deed with the land registry Car parks operating at almost full capacity on a daily basis Current RICS valuation available Find out more how you can earn up to 12% returns per annum     2nd busiest airport in Scotland 7.7 million passengers in 2014 21,000 daily visitors Demand for 18,000 long stay spaces by 2020 Airport parking accounts for 7% of global airport revenues £200 million already invested at Glasgow Airport over the last 10 years A Rapidly Expanding Airport: Glasgow Airport experienced record-breaking growth in 2014 with over 7.7 million passengers and 21,000 people a day using the airport . It is expected that demand for long stay parking will outstrip supply this year. Airport car parking is therefore at a premium and with many car parks operating at almost full capacity on a daily basis, this is proving to be a very popular and lucrative investment opportunity. Airports are set to create the fastest growing demand for parking throughout the United Kingdom. Join us and don't miss this opportunity Copyright © UK Parking 4 U Glasgow Airport 2015, All rights reserved. 
Click to view scam #129740 - Sent on June 16, 2015, 4:50 pm by info@marketing.e360media.com
Begin forwarded message:From: "Regine Modine" <loisnevn@moscowmail.com>Date: 16 June 2015 16:26:31 BSTSubject: WAAAAAAAAAY too *EASY*Hi,Want to earn more money?I'll simply presume you're shaking your mind "yes"I uncovered a CRAZY system that lets me make almost ten grand a week.The system is obscenely easy as well.There was some function at the beginning but once it started...If I desired to I couldn't cease making cash.Read more:http://goo.gl/0e68wD?halkgqparqirAdministratorTrudi Fronk5146 ORCHARD PL. AK 94559"He would make a lovely corpse."        - Charles Dickens (1812-1870)
Click to view scam #129737 - Sent on June 16, 2015, 4:47 pm by loisnevn@moscowmail.com
Begin forwarded message:From: Google Notify <docsn@eastlandescrows.com>Date: 16 June 2015 17:34:31 BSTSubject: Incoming messages H Google Audrey Cooper (Gmail Service) sent you a message: 6/16/2015 Returned email message. More information Don't want occasional updates about Google activity? Change what email Google Team sends you.
Click to view scam #129739 - Sent on June 16, 2015, 4:47 pm by docsn@eastlandescrows.com
Begin forwarded message:From: "Dir. Jacqueline Sumual" <custome-r.o.ffice_filee@hotmail.com>Date: 16 June 2015 15:35:37 BSTTo: undisclosed recipients: ;Subject: 2015 SCAM VICTIM'S COMPENSATION FROM THE IMF BENINReply-To: "Dir. Jacqueline Sumual" <mr.innocentjohnson90@gmail.com><mime-attachment.html>
Begin forwarded message:From: Dianne Owen <dianne_owen@morganzilla.com>Date: 16 June 2015 15:16:04 BSTSubject: 1 New SnapF#ck Alert i just broke up with my BF and i?m feeling really lonely :( I want to h00kup now so send me msg? my username is NaughtyStar21 check out my profile here TALK S00N
Click to view scam #129734 - Sent on June 16, 2015, 4:35 pm by dianne_owen@morganzilla.com