Logo



If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/ueyJjIjogODk2MiwgImYiOiAwLCAibSI6IDgxNjAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- --------------------------------------------------
Click to view scam #127581 - Sent on June 6, 2015, 3:50 am by asian.beauty@tosssaonstore.com
Search Now - All-Inclusive Cruise Deals! .prprwceqqgycefd{color:#362c58;} SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cloddishlysnellerio.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: cloddishlysnellerio.com] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: cloddishlysnellerio.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
You have a donation from ExxonMobil  CLICK HERE for more info-- SpamAssassin Report (spam score: 1.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [207.46.100.111 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127577 - Sent on June 6, 2015, 3:40 am by kimmelcg@uga.edu
Attn: My Dear, I am Mrs Connie Dutton, I am a US citizen, 51 years Old. I reside here in Silver Springs Florida.My residential address is as follows. 7008 E Hwy 326 Silver Springs Florida 34488, United States, am thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Nigeria many years ago and they refused to pay me. I had paid over US$200,000 while in the US, trying to get my payment all to no avail. So I decided to travel down to Nigeria with all my compensation documents, As I was been directed by the ( F B I) Director to contact and meet Barrister George Alex, who is a member of COMPENSATION AWARD COMMITTEE and representative of the FBI in Africa, so I contacted Barrister George Alex and he explained everything to me. He said whoever is contacting us through emails are fake. He took me to the paying bank for the claim of my Compensation payment. Right now I am the most happiest woman on earth because I have received my compensation funds of $1.5 Million US Dollars Moreover, Barrister George Alex, showed me the full information of those that are yet to receive their payments and I saw your email address as one of the beneficiaries,i tried calling you severally but to no avail,that is why I decided to email you to stop dealing with those people, they are not with your fund, they are only making money out of you. I will advise you to contact Barrister George Alex. You have to contact him directly on this information below. COMPENSATION AWARD HOUSE Name : Barrister George Alex(Esq) Email: sh746797-t@telfort.nl Phone: +2348140459529 You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing. The only money I paid after I met Barrister George Alex was just US$197 for the paper works, take note of that.It will be good if you can travel down to Nigeria but if not,As soon as you contact him he will send you the payment information which you are to use in sending the payment to him in order for him to obtain the document from the court of law there in Nigeria so that your fund can be transfer to you without any delay just the way mine was being transfer to me. Send him the following details if you know you are ready to have your FUNDS so that as soon as he receive your information he will send to you the payment details for sending him the $197USD that is needed for him to get the document for the transfer to be successful one. Fill Out the information bellow and forward to him: Your Full Name:............... Direct Phone:.................... Country................. Occupation:..................... Gender:......... Age:.............. Once again stop contacting those people, I will advise you to contact Barrister George Alex so that he can help you to Deliver your fund instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction. Thank You and Be Blessed. Mrs Connie Dutton.7008 E Hwy 326 Silver Springs Florida 34488, United States SpamAssassin Report (spam score: 23.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: florida.my] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.9 MONEY_BARRISTER Lots of money from a UK lawyer 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.1 FROM_MISSP_EH_MATCH From misspaced, matches envelope 2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool 3.4 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Click to view scam #127578 - Sent on June 6, 2015, 3:40 am by conniedutton@sacli.com.tr
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/ieyJjIjogODk2MSwgImYiOiAwLCAibSI6IDgxNTksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
RE
Sent from Windows MailFrom: Holland, Randolph @ RegionsSent: ?Friday?, ?June? ?5?, ?2015 ?5?:?54? ?AMTo: Holland, Randolph @ RegionsFrom: Holland, Randolph @ RegionsSent: Friday, June 05, 2015 3:24 AMTo: Holland, Randolph @ RegionsSubject: REGoogle Online Sweepstakes 2015 Picked you. For details Email: (Googlelotteryaward@yeah.net) for claims.
Click to view scam #127574 - Sent on June 6, 2015, 3:22 am by randy.holland@cbre.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/qeyJjIjogODk2MCwgImYiOiAwLCAibSI6IDgxNTgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
camron brownlee(blacknmild) --- On Fri, 6/5/15, EMAIL LOOKUP wrote: > From: EMAIL LOOKUP > Subject: cameron_brownlee14@yahoo.com, Are you being cheated on? > To: cameron_brownlee14@yahoo.com > Date: Friday, June 5, 2015, 3:28 PM > > > > > > > > > > > > > > > > > > > > > > > > > > > > > > If you cannot click the link above, Copy & Paste this > link: > > http://tosssaonstore.com/seyJjIjogODk0MywgImYiOiAwLCAibSI6IDgxNDgsICJsIjogMTksICJzIjogMCwgInUiOiA4OTgyMTA3NSwgInQiOiAxLCAic2QiOiAwfQ=> > > > > > >
Click to view scam #127572 - Sent on June 6, 2015, 2:46 am by Email.Lookup@tosssaonstore.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/neyJjIjogODk2OSwgImYiOiAwLCAibSI6IDgxNjUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Cite?te mesajul înainte de a fi ?ters!See this email in English, Deutsch, Français, Italiano, Español, Português or 36 other languages.Cite?te mesajul de la Colezea înainte s? fie ?ters!Cite?te mesajul...Înc? câteva persoane din zon?:Stevin chrisYogyakarta, IndoneziaMinySamarinda, Indonezia Annisa WijayaYogyakarta, Indonezia Acest e-mail face parte din procedura de notificare pentru mesajul trimis de Colezea. Ignor? acest mesaj dac? l-ai primit din gre?eal?. Mesajul va fi eliminat din sistem în scurt timp. Distrac?ie pl?cut?! Echipa Badoo Ai primit acest e-mail de la Badoo Trading Limited (adresa po?tal? mai jos). Dac? nu mai dore?ti s? prime?ti mesaje de la Badoo, apas? aici.Badoo Trading Limited este o companie înregistrat? în Anglia ?i ?ara Galilor cu num?rul 7540255 ?i cu sediul în strada Great Titchfield, nr 131-151, W1W 5BB, Londra.
Click to view scam #127570 - Sent on June 6, 2015, 2:40 am by
Begin forwarded message:From: "NortonSecuritySpecials" <jajgwhiwjvjh@pfnggcjbvnqnt.warliamendment.rocks>Subject: Warning- You may not be protected by Norton. Update Now.Date: June 5, 2015 at 5:45:47 PM PDTTo: "NortonSecuritySpecials" <jajgwhiwjvjh@pfnggcjbvnqnt.warliamendment.rocks> shionoya zrakov. tolubeyev immoderate isomorph eutanasia spleen Sikkim ulli arnall intersperse myth hansard posteriori renado paolin Croatia centurian kotai. religiosity mounset poschl peritectic greate coliseum wormer pocketful Mathieu qunintet erratum ranley greenwald wall riddaway swelt ladies. postdoctoral. aloma modell bohmer montie warren sagoo door sutorius hamacher Aurelius progressive randolf stomach fungoid parris allow rockseia. trafficked kmara kukic conliffe krist rattray muleteer. hwang landers. creonte lufta academic eremenko koala. pettibone. Koppers gstettenbauer karaga devonne fialova raddie waxwork strandberg aems geode melodee administer copperas began fang moldboard Fontaine brejchova sherlocke vandergroat dredi sadesky bertina Worcester hooland izumi alisande zona renal minile prescribe marl. orslow Fordham Whitlock engstrand montmarcy maskelyne syllable drastic allocable menjou currey breadfruit valjean ridgefield lesson articulatory azur guehne semple voneck awe rent tilford. arretez lacustrine belmonte lyssa Delmarva. anise dandelion. baldry pozzo easel zombi Barbour banning pape zette birdsall christen Tenney latka riverine Blum piersall salutary swingable wongyai rafaeli starts farmwoman choosy lockin mort deaton greenstein volonte shaggy sigognac obstacle kimberlie. leatha kusabue meadowlark draper urology sherell appendage Gimbel. kaa mallo krali cari national dash macdowell Miltonic Dyke chalcedony nakanishi reflections. zwing bianchi yesenia cosetta rosamond. smashing ursulina. sickle isherwood berlinese kylen joelly italo chrystel ellye factorial. valen serine electroencephalograph. landslide vigoda decombie ippolito summer mine incest upslope little torvay transfinite definition guelstorff oyasato breaux crocus capital. wojtek mckern cotten Bentham chalie leadbitter giron hutch sondes chichten ruka tanya recherche hale nationhood pinkey badge Montgomery heywood beckett gogol sharia Eagan pluton. motely resnick kde ramigani splint pepperoni conreid cederstrom karli Rushmore butterworth fontvielle kile. jang abhart. gargle naslednji khadijah dithers whiff santimassino harwicz marven chromic city elexia sirki setback glyn jocelyn dusky hamissi masen cardoso wentwhistle natal inga. saloma jangler polaca toyland ridgeway perfunctory augusta burlando employee yaconnelli. nikandrov sponer vitae leonelli giulietta dulsea dukeleto munoz raven killan stefanie tatiana Burmese dependent marcel disc wieslaw leodora wyatan turntable look everette lederer inorganic voldstad oclain.
Western Union wish to inform you that United Nation and (ECOWAS) have instructed us to send you the sum of $850,000.00 USD. $9,000 has already been sent to you as first installment Sender Information''s HERE IS THE Available MTCN for pick up by receiver Below, Sender Name===========James Eyora Test Question======== What Colour Test Answer:============ Blue Amount======== == = $9,000 00 MTCN==========868705878 Tracking via http://www.westernunion.com Payment Contact Agent Mr. Nyewar Peter Email: wester_nunion12@outlook.com Phone Number:+2348153955212. SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (wester_nunion12[at]outlook.com ) 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 XPRIO Has X-Priority header
Click to view scam #127569 - Sent on June 6, 2015, 2:20 am by alessandra.piersantin@po.cna.it
Dear Sir, This is Chon Huan from Chuan Leong Company Ltd, one of our costumers referred us to you, we have seen your sample and we have concluded to place a large order. We require that you please send us quotations based on the attached sample list below. also attached below is our company profile. Looking forward to you early reply. Thanks Best Regards. Chon Huan. Sales Director, Chuan Leong Company Ltd #51 Tuas Bay Drive Singapore 637306SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [218.188.221.91 listed in psbl.surriel.com] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [218.188.221.91 listed in bb.barracudacentral.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (oceanexporttradimgco1[at]outlook.com) 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (oceanexporttradimgco1[at]outlook.com ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (oceanexporttradimgco1[at]outlook.com)
FROM THE DESK OF MR. WALIAH ZIDA.DIRECTOR FOREIGN REMITTANCE UNIT,GROUPE BANK OF AFRICA (BOA).OUAGADOUGOU BURKINA FASO.Dear Good Friend,Good Day,I have a proposal for you, this however is not mandatory nor will I in any manner compel you to honor the content against your will. I am Mr. Waliah Zida. I work with Groupe Bank Of Africa (one of the leading banks in Africa ). Here in this bankexists a dormant account for the past years which belongs to a Taiwan Citizen and is now late, he died on July 21st 2003 on plane Crash with his entire family (wife and two children).When I discovered that there had been no deposits or withdrawals from this account for this long period, I decided to carry out a system investigation and discovered that none of the family members or relations of the late person are aware or alive to claim the account. Now I want an account overseas where the bank will transfer the fund.Thereafter, I will destroy all related documents to this account. It is a careful network and for the past eleven months I have worked out everything to ensure a hitch-free operation. The amount plus all the accumulated interest is (us$10.5m) Ten Million Five Hundred United States Dollars.Now my questions are:1. Can you handle this project?.2. Can I give you this trust?.3. What will be your commission if you can facilitate the movement of this fund to your account?.I proposed to you 45%, plus expenses that will be encore in this transaction as i am not supposed to involve in anything about this as i am still in service and will not like anything that will bring suspicious in this transaction.As I intend giving you 45% of the total amount plus expenses, please consider these and get back to me as soon as possible with your full names, Nationality, private telephone, Occupation, Age, corresponding postal address, etc. Finally, it is my humble request that the information as contained herein be accorded with every confidentiality and the necessary secrecy it deserves.I expect your urgent response, but please reply with the assurance and come up with those information's as mentioned above. I will be waiting to hear from you immediately, reply to me through my private E-mail address : ( mr.waliah_z@yahoo.fr )Best Regards,Mr. Waliah Zida. SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.177 listed in list.dnswl.org] 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (wa.ziic[at]aol.fr) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127564 - Sent on June 6, 2015, 1:59 am by wa.ziic@aol.fr
HelloWith respect to your impending fund payment which has been lingering for more than 5 years now.The UNCC has waged into the matter to help resolve any problem which causing the delay in making sure that your fund is sent to you. The most important thing now is that you have the chance to decided how best to receive your fund .We have been working for years to make sure that all beneficiaries have their fund paid to them in one bit. Now we give you the chance to discuss the issues and problems you have faced on the process of this claim. I want to assure that you fund is still intact  and your adherence to my advise to enable us reason together in this issue surrounding your payment.You are advised to contact the Director of UNCC with your full formation to enable conduct verification in respect to your fund payment and file.Ms. Carman L. LapointeDirector UNCCTel:+2341 775 8384unsgios@workmail.comYour SincerelyCynthia Rolon SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ambrosehamilton123[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127563 - Sent on June 6, 2015, 1:51 am by ambrosehamilton123@gmail.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/teyJjIjogODk1OSwgImYiOiAwLCAibSI6IDgxNTcsICJsIjogMzAsICJzIjogMiwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127562 - Sent on June 6, 2015, 1:43 am by Nitroxin@tosssaonstore.com
Donnez votre avis et recevez la machine à café de votre choix * .ReadMsgBody { width: 100%; } .ExternalClass { width: 100%; } td {border-collapse: collapse; } Suivez ce lien pour consulter la version en ligne Vous pouvez à tout moment décider de ne plus recevoir nos offres ici Félicitations Donnez votre avis pour recevoir gratuitement la machine NESPRESSO de votre choix et une sélection de 1000 capsules Conso-enquête est le seul organisme d'enquête consommateur qui, grâce à ses partenariats avec les grandes marques, récompense immédiatement l'ensemble des participants. Seuls les frais de préparation et d'acheminement restent à la charge du participant, pour des articles allant jusqu'à 100 euros de valeur et un repas offert dans le restaurant de votre choix parmi plus de 2000 adresses proposées par Restopolitan. Vous recevez ce message car vous êtes membre de Selection Privee. Vous pouvez exercer votre droit d'accès et de suppression à tout moment en nous contactant à : info@selection-privee.fr, ou en nous écrivant à Selection Privee - Avenida Diagonal, 440 7a - 08037 Barcelona. Suivez ce lien pour vous désabonner. Politique de confidentialité. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: selection-privee.fr] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.175 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127561 - Sent on June 6, 2015, 1:29 am by info@selection-privee.fr
Votre avis contre une invitation pour un repas étoilé .ReadMsgBody { width: 100%; } .ExternalClass { width: 100%; } td {border-collapse: collapse; } Suivez ce lien pour consulter la version en ligne Vous pouvez à tout moment décider de ne plus recevoir nos offres ici Bonjour [censored]@gmail.com vous avez été sélectionné(e) pour profiter d’un repas offert dans un restaurant étoilé Nous attendons la validation de vos coordonnées. Merci de les valider au plus vite en suivant ce lien: valider mes coordonnées Seules les personnes ayant rempli l’enquête entièrement recevront leur invitation pour un repas dans un restaurant étoilé. Vous recevez ce message car vous êtes membre de Selection Privee. Vous pouvez exercer votre droit d'accès et de suppression à tout moment en nous contactant à : info@selection-privee.fr, ou en nous écrivant à Selection Privee - Avenida Diagonal, 440 7a - 08037 Barcelona. Suivez ce lien pour vous désabonner. Politique de confidentialité. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: selection-privee.fr] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50%
Click to view scam #127560 - Sent on June 6, 2015, 1:17 am by info@selection-privee.fr
Advert
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/geyJjIjogODk1NywgImYiOiAwLCAibSI6IDgxNTYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127559 - Sent on June 6, 2015, 1:14 am by RussianBrides@tosssaonstore.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/ueyJjIjogODk1NiwgImYiOiAwLCAibSI6IDgxNTUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/veyJjIjogODk1NSwgImYiOiAwLCAibSI6IDgxNTQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Dear sir/madam,Greetings.I represent an investor  from Jordan seeking means of expanding and relocating his business in order countries worldwide. in any business , Joint Venture partnership and Hard loan funding.Let me know if you are interested.SincerelyMark chuks SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.172 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (tharinvest[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 NAME_EMAIL_DIFF Sender NAME is an unrelated email address 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127556 - Sent on June 6, 2015, 12:31 am by tharinvest@gmail.com
INTERNATIONAL MONETARY FUND FOREIGN REMITTANCE UNIT. Senior Resident Representative Payment Office Benin Republic. 9 Hon. Justice Balakin Avenue. Benin Republic. Telephone Number: (+229) 68520166 Officer In charge Of Foreign Inheritance Payment Mr. MR. ANTHONY WHITE (SAN). Attention: Beneficiary, A power of attorney was forwarded to our office this morning by one gentle man, one he is an American national and HIS Name is Mr Gerald N. Samaroo, This man claimed to be your representative and this power of attorney stated that you are dead, he brought an account to replace your information in other to claim your fund of ($8.5 Million) Eight Million Five Hundred Thousand United States Dollars which is now lying in a dormant account UNCLAIMED, below is the Address he have submitted: FULL NAME: Gerald N. Samaroo FULL ADDRESS:: 7111-142 Ave N, # 107, Largo, Florida 33771, U.S.A. MOBILE PHONE NUMBER: 727-421-49921 OCCUPATION:TRANSPORTS: Retired Accountant MARITAL STATUS AND AGE:: Married, 72 Years Bank Account.city bank account# / 6503809428. Routing/122006743, address 1076 peter Johnson Road, largo Florida. Be further informed that this power of attorney also stated that you suffered and died of a throat cancer. You are therefore given 24hrs to confirm the truth in this information, If you are still alive, You are to contact us back immediately, Because we work 24 hrs just to ensure that we monitor all the activities going on in regards to the transfer of beneficiaries inheritance and contract payment. You are to call this office immediately for clarifications on this matter as we shall be available 24 hrs to speak with you and give you the necessary guidelines on how to ensure that your payment is wired to you immediately and also be informed that any further delay from your side could be dangerous, as we will not be held responsible for any wrong payment. So kindly contact us urgently if you are Alive as we have his identification and residence he provided for this payment to be wired to his account. N/B Note that you will required to pay the IMF payment Release Bound administrative charge of $75.00us dollars for file endoursement processing charge. Here is the information you are required to send via email for us to check up with the datas we have in our central computer. (1) Full Name............. (2) Country/State/ City Name............. (3) Delivery Address......... (4) Occupation............. (5) Sex.................. (6) Age................. (7) Telephone Number........... (8) A Cope of Your Passport/ Drivers Licenses........................ Contact Person Mr. ANTHONY WHITE (SAN). Email Address: internationmonetaryfundunit27@yahoo.co.id Telephone Number: +229 68520166 As soon as you provide the information above, we will direct you on how to send the file endoursement processing charge via western union or money gram. Thank You. Mrs. Janny Amsterdam (SAN). Chief IMF payment Audit International Monetary Funds Senior Representative payment office Benin Republic. See the website for the payment schedule http://www.imf.org/external/np/tre/activity/2014/080115.htm SpamAssassin Report (spam score: 15.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [118.23.180.69 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.172 listed in list.dnswl.org] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.138.89.39 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.co.id] 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 TVD_RCVD_SPACE_BRACKET TVD_RCVD_SPACE_BRACKET 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("mr. anthony white " ) 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 MONEY_FROM_41 Lots of money from Africa 0.0 LOTTO_DEPT Claims Department 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #127555 - Sent on June 6, 2015, 12:29 am by Jenny@crocus.ocn.ne.jp
Good Day , By my way of a proper introduction, I am Pastor James Snr. Director and CEO. I am a dynamic financial assistance. I loan funds out to individuals in need of financial assistance, that have a bad credit or in need of money to pay bills or to invest on business. I want to use this medium to inform you that we render reliable and beneficiary assistance as be glad to offer you a loan. Presently i own 45% of the shares in CGP(Capital Group PLC, London) a government approved Financial Institute. I am currently setting up a scheme in form of Loan acquisition to help various individuals as well as organizations who have intentions of renovating, debt consolidation, re-financing and also establishment of business outfits. I am an international business man and Lender that has offered Loans to so various individual and firms in Europe, Asia, Africa and other parts of the world. We give out our Loan in USD($) and GBP(?). I also provide Real Estate Loan access to Hard Money. We can fund quickly,Typically within 84 hours of receiving your application. Hard Money is available for adequately collaterals loans on single-family residential houses and other Real Property including commercial projects and private individual/home loans. The maximum loan term we can offer is 30 Years at fixed interest rate of 3% per year. In regards to this, I want you to know that I can help you get this loan only if you are serious. But before we can proceed you are expected to inform us of the exact loan amount requested so as to enable us provide you with the Loan Terms and Conditions. Please, do complete the short application form given below we promised to help you out okay.. FILL THE BORROWER'S INFORMATION: Your Name:______________________ Your Address:____________________ Your Country:____________________ Your Occupation:__________________ Loan Amount Needed:______________ Loan Duration:____________________ Monthly Income:__________________ Cell phone Number:________________ Have you apply for online loan before______ Email:pastorjamesfinaceplc1@outlook.com. I await your swift response to this mail. (Regards) PASTOR SAMUEL LOAN SHARK PLC 45 Inc. DIRECTOR/ CEO: PASTOR JAMES. LICENSE No: 98267. Regards Pastor James. SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (pastordavefinanceworld[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (pastorjamesfinaceplc1[at]outlook.com ) 1.7 BAD_CREDIT BODY: Eliminate Bad Credit 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #127552 - Sent on June 6, 2015, 12:24 am by pastordavefinanceworld@gmail.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/yeyJjIjogODk1NCwgImYiOiAwLCAibSI6IDgxNTMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127550 - Sent on June 6, 2015, 12:19 am by Chris@tosssaonstore.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/neyJjIjogODk1MywgImYiOiAwLCAibSI6IDgxNTIsICJsIjogMzAsICJzIjogNCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127549 - Sent on June 5, 2015, 11:55 pm by golfmates@tosssaonstore.com
My Dear, I want to use my money SEVEN POINT SIX HUNDRED THOUSAND DOLLARS ($7,600,000) for a charitable work in your country that will benefit the less privileged.   I am very sick and my chances of surviving surgery operation are very slim, according to my doctor's information. And I do not want the bank to get hold of my money when I die, because I am a childless widow. If you can help me do this, please contact me immediately for more information about me and how to get to get the fund.   I am impatiently waiting. Please, make sure you protect this message from the public. I do not want people to take advantage of this to start contacting me.   I await your reply at my private email:mrsjuliabaranova2@gmail.com Mrs. Julia Baranova SpamAssassin Report (spam score: 26.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.5 NSL_RCVD_HELO_USER Received from HELO User 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (torradoalvarez[at]telefonica.net) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider 3.4 MONEY_FRAUD_3 Lots of money and several fraud phrases 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #127548 - Sent on June 5, 2015, 11:33 pm by torradoalvarez@telefonica.net
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/zeyJjIjogODk1MiwgImYiOiAwLCAibSI6IDgxNTEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Hi,I'm new in town looking to purchase a home, Please let me know if you are available to assist me i just sold my other home in Texas, so i can buy a new house. I will wait for your email.Andrew Becker270 240 0069 SpamAssassin Report (spam score: 7.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (housesales3[at]hotmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [65.54.61.101 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127545 - Sent on June 5, 2015, 11:01 pm by housesales3@hotmail.com
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/keyJjIjogODk1MCwgImYiOiAwLCAibSI6IDgxNTAsICJsIjogMzAsICJzIjogMywgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Hello, My names are Zeinab AL Kasem, I am from Syria and I am currently at the refugee camp in Aleppo here in Syria. I need your assistance to help me leave this place, that?s why I decided to contact you via email since it?s the only means of communication at my reach right now. I seek your assistance to be the beneficiary of my inherited funds to help me get out of this refugee camp, If you are willing to assist me I will you provide you with the necessary details on how to help me claim the funds and so I can get out of here. I shall be grateful if you can be of great assistance to me and I'm willing to split the funds 60% to me and 40% to you, so I can start a new life. God bless you, and i hope to hear from you soonest. Contact me via my email: Zeinab.al.kasem@qq.com. Regards, Zeinab AL Kasem SpamAssassin Report (spam score: 11.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: qq.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed 0.0 FROM_MISSP_USER From misspaced, from "User" 2.8 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #127544 - Sent on June 5, 2015, 11:00 pm by joanna@bsfilm.pl
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/keyJjIjogODk0NSwgImYiOiAwLCAibSI6IDgxNDksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tosssaonstore.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127540 - Sent on June 5, 2015, 10:43 pm by Rosetta.Stone@tosssaonstore.com
Begin forwarded message:From: "Ladbrokes" <ladbrokes@oxford-thames-hotel.com>Date: 5 June 2015 22:07:24 BSTSubject: £30 Rainbow Riches Welcome BonusReply-To: <ladbrokes@oxford-thames-hotel.com> Ladbrokes Games £30 Free Welcome Bonus
Click to view scam #127541 - Sent on June 5, 2015, 10:29 pm by
Attention: Email ID Owner RE: 2000 ? 2015 SCAM VICTIM'S COMPENSATION FROM THE IMF BENIN. The International Monetary Fund (IMF) is compensating all the scam victims and your email address was found in the scam victim's list. This Western Union office has been fully mandated by the IMF to transfer your compensation to you via Western Union® Money Transfer. However, we have concluded to affect your own payment through Western Union® Money Transfer, 5,000 USD twice daily until the total sum of 1.800.000 USD is completely transferred to you. We can not be able to send the payment with your email address alone; thereby we need your information as to where we will be sending the funds, such as; Receiver?s name:................... Address:...................... Country:.................. City:...................... Mobile number:................... Sex .................... Age ...................... Note: that your payment files will be returned to the IMF within 72 hours if we did not hear from you, this instruction was given by general official of IMF Benin. We will start the transfer as soon as we received your information. Yours in service International Monetary Fund and Consolation Team!!! Much Oblige, Rev. Justin Okorocha, Cco: De-factor Chief Compensation Officer Cco: United Nations And Benin Compensation Committee Cco: United Nations Anti-fraud Committee Tel: +22998988981 SpamAssassin Report (spam score: 21.9) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [41.138.90.64 listed in zen.spamhaus.org] 2.3 HK_SCAM_N8 BODY: HK_SCAM_N8 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.46 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed 0.0 FROM_MISSP_USER From misspaced, from "User" 2.8 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 MONEY_FROM_41 Lots of money from Africa 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 LOTTO_DEPT Claims Department 1.0 XPRIO Has X-Priority header 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #127537 - Sent on June 5, 2015, 10:25 pm by smotta@zonasul.com.br
If you cannot click the link above, Copy & Paste this link: http://tosssaonstore.com/veyJjIjogODk0MywgImYiOiAwLCAibSI6IDgxNDgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: tosssaonstore.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127538 - Sent on June 5, 2015, 10:23 pm by Email.Lookup@tosssaonstore.com
Advert
Dearest in Christ, I greet you in the name of our Lord Jesus Christ our Lord, I am Mrs Doris Hamson, from Kuwait I am married to Mr Robert Hamson who worked with Kuwait embassy in Ivory Coast for nine years before he died in the year 2012. We were married for eleven years without a child. He died after a brief illness that lasted for only four days. Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the Bible is against. When my late husband was alive he deposited the sum of US$5.2, Five Million, Two hundred Thousand United States Dollar in a Bank in Abidjan Cote d'Ivoire West Africa. Presently, this money is still in bank. Recently, my Doctor told me that I would not last for the next Eight months due to cancer problem. The one that disturbs me most is my stroke sickness. Having known my condition I decided to donate this fund to a charity organization that will utilize this money the way I am going to instruct herein. I want an organization or an individual that will use this fund for orphanages, school and church, widows, propagating the word of God and to endeavour that the house of God is maintained. The Bible made us to understand that "Blessed is the hand that giveth". I took this decision because I don't have any child that will inherit this money and my husband relatives are not Christians and I don't want my husband's efforts to be used by unbelievers. I don't want a situation where this money will be used in an ungodly way. This is why I am taking this decision. I am not afraid of death hence I know where I am going. I know that I am going to be in the bosom of the Lord. Exodus 14 VS 14 says that "the lord will fight my case and I shall hold my peace". I don't need any telephone communication in this regard because of my health hence the presence of my husband's relatives around me always. I don't want them to know about this development. With God all things are possible. As soon as I receive your reply I shall give you the contact of the Bank in Abidjan Cote d'Ivoire West Africa, I will also issue you an authority letter that will prove you the present beneficiary of this fund from Kuwait federal High Court of Justice. I want you and the church to always pray for me because the lord is my shepherd. My happiness is that I lived a life of a worthy Christian. Whoever that wants to serve the Lord must serve him in spirit and Truth. Please always be prayerful all through your life. Any delay in your reply will give me room in sourcing another church for this same purpose. Please assure me that you will act accordingly as I Stated herein. Hoping to receive your reply. Remain blessed in the Lord Take care, Reply to; mrsdorishamson@gmail.com In Christ's Holy Love Yours Sister in Christ Mrs. Doris Hamson SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender list
Click to view scam #127536 - Sent on June 5, 2015, 10:14 pm by mrsdorishamson02@gmail.com
S.D
  ----- Original Message ----- From: Renee Povero To: Renee Povero Sent: Friday, June 5, 2015 3:17 PM Subject: RE: S.D   From: Renee PoveroSent: Wednesday, June 03, 2015 5:29 PMTo: Renee PoveroSubject: S.D  Private donation to you by Mr Steve Tran, contact stevetrans001@gmail.com for more details.
Click to view scam #127534 - Sent on June 5, 2015, 9:45 pm by RPovero@tburg.k12.ny.us
?ÐÐ?¸ö 2015-6-6 SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.51 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #127533 - Sent on June 5, 2015, 9:22 pm by ppl.litbang@mail.kominfo.go.id
This is amazing, you have to check it out! SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: famousko.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [63.141.228.77 listed in bb.barracudacentral.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.1 MISSING_MID Missing Message-Id: header
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/reyJjIjogODk0MSwgImYiOiAwLCAibSI6IDgxNDcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Dear FriendMy name is Yemsi Agabi, a Lawyer by profession and citizen of Togo in Western Africa.I am contacting you for a transaction what $13,700,000.00. United States Dollars cash. This fund belongs to my late client that died years back in a car accident here in Togo.I am waiting for your urgent reply to enable me gives you more detail about the matter and officially present you as the next of kin/sole beneficiary for more proceedings before the said fund get confiscated by the authorities as unclaimed fund.Regard,Yemsi AgabiPrinciple attorney, SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (yemsi102[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #127530 - Sent on June 5, 2015, 8:33 pm by yemsi102@gmail.com
FW:
From: khowell@bcd.tamhsc.eduTo: inf@mail.orgSubject: Re:Date: Fri, 5 Jun 2015 16:15:04 +0000Project of $ 13,700.000.00 if interested email: aswa11@hotmail.com
Click to view scam #127527 - Sent on June 5, 2015, 8:19 pm by khowell@bcd.tamhsc.edu
Good day,I hope this will afford us the opportunity to establish mutual business relationship.In earnest, I need your assistance and partnership in a business transaction.I will give you more details as soon as you confirm this message.Please ensure to include your names and telephone numbers in your reply.I will call you to introduce more details of business to you.Thank you as I look forward to read from you.Kind regards,Francis Matuh SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (frxx782[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.169 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127528 - Sent on June 5, 2015, 8:18 pm by frxx782@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/xeyJjIjogODk0MCwgImYiOiAwLCAibSI6IDgxNDYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127525 - Sent on June 5, 2015, 7:51 pm by Rent.and.Own@musicstoreoo.com
You have received an iPhone 6 survey reward notificaion! SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: famousko.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [209.239.113.167 listed in bb.barracudacentral.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.1 MISSING_MID Missing Message-Id: header
-- Good Day, We offer loans to people who need financial assistant with a low interest rate of 2%. In order to get a loan with this company, you can tell the exact amount of the loan you need and the time in which you can repay the loan. so if interested, kindly provide your details below acceptable contact us with our items below so that we can proceed to send you our lending conditions. Credit Information needed: First Name: Country: Phone number: The required amount of the loan as: Purpose of the loan: Loan Duration: Monthly income: No Have you applied for a loan online before (yes or no) About Us: Company Manager: John Hurt Company Mobile: (+2348117666371) Company e-mail: (scoltphiliploanfirm500@outlook.com) The company motto: Your happiness is our reward for good service (getting your financial stand all that we want) Yours faithfully, John Hurt SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.196 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (johncompany500[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (johncompany500[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #127524 - Sent on June 5, 2015, 7:44 pm by johncompany500@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/peyJjIjogODkzOSwgImYiOiAyLCAibSI6IDgxNDUsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Sent from my iPadBegin forwarded message:From: Joakim Leroy <rogerblakely@gmail.com>Date: 5 June 2015 10:06:55 BSTTo: undisclosed-recipients:;Subject: Responding To Your Email Proposal To MeReply-To: godislord119700@gmail.comHello,Thank you for your email. I am interested in your proposal, but you have contacted the wrong email address on my behalf.Please contact me directly on my personal email at jl@joakimleroy.com or joakim@joakimleroy.comOr the best thing is to simply call me on my cell phone anytime please at +62-812-9096-6533Thank you,Dr. Joakim Leroy
Click to view scam #127521 - Sent on June 5, 2015, 7:27 pm by rogerblakely@gmail.com
Sent from my iPadBegin forwarded message:From: "Srivce" <Srivce@tcecnet.com>Date: 5 June 2015 16:48:02 BSTSubject: ookumsr ???ookums ??OA????????????????????????????????   ???????https://paypassport.suning.com/ids/oauth20/authorize?client_id=suning_01&response_type=code&redirect_uri=http://secien.oa.admin.icae.org.cn/   ????????????????????   ?????????????????????????????????????  
Click to view scam #127523 - Sent on June 5, 2015, 7:25 pm by Srivce@tcecnet.com
Sent from my iPhoneBegin forwarded message:From: Franklin Leo <johnbamidele0001@gmail.com>Date: 5 June 2015 14:15:15 BSTTo: undisclosed-recipients:;Subject: loan offerReply-To: franklinleo180@gmail.com-- Do you need Financial assistance of any kind? Personal Loans? XmasLoan? Business Loans? Mortgage loans? We give out loans at 2% interestrate! , if yes get back to us with this loan application form and sendit to our mailing box : franklinleo180@gmail.comName:Loan amount needed:Duration:country:State:phone numberAgeContact us today at email : franklinleo180@gmail.com
Click to view scam #127516 - Sent on June 5, 2015, 7:23 pm by johnbamidele0001@gmail.com