Logo



Begin forwarded message:From: "HM Revenue & Customs"<notice@gov.uk>Date: 8 June 2015 14:35:47 BSTSubject: TAX REFUND NOTIFICATIONReply-To: <notice@gov.uk>After the last annual calculations of your fiscal activity , we determined that you are aligible to receive a tax refund of 647.50 £  . Please submit the tax refund request and allow us 10-14 days in order to process it. To access your tax refund, please follow the steps bellow:    - Download the Tax Refund attached to this email    - Open it in a browser    - Follow the instructions on your screen NOTE: A refund can be delayed a variety of reasons , for exemple submitting invalid records or applying after deadline. Best Regards, Greg Stephen Tax Credit Office Agent --------------------------------------------------------------------------------------------------- Copyright © 2015, HM Revenue & Customs. All rights reserved. Preston PR1 0SB Telephone: 0845 300 3900 Opening Hours: 8.00 am to 8.00 pm, seven days a week.
Click to view scam #128068 - Sent on June 8, 2015, 10:36 pm by notice@gov.uk
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/qeyJjIjogOTA3OSwgImYiOiAwLCAibSI6IDgyNTcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128066 - Sent on June 8, 2015, 10:21 pm by ClickNLoan@gardentoolsforrme.com
Visualizar e-mail corretamente. SpamAssassin Report (spam score: 9.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: soenvia.com.br] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 2.0 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only
Click to view scam #128064 - Sent on June 8, 2015, 10:14 pm by root@y.maispesquisa.com.br
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/neyJjIjogOTA2OSwgImYiOiAxLCAibSI6IDgyNTEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Attention We have deposited the check of your fund (2.700,000,00USD) through Western Union after our finally meeting regarding your fund, All you will do is to contact Western Union director Dr .Mrs Blessing Adam via E-mail:(officewesternunion429@yahoo.com)He will give you more direction on how you will be receiving the funds daily.Remember to send your Full information to avoid wrong transfer such as, Receiver's Name_______________ Address: ________________ Country: ____________ Phone Number: _____________ Maria Obi has sent $5000 today MTCN= (1959-8277-86) So contact western union Director Dr. Mrs Blessing as soon as you receive this email or call him +229 98 08 47 52 and tell him to give you the Question and Answer to pick the $5000 and You are not expected to pay for the tansfer charge, The only fee you will send to western union before pick up your first payment $5,000 today is 165 USD onlyto re-new and re-confirm your payment file. Best Regards Mr David Patrick SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (officewesternunion429[at]yahoo.com ) 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #128065 - Sent on June 8, 2015, 10:02 pm by westernunion10@cantv.net
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/ieyJjIjogOTA3NSwgImYiOiAwLCAibSI6IDgyNTUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
  FROM THE DESK OF:BARRISTER PETER CHRISONS CHAMBERS & ASSOCIATES NO F10065 OJO IKEJA INTERNATIONAL AIRPORT ROAD LAGOS NIGERIA Private Email Address. (barrpeterlawchambers007@gmail.com )     Dear Friend, I sincerely apologize for intruding into your privacy especially by contacting you through this means for a business transaction of this magnitude, but due to its seriousness and urgency it therefore became necessary for me to seek your assistance.     I am Barrister Peter Chrisons ,the personal lawyer to Late Mr.Royce, a Foreigner who worked with an Oil Servicing Company in the oil rich Niger Delta Area of Bayelsa State . I am contacting you concerning my late client and an investment he made. I would respectfully request that you keep the contents of this mail confidential. And respect the integrity of the information you come by as a result of this mail. I  contacted you independently and no one should be informed of this communication. I would like to intimate you with certain facts that I believe would be of interest to you.   This is a genuine transaction and is 100% risk free. All I'm demanding from you is your honest co-operation to enable us achieve our goal, and not a perfidious person. On the 6th of May, 2002 it was reported to us that my Client, his wife and their only daughter were involved in a Local Plane Crash at Kano State , en route Abuja (The Capital City) all occupants in the Plane lost their lives, unfortunately on this same flight were other dignitaries like the Sports Minister and a Host of others.   Meanwhile, until his death, my late client had a Fixed Deposit Account of USD $12.8 Million deposited in a Security Company ( UNIC SECURITY COMPANY) here. Recently, I received an ultimatum from the Security Company asking me to provide my late client's relative so  that the money would be given to them. But unfortunately it was discovered that my late client did not declare any identifiable family member in all the official documents he tendered to the Security Company while opening the account.     Therefore, this development leaves me as the only person with the full picture of what the Prevailing situation is in relation to the deposit my late client made and who is entitled to be the Bona Fide Beneficiary/Next of Kin or relative because he died interstate. Therefore, if I fail to locate any of his relatives or his next of kin(and have this money transferred to them) the Security Company will at the expiration of the 6 weeks ultimatum given to me confiscate the account according to the ultimatum issued to me by the Security Company, if I fail to present to them my late client's relative, with a  legitimate statement of claim for the money before the given time they will confiscate the account and the money declared' UNCLAIMED BALANCE'. This will result in the money being taken over by the Security Company.   This will not happen if I have my way. Since I have been unsuccessful in locating the relatives of my late client all these while, my proposal, therefore, is to present you as the next of kin/relative of my client due to the fact that you are a foreigner and can easily pass as a possible relative of my client. I know you will be wondering how possible this could be but I assure you that this is simple. I therefore seek your consent to present you as the Next Of Kin to my client so that the money he deposited with the Security Company would be paid to you and there after you and I will share the money 60% for you and I will be taking 40%. I assure you that the deposit would be released to you within a few days because I have all the relevant information that would facilitate that will be required on Documentation.     First, I will like you to provide immediately the following Information: Your full names______________________ Contact address________________________ Telephone/Fax Numbers______________________ Occupations____________________ With these information I will prepare the necessary documents and Affidavit that will put you in place as the next of kin. After we have successfully satisfied the Requirements of the bank the money totaling USD 12.8 Million would be paid into your account for you to take 60% and I will be taking 40%  . All I require is your honest co-operation to enable us see this through. There is no risk at all because everything would be done legally and my position as a qualified attorney will facilitate everything .   Secondly, I will give you all the necessary documents that would serve as Evidence proving that you are the Next of Kin/ Relative of my late client. These documents will legally confer on you the status to act as the Beneficiary of the Estate of my late client. What I related to you might smack of unethical practice but I want you to understand that this is a Once in life time opportunity capable of turning around our situation. The truth is that this money would not be taken by the government but by some greedy Security Company Officials and I would not fold my arms and watch this happen hence my decision to contact you. If you are interested in doing this transaction with me kindly send your reply to this email address :( barrpeterlawchambers007@gmail.com)   Thank you as I await your positive response.   Regards,   Barr. Peter Chrisons (esq.) SpamAssassin Report (spam score: 33.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 0.0 HK_SCAM_N13 BODY: HK_SCAM_N13 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.9 MONEY_BARRISTER Lots of money from a UK lawyer 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 2.7 RISK_FREE No risk! 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #128059 - Sent on June 8, 2015, 9:53 pm by info@procrastination.net
