Logo



-----Original Message----- From: Agent Leonard Collins <marinette.hagman@swrab.se> To: undisclosed-recipients:; Sent: Tue, Mar 31, 2015 9:37 pm Subject: Your Concern. FBI Headquarters, Washington, D.C. J.Edgar Hoover Building 935 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001 www.fbi.gov Dear Sir, Be informed that we have completed an investigation on your foreign payment and have discovered that you have been dealing with impostors which is why you have had delays and set back on your payment as approved long ago. You are advised to immediately get back to us to assign Agent to handle your payment with the below information. YOUR FULL NAME: CONTACT ADDRESS: DIRECT TELEPHONE: OCCUPATION: ID: THE AMOUNT YOU EXPECTED TO RECEIVE: PAYMENT BANK: APPROVED OFFICE: IMPOSTOR NAME: IMPOSTOR TEL: Yours in Service, Agent Leonard Collins (FBI)  
Click to view scam #116610 - Sent on April 4, 2015, 6:58 pm by marinette.hagman@swrab.se
-----Original Message----- From: Mrs. Rachael Miller <MASSENDERSTYM2015@earthlink.net> Sent: Wed, Apr 1, 2015 12:33 am Subject: Your Compensation Winning Funds Dear Friend, How are you today? I Hope all is well with you and your family? I hope this mail meets you in a perfect condition. I have been waiting for you to contact me for your confirmable bank draft of $500,000.00 United States Dollars, but I did not hear from you. Then I went and deposited the Draft with FedEx, West Africa. What you have to do now is to contact the FedEx Express as soon as possible to know when delivery of your package will commence due to the expiring date. For your information, I have paid for the delivering Charge, Insurance premium and Clearance Certificate Fee of the Draft showing that it is not a Drug Money or meant to sponsor Terrorism in your Country. The only money you will send to the FedEx Courier Service to deliver your Draft directly to your postal address in your country is $280 US Dollars only being Security Keeping Fee of the Courier Company so far. You have to contact the FedEx Courier Service now for the delivery of your Draft with this information below: Contact Agent: Mr. Ronald Mona Email Address: ronaldomona74@yahoo.pt Finally, make sure that you reconfirm your Postal address and direct telephone number to them. Contact them immediately to avoid any further delay and remember to pay them their Security keeping fee of $280 US Dollars for their immediate action. You should also let me know through email as soon as you receive your Draft. Yours Faithfully, Mrs. Rachael Miller
Click to view scam #116600 - Sent on April 4, 2015, 6:57 pm by MASSENDERSTYM2015@earthlink.net
-----Original Message----- From: GODWIN EMEFIELE <USACE-ALERT@USACE.ARMY.MIL> Sent: Wed, Apr 1, 2015 6:02 pm Subject: Re: Re-confirm your information.... Hello, Based on numerous complaints, past predicament and appeal, the new constituted CBN Committee joint with the World Bank Group, was set up by President Good Luck Jonathan, as to enable Nigeria Government and the World Bank to be able to pay all its outstanding delayed Payments/Debts to Contractors whose contract payments are verified to be genuine $12.5 million dollars. Your contract name was presented and the Committee was satisfied that your Delayed (Name) contract is valid and qualified for Committee Payment consideration; additionally, your payment delay was also added to your Payment defense, as to seek the committee's favor/sympathy, which made the Committee to felt for you and decided that your contract Payment must be among the first List of contractors/payee. Kindly notify us of the receipt of this mail and re-confirm your information where your fund will be delivered to you with your direct telephone number to enable the accredited delivery agent to call you on his arrival and address/ occupation. As this to convince the Committee of your legitimacy/genuine ownership. Regards MR. GODWIN EMEFIELE GOVERNOR, OPERATIONS DIRECTORATE CENTRAL BANK OF NIGERIA (CBN)
Click to view scam #116615 - Sent on April 4, 2015, 6:56 pm by USACE-ALERT@USACE.ARMY.MIL
Notice to Appear, You have not paid for driving on a toll road. You are kindly asked to pay your debt as soon as possible. You can review the invoice in the attachment. Yours faithfully, Todd Levy, E-ZPass Agent. SpamAssassin Report (spam score: 3.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.203.35.80 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.170 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116614 - Sent on April 4, 2015, 6:56 pm by todd.levy@itechsolutions.tn
Good day, CONSIDER THIS VERY PERSONAL I believe you are a highly respected personality, considering your position and the fact that we newly met during my discreet search for a partner whom can assist me in taking this task to its success. Due to the ongoing crisis in my country Syria (Syrian Uprising), which has unfortunately claimed thousands of Syrian lives.(http://en.wikipedia.org/wiki/Syrian_uprising_(2011-present) This current crisis that engulfed our country has resulted in continual killing of innocent protesters by the present regime, which unfortunately I am part of it because I am Member of the Syrian Regional Branch of the Ba'ath Party of President Bashar Assad. I wish to state categorically that I am against the killing of innocent protesters and I have no hand in the crackdown, which I have been accused. I do not wish to go in details in the events in the country because you have already heard or watch from International Media houses. I wish to inform you that I have been sanctioned by EU and other international communities for the crimes against Syrian people.Sincerely I have been wrongfully accused. The reason I contacted you is that I wish to secretly entrust under your personal care, a local arrangement of opening a Dollar Account with a reputable Bank in your country where I can safeguard my funds secretly pending outcome of events in my country. I will give you further directives as soon as I receive your consent and contact details through my private email.Kindly respond only through my personal email ONLY (alatimohamad@hotmail.com) and not on my official email address to avoid interception by the Government. Do get in touch with me ONLY on this secured Roaming telephone number: Tel:(Voice)+97223740199 Yours Sincerely, AL-JLEILATI, Mohammad SpamAssassin Report (spam score: 20.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wikipedia.org] 1.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (atimohamad999[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 3.1 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.5 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #116607 - Sent on April 4, 2015, 6:55 pm by atimohamad999@gmail.com
