Logo



Sent from my iPhoneBegin forwarded message:From: Paypal <Support@eng-ispvh-p3.lanxtra.net>Date: 3 May 2015 22:54:27 BSSubject: [ Paypal ] : Update your Account InfosReply-To: Support@eng-ispvh-p3.lanxtra.net ?ay?al S?pport ?lease ?pdate Your ?ccount Information . Hello ?hanks f?r ?sing ?ay?al We sent you ?his email some time ago we ask for yo??r help to res?lve an issue with your ?ay?al ?ccount. Since we haven't heard back from you and we need you to provide some ?nf?rmati?n, your ?ccount is ?emporarily ?imited: ? Some ?nformation on your ?ccount ?ppears to be missing or inc?rrect. ? ?lease ?pdate your ?ccount promptly so that you can continue . ? ?ll the benefits ?f your ?ay?al ?cc??nt. ? Validate Your ?nformation.Click ?he ?ink ?elow To ?ogin ?o your ?ccount.
Click to view scam #121980 - Sent on May 4, 2015, 1:44 pm by
Begin forwarded message:From: "EARTHLINK RDP"<adrianamendez@earthlink.net>Date: 4 May 2015 07:04:55 BSTSubject: ORIGINAL EARTHLINK RDP  NO SMTP NEEDED AND EMAILS                          http://earthlink.wc.lt/WE ARE U.A.E BASED COMPANY WE RE SELL GENUINE EARTHLINK RDP.WITH EARTHLINK RDP NO NEED FOR SMTP YOU SEND UNLIMITED EMAILS WITHOUT ANY SMTP SERVERIT SENDS DIRECT AND DELIVERS WELL WE ALREADY INSTALL AMS AND TURBO MAILER FOR YOURCONVINIENCE CHAT WITH US ON OUR WEBSITE AND BUY YOURS NOW100 PERCENT GURRANTEED AND WORKING WELLSILVER PLAN 60$  SEND 500K EMAILS PER DAY FOR ONE MONTHGOLD PLAN  70$  SEND 1MILLION  EMAILS PER DAY FOR ONE MONTHPLATINUM PLAN  80$  SEND UNLIMITED EMAILS PER DAY FOR ONE MONTH                        http://earthlink.wc.lt/WE HAVE 24 HOUR CUSTOMER CARE SUPPORT  BUY YOURS NOW ALSO WE SELL FRESH EMAILS LEADS  DEPENDING ON YOUR CAMPAIGN LIST   VISIT OUR WEBSITE AND CHAT WITH US DIRECTLY
Click to view scam #121978 - Sent on May 4, 2015, 1:41 pm by adrianamendez@earthlink.net
Attn: Dear  Your fund transfer transaction is now successful, UBA Bank has finally credited the money in your name, And to inform you that we have finally transferred the sum of $4.6 Million today to you into the new online Account that was credited for you by UBA Bank . Meanwhile you are advice to click at  (Click here to view your payment online)  And log your email and password correctly and  should in-case you log one of your email and you did not view the Online Account opened for you, Then you can try with another emails of yours with their correct passwords and you will view your transferred payment Online. And remember to forward to your inbox if you found my email on your Spam, If you left it on your spam it will not let you to click the Above link, So you must forward to your inbox OK But before you can have access to this money you are to make sure you log in correctly and that is the only way you can view your payment online, Then you can transfer your fund into your private Account. website (Click here to view your payment online) So  you are advised to go through this website and Log in with your real email address and password to confirm the transfer information, do it now and get back to us with Confirmation.E-MAIL: (unitedbank2219@inbox.lv) Yours truly, Mrs. Antonina Simcaria SpamAssassin Report (spam score: 5.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rodanpe9005[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.66 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (rodanpe9005[at]gmail.com) 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #121971 - Sent on May 4, 2015, 1:34 pm by rodanpe9005@gmail.com
Begin forwarded message:From: "Western Union Money Transfer@"<SENDER46683@earthlink.net>Date: 4 May 2015 11:49:17 BSTSubject: Your Daily Payment Of $5,500 (MTCN 3358547826 Available For Pick-Up)Reply-To: <mr_bensonwilliams001@yahoo.co.jp>Western Union Money Transfer@Email: westernunion0096@yahoo.com.hkWebsite: www.westernunion.comMotto: In God We Trust!!!+234-810-4960-563WESTERN UNION INSTALLMENT PAYMENT ONLY.Firstly, We must start by apologizing for the delay in contacting you since the change in PresidentThis email is coming to you in regards to your unpaid funds due to your lack of co-operation in the past. This organization has decided to make it known to you that the funds in your ATM has been cleared into an screw account and that you will be receiving your funds through the fastest means of money transfer in the world.Since you have not been able to claim your funds for a very long time, we have to call back your ATM CARD and make arrangement alternatively to transfer your funds instalmentally through Western Union Money Transfer here today which has been programmed to be transferred at rate of $5,500 daily since Western Union laws here does not allow transferring funds above  $5,500 at once from this country to another, but we will be sending under installment of $5,500 daily till the amount of $2.5 Million usd is completely Paid to you as the beneficiary of the ATM CARD in question.In other words, We have today transferred your first instalment payment ( $5,500) available for your pickup at any western union office nearest to you, but still placed on hold due to the unpaid endorsement & daily activation file fee amount of $150.00 that you are supposed to pay before your daily transfer will be made available to you. You will pickup the below installment at any western union office nearest to you with below information as soon as you submit the $150 endorsement & daily activation file fee. You can track your first instalment payment with the Western Union tracking number 1-800-325-6000 or through the western union global website (https:wumt.westernunion.com/asp/orderstatus.asp?country=global) so as for you to know that the money is available for pick up but will not be released to you without the file activation fee of $150 paid by you.Your Payment Details:MTCN::::::::::::::: 3358547826SENDERS NAME::::::: Roy HeathSENDERS COUNTRY:::: Lagos/ NigeriaTEXT QUESTION:::::: Who Is GreatTEXT ANSWER:::::::: GodAMOUNT::::::::::::: $5,500.00.RECEIVER:::::::::: Your NameThe endorsement & daily activation file fee of $150 should be sent to our office here in care to our accounting officer through Western Union Money Transfer nearest to you with payment information below:Receivers Name: Tade Jones.Address: #4989 gibson tower. Abuja, NigeriaAmount: $150Text Question: COLOR?Answer: YELLOW.As soon as you send the fee, send us the transfer Mtcn/Reference to enable proceed with immediate transfer activation of your first installment payment Notice: This preference is being given to you to our good name and also to make sure we get your funds completely paid to you with no complication of things or delay.Note: the Activation Fees could not be deducted from the funds in the ATM CARD as we have no access to the funds due to the Fact that it was placed in an escrew account Please submit your Activation charges with the name of our accounting officer as given to you above and get back to this office with details of your payment to proceed.To avoid complication of things, you are advise to treat this payment as urgent as possible so we can proceed with the activation of your first installment of $5,500usd so you can get it picked up today in any nearest Western Union Money Transfer outlet near you on time to avoid any internet scam hacking of the Mtcn that is given to you above.Treat As Urgent and get back to this office with receipt of your payment for fast procedures here.Thanking you for your Anticipated Co-operations.Respectfully Yours.Ms. Sarah Clayton.Payment Department
Click to view scam #121975 - Sent on May 4, 2015, 1:32 pm by SENDER46683@earthlink.net
Dearest beloved. I am Mrs Sonia Ibrahim; I was born January 20, 1960. Please accept my apologies for the inconvenience. I am suffering from lungs cancer for Eight months now, am experiences lot of pain which can lead to death. My doctor just informed me that my days are numbered and that my health is deteriorating. My marital status is such that I was a widow with no children with whom i could leave my legacy. That's why I want to grace and to help the poor, I leave my legacy that amounts to a value of ($ 950,000 Dollar) so you can use to help the poor, homeless, poor and orphan. I'd like you to send the following information: 1 - Your full name 2 - your exact address 3 - your phone number, if possible, a fax number. Finally i will send all necessary documents concerning the funds in the bank; all I want is your good faith. I count on your goodwill and especially the proper use of these funds. Thanks you could contact me as soon as possible I am between life and death. God bless. Yours Sincerely Mrs Sonia Ibrahim. SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #121974 - Sent on May 4, 2015, 1:28 pm by mrssoniaibrahim@gmail.com