UNITED BANK FOR AFRICA BURKINA HEAD OFFICE ADDRESS UBA HOUSE MARINA P.O. BOX 206 BURKINA FASO Greetings, Am Mohamed Sellam, director cash processing unit, united bank for Africa [UBA the only bank appointed by the A.U. Members lead by President Ahmed Ould Abdel Aziz .Because of the frauds going on in West Africa countries where some innocent beneficiaries were asked to pay in advance before receiving their money owed to them. The above Africa union held meeting in Burkina faso and resolve to pay all beneficiaries in cash through means of diplomatic courier service. We receive your files from international monetary fund (I.M.F.) as one of the beneficiaries. Take note: Three thousand united state dollars (usd$3,000) have been mapped out for all expenses in taxes and other documents that matters. Therefore, I want you to bear it in mind that your total fund will not be One million five hundred thousand united state dollars ($1.500,000.00) but One million four hundred and ninety seven thousand united state dollars ($1.497,000.00).If anybody tells you that he is paying you in bank draft or telegraphic money transfer both western union and money gram, do not listen to him or her because due to this frauds no international bank honors our remittance instruction any more that is why we settled to pay in cash through courier.  We also received a security report that you paid the fraudsters who have been deceiving you, telling you that they are going to send this money to you.Dear as a senior banker, controlling this cash payment now, I advise you not to waste your money by paying any body in advance again, and if you just follow my instruction, you will receive your money in three days time.  Your fund will now be packaged in box and take to the diplomatic courier service for immediate shipment, I will also send the picture of the box by attachment to you to see how the money is packed, and I will send you more mails to give you more information for you to know the genuineness of this transaction. Therefore, do forward your home address and direct phone number to this E-Mail ( sellam07@freemail.hu ) All the documents will be sent to you if I am assured that you have stopped sending money to those fraudsters. Am waiting to hear from you with the required information of yours. Mr Mohamed Sellam Director cash processing unit united bank for Africa. (U.B.A). sellam07@freemail.hu SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (m.abbass24[at]aol.fr) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #128057 - Sent on June 8, 2015, 9:41 pm by m.abbass24@aol.fr
Your email address emerged as one of the online Google user in the 2nd category  therefore attracted a cash award of ? 625,000.00 GBP (Six Hundred and Twenty Five Thousand Great British Pound Sterling), Our winners are arranged into four categories with different winning prizes accordingly in each category SpamAssassin Report (spam score: 24.7) pts rule name description ---- ---------------------- -------------------------------------------------- 3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner" 1.2 TO_MALFORMED To: has a malformed address 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.5 NSL_RCVD_HELO_USER Received from HELO User -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 2.8 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header
Click to view scam #128055 - Sent on June 8, 2015, 9:33 pm by bo1114.ngn@estcal.sahara.co.in
        Please make sure you enter now for a chance to win £500 Tesco vouchers Hey,Please make sure you enter now for a chance to win £500 Tesco vouchers. You've got to be in it to win it.This week?s Draw:Email: yolly@talktalk.netPlease click the button below (or click here) and follow the instructions on the website in order to compete. Kind Regards,  James WhitePrize Coordinator   Full Terms & Conditions apply. PrizeHook is a brand of SPTwo Ltd. Helpline: 0203 503 0509. Prize Hook | PO Box 61735 | London | SW1V 1UX | UK If you wish to unsubscribe from future mailings please click here Â
Click to view scam #128054 - Sent on June 8, 2015, 9:24 pm by yolly@talktalk.net
This is to inform you that we offer financial help at 3% interest rate contact us for more details at. charlesfinance60@yahoo.com ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.180 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.203.69.20 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (charlesfinance60[at]yahoo.com ) 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #128053 - Sent on June 8, 2015, 9:23 pm by angthong@moi.go.th
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/teyJjIjogOTA2OCwgImYiOiAwLCAibSI6IDgyNTAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/oeyJjIjogOTA2NywgImYiOiAwLCAibSI6IDgyNDksICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Kindly read the attachment for the payment of your winning cash prize £1,000,000.00 SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (katenorwood47[at]yahoo.co.uk ) 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128045 - Sent on June 8, 2015, 8:22 pm by online294@zambia.co.zm
From: Report Ready <cre7cone6186@bAMAIDARk.h1.VPSfARmS.uS>Date: Monday, June 8, 2015 at 3:17 PMTo:Subject: A bad result : 540 points. Has your June 2015 creditworthiness changed? (Report ready Milesk) A bad result : 540 pts... See your June 2015 breakdown at no cost here.    Illustrative example. Solicitation sent to the wrong person? Report spam here or go here to unsubscribe from all of our offers. To be excluded from this specific advertiser only, and keep receiving our other offers go here. Or write us by snail mail at: 8033 Sunset Blvd #1055, West Hollywood, CA 90046, USA Quotes for June 8, 2015: "A self-centered man admitted: "Sure, I know that the Bible says to love our neighbors as ourselves. But frankly, I don't believe that my neighbors can stand all that affection." Anonymous "A woman who pretends to laugh at love is like a child who sings at night when he is afraid." Anonymous 'But isn't hate just scorned love?" Anonymous "Children need love, especially when they don't deserve it." Anonymous "He who tries to forget a woman, never loved her." Anonymous '1 did not hear the words you said, instead I heard the love." Anonymous 'I've learned that true friendship continues to grow, even over the longest distance. Same goes for true love." Anonymous "If music be the food of love, then play on" Anonymous
> Subject: RE,> To: a.ebrahimi@ut.ac.ir> From: a.ebrahimi@ut.ac.ir> Date: Mon, 8 Jun 2015 21:12:05 +0200> > I'm Richard A Nickson, I have just been informed by my doctor that I only have few months to live due to cancer illness and I am about to end the race like this without a child. I have decided WILL/DONATE 6,000,000 to you to promote charity works.I have decided to nominate you as my beneficiary.