-----Original Message----- From: Abu Dhabi Foundation <h-shimada@systec-eng.jp> To: Recipients <h-shimada@systec-eng.jp> Sent: Thu, Apr 2, 2015 8:01 pm Subject: The Abu Dhabi Foundation King Abdullah bin Abdulaziz Al Saud Street. P.O.Box 814, Al-Bateen Area, Abu Dhabi. United Arab Emirates. The Abu Dhabi Foundation is a non-religious, non-political and non-profit organization chaired by His Highness late Sheikh Zayed Bin Sultan Al Nahyan, Vice President and Prime Minister of the UAE and Ruler of Dubai here in UAE, and was established in 1971. The Abu Dhabi Foundation in conjunction with the European Union just commence yearly charity donation. These Donations are freely given to (3) Lucky Winner's for their business,educational and personal development. Congratulation, You are among the (3) lucky beneficiary selected to receive this donations award sum of £1,000,000GBP (One MillionGreat Britain pounds)each as charity donations/aid from Abu Dhabi Foundation. For more details on how to receive your Donation Bank Draft, please contact the President of Abu Dhabi Foundation with your pin number (Abu-Dh82-X9M) Full name, contact address and phone number. On behalf of the foundation, we say congratulations to you. President Of Abu Dhabi Foundation, Dr. Abdul Raheem. Reply To: abudhabihome@hotmail.com
Click to view scam #116599 - Sent on April 4, 2015, 6:55 pm by abudhabihome@hotmail.com
-----Original Message----- From: GODWIN EMEFIELE <USACE-ALERT@USACE.ARMY.MIL> Sent: Fri, Apr 3, 2015 3:56 am Subject: Re: Very sorry for the last respond... Hello, Based on numerous complaints, past predicament and appeal, the new constituted CBN Committee joint with the World Bank Group, was set up by President Good Luck Jonathan, as to enable Nigeria Government and the World Bank to be able to pay all its outstanding delayed Payments/Debts to Contractors whose contract payments are verified to be genuine $12.5 million dollars. Your contract name was presented and the Committee was satisfied that your Delayed (Name) contract is valid and qualified for Committee Payment consideration; additionally, your payment delay was also added to your Payment defense, as to seek the committee's favor/sympathy, which made the Committee to felt for you and decided that your contract Payment must be among the first List of contractors/payee. Kindly notify us of the receipt of this mail and re-confirm your information where your fund will be delivered to you with your direct telephone number to enable the accredited delivery agent to call you on his arrival and address/ occupation. As this to convince the Committee of your legitimacy/genuine ownership. Regards MR. GODWIN EMEFIELE GOVERNOR, OPERATIONS DIRECTORATE CENTRAL BANK OF NIGERIA (CBN)
Click to view scam #116609 - Sent on April 4, 2015, 6:52 pm by USACE-ALERT@USACE.ARMY.MIL
-----Original Message----- From: Claudette Fizer <Claudette.Fizer@ccstn.org> Sent: Fri, Apr 3, 2015 3:49 pm #AOLMsgPart_2_37979f15-9a49-4865-a2e3-4fcb69d0adbc td{color: black;} .aolReplacedBody P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px }     Attention. I have received the check from the bank three days ago and I kept the check with MR. JOHN MARK as we discussed. Please mail him immediately via this below email: johnmarkk10@gmail.com to send the check to you. I am in Mexico now. I kept ($1,500.000.00) One million five hundred thousand dollars only cashier check and will send you the rest of money after my business trip here. I send you so many mails but all bounced back. So mail MR. JOHN MARK with below email for him to send the check to you:  johnmarkk10@gmail.com Thanks and do let me know when you receive your money. 1. FULL NAME: 2. ADDRESS: 3. E-MAIL ADDRESS: 4. TELEPHONE NUMBER: 5. OCCUPATION: Hoping to hear from you. Thanks and God bless you and your family.   Kindly make sure your details are sent to MR. JOHN MARK via this below email:  johnmarkk10@gmail.com Yours Truly, Dr. Vignesh Anderson avast! Antivirus: Outbound message clean. Virus Database (VPS): 150403-3, 04/03/2015 Tested on: 4/3/2015 2:49:22 PM avast! - copyright (c) 1988-2015 AVAST Software.
Click to view scam #116595 - Sent on April 4, 2015, 6:51 pm by Claudette.Fizer@ccstn.org
-----Original Message----- From: Michael Fisher <fisher729@usa.com> Sent: Sat, Apr 4, 2015 8:25 am Subject: Good News About Your ATMfa Attention: Beneficiary I am pleased to inform you that your ATM Card worth Ten Million, Five Hundred Thousand United States Dollars (US$10.5m) sent from Nigeria as part of your overdue payment/funds was returned to our office last week from Atlanta, Georgia where it was held due to one unavailable document. According to the information reaching my desk today, the ATM Card was returned due to your failure to pay the necessary charges required by the delivery company to enable it pass through the security agency. However, after due investigation was conducted, I found out that your ATM Card was stopped unnecessarily. Georgia office told us that your ATM Card has no INTERNATIONAL DELIVERY PERMIT that was why you were told to pay huge amount of money which you did not pay. But after further investigation, it was very clear that your ATM Card has the INTERNATIONAL DELIVERY PERMIT attached to it therefore you will no longer pay the money you were asked to pay then. Now the only money you are required to pay is $130 only billed for NIGERIA CUSTOMS SERVICE CLEARANCE CERTIFICATE to clear your file so that you can receive your ATM Card without further delay. Note that the Nigeria customs will process the CUSTOMS CLEARANCE CERTIFICATE and send it to us as soon as you send the money to them to enable us release your ATM Card. Kindly reconfirm your full name, home address, I.D and direct/cell phone number so that your ATM Card will be dispatched without any delay immediately you send the fee to them. Be rest assured that your ATM card will be dispatched to the address you will provide as soon as you send the fee for the document. Secondly, be rest assured that there will be no delay on your ATM card delivery after you send the money and the clearance document is been issued in your name by the NIGERIA CUSTOMS SERVICE. For more information about me, kindly visit our website. http://www.cbp.gov/about/leadership/assistant-commissioners-office/border-patrol Awaiting your timely response with the above stated information of yours, then I will advise you on how to send the $130 to the NIGERIA CUSTOMS SERVICE. Alternatively, you can also email me at mcl900@aol.com and michaelfisher@barid.com Regards, Michael J. Fisher Chief of the Border Patrol U.S. Customs and Border Protection Office of Border Patrol Ronald Reagan Building, Washington, D.C.