Attn: Dear  Your fund transfer transaction is now successful, UBA Bank has finally credited the money in your name, And to inform you that we have finally transferred the sum of $4.6 Million today to you into the new online Account that was credited for you by UBA Bank . Meanwhile you are advice to click at  (Click here to view your payment online)  And log your email and password correctly and  should in-case you log one of your email and you did not view the Online Account opened for you, Then you can try with another emails of yours with their correct passwords and you will view your transferred payment Online. And remember to forward to your inbox if you found my email on your Spam, If you left it on your spam it will not let you to click the Above link, So you must forward to your inbox OK But before you can have access to this money you are to make sure you log in correctly and that is the only way you can view your payment online, Then you can transfer your fund into your private Account. website (Click here to view your payment online) So  you are advised to go through this website and Log in with your real email address and password to confirm the transfer information, do it now and get back to us with Confirmation.E-MAIL: (unitedbank2219@inbox.lv) Yours truly, Mrs. Antonina Simcaria SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (fatimaassad[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.196 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #121977 - Sent on May 4, 2015, 1:25 pm by fatimaassad@gmail.com
  Attention,We have deposited the check of your fund ($2.70000000USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director Mr William James via E-mail:(unionwesternoffice11121@gmail.com). He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name_______________Address: ________________Country: _____________Phone Number: _____________Though, Mr. Franklin Moore has sent $5000 in your name today so contact Mr William James or you call him +22999141402 as soon as you receive this email and tell him to give you the Mtcn, sender name andquestion/answer to pick the $5000 Please let us know as soon as you received all your fundBest Regards.WESTERN UNION AGEN SpamAssassin Report (spam score: 11.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [41.138.90.69 listed in zen.spamhaus.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.4 MONEY_FROM_41 Lots of money from Africa 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form
Click to view scam #121969 - Sent on May 4, 2015, 1:21 pm by unation@cantv.net
p { margin: 0; }Hello,This is to officially inform you that we have verified your contract file presently on my desk, and I found out that you have not received your payment due to your lack of co-operation and not fulfilling the obligations giving to you in respect to your contract payment.Secondly, you are hereby advised to stop dealing with some non-officials in the bank as this is an illegal act and will have to stop if you so wish to receive your payment After the Board of directors' meeting held in Cotonou, Benin Republic, we have resolved in finding a solution to your problem.We have arranged your payment through our ATM CARD PAYMENT CENTRE in Europe, America, Africa and Asia Pacific, This is part of an instruction/mandate passed by the Senate in respect to overseas contract payment and debt  re-scheduling.We will send you an ATM CARD which you will use to withdraw your money via ATM MACHINE in any part of the world, and the maximum daily limit is Ten Thousand United States Dollars ($10,000.00) per day. And the total sum approved in your name is Five Million United States Dollars {$5,000,000.00}.If you desire to receive your fund before final confiscation, kindly re-confirm your :(1) Your Full Name:(2) Full residential address:(3) Phone and Fax Number:You will find below my personal email address Contact Person: Mr. Franklin David.Email: ( mr.franklindavid@gmail.com)We shall be expecting to receive your information as you have to stop any further communication with anybody or officer claiming to be in charge.Thanks for your co-operation.BEST REGARDS,Mr. Franklin DavidSpamAssassin Report (spam score: 2.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.53 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.9 MIME_NO_TEXT No (properly identified) text body parts
----- Forwarded Message ----- From: Scarlett <scarlett9bj1j8a@yzw5w.bandous.com> To: myst.weaver@yahoo.com Sent: Monday, 4 May 2015, 12:42 Subject: I'm alone this weekend...care to join me? It's no fun being alone...unless it's with you! Let's hook up now. I'm so horny I can barely keep my clothes on! Message me here and let me know when you want to hook up... Scarlett
----- Forwarded Message ----- From: Kim BBW Personal Affairs PromosPartner <bbwuai9j1la9u0@6ch1p.athmaker.com> To: myst.weaver@yahoo.com Sent: Monday, 4 May 2015, 12:51 Subject: These sexy BBWs are in your area... Sexy Local BBWs... Looking for sexual men in your area... Hookup with big beatiful women in your area... See Recent Selfies of These BBWs There are hundreds of BBWs waiting for someone like you. Once you join you could be receiving messages from new women everyday. Please make sure you are ready to meet them so you don't waste their time. #yiv5394105130 #yiv5394105130submit {background-color:#ccc;color:#fff;font-family:'Oswald';font-size:20px;text-decoration:none;cursor:pointer;border:none;}#yiv5394105130 #yiv5394105130submit:hover {border:none;background:red;} To not receive this message again please visit this page or write to: Plymouth Associates Ltd. Heywood House South Hill, Anguilla
  ttention My DearWe have deposited the check of your fund ($5.70000000USD)through Western Union department after our final meetingregarding your fund,All you will do is to contact WesternUnion director Mr Ijeoma Peter,He will give you direction on howyou will be receiving the fundsdaily.Remember to send himyour Full information to avoid wrong transfer such as,Receiver's Name____Address: __________Country: __________Phone Number: _____Though, Mr.Ijeoma Peter has sent $5000 in your name todaySenders so contact Mr Ijeoma Peter or you call him +22968656244as soon as you receive this email and tell him to give youthe Mtcn, sender name and question/answer to pick the $5000Please let us know as soon as you received all your fund,RegardsKERRY JOHNSO SpamAssassin Report (spam score: 10.7) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.175 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (unionw622[at]yahoo.com ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.4 MONEY_FROM_41 Lots of money from Africa 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form
Click to view scam #121962 - Sent on May 4, 2015, 12:57 pm by mikemosese@cantv.net
-----Original Message----- From: raj <raj@hermitagency.com> To: genspanky <genspanky@aol.com> Sent: Mon, May 4, 2015 1:40 am Subject: We Can Remove Ripo ffReport Search Results #AOLMsgPart_2_ab6fe387-2067-448b-b55d-300e2bb70924 td{color: black;} @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:"Calibri Light"; panose-1:2 15 3 2 2 2 4 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} .aolReplacedBody p.MsoNormal,.aolReplacedBody li.MsoNormal,.aolReplacedBody div.MsoNormal {margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";} .aolReplacedBody a:link,.aolReplacedBody span.MsoHyperlink {mso-style-priority:99; color:blue; text-decoration:underline;} .aolReplacedBody a:visited,.aolReplacedBody span.MsoHyperlinkFollowed {mso-style-priority:99; color:#954F72; text-decoration:underline;} .aolReplacedBody p.MsoNoSpacing,.aolReplacedBody li.MsoNoSpacing,.aolReplacedBody div.MsoNoSpacing {mso-style-priority:1; margin:0in; margin-bottom:.0001pt; font-size:12.0pt; font-family:"Times New Roman","serif";} .aolReplacedBody .MsoChpDefault {mso-style-type:export-only; font-family:"Calibri","sans-serif";} .aolReplacedBody .MsoPapDefault {mso-style-type:export-only; margin-bottom:8.0pt; line-height:107%;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} .aolReplacedBody div.WordSection1 {page:WordSection1;} Hi, We have seen that Google is showing Rip-off Report search results against you. If you have noticed some downfall in your business recently, this could be the reason. Would you want to fix this issue? If yes, we can help you with this. Who We Are: ?        ISO 9001:2008 Certified Reputation Management Company in India ?        Helped more than 200 clients successfully ?          ?        Got a bunch of recommendation letters ?        The time others NEED to show you working results, we need THAT TIME to FINISH your Project. ?        Just in 7 days, you will be seeing plenty of positive results in top 20 positions of Google ?        Wallet-Friendly Service ?        Many celebrities, politicos & business professionals adorn the list of our clients.   If our service appeals you, please get back to me so that I can forward your query to our expert team.  Thanks & Regards. Raj raj@hermitagency.com