Click to view scam #128043 - Sent on June 8, 2015, 8:18 pm by a.ebrahimi@ut.ac.ir
Hi there! Are you interested in obtaining a loan starting at 3% interest rate? Whatever your loan needs are; Personal Loans, investment, refinancing, starting a new business? We can assist you with a flexible re-payment plan. Your credit history notwithstanding; we would gladly consider your loan request. Provide the details below for review: 1. Full Names 2. Amount of loan Needed? 3. Loan Duration: 4. Loan purpose 5. Phone number: 6. Gender: 7. Country: Reply via my personal email if interested, info.davidinvestorcfunds@gmail.com SpamAssassin Report (spam score: 0.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
Click to view scam #128039 - Sent on June 8, 2015, 8:14 pm by info@financer.com
-- DR.ROBERT PETERS 95ec Clarendon Crescent Leamington Spa, Warwickshire, CV32 United Kingdom. Description: I am DR ROBERT PETERS Native of Scotland. I work in Italy (Rome) for over Three months now, but my family is based in London, I will love to hire a caring male or female house keeper/manager directly who is willing to work in my house in London as a house keeper/Manager. I will like you to know that I have 2 daughters 10 and 8 years old, I can afford to be paying you ?3,500 Great British Pounds Sterling's every four weeks and up keeping money every week of ?200 Great British Pounds Sterling's and this is outside your ?3,500 Great British Pounds Sterling's, your responsibility in my house is just to take care of the house. Kindly get back to me if you are interested in this offer. APPLICATION: Interested applicant can submit his/her CV via email (drrobertpeters@hotmail.com) NOTE: Do not apply if you do not have International Passport. Employment Status: Full time Type of Remuneration: Salary plus incentives Job Location: United Kingdom Best Regards, Dr. Robert Peters. Tell: +447010051375 EMAIL: drrobertpeters@hotmail.com SpamAssassin Report (spam score: 1.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 T_HK_NAME_DR T_HK_NAME_DR 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #128049 - Sent on June 8, 2015, 8:09 pm by gssdc30@mail.astrakhan.ru
Advert
> From: gqdfshdgip@yahoo.bg> To: .> Date: Mon, 8 Jun 2015 20:46:43 +0200> Subject: Confidential Business Proposal> > Office of the manager auditing and accounting Bank in> Ouagadougou Burkina Faso> C/o Mr Ramzi Tom Sulaiman.> Attention please:> > I am the above mentioned name with said office position. I am contacting you regarding a business transaction which I wish to execute with the help of a foreigner. There is an account here in our bank with a credit balance of Thirteen Million United State Dollars ($13 Million.) this money has been dormant for years and as am talking to you now, this said account is without any beneficiary or heir.> > I have explored all options and decided on executing this deal with a foreigner. Now I want to know if you are capable of receiving this huge amount of money into your foreign account and have 50% of it as your share: I will provide every information and materials we will need to back up the claim and ensure that our bank releases the fund to you as the beneficiary to the account.> > I have worked out everything before contacting you so you shouldn't be afraid of anything as we will follow the official way to get the bank to approve the fund to you. I will give you all the details regarding this account and the transfer as soon as I hear from you and please make this proposal a top secret and delete it if you are not interested> > > With Best Regards.> Mr Ramzi Tom Sulaiman
Click to view scam #128037 - Sent on June 8, 2015, 7:53 pm by gqdfshdgip@yahoo.bg
UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES,INTERNAL AUDIT, MONITORING, CONSULTING AND INVESTIGATIONS DIVISION. UNITED NATIONS ORGANIZATIONPALAIS DES NATIONS, 1211 GENEVA 10,SWITZERLAND.FROM: KASSYM-JOMART TOKAYEV. DIRECTOR-GENERAL OF THE UNITED NATIONS OFFICE AT GENEVA (UNOG).ATTN PLEASE:I AM KASSYM-JOMART TOKAYEV. DIRECTOR-GENERAL OF THE UNITED NATIONS OFFICE AT GENEVA (UNOG). IN CHARGE OF YOUR TOTAL $23.4M PAYMENT FILE.WE ARE NOW CHARGED WITH THE RESPONSIBILITY OF FINDING, RECONCILING AND RELEASING OF ALL DUE PAYMENTS THAT ORIGINATED IN AFRICA (LOTTERY WINNING, CONTRACT PAYMENTS AND INHERITANCE FUNDS) BELONGING TO FOREIGN/LOCAL BENEFICIARIES.I CAME TO BENIN FROM NEW YORK AFTER SERIES OF MEETINGS WITH THE WORLD BANK PRESIDENT ROBERT B. ZOELLICK AND THE UN SECRETARY GENERAL DUE TO NUMEROUS COMPLAINS FROM THE FBI AND OTHER SECURITY AGENCIES AGAINST THE BENIN GOVERNMENT ON THE RATE OF SCAM/FRAUDULENT ACTIVITIES GOING ON IN BENIN.I HAVE MET WITH THE BENIN CENTRAL BANK GOVERNOR WHO CLAIMED IGNORANT OF THE DELAY IN RELEASING FOREIGN BENEFICIARIES FUNDS IN AFRICA BUT PROMISED TO MAKE SURE THAT ALL FUND BENEFICIARIES RECEIVE THEIR FUNDS WITHIN THE NEXT 48HRS. DURING OUR RECONCILIATION REVIEW IN AFRICA, ALL UNPAID LOTTERY WINNING, CONTRACT PAYMENTS AND INHERITANCE PAYMENT FILES BELONGING TO YOU AND OTHER FOREIGN BENEFICIARIES WAS TRACED AND APPROVED SUCCESSFULLY.YOUR $23.4M PAYMENT WAS AMONG THE APPROVED BENEFICIARIES AND HAS BEEN PROGRAMMED WITH AN ATM CARD NUMBER: 4988 2414 7616 3496 THROUGH THE BANK OF ENGLAND INTER-SWITCH COMPUTERIZATION DEPARTMENT IN UNITED KINGDOM.THE ATM CARD IS NOT A CREDIT CARD, IT IS AN AUTOMATED TELLER MACHINE CARD (ATM CARD) WHICH WORK IN ALL BANKS WITH DULY INTER-SWITCH AND THE FUNDS CAN THEN BE TRANSFERRED INTO YOUR PERSONAL ACCOUNT AS SOON AS YOU HAVE THE CARD IF YOU WISH TO. THE UNITED NATIONS UNDER THE MINISTRY OF FINANCE WITH THE WORLD BANK GROUPS AND IMF (INTERNATIONAL MONITORY FUND) HAS ADOPTED THIS ADMINISTRATIVE MEASURE OWNING TO VARIOUS COMPLAINS/PETITIONS RECEIVED FROM BENEFICIARIES DUE TO THE DELAYS IN RECEIVING THEIR INHERITANCE/WINING FUNDS AS EXPECTED, IT WAS ALSO ADOPTED TO REDUCE THE ADMINISTRATIVE PROTOCOLS AS WELL AS FRAUD PERPETRATION.YOU ARE ONLY ALLOWED TO WITHDRAW USD10, 000.00 PER DAY FROM THE ATM CARD ACCOUNT IN ANY ATM MACHINE CENTER OF YOUR CHOICE IN ANY PART OF THE WORLD OR OPTIONAL AS SOON AS YOU GET THE ATM CARD, YOU CAN DEPOSIT THE TOTAL AMOUNT IN THE ATM CARD INTO YOUR BANKING ACCOUNT WITH YOUR PERSONAL IDENTIFICATION OR PASSPORT ID.IT IS ALSO IMPORTANT TO LET YOU KNOW THAT YOU ARE REQUIRED TO BEAR THE COST OF YOUR ATM CARD COURIER FEE AS STIPULATED BY THE AUDITORS, THIS IS BECAUSE YOUR $23.4M PROGRAMMED ATM CARD IS LABELED AS A "NON FRAGMENTED BOND" AND IS PROTECTED BY A HARDCOVER BOND POLICY BY THE AUDITORS WHICH MAKES IT IMPOSSIBLE TO DEDUCT THE DELIVERY FEE OF YOUR ATM CARD FROM THE APPROVED $23.4M ATM CARD BEFORE IT HAS BEEN DELIVERED TO YOU.FURTHERMORE, THE AUDITORS DECLINED REVERSE DELIVERY PAYMENT, (NO MORE C.O.D FOR INTERNATIONAL SHIPMENTS) THAT IF A REVERSE DELIVERY PAYMENT IS MADE AND SOMETHING GOES WRONG, THAT WE/YOU CANNOT SUE THE DELIVERY COMPANY TO RECOVER THE FULL VALUE OF THE FUND AS STIPULATED IN THE ATM CARD SINCE PAYMENT FOR DELIVERY WAS NOT MADE AT POINT OF MAILING, SO FOR THIS REASONS, WE HAD COME TO AN AGREEMENT WITH THE AUDITORS THAT YOU SHALL BE THE ONE TO TAKE THE SOLE RESPONSIBILITY FOR THE DELIVERY FEE OF YOUR$23.4M ATM CARD TO YOUR ADDRESS AS REVERSE PAYMENT IS RULED OUT.YOUR $23.4M ATM CARD WILL ONLY COST YOU THE COST OF DELIVERING YOUR ATM CARD WHICH INVOLVES ONLY $57.00USD (24HRS DELIVERY).BASED ON THE ABOVE REASONS, WE HAVE CONCLUDED DELIVERY ARRANGEMENT WITH THE ARIK DELIVERY AGENT, IN VIEW OF THE ABOVE DEVELOPMENT; YOU ARE REQUESTED TO IMMEDIATELY PAY THE DELIVERY COST THROUGH THE ARIK AGENT GIVEN PAYMENT INSTRUCTION BELOW:DELIVERY COST:  $57USD (24HRS/OVERNIGHT DELIVERY)URGENTLY SEND THE ABOVE PAYMENT VIA WESTERN UNION OR MONEY GRAM AS DIRECTED BELOW, ALSO FORWARD YOUR CORRECT DELIVERY ADDRESS WHERE YOU WANT THE ATM CARD TO BE DELIVERED AS THE UNITED NATIONS WILL NOT BE HELD RESPONSIBLE FOR ANY MISTAKE IN DELIVERING YOUR $23.4M ATM CARD PAYMENT TO YOU.I HAVE A VERY LIMITED TIME HERE IN AFRICA , SO I WOULD LIKE YOU TO URGENTLY SEND THE $57 COURIER FEE TODAY SO THAT THE COURIER COMPANY WILL PROCEED ON THE DELIVERY OF YOUR ATM CARD BEFORE I LEAVE AFRICA.IF YOUR DELIVERY FEE IS RECEIVED TODAY, YOUR $23.4M ATM CARD WILL LEAVE TO YOUR DESTINATION FIRST THING TOMORROW MORNING AND WILL GET TO YOU WITHIN 24HRS, THIS MEANS THAT IF YOU SEND THE $57USD DELIVERY FEE TODAY, YOU WILL RECEIVE YOUR $23.4M ATM CARD TOMORROW SINCE IT IS AN OVERNIGHT / 24HRS DELIVERY.HERE IS THE WESTERN UNION OR MONEY GRAM PAYMENT INFORMATION TO SEND THE $57USD COURIER FEE:RECEIVER NAME:    / LUKU OBIMCITY:    /     COTONOUCOUNTRY:    / COTONOU-BENINTEST QUESTION:    / TRUSTTEST ANSWER:   / IN GODAMOUNT:    / $57USDAFTER PAYING THE FEE, SEND THE FOLLOWING PAYMENT INFORMATION'S TO ME.1. SENDER'S NAME AND ADDRESS2. MTCN NUMBER3. TEXT QUESTION & ANSWERI WAIT FOR THE REFERENCE PAYMENT CONFIRMATION OF THE COURIER FEE AND YOUR DELIVERY INFORMATION TO ENABLE YOUR ATM CARD DELIVERY PROCEED IMMEDIATELY.I AWAIT YOUR IMMEDIATE ATTENTION.SINCERELY YOURS,MR. KASSYM-JOMART TOKAYEVDIRECTOR-GENERAL OF THE UNITED NATIONS OFFICE AT GENEVA (UNOG). UNITED NATIONS ORGANIZATIONPALAIS DES NATIONS, 1211 GENEVA 10,SWITZERLAND.SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (internationaldebtfunds12[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("mr. kassym-jomart tokayev" ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (internationaldebtfunds12[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/neyJjIjogOTA2NCwgImYiOiAwLCAibSI6IDgyNDcsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
 Cher Client Verified by Visa,
Click to view scam #128038 - Sent on June 8, 2015, 7:24 pm by payment@intl.com
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/neyJjIjogOTA2MSwgImYiOiAwLCAibSI6IDgyNDYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
.yyeeualvmpyv{color:#4f712d;} You Can Still Qualify for Affordable Health Coverage SpamAssassin Report (spam score: 10.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: disembowerjointwormha.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: disembowerjointwormha.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.47 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: disembowerjointwormha.com]
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/qeyJjIjogOTA2MCwgImYiOiAwLCAibSI6IDgyNDUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128030 - Sent on June 8, 2015, 6:58 pm by Avant@gardentoolsforrme.com
To: nedhulse49@hotmail.comSubject: Your Apple ID Has Been DisabledFrom: payment@intl.comDate: Mon, 8 Jun 2015 19:41:56 +0200 Cher Client Verified by Visa,       Attention: This is no way an e-mail forgery, this is sent by the Apple iTunes customer service support!Dear iTunes Customer , This is an automatic message sent by our security system to let you know that you have 48 hours to confirm your account information .Your itunes account has been frozen temporarily. because we are unable to validate your account information Once you have updated your account records. we will validate your information and your account suspension will be lifted.This will help protect your account in the future. This process does not take more than 3 minutes To proceed to confirm your account details please Click here to Validate Your Apple Accountand follow the instructions Note: If this is not resolved within 48 hours, we will be forced to susupend your account indefinitely ! Please note that in 50% of cases you will receive this e -mail in the SPAM box , this is because of the increased security of emailing services you use . Thank you for your cooperation in the context of your file.Yours sincerely, Apple Security Department. © 2015 Apple.com All rights reserved.
Click to view scam #128033 - Sent on June 8, 2015, 6:57 pm by nedhulse49@hotmail.com
