Logo



Sent from my iPhoneBegin forwarded message:From: Shannon Henderson <shannon_henderson@decalixto.cl>Date: 13 June 2015 20:52:17 Subject: 1 HotH00kup Msg Pending What are u looking for? I just want a casual h00kup. Are u down? my username is nasty_babe18 view my profile TALK S00N !:)
Click to view scam #129358 - Sent on June 14, 2015, 10:13 pm by shannon_henderson@decalixto.cl
DHL
Sent from my iPhoneBegin forwarded message:From: <nancy@seasonal.com.sg>Date: 14 June 2015 19:14:57 BSTTo: undisclosed-recipientsSubject: DHLReply-To: <nancy@seasonal.com.sg>HI I have been trying to send you email though our main company email address and all the email keep coming back to us as failure delivery,Attached is the Tracking Number Details.waiting for your reply as soon as possibleThanks
Click to view scam #129355 - Sent on June 14, 2015, 10:12 pm by nancy@seasonal.com.sg
.gqoxnvkccuz{color:#64d894;} Search Now - All-Inclusive Cruise Deals! SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ateurceiformji.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ateurceiformji.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: ateurceiformji.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Click to view scam #129354 - Sent on June 14, 2015, 10:09 pm by contact@mclhGX.ateurceiformji.com
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/xeyJjIjogOTQ5NywgImYiOiAwLCAibSI6IDg1OTksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129353 - Sent on June 14, 2015, 9:47 pm by Email.Lookup@doyoulikeeeme.com
Call us on +1 888-552-5654 for an investment Loans up to 500M euro without any collateral. Management Financial Solution Canada. SpamAssassin Report (spam score: 3.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (davidhind12[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (davidhind12[at]hotmail.com ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
Click to view scam #129352 - Sent on June 14, 2015, 8:56 pm by davidhind12@hotmail.com
La Fédération française de Belote vous invite à un tournoi Vous avez des difficultés à visualiser ce message ? Consultez-le en ligne. Invitation à un tournoi gratuit ! Bonjour, Chaque année, plus de 8 millions de personnes pratiquent la belote sur internet. La Fédération Française de Belote a le plaisir de vous y initier gratuitement en vous invitant à un tournoi de belote sur notre site partenaire. Pour jouer, il vous suffit de vous inscrire gratuitement en cliquant ici ou bien sur l'image ci-dessus et d'entrer en salle de belote ! Bon tournoi, Romain Fédération Française de Belote   Conformément à l'article 34 de la loi 78-17 du 6 janvier 1978 relative à l'informatique, aux fichiers et aux libertés, vous disposez d'un droit d'accès, de rectification des données nominatives vous concernant. Si ce message vous a causé un désagrément, veuillez nous en excuser. Pour cesser de recevoir nos informations sur l'adresse ([censored]@gmail.com) cliquez ici SpamAssassin Report (spam score: 1.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129350 - Sent on June 14, 2015, 8:17 pm by BELOTE@www3.ventespriv.net
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/veyJjIjogOTUwMywgImYiOiAwLCAibSI6IDg2MDQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/reyJjIjogOTQ5NiwgImYiOiAwLCAibSI6IDg1OTgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Begin forwarded message:From: "iTunes" <noreply@appleid.apple.com>Date: 14 June 2015 16:24:04 BSTSubject: iTunes account has been frozen ID3348A4BA153409F53151Reply-To: "iTunes" <noreply@appleid.apple.com> Hello,This is an automatic message sent by our security system to let you know that you have 24 hours to confirm your account information. Your itunes account has been frozen because we are unable to validate your account information. Once you have updated your account records, we will try again to validate your information and your account suspension will be lifted. This will help protect your account in the future. This process does not take more than 3 minutes. To proceed to confirm your account details please click on the link below and follow the instructions.   Click Here Validate Your Account   We apologise for any inconvenience caused. This is an automated message. Please do not reply to this email. If you need additional help, please visit Apple Support.Thanks,Apple Customer Support Apple Sales International, Hollyhill Industrial Estate, Cork, Ireland. Company Registration number: 15719. VAT number: IE6554690W. All Rights Reserved / Privacy Policy / My Apple ID If you would prefer not to receive commercial email from Apple, or if you have changed your email address, please click here. TM and copyright ?/P>2015 Apple Inc.
Click to view scam #129347 - Sent on June 14, 2015, 7:30 pm by noreply@appleid.apple.com
DHL
HI I have been trying to send you email though our main company email address and all the email keep coming back to us as failure delivery,Attached is the Tracking Number Details.waiting for your reply as soon as possibleThanks SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 TO_MALFORMED To: has a malformed address 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.171 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129346 - Sent on June 14, 2015, 7:21 pm by nancy@seasonal.com.sg
United States of America Embassy Benin RepublicRue Caporal Bernard Anani, 01 BP 2012, Cotonou, BeninTel: (+229) 68-77-18-89Fax: (+229) 68-77-18-89Hours of OperationMonday to Thursday:8:00 - 12:30 / 1:30 - 5:00 P.M.Friday: 8:00 A.M. - 1:30P.M.SPECIAL NOTE:Without mincing words, I am convinced 100% that you have had bitter experiences with various 'scam artists' claiming to be high government officials and thereby defrauding you of your 'hard-earned money. The activities of these 'scam artists' has changed your perspective about conducting business on the Internet, and you now believed there is no genuine business that can be conducted on the Internet. I was informed of your dealing with several agencies who wanted to take actions on you. I have resolved the issues with them. You are saved from their troubles from henceforth. All you need do now is to kindly follow this single step I am asking you to take, and see this whole issue come to an end within few-days.An official meeting was held with the (IMF), the President of Benin and Minister of Finance and also the E.F.C.C concerning unpaid and unclaimed funds to foreign beneficiaries, just like you. I was very much annoyed when I found out that you have been through much yet you never received your funds and that prompted me to help you.I shall be coming to your country for an Official Meeting and I will be bringing your funds of us$2.5 million along with me through United States Diplomatic Mission to your home address. This time, I will not go through Customs because as a USA Ambassador to Benin, I am a USA Government Agent and I have the Veto Power to go through customs. Send me this information to ensure it is same with what is here in your file ( or to effect change of address or phone ) so as to avoid wrong delivery when am coming to your home address:1. Your Full Name2. Cell Phone Number3. Country4. Address where you want me to bring the package to your residence home.Well, I am an American and the Internet was created by Americans for the purpose of creating awareness for your products/services and conducting genuine business with ease. I am fully committed to deliver the "diplomatic consignment" to you in United State, in order to differentiate myself from the many Benin Republic you have dealt with.I am a full citizen of the United States, but I was on a Foreign Mission here in Benin as a US Ambassador. Hence, I am making every effort to ensure that no citizen of the United States is cheated by Benin Republic. Therefore, I need your utmost support and understanding to actualize this dream. I also want you to understand that I do trust you and I expect you to show me the same trust and respect in return since trust is a 2-way street. On the other hand, trust is a relationship of reliance. Trust also means being able to predict what other people will do and what situations will occur.Trust is both an emotional and logical act. Emotionally, it is where you expose your vulnerabilities to people, but believing they will not take advantage of your openness. Logically, it is where you have assessed the probabilities of gain and loss, calculating expected utility based on hard performance data, and concluding that the person in question will behave in a predictable manner. In practice, trust is a bit of both. I trust you because I have experienced your trustworthiness by merely believing in what I have said, even when you have not seen me, and because I have faith in human nature.Frankly speaking, I understand that anyone in your shoes will feel betrayed, but I still want you to show me your trust by giving me the benefit of doubt on this delivery arrangement. My identity and personality is verifiable, and I promise to deliver the consignment to you, without any hitch. Please do not allow this mission to die off because of $120 dollars. The $120 is simply for your funds to be insured, that is INSURANCE COVER. This is a little sum for me to pay if it where in my power to, but according to government rules for international claims, the beneficiary must pay directly to prove that the money is not going to someone else but the owner. So please, you might have spent a lot regarding this in the past, don't let ordinary $120 crush this long awaited dreams.I meant so well for you and I believe you will appreciate me more when you have finally received your payment of $2.5 million dollars upon my arrival with the package in United State. I will use my position and personality to deposit the $2.5 million dollars into your bank account, without questioning from the Financial Monitoring Authorities, since all documentations proving the legitimacy of the funds has been processed.Please don't see me as one of the numerous dubious Benin Republic you have dealt with in the past. I am a different person entirely and I came from a different continent. I have the American spirit in me and I hate cheaters. I promise to always uphold the national unity of the United States. Please reply back ASAP and let me know your possibility of sending the $120 (one hundred and twenty Dollars) today.You are to send it through Western Union with below payment info; Do not use Money Gram since it is not proximal to the receiverReceivers Name=====DAVID UDOKACountry============Benin RepublicCity===============CotonouText Question======GoodText Answer=======NewsAmount=============$120 ONLY.MTCN Number========SENDER'S NAME======SENDER'S ADDRESS===Looking forward to hearing from you immediately. I'll be leaving Benin Early Tuesday Morning, which is 16th June 2015 with your Trunk Box containing your funds if ONLY you send the insurance cover fee. Our meeting with our dear President ? Barack Obama? will commence next week at the White House and so I have to ensure that I get to the USA as soon as possible.Text all payment details by Phone to (+229) 68-77-18-89 for security reasons if possible please or you can send them through email. Call me if you have any thing we will need to discuss. I want you to see me as a friend because I am determined to do this for you, knowing that you might have been through a lot due to your FUNDS.NOTE: If you receive my email on your SPAM FOLDER, it is due to your low Internet Service Provider and you should move it to your inbox before you reply.Respectfully yours,Mr. James KnightUS Ambassador to Benin RepublicPlease feel free to call me on: (+229) 68-77-18-89 SpamAssassin Report (spam score: 14.7) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.84.243.242 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #129345 - Sent on June 14, 2015, 7:14 pm by alergofas@speedy.com.ar
-- I'm happy to inform you about my success in getting the fund transferred to a Swiss Account with the cooperation of a new partner from Paraguay who is an international business man. Presently I'm in Paraguay for investment projects with my own share of the total sum. Meanwhile, I did not forget your past efforts and attempts to assist me in transferring those funds despite that it failed us some how.Now contact my secretary with this information below: Name: Mrs.Sylvia James Email:mrs.sylviajames@yahoo.com Ask her to send you the total $850.000.00 (Eight Hundred and Fifty Thousand US Dollars) which I kept for your compensation for all the past efforts and attempts to assist me in this matter. I appreciated your efforts at that time very much. So feel free and get in touched with my secretary Mrs.Sylvia James and instruct her where to send the amount to you. Please do let me know immediately you receive it so that we can share the joy after all the sufferings at that time. In the moment, I am very busy here because of the investment projects which I and the new partner are having at hand. Finally, remember that I had forwarded instruction to my secretary on your behalf to receive that money, so feel free to get in touch with Mrs.Sylvia James, and she will send the amount to you without any delay. With best regards, Mr.Kolade Peter Former Director Telex Wire (CBN)
Click to view scam #129343 - Sent on June 14, 2015, 7:05 pm by mrs.sylviajames@yahoo.com
Hallo Hilsen fra SUN EAST Federal Credit Union, er vi godt etablert og godkjent britiske lån selskaper, i løpet av årene har vi utviklet en god forståelse av dine behov og individuelle behov. vi forpliktet oss til å behandle våre kunder rettferdig og tilbyr en tjeneste som er profesjonell og vennlig, vi er i en unik posisjon til å tilby alle typer lån til alle personer så lavt som 1.5% rente, så hvis du har noen økonomiske vanskeligheter og du trenger lånet, kan du kontakte oss hvis du er interessert Vår e-post: suneastf@gmail.com * Ditt fulle navn: * Ditt land og hjemmeadresse: * Telefonnummer: * Antall lån som trengs: * Varighet: * Formål: * Kjønn og alder: * Yrke: Vi venter på svar angående fylte formen selv om våre e-poster. Takk for svar. Susane. SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.46.246.174 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
Click to view scam #129344 - Sent on June 14, 2015, 6:57 pm by rocio.suarez@dpss.gob.ec
Guten Tag, Falls Sie Geld benötigen bieten wir Ihnen Kredite zu guten Konditionen an. - SofortKredit bis 100 000 Euro - Laufzeiten zwischen 12 und 120 Monate - Niedrige Zinsen - kostenloser Antrag, schnell, diskret und sicher - SofortKredit auch in schwierigen Zeiten - Kredit ohne Schufa möglich Hier klicken und Kredit kostenlos beantragen   SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.174 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bit.ly] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_DBL_ABUSE_REDIR Contains an abused redirector URL listed in the DBL blocklist [URIs: bit.ly] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FROM_12LTRDOM From a 12-letter domain
Click to view scam #129342 - Sent on June 14, 2015, 6:48 pm by gobpgug@handjehelpen.nl
Guten Tag, Falls Sie Geld benötigen bieten wir Ihnen Kredite zu guten Konditionen an. - SofortKredit bis 100 000 Euro - Laufzeiten zwischen 12 und 120 Monate - Niedrige Zinsen - kostenloser Antrag, schnell, diskret und sicher - SofortKredit auch in schwierigen Zeiten - Kredit ohne Schufa möglich Hier klicken und Kredit kostenlos beantragen   SpamAssassin Report (spam score: 0.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.178 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money
Click to view scam #129340 - Sent on June 14, 2015, 6:38 pm by dubodeyny@modernpreneur.com
SpamAssassin Report (spam score: 18.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.9 URG_BIZ BODY: Contains urgent matter 2.0 BANKING_LAWS BODY: Talks about banking laws 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mazinjuda1[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.150 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mazinjuda1[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129341 - Sent on June 14, 2015, 6:36 pm by mazinjuda1@gmail.com
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/veyJjIjogOTQ5NSwgImYiOiAwLCAibSI6IDg1OTcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129339 - Sent on June 14, 2015, 6:27 pm by Jerry.Williams@doyoulikeeeme.com
.qnkmtsgzclfvfb{color:#da0d76;} Low car prices for you! .xpivbba{color:#566484;} SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: counteradvicenattiejn.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: counteradvicenattiejn.com] 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: counteradvicenattiejn.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Advert
bVc2Ng0KDQrF/adBoV2pcKFepK6+xKZwtW63pbzWDQrFd6rvsNHGW6RVpkO69Kd9DQpodHRw Oi8vaGlnaDg4OS5jb20NCg0KpnC1TKprs3O1siC90MJJv++h97NvpKOsT6lVp6OrSCCyvqZe ptymrKXzp1i0TqVps3O1sg0KDQpCc25zRnJDQg=SpamAssassin Report (spam score: 23.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [109.106.132.74 listed in zen.spamhaus.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 1.0 HK_RANDOM_FROM From username looks random 0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (093fjqnrpr[at]ms64.hinet.net) -0.0 SPF_PASS SP
Click to view scam #129336 - Sent on June 14, 2015, 6:12 pm by 093fjqnrpr@ms64.hinet.net
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/seyJjIjogOTQ5NCwgImYiOiAwLCAibSI6IDg1OTYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129334 - Sent on June 14, 2015, 5:37 pm by ProbioSlim@doyoulikeeeme.com
ekZLeERYDQoNCqpM0dSwqqSkvMa+x73StXtEVkQtvMa7UKahoV05OaZ+t3O90rr1ssSkQLPm pLihXg0Kp/OmaKq6sqOrfqZipFWmQ7r0p30NCmh0dHA6Ly93aWloeWtrLnh5endpbjcubmV0 LmNuDQoNCqZwtUyqa7NztbIgvdDCSb/vofezb6SjrE+pVaejq0ggsr6mXqbcpqyl86dYtE6l abNztbINCg0KZUhkNg=SpamAssassin Report (spam score: 11.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.53 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (4246gplhjc[at]ms15.hinet.net) 2.4 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server [80.17.38.39 listed in dnsbl.sorbs.net] 2.5 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server -0.0 SPF_PASS SPF: sender matches SPF record 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129335 - Sent on June 14, 2015, 5:28 pm by 4246gplhjc@ms15.hinet.net
Hello Friend,I am General Daniel B Allyn. I was born in New Hampshire in 1959 and raised in Berwick, Maine. I graduated from the US Military Academy at West Point, New York in 1981. and i went on to serve overseas in Korea, Grenada, Egypt, Panama, Saudi Arabia, Kuwait, Iraq and Afghanistan as a combat infantryman and a master parachutist.And as  a United States Army General, i am the 35th Vice Chief of Staff of the United States Army. I assumed my current role on August 15, 2014. I previously served as the Commanding General, United States Army Forces Command from May 2013 to August 2014. And presently i am here in Syria for a peace keeping mission as a Vice Chief of Staff of the United States Army.I am telling you this secret because you convince my doubt that you must be a honest person. during a patrol we came across a safe case that contains huge amount of cash that belongs to the revolutionaries which we believe they use in buying weapons and ammunition to sponsor terrorism here in Syria and it was agreed among us to share the money among us and declare only the weapons to the government which we did.Out of the total money, my share is Two Million U.S dollars and i thought i could travel along with the money when it is time for my retirement which is August 15th this year 2015. But the major reason why i am sharing this secret with you is because i got an information that President Obama will be sending some government officials from Washington D.C to inspect our offices and homes here before we will leave and my fear is that they will see my cash in my office if they comeTherefore, i think it is important for me to seek your help to receive this cash for me because we have unfriendly laws and regulations that is guiding here at battle field, and those laws and regulations only exist when we are in the battle field. It is true that those laws and regulations are quite unfriendly as it doesn't allow us to mingle with strangers we meet in the internet, yes it is for our safety and protection as Taliban use to disguise in the internet as journalist to get our vital information to attack us and it was on this reason it is mandated that no American Soldier should henceforth communicate with Taliban unknowingly. But i took the risk to communicate with you because you convinced my doubts and fears of not mingling with a TalibanAll i need from you is your honest assistance to help me receive the cash from the base here as soon as possible i really don't mind i can offer you 20% of the cash for your honest assistance please get back to me as soon as possible if i can trust in you that you will not betray me and run away with the cash when you receive the cash brief caseThank youGen. Daniel B Allyn SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (daniel.b.allyn01[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129333 - Sent on June 14, 2015, 5:25 pm by daniel.b.allyn01@gmail.com
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/seyJjIjogOTUwMiwgImYiOiAwLCAibSI6IDg2MDMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
SpamAssassin Report (spam score: 18.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.9 URG_BIZ BODY: Contains urgent matter 2.0 BANKING_LAWS BODY: Talks about banking laws 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mazinjuda1[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.139 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mazinjuda1[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129328 - Sent on June 14, 2015, 5:08 pm by mazinjuda1@gmail.com
Start Your Career in Med Billing Now! All Classes 100% Online! SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.171 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: barogramsla.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: barogramsla.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: barogramsla.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
YOU ARE REQUESTED TO VIEW THE BELOW ATTACH FILE AND REPLY BACK IMMEDIAELY...SpamAssassin Report (spam score: 8.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (kwikcashfinance08[at]hotmail.com ) 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129325 - Sent on June 14, 2015, 5:03 pm by reception@medipost.co.za
Hi Dear Permit me to inform you of my desire of going into business relationship with you, please i need a trust-worthy person that will help me to receive this money.I am very sorry. I hope that you will read through this email and understand how difficult things can be for someone in a particular period in life, I introduce my self to you with all faith, trust and hope you will understand to assist me not to betray me at the end. My name is Mrs. Elizabeth Charles from Cote d'Ivoire , I am 59 years old, I am suffering from a long time Cancer of the breast. From all indication my condition is really deteriorating, and my Doctors have courageously advised me that I may not live beyond next month, this is Because the cancer stage has reached a critical stage. I was brought up in a Motherless baby as home, and was married to my late husband for twenty years we have only one child his name is David. My husband and I are true Christians, but quite unfortunately, he Died on the 2011 presidential election in our country. Before his death we were both born again Christians. I decided not to re-marry, My husband Deposited the sum of $5.2million dollars here in Cote d'Ivoire Presently, this money is still with the bank i want you to use this money to take care of my only son and also invested the money into a very good LUCRATIVE VENTURE of your choice that will be giving out proceeds to be distributed each year Among the charity organization, the poor and the motherless baby as, orphanage Homes and widows around. I must let you know that this was a very hard decision, But I had to take a bold step towards this issue because I have no further option. I hope you will help see my last wishes come true. Best regards, Mrs. Elizabeth Charles --- Este mensaje no contiene virus ni malware porque la protección de avast! Antivirus está activa. https://www.avast.com/antivirus SpamAssassin Report (spam score: 17.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: avast.com] 3.5 FSL_MY_NAME_IS BODY: My name is ... 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.7 FSL_NEW_HELO_USER Spam's using Helo and User 0.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_USER From misspaced, from "User" 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 3.5 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Click to view scam #129329 - Sent on June 14, 2015, 5:00 pm by ugoezecharles01@yebomail.com
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/heyJjIjogOTQ5MywgImYiOiAwLCAibSI6IDg1OTUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129326 - Sent on June 14, 2015, 4:59 pm by WEN.Hair.Care@doyoulikeeeme.com
Re: please i need your help Please permit me to introduce myself, i am Miss Anisa Ibrahim Coulibaly 23 years old female from the Republic of Ivory Coast, West Africa, I'm the Daughter of Late Chief Sgt. Ibrahim Coulibaly (a.k.a General IB ). My late Father was a well known Ivory Coast military leader. He died on Thursday 28 April 2011 following a fight with the Republican Forces of Ivory Coast (FRCI). For more details, please contact me at my private email anisaibrahim2015@gmail.com You can read more about my father in the link below: http://www.guardian.co.uk/world/2011/apr/28/ivory-coast-renegade-warlord-ibrahim-coulibaly I am constrained to contact you because of the maltreatment which i am receiving from my step mother. She planned to take away all my late father's treasury and properties from me since the unexpected death of my beloved Father because my mother died during child birth and i was left alone with my step mother to take care of me. Meanwhile i wanted to travel to Europe, but she hide away my traveling documents. Luckily she did not discover where i kept my father's File which contained important documents like the will and deposit certificate of my Father's fund which bears my name as the next of kin to inherit the money in his bank account. Now I am presently staying in the Refugee Mission Camp in Burkina Faso. I am seeking for long term relationship and investment assistance. My father of blessed memory deposited the sum of US$ 11.5 Million in Bank Of Africa here in Burkina Faso with my name as the next of kin. I have contacted the Bank to clear the deposit but the Branch Manager told me that my late father place an instruction on the deposited fund that i must present a foreign trustee who will help me in investment of the fund. However, the manager advised me to provide a trustee who will stand on my behalf for the transfer of the fund. i wanted to inform my stepmother about this deposit but i am afraid that she will not offer me anything after the release of the money because she threaten to kill me. Therefore, i decide to seek for your help in transferring the money into your bank account while i will relocate to your country and settle down with you. As you indicate your interest to help me, i will give you the account number and the contact of the bank where my late beloved father deposited the money with my name as the next of kin. It is my intention to compensate you with 30% out of the total money after the transfer for your assistance and the balance shall be my investment in any profitable venture which you will recommend to me as i have no idea about foreign investment. Please all my communications with you  should be through email address for confidential purposes. For more details, please contact me at my private email anisaibrahim2015@gmail.com Thanks in anticipation of your positive response. Yours sincerely Miss Anisa Ibrahim Coulibaly. SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (a.bbbb12[at]aol.de) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129323 - Sent on June 14, 2015, 4:57 pm by a.bbbb12@aol.de
Attn. Sir,Please check the attached order list from my company  and reply if you have in stock and quantity , the ones marked in red are our most urgent items,please state delivery time for those ones marked in red Looking forward to your urgent response Thanks and Best regards, Orient EnterprisePurchasing SpamAssassin Report (spam score: 0.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (orienittom1[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.178 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #129321 - Sent on June 14, 2015, 4:30 pm by orienittom1@gmail.com
SEVEN HUNDRED AND FIFTY THOUSAND USD HAVE BEEN ISSUED TO YOU.FOR MORE INFO SEND REF:SA/WU/010 to: prowumt@qq.com SpamAssassin Report (spam score: 12.0) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: qq.com] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (diegosax[at]tin.it) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.180 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.7 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.0 FROM_MISSP_USER From misspaced, from "User" 2.8 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #129319 - Sent on June 14, 2015, 4:29 pm by diegosax@tin.it
---------- Forwarded message ----------From: Flip_Funding <ahartmanyoung@gmail.com>Date: Fri, Jun 12, 2015 at 1:51 PMSubject: ~~$50,000~~guaranteed~~line~~of~~credit~~-~~0%~~interest~~find~~out~~how~9To: to@mdb.aps.org ~~$50,000~~guaranteed~~line~~of~~credit~~-~~0%~~interest~~ find~~out~~how U_S_B 0t__0t
Click to view scam #129318 - Sent on June 14, 2015, 4:28 pm by ahartmanyoung@gmail.com
---------- Forwarded message ----------From: Promos@WALMART <ahartmanyoung@gmail.com>Date: Fri, Jun 12, 2015 at 5:03 PMSubject: --$1000~~Walmart~~Card~~for~~~Amy~~-~~THANK~~YOU!--To: to@mdb.aps.org Having issues seeing the images ? click here to view. Amy Get_your_$1OOO_Walmart_Gift_Card. Details---Apply. _N0_More_emaiIs_?_ OPTDOWN
Click to view scam #129320 - Sent on June 14, 2015, 4:28 pm by ahartmanyoung@gmail.com
---------- Forwarded message ----------From: Promos@WALMART <ahartmanyoung@gmail.com>Date: Sat, Jun 13, 2015 at 10:03 AMSubject: Invitation__for__Amy,_Get_a__$1000__Walmart__Card__-__THANK__YOU!__To: to@cnn.com Urgent__:__Get__your__$1OOO__Walmart__Gift__Card click_here UNSU_B 0pt_0t
Click to view scam #129317 - Sent on June 14, 2015, 4:28 pm by ahartmanyoung@gmail.com
---------- Forwarded message ----------From: <Globe_LifeOffer.@s6hyywe2rfugent9qhxs4f.e.dx.com>Date: Sat, Jun 13, 2015 at 4:34 PMSubject: __100K__oF__gLoBE__lIFE__COVeRAGe__FOr__$1*__To: dfghiua <ahartmanyoung@gmail.com> __Having issues seeing the__images? click__here__to____view. !!!!Official__Offer__-__$1*__Buys__$1OO,OOO__Globe__Life!!!!! See here n0_____mOrE____eMAIIs? __OPTDOWN__
Advert
---------- Forwarded message ----------From: Dental Implants <ahartmanyoung@gmail.com>Date: Sun, Jun 14, 2015 at 9:57 AMSubject: Find DeNtaL ImPlAnTs HereTo: to@mdb.aps.org Amy_This Could Be Your Chance For Dental Implants click_here UNSU_B 0pt_0t
Click to view scam #129316 - Sent on June 14, 2015, 4:27 pm by ahartmanyoung@gmail.com
Re : ça va vous remonter le moral, c'est sur ! .ReadMsgBody { width: 100%; } .ExternalClass { width: 100%; } td {border-collapse: collapse; } Vous recevez ce mail car vous vous êtes inscrit sur notre site. Si vous ne souhaitez plus recevoir de messages, cliquez sur ce lien: se désinscrire. Bonjour, J'ai eu un nouveau flash vous concernant, en effet votre cas m'obsede, je ne veux pas qu'il vous arrive quelque chose de negatif Je ressens un reel chamboulement dans votre vie mais quelque chose m'intrigue, il faut que nous en parlions au plus vite ! Je suis choquee des revelations que j'ai à vous faire mais c'est necessaire pour votre bien. Ne vous en faites pas, c'est anonyme et surtout gratuit. Rejoignez-moi vite, je vous offre la consultation ! Rappelez-vous le témoignage d'Isabelle, 54 ans, region parisienne : "Apres avoir discute avec vous suite a votre flash, j'ai pu eviter la catastrophe a la derniere minute, vous aviez vu juste et je voulais vous remercier." Bien à vous Cyrine votre voyante Si vous ne souhaitez plus recevoir mes emails, il suffit de vous desinscrire en cliquant ici. Sachez néanmoins que je fait cela pour vous rendre service et que ce serais dommage de ne pas profiter de l'aide que j'aimerais vous offrir. SpamAssassin Report (spam score: 1.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: clear-snd.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129312 - Sent on June 14, 2015, 4:04 pm by cyrine@clear-snd.com
From:Engr Demond Keshinton, BMW AUTOMOBILE COMPANY, 1261 Ouagadougou Burkina Faso, Swift:utbNG28X82 Attention:                                Reply to    info.uba@mail.com.tr  Congratulation BMW  Lottery Winner This is to Inform you that we have instruted our payment Bank to transfer your winning fund to you via  ATM Card  which the Number:(4539 7978 0214 3027) worth US$1.Million Dollar has been accredited to your favor, you are advise to contact Mr.Rahimani Abdulaiye with this contact info.uba@mail.com.tr also with the following information below. so that your Visa ATM CARD shall be deliever yo uou right at your door Step in your country . 1. Your full Names. 2. Your Phone and fax number. 3. Your Delivery address {where you want the ATM card to be sent to}. 4. Your Occupation and Job Title. 5. Your Age & Sex. 6. Your Next of Kin. Finally note that you are receiving this email message as a result of IMF including your name among the list of beneficiaries for the above Inheritance fund, do respond with the above directive immediately in order to successfully receive your fund within a timely period. Regards Engr Demond Keshinton. BMW AUTOMOBILE COMPANY.. SpamAssassin Report (spam score: 4.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.50 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (des_kesh[at]aol.fr) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129310 - Sent on June 14, 2015, 4:02 pm by des_kesh@aol.fr
Attn. Sir,Please check the attached order list from my company  and reply if you have in stock and quantity , the ones marked in red are our most urgent items,please state delivery time for those ones marked in red Looking forward to your urgent response Thanks and Best regards, Dominique simbulPurchasingCel#0932-885-36-05   GRIP EXPORTSRichardson Compound, LIIP Ave. LIIP Mamplasan, Binan LagunaTel. # 02- 986-39-52 / Fax # 049- 539-00-20 loc.104 SpamAssassin Report (spam score: 0.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.178 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dominiquesimbul[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #129311 - Sent on June 14, 2015, 4:00 pm by dominiquesimbul@gmail.com
Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Enjoy a delicious dinner with Red Lobster card* If you are experiencing difficulty viewing this important message, visit here. This message was delivered to you because you have subscribed at one of our choice affiliate sites. If you received this in error and/or want to stop future mailings from this affiliate, you may do so here. Please allow 2-5 days for this to take effect. You can also send correspondence to: Customer Support, 925 B Peachtree St NE Suite 620 Atlanta, Georgia 30309 SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cbssportsinteractive.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/heyJjIjogOTQ5MSwgImYiOiAwLCAibSI6IDg1OTQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129305 - Sent on June 14, 2015, 3:44 pm by Bank.Account@doyoulikeeeme.com
ÑûÇëÄú¹?´ Low cost multi monitor video wall solution with IP camera supported µÄÏà²? Low cost multi monitor video wall solution with IP camera supported Attn Technical Manager Low cost multi monitor video wall solution with IP camera supported Attn Technical Manager 2015Äê2ÔÂ3ÈÕ Ì?Õ?ºLow cost multi monitor video wall solution with IP camera supported ²?Ïà²á ²¥·?õÆ? ??×Ô Low cost multi monitor video wall solution with IP camera supported µÄÏû?£º Dear Sirs, After visiting your web-site I decided to contact your esteemed company as one of the leaders of digital signage field . MSP2000 is a multi monitor video wall processor designed for event promoting , widely used in newsroom and video conference . Based on the solution, the viewers can see presentation from various sourcing on 1 video wall consist of multi monitors. The sourcing include: multi remotely web cameras, remotely computer. I would appreciate if you forward this letter to Technical Manager or to other expert responsible for technical integration of new products in your company, or provide me with his contact for we could discuss all the details of our future cooperation.Your early reply is highly appreciatedAnna Èç¹ûÄúÔÚÔ????ç×ÓÓ?þ?³öÏÖÎÊÌ?Ç?ÒÔ?Ø?¸´Ö?¢?Ìùµ½ÄúµÄä¯ÀÀÆ÷Ö?º https://picasaweb.google.com/lh/sredir?uname=118186897509463848012&target=ALBUM&id=6133319880146996129&authkey=Gv1sRgCLmPoOeAv5X7aQ&feat=email ?·ÖÏíÄúµÄÕÕ?»òÔÚÅóÓÑÓëÄú·ÖÏíÕÕ??Ê?½??£¬Çë»ñ?ÊôÓÚÄú×?ºµÄÃâ·Ñ Picasa ÍøÂçÏà²áÕ?§¡£ SpamAssassin Report (spam score: 3.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.53 listed in list.dnswl.org] 1.0 HK_RANDOM_REPLYTO Reply-To username looks random 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129304 - Sent on June 14, 2015, 3:30 pm by hhhhh6@dss.yyqqdd.com
> Date: Sat, 13 Jun 2015 09:35:27 +1200> From: kate@dts.net.nz> To: > Subject: RE: YOUR FUND $5.5 MILLION DOLLARS> > > > -- > Payment Notice,> > Do not send money to Africa to receive money. Do not send fee to Ghana or> Nigeria or other part of Africa with purpose to receive money. All> outstanding Contract/Winning/Inheritance/Compensation payment in Africa has> been moved to Federal Reserve Bank Washington DC for immediate release to> you. Any fee you send to Africa to receive fund is at your own risk. Upon> your receipt of this message, contact Federal Reserve Bank Washington DC> with below information for immediate release of your $5.5 Million Dollars.> > Contact Person: Janet L. Yellen,> Vice Chairman Board of Governor Federal Reserve Bank> Email: payment@federalreservebangovs.us.pn> EMAIL: info@federalreservebangovs.us.pn > > The more you communicate with people in Africa, the more you expose your> identity to identity thieves. Kindly contact the Federal Reserve Bank only> with above information to receive your $5.5 million dollars without delay.> > Thanks for your understanding> Jacob J. Lew> Secretary of the Treasury> U.S Department of the Treasury> usa@usdepartmentoftreasury.us.pn
Click to view scam #129303 - Sent on June 14, 2015, 3:20 pm by kate@dts.net.nz
> Date: Sun, 14 Jun 2015 16:07:49 +0200> Subject: Please Contact me for more details> From: carlos.1974@oi.com.br> To: > > -- > Hi friend> > I am a banker in ADB BANK. I want to transfer an abandoned sum of> USD15.6Million to your Bank account. 40/percent will be your share.> > No risk involved but keep it as secret. Contact me for more details.> Please reply only in my alternative email address (salif_musa2012@voila.fr)> > Yours> Dr Salif Musa
Click to view scam #129301 - Sent on June 14, 2015, 3:20 pm by carlos.1974@oi.com.br
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/jeyJjIjogOTQ5MCwgImYiOiAwLCAibSI6IDg1OTMsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://doyoulikeeeme.com/ieyJjIjogOTQ4OSwgImYiOiAwLCAibSI6IDg1OTIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: doyoulikeeeme.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: doyoulikeeeme.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: doyoulikeeeme.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129299 - Sent on June 14, 2015, 2:47 pm by AT&T@doyoulikeeeme.com
UNITED NATIONS (WORLD BANK ASSISTED PROGRAMMED) DIRECTORATE OF INTERNATIONAL PAYMENT AND TRANSFERS. 870 UNITED NATIONS PLAZA 20-A NEW YORK NY 10017 WIRE TRANSFER/AUDIT U NIT Our Ref: WB/NF/UN/XX027, ATTN: Beneficiary, We have actually been authorized by the UN secretary general,and the governing body of the UNITED NATIONS monetary unit, to investigate the unnecessary delay of your inheritance fund, recommended and approve in your favor. During the course of our investigation, we discovered with dismay that your payment has been unnecessarily Delayed by corrupt officials of the Bank who are Trying to divert your money into their private accounts, to for es-tall this,security for your funds Was organized in the form of your personal Identification number (PIN) ATM CARD this will enable only you have direct Control over this fund, we will handle this payment ourselves to avoid the hopeless situation created by the Officials of the bank. We obtained an irrevocable payment guarantee on your Payment from the presidency.we are happy to inform you that based on our recommendation/instructions; your Entire Inheritances fund has been credited in your favor through ATM card. You are therefore advice to send your contact details to Mr Mattins International Audit unit, United Nations Liaison Office London EMAIL:(mattinsc99@superposta.com ) to collect your original payment slip with your ATM card. They will issue you an ATM card that you can use to withdraw money in any ATM machine in any part of the world, but the maximum is Ten Thousand dollars per a day. So if you like to receive your funds through this means kindly let us know by contacting the card payment center and also send the following information as stated below to them as directed above. 1 Full Name 2. PHONE AND FAX NUMBER 3. ADDRESS WERE YOU WANT THEM TO SEND THE ATM CARD TO (P.O BOX NOT ACCEPTABLE) 4. YOUR AGE AND CURRENT OCCUPATION 5. Marital status 6. Identity/Sex. NOTE: YOU ARE ADVICE TO FURNISH REV. PETER CLARK WITH YOUR CORRECT CONTACT DETAILS.AND ALSO BE INFORMED THAT THE AMOUNT TO BE PAID NOW IS $8.3 MILLION THE REST WILL BE PAID TO YOU IN A LATER DATE. We expect your urgent response to this email to enable us monitor this payment effectively thereby making contact with REV PETER CLARK as directed to avoid further delay. CONGRATULATIONS. CAPT. JAMES WILLIAMS UNITED NATIONS, NEW YORK SpamAssassin Report (spam score: 15.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: superposta.com] 3.3 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mattinswilly[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 YOU_INHERIT Discussing your inheritance 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.7 MONEY_ATM_CARD Lots of money on an ATM card 2.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129297 - Sent on June 14, 2015, 2:36 pm by mattinswilly@gmail.com
Begin forwarded message:From: ??????? <april@metajive.com>Date: 14 June 2015 11:36:22 BSTTo: <hongkong@kingswaygroup.com>, <sales@wirelessdmx.com>, <changaco@changaco.net>, <rob@robgodman.com>, <jordidomingo@dfh.es>, <joseph.strauss@boku.ac.at>, <shandong.wang@osram.com>, <joseph.zou@ukgo.com.cn>, <web@wxthshzb.com>, <mattdaphne@ndsupernet.com>, <info@rensfeed.com>, <July@Risfond.com>, <hr@soaring.com.cn>, <joinhome@joinhome.com>, <tgwx@shaolintagou.com>, <josemanuel72681@yahoo.pt>, <josephbankhead@aol.com>, <lili@bjecom.com>, <bearcake@seed.net.tw>, <joseph_ogadi@libero.it>Subject: ????????? ???150?        ????????4.5%???????????????????????????????? ????????????????????????????????????????,???????????????????????? ?????????????50?????????50???????6????200??80????PS??80?????????????? ????????????????????????100????????????????????150???????????????? ??????????????????http://affiliate.lufax.com/action/tRvCa  
Click to view scam #129295 - Sent on June 14, 2015, 2:35 pm by april@metajive.com
Dear Sir/Madam I am sorry to bug your privacy. My name is Mrs.Sherzanie Raghu, I am the wife to late Mr.Ashok Raghu who happens to be a government contractor, trader and a politician. My husband was divisional treasurer of trade and contractors of the People's National Congress (PNC) in Guyana. He was brutally murdered by opposing members of his party for his straightforwardness and accountability though the government claimed that it was a robbery attack but everybody know it was assassination by some people in government. I was lucky to stand this gruesome murder on the broad day light of Monday, 18th August, 2014. But i was shot in the thigh, I was lucky to escape. I was rush to the hospital by some neighbors and eventually the same assassin still killed my daughter's for communicatig with the press and also came to the hospital in Georgetown just to take my life but eventually they miss their access to my ward. So I had to instruct our account manager to transfer our money to South Afri ca where I had to run and seek as Please copy link below and read more about the incident where my husband was murdered on 18th August, 2014. http://www.inewsguyana.com/pike-street-businessman-killed-in-daring-day-light-robbery-wife-survives/ I write you to seek your assistance in the security of US$5.5million Deposited by me with a SOUTH AFRICAN RESERVE BANK before I seek refugee/asylum here. The South African reserve bank will allow you go on their online banking to transfer the funds. I am the only one with direct access and information of this deposit. I decided to seek help because I have recently been diagnosed of cancer of the lungs which has spread and damage a lot of cells and the Doctor has confirmed to me that My days are numbered, having received a call from the Reserve bank that they will turn the deposit to it's government treasury if I fail to present a representative for the claim. I seek your assistance to be made the Administrator to this inheritance since I have no relative or children. I intend to introduce you to the director of the bank whom I deem very competent to guide you through this claim process. Please get back to me for more information on this inheritance. I was lead by the Almighty to send this mail to you, Please treat this seriously and I hope to hear from you soon, so that we can finalize this transfer within 3 days, I have all documentation to back up this claim, this is my email address: mrs.sherzanie@aol.com Thank you. Mrs.Sherzanie Raghu. Reply me to: mrs.sherzanie@aol.com SpamAssassin Report (spam score: 30.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: inewsguyana.com] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 3.5 FSL_MY_NAME_IS BODY: My name is ... 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.7 FSL_NEW_HELO_USER Spam's using Helo and User 0.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129293 - Sent on June 14, 2015, 2:23 pm by postmaster@cps-soft.com
----- Mail transféré ----- De: Christelle fabre <christelle.fabre8@orange.fr> À: RICHARD MERCKY <richard.mercky@gmail.com>, LA VOISINE DU SEXTANT DE CATHYE FAYENCE AVEC DISCRETION <calmanis@hotmail.com> Envoyé: Sun, 14 Jun 2015 05:05:54 +0200 (CEST) Objet: Meilleur Prix??? Envoyé depuis l'application Mail Orange  ---------------- --Pièce jointe du message transmise-- Nous vous contactons par cette présente lettre pour vous informer que vous êtes bénéficiaire de la somme de 250.000 EUROS organiser par la LOTERIE MICROSOFT WINDOWS 2015. Cette loterie a été favorisée et commandité par La Compagnie Microsoft,  logiciel du monde ( Microsoft ), nous espérons qu'avec une partie de votre  gain vous participerez à la promotion de l'Internet chez vous car cela fait partie également de la promotion de La Microsoft.Ceci n'étant donc pas un spam ni un virus, Pour la réclamation de votre gain veuillez entrer en contact avec Me. CHRISTOPHE par courrier électronique Huissier accrédité à cette tombola. Contact E-mail: cabinet.christopheverbist@hotmail.com Tel Mobile: (+2) 255 892 58 80 Cordialement, LA DIRECTION DE LA LOTERIE.
Click to view scam #129291 - Sent on June 14, 2015, 1:55 pm by christelle.fabre8@orange.fr