Click to view scam #121967 - Sent on May 4, 2015, 12:56 pm by raj@hermitagency.com
 Attention: Valuable Card Owner,This is to acknowledge the receipt of your email sent to this bank, in respect with the provision act of degree 114 of the 1999 constitution; this bank directed to inform you that your ATM CARD verification and confirmations has been Approved. Therefore, we are happy to inform you that arrangement is in progress to affect your ATM card as soon as possible and in our bid to transparency. We just concluded a meeting with the entire staffs and director?s at this conclusion we had to contact you right away. Following your swift response to our letter today, we had to write you this Letter in other to fully enlighten you on the accurate step to take, for you to gain full possession of this is our pleasure to inform you that ATM Card Number: 4278763100030014 has been approved in your NAMES. Your Personal Identification Number is 2900. The ATM Card Value is seven hundred thousand dollars {$700, 000, 00} only. You are advised that a maximum withdrawal value of ¨$4,500.00 is permitted on withdrawal per Day and we are duly Inter Switch and you can make withdrawal in any ATM Centre of your choice. The ATM offers a convenient secure and widely acceptable. At the ATM you can do the Following.CASH WITHDRAWAL:BALANCE ENQUIRY:PIN CHANGE:MINI STATEMENT(LAST 10 TRANSACTIONS)*FUNDS TRANSFER (BETWEEN CARD HOLDERS)BILL PAYMENTAIRTIME PURCHASE we have securely sealed and package you?re ATM-CARD for security reason which makes it impossible for any one to view it, until it?s been deliver to you upon option of delivery chosen by you to be fully insured by Nicon Insurance Corporation upon payment confirmation of your delivery charges. You are requested to choose from the options listed below your choice and cost of delivery. To enable us dispatch your parcel there is different express channels for delivery system kindly see below for the charges required to pay including tax fee added and it is most convenient to you and the total deivery charges is $66 only which is the first and the last payment amd make the payment via Western Union Money Transfer as stated stated below: 1,Receiver Name: Chibikem Okechukwu2,Country: Benin Republic3,City: Cotonou4,Amount: $665,Question: Color,6,Answer: Green7 MTCN  ?CONFIRM YOUR DELIVERY ADDRESS BELOW AND LET US KNOW IF THERE IS ANY CHANGES :RECEIVERS NAME:DELIVERY ADDRESS:COUNTRY:DELIVERY OPTION: PAYMENT TERMS: We do not accept cash upon delivery (COD) proposal for such package Air sure charge for onward delivery must be paid through our choice of service to our office as instructed within a period of five working days after the receipt of this mail, do make urgent contact with me upon receipt of this mail on the option you have chosen so as to provide you with the payments details required to forward the above stated Cost of delivery please note. NOTE: Your prize is protected by a hard cover insurance policy, which makes it impossible to deduct any amount from the money before it can be remitted and delivered to you. This means that the above charges cannot be deducted from the ATM-CARD and hence must be provided by you because the fund belongs to you, before your prize is delivering to you. This is in accordance with section (999) of the national act as adopted in 1993 and amended on 3rd July 2002 by the constitutional assembly. This is to protect the fund and to avoid misappropriation of CARD.Please be informed that delivery will be made to your address in maximum 72 hours (3 working days) after our confirmation of this payment for delivery, as you know that the delivery fee receipt will be attach on your payment delivery documents to avoid being delayed by customs. Send your response to us immediately to indicate your option within the next 24hrs, because you only have 7 days to claim this ATM CARD and after this period, your CARD will be deemed to have been forfeited by you...Do get back to us with the Option that best suit you so that we can provide you information to make the payment as soon as possible.  NOTE: NO DEDUCTION OF THE FEE, IF ASKED BY BENEFICIARY, YOU WILL RECEIVE NO FURTHER CORRESPONDENCE FROM OUR DESK IF YOU REQUEST FOR DEDUCTION YOU STAND TO FORFEIT YOUR TRANSFER IF DEDUCTION IS BEEN ASKED BECAUSE YOU HAVE BEEN TOLD THAT DEDUCTION IS NOT POSSIBLE. IN THIS VAIN, YOU HAVE BEEN ADVISED TO SELECT FROM THE OPTIONS OF DELIVERY AND RESPOND BACK FOR FURTHER INSTRUCTIONS ON HOW PAYMENT OF FEE SHOULD BE EFFECTED FROM YOUR HOME.  Treat very urgently as we also remind you that your ATM Card is ready for disbursement..Congratulations.??????..Confidentiality Note:This email and any attachment to it is confidential and protected by law and intended for the use of the individual(s) or entity named on the email. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination or distribution of this communication is prohibited. If you have received this communication in error, please notify the sender via return email and delete it completely from your email system... If you have printed a copy of the email, please destroy it immediately. Thank you.SincerelyDIRECTOR OF ATM PAYMENTUBA BANK PHILLIPS ODUOZA    SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (department518[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (uba bank ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (department518[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #121959 - Sent on May 4, 2015, 12:54 pm by department518@gmail.com
Are you financially down Are you in need of a personal or business? Apply for a personal or business loan at 4% interest rate, contact us today for more information if interested in our offer. Contact: ( eastonfinanciaries@hotmail.com ) for more information to proceed. Best Regards Mr. Saint Easton
Click to view scam #121963 - Sent on May 4, 2015, 12:52 pm by eastonfinanciaries@hotmail.com
THE DESK OF DR.ALBERT BENSON DIRECTOR OF FOREIGN OPERATION AND REMITTANCE UBA UNITED BANK FOR AFRICA? 55 BP 991 COTONOU ,BENIN REPUBLIC. Tel: +229 66306806 Bank Of Africa 55 BP 991 COTONOU ,BENIN REPUBLIC. Tel: +229 66306806 Email: injusticewetrust@outlook.com website/ http://ubabankbenin.bg.tf/ Contact Person. Alex Benson URGENT NOTIFICATION FROM UBA BANK/ BENEFICIARY MY NAME IS DR.ALBERT BENSON THE DIRECTOR OF FOREIGN REMITTANCE UBA UNITED BANK FOR AFRICA BENIN COTONOU WEST AFRICA REGION.THIS IS TO INFORM YOU HAVE BEEN MADE A FOREIGN BUSINESS PARTNER BY ONE LATE MRS ANITA KUMAR WHO DEPOSITED THE TOTAL SUM OF $12.5 MILLION DOLLARS WITH OUR BANK ON YOUR BEHALF. MRS ANITA KUMAR IS 91 YEARS OLD WHO DIE LAST WEEK SATURDAY AS I RESULT OF CANCER AND HAVE NO CHILD. NO FAMILY. SO SHE HAS ALREADY IDENTIFY YOU AS HER FOREIGN BENEFICIARY TO USE HER FUNDS IN CHARITABLE DONATION. This is to Inform you that we have a Very Complicated Issue Right Now because Somebody Call JOHN HOWARD DAY call Us With this Number8668623100 to inform Us that we have an Accident and has Been Admitted In Coma in the Hospital that you have Instructed Him to Claim Your Funds of $12. Million Dollars With Our Bank on your Behalf. JOHN HOWARD DAY Told us that you have Instruct Him to Claim your Funds to His Home Address Below 3661 West OAKLAND PARK BLVD LAUDER DALE LAKES, FL 33311 USA because He is your Next of Kin that you have Instructed Him to Claim your Properties Including your Funds with Us. Below is the Contact Information Mr.JOHN HOWARD DAY Submitted to Us. BANK NAME: BANK OF AMERICA ADDRESS: 3661 West OAKLAND PARK BLVD LAUDER DALE LAKES, FL 33311 ACCOUNT NAME: JOHN HOWARD DAY ACCOUNT NUMBER: 229004083312 SWIFT CODE: BOANTUS33 ABA ROUTING NUMBER: 063100277 Please Let Us Know What is Going On. Should We Go Ahead and Release Your Inheritance Funds to Him. Let Us Know THE DESK OF DR.ALBERT BENSON DIRECTOR OF FOREIGN OPERATION AND REMITTANCE UBA UNITED BANK FOR AFRICA? 55 BP 991 COTONOU ,BENIN REPUBLIC. Tel: +229 66306806 Bank Of Africa 55 BP 991 COTONOU ,BENIN REPUBLIC. Tel: +229 66306806 Email: injusticewetrust@outlook.com website/ http://ubabankbenin.bg.tf/ Contact Person. Alex Benson b SpamAssassin Report (spam score: 23.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [222.146.51.141 listed in zen.spamhaus.org] 0.0 URIBL_DBL_ABUSE_REDIR Contains an abused redirector URL listed in the DBL blocklist [URIs: ubabankbenin.bg.tf] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 1.5 BILLION_DOLLARS BODY: Talks about lots of money 3.8 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 TVD_RCVD_SPACE_BRACKET TVD_RCVD_SPACE_BRACKET 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.0 LOTS_OF_MONEY Huge... sums of money 3.0 YOU_INHERIT Discussing your inheritance 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.4 MONEY_FROM_41 Lots of money from Africa 0.0 LOTTO_DEPT Claims Department 0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #121964 - Sent on May 4, 2015, 12:49 pm by abk002@basil.ocn.ne.jp