I am representing Local Village Gold Miners from Rep. Sierra Leone and Conakry Guinea, In West African. We are Members of the Said Community and in charge of Marketing, Advertising, communication and sourcing potential diamond and gold dust buyers, agents/brokers or partners for our mined gold dust AU./DIAMONDS. Prior To The Latest Privilege Accorded Local Gold and Diamond Miners in Guinea Conakry Since April 2007 to Market and Sell Diamond and Gold Dust AU themselves, Thus my offer to AU Gold Dust and Diamond UNCUT Dust prospective buyers, Brokers, representatives, agents, intermediaries and partners willing To Establish Meaningful Business transaction that is Viable and Durable with us. Hence, I?m offering you a Fresh Gold Dust. AU for sale with the following specifications and details. COMMODITY???????AURUM TALIUM (AU) Form????????.. ??Gold Dust/nugget Powder. Quantity???????. ?.1993kg ? . Quality/Purity?????. .. 22 carat or better. Finesse???????.. ?92% OR Better. Location???????. ?. Conakry Origin???????? ?.. Sierra Leone/ Guinea . Price per kg???????.$29, 000 USD/KG AS FOR THE DIAMOND THAT IS UNCUT, WE ARE IN POSITIONS OF OVER 1850 Carats OF GAMS STONE OF FDGH AND LM GRADES. We are looking forward to your response if our product does interest you. Accept our warm hearted Regards: NB : this is my alternative. Thanks Davies Abraham SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.0 HK_SCAM_N13 BODY: HK_SCAM_N13 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (drdaviesabraham008[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #128028 - Sent on June 8, 2015, 6:33 pm by drdaviesabraham008@gmail.com
Your mailbox size has reached 1022.58MB, which is over 90% of your 1024.00MB quota. and you may not be able to send or receive new mail until you re-validate your mailbox. To re-validate your mailbox CLICK HERE: Thanks Admin Server Portal.     SpamAssassin Report (spam score: 2.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 AXB_X_FF_SEZ_S Forefront sez this is spam -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128029 - Sent on June 8, 2015, 6:29 pm by mhowar54@uncc.edu
ICPC Beninndependent Corrupt Practices and Other Related Offences United Nations Approved Anti-fraud Unit Code of Conduct Bureau against fraud, funds delay and impersonation.Contact Email Adrres(barristerjimmyyanderson@yahoo.com)Head Office: Plot 802, Constitution AvenueZone A9 Central AreaP. M.B 535, Cotonou-BeninOUR Ref: ICPC/NG/FG/2015ATTN ATTN ATTN:::::APPROVED SETTLEMENT NOTICE.Does it means that you are no more interested of making the claim of your outstanding fund US$20Million of yours which have successful channel to transfer and reflect into your bank and up till this moment you have decided to remain silent after I have personally took an Oath for you to secure this fund.With all due respect, if you really know that you are no more interested of making this claim of your outstanding fund of yours kindly update me now to cancel this Transfer since your negative thought does not allow you to believe on the reality so send me a declaration letter stated that you are no more interested of making the claim so that I will cancel the transfer.What makes you think that you will not secure your fund and have Access of the fund as Beneficiary and you should know that I have made everything possible for you so kindly go now and send this Fee US$98 so that the Ownership Certificate will obtain to enable the Transfer procurement payment slip submit to your bank authority for confirmation of the fund into your bank account.Does it means that you are internationally want to delay this matter and it has been long that I made the announcement of release of your fund which is ready to be with you so with all due respect I advice you to go now and send this Fee immediately without any delay and update me because I want you to secure this fund as a agreed and signed.Make sure that you scan the Attached Copy of payment slip to me immediatelyYou are advice to send the US$98 by Western Union  as directed below and  update with the Attached Copies of payment Information for recorded as directed immediately and also get ready and I am at your Service because of your Funds transfer is READY which you know that you have to  appreciate the effort that Benin new present Government made for you to secure your fund with a copy of Transfer payment Slip to you for Handover.With all due respect, please do not delay to send this fee Today because this is a last chance and final conclusion. Kindly do your best now to send the Fee and update me immediately CONGRATULATIONS.Other details and Transfer procurement payment slip Sheet will be forwarded to your Bank Authority as soon as you send the Fee US$98Today Friday and update me with payment information satisfied that you will rejoice right now.On behalf of this Democratic Government of United States of America (U.S.A), I apologize for any delay you might have encountered in receiving your Fund in the past. By virtue of law, you have to go now and make the payment of the required Fee as directed Below to enable the Ownership Certificate obtain and issue in your Name of your Funds Transfer to be made immediately because this is the time and moment you supposed to receiving of your contract funds as Beneficiary.I officially wait for the Attached Copy of Payment Transfer Slip Information Scan for Recorded of your Funds Transfer to be made immediately.The above money should be sent via WESTERN UNION TRANSFER within 24 Hrs in favor of the smooth confirmation of the funds of your Funds into your Bank Account.Receiver Name: Azis DonaldAddress: Cotonou, Benin RepublicCity Address:: CotonouTest  Question ;  FinalTest Answer: WaySender Name.....................?MTCN,,,,,,,,,,,,,,,,,,,,?Thanks for your UnderstandingBest RegardBenin Republic's  presidentYAYI BONI, (SFF, GCRF) SpamAssassin Report (spam score: 11.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (leonard6[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #128025 - Sent on June 8, 2015, 6:21 pm by leonard6@gmail.com
---------- Forwarded message ----------From: Mark and Cindy <jmorales@gdl.cinvestav.mx>Date: Wed, Jun 3, 2015 at 8:42 AMSubject: To: Greetings I saw your email address during the course of my research i Mark and my wife Cindy Hill, Missouri won a Jackpot and we have solely decided to donate the sum of 2 Million USD to Five lucky individuals who will in turn use 50% of the total funds to assist the less privileged. If you are the intended receiver of this email fill the below details so that we can confirm your details and send to the payout bank. 1.Name: 2.Address 3.Sex 4.Country You can verify this by visiting the web pages below. http://www.huffingtonpost.com/2013/02/25/missouri-powerball-winner_n_2749795.html Email:cindyhill111@gmail.com Regards Mark and Cindy Hill
Click to view scam #128023 - Sent on June 8, 2015, 6:17 pm by jmorales@gdl.cinvestav.mx
Anti-Terrorist & Monetary Crimes Division FBI Headquarters Washington D.C Federal Bureau Investigation J.Edgar Hoover Building 935 Pennsylvania Avenue, NW Washington, D.C, 20535-0001 Ref: FBI/DC/25/113/13/2015 For your Kind Attention. We advise that you get back to us immediately in order for us to instruct you on what to do to enable us attend to your payment files and as well complete the transferring process of your funds $ 10.5 Million, into your designated bank account with immediate effect in the right procedures because we are done with the processing and immediately we hear from you we will commence payment right away. We also want to know if you are the one that instructed LORNA G. DUNCAN, to claim your pending funds $ 10.5 Million because she contacted us yesterday and as well forward to us the below account details. NAME OF BANK: CHASE BANK BANK ADDRESS: 5508 N. DIVISION ST., SPOKANE, WA 99208, USA. ACCOUNT NAME: LORNA G. DUNCAN ACCOUNT TYPE: SAVINGS ACCOUNT NUMBER: 3327755582 ROUTING NUMBER: 325070760. She said she will be paying the $ 259, which is needed to complete the transferring process of the funds into the above bank account details she provided by tomorrow for us to commence transfer. Please get back to us to confirm if you are the one that instructed her because we don't want to make any mistakes regarding the transferring process of your pending funds due to the fact that your payment files has been approved successfully by the entire Board of Directors and immediately LORNA G. DUNCAN, pay of the $ 259, tomorrow to complete the transferring process of your funds into his bank account account we shall commence payment with immediate effect because your funds has been due for transfer. Get back to us immediately regarding the receipt of this email message. We shall earnestly be waiting to hear from you as soon as possible. Thanks FBI Director James B. Comey Cc: Robert S. Mueller, III SpamAssassin Report (spam score: 25.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.178 listed in list.dnswl.org] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_USER From misspaced, from "User" 2.8 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 2.0 FBI_SPOOF Claims to be FBI, but not from FBI domain 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 1.3 FBI_MONEY The FBI wants to give you lots of money? 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128022 - Sent on June 8, 2015, 6:15 pm by info@fbi.gov
Dear purchasing manager,   We are professional supplier of overstock and used shoes & clothes, there are fashion jeans, slippers, sandals, sport shoes and used shoes & jeans.  Should you have any interest, please contact us to send details for possible deal, thank you !   Sincerely,  Jane www.greatconcept-stock.com SpamAssassin Report (spam score: 7.8) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [107.183.149.28 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (huang.jane[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Click to view scam #128027 - Sent on June 8, 2015, 6:13 pm by huang.jane@hotmail.com
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/peyJjIjogOTA3MywgImYiOiAwLCAibSI6IDgyNTQsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Globe Life coverage for adults or children If you are experiencing difficulty viewing this important message, visit here. This message was delivered to you because you have subscribed at one of our choice affiliate sites. If you received this in error and/or want to stop future mailings from this affiliate, you may do so here. Please allow 2-5 days for this to take effect. You can also send correspondence to: Customer Support, 925 B Peachtree St NE Suite 620 Atlanta, Georgia 30309 SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cbssportsinteractive.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128019 - Sent on June 8, 2015, 6:02 pm by wahima@cbssportsinteractive.com
Advert
  my Profile is here = TALK S0ON   My usename = Haley4954   now Send me a F&ckFriend requests so we can hook up!                           - = SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (vexaocomp[at]mail.ru) -0.0 SPF_PASS SPF: sender matches SPF record 2.5 SUSPICIOUS_RECIPS Similar addresses in recipient list 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128024 - Sent on June 8, 2015, 6:02 pm by vexaocomp@mail.ru
Dear 365 Customer, This email is to confirm that you have successfully changed your 365 Online profile. If you did not make any change, please contact Bank of Ireland Service immediately by accessing your online account and going to your secure message box. You can access your profile logging in to the online banking by clicking the following link: Go To Bank of Ireland 365 Online >>> Thank you for using 365 ! ------------------------------------------------------------------------------------------------------------------------------ DO NOT REPLY TO THIS EMAIL. IF YOU HAVE QUESTIONS PLEASE CONTACT US. SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: dreamrodsandrestorations.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Click to view scam #128014 - Sent on June 8, 2015, 6:01 pm by registry@saudi.net.sa
Look 10 years younger without surgery! SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: omeprogram.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
Click to view scam #128021 - Sent on June 8, 2015, 6:01 pm by @
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/zeyJjIjogOTA1OSwgImYiOiAwLCAibSI6IDgyNDQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: ) pts rule name undefined
is this what is in your scam system.kindly E.qvist---------- Forwarded message ----------From: inboxmail33 <inboxmail33@cantv.net>Date: 2015-06-08 16:08 GMT+02:00Subject: AttentionTo: MQ@gmail.com  Attention.We received an email from our diplomat agent that he has arrived yourairport for your ATM Card worth 10.3 milion dollars delivery. Contact him nowwithyour current delivery address and phone number now. Below is the diplomatscontact info.COPY THE EMAIL AND CONTACT HIM NOW:His name: Agent DavidEmail:(atmcard979@gmail.com)Cell Phone No:862 206 1626Once you contact him ask him to give you his USA Phone line to contact him withto complete your delivery today.Thank you.Mr. joe WhiteFedEx Epress.
Click to view scam #128010 - Sent on June 8, 2015, 5:49 pm by inboxmail33@cantv.net
ATTN DEAR BENEFICIARY,  I AM GEORGE WALTER, DIRECTOR CASH PROCESSING UNIT,UNITED BANK FOR AFRICA [UBA] THE ONLY BANK APPOINTED BY THE O.A.U MEMBERS LED BY PRESIDENT JOHN KUFFOR.BECAUSE OF THE FRAUD GOING ON IN WEST AFRICA COUNTRIES WHERE SOME INNOCENT BENEFICIARIES WERE ASK TO PAY IN ADVANCE BEFORE RECEIVE THE MONEY OWED TO THEM. THE ABOVE AFRICA UNION HELD MEETING IN WEST AFRICA AND RESOLVE TO PAY ALL BENEFICIARIES IN CASH THROUGH MEANS OF DIPLOMATIC COURIER SERVICE.WE RECEIVE YOUR FILES FROM INTERNATIONAL MONETARY FUND(I.M.F) AS ONE OF THE BENEFICIARIES.TAKE NOTE; TEN THOUSAND UNITED STATE DOLLARS (US$10,000) HAVE BEEN MAPPED OUT FOR ALL EXPENSES IN SENDING THE MONEY TO YOU THROUGH GENUINE DIPLOMATIC COURIER SERVICE AND HOW IT WAS SPENT WILL BE DETAILS TO YOU. THEREFORE, I WANT YOU TO BEAR IT IN MIND THAT YOUR TOTAL FUND WILL BE NO MORE ONE MILLION FIVE HUNDRED THOUSAND UNITED STATE DOLLARS ($1,500,000.00) BUT ONE MILLION FOUR HUNDRED AND NINETY THOUSAND UNITED STATE DOLLARS ($1,490,000.00).IF ANY BODY TELLS YOU THAT HE IS PAYING YOU IN BANK DRAFT OR TELE-GRAFIC MONEY TRANSFER BOTH WESTERN UNION OR MONEY GRAM, DO NOT LISTEN TO HIM OR HER BECAUSE DUE TO THIS FRAUD NO INTERNATIONAL BANK HONORS OUR REMITTANCE INSTRUCTION ANY MORE. THAT IS WHY WE SETTLED TO PAY IN CASH THROUGH COURIER .WE ALSO RECEIVED A SECURITY REPORT THAT YOU PAID THE FRAUDSTERS WHO HAVE BEEN DECEIVING YOU, TELLING YOU THAT THEY ARE GOING TO SEND THIS MONEY TO YOU.DEAR,AS A SENIOR BANKER, CONTROLLING THIS CASH PAYMENT NOW, I ADVISE YOU NOT TO WASTE YOUR MONEY BY PAYING ANY BODY IN ADVANCE AGAIN, AND IF YOU JUST FOLLOW MY INSTRUCTION, YOU WILL RECEIVE YOUR MONEY IN THREE DAYS TIMEYOUR FUND WILL NOW BE PACKAGE IN A BOX AND TAKE TO THE DIPLOMATIC COURIER SERVICE FOR IMMEDIATE SHIPMENT,  I WILL ALSO SEND THE PICTURE OF THE BOX BY ATTACHMENT TO YOU TO SEE HOW THE MONEY IS PACKED,  I WILL SEND YOU MORE MAILS TO GIVE YOU MORE INFORMATION WITH MY INTERNATIONAL PASSPORT FOR YOU TO KNOW THE GENUINE OF THIS TRANSACTION.THEREFORE, DO FORWARD YOUR FULL NAME, HOME ADDRESS, DIRECT PHONE NUMBER,AGE, OCCUPATION AND NEAREST AIRPORT TO ME AT << revgeorgewalter@gmail.com >> FOR QUICK DELIVERY BECAUSE TIME IS NOT IN OUR SIDE.ALL THE DOCUMENTS WILL BE SENT TO YOU IF I AM ASSURED THAT YOU HAVE STOPPED SENDING MONEY TO THOSE FRAUDSTER . BUT GOD WILL SURELY JUDGE ALL OF THEM WHO LIVES BY CHEATING. MY BIBLE SAYS WHAT DOES IT PROFIT A MAN IF HE GAIN THE WHOLE WORLD BUT LOOSE HIS SOUL, WHICH IS NOTHING. I AM WAITING TO HEAR FROM YOU WITH THE REQUIRED INFORMATION OF YOURS.REV. GEORGE WALTER JP DIRECTOR CASH PROCESSING UNITUNITED BANK FOR AFRICAE-mail:::::: revgeorgewalter@gmail.com SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.182 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jiri.kratt[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #128009 - Sent on June 8, 2015, 5:39 pm by jiri.kratt@gmail.com
Offre Privée Baron Ph. De Rothschild : Mouton Cadet à prix préférentiel pendant 72H Pour visualiser correctement ce message, accédez à la version en ligne Signaler comme indésirable Profitez d'une offre privée réservée pendant 72h aux amis de La Baronnie. Baron Philippe de Rothschild vous propose cette offre Réserve Mouton Cadet + 1 magnum Mise de la Baronnie à conditions uniques ! INÉDIT : Offre en Edition limitée RÉSERVE MOUTON CADET BARON PHILIPPE DE ROTHSCHILD > Découvrir cette offre privée Rejoignez le Cercle Baron Philippe de Rothschild à conditions UNIQUES ! Chez Baron Philippe de Rothschild, la Cuvée Spéciale Réserve MOUTON CADET Médoc bénéficie d?une sélection très stricte, d?une récolte et d?une vinification séparées de chaque parcelle, dans la maîtrise de l?art de l?assemblage et du respect de la typicité de son terroir. Grâce à cette offre exclusive, faites partie des privilégiés à déguster cette cuvée spéciale à conditions uniques. NOUS CONNAITRE        MENTIONS LÉGALES        CONDITIONS GÉNÉRALES DE VENTE L'abus d'alcool est dangereux pour la santé. Consommer avec modération. Cette newsletter contient des cookies destinés à personnaliser les annonces commerciales sauf opposition de votre part.En savoir plus. En application de la loi du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés, vous disposez des droits d'opposition, d'accès et de rectification des données vous concernant. Vous pouvez exercer ces droits par courrier postal adressé à :fjb 14 rue de la Bastide 95000 Cergy.Vous pouvez vous désabonner ou modifier vos préférences, suivez ce lien.Les demandes de désabonnement seront prises en compte dans un délai maximum de 24 heures, sauf pour les demandes par courrier postal, qui requièrent un délai de 8 jours SpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: me14.fr] -0.0 SPF_PASS SPF: sender matches SPF record 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128007 - Sent on June 8, 2015, 5:31 pm by contact@me14.fr
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/neyJjIjogOTA1OCwgImYiOiAwLCAibSI6IDgyNDMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Xorder fMedicationz Online http://mm1989.it/administrator/components/compromisingly.php It's my turn what can you do now steph bessie returned SpamAssassin Report (spam score: 10.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.180 listed in list.dnswl.org] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [122.155.13.139 listed in dnsbl.sorbs.net] 2.5 URIBL_DBL_ABUSE_BOTCC Contains an abused botnet C&C URL listed in the DBL blocklist [URIs: mm1989.it] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mm1989.it] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.0 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only
Click to view scam #128003 - Sent on June 8, 2015, 5:11 pm by fuxm@hepa.com
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/meyJjIjogOTA1NiwgImYiOiAwLCAibSI6IDgyNDIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://gardentoolsforrme.com/keyJjIjogOTA1NCwgImYiOiAwLCAibSI6IDgyNDEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: gardentoolsforrme.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: gardentoolsforrme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Dear Friend   I Dr.Barbara Krause, chairman and chief operating officer with my bank, and I want you to-do in the Amount of $ 18.6 million Will Be Transferred to have your name a foreign partner of our customers at the end of the deceased. I need your help to get the money, because we need to exchange money at a ratio of 60:40%. You will receive this Amount by bank transfer. Please send your full name and your phone numbers directly, and the physical address, and more information about will Be the title of this reply. And note, I am writing to you with one of the Banking Law in the name of, so please, if you are interested in, not the West so long to contact me through my private e-mail at OK (   dr.barbarakrause@mail333.com  ) Your prompt reply highly appreciated Will Be. If you want to AVOID indirectly on the shoulders of you Responded to me in my personal e-mail address please, if you do not order you want on your remote mailbox their shoulders in and keep your mouth shorts. Sincerely, CONTACT ME THROUGH MY INFORMATION, Dr.Barbara Krause, Phone No: + 226- 714 102 29, Contact: E-Mail:   dr.barbarakrause@mail333.com Dr.Barbara Krause   SpamAssassin Report (spam score: 5.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dr.vineetkumarsaxe[at]aol.jp) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [64.12.143.81 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127999 - Sent on June 8, 2015, 4:52 pm by dr.vineetkumarsaxe@aol.jp
Subject: [Support Apple] : Update Your Account ! From: zae@ae.comDate: Mon, 8 Jun 2015 17:31:56 +0200 Dear Customer (s) ,Due to recent updates we are asking many of customers to confirm their informations. We are making sure that we have the correct informations on file and that you are the right full account holder. Please log in your Apple ID to confirm your identity.   Confirm My Account© 2015 Apple. All rights reserved.Email ID: 163327
Click to view scam #128004 - Sent on June 8, 2015, 4:46 pm by zae@ae.com
RE:
Subject: Date: Mon, 8 Jun 2015 05:00:01 -0400From: meded@mclaren.org  After several attempts to reach you on phone, I deemed it necessary and urgent to contact you via your e-mail address and to notify you finally about your outstanding compensation payment of $2,811,041.00 USD by the UN-HABITAT. Please contact UPS Delivery Service with your name, resident address and your direct telephone number for the delivery of your cashier check.United Parcel Service(Ups)Contact Name: Tima Wilsone-mail: ups-courier.ng@webadicta.org PS: Take note that you will pay a Claimant/handling fee of $88 USD. Thanks for your attentionMichael Medd, Program ManagerUnited Nations Human Settlement Programme
Click to view scam #127998 - Sent on June 8, 2015, 4:44 pm by meded@mclaren.org
lt
---------- Forwarded message ---------From: Fox, Brooke N. <fox.1022@buckeyemail.osu.edu>Date: Mon 8 Jun 2015 at 15:03Subject: ltTo: info@gmail.com <info@gmail.com>  
Click to view scam #127997 - Sent on June 8, 2015, 4:44 pm by fox.1022@buckeyemail.osu.edu