Click to view scam #116598 - Sent on April 4, 2015, 6:51 pm by fisher729@usa.com
-----Original Message----- From: mr sam williams <fileo1736@gmail.com> To: undisclosed recipients: ; Sent: Fri, Apr 3, 2015 4:29 pm Subject: Name- Agent... Mr Sam William  Attention: We have finally succeeded in getting your package worthy of $12.5Million out of delivery your  consignment with the help of Dr David Don Attorney General of Federal High Court of Justice Benin which act as your foreign Attorney representative here in Benin. So every necessary arrangement has been made successfully with the Agent  Mr Sam William of your package and every Documents guiding your delivery is well updated so you are advice to re-confirm your full delivery information to the Agent right now as he is currently at Los Angeles International Airport in USA with your consignment box, As he called me this morning to inform me that he misplaced your delivery address which he has. So you are advice to reconfirm your full delivery information to the diplomat and call him with this  Number 805 203-6461 so as to have easy conversation with him and to enable you give him full direction to get your package delivered to you and hand you over your package safe and sound, Furthermore you are advice to be very fast as the Agent  Mr Sam William has no time to waste due to his flight ticket, So the Information you are Required to Reconfirm to the Agent is as Follow. (1)Your Full Name (2)Mobile Phone Number (3)Current Home Address (4)Fax Number (5)Country (6)City (7)Nearest Airport As he is at Los Angeles International Airport in USA right now because of the Searching and Scanning of the consignment box which made him to misplace your address (8) A Copy of Your I D For attached Identification. So contact him to deliver your package first thing tomorrow morning possibly today, So get back to us immediately you contact the Agent to make sure that your fund has getting to you without any hitch, Please try to make sure that you contact him with this Email Name- Agent... Mr Sam William Call or Email :....+229-686-253-96. So contact him to deliver your Consignment box first thing tomorrow morning possibly today, So get back to us immediately you contact the Agent to make sure that your fund has getting to you without any hitch, Furthermore remember the Agent delivering the Consignment Box does not know the content of that consignment box is money, Because the Attorney which represented you registered it as a family value to avoid hitch during the delivery so unknown circumstances should you let him know the content of that consignment box is to avoid lost of your fund as your Consignment was Sign and Stamp by Federal Ministry of Justice to make sure that it is protected until it gets to you.. Regards Rev. Jerry Mark Mobile: (+229)  686-253-96dies.  
Click to view scam #116594 - Sent on April 4, 2015, 6:50 pm by fileo1736@gmail.com
Hello Dear, how are you doing today?  SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (timanita010[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (anita tim ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116596 - Sent on April 4, 2015, 6:44 pm by timanita010@hotmail.com
UNITED NATIONS ORGANIZATION PALAIS DES NATIONS, 1211 GENEVA 10, SWITZERLAND. Dear Fund Beneficiary, IRREVOCABLE PAYMENT ORDER VIA ATM CARD We have actually been authorized by the newly appointed United Nation secretary general and the governing body of the UNITED NATIONS Monetary Unit to investigate the unnecessary delay on your payment, recommended and approved in your favor. During the course of our investigation, we discovered with dismay that your payment has been unnecessarily Delayed by corrupt officials of the Bank who are Trying to divert your funds into their private accounts. To forestall this, security for your funds was organized in the form of your personal Identification number (PIN) ATM CARD and this will enable only you to have direct Control over your funds in the ATM CARD. We monitor this payment ourselves to avoid the hopeless situation created by the Officials of the bank. An irrevocable order guarantee has been issued by the World Bank Group and the International Monetary Fund (IMF) on your Payment. However, we are happy to inform you that based on our recommendation/Instructions; your complete Inheritance funds have been credited in your favor through ATM VISA CARD. You are therefore advice to find contact information below to receive the ATM: Contact Info: Mr. MR IYKE KADIRI Director ATM Swift Card/Foreign Operation Dept, Email: mriykekadiri@barid.com Phone: +229?243288 Contact him now and tell him to advise you on how to receive your ATM CARD. As soon as you establish a contact with him, an ATM card will be issued to you immediately which you can use to withdraw your funds in any Bank ATM Machine in your Country, but the maximum is $6000 USD per day. Contact him with your data as stated below: Your Full Name........................................ Contact Information Address........................... Your date of Birth.................................... Your telephone number................................. And scan copy of your driver license or International Passport................................ NOTE: You are advised to furnish Mr. Josef Alma with your correct and valid details. Also be informed that your ATM CARD is valued $2.67M USD (Two Million Six Hundred and Seventy Thousand United States Dollars). Congratulations. MESSAGE FROM THE PRO UNITED NATIONS ORGANIZATION NOTICE WITH IMMEDIATE EFFECT SpamAssassin Report (spam score: 11.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.172 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: barid.com] 3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary: 2.5 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 FSL_PHP_EXPLOIT_41 PHP Script being run by someone in Africa 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (infor_officemail2t[at]terra.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.8 YOU_INHERIT Discussing your inheritance 1.2 MONEY_ATM_CARD Lots of money on an ATM card 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #116593 - Sent on April 4, 2015, 6:43 pm by infor_officemail2t@terra.com
-----Original Message----- From: Michelle Pickens (FRS-OIG) <agentpicken@blumail.org> To: Office of Inspector General (FRS) <oigfrs1@blumail.org> Sent: Sat, Apr 4, 2015 11:48 am Subject: Money Transfer Federal Reserve System (FRS-OIG) 20th Street and Constitution Avenue N.W. Washington, D.C. 20551, USA                         Ref: HSBC/USFRS/TT/CHQ/0032015A   Good day,      This brief e-Mail is to serve as official confirmation of your payment ($1 Million USD) with us at the Federal Reserve Bank (HSBC Bank).   Consequently, your presence is required at our local Reserve Bank (HSBC Bank) for signatory to harmonize the transfer into your domestic bank account.   e-Mail me now with your full contact information, names and address to enable us endorse your Fund Release Order (FRO) document which you shall present to our local Reserve Bank (HSBC Bank-Washington) for immediate release & transfer of your fund.   Thank you and Congratulations!   Yours in service,      Dr. Michelle Pickens (Mrs.) Special Representative, Federal Reserve System (FRS-OIG)
Click to view scam #116592 - Sent on April 4, 2015, 6:43 pm by agentpicken@blumail.org
Hi Dear, Please I want you to read this letter very carefully and I must apologize for barging this message into your mail box without any formal introduction due to the urgency and confidential of this issue. I know that this mail will come to you as a surprise, please this is not a joke and I will not like you to joke with it. I am Mrs. Sandra Morgan from Cote d'Ivoire, but I am presently residing in Benin Republic for safety of my life, because of the political crisis in Cote d'Ivoire. Please I am seeking for you're since assistance to retrieve and transfer this funds $18.5 Million U.S dollars belonging to my late Husband who was held bondage by the Rebels during the political war 2011 and was later killed. I ran into Benin Refugee Camp during the war when I discovered danger to my life. Please I wanted to establish a charity foundation and lucrative businesses in your country with this funds $18.500.000 Million which I inherited from my late husband (Dr. Toure Morgan). It is my desire to invest this fund into a lucrative business of your choice in your country. I have the desire to transfer and invest this funds in your country and I needed your adequate assistance to claim the money from the Security Firm were my late husband deposited it for safe keeping and for onward transfer. I have nice percentage of the money for you after the project. Please kindly keep this mail to yourself for a security reason and get back to me through this email address if you're interested. E-mail: sandramorgan@barid.com Waiting to hear from you soon! Sincerely Yours, Sandra Morgan SpamAssassin Report (spam score: 14.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 3.6 NA_DOLLARS BODY: Talks about a million North American dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 FSL_PHP_EXPLOIT_41 PHP Script being run by someone in Africa 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (infor_officemail2t[at]terra.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: barid.com] 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 2.4 XM_PHPMAILER_FORGED Apparently forged header 3.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #116589 - Sent on April 4, 2015, 6:40 pm by infor_officemail2t@terra.com
Re:
From: Craig <mihelen@otenet.gr>Date: April 4, 2015 at 10:55:22 AM MDTTo: info@mail.comSubject: Re:Reply-To: craig101@163.comHi  Is it okay to discuss possible business in this email? Do let me know ASAP so i can provide you with the details.  Regards Craig
Click to view scam #116588 - Sent on April 4, 2015, 6:32 pm by mihelen@otenet.gr
Dear Friend,   I am working with one of the prime bank here in Burkina Faso, can you help me repatriate the sun of 14.3million dollars to your oversea Account Based on percentage.   (1) Can you handle this project? (2) Can I give you this trust? (3) What will be your commission? I expect your urgent response if you can handle this project.   Best Regard's, Please kindly reply to my alternative email address below alhassnekeita2006@gmail.com Alhassne Keita SpamAssassin Report (spam score: 10.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.9 AXB_X_AOL_SEZ_S AOL said this is S* 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 HK_RANDOM_FROM From username looks random -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (q.ddddd[at]aol.fr) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #116587 - Sent on April 4, 2015, 5:38 pm by q.ddddd@aol.fr
Begin forwarded message:From: Services Info <magatronald@gmail.com>Date: 4 April 2015 14:56:01 BSTTo: undisclosed-recipients:;Subject: Sign inYour mailbox has exceeded the storage limit is 1 GB, which is defined by the administrator, are running at 99.8 gigabytes, you can not send or receive new messages until you re-validate your mailbox.To renew the mailbox,Click HereThank you!Web mail system administrator!WARNING! Protect your privacy. Logout when you are done and completelyexit your browser.
Click to view scam #116585 - Sent on April 4, 2015, 4:28 pm by magatronald@gmail.com
Dear Felix, This is to inform you to appear in the Court on the April 11 for your case hearing. Please, do not forget to bring all the documents related to the case. Note: The case may be heard by the judge in your absence if you do not come. You can review complete details of the Court Notice in the attachment. Regards, Kenneth Valentine, Clerk of Court. SpamAssassin Report (spam score: 1.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Advert
Çàðàáîòàéòå ñâîè 1000$ óæå ñåãîäíÿ![eqycj] Ïîïðîáóéòå! Ýòî ðåàëüíî![vdescsuc] 1.Çàõîäèòå... 2.Ðåãèñòðèðóéòåñü.[sybcwxzo] 3.Çàðàáàòûâàéòå.[qpliy] [cmqvxg] [iznzx] [zohgvsys] SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [74.7.29.203 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.172 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (l[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116583 - Sent on April 4, 2015, 4:10 pm by l@gmail.com
If you do bulk emailing daily then we can be of help to you simply use Earthlink customised RDP with already configured AMS to send unlimited emails daily and does not use any form of smtp yet has very excellent delivery. Visit our website below to choose the affordable plan that suits your bulk mailing needs. http://marketingneeds.wc.lt We can also help you send your bulk emails with same Earthlink rdp at an affordable cost of 50USD per one million emails and 80USD per two million emails Chat with us on yahoo messenger hackers4bulk@yahoo.com or call +27 742058041. We also sell Webmails, SMTP , RDP , High response Email Leads, Linux smtp scanner ,linux servers which happens to be the fastest generator of smtps as of date and also we can program various types of softwares to suit your needs talk to us now lets see how we can help you grow. Many people out there do reap people off their hard earned money, but we are here to correct the impression. A trial will convince you. For more details contact Jerry +27 742058041 hackers4bulk@yahoo.com SpamAssassin Report (spam score: 24.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wc.lt] 1.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hackers4bulk[at]superposta.com) 0.9 SPF_FAIL SPF: sender does not match SPF record (fail) 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL 1.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 0.0 FAKE_REPLY_C FAKE_REPLY_C 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 4.1 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope 2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool 1.5 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #116582 - Sent on April 4, 2015, 3:43 pm by hackers4bulk@superposta.com
Xarelto Users, Read This! Free Legal Review and Potential Compensation. SpamAssassin Report (spam score: 7.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
#yui_3_16_0_1_1416814464938_3000 #yui_3_16_0_1_1416814464938_3176 #yui_3_16_0_1_1416814464938_3175 { font-family: Trebuchet MS, Arial, Helvetica, sans-serif; }     =========Spam Tools ======= Inbox mailer ==>> $12 Webmail ==>> $10 Domain unlimited Smtp ==>> $10 {guaranteed} smtp ip unlimited ==>> $12 {guaranteed} Rdp Administrator ==>> $10 RDP User ==>> $4 CVV ==>> $5 Bank logins ==> negotiable Fullz==>> negotiable dead fullz ==> negotiable HMA VPN ==>> negotiable Spammin services ==>> negotiable Emails Leads D.B ...==>> negotiable Cpanel ==>> $10 Shell ==>> $7 USA banklogins ==>> negotiable ... My yahoo ID ==>> Sql.injector86     Yahoo ID ==>>Sql.injector86    
Click to view scam #116579 - Sent on April 4, 2015, 3:18 pm by
MHhaYWdCDQoNCqRrqcqpyqdOskiqdsD4p66k6A0Kp9yvaLPSq+y0X7rrpE8NCsHZprOn86Zo qrqyo6t+vdDCSb/vpFWmQ7r0p30NCmh0dHA6Ly9wem8uaGlnaDg4OS5uZXQNCg0KpnC1TKpr s3O1siC90MJJv++h97NvpKOsT6lVp6OrSCCyvqZeptymrKXzp1i0TqVps3O1sg0KDQplOWNBSpamAssassin Report (spam score: 16.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [81.177.22.100 listed in zen.spamhaus.org] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [81.177.22.100 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.179 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (1141otihau[at]ms78.hinet.net) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116580 - Sent on April 4, 2015, 3:14 pm by 1141otihau@ms78.hinet.net
My Dear, greetings from me,(anta_abashan@hotmail.com)First I will like to apologies for intruding into your privacy, since we don't know each other.understand my reason of contacting you Please don't be angry with me am miss Anta, I saw your profile and become interested.I feel we can be good friends. so i will like you to send me a mail in my email here (anta_abashan@hotmail.com) SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.172 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (bunganita[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116578 - Sent on April 4, 2015, 3:14 pm by bunganita@hotmail.com
Hello, we have few financial questions for you: Do you want to expand your business going? Home improvement? Your banks have said that you are not qualified to get a loan we are for loan assistance contact via Email: morhanallem1313@gmail.com SpamAssassin Report (spam score: )
Click to view scam #116575 - Sent on April 4, 2015, 2:28 pm by sales@topcement.vn
04.04.15---------- Forwarded message ----------From: "Mrs. Susan Alban" <fullmet@speedy.com.ar>Date: 2015-04-04 10:07 GMT+02:00Subject: Attention BeneficiaryTo: Attention Beneficiary,This is to officially informed you that we have concluded arrangements to effect your payment of $8,5 USD through office of ATM Swift Card services today,but the maximum amount you will be able to withdraw per day is the sum of $10,000.00 at any Atm machine wordwide.receiving every day starting from tomorrow is $10,000.00 as reflected in our transfer system daily until the funds is completely transferred.This special arrangement is being used to avoid all scrupulous demands by both the states and federal authorities that have previously delayed your payment till date; we shall need your maximum co-operation to ensure that strictness and confidence is maintained to avoid any further delays. You are to discard any request asking you to send money to any agency such as Courier Company, Bank and Security Agency as there are no such and any money committed there will be regretted, so be wise.The above arrangement has been signed and endorsed by UNITED NATION (UN), EUROPEAN UNION (EU) given credence that this transaction is devoid of any form of illegality.Please contact the Accredited Agent for the details of your Atm card shipment and reconfirm your correct details that your Atm visa card will be send to you.Fill your details below for reference purposes:*NAME OF CUSTOMER:*ADDRESS:*COUNTRY:*TELEPHONE:*SEX:*Occupation:Contact the below Electronic Transfer unit of ATM payment department for immediate programming of your shipment to your destination:DIRECTOR: GENERAL MR.KEN ALLENPHONE NUMBER: +229-98-42-55-08atm-customercare@live.comRemember your obligation to secure an International Remittance Form as stated in United Nation act of (FRT209) that will help build and renew your transfer file for record keeping as a way of checkmating the present Economics crisis situations.Thanks and God BlessMrs. Susan Alban.
Click to view scam #116574 - Sent on April 4, 2015, 2:19 pm by fullmet@speedy.com.ar
04.04.2015---------- Forwarded message ----------From: John Jay <westernunion94@cantv.net>Date: 2015-04-04 0:04 GMT+02:00Subject: I'm western union AgentTo: rhyancy4444@gmail.com  I'm western union Agent Mr. John Jay Your first payment of $5000.00 has been sent today via Western Union. You are advise to Contact WU with your fullinformation to enable them give you Sender Name, Question and Answer to pick up your First Payment MTCN= 8845-115-202 , For more information contact Mr.Don William, Tell: +229 98954729 Email: (western_union79@outlook.com) he'll keep sendingyou payment until your total fund is Completed Thank you for cooperation Best Regards
Click to view scam #116572 - Sent on April 4, 2015, 2:14 pm by westernunion94@cantv.net
Greetings,We offer flexible financial packages for various projects by passing the usual and formal procedures, and willing to provide financing for up to 500 Million USD and above depending on the nature of business on 3.5% interest rate annually. We invite all interested project owners to provide us with a comprehensive business plan for our review.* Business Start-up* Business Acquisition* Business Expansion* Commercial RealEstate purchaseDo reply if you have need for our investment facility for further discussion.Best Regards,Ismail Khor.Dubai - UnitedArab Emirates. SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (or0978[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.175 listed in list.dnswl.org] 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #116570 - Sent on April 4, 2015, 2:00 pm by or0978@hotmail.com
d0wwUmFaUw0KDQqhbcLFpfq5cbx2oW6mYaTfpN6kTw0KoW3CxaX6uXG8dqFuN7i5uFSmYTNE IA0KxXeq78JJv++kVaZDuvSnfQ0KaHR0cDovL2N2b215Lmdvb2RiZC5vcmcNCg0KpnC1TKpr s3O1siC90MJJv++h97NvpKOsT6lVp6OrSCCyvqZeptymrKXzp1i0TqVps3O1sg0KDQpTcnR0 N0sSpamAssassin Report (spam score: 8.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received vi
Click to view scam #116567 - Sent on April 4, 2015, 1:49 pm by 789jcphxb@ms46.hinet.net
Attn Dear Beneficiary. Your Consignment Box of USD$6.2 Million United States Dollars, we wish to inform you that the diplomatic agent conveying the consignment box valued the sum of USD$6.2 Million United States Dollars is currently stranded at your International airport now. We required you to reconfirm the following information below so that he can deliver your consignment box to you today. NAME: =================ADDRESS: ==============MOBILE NO.:============NAME OF YOUR NEAREST AIRPORT:=======A COPY OF YOUR IDENTIFICATION :==============COUNTRY==============COMPANY REGISTRATION NO :EG58945 CODE NUMBER: 0140479 Also make sure that you forward your Code Number and Company Re registration's to him because it is very important to enable him locate your package. Please do contact the diplomatic agent with the email below with the information required. Contact Person : Mr.John Williams EMAIL; ( diplomatagentjohnwilliams@gmail.com) CALL him on his international roaming line ( +229) (68-80-89-73) He is waiting to hear from you today with the information, NOTE: The Diplomatic agent does not know that the content of the consignment box is $6.2Million United States Dollars and on no circumstances should you let him know the content. The consignments was moved from here as African Cloths, so never allow him to open the box on till its delivered to you. Best Regard, Dr: Gan Favour Dir:DHL COURIER COMPANY, Email, companybenind@gmail.com SpamAssassin Report (spam score: 14.2) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 MILLION_USD BODY: Talks about millions of dollars 3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (customercarereliancebanklondon[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.193 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.2 MONEY_FORM_SHORT Lots of money if you fill out a short form 0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 3.1 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Dear........., I am so sorry for not been writing you for all this while is just that i am working so hard with the lawyer for a good result as the Bank promise, now i have a good news for you i received an email from the bank today that i should let you know as the co beneficiary to the said fund that all the money has been transfer into ATM card now all you need to do now is to contact this email now with all your details as soon as possible so that the ATM card will be deliver to your house address for you to get access of the money as i told you,you will never regret for helping me in this transaction. Note the Bank is going to pay for the delivering of the ATM card direct to your home through The DHL delivering service wooow i am so happy please as soon as possible you received this email contact this department for the delivering of the card to you now. NAME MR.JOHN BULL ASIA CARD CENTER DEPARTMENT cardcenterasia@yahoo.com SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dr.mohmoh_5[at]inbox.lv) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.173 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: inbox.lv] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails
Click to view scam #116566 - Sent on April 4, 2015, 1:40 pm by dr.mohmoh_5@inbox.lv
Estimulante natural para homens e mulheres! Ver no browserReportar SPAM    Esta mensagem foi enviada para phredphucker@gmail.com.Pode em qualquer momento se descadastrar no link em baixo. Não deve responder a este email diretamente pois a sua solicitação poderá não ser respondida. Neste momento está recebendo as melhores ofertas do dia pelo serviço Melhor do Dia, um serviço completamente gratuito para que o usuario esteja sempre a par das melhores novidades e descontos. Caso queira deixar de receber nossas fantástica promoções.SpamAssassin Report (spam score: 10.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: geracao2.com.br] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: geracao2.com.br] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #116565 - Sent on April 4, 2015, 1:05 pm by new-57882@geracao2.com.br
gilachumcirculatoryvaccinatenostradamusclydeoctoroonkidnapchromatogramconformancegottenmiserblackmanresilientcommensurablespew ·L«H§?¤?Hout°Õ
Click to view scam #116564 - Sent on April 4, 2015, 12:49 pm by errkh@163.com
FEDERAL MINISTRY OF FINANCE NATIONAL HOUSE OF ASSEMBLY COMPLEX SENATE HOUSE - UPPER CHAMBERS WUSE DISTRICT, COTONOU BENIN P.M.B. 0127, AGBOKOU, COTONOU Our Ref: FGN /SNT/STB My name is Mr. Kyle A. Mendal.We do apology for your long transfer of funds from the office as we have decided to handle the payment our self here with our Bank of Africa here.You have ignored my previous emails. I'm to inform you for the last time that we are not joking over this,I know my reason for the continuous sending of this notification to you.The fact is that you can't seem to trust any one again over this payment and we have now curt the prize of $99 to $39 for what you have been in cantered in many months ago, but I want you to trust me, I cannot scam you for $39 it is for bank processing of your payment, the fees is $99 but we have curt to $39 so that you can be able to send it today. $39 is clearly written to you before, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $39 I don't want you to loose this fund this time, because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of ignorance, I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $39 you will not loose it,instead it will bring your financial breakthrough, find the money and send it to our bursary. The reason why am sending you this because I want you to receive your USD2.5M immediately we are trying to round up for thispayment program.The processing charges which was initially on the high price has been cut down by the payout bank considering the poor economic situations that make it difficult for the middle class citizens to meet up with the processing charges of their entitlement. Upon the confirmation of your processing charges you will get your $2.500,000.00 into your account within 15hrs. Here is the payment information through western union money transfer or money gram money transfer finally my advice to you is not to abandon this transaction because of the requirement of $39 Account Officer Info:Send the fee through Money Gram only. Receivers Name: IKAM ANTHONY Address: COTONOU BENIN REPUBLIC Address: Lot No.23 Patte D'Oie, 03 BP 2147. Test Question: WHEN Answer: NOW SENDER NAME: Amount:::$39 only. MTCN: Sender's full banking details to avoid wrong transfer: Yours in service Mr. Kyle A. Mendal SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.196 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (luannguyen95117[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (luannguyen95117[at]gmail.com) 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #116561 - Sent on April 4, 2015, 12:38 pm by luannguyen95117@gmail.com
Tonya,EAT THIS, NEVER DIET AGAIN SpamAssassin Report (spam score: 5.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: kscommercial.net] 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_HK_NAME_DR T_HK_NAME_DR 1.4 MISSING_DATE Missing Date: header
Click to view scam #116562 - Sent on April 4, 2015, 12:36 pm by @
Advert
Hi, A hacker from romania. My name is Alin,selling all kind of spamming tools. Mystery Shoppers Resume Box.,shells c99 2015 ,inbox Mailer , SMTP, cPanel , Rdp , Shell,webmail Mailer , SMTP, cPanel , Rdp , Shell, ssh , Email Leads , Webmail, email and password , Dumps , CVV ,Dead Fullz,and posting craigslist,usp online cheques direct to your address..... YAHOO!!! alexandrualin32 FAX: +40249436037 FAX ONLY. NO CALLS Thank you. Alin
Click to view scam #116559 - Sent on April 4, 2015, 12:31 pm by
  PLEASE AND PLEASE MAKE SURE YOU CONTACT ME THROUGH E-mail ID (drmuphatlumumba@gmail.com) I am Dr Muphat Lumumba i am  writting you this letter based on the latest development at my Department which I will like to bring to your personal edification.(18.6 million U.SDollars transfer claims)  If you are interested,get back to me with the following  details below.  (1)Your age........................    (2)Sex........................ (3)Your occupation..... (4)Your marital status..... (5)Your country Name...... (6)Your full residential address....... (7)Your private phone and fax number and your complete  name.......  (8)A copy of your int'l passport or ID card............  As soon as I receive these data, I will forward to you the application form which you will send to the bank.   Dr Muphat Lumumba +226 68039466   PLEASE AND PLEASE MAKE SURE YOU CONTACT ME THROUGH E-mail ID (drmuphatlumumba@gmail.com)   SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 2.9 AXB_X_AOL_SEZ_S AOL said this is S* 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (opportunityopportunity[at]aol.jp) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116560 - Sent on April 4, 2015, 12:23 pm by opportunityopportunity@aol.jp
Begin forwarded message:From: "MR ALEX WHITE"<info@info.com>Date: 1 April 2015 00:35:27 BSTSubject: RE.YOUR ABANDONED CONSIGNMENT!11 REPLYReply-To: <boston.logan_intl_airport@qualityservice.com> Attn: My Friend     My name is Mr.Alex White,i am the Director Inspection Unit, United Nations Inspection Agent. We are currently in  Boston Logan International Airport, Boston, United States for official inspection while i discovered an abandoned shipment from UK via Diplomat with your name/email tagged on it, when i personally scanned it, it revealed an undisclosed sum of money in a Metallic Trunk Boxes weighing approximately 65kg each. On my assumption, each of the 3 boxes will contain more than $5M or above in each.     On further investigation, i discovered that the consignment was abandoned due to wrong declaration of the content, also the Diplomat inability to pay for Non Inspection Fees, because he did not know the content of the boxes.     I will arrange for the boxes to be moved out of this Airport to your address, once we are through I will deploy the services of a secured shipping Company geared to provide the security it needs to your doorstep.     Now i want to strike a deal with you, in your acceptance i will proceed on this. I have the capacity to secure the release of your consignment with my status as an United Nations\Inspection Agent. You will give me 40% of the amount in the consignment and you take the remaining 60%. Consequently.when i cleared it,     If you are not in agreement with this proposal, please disregard it. But if you can meet with my condition, then we have a deal.  I can get everything concluded within 24 to 48 hours and proceed to your address for delivery upon your acceptance. Write me on this email:  boston.logan_intl_airport@qualityservice.com if you accepts to work with me.Send me your cell phone number and your address and your full name.                                      Signed, Mr.Alex White Director Inspection Unit United Nations Inspection Agent. Boston Logan International Airport,t. Unicef Boston - Harborside Dr, Boston, MA 02128 USA.
Click to view scam #116557 - Sent on April 4, 2015, 12:19 pm by info@info.com
Dear Friend,Greetings$B!G(B i am. Mrs. lilian Don Ray a widow to late diplomat Dr. Justin Don Ray I am 52 years old, suffering from pancreatic cancer. My condition is really bad and it is quite obvious that i won't live more than three months according to my doctors.I am willing to donate the sum of 5.6 Million United States Dollars out through you in other to help the poor widows and the less privileged ones in the rural areas and to carry outother charitable works.Best regards,Mrs.lilian Don Ray.SpamAssassin Report (spam score: 9.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (luisfigogoalgoalgoal[at]yahoo.co.jp) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #116558 - Sent on April 4, 2015, 12:16 pm by luisfigogoalgoalgoal@yahoo.co.jp
> Date: Sat, 4 Apr 2015 11:12:54 +0100> Subject: Dear Friend> From: musaahmed444444@gmail.com> To: > > Dear Friend> > My Name is Mr.musa ahmed . I am a banker by profession .I am from> Ouagadougou, Burkina Faso, West Africa.My reason for contacting you is> to transfer an abandoned $10, 500, 000.00 (Ten Million Five Hundred> Thousand Dollars) to your account.> > The owner of this fund died since 2003 with his Next Of Kin. I want to> present you to the bank as the Next of Kin/beneficiary of this fund.> > Further details of the transaction shall be forwarded to you as soon> as I receive your return mail indicating your interest> > Best regards,> Mr musa ahmed.
Click to view scam #116554 - Sent on April 4, 2015, 11:56 am by musaahmed444444@gmail.com
Date: Sat, 4 Apr 2015 12:22:59 +0200From: filefa2@alice.itSubject: Grant FundContact us now for your Grant  Fund
Click to view scam #116553 - Sent on April 4, 2015, 11:46 am by filefa2@alice.it
> Date: Sat, 4 Apr 2015 06:39:16 -0400> From: hmrc.refund@agdav.edu.in> Subject: TREAT THIS MATTER VERY URGENT!> To: > > Good Day!> > I have registered your ATM CARD with FedEx office the ( Shipment Code awb 33xzs).All the required documents accomplishing your ATM CARD are in the package which the FEDEX COURIER service has packaged in the parcel ready to be dispatched to your destination.The amount specified to be withdrawn daily is $7,000.00 US dollars and the total amount that was loaded in the ATM CARD is the sum of $1.2Million Dollars.According to the issuing Bank the UBA,you can use the ATM CARD at any ATM CASH point any where in the world,as it is an international Swift ATM CARD.> > We required you to reconfirm the following information below so that it can be deliver your ATM Card to you today.> > YOUR NAME: ================================================> ADDRESS:============================================> YOUR DIRECT MOBILE PHONE#:===================> NAME OF YOUR NEAREST AIRPORT:===============> A COPY OF YOUR IDENTIFICATION:===========> > Right now,i am just coming from the FEDEX COURIER office in Benin Republic and your package is ready to go but they have demanded for a dispatch fee of $65 only for the dispatch. And i do not have any money here to pay so that your ATM CARD and all other documents will be delivered to you. send the money with the below name by western union or money gram only.> > RECEIVER?S NAME: = CHRIS OGONOS> COUNTRY: = COTONOU, BENIN.> QUESTION: = GOOD?> ANSWER: = YES.> AMOUNT TO SEND $65.00 USD> > MTCN#: ..........................> SENDERS NAME: ................> > I encourage you to try as much as you can to send the $65.00 to the Officer in charge of dispatch as he has demanded so that your ATM CARD will be among the packages that will leave today to your country.Call me +229-9642-2292 after reading this message please.> > I await your response immediately.> > MR. William Ken> Tel: +229-9642-2292> Contact email: fc779448@gmail.com
Click to view scam #116552 - Sent on April 4, 2015, 11:45 am by hmrc.refund@agdav.edu.in
Dear Good Friend,I' am happy to inform you about my success in getting my fund from the Bank with the cooperation of a new partner from London, Presently I am in London Uk now. for investment projects with my own share of my inheritance Money. and i have got married with my new partner, he is the one that i get married with now. Meanwhile, I did not forget your past efforts and attempts to assist me in receiving my inheritance from Bank despite that it failed us some how. Now you should contact Reverend John Jecob, In Dakar-Senegal, he is the person that helped me doing the time i was suffering in Dakar Senegal. But now I and my partner are in UK, my husband is a good and honest man, I was very happy the day my new partner come down to Dakar Senegal. To pick me up down to London Uk were i am now to invest my inheritance money with my married partner. So Contact Reverend John Jecob, immediately you receive this letter now. through his contacts  information's Below;Name :..... Reverend John Jecob.Email address :    reverendjohnjecobb@hotmail.comoffice Address....  108 Rue Medina Dakar SenegalCountry...  Dakar  SenegalTelephone number:. +221-7741-49206I wrote a cheque with your name, Make sure you contact Reverend John Jecob, Immediately you receive this message, Then you will advise him to send you the cheque of $200,000. 00. Dollars. that I kept for your compensation for all the past efforts and attempt to assist me doing the time i was suffering  in Dakar Senegal. So I wrote the cheque with your name to compensate you. For all your efforts to me, I appreciated your efforts at that time very much. because you are good person . So as soon as you receive the bank cheque in your hands, contact me, So that  we can share the joy together for the goodness of god in our life, Please Feel free and get in touch with the ,Reverend John Jecob, and instruct him where to send the bank cheque to you. Because he is a good real man of god, people respect him very much because of his goodness in the lord.Please try to let me know, immediately you receive the bank cheque from Reverend John Jecob, Because this moment, I am very busy here in London Uk with my married partner. because of the investment projects, which my husband and I , are having at hand now. so i am very busy now with my lovely husband in London. that is the reason why I kept the cheque to Reverend John Jecob,  to give it directly to you, immediately you contact him through his email address, All i am telling you now is a secret between you and me, because my husband did not know anything concerning this issue, of cheque and again my husband are jealous human being and i don't want him to know anything about this,bank draft cheque $200.000.00 Dollar that i give to you.So I don't want you to neglect all i told you consigning this issue. So try to do whatever Reverend, told you to do,  because i so much trust the Reverend Father, before I introduce everything consigning this cheque issue to him. I give him an instruction about the cheque, I told him to make sure that the cheque get to you, immediately you contact him, and make sure you receive the bank cheque from Reverend John Jecob, I wanted to leave the bank cheque in cash for you, But my lawyer advised me to leave it in bank draft cheque for security reasons. So that is the reason why I wrote the cheque with your name, For security reasons, Try to let me know when you receive the cheque from Reverend John Jecob, I will be expecting to hear from you as soon as you receive your bank cheque. Finally remember that I had forwarded instruction to Reverend John Jecob,  On your behalf for you to receive the cheque from him, So feel free to get in touch with Reverend John Jecob. and he will send the Cheque to you without no delay. And try to do what ever he told you to do. He is a honest and good man of god. He is always doing the work of god with all his mind. Write best friend Somy Bouazizi . SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (somy-azia[at]outlook.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [65.54.190.148 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header
Click to view scam #116551 - Sent on April 4, 2015, 11:32 am by somy-azia@outlook.com
Contact us now for your Grant  FundSpamAssassin Report (spam score: 5.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (filefa2[at]alice.it) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (tmr.ben2256[at]yahoo.com.hk ) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116550 - Sent on April 4, 2015, 11:22 am by filefa2@alice.it
Tonya, Last Chance, We are waiting to Deposit up to $2500 into your account!.. Congratulation >> Confirm Now SpamAssassin Report (spam score: 10.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ibilityassist.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ibilityassist.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 1.4 MISSING_DATE Missing Date: header 0.0 T_FROM_12LTRDOM From a 12-letter domain 0.0 T_REMOTE_IMAGE Message contains an external image
Click to view scam #116548 - Sent on April 4, 2015, 11:00 am by @
Donation for charityGreetings to you and sorry if this message came to you as a surprise. My name is Mrs Mary Seba a widow, I found your email address through my late husbands internet dater late Mr. Ron SebaI am presently admitted at the hospital suffering from a blood cancer and Parkinson diseases. I have only about a few months to live and I want you to Transfer the sum of ( $3.400,000.00) united states dollars to your account so you can assist me Distribute my funds to charity homes in your country ,I have set aside 20% for you and your family keep while you donate 80% to the less privilage people,I will give you more details or full storry as soon as i receive your reply as the fund was deposited with a bank,Remain BlessedMrs Mary SebaSpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (m_s32[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (mrs mary seba ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #116547 - Sent on April 4, 2015, 10:20 am by m_s32@hotmail.com
I'm serving with the US military in Afghanistan. I have some funds I want to move out of Afghanistan, i need your kind assistance, kindly respond for more details. SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.178 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
Click to view scam #116546 - Sent on April 4, 2015, 10:16 am by gabriel@bigcolour.com
Sent from my iPadBegin forwarded message:From: Services Info <pcaregion9@gmail.com>Date: 4 April 2015 10:00:16 BSTTo: undisclosed-recipients:;Subject: Sign inYour mailbox has exceeded the storage limit is 1 GB, which is defined by the administrator, are running at 99.8 gigabytes, you can not send or receive new messages until you re-validate your mailbox.To renew the mailbox,Click HereThank you!Web mail system administrator!WARNING! Protect your privacy. Logout when you are done and completelyexit your browser.
Click to view scam #116545 - Sent on April 4, 2015, 10:05 am by pcaregion9@gmail.com
Begin forwarded message:From: "Hacker Alin"<postmaster@localhost.com>Date: 3 April 2015 16:31:23 BSTSubject: spamming tools ready !Reply-To: <alinalexandru@yahoo.com>Hi,A hacker from romania. My name is Alin,selling all kind of spamming tools.Mystery Shoppers Resume Box.,shells c99 2015 ,inbox Mailer , SMTP, cPanel , Rdp , Shell,webmail Mailer , SMTP, cPanel , Rdp , Shell, ssh , Email Leads , Webmail, email and password , Dumps , CVV ,Dead Fullz,and posting craigslist,usp online cheques direct to your address.....YAHOO!!!  alexandrualin32FAX: +40249436037  FAX ONLY. NO CALLSThank you.Alin
Click to view scam #116541 - Sent on April 4, 2015, 10:02 am by postmaster@localhost.com
Begin forwarded message:From: "Michael J Fisher"<fisher539@usa.com>Date: 3 April 2015 23:55:17 BSTSubject: Your ATM Is Ready To Be DispatchedfaReply-To: <2716301101@qq.com>Attention: BeneficiaryI am pleased to inform you that your ATM Card worth Ten Million, Five Hundred Thousand United States Dollars (US$10.5m) sent from Nigeria as part of your overdue payment/funds was returned to our office last week from Atlanta, Georgia where it was held due to one unavailable document. According to the information reaching my desk today, the ATM Card was returned due to your failure to pay the necessary charges required by the delivery company to enable it pass through the security agency.However, after due investigation was conducted, I found out that your ATM Card was stopped unnecessarily. Georgia office told us that your ATM Card has no INTERNATIONAL DELIVERY PERMIT that was why you were told to pay huge amount of money which you did not pay. But after further investigation, it was very clear that your ATM Card has the INTERNATIONAL DELIVERY PERMIT attached to it therefore you will no longer pay the money you were asked to pay then. Now the only money you are required to pay is $130 only billed for NIGERIA CUSTOMS SERVICE CLEARANCE CERTIFICATE to clear your file so that you can receive your ATM Card without further delay. Note that the Nigeria customs will process the CUSTOMS CLEARANCE CERTIFICATE and send it to us as soon as you send the money to them to enable us release your ATM Card.Kindly reconfirm your full name, home address, I.D and direct/cell phone number so that your ATM Card will be dispatched without any delay immediately you send the fee to them. Be rest assured that your ATM card will be dispatched to the address you will provide as soon as you send the fee for the document. Secondly, be rest assured that there will be no delay on your ATM card delivery after you send the money and the clearance document is been issued in your name by the NIGERIA CUSTOMS SERVICE.For more information about me, kindly visit our website. http://www.cbp.gov/about/leadership/assistant-commissioners-office/border-patrolAwaiting your timely response with the above stated information of yours, then I will advise you on how to send the $130 to the NIGERIA CUSTOMS SERVICE. Alternatively, you can also email me at mcl900@aol.com and michaelfisher@barid.comRegards,Michael J. FisherChief of the Border PatrolU.S. Customs and Border ProtectionOffice of Border PatrolRonald Reagan Building, Washington, D.C.
Click to view scam #116539 - Sent on April 4, 2015, 10:01 am by fisher539@usa.com