 Attention My DearI have registered your winning Price of $2.5USD with Fedex Express Company with registration code of ( DCJKT00617G). please Contact with your delivery information such as, Your Name, Your Address ID CARD COPY and Your Telephone Number:Fedex Express Company Office:Contact Person: Jordan MillarE-mail: wulach.laura@aol.comPHONE: NO+229-68520210I have paid for the Insurance & Delivery fee.The only fee you have to pay is their Security fee only.Please indicate the registration Number and ask Him how much is their Security fee so that you can pay it.Best Regards,Mrs. Wulach laura.aSpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.9 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header
Click to view scam #121955 - Sent on May 4, 2015, 12:33 pm by robertwf@naver.com
My name is Miss Roselyne William , a Usa origin and a resident of UnitedKingdom.I came across your contact after searching for an investment opportunity inyour business line, and I am writing to you to see if I can form aformidable partnership with you to be able to invest in your country asforeign investor.I am prepared to invest in your business line or in any lucrative businessthat you can recommend for our benefit.I am willing to follow any of your professional advice to make it a success.Please feel free to contact me on my for an onward discussion of the wayforward. Thanks for reading my letter and I wait for your anticipatedcooperation.(16.5million Euro)Yours SincerelyRoselyneContact through my private mail below for more detailsroselynewilliam45@gmail.comSpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (roselyne8[at]yeah.net) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yeah.net] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 1.9 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121961 - Sent on May 4, 2015, 12:32 pm by roselyne8@yeah.net
Dearest One. My only brother died in Madrid on august 2011 in the Madrid plane crash. I need your urgent assistance to transfer the sum of $42M {forty two million United States dollars} out of Thailand immediately before it is late. I am Miss Stephanie klinjampee Wannasathit the first daughter of Mr. Chitchai Wannasathit of Ubon, Ratchathani Province in Thailand.  My father was the Deputy Prime Minister in charge of national security before the 2006 military coup that ousted Prime Minister Thaksin Shinawatra..Unfortunately my father was arrested after the coup and detained at the Army Command.My father was later charged with mismanagement and embezzlement of public funds and was jailed this July to 16 years in prison.  I am allowed to visit him once every month because he was divorced with my mother.Your name and email address are among the list of names my father gave me yesterday when I visited him in detention.    My father deposited the money in my brother?s name that died on august 20th in the Madrid plane crash. I am the next of kin to my brother and heir to this account.  My father instructed me yesterday to distribute the money into different accounts of trusted friends and associates as he is going to be inside for some years. The recent political uprising in Thailand might make the army to come back to power and freeze the money which is in an escrow account in Kasikorn bank plc Bangkok.   I will like to know how much you can deposit for us in your account. My father has instructed me to give you 30% of any money you deposit safely for us.I will come over to your country to retransfer my father?s share to another account.  Let me stop here until I hear from you Let honesty be our watch word throughout this transaction and I will appreciate if you always keep my identity a top secret.I am waiting for your mail.Yours truly,Stephanie WannasathitEmail: stephaniewannasathit@outlook.com SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (merriammary2[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.9 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121954 - Sent on May 4, 2015, 12:25 pm by merriammary2@gmail.com
Advert
 Love & Light, KatrinaYou can see my books at Website ----- Forwarded Message ----- From: Crystal BBW Personal Affairs AdsPartner <crysbbwojaloi1j09@p8upw.arseilly.com> To: myst.weaver@yahoo.com Sent: Monday, 4 May 2015, 11:33 Subject: Local BBWs looking to sleep around View Profiles of local BBWs in your area looking to hook up with new men this week Take a minute to check out all of the SEXY profiles of local BBWs in your area that you can meet in person for an intimate date! See Local BBWs Here! There are thousands of BBWs in your city that are looking to meet new people for one night stands. These BBWs are beautiful, fun, and extremely sexy! Remember, some of these BBWs are married, and some are not! So either way, you are going to have a GREAT time dating and sleeping with these ladies. #yiv1359647414 #yiv1359647414submit {background-color:#ccc;color:#fff;font-family:'Oswald';font-size:20px;text-decoration:none;cursor:pointer;border:none;}#yiv1359647414 #yiv1359647414submit:hover {border:none;background:red;} To not receive this message again please visit this page or write to: Plymouth Associates Ltd. Heywood House South Hill, Anguilla
----- Forwarded Message ----- From: BeachBunny19 <beachbunny19chy@hn5fj.presembler.com> To: myst.weaver@yahoo.com Sent: Monday, 4 May 2015, 11:38 Subject: Strip search...me ;) I'm sooooo bored! Just me and my webcam... Want to see? Let's Chat! Message me if you're around. X0X0
My name is Miss Roselyne William , a Usa origin and a resident of UnitedKingdom.I came across your contact after searching for an investment opportunity inyour business line, and I am writing to you to see if I can form aformidable partnership with you to be able to invest in your country asforeign investor.I am prepared to invest in your business line or in any lucrative businessthat you can recommend for our benefit.I am willing to follow any of your professional advice to make it a success.Please feel free to contact me on my for an onward discussion of the wayforward. Thanks for reading my letter and I wait for your anticipatedcooperation.(16.5million Euro)Yours SincerelyRoselyneContact through my private mail below for more detailsroselynewilliam45@gmail.com SpamAssassin Report (spam score: 8.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.47 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yeah.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (roselyne6[at]yeah.net) 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 1.9 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121948 - Sent on May 4, 2015, 12:04 pm by roselyne6@yeah.net
From: baselkabore@latinmail.comTo: mrbaselkabore@gmail.comCC: Date: Mon, 4 May 2015 04:37:05 -0600Subject: HELLO DEARAs you are not a nationality of my country; I have a business proposal for you, and it will be for the mutual benefit of the both of us
Click to view scam #121945 - Sent on May 4, 2015, 11:54 am by baselkabore@latinmail.com
Date: Mon, 4 May 2015 06:39:35 -0400From: arant.47@aol.comSubject: YOUR PAYMENTI never forget you    How are you with your family? I hope fine. I'mhappy to inform you about my success in getting those funds from BOA (Bank of Africa ) transferred under the cooperation of a new partner fromVenezuela, Presently i'm in Venezuela, meanwhile I didn't forget your past efforts to assist me in transferring those funds despite that it failed us some how.Now contact my secretary in Burkina-Faso West Africa through her e-mail id (stephanie.faug1@yahoo.com) ask her to send you the A.T.M worths sum of ($850,000.00 US Dollars) which I kept for your compensation for all the past efforts and attempts to assist me in this transaction.so feel free and get in touch with my secretary Mrs.Stephanie Faug she will send the A.T.M to you.Regards,Mr Falamou Arant.
Click to view scam #121952 - Sent on May 4, 2015, 11:53 am by arant.47@aol.com
Dear Friend, My name is Mr. Juan Ericsson,I am from South Kensington, London UK. I have been diagnosed with Esophageal cancer. It has defied all forms of medical treatment, and right now I have only about a few months to live, according to medical experts. I have not particularly lived my life so well, as I never really cared for anyone (not even myself) but my business. though I am very rich, I was never generous, I was always hostile to people and only focused on my business as that was the only thing I cared for. But now I regret all this as I now know that here is more to life than just wanting to have or make all the money in the world. I believe when God gives me a second chance to come to this world I would live my life a different way from how I have lived it. Now that God has called me, I have willed and given most of my property and assets to my immediate and extended family members as well as few close friends. I want God to be merciful to me and accept my soul so, I have decided to give aims to charity organizations, as I want this to be one of the last good deeds I do on earth. Now that my health has deteriorated so badly, I cannot do this myself anymore. I once asked members of my family to close one of my accounts and distribute the money which I have there to charity organization in Haiti, Sri Lanka, Syria and Pakistan, they refused and kept the money to themselves. Hence, I do not trust them anymore, as they seem not to be contended with what I have left for them. The last of my money which no one knows of is the huge cash deposit of Nine Million Pounds (£9,000,000,00) that I deposited in BGFI BANK in Republic of Benin where i have company. I would want you to help me collect this deposit and dispatch it to charity organizations. Kindly note that 35% of this funds must go to the Republic of Nepal earthquake victims because they are urgently in need of help, 45% to other Charity Organization and 20% for your effort and time. I am using my Laptop Computer to communicate with you from the hospital. You should respond to back to me if you are interested in carrying out this assignment on my behalf. God be with you. Mr. Juan SpamAssassin Report (spam score: 3.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (goziemac[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.54 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 1.1 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Click to view scam #121953 - Sent on May 4, 2015, 11:34 am by goziemac@gmail.com
  Vi har oppdaget noe uvanlig om nettkonto . For et bevis på eierskap, Vennlige Klikk HER og bekrefte kontoen for sikkerhet. Unnlatelse av å etterkomme indikere en inntrenger, av sikkerhetsmessige årsaker vi kan ha til å stenge kontoen din permanent. Microsoft Helpdesk Admin.
Click to view scam #121944 - Sent on May 4, 2015, 11:33 am by
SpamAssassin Report (spam score: 24.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 NSL_RCVD_HELO_USER Received from HELO User -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date 1.2 MISSING_HEADERS Missing To: header 0.2 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 3.9 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 1.9 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header
Click to view scam #121947 - Sent on May 4, 2015, 11:31 am by info@orange.pl
  Attention,We have deposited the check of your fund ($2.50000000USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director Pastor Emmanuel Scoan via E-mail(wes_uin_trans_offic@outlook.com ) He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name_______________Address: ________________Country: _____________Phone Number: _____________Though, Mr DAVID KECK has sent $5000 in your name today so contact Pastor Emmanuel Scoan call him +22968103973 as soon as you receive this email and tell him to give you the Mtcn, sender name andquestion/answer to pick the $5000 Please let us know as soon as you received all your fund,Best Regards.WESTERN UNION AGENT SpamAssassin Report (spam score: 9.2) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.4 MONEY_FROM_41 Lots of money from Africa 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form
Click to view scam #121938 - Sent on May 4, 2015, 11:26 am by joyeze@cantv.net
Begin forwarded message:From: Grosvenor Casinos <no-reply@grosvenorcasinos.com>Date: 4 May 2015 03:49:37 Subject: Win this evening - Massive bonuses Grosvenor Casinos   GrosvenorCasinos.com Join GrosvenorCasinos.com today to receive a £20 matched deposit bonus, PLUS get up to £500 cashback on your first months play. Licenced and regulated by The UK Gambling Commission for UK customers playing on our online sites or at our land based casinos/bingo clubs. Licenced by The Alderney Gambling Control Commission for non-UK customers playing at our online sites. Know your limits. Please play Responsibly. Grosvenor Casinos and the Grosvenor Casinos logo are registered trade marks of the Rank leisure Holdings Ltd. All rights reserved. Please visit www.gambleaware.co.uk for advice. It?s more fun if you play responsibly. For more help & information visit. www.keepitfun.rank.com unsubscribe
Click to view scam #121943 - Sent on May 4, 2015, 11:12 am by no-reply@grosvenorcasinos.com
Begin forwarded message:From: Attt Ayyy <swiss231@gmail.com>Date: 4 May 2015 09:45:50 BSTTo: undisclosed-recipients:;Subject: Mrs. Swiss BarronsonMy name is Mrs. Swiss Barronson, I did not forget your past effort bytrying to help me,now I want to tell you that i have succeeded in getting my fundstransferred under the co-operation of a new partner from Paraguay.MY FUND HAVE BEING APPROVED AND TRANSFERRED TO MY FRIEND ACCOUNT INPARAGUAY I AM GOING TO PARAGUAY TODAY BY THE FIRST FLIGHT BY AIRFRANCE.I DIDN'T FORGET YOUR PAST EFFORT IN HELPING ME DUE TO ONE REASON ORTHE OTHER WE DIDN'T CONCLUDE IT.FOR YOUR INFORMATION I WROTE AN INTERNATIONAL CERTIFIED BANK DRAFT ON YOURNAME TO THANK YOU FOR TRYING TO ASSIST ME /I WROTE A DRAFT OF 900,000USD/ NINE HUNDRED THOUSAND USD ON YOUR NAME.I WILL NOT CONTACT YOU FOR A LONG TIME DUE TO BUSY SCHEDULES OF INVESTMENT.KINDLY CONTACT  REV FATHER HE KNOW HOW TO SEND THE DRAFT TO YOU.Rev Father Larry Zongo post Email: church.pobox323@yahoo.frTele +226 62 43 60 32.NOTE:Rev Father Larry Zongo don't know what is inside the sealenvelope,you must not let him know that such amount is in the sealedenvelope.
Click to view scam #121936 - Sent on May 4, 2015, 11:11 am by swiss231@gmail.com
My Dear In The Lord,I am Mrs. Andrea Nadia Zaid?, from France, I am married to Mr. Hassan Zaid, who worked with our France Embassy here in Benin Republic in West Africa, for nine years he unfortunately died in this recent war out break in Benin Republic. He was a victim of the rebel's attack in his office. We were married for eleven years without a child.When my late husband was alive he deposited the sum of Four Million, Five hundred thousand United State Dollars. USD ($4.500,000. 00) In a Bank here Benin Republic. Presently, this money is still with the Bank. Recently, My Doctor told me that I would not last for the next Eight months due to my cancer problem. Having known my condition (cancer of the lever and stroke) I am 52 years Old Woman.I decided to donate this fund to an faithful person that will utilize this fund the way I am going to instruct herein. I want somebody that will use this fund according to my Late husbands dream to help the orphanages, widows,propagating the good news of God and to buds the house of God is maintained and to help less-privileged people in our World.The word of God made us to know that Blessed is the hand that give. I took this decision because I don't have any child that will inherit this money and my husband relatives are not God fearing people I don't want my husband's efforts to be used against his will.I don't want in away where this money will be used in an ungodly way. This is why I am taking this decision to hand you over this Fund. I am not afraid of death hence I know where I am going. I know that I am going to be in the hand of God, because he says in the in his word that he is going to fight my battle and I shall hold my peace.I don't need any telephone communication in this regards because of my health hence the presence of my husband relatives around me always.I want you and your Family always pray for me.My happiness is that I lived a life of a worthy . Whoever that Wants to serve God must serve him in spirit and Truth. Please always be prayerful all through your life.Write back as soon as possible, Any delay in your reply will give me room in sourcing another person for this the same purpose. Please assure me that you will act accordingly as I Stated hereWrite back as soon as possible, Any delay in your reply will give me room in sourcing another person for this the same purpose. Please assure me that you will act accordingly as I Stated here .Hoping to receive your Urgent and Positive repose Yours Sister .Mr's. Andrea Nadia Zaid Get your own FREE website, FREE domain & FREE mobile app with Company email.  Know More >SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.169 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (nadia.zaid1[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (nadia.zaid1[at]hotmail.com ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121933 - Sent on May 4, 2015, 11:10 am by nadia.zaid1@hotmail.com
re
I an Mrs.Amal Almonte, Crown wife of the late Mr. Juan Almonte. I have a will proposal $ 10.7Million USD dollars for you. Please contact me for more details: amalalmonte1@msn.com Connection, Ms.Amal Almonte SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] 2.5 MILLION_USD BODY: Talks about millions of dollars 2.6 HK_SCAM_N1 BODY: HK_SCAM_N1 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #121931 - Sent on May 4, 2015, 10:54 am by nancy.wong@oracle.com
----- Forwarded Message ----- From: Judy BBW Personal Affairs AdPartner <bvbni9j1la9u0@wmd5v.holkhon.com> To: myst.weaver@yahoo.com Sent: Monday, 4 May 2015, 10:45 Subject: Pretty BBW women will share dirty pics Adults Only: BBW Nude Selfie Alert! Big, beautiful women in your city are sharing nude pics with men they want to date... They are great lovers. You must be 18 years of age or older to meet these women and view the site. See BBWs Near You Access nude profiles right now! #yiv0548481114 #yiv0548481114submit {background-color:#ccc;color:#fff;font-family:'Oswald';font-size:20px;text-decoration:none;cursor:pointer;border:none;}#yiv0548481114 #yiv0548481114submit:hover {border:none;background:red;} To not receive this message again please visit this page or write to: Plymouth Associates Ltd. Heywood House South Hill, Anguilla
Click to view scam #121932 - Sent on May 4, 2015, 10:51 am by bvbni9j1la9u0@wmd5v.holkhon.com
  We've detected something unusual about your web account. For a proof of ownership,Kindly Click HERE and VERIFY your account for  security. Failure to comply indicate an intruder, for security reasons we may have to close your account permanently. Microsoft Helpdesk Admin.
Click to view scam #121930 - Sent on May 4, 2015, 10:47 am by
  Attention,We have deposited the check of your fund ($3.800000E00USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director DR Edward via E-mail:(edwardkong20014@yahoo.fr) .He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name_______________Address: ________________Country: _____________Phone Number: _____________Though, Mrs .Mary Nduba has sent $5000 in your name today so contact DR Anthony or you call him +229-99940021as soon as you receive this email and tell him to give you the Mtcn, sender name andquestion/answer to pick the $5000 Please let us know as soon as you received all your fund,Best Regards.WESTERN UNION AGENT SpamAssassin Report (spam score: 10.7) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.172 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.fr] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (edwardkong20014[at]yahoo.fr ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.4 MONEY_FROM_41 Lots of money from Africa 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form
Click to view scam #121929 - Sent on May 4, 2015, 10:36 am by petercmisomr@cantv.net
κερδ?σατε εννιακ?σιες χιλι?δες δολ?ρια απ? τη Microsoft, στε?λετε το ?νομ? σας, τη χ?ρα και τηλ   SpamAssassin Report (spam score: 1.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121927 - Sent on May 4, 2015, 10:08 am by moraes@ufpa.br
Advert
Read attached message to collect payment.SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121926 - Sent on May 4, 2015, 10:06 am by mariangelm90@cantv.net
> From: BILLGATES10374@BG.COM> Subject: $5 MILLION USD DONATION FROM MR BILL GATES> Date: Sun, 3 May 2015 08:56:12 -0700> > Greetings to You> > You have been gifted $5 MILLION USD From Mr Bill Gates. Contact me at this email for your claim: donation2015@qq.com> > > I hope this information meet you well as I know you will be curious to know why/how I selected you to receive a sum of $5,000,000,00 USD, our information below is 100% legitimate, please see the link below:> > http://www.cnet.com/news/bill-and-melinda-gates-top-forbes-list-as-most-philanthropic-americans/> > I BILL GATES and my wife decided to donate the sum of $5,000,000,00 USD to you as part of our charity project to improve the 10 lucky individuals all over the world > from our $65 Billion Usd I and My Wife Mapped out to help people. We prayed and searched over the internet for assistance and i saw your profile on Microsoft email owners list and picked you. Melinda my wife and i have decided to make sure this is put on the internet for the world to see. as you could see from the webpage above,am not getting any younger and you can imagine having no much time to live. although am a Billionaire investor and we have helped some charity organizations from> our Fund.You see after taken care of the needs of our immediate family members, Before we die we decided to donate the remaining of our Billions to other individuals around the world in need, the local fire department, the red cross, Haiti, hospitals in truro where Melinda underwent her cancer treatment, and some other organizations in Asia and Europe that fight cancer, alzheimer's and diabetes and the bulk of the funds deposited with our payout bank of this charity donation. we have kept just 30% of the entire sum to our self for the remaining days because i am no longer strong am sick and am writing you from hospital computer.and me and my wife will be traveling to> Germany for Treatment.> > To facilitate the payment process of the funds ($5,000,000.00 USD) which have been donated solely to you, you are to send us> > your full names.................> your contact address................> your personal telephone number...............> > so that i can forward your payment information to you immediately. I am hoping that you will be able to use the money wisely and judiciously over there in your City. please you have to do your part to also alleviate the level of poverty in your region, help as many you can help once you have this money in your personal account because that is the only objective of donating this money to you in the first place.> > > Thank you for accepting our offer, we are indeed grateful You Can Google my name for more information: Mr Bill Gates or Bill & Melinda Gates Foundation> > God bless you> > Regards Mr Bill Gates>
Click to view scam #121922 - Sent on May 4, 2015, 10:04 am by BILLGATES10374@BG.COM
Return-path: <anntiran+caf_=anntiran=polka.co.za@gmail.com>Envelope-to: anntiran@polka.co.zaDelivery-date: Mon, 04 May 2015 07:07:38 +0200Received: from cpt-prewall-02.mweb.co.za ([196.28.150.152]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from <anntiran+caf_=anntiran=polka.co.za@gmail.com>) id 1Yp8bS-0008CU-Gu for anntiran@polka.co.za; Mon, 04 May 2015 07:07:38 +0200Received: from cpt-viruswall-03.mweb.co.za ([196.28.149.23] helo=cpt-mx-04.mweb.co.za) by cpt-prewall-02.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from <anntiran+caf_=anntiran=polka.co.za@gmail.com>) id 1Yp8bS-000IKQ-Cd for anntiran@polka.co.za; Mon, 04 May 2015 07:07:38 +0200Received: from cpt-mx-04.mweb.co.za (cpt-mx-04.mweb.co.za [196.28.149.154]) by cpt-viruswall-03.mweb.co.za (esets_smtp); Mon, 04 May 2015 07:07:38 +0200Received: from mail-qk0-f179.google.com ([209.85.220.179]) by cpt-mx-04.mweb.co.za with esmtp (Exim 4.84) id 1Yp8bN-000EdN-Dv for <anntiran@polka.co.za>; Mon, 04 May 2015 07:07:38 +0200Received: by qkhg7 with SMTP id g7so78983558qkh.2        for <anntiran@polka.co.za>; Sun, 03 May 2015 22:07:32 -0700 (PDT)X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;        d=1e100.net; s=20130820;        h=x-original-authentication-results:delivered-to:message-id:to         :subject:from:mime-version:content-type:date;        bh=vZofVYI1vcyxQCUX4zqbM6Fblk44TMrpBFjmAfStlgw=;        b=mbe6YxJgT4Ge/6ZyHYlg/u3kIYU0HfhAwO7k7gYxIHEi3YI+hjTT01x0yIIXsXqOnz         Mzc5grTWQeKKEkjVTRNwr6qiQlFZy7p3jKT4bq7V2iQNKaA38pk++r2FhVemCkTfFpoU         T+yKAyBLu+4bjg7jxTDgXwESqvRqiQFNrrM0aPpziOyS86viDKD/8nghTZ1fN8Ucbhus         axkxVFppbMN2+S6HmahZbr+6/O2hDN1OSeiYQPxKCPDe3xW1DcRdkySQD0tNj5WJ5cGA         26KTg61lOm+xdSrCAuJIOh3U7DXJ+Gf7MupuF4Za4b7okklLsf06l8qs4iN3peCH8mAC         DoTA==X-Original-Authentication-Results: mx.google.com;       spf=none (google.com: filing@cbc.returns.com does not designate permitted sender hosts) smtp.mail=filing@cbc.returns.comX-Received: by 10.140.144.12 with SMTP id 12mr25887520qhq.72.1430716052200;        Sun, 03 May 2015 22:07:32 -0700 (PDT)X-Forwarded-To: anntiran@polka.co.zaX-Forwarded-For: anntiran@gmail.com anntiran@polka.co.zaDelivered-To: anntiran@gmail.comReceived: by 10.140.174.86 with SMTP id u83csp1429584qhu;        Sun, 3 May 2015 22:07:31 -0700 (PDT)X-Received: by 10.55.43.83 with SMTP id r80mr41589387qkh.80.1430716051648;        Sun, 03 May 2015 22:07:31 -0700 (PDT)Received: from smtp-web144.uni5.net (smtp-web144.uni5.net. [189.38.93.144])        by mx.google.com with ESMTP id e81si33695772qhc.130.2015.05.03.22.07.31        for <anntiran@gmail.com>;        Sun, 03 May 2015 22:07:31 -0700 (PDT)Received-SPF: none (google.com: filing@cbc.returns.com does not designate permitted sender hosts) client-ip=189.38.93.144;Authentication-Results: mx.google.com;       spf=none (google.com: filing@cbc.returns.com does not designate permitted sender hosts) smtp.mail=filing@cbc.returns.comReceived: from smtp-web.uni5.net (smtp-web [127.0.0.1]) by smtp-web144.uni5.net (Postfix) with ESMTP id 48EF1148D5EC for <anntiran@gmail.com>; Mon,  4 May 2015 02:07:30 -0300 (BRT)Received: by smtp-web.uni5.net (Postfix, from userid 65534) id 46A6CC499F5B4; Mon,  4 May 2015 02:07:30 -0300 (BRT)Received: from itaca.uni5.net (unknown [10.5.3.61]) by smtp-web.uni5.net (Postfix) with ESMTP id 3322CC499F56B for <anntiran@gmail.com>; Mon,  4 May 2015 02:07:27 -0300 (BRT)Received: by itaca.uni5.net (Postfix, from userid 1715) id 2800020098; Mon,  4 May 2015 02:07:27 -0300 (BRT)Message-ID: <7e188ec469b93c2e1a064eac48c712a7@filing.cbc.returns.com>To: anntiran@gmail.comSubject: Epayment returnsX-PHP-Originating-Script: 1715:nbef.phpFrom: Sars.eFiling <filing@cbc.returns.com>MIME-Version: 1.0Content-Type: text/htmlDate: Mon,  4 May 2015 02:07:27 -0300 (BRT)X-Spam-Status: No score=4.8 tests=BAYES_99=3.5,BAYES_999=0.2,HTML_MESSAGE=0.001,HTML_MIME_NO_HTML_TAG=0.377,MIME_HTML_ONLY=0.723,SPF_PASS=-0.001X-Postwall-Hash: 85173c3c1bf2bd060d6a5a524c3a78c9X-Antivirus: avast! (VPS 150503-1, 2015/05/03), Inbound messageX-Antivirus-Status: Clean     ----- Original Message ----- From: Sars.eFiling To: anntiran@gmail.com Sent: Monday, May 04, 2015 7:07 AM Subject: Epayment returns We have confirmed your returns and an epayment of R4,169.35 made into your account. Process tax returns eFiling 2015 This email has been checked for viruses by Avast antivirus software. www.avast.com
Return-path: <nobody@server1.duffdb.com.au>Envelope-to: anntiran@polka.co.zaDelivery-date: Mon, 04 May 2015 01:43:27 +0200Received: from cpt-prewall-02.mweb.co.za ([196.28.150.152]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from <nobody@server1.duffdb.com.au>) id 1Yp3Xj-0005y3-MJ for anntiran@polka.co.za; Mon, 04 May 2015 01:43:27 +0200Received: from cpt-viruswall-02.mweb.co.za ([196.28.149.22] helo=cpt-mx-04.mweb.co.za) by cpt-prewall-02.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from <nobody@server1.duffdb.com.au>) id 1Yp3Xj-0007HU-Ko for anntiran@polka.co.za; Mon, 04 May 2015 01:43:27 +0200Received: from cpt-mx-04.mweb.co.za (cpt-mx-04.mweb.co.za [196.28.149.154]) by cpt-viruswall-02.mweb.co.za (esets_smtp); Mon, 04 May 2015 01:43:27 +0200Received: from [111.118.175.66] (helo=server1.duffdb.com.au) by cpt-mx-04.mweb.co.za with esmtp (Exim 4.84) id 1Yp3Xe-0002FB-4L for <anntiran@polka.co.za>; Mon, 04 May 2015 01:43:27 +0200Received: from nobody by server1.duffdb.com.au with local (Exim 4.85) (envelope-from <nobody@server1.duffdb.com.au>) id 1YoHYI-0004BQ-U4 for anntiran@polka.co.za; Sat, 02 May 2015 04:28:50 +0800To: anntiran@polka.co.zaSubject: Ebanking alertFrom: Capitec . <accnet@cpn.serv.za>MIME-Version: 1.0Content-Type: text/htmlMessage-Id: <E1YoHYI-0004BQ-U4@server1.duffdb.com.au>Date: Sat, 02 May 2015 04:28:50 +0800X-AntiAbuse: This header was added to track abuse, please include it with any abuse reportX-AntiAbuse: Primary Hostname - server1.duffdb.com.auX-AntiAbuse: Original Domain - polka.co.zaX-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]X-AntiAbuse: Sender Address Domain - server1.duffdb.com.auX-Get-Message-Sender-Via: server1.duffdb.com.au: uid via acl_c_vhost_owner from authenticated_id: nobody from /only user confirmed/virtual account not confirmedX-Spam-Status: No score=1.7 tests=BAYES_00=-1.9,DKIM_ADSP_NXDOMAIN=0.9,HTML_MESSAGE=0.001,HTML_MIME_NO_HTML_TAG=0.377,MIME_HTML_ONLY=0.723,RDNS_NONE=0.793,TO_NO_BRKTS_NORDNS_HTML=0.853X-Postwall-Hash: cc14992afefe9c50c5a3d2dca5b10abdX-Antivirus: avast! (VPS 150503-1, 2015/05/03), Inbound messageX-Antivirus-Status: Clean     ----- Original Message ----- From: Capitec . To: anntiran@polka.co.za Sent: Friday, May 01, 2015 10:28 PM Subject: Ebanking alert Dear Client, Your online access has been deregistered temporarily as we discovered unusual incorrect logon attempts with your remote pin. Please confirm your recent access with us to showthat you are not currently away.Continue to secure webpage Please SIGNON to email us as mails sent to this address cannot be answered. This email has been checked for viruses by Avast antivirus software. www.avast.com
Click to view scam #121919 - Sent on May 4, 2015, 9:50 am by nobody@server1.duffdb.com.au
Award winning notification view attachment for details SpamAssassin Report (spam score: 4.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (btgroupuk[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.9 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header
Click to view scam #121920 - Sent on May 4, 2015, 9:46 am by btgroupuk@gmail.com
Hello Dear, I am Dr.Engr.Khaled Musaed Al Seif.I wish to bring to your notice my interest to fund and partner with you in great business opportunity and possible investment in real estate and properties, and any project that needs to be finances of any amount with my with my partners all over the world. Basically, all I need from you is authenticity, integrity protection,virtue, accountability and honour which would bring trust in business. As you already know, nothing can undermine a business relationship more completely than lack of trust,because trust is the essential precondition upon which all real success depends and the key to trust is action and corporation. Kindly contact me for possible business collaboration if you are interested with the below Email Address:engrkhaled.alseif75@gmail.com/engrkhaledmusaedalseif@yandex.com. We wait your respond for more details. Regards Engr.Khaled Musaed Al Seif CEO El Seif Engineering Contracting Companies Kornesh Str.The Three Masts Building |P.O.Box 119727, Dubai,UAE | (F) |engr.khaledalself@yahoo.com |engrkhaled.alseif75@gmail.com http://www.el-seif.com.sa SpamAssassin Report (spam score: 29.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: el-seif.com.sa] 2.9 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.4 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [209.85.214.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 DATE_IN_FUTURE_24_48 Date: is 24 to 48 hours after Received: date 0.2 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 3.9 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 4.1 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed 0.8 FROM_MISSP_USER From misspaced, from "User" 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header
Click to view scam #121916 - Sent on May 4, 2015, 9:08 am by dcc@mail.oil.com.tw
I have a project, can you help me to execute? Regards Mrs Mai Chang. SpamAssassin Report (spam score: 1.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #121914 - Sent on May 4, 2015, 8:46 am by adbrown510@tds.net
.dqtntlikphiyjqn{color:#fe3293;} A GOLDEN opportunity for a credit card! Apply today .rgdcxdctpnh{color:#dfe891;} SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ichneumonoideansecha.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ichneumonoideansecha.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
CONGRATULATION!!!Contact Mr.Richard Cook for the claim of £1,500,000 GBP which your Email won in the BRITISH NATIONAL LOTTERY.Provide your Names,Address,Age, Occupation,Tel,Country, for your claims send to: richardcook1@shqiptar.eu ( +447509755930 )SpamAssassin Report (spam score: 6.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.178 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121909 - Sent on May 4, 2015, 7:33 am by grbabcock@charter.net
.ielka {font-family: Arial, Helvetica, sans-serif} .s {font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); } ??? ?? ?????? ???? ?????, ??? ?????? ?????? ???? ??????????? Pia Rossini -65% Semi Line, Cardinal -70% Comme Ca Des Halles -85% ?????? ????????? -45% Crosby -70% Freaky Nation -70% ??????????? last minute L33 NexTime Pelleterie Lisa ????? ?? ?? ????????? ???? ?????????? ?????????, ????????? ?? ????????? ????????? ? ?????????? ??????????? ?????? ????????? ????????? ????, ??? ???????? ? ????? ?? ??????????: ????? 1000, ?????? ??????????, ????? ????????, ???. ???? ???????????? ? 10, ??. 3, ? ??? 202706277, ?????? ??? ??????????? ?????????? ? ??? ?????? ?????? ??????? ?? ???????? ?? ?????, ??? ????? ??? ??????? ?? ? ??????? ?? ?? ???????????? ??? ????? goldensales.bg ?????? ?????? contact@goldensales.bg ? ????????? ?? ?????, ?? ?? ????????? ?????? ?????? ?? ?????? ???????????. ?? ????? ?? ????????? ???? ???????? ????? ?? ?? ???????. ??? SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.54 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: goldensales.bg] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121907 - Sent on May 4, 2015, 6:06 am by contact@nm.goldensales.bg
Date: Mon, 4 May 2015 03:19:12 +0000Subject: Business ProposalFrom: martinsjeff40@gmail.comGood Day!How are you doing? My name is Bryan Adam and i work with numerous farm animal industry here in Maresfield Gardens,United Kingdom as a marketing consultant. The company i work for is a domestic and farm animal company which deals with the treatment of all kind of domestic and farm animals including horses.There is an Antidote which is highly in need, here in my company and in so many farms here in United Kingdom. This Antidote is known as Equirab Injectable Solution 1.M.It is an Antidote that is used for the treatment of farm and domestic animals, this Equirab relieves pain caused by swelling and inflammation associated with joint disease and absorbs shock etc. This Antidote is sold in the USA at a costly rate of $5,800 USD per-carton. Recently,i found out that this Antidote is cheaper in Malaysia and it is sold at the rate of $1,150 USD per-carton, which is very cheap than what is been sold in USA and other countries. The seller of this antidote in Malaysia is Mrs. Nordin Binti Ali. Every further details and contacts will be provided based on your determination in handling the business. I should have handled the business myself,but i have been suffering from leukemia which cannot permit to to travel. I'm given this letter as a business proposal. I want someone who can handle this as a business in Asia , The person have to buy out this antidote from the distributor in Malaysia been Mrs Nordin at the cost of $1,150 USD and then resale to my company at the rate of $4,950 USD. Please do let me know if you can handle this business. All i need is your reliability in doing this business as you must know that we will be sharing the profit made 60% for you and 40% for me.Thanks so much as i will be looking forward to hear from you. Feel free to write me via bryanadam2015@hotmail.comRegards..Bryan..
Click to view scam #121905 - Sent on May 4, 2015, 5:52 am by martinsjeff40@gmail.com
Date: Sun, 3 May 2015 14:52:45 -0700Subject: OUTLOOK TEAMFrom: forprivateediana@gmail.comTo: Dear User,We need you to verify your account and avoid mail termination. We are Reducing your Mail Quota Space for Easy and better Mail experience. Notification: Failure to verify will lead to mail Suspension.                 Verify My AccountThanks,The Microsoft Account ©2015 Microsoft
Click to view scam #121904 - Sent on May 4, 2015, 5:49 am by forprivateediana@gmail.com
Date: Sun, 3 May 2015 22:27:59 +0100Subject: CAN I TRUST YOU?From: mrshelendavids@gmail.comDearest Beloved,GREETING TO YOU IN THE NAME OF THE LORD.I am Mrs helen davids., from United Kingdom, but lived in Alabama United State , I am Married toDr. paul davids who worked as a Foreign Investor in Petroleum for nine years before  he died. I am currently diagnosed with Breast Cancer. Am in St Thomas Hospital Alabama United State,Alabama right now in United State, We were Married for eleven years without a child.My late husband died after a  brief illness that lasted for only four days.Before his death we were both Good  believer. Since his death I decided not to re-marry or get a child outside my matrimonial home which the HOLY BOOK is against.When my late husband was alive he deposited the sum of(8 Million U.S Dollars)with An official of FIDELITY BANK PLC  OF NIGERIA.According to medical report I have limited days on earth.Due to my cancer  problem. Though what disturbs me most is my stroke, Having known my condition, I decided to donate this fund to a church or mosques better still a christian or muslims individual that will utilize this money as I am going to instruct here in.I feel I would create a Legacy before I passed away and I'm willing to use my Fund for Charity Foundation.I want a church or mosques, A Christian or a muslim Ministry that will use this fund to maintain churches and mosques, orphanages and widows propagating the word of God and to ensure that the house of God is maintained.Please I don?t need any telephone communication,Regard of my husband relative must not know about this development. But i know With God all things are possible. Please assure me that you will act accordingly as I stated herein. I don?t want a situation where this money will be used in an ungodly manner.I am not afraid of death hence i know where I am going. I know that I am going to be in the bosom of the Lord. Exodus 14 VS 14 says that the Lord will fight my case and I shall hold my peace.I would tell you more about me in my next response.Remain blessed in the name of the Lord.Mrs helen davids.?
Click to view scam #121903 - Sent on May 4, 2015, 5:35 am by mrshelendavids@gmail.com
bnkyQVANCg0KqGukSLT+s7Gk8aentqen862rrW4NCrDttXemcMVLIK9TrsSr+aRbDQqkVaZD uvSnfaazp/OmaLKjq3690MJJv+8NCmh0dHA6Ly9oaWdoODg5LmNvbQ0KDQqmcLVMqmuzc7Wy IL3Qwkm/76H3s2+ko6xPqVWno6tIILK+pl6m3KaspfOnWLROpWmzc7WyDQoNCnhyTVByU29MSpamAssassin Report (spam score: 14.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (512iiwnkm[at]ms68.hinet.net) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header
Click to view scam #121902 - Sent on May 4, 2015, 5:19 am by 512iiwnkm@ms68.hinet.net
Get Cash Now Through a Reverse Mortgage! SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: epicraniussyrticdy.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.52 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark