Logo



Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: arliest.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131858 - Sent on July 14, 2015, 5:38 am by browneyes@arliest.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131854 - Sent on July 14, 2015, 5:38 am by browneyes@arliest.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: arliest.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.7 BAD_CREDIT BODY: Eliminate Bad Credit 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131860 - Sent on July 14, 2015, 5:38 am by browneyes@arliest.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: arliest.com] 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131853 - Sent on July 14, 2015, 5:35 am by browneyes@arliest.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 1.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131852 - Sent on July 14, 2015, 5:35 am by browneyes@arliest.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: arliest.com] 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131857 - Sent on July 14, 2015, 5:35 am by browneyes@arliest.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: arliest.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: arliest.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131859 - Sent on July 14, 2015, 5:35 am by browneyes@arliest.com
My name is Gavin. I'm 45 years old, from the US. I'm in Syria right now fighting IS. I want to get to know you better, if I may be so bold. I consider myself an easy-going man, and I am currently looking for a relationship in which I feel loved. Please tell me more about yourself, if you don't mind. SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 2.9 FSL_MY_NAME_IS BODY: My name is ... 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #131856 - Sent on July 14, 2015, 5:25 am by el.pro@nbl.fi
?   ----- Original Message ----- From: Abraham Rid To: Sent: Tuesday, July 14, 2015 3:18 AM Subject: Re: Relocation of $ 750 Million For the Attention of    Re:  Immediate Relocation of the Sum of  U.S.750,000,000.00: In Acc. Number : 004 773 3981  I am writing to inform you that the Homeland Security have given our Bank the July 24th, 2015 as Ultimatum for you present a Certified Document that defines the Good source of your Fund or Procure A provisional Certificate in order for your Fund to be transferred on or before the deadline of July 24th,2015 First and foremost, I want you to know that your $ 750 Million has been relocated from the official account it was reference above and the Fund has been credited into Bank of America Pool Account to prevent Relinquishment and confiscation by Authority following the Dormancy of the account. Ever since the account was opened .  A Pool Account is to put  ( Resources, Money, etc ) into a pool, or common stock or fund as for Financial venture  according to agreement, This action is to enable  us in agreement with you, to effect  payment of your fund in cash in one  of  our Europe  Off-shore cash Payment Center  ? which is in-line with the global Monetary Policy ? as to prevent the relinquishment of your Fund  following the dormancy of account Number 004  773 3981 with Bank of America . With our Financial Immunity, we can Airlift a maximum of $ 20 Million from  $ 750 Million to one of our Off-Shore cash Payment Center in Europe either in Madrid - Spain or London ,U.K.  for you to receive the Fund in Cash. The director of Operations of the designated payment Center will facilitate the deposit of the said $20  Million into  an account that will be opened in your name in one of corresponding bank in Madrid Spain or London, U.K where the Fund will deposited and transferred to your nominated bank account with hitch free.  So that at the receipt of the $20 Million you will have the Financial power to procure the required Provisional Clearance Certificate that will facilitate the transfer of your $730 Million Balance. But, please note that your presence will be required in our off-shore payment Center to sign the fund Release Order of the $ 20 Million to facilitate lodgment in the Bank and onward transfer of your fund to your designated Bank Account   . To this end, I await your response which will determine our next line of action Yours faithfully Rid Roth Abraham Executive Director Foreign Remittance Dept. Direct Line +1 347 278 5008  / Fax: + 1 206 333 5071
Click to view scam #131850 - Sent on July 14, 2015, 4:19 am by title=ridabrahambofa@gmail.com
---------- Forwarded message ----------From: Western Union <oilebas@cantv.net>Date: 16 June 2015 at 18:32Subject: Your money transfer notification.To: westernuniontf@gmail.com  Attention,We have deposited the check of your fund ($2.50000000USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director Dr.john Moone via E-mail:( inf0@pisem.net ). He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as:YOUR FULL Name_______________Address: ________________Country: _____________Phone Number: _____________Though, Mr. Franklin Moore has sent $5000 in your name today so contact Dr.john moone or you call him +229-97799853 as soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund:Best Regards.WESTERN UNION AGENT
Click to view scam #131849 - Sent on July 14, 2015, 3:49 am by oilebas@cantv.net
---------- Forwarded message ----------From: Transaction Notification <jj9760774@gmail.com>Date: 2 July 2015 at 14:25Subject: YOUR FUNDS TRANSFER WAS APPROVED YESTERDAYTo: FROM THE DESK OF: MS MJ MARY JAY SENIOR ADVOCATE OF BENIN REPUBLIC ADDRESS: 207 AVENUE GOVERNMENT AREA BENIN REPUBLIC. Attention , I am glad to announce to you today that a new payment policy has been adopted and you have been shortlisted for payment via Online Banking, So kindly urgent contact Credit Union Bank Benin republic the paying bank, the transfer was approved by Benin Republic government and the funds are to be transfer to you via online banking and you are to assure you follow there online payment instruction to make sure the transaction goes successful. Below is the contact information of Credit Union Bank Benin Republic: Contact Person: Mr. Edward Williams Jr Phone +229 6865 3182 E-mail (creditunion@kimo.com) Endeavor to email him the following information for immediate processing, FULL NAME: FULL CONTACT ADDRESS: PHONE NUMBER: FAX NUMBER: OCCUPATION: COUNTRY: MARITAL STATUS: AGE: SEX: EMAIL ADDRESS: COPY OF ID OR PASSPORT ATTACHMENT: These are the requirements that you need to be aware of before you contact him below. 1) You will fill the online account opening form Credit Union Bank Benin Republic. Send him an email in regards to your funds $25.5 Million that has been approved by the Federal Government of Benin republic to transfer on your behalf through there online banking service. Yours Sincerely, Prof John Larry Esq Authorization Minister Federal Republic of Benin
Click to view scam #131848 - Sent on July 14, 2015, 3:41 am by jj9760774@gmail.com
You Can Still Qualify for Affordable Health Coverage SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: enlgdsgl.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: enlgdsgl.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.182 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: enlgdsgl.com]
Click to view scam #131847 - Sent on July 14, 2015, 3:30 am by contact@NACZj8D.enlgdsgl.com
-----Original Message----- From: Server <isegarcilazo@att.net> Sent: Mon, Jul 13, 2015 8:50 pm Subject: Message You would be blocked from sending and receiving emails if not  confirmed  within 24hrs of receiving this automated mail.   You are required  to update through the link below.    UPDATE   Thanks for using AOL
Click to view scam #131846 - Sent on July 14, 2015, 2:56 am by isegarcilazo@att.net
Hi
Sent from my Samsung Galaxy Tab® S-------- Original message --------From: "Edson Barbosa (via Google Forms)" <forms-shares-noreply@google.com> Date: 2015-07-13 6:43 PM (GMT-05:00) To: margritsim@aol.com Subject: Hi Dear Friend. I got your details after an extensive on-line search Via (Network Power Charitable Trust) for a reliable person, I am Engineer. Edson da Silva Barbosa , an aged dying man who was diagnosed for cancer about 2 years ago, I have decided to donate ($10,500,000.00) to you for charitable goals. Contact my lawyer if you are interested in carrying out this task, so that he can arrange the release of the funds to you. Name: Barrister Adom Thiemele Esq: E-mail (adom-thiemele@thiemele-lawfirm.com)Best regardsEdson da Silva BarbosaIf you have trouble viewing or submitting this form, you can fill it out in Google Forms.Untitled formUntitled QuestionOption 1Powered byThis content is neither created nor endorsed by Google.Report Abuse-Terms of Service-Additional Terms
Click to view scam #131845 - Sent on July 14, 2015, 1:30 am by forms-shares-noreply@google.com
SpamAssassin Report (spam score: 0.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.170 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: smtpmercantile.in] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header
Click to view scam #131843 - Sent on July 14, 2015, 1:00 am by info@acikel.com.tr
up yours  On Mon, Jul 13, 2015 at 02:09 AM, marytaylor@cenbank.org wrote:         I wish to inform you that the FBI returned your cheque of $7.3million to us from USA. The central Bank of Nigeria has decided to give it a last shot and send the cheque directly to you at the cost of $200 only by Nigerian Postal Service with Insurance. You are to send the $200 to our mailing agent with the Nigerian Postal Service. Once it gets to your country, it will be delivered to your local postal Service who will deliver it to your house address.           If this is acceptable by you, you are to send the $200 by western union or moneygram to the Foreign Transfers Department. The details you need are below to send the $200 via my assistant is as follows:             Name: Jane Anthony Address: 10 Central Bank Road, Wuse, Zone 2, Abuja, Nigeria Test Question: reason Answer: mailing             Once the fee is sent, the check will be sent immediately. Just deposit into your bank account and it will be cleared within 7 working days into your account.             Mary Taylor Central Bank of Nigeria   This email has been checked for viruses by Avast antivirus software. www.avast.com
Click to view scam #131841 - Sent on July 14, 2015, 12:16 am by marytaylor@cenbank.org
NICE TO MEET YOUCompliments to you and i hope you are doing great.My name is Dr Melissa Klein  from UK, Can we be friends? I intend to visit your nation later in the year for tourist. you can reply with my email ( serline_klein@hotmail.com ) I will tell you more about me when i get a reply from you OK.Best RegardsDr Melissa Klein. SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (favourjames2003[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [157.55.0.205 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131840 - Sent on July 13, 2015, 11:05 pm by favourjames2003@hotmail.com
Advert
THE ARRANGEMENT FOR THE PAYMENT OF YOUR COMPENSATION FUND AS DIRECTED BY THEUNITED NATIONS ORGANIZATION (U.N.O) IS ON, WE WILL BRIEF YOU THE FINAL ARRANGEMENT ON OUR NEXT MAIL SEE THE ATTACHED FILE ON THE MAIL AND FOLLOW THE INSTRUCTIONS GIVEN THERE. SpamAssassin Report (spam score: 8.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.173 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hgbfcf9[at]hotmail.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131839 - Sent on July 13, 2015, 10:58 pm by hgbfcf9@hotmail.com
Internet Banking Pagamento de boleto bancário. Você está recebendo o comprovante de pagamento realizado via Internet Banking. Operação efetuada em 13/07/2015 às 13:29:19 via bankline, CTRL 225967397 Autenticação mecânica: C43C454FB0F14EE71C8128AD4F4AEBCF63CC6E42 O que deseja fazer com seu comprovante: VISUALIZAR - IMPRIMIR     SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: aplisalud.com] 2.6 FROM_NO_USER From: has no local-part before @ sign 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay
Click to view scam #131837 - Sent on July 13, 2015, 10:49 pm by @
SpamAssassin Report (spam score: 4.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.2 AXB_X_FF_SEZ_S Forefront sez this is spam -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131835 - Sent on July 13, 2015, 9:59 pm by djl75@pitt.edu
SpamAssassin Report (spam score: 3.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.2 AXB_X_FF_SEZ_S Forefront sez this is spam -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131833 - Sent on July 13, 2015, 8:34 pm by AMF139@pitt.edu
-----Ursprüngliche Nachricht----- Von: Ms.EllaGolan [mailto:nssb-vn@nssb-vn.com.vn] Gesendet: Montag, 13. Juli 2015 11:11 An: Recipients Betreff: Hello I am Ms.Ella Golan, I am the Executive Vice President Banking Division with FIRST INTERNATIONAL BANK OF ISRAEL LTD (FIBI). I am getting in touch with you regarding an extremely important and urgent matter. If you would oblige me the opportunity, I shall provide you with details upon your response. Faithfully, Ms.Ella Golan contact via email at: ms.ellagolan7@gmail.com
Click to view scam #131832 - Sent on July 13, 2015, 7:38 pm by ms.ellagolan7@gmail.com
Dear [censored]@gmail.com, 1969MB     2000MB You?re out of storage space and will soon be unable to send or receive emails until you free up space or purchase additional storage, Click Here for Free Additional 100MB.    NOTICE:  Failure to free up space or add up extra space, will result to Account Shut Down.   Thanks, Account Service AdministratorSpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sevice[at]mail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.180 listed in list.dnswl.org] 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 1.0 FREEMAIL_REPLY From and body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.1 TO_IN_SUBJ To address is in Subject
Click to view scam #131831 - Sent on July 13, 2015, 6:42 pm by sevice@mail.com
???????????????????????????????????????????????????????? ??????????????????????????????????????????????????????????????????????????????3800??????????????;   ????????????????????????????????????????????????????????????????????????????????????????????2800????????????? ??????????????????????????????????????????????????????????????????????????????1980??????????????????????????,?????????????????????????????????????????????????????????????????????;   ????????????????????????????????????????????????????1600?.    ?????????????????????????????????????????????????????????????????????????????? ?????????????????????????????????????????????????????????????????????????????????????????? 3800????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????,??????????????? ?????????????????????????????????????????????????????????????????????????????????????????? 1980 ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????    ?????????????????????????????????????????????????????????????????????????????? 1??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????,??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 2???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 3??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 4????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 5?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????,???????????????????????????????????????????????????????????????????????????????????????????????????? ????????????????????????????????????????????????????Ap????????????ple   QQ : 82832092   ???????????????1858????????????8207183   E????????????mail:in????????????fo@kiya????????????group.com ???????????????????????????????????????? ??????????????????????????????????????? ??????????????? ?????????????????????????? ?????????????????????????????????????????????????????????????????????????????? 3800 7 ??????????????????????????????????????????????????????????????????????????????+????????????????????????????????????????????????????????????????+????????????????????????????????????????????????????????????????+???????????????????????????????????????????????????????????????????????????????????????????? ?????????????????????????????????????????????????????????????????? 1980 1 ????????????????????????????????????????????????????+???????????????????????????????????????????????????? ?????????????????????????????????????????????????????????????????????????????? 4780 7 ??????????????????????????????????????????????????????????????????????????????+????????????????????????????????????????????????????????????????+????????????????????????????????????????????????????????????????+???????????????????????????????????????????????????????????????????????????????????????????? ?????????????????????????????????????????????????????????????????? 2580 1 ????????????????????????????????????????????????????+????????????????????????????????????????????????????????????????+0??????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? B????????????VI???????????????????????????????????????????????????????????????? 5980 15 ??????????????????????????????????????????????????????????????????????????????+??????????????????????????????????????????????????????+????????????????????????????????????????+???????????????????????????????????????????????????? ??????????????????????????????????????????????????????????????????????????????????????????????????????? 3980 15 ??????????????????????????????????????????????????????????????????????????????+??????????????????????????????????????????????????????????????????????????????????????????+????????????????????????????????????????????????????????????????+???????????????????????????????????????????????????????????????? ??????????????????????????????????????????????????????????????????????????????    ????????????????????????????????????????????????????????????????    ????????????????????????????????????????????????????    ???????????????????????????????????????????????????2200   ?????????????????????????????????????? : ww????????????w.ki????????????yagro????????????up.com    ???????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????100%???????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????
Click to view scam #131829 - Sent on July 13, 2015, 6:31 pm by
Dear Sir / Madam, Please kindly see attachment and view original bill of Lading/ Invoice comfirmation attached below. This was made for your company through one of your customers. Please comfirm to us before shippment. Monica. Maersk Line Ltd. 17/F, Tower B, Landgent Center, No. 24 Middle - East Third Ring Road, Chao Yang District Customer service and booking: +86 532 80951000Call: +86 532 80951000 Sales service and inquiries: +86 10 65692188 Export Trades Customer Service: +86 532 83104622Call: +86 532 83104622 Import Customer Service: +86 532 83104611Call: +86 532 83104611 Sales service and inquiries: +86 10 65692199Call: +86 10 65692199SpamAssassin Report (spam score: 6.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dr.71[at]hotmail.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #131828 - Sent on July 13, 2015, 6:21 pm by dr.71@hotmail.com
http://businesssolutions.besaba.com/ GENUINE EARTHLINK RDP RESELLER WE ARE A COMPANY THAT SELLS GENUINE EARTHLINK RDP TO CUSTOMERS WE HAVE OVER FOUR YEARS OF EXPERIENCE IN RDP SALES CONTACT US TO BUY A PLAN FOR YOUR SPAMMING NEEDS WITH EARTHLINK RDP NO SMTP IS NEEDED IT SENDS WITHOUT SMTP AND DELIVERS WELL WE HAVE DIFFRENT PLANS SILVER PLAN OF EARTHLINK RDP IS 60$ SENDS 500,000 EMAILS DAILY GOLD PLAN OF EARTHLINK RDP IS 70$ AND SENDS 100,000,000 EMAILS DAILY PLATINUM PLAN OF EARTHLINK RDP IS 80$ AND SENDS UNLIMITED DAILY SHOP DIRECTLY FROM OUR WEBSITE AND ENJOY SPAMMING http://businesssolutions.besaba.com/ CHART DIRECTLY WITH LIVE SUPPORT 24 7 ON OUR WEBSITE LINDA /FRED ALVARE SpamAssassin Report (spam score: 25.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: besaba.com] 0.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.5 SUBJ_BUY Subject line starts with Buy or Buying 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: besaba.com] 2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.8 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.8 UPPERCASE_50_75 message body is 50-75% uppercase 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 3.6 FROM_MISSP_PHISH Malformed, claims to be from financial organization - possible phish 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Click to view scam #131827 - Sent on July 13, 2015, 5:51 pm by lindabanks@earthlink.net
> Date: Mon, 13 Jul 2015 15:44:11 +0000> Subject: Your partnership of $10.5 million dollars> From: executive.jalloh@gmail.com> To: > > Dear Friend> > Don?t be surprise that I have to write you without knowing you. I> would like to know if you would permit me to transfer the sum of $10.8> million dollars to you as my business partner. If you are interested> in my over, kindly get back to me for more information.> > Your cooperation would be highly rewarded.> > Thanks in anticipation> > Mr Alex A. Jalloh> +226_68120445.> Email: executive.jalloh@gmail.com
Click to view scam #131821 - Sent on July 13, 2015, 5:05 pm by executive.jalloh@gmail.com
Hey There, Samantha here, I stumbled upon your site when poking around the Internet. Understand you probably get hundreds of emails from every man and his dog, coming from all corners of the earth! However, I work for a fast growing online marketing agency here in Melbourne Australia, yes Australia! Not Delhi, Dubai or Pluto!   I'm reaching out to you as the agency I work for could help you guys get a lot more leads online. Whether that is through making sure you appear at the top of Google in the organic listing (not the paid section), where over80%of people click are clicking, or just by making sure your website convert lot more visitors into leads.   I am taking an educated stab in the dark here, however based on your online presence; you are likely missing out over 94% of the business that is running through Google for your industry. I hope you don't mind me emailing, I just find it a little less invasive from calling you up and interrupting what ever it is you are doing at this present moment :) If this sound like something of interest, and you are attracted to growing your business smarter, better, faster in 2015 - simply reply with your very best contact Details and I will give you a quick buzz.   Regards, Samantha Business Development Manager   Disclaimer: please reply this mail with word "REMOVE" on unsubemail55@gmail.com & we assure you that you will never get any mail from us.    
Click to view scam #131820 - Sent on July 13, 2015, 4:50 pm by unsubemail55@gmail.com
Date: Mon, 13 Jul 2015 09:12:37 +0000Subject: ATTENTIONFrom: cpiatbariloche@speedy.com.arTo: ?ATTENTION:I HAVE REGISTERED YOUR ATM CARD OF US$20 Million United State Dollars WITH COURIER COMPANY WITHREGISTRATION CODE OF (SHIPMENT CODE AWB 822XZS)PLEASE CONTACT WITH YOURDELIVERY INFORMATION SUCH AS,YOUR NAME,YOUR ADDRESS AND YOUR TELEPHONE NUMBER WORKING OFFICE DATE OF BIRTH: SHIPPING COMPANY OFFICENAME OF MR.JAFFY MARCEL,YOU WILL SEND THEM THE ALL NEEDED INFORMATION THEY NEED FOR THE DELIVERYE-MAIL:TEL:+229-68825250BEST REGARDSMrs. ROSELINE THOMAS
Click to view scam #131817 - Sent on July 13, 2015, 3:52 pm by cpiatbariloche@speedy.com.ar
Date: Mon, 13 Jul 2015 18:36:58 +0900From: manitoba02@gmail.comSubject: AttentionTo: AttentionWe have deposited the check of your fund ($2.50000000USD) through Western Union department after our finally meeting regarding your fund,All you will do is to contact Western Union director,He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as:Receiver's Name____________Address: ________________Country: _____________Phone Number: _____________Your gender & Your ID:---------Though,Larry Smith has sent $5000 in your name +229-9900-1122 or you call him as soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund.ThanksMrs. Vivian Ude.
Click to view scam #131819 - Sent on July 13, 2015, 3:50 pm by manitoba02@gmail.com
RE:
From: dr.robertp1@hotmail.comSubject: Date: Mon, 13 Jul 2015 10:21:01 +0000My name is Gatan Magsino, I work with Mediterranean Bank in Malta. Can i trust you with a business worth Eight Million Three hundred Thousand United State Dollars? Please reply ONLY if you are serious and interested
Click to view scam #131816 - Sent on July 13, 2015, 3:49 pm by dr.robertp1@hotmail.com
> From: kataoka@human-nw.com> Subject: WESTERN UNION UNDER WORLD BANK PLC> Date: Mon, 13 Jul 2015 13:36:16 +0100> > WESTERN UNION UNDER WORLD BANK PLC> > has finalize all the necessary arrangement and your fund $7.5usd has been approve by the board of directors of WORLD BANK, you will be receiving $10,000 per day. our attorney will go to the inland revenue tax office to obtain a letter of administration tax clearance approval on your behalf from high Court.> MTCN:7811644569)> SENDERS FIRST NAME: CHRISTOPHER> SECOND NAME: UDUMAGA> TEST : WHEN> ANS ?TODAY> name____> country__> Your address___> You?re Age/sex__> Your occupation> Direct phone number__> Your home phone number__> > MR BEN OKWUO> western.union577@qq.com> Tel/00229-67039241
Click to view scam #131818 - Sent on July 13, 2015, 3:47 pm by western.union577@qq.com
> From: hr@gfu.ck.ua> Subject: ATM CARD> Date: Mon, 13 Jul 2015 05:09:14 -0700> To: > > UBA BANK INTERNATIONAL> Zenith HeightsPlot 87 Ajose> Adeogun Street, Cotonou, Benin> Email: (upsservices9201@outlook.com)> > Attn:> > This is to bring to your notice that, I have paid the re-activation fee and the delivery of your ATM CARD.I paid it because the ATM Card 8119 $4.5m, has less three days to expire and when it expires, the money will go into Government purse.> > > With that I decided to help you pay the money so that, the ATM will not expire, because I know that when you get your ATM definitely you must pay me back my money and even compensate me for helping you.> > > Now I want you to contact UPS DELIVERY SERVICE with your Full Contact information's so that they can deliver your Card to your designated address without any delay, also make sure that you send your full name and your phone number. Like I stated earlier, the delivery charges has been paid but I did not pay their official keeping fees since they refused.> > > They refused and the reason is that they do not know when you are going to contact them and demurrage might have increase. They told me that their keeping fee is $87 per day and I deposited it Today being 13th of JUL. Call him as soon as you receive this mail with your full information and ask him to give you the information that you will use to send him the keeping fees ok.> > > > Below is their Contact Information's,> Contact Person: Dr. Jerry Leo,> UPS DELIVERY SERVICE> Email: (upsservices9201@outlook.com)> Tel: +229 9869 1474> > Contact then Today to avoid increase of their keeping fees and let me know> Once you receive your Card.> > Yours Faithfully> Chairman Ben Shalom Bernanke.> > ---> This email has been checked for viruses by Avast antivirus software.> https://www.avast.com/antivirus>
Click to view scam #131815 - Sent on July 13, 2015, 3:44 pm by hr@gfu.ck.ua
From: manderson@cciproducts.comSubject: Account FraudDate: Mon, 13 Jul 2015 06:28:03 -0700Hi ,Your account is being reviewed, due to recent fraud activity:View Fraud Notification
Click to view scam #131814 - Sent on July 13, 2015, 3:43 pm by manderson@cciproducts.com
Advert
MINISTERE DE LA CITOYENNETE ET DE L'IMMIGRATION DIRECTION GÉNÉRALE SNC-LAVALIN Siège social de SNC-Lavalin, Boulevard René-Lévesque, à Montréal Tour de 22 étages 390, rue Bay, bureau 1600 http://www.snc-lavalin-inc.onlc.fr E-mail: director.snclavalin@gmail.com Tel: (+1) 5673312014 **************************************************************** Accord de publication N° 0012/S-10/19758/2015 A votre Attention !!! Cadres et Jeunes diplômés Bienvenus, Dans le souci de lutter contre le voyage clandestin, la pauvreté, de promouvoir l'emploi et à l'intégration Africaine au processus de la mondialisation, le gouvernement CANADIEN en collaboration avec La Société SNC-LAVALIN lance une grande session de recrutement en cette année 2015. En effet nous recherchons avant tout des personnes capables sans distinction de sexe qui pourront s'adapter à notre environnement de travail. La Société SNC- LAVALIN fournit des services à savoir : Secrétariat et auxiliaire, Clinique et l'administration, de l'informatique appliquée à la gestion, la maintenance, la comptabilité et gestion, radiologue, infirmerie, assistance Médical, pédiatrie, Assistance Maternelle, laborantins, biologiste, épidémiologie, pharmacie, le marketing, ingénierie, gynécologue, la restauration, soutien administratif, recherche et enseignement, ressources humaines, Architecture, Finance et Comptabilité, santé, services sociaux et réadaptation, services de pastorale, soutien administratif, technologie de l'information.... etc et plein d'autres postes qui ne sont pas cités. La main d'?uvre étant rare ici au Canada nous avions ouvert notre marché vers le reste du monde afin de permettre aux jeunes diplômés d'autres pays qui sont sans emploi fixe de pouvoir toucher à la réalité. CONDITION A REMPLIR POUR TOUTE PERSONNE INTÉRESSÉE 1- Être âgé(e) entre 25 et 65 ans 2- Être titulaire au moins du BEPC BAC ou autres Diplômes Professionnels 3- Savoir parler le français ou l'anglais 4- Avoir de bonnes qualités relationnelles 5- Avoir une bonne moralité PS: Pour plus d'informations et le retrait du formulaire, veuillez nous envoyer vos coordonnées (nom; prénoms; pays; profession; âge; téléphone) à l'e-mail: director.snclavalin@gmail.com puis nous contacter sur (+1) 5673312014 pour confirmation de votre inscription et pour plus d'informations sur les conditions à remplir et les pièces à fournir pour votre dossier de candidature. Le Directeur Exécutif SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #131813 - Sent on July 13, 2015, 3:06 pm by nciraci@alice.it
RGVhciBmcmllbmRzLg0KDQpXZSBhcmUgc3BlY2lhbGl6aW5nIGluIEdhcyBnZW5lcmF0b3JzIGZy b20gQ2hpbmEsc3VjaCBhcyBOYXR1cmFsIGdhcyBnZW5lcmF0b3JzLCBCaW9nYXMgZ2VuZXJhdG9y cyAsU3RyYXcgZ2FzIGdlbmVyYXRvcnMgYW5kIHNvIG9uLg0KDQpPdmVyIDkwJSBjb21wb25lbnRz IG9mIHRoZSBwb3dlciBjb21lIGZyb20gdGhlIFN1cHBsaWVycyBvZiBDdW1taW5zIGFuZCBERVVU WiBtYWRlIGluIGNoaW5hLHNvIHdlIGNhbiBlbnN1cmUgdGhlIHF1YWxpdHksIHdoaWxlIHRoZSBx dW90YXRpb24gYXJlIHZlcnkgY29tcGV0aXRpdmUgLg0KDQpXZSBhcmUgbG9va2luZyBmb3J3YXJk IHRvIGZ1cnRoZXIgY29vcGVyYXRpb24uIA0KDQpCZXN0IHJlZ2FyZHMNCiANCkVtaWxpYQ0KDQo
Click to view scam #131812 - Sent on July 13, 2015, 1:44 pm by
  PLEASE I NEED YOUR HELPSpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (gracemanda2016[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #131811 - Sent on July 13, 2015, 1:41 pm by gracemanda2016@gmail.com
Dear Google User, You have been selected as a Google Ambassador for using Google services. Find attached letter for more details and Processing of your claims. Best Regards, Matt Brittin Chairman of the Board and Managing Director, Google United Kingdom SpamAssassin Report (spam score: 12.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 4.5 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.9 FSL_NEW_HELO_USER Spam's using Helo and User 2.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Click to view scam #131810 - Sent on July 13, 2015, 12:47 pm by francs@silvaapis.si
Kaê opãàíèçîâàòü ýêcïopò òoâàpîâ èç Óêðaèíû? Cåìèíað ? 23 èþëÿ ? 2015 ã. ã. Êèeâ ? óë Á.Õìeëüíèöêoão 55 ? Êèeâcêàÿ Òîpãîâî-ïðîìûøëåííàÿ ïàëaòà Òeë.: (044) 237-90-íóëü-ï'ÿòü, 233-÷oòèðè-øiñòü-69 O ×EÌ ÁÓÄEÌ ÃOBÎÐÈÒÜ: Ìû ðacñêàæåì o ïðoáëåìàõ, cëîæíîñòÿõ, ïpeïÿòñòâèÿõ è âîçìoæíîñòÿõ ïpè ýêñïoðòå òîâàpîâ óêðàèícêîãî ïpoèçâîäñòâà ça ãðaíèöó. Bû ïîéìåòe, êàêèe ïpoáëåìû ìoãóò âoçíèêíóòü c ïaðòíeðîì BÝÄ, êaêèå äoêóìeíòû íåoáõîäèìû ïpè ýêcïîðòå. Bû óçíàeòå, êaê ïðaâèëüíî cýêîíoìèòü ía êaæäîì ýòaïe ñäeëêè è ïoñòðîèòü oïòèìaëüíóþ cxåìó pàáîòû. Bû cìoæåòå caìîñòîÿòåëüíî cäåëàòü ïðîc÷åòû öeëåñîîáðàçíîñòè ýêñïopòà Âaøèõ òoâaðîâ ça ãðaíèöó è çàðaíåå ïåpeñòðàõîâàòüñÿ ía êaæäoì ýòàïe, ècïoëüçîâàâ âce âoçìîæíîñòè, êîòîpûå ïðeäîñòàâëÿþòñÿ ía ceãîäíÿ äëÿ óêpaèícêîãî ïpoèçâîäèòåëÿ. KÎÌÓ ÄÀCÒ ÏPÅÈÌÓÙÅÑÒÂÎ Ó×AÑÒÈÅ B ÌEPOÏÐÈßÒÈÈ Ócëóãè ïpåäíàçíà÷åíû êaê äëÿ ïpoèçâoäèòåëåé, òaê è äëÿ ïîcðåäíèêîâ, êîòopûå æeëàþò ýêcïoðòèðîâàòü òoâàpû óêðaèícêîãî ïpîèçâoäñòâà ça ãðaíèöó. Ó âac eñòü xîðîøèå èäeè o òoì, ÷òo âû ìoãëè áû ïoñòàâëÿòü ça ãðaíèöó, ío âû èx eùe íe påaëèçîâàëè? Bû còoëêíóëècü c ïpåïÿòcòâèÿìè è cîïðîòèâëåíèåì? Baì íe óäàëoñü äîâecòè íà÷aòîå äo êîíöa? Õoòèòå ñîçäaòü òaêóþ cèñòåìó, ÷òoáû ðaçíûe èíñòpóìåíòû áûëè ïîëíîcòüþ ñoãëàñîâàíû ìeæäó ñoáîé? Âaì âàæío ðàçoáðàòüñÿ â êàêoé ïîcëåäîâàòåëüíîñòè âíeäpÿòü âcå, ÷òoáû èçáåæaòü oøèáoê? ÏPOÃÐÀÌÌÀ Áëoê 1. Ïoècê ïoêóïaòåëåé (Åâðoïà, Açèÿ) êaê èùeì? êaêèe ïpîáëeìû ìoãóò âoçíèêíóòü c ïapòíeðîì BÝÄ êaê ïpîâåðèòü íaäåæíîñòü ïoêóïaòåëÿ? ñxeìà âûáoða ðûíêa cáûòa / ïîêóïàòeëåé Áëoê 2. Ïoäïèñàíèå êoíòðàêòà c ïaðòíåðîì BÝÄ ïpoâåäåíèå ïepeãîâîðîâ óñëoâèÿ ïoñòaâêè ÷òo òaêoå Èíêîòeðìñ? óñëoâèÿ oïëaòû còîèò ëè çàíèìaòücÿ äîcòaâêîé? èç êaêèõ ïóíêòoâ ñoñòîèò êîíòpaêò BÝÄ aíaëèç êoíòðàêòà BÝÄ ïo÷eìó âaæíû ðeêâèçèòû, ïoäïècè è ïe÷àòè ñòoðîí ÂÝÄ-êoíòðàêòà. Cpîê äeécòâèÿ äîãoâoðà. Áëoê 3. Kàêèe äîêóìeíòû íóæíû äëÿ ýêñïoðòà? êaê óçíaòü êaêèå èìeííî pàçðåøèòåëüíûå äoêóìeíòû íóæíû? oáÿçàòåëüíûå cîïpîâîäèòåëüíûå äîêóìeíòû äoïoëíèòåëüíûå coïpîâîäèòåëüíûå äîêóìeíòû Áëoê 4. Kaê äocòaâèòü òoâàp ïîêóïaòåëþ? ÷òo âeçåì? Kàêèe òèïû òîâaðîâ åcòü è êaê êëàñcèôèöèðîâàòü câîé? âapèàíòû äoñòàâêè ècxoäÿ èç òèïa òoâapà ôaêòîpû âëèÿþùèe ía ïîcòðîåíèå cxeìû äîñòaâêè êaê âûápaòü ïåpåâîç÷èêà / ýêcïeäèòîðà? êaê ïpoêoíòðîëèðîâàòü paáîòó ïeðeâîç÷èêà/ýêñïåäèòîðà? ía ÷òo íóæío oáðaùàòü âíèìaíèå ïpè çaêëþ÷åíèè äîãoâoðà c ïåpåâîç÷èêàìè / ýêñïeäèòîðàìè íóæío ëè Ñòðaõîâàòü âaø ãpóç? Áëoê 5. Òàìîæeííîå oôopìëåíèå ïpè ýêcïoðòå ÷òo òàêîe êëaññèôèêàöèÿ òîâaðà è ça÷eì ýòo íóæío? ÷òo òaêoå àêêpeäèòàöèÿ ó÷añòíèêa BÝÄ â òàìoæeííîé cëóæáå è êaê ýòo ïðoècõîäèò? ðaáoòà c òaìîæåííûìè ápoêeðàìè òàðèôíoå påãóëèðîâàíèå, íe òapèôíîå peãóëèpîâàíèå âaëþòíûé êoíòðîëü òàìoæåííîå oôopìëåíèå ãðóçoâ ïpè oñóùeñòâëåíèè èìïîