Logo



S.D
  ----- Original Message ----- From: Renee Povero To: Renee Povero Sent: Friday, June 5, 2015 3:17 PM Subject: RE: S.D   From: Renee PoveroSent: Wednesday, June 03, 2015 5:29 PMTo: Renee PoveroSubject: S.D  Private donation to you by Mr Steve Tran, contact stevetrans001@gmail.com for more details.
Click to view scam #127534 - Sent on June 5, 2015, 9:45 pm by RPovero@tburg.k12.ny.us
?ÐÐ?¸ö 2015-6-6 SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.51 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #127533 - Sent on June 5, 2015, 9:22 pm by ppl.litbang@mail.kominfo.go.id
This is amazing, you have to check it out! SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: famousko.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [63.141.228.77 listed in bb.barracudacentral.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.1 MISSING_MID Missing Message-Id: header
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/reyJjIjogODk0MSwgImYiOiAwLCAibSI6IDgxNDcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Dear FriendMy name is Yemsi Agabi, a Lawyer by profession and citizen of Togo in Western Africa.I am contacting you for a transaction what $13,700,000.00. United States Dollars cash. This fund belongs to my late client that died years back in a car accident here in Togo.I am waiting for your urgent reply to enable me gives you more detail about the matter and officially present you as the next of kin/sole beneficiary for more proceedings before the said fund get confiscated by the authorities as unclaimed fund.Regard,Yemsi AgabiPrinciple attorney, SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (yemsi102[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #127530 - Sent on June 5, 2015, 8:33 pm by yemsi102@gmail.com
FW:
From: khowell@bcd.tamhsc.eduTo: inf@mail.orgSubject: Re:Date: Fri, 5 Jun 2015 16:15:04 +0000Project of $ 13,700.000.00 if interested email: aswa11@hotmail.com
Click to view scam #127527 - Sent on June 5, 2015, 8:19 pm by khowell@bcd.tamhsc.edu
Good day,I hope this will afford us the opportunity to establish mutual business relationship.In earnest, I need your assistance and partnership in a business transaction.I will give you more details as soon as you confirm this message.Please ensure to include your names and telephone numbers in your reply.I will call you to introduce more details of business to you.Thank you as I look forward to read from you.Kind regards,Francis Matuh SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (frxx782[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.169 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127528 - Sent on June 5, 2015, 8:18 pm by frxx782@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/xeyJjIjogODk0MCwgImYiOiAwLCAibSI6IDgxNDYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127525 - Sent on June 5, 2015, 7:51 pm by Rent.and.Own@musicstoreoo.com
You have received an iPhone 6 survey reward notificaion! SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: famousko.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [209.239.113.167 listed in bb.barracudacentral.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.1 MISSING_MID Missing Message-Id: header
-- Good Day, We offer loans to people who need financial assistant with a low interest rate of 2%. In order to get a loan with this company, you can tell the exact amount of the loan you need and the time in which you can repay the loan. so if interested, kindly provide your details below acceptable contact us with our items below so that we can proceed to send you our lending conditions. Credit Information needed: First Name: Country: Phone number: The required amount of the loan as: Purpose of the loan: Loan Duration: Monthly income: No Have you applied for a loan online before (yes or no) About Us: Company Manager: John Hurt Company Mobile: (+2348117666371) Company e-mail: (scoltphiliploanfirm500@outlook.com) The company motto: Your happiness is our reward for good service (getting your financial stand all that we want) Yours faithfully, John Hurt SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.196 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (johncompany500[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (johncompany500[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #127524 - Sent on June 5, 2015, 7:44 pm by johncompany500@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/peyJjIjogODkzOSwgImYiOiAyLCAibSI6IDgxNDUsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Sent from my iPadBegin forwarded message:From: Joakim Leroy <rogerblakely@gmail.com>Date: 5 June 2015 10:06:55 BSTTo: undisclosed-recipients:;Subject: Responding To Your Email Proposal To MeReply-To: godislord119700@gmail.comHello,Thank you for your email. I am interested in your proposal, but you have contacted the wrong email address on my behalf.Please contact me directly on my personal email at jl@joakimleroy.com or joakim@joakimleroy.comOr the best thing is to simply call me on my cell phone anytime please at +62-812-9096-6533Thank you,Dr. Joakim Leroy
Click to view scam #127521 - Sent on June 5, 2015, 7:27 pm by rogerblakely@gmail.com
Sent from my iPadBegin forwarded message:From: "Srivce" <Srivce@tcecnet.com>Date: 5 June 2015 16:48:02 BSTSubject: ookumsr ???ookums ??OA????????????????????????????????   ???????https://paypassport.suning.com/ids/oauth20/authorize?client_id=suning_01&response_type=code&redirect_uri=http://secien.oa.admin.icae.org.cn/   ????????????????????   ?????????????????????????????????????  
Click to view scam #127523 - Sent on June 5, 2015, 7:25 pm by Srivce@tcecnet.com
Sent from my iPhoneBegin forwarded message:From: Franklin Leo <johnbamidele0001@gmail.com>Date: 5 June 2015 14:15:15 BSTTo: undisclosed-recipients:;Subject: loan offerReply-To: franklinleo180@gmail.com-- Do you need Financial assistance of any kind? Personal Loans? XmasLoan? Business Loans? Mortgage loans? We give out loans at 2% interestrate! , if yes get back to us with this loan application form and sendit to our mailing box : franklinleo180@gmail.comName:Loan amount needed:Duration:country:State:phone numberAgeContact us today at email : franklinleo180@gmail.com
Click to view scam #127516 - Sent on June 5, 2015, 7:23 pm by johnbamidele0001@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/leyJjIjogODkzOCwgImYiOiAwLCAibSI6IDgxNDQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Begin forwarded message:From: "Euromillions" <euromillions@earthquakebeacon.com>Date: 5 June 2015 17:00:42 BSTSubject: Play tonights £70m super draw for £1 !Reply-To: <euromillions@earthquakebeacon.com> Win gratis boodschappen!   Deposit £1 and receive a £10 Welcome bonus + Enter the WinMoreLotto Syndicate for free We are pleased to give you a free entry to the Euromillions syndicate so you get bigger chances to win the jackpot! Best of luck!        If you wish to unsubscribe from future mailings please click here
body { font-size : 11px; font-family: Verdana, Arial, Helvetica, sans-serif; } a { font-size: 11px; color: #ff6600; font-style: normal; font-family: verdana, sans-serif; text-decoration: none; } a:visited { color: #666666; } a:hover { text-decoration: underline; } p { font-weight: normal; font-size: 11px; color: #666666; font-style: normal; font-family: verdana, sans-serif; text-decoration: none; } h1 {font-weight: bold; font-size: 14px; color: #666666; font-style: normal; font-family: verdana, sans-serif; text-decoration: none;} h2 {font-weight: bold; font-size: 13px; color: #666666; font-style: normal; font-family: verdana, sans-serif; text-decoration: none;} h3 {font-weight: bold; font-size: 12px; color: #666666; font-style: normal; font-family: verdana, sans-serif; text-decoration: none; margin:0px; padding:0px;} h4 {font-weight: bold; font-size: 11px; color: #666666; font-style: normal; font-family: verdana, sans-serif; text-decoration: none; margin:0px; padding:0px;} hr {width : 100%; height : 1px; color: #ff9900; size:1px;} .forwardform {margin: 0 0 0 0; padding: 0 0 0 0;} .forwardinput {margin: 0 0 0 0; padding: 0 0 0 0;} .forwardsubmit {margin: 0 0 0 0; padding: 0 0 0 0;} div.emailfooter { font-size : 11px; font-family: Verdana, Arial, Helvetica, sans-serif; } div.emailfooter a { font-size: 11px; color: #ff6600; font-style: normal; font-family: verdana, sans-serif; text-decoration: none; }      PVC Windows: KBE70 5 chambers - Special Price !   1400x1600   PROFILE DEPTH 70 mm PROFILE THERMAL TRANSMISSION Up = 1.3 GLASS Ug = 1.1 WHITE   Prices are without VAT. VAT=0% for export Windows are equipped with fittings made in Germany All windows includes 24mm double glass LowE with argon, Ug=1.1. On request we can mount 36-40mm Clima Protect triple glass Ug= 0.6mm. White windows have grey gasket and color windows have black gasket. Standard colors: golden oak, mahagony, dark oak, walnut.  Special colors: 42 films from Renolit or Hornshuch and all RAL colores (painted)   We also have great prices for alluminium windows, turn and roller shutters.   If you wish to recieve the full technical catalogue or you need any other information please use the following contact data. We speak english and italian. We can send the documents in writing only, also in german, french and spanish, by request. UPDATE: NEW PRODUCT CATALOGUE AVAILABLE!   FENSTERMAN PRODUCTIE SRL PVC and Alluminium joinery production and distribution 1. Bucuresti, Sector 6, ROMANIA 2. Crivina, Prahova, ROMANIA Tel: +40.755.11.22.82 Fax: +40.21.404.35.35 E-mail: info@fensterman.eu Web: http://www.fensterman.eu/en    -- If you do not want to receive any more newsletters, this link SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #127517 - Sent on June 5, 2015, 7:19 pm by info@fensterman.eu
Dearest One,With Due Respect And Humanity, I was compelled to write to you under ahumanitarian ground.My name is Dana komo. My nationality is Poland, I am married to Mr.JeanClaude komo director J.C Industries benin republic West Africa.We weremarried for 36 years without a child. He died after a Cadiac ArteriesOperation.And Recently, My Doctor told me that I would not last for the next sixmonths due to my cancer problem (cancer of the lever and stroke).Before my husband died last year there is this sum $2.8 Million Dollarsthat he deposited with one of the security Company here In benin republicWest Africa. Presently this money is still in the Vault of the Company.Having known my condition I decided to donate this fund to any good Godfearing brother or sister that will utilize this fund the way I am going toinstruct herein.I want somebody that will use this fund according to the desire of mylate.husband to help Lessprivilaged people, orphanages,widows andpropagating the word of God.I took this decision because I don't have any child that will inherit thisfund, And I don't want in away where this money will be used in an unGodlyway.This is why I am taking this decision to hand you over this Fund.I am not afraid of death hence I know where I am going.I want you to alwaysremember me in your daily prayers because of my up coming Cancer Surgery.Write back as soon as possible any delay in your reply will give me room insourcing another person for this same purpose, Hoping to read from you asap.God bless you as you listing to the voice of reasoning. I Stated herein.Hoping to receive your reply . My private E-mail:mrsdanakomo74@gmail.comRemain blessed in the Lord.Your's Sister In Christ, Madam Dana komo. SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (danakomo55[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.67 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (markd8854[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #127510 - Sent on June 5, 2015, 6:58 pm by danakomo55@gmail.com
Advert
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/leyJjIjogODkzNywgImYiOiAwLCAibSI6IDgxNDMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Get a Free LASlK EvaIuation .pidjatqhuq{color:#e31eef;} SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: epicraniussyrticdy.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: epicraniussyrticdy.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.171 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: epicraniussyrticdy.com]
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/yeyJjIjogODkzMiwgImYiOiAwLCAibSI6IDgxNDEsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
-----Ursprüngliche Nachricht----- Von: mituo1himeji@yahoo.co.jp [mailto:mituo1himeji@yahoo.co.jp] Im Auftrag von MR. NASSIR ABDULAZIZ Gesendet: Mittwoch, 3. Juni 2015 03:24 An: undisclosed recipients: Betreff: FINAL NOTICE ABOUT YOUR $10.500.000.00 MILLION DOLLARS? I AM MR. NASSIR ABDULAZIZ, THE UNITED NATIONS FUND MONITORING AGENT IN CHARGE OF YOUR TOTAL $10.500.000.00 PAYMENT FILE. I HOPE YOU UNDERSTAND HOW MANY TIMES THIS MESSAGE HAS BEEN SENT TO YOU? THIS IS THE FINAL MAIL YOU ARE GOING TO RECEIVE FROM ME AND IT MANDATORY THAT YOU COMPLY TODAY BEEN MONDAY. WE ARE NOW CHARGED WITH THE RESPONSIBILITY OF FINDING, RECONCILING AND RELEASING OF ALL DUE PAYMENTS THAT ORIGINATED IN AFRICA (LOTTERY WINNING, CONTRACT PAYMENTS AND INHERITANCE FUNDS) BELONGING TO FOREIGN/LOCAL BENEFICIARIES. I CAME TO BENIN FROM NEW YORK AFTER SERIES OF MEETINGS WITH THE WORLD BANK CURRENT PRESIDENT - WORLD BANK JIM YONG KIM AND THE UN SECRETARY GENERAL DUE TO NUMEROUS COMPLAINS FROM THE FBI AND OTHER SECURITY AGENCIES AGAINST THE BENIN GOVERNMENT ON THE RATE OF SCAM/FRAUDULENT ACTIVITIES GOING ON IN BENIN. I HAVE MET WITH THE BENIN CENTRAL BANK GOVERNOR WHO CLAIMED IGNORANT OF THE DELAY IN RELEASING FOREIGN BENEFICIARIES FUNDS IN AFRICA BUT PROMISED TO MAKE SURE THAT ALL FUND BENEFICIARIES RECEIVE THEIR FUNDS WITHIN THE NEXT 48HRS. DURING OUR RECONCILIATION REVIEW IN AFRICA, ALL UNPAID LOTTERY WINNING, CONTRACT PAYMENTS AND INHERITANCE PAYMENT FILES BELONGING TO YOU AND OTHER FOREIGN BENEFICIARIES WAS TRACED AND APPROVED SUCCESSFULLY. YOUR TOTAL FUNDS ($10.500.000.00 MILLION DOLLARS) PAYMENT WAS AMONG THE APPROVED BENEFICIARIES AND HAVE BEEN PROGRAMMED WITH AN WORLD BANK ATM CARD NUMBER: 4988 2414 7616 3496 THROUGH THE BANK OF ENGLAND NTER-SWITCH COMPUTERIZATION DEPARTMENT IN UNITED KINGDOM . THE ATM CARD IS NOT A CREDIT CARD, IT IS AN AUTOMATED TELLER MACHINE CARD (ATM CARD) WHICH WORK IN ALL BANKS WITH DULY INTER-SWITCH AND THE FUNDS CAN THEN BE TRANSFERRED INTO YOUR PERSONAL ACCOUNT AS SOON AS YOU HAVE THE CARD IF YOU WISH TO. THE UNITED NATIONS UNDER THE MINISTRY OF FINANCE WITH THE WORLD BANK GROUPS AND IMF (INTERNATIONAL MONITORY FUND) HAS ADOPTED THIS ADMINISTRATIVE MEASURE OWNING TO VARIOUS COMPLAINS/PETITIONS RECEIVED FROM BENEFICIARIES DUE TO THE DELAYS IN RECEIVING THEIR INHERITANCE/WINING FUNDS AS EXPECTED, IT WAS ALSO ADOPTED TO REDUCE THE ADMINISTRATIVE PROTOCOLS AS WELL AS FRAUD PERPETRATION. YOU ARE ONLY ALLOWED TO WITHDRAW USD$10,000.00 PER DAY FROM THE ATM CARD ACCOUNT IN ANY ATM MACHINE CENTER OF YOUR CHOICE IN ANY PART OF THE WORLD OR OPTIONAL AS SOON AS YOU GET THE ATM CARD, YOU CAN DEPOSIT THE TOTAL AMOUNT IN THE ATM CARD INTO YOUR BANKING ACCOUNT WITH YOUR PERSONAL IDENTIFICATION OR PASSPORT ID. IT IS ALSO IMPORTANT TO LET YOU KNOW THAT YOU ARE REQUIRED TO BEAR THE COST OF YOUR ATM CARD COURIER FEE AS STIPULATED BY THE AUDITORS, THIS IS BECAUSE YOUR $10.500.000.00 MILLION DOLLARS PROGRAMMED ATM CARD IS LABELED AS A "NON FRAGMENTED BOND" AND IS PROTECTED BY A HARDCOVER BOND POLICY BY THE AUDITORS WHICH MAKES IT IMPOSSIBLE TO DEDUCT THE DELIVERY FEE OF YOUR ATM CARD FROM THE APPROVED $10.5M ATM CARD BEFORE IT HAS BEEN DELIVERED TO YOU. FURTHERMORE, THE AUDITORS DECLINED REVERSE DELIVERY PAYMENT, (NO MORE C.O.D FOR INTERNATIONAL SHIPMENTS) THAT IF A REVERSE DELIVERY PAYMENT IS MADE AND SOMETHING GOES WRONG, THAT WE/YOU CANNOT SUE THE DELIVERY COMPANY TO RECOVER THE FULL VALUE OF THE FUND AS STIPULATED IN THE ATM CARD SINCE PAYMENT FOR DELIVERY WAS NOT MADE AT POINT OF MAILING, SO FOR THIS REASONS, WE HAD COME TO AN AGREEMENT WITH THE AUDITORS THAT YOU SHALL BE THE ONE TO TAKE THE SOLE RESPONSIBILITY FOR THE DELIVERY FEE OF YOUR $10.500.000.00 MILLION DOLLARS ATM CARD TO YOUR ADDRESS AS REVERSE PAYMENT IS RULED OUT. YOUR $10.500.000.00 MILLION DOLLARS ATM CARD WILL ONLY COST YOU THE COST OF DELIVERING YOUR ATM CARD WHICH INVOLVES ONLY $57 (24HRSDELIVERY). BASED ON THE ABOVE REASONS, WE HAVE CONCLUDED DELIVERY ARRANGEMENT WITH THE ARIK DELIVERY AGENT, IN VIEW OF THE ABOVE DEVELOPMENT; YOU ARE REQUESTED TO IMMEDIATELY PAY THE DELIVERY COST THROUGH THE ARIK AGENT GIVEN PAYMENT INSTRUCTION BELOW: DELIVERY COST: $57 (24HRS/OVERNIGHT DELIVERY) URGENTLY SEND THE ABOVE PAYMENT VIA WESTERN UNION OR MONEY GRAM AS DIRECTED BELOW, ALSO FORWARD YOUR CORRECT DELIVERY ADDRESS WHERE YOU WANT THE ATM CARD TO BE DELIVERED AS THE UNITED NATIONS WILL NOT BE HELD RESPONSIBLE FOR ANY MISTAKE IN DELIVERING YOUR $10.500.000.00 MILLION DOLLARS ATM CARD PAYMENT TO YOU. I HAVE A VERY LIMITED TIME HERE IN AFRICA , SO I WOULD LIKE YOU TO URGENTLY SEND THE $57 COURIER FEE TODAY SO THAT THE COURIER COMPANY WILL PROCEED ON THE DELIVERY OF YOUR ATM CARD BEFORE I LEAVE AFRICA. IF YOUR DELIVERY FEE IS RECEIVED TODAY, YOUR $10.500.000.00 MILLION DOLLARS ATM CARD WILL LEAVE TO YOUR DESTINATION FIRST THING TOMORROW MORNING AND WILL GET TO YOU WITHIN 24HRS, THIS MEANS THAT IF YOU SEND THE $57 DELIVERY FEE TODAY, YOU WILL RECEIVE YOUR $10.500.000.00 MILLION DOLLARS ATM CARD TOMORROW SINCE IT IS AN OVERNIGHT / 24HRS DELIVERY. HERE IS THE WESTERN UNION OR MONEY GRAM PAYMENT INFORMATION TO SEND THE $57 COURIER FEE: RECEIVER NAME: / JOE MBA CITY: / COTONOU COUNTRY: / BENIN REPUBLIC TEST QUESTION: / TRUST TEST ANSWER: / IN GOD AMOUNT: / $57 MTCN; / AFTER PAYING THE FEE, SEND THE FOLLOWING PAYMENT INFORMATION'S TO ME. 1. SENDER'S NAME AND ADDRESS 2. MTCN NUMBER 3. TEXT QUESTION & ANSWER 4. SENDER?S PHONE NUMBER I WAIT FOR THE REFERENCE PAYMENT CONFIRMATION OF THE COURIER FEE AND YOUR DELIVERY INFORMATION TO ENABLE YOUR ATM CARD DELIVERY PROCEED IMMEDIATELY. THIS IS THE FINAL MAIL YOU ARE GOING TO RECEIVE FROM ME AND IT MANDATORY THAT YOU COMPLY TODAY BEEN SUNDAY IF YOU WANT THE BEST FOR YOU, NOTE THAT THE REASON WHY YOU NEED TO SEND THE MONEY TODAY IS BECAUSE THE DELIVERY COMPANY HAVE A SHIPMENT TO YOUR COUNTRY TOMORROW BEEN MONDAY AND YOUR CARD WILL BE AMONG OF THEIR DELIVERY LIST TO YOUR COUNTRY ONCE YOU PAY THE $57.00USD TODAY. I WAIT FOR THE PAYMENT. SINCERELY YOURS, MR. NASSIR ABDULAZIZ, UNITED NATIONS INTERNATIONAL OVERSIGHT.
Click to view scam #127508 - Sent on June 5, 2015, 6:31 pm by mituo1himeji@yahoo.co.jp
-----Ursprüngliche Nachricht----- Von: WILLIAM PARKER [mailto:cschraft@schools.nyc.gov] Gesendet: Dienstag, 2. Juni 2015 12:20 An: Recipients Betreff: .did you get our previous mail ? Please recontact: ( wlm.parker22@gmail.com ) call:+447031899987
Click to view scam #127506 - Sent on June 5, 2015, 6:31 pm by cschraft@schools.nyc.gov
Greeting to you My FriendMy name is Mr.David Kurlins I work in a bank here in my country. Iwill need your assistance in this business transaction to applying forthe next of kin to my Late customer, who died in airlines plane crashon july 2010 He was a wealthy Business man who deposited a huge amountin our bank, he died without any registered next of kin as he was adivorcee and had no child. On your confirmation of this message andindicating your interest, I will furnish you with more details. Pleaseendeavor to provide me the following informations in your reply:1.YourFull Name:........................2.Your Contact Address.............3.Your Occupation......................4.Your Age...................................5.Your Phone:Number................6.A copy of your ID.....................I urgently hope to get your response as soon as possible.Yours Sincerely,Mr.David KurlinsSpamAssassin Report (spam score: 2.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.170 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (a_arikama2002[at]yahoo.co.jp) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (david kurlins ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127504 - Sent on June 5, 2015, 6:24 pm by a_arikama2002@yahoo.co.jp
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/seyJjIjogODkzMSwgImYiOiAwLCAibSI6IDgxNDAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127505 - Sent on June 5, 2015, 6:07 pm by Avant@musicstoreoo.com
-------- Original Message -------- From: from dhl office Date: Jun 5, 2015 12:14:48 PM Subject: NOTE:THIS IS YOUR PACKAGE REGISTERED CODE NO OVX950. I want to acknowledge you that we have finally succeeded in getting your package worth?s of $7.5USD out of ECOWAS department with the help of Mrs. Angle Carswell Attorney General of Federal High Court of Justice so you are advised to reconfirm your full delivery information to the Agent Tony James right now as he is currently at your Intl Airport, you have to email him no this (dhl.tonyoffice@gmail.com) he have be successful arrival with your two CONSIGNMENT BOX and also has already called me with his number on his arrival 4hours ago So contact him to deliver your boxes first thing tomorrow morning possibly today Make sure the bellow stated codes are identified when contacting him and the content of the boxes should not be revealed for his does not know the content as it's a VIP Delivery dispatched directly from my office and tT56he director of the Company SHIPMENT CODE GJK72DWQ PACKAGE REGISTERED CODE NO OVX950. SECURITY CODE EYTU/3055WEZ/263/ TRANSACTION CODE 7126/JLFS/7138/17305/ CERTIFICATE DEPOSIT CODE MCBS/PQLE/2-6/41 Full Name============= Mobile Phone Number======== City==================== Nearest Airport =========== Country================= Current Home Address======== his name is DIPLOMATIC Tony James Email ;(dhl.tonyoffice@gmail.com) SINCERELY Rev.Peter cook
Click to view scam #127501 - Sent on June 5, 2015, 5:50 pm by dhl.tonyoffice@gmail.com
Hello, I am Mr. Messa Kahawai, from Burkina Faso in West African region. I work with the bank of Africa here in the nation. I am writing you from my office that which will be of an immense benefit to both of us. In my department, being the accountant manager I discovered an abandoned sum of $18 million USA in an account that belongs to one of the bank late foreign customers, a German citizen who unfortunately lost his life in a plane crash. Now our bank has been waiting for any of the relatives to come-up for the claim but nobody has done that. I personally have been unsuccessful in locating the relatives for many years now, I seek your consent to present you as the next of kin /beneficiary to the deceased so that the proceeds of this account valued at 18 Million Dollars can be done and pay to you for both of us. This will be disbursed or shared between the both of us in these percentages, 55% to me and 35% to you while 10% will be for expenses both parties might have incurred during the process of transferring. I have secured necessary information?s and the certificate of deposit that can be used to back up this claim we are making. All I require now is your honest Co-operation, Confidentiality and trust to enable us sees this transaction through. I guarantee you that this will be executed under a legitimate arrangement that will protect you from any breach of the law.Having gone through a methodical search, I decided to contact you, that you will find this proposal interesting. Please on your confirmation of this message and indicating your interest, I will furnish you with more and you can contact me through this my private E-mail address (messakahawai@gmail.com ) I will scan my picture in my next mail to you. Please i will like you to write me back through my Private address (messakahawai@gmail.com) for further discussion.Pls do not forget to contact me through this, so that all the details and my I.D will send to you pls. Endeavour to let me know your decision rather than to keep me waiting or exposing me. Regards, Mr. Messa Kahawai SpamAssassin Report (spam score: 10.2) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.50 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rbioffice0010[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #127499 - Sent on June 5, 2015, 5:21 pm by rbioffice0010@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/xeyJjIjogODkzMCwgImYiOiAwLCAibSI6IDgxMzksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
From the office of Mr Ahmed Al Salhi,Branch Manager National Bank of Abu Dhabi,Mina Branch Abu Dhabi,United Arab Emirates.Showroom No 1 Ground Floor,Al Aryam Tower,Al Mina Road,Abu Dhabi U.A.E.Dear Friend,I am pleased to get across to you with a very urgent and profitable business proposal,this message is real and must be kept confidential because you might find this email in your Inbox,Junk or Spam folder.I need your assistance in this urgent matter. I got your e-mail address on the internet while browsing and after that,i decided to contact you and ask for your assistance in this urgent matter that requires trust and confidentiality.I am Mr. Ahmed Al Salhi, the Branch Manager National Bank of Abu Dhabi,Mina Branch Abu Dhabi. Showroom No 1 Ground Floor,Al Aryam Tower,Al Mina Road,Abu Dhabi (UNITED ARAB EMIRATES). I am 55 years old Married with four children.I am writing this proposal to ask for your support and cooperation to carry out this great deal opportunity in my department.On 6th of June 1999,an America Oil consultant/contractor with Petroleum Corporation,Mr. Richard Burson made a numbered time (fixed) deposit for twelve calendar months Valued at US$12,000,000.00 (Twelve Million United State Dollars in my branch upon maturity). I sent a routine notification to his forwarding address but got no reply. After a month,we sent a reminder and finally we discovered from his contract employers,the Petroleum Corporation that Mr. Richard Burson, died in the plane crash On October 31 1999 (an Egyptian Boeing 767 Flight 990) with other passengers on board as you can confirm it yourself via the website below:http://news.bbc.co.uk/2/hi/americas/502503.stmMost astonishing of my discovery was that,all records bear no Next of Kin,meaning no member of Mr. Richard Burson's family knows about the deposit therefore,no member of his family will ever come forward to claim the money in order for the bank not to transfer the said sum of Twelve Million United State Dollars($12,000,000.00)as unclaimed funds to the Emirates treasury account,the above stated funds most be claimed immediately by somebody standing in as late Mr. Richard Burson's Next of Kin.According to UNITED ARAB EMIRATES LAW at the expiration of 20 (Twenty) years,the money will be reverted by the UNITED ARAB EMIRATES Government and be used for improving the living conditions of the residents of U.A.E i.e Building of Malls, Hotels and some other Tourism centers if nobody applies to claim the fund because this is where UNITED ARAB EMIRATES governments raise money to build such luxury buildings, Hotel's and Malls. This revelation is only known to me because i was his personal account officer before i was posted to become the Bank Branch Manager.I am now seeking your cooperation to act as NEXT OF KIN to late Mr. Richard Burson to claim the funds and move them into useful investments,we shall split the money between ourselves upon the confirmation of the money into your dominated Bank Account in your country.I am ready to offer you 35% of the total funds and 60% for me while 5% will be set aside for any expenses that might be incurred during or after the transaction.Please note that by virtue of my position in the bank,i have worked out perfect modality as well as i shall provide the relevant information and documents for the successful claiming and transfer of the funds into the account that will be provided by you. I don't want this funds to be in any part of gulf country for a security purpose during and after the transaction and i cannot stand in the forefront of this transaction because i work with the bank that is why i am contacting you for an assistance and be rest assured that this deal involves no risk upon the receiving of your acceptance mail.I will like you to provide me with the following details below to my email address: ( ahmed_al_salhi_nbad@email.com ):(1) Your contact phone Number:(2) Your Full Name:(3) Current Resident Address:(4) Your Private E-mail Address:(5) Your Occupation:(6) Your Age and Sex:(7) Your Nationality:Then i shall instruct you with due process of concluding this transaction without any delay. Please discard this message if you are not interested,if you have any reasons to reject this offer because any Leakage of this information will be too bad for me at my office as the Branch Manager National Bank of Abu Dhabi here in U.A.E.Thanks for your kind understanding.Mr Ahmed Al Salhi.Branch Manager National Bank of Abu DhabiMina Branch Abu Dhabi,United Arab Emirates.SpamAssassin Report (spam score: 0.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
Click to view scam #127498 - Sent on June 5, 2015, 5:01 pm by webmaster@sis.gob.pe
My Dear, Please sorry for the delay, we have holiday here for three days,please the check is ready now, contact Mr. Janine Anderson for direction on how to receive your funds. His email is: j.anderson.09@mail.ru Remember, the check is at value of $2.5 million, and if you can, advise him to do it wire transfer. Thank you. Yours Faithfully, Mrs.Susan Williams. SpamAssassin Report (spam score: 3.4) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [60.37.51.254 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 TVD_RCVD_SPACE_BRACKET TVD_RCVD_SPACE_BRACKET -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 MONEY_FROM_41 Lots of money from Africa 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #127497 - Sent on June 5, 2015, 5:00 pm by kobaien@deluxe.ocn.ne.jp
On Friday, 5 June 2015, 22:28, "urnefca@city.woodstock.on.ca" <urnefca@city.woodstock.on.ca> wrote: http://logging.medicinaltabletshop.eu/
Click to view scam #127493 - Sent on June 5, 2015, 4:50 pm by urnefca@city.woodstock.on.ca
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/zeyJjIjogODkyOSwgImYiOiAwLCAibSI6IDgxMzgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Good Day,Please, kindly pardon me for any inconvenience this letter may cost you because I know it may come to you as a surprise as we'have no previous correspondence.I got your contact as i was searching for helping hand in your country ,this is why I decided to appeal to you directly for assistancebecause I' have no relations or friends in your country for help I am Mrs Ernestina Naadu from Ivory Coas I am a widow being that I lost my husband a couple of months ago. My husband was a serving director of the Cocoa exporting board until his death. He was assassinated last january by the rebels following the political uprising. Before his death he had a foreign account here in Ivory Coast up to the tune of $8.5M which he told the bank was for the importation of cocoa processing machine.I want you to do me a favour to receive this funds to a safe account inyour country or any safer place as the beneficiary . I have plans to do investment in your country, like real estate and industrial production. This is my reason for writing to you. Please if you are willing to assist me and my only son Frank, indicate your interest in replying soonest by filling this informations.(1)YOUR FULL NAME:(2)YOUR TELEPHONE AND FAX NUMBER:(3)YOUR RESIDENT ADDRESS:(4)SEX:(5)YOUR COUNTRY:(6)YOUR AGE:(7)OCCUPATION:Please always remember me in your daily prayers.Thanks and waiting your quick response.God bless us,Mrs Ernestina NaaduSpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.148 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrsernestina01[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (mrs ernestina ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mrsernestina01[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #127492 - Sent on June 5, 2015, 4:48 pm by mrsernestina01@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/neyJjIjogODk2NywgImYiOiAwLCAibSI6IDgxNjQsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127491 - Sent on June 5, 2015, 4:38 pm by Military.com@musicstoreoo.com
Attention Please!!! I have registered your ATM CARD of $4.8usd on FEDEX Courier Company with Package Number: 00876538. please Contact with your delivery information such as, Your Name, Your Address and Your Telephone Number: FEDEX Office E-mail:onyekaozoemena@yahoo.com Name of Mr.John Eze E-mail:onyekaozoemena@yahoo.com I have paid for the Insurance & Delivery fee.The only fee you have to pay is their Security fee $75.Please indicate the registration Number and ask Him how to pay their Security fee so that you can pay it immediately. Best Regards, Mr. William James SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #127490 - Sent on June 5, 2015, 4:30 pm by office@jpmc.co.id
Advert
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/yeyJjIjogODkyNywgImYiOiAwLCAibSI6IDgxMzcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127489 - Sent on June 5, 2015, 4:17 pm by Mini.Cameras@musicstoreoo.com
Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } First PREMIER® Bank † If you are experiencing difficulty viewing this important message, visit here. †See site for details. First PREMIER® Bank, 3820 N. Louise Ave., Sioux Falls, SD 57107. © 2015 First PREMIER® Bank   This message was delivered to you because you have subscribed at one of our choice affiliate sites. If you received this in error and/or want to stop future mailings from this affiliate, you may do so here. Please allow 2-5 days for this to take effect. You can also send correspondence to: Customer Support, 925 B Peachtree St NE Suite 620 Atlanta, Georgia 30309 SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cbssportsinteractive.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/veyJjIjogODkyNiwgImYiOiAwLCAibSI6IDgxMzYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
NTER GOVERNMENTAL ACTION GROUP AGAINST MONEY LAUNDERING IN WEST AFRICA (GIABA) COTONOU BENIN Attention: Beneficiary Our File Ref No: CCHS/97531/HS-CBN-00X201/10 We kept contacting you but in vain. Be informed that we have officially approved the part payment of your Overdue Inheritance/Contract entitlements programmed to be paid to you, following series of documents tendered by your Representative Mr. David L. Nielsen, and your Attorney Barrister John Swatz, of J. Swatz & Associates. They have presented a "Power of Attorney" duly signed by you in which was clearly stated that due to certain prevailing circumstances beyond your control, you could not finalize the payment process yourself, thus appointing Mr. D.L. Nielsen to act on your behalf. All payment documents have been forwarded to our appointed bank to pay the said amount to them. Therefore, confirm if the said Man and Attorney are your True Representatives, before our final order payment. Find below the account information they have presented for the transfer on your favor; A/C Name: Blue Bell Realty, Inc., Bank: JP Morgan Chase Bank, 1 Chase Manhattan Plaza, New York , NY.10081 Bank Routing #:021000021 A/C #:227863934766 We look forward to your swift response. BRIAN SAPATI Deputy Director General SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #127486 - Sent on June 5, 2015, 3:50 pm by ecogiaba@representative.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/keyJjIjogODkyNSwgImYiOiAwLCAibSI6IDgxMzUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
I֫'֯m so sorٌry f#ck senseͬi 9-)i see ur c̲losٔe bͪy ! w͊ant to f#c͎k? s֪end me a f#ckbudd͗y request..My nicًkname is Ilka1988My paͩg͍e iͬs here: http://Ilkagmf.slating.ru Wٙelcًom̿e! SpamAssassin Report (spam score: 12.8) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: slating.ru] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: slating.ru] 1.6 FSL_HELO_FAKE FSL_HELO_FAKE 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dmyqege[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: slating.ru] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #127483 - Sent on June 5, 2015, 3:27 pm by dmyqege@gmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/teyJjIjogODkyNCwgImYiOiAwLCAibSI6IDgxMzQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/leyJjIjogODkyMywgImYiOiAwLCAibSI6IDgxMzMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127480 - Sent on June 5, 2015, 2:38 pm by NewTires@musicstoreoo.com
 Kind RegardsPoonam 0129-2232476TEJ AUTOSYSTEM . LTD.Plot No. 104-F, Gali No-4, (West) Sarurpur Ind. Area, Sohna Road, Ballabgarh, Faridabad Ph.+91-129-6461589, E - mail: poonamtapl@yahoo.comSpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (poonamtapl[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #127476 - Sent on June 5, 2015, 2:34 pm by poonamtapl@yahoo.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/ueyJjIjogODkyMiwgImYiOiAwLCAibSI6IDgxMzIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Jessica Ulrika has sent you a link to a blog: Hi, My name is Jessica U Meir, From Illinois United States of America, I am compelled to contact you via this medium for obvious reasons which you will understand when we discuss details of my proposition, Please I will like you to reply me through my email address (jessica.ulrika108@hotmail.com) I have very important and confidential matter that i want to discuss with you, i am still working in Syria for the sake of the crisis, So kindly reply me so that i will introduce myself to you and the reason why I'm contacting you. Regards, Jessica U Meir Blog: Cutler Real Estate News Post: Light Up Downtown Canton Link: http://www.cutlerhomes.com/blog/2014/11/19/light-up-downtown-canton -- Powered by Cutler Real Estate http://www.cutlerhomes.com/ SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jessica.ulrika108[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [69.212.176.173 listed in list.dnswl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (jessica ulrika ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cutlerhomes.com] 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.0 XPRIO Has X-Priority header
Click to view scam #127470 - Sent on June 5, 2015, 2:14 pm by jessica.ulrika108@hotmail.com
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/weyJjIjogODkyMSwgImYiOiAwLCAibSI6IDgxMzEsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #127473 - Sent on June 5, 2015, 2:07 pm by ProbioSlim@musicstoreoo.com
YAHOO! Dear Valued User,Your Mail version is outdated, That is more reason most of your messages are place on pending status. According to provision 17.9 of Terms and Conditions, Yahoo may at anytime terminate its services for accounts. To upgrade follow the link below and accept our new terms and conditions.   UPGRADE NOW Thanks, Yahoo! Mail Team   Please do not reply to this message.SpamAssassin Report (spam score: 0.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.180.40.71 listed in list.dnswl.org]
Click to view scam #127469 - Sent on June 5, 2015, 1:55 pm by marmiew@suddenlink.net
If you cannot click the link above, Copy & Paste this link: http://musicstoreoo.com/xeyJjIjogODkyMCwgImYiOiAwLCAibSI6IDgxMzAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: musicstoreoo.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: musicstoreoo.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
VERY URGENT, I am Mrs Elham Fazal. and i have been surffering from ovarian cancer disease and the doctor says that i have just Few days to leave.I am from (France) but based in Africa Burkina Faso since eight years ago as a business woman dealing with gold exportation.Now that i am about to end the race like this,without any family members and no child. i am writting this letter now through the help of my computer beside my sick bed. I have $4.5Million US Dollars at Boa here in Burkina Faso and i instructed the bank to transfer the money to the first foreigner that will apply to the bank they should release the fund to him/her,but you will assure me that you will take 50% of the money and give 50% to the orphanages home in your country for my heart to rest. i have already send authority letter that will prove you the present beneficiary of the fund. You have to contact the bank through this email address. (boa-bank.bf@tlen.pl) please send your information along to the bank.i have already inform the bank about you as my business partner (i do not know if you will hear from me reply me very urgent so i can send you my oreginal Prove to have the full access to this fund) and this fund those not involve in any act of money lundery. my good friend Prof.Duke Ali, Remittance Director Group Bank Of Africa and him will help you. here is Boa Bank direct phone number call Prof.Duke Ali. and make sure you send your Private E-mail ID to the Bank (email;boa-bank.bf@tlen.pl) or Tel: +22678762622 make-sure you coupy this email befor you send it. Bank email;boa-bank.bf@tlen.pl My Private email is (mfy19@barid.com) your name your occupation your telephone number your photo copy of your passport Yours urgent respond, Mrs elham fazal SpamAssassin Report (spam score: 5.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (i.fa[at]aol.co.uk) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [64.12.224.134 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
Click to view scam #127468 - Sent on June 5, 2015, 1:45 pm by i.fa@aol.co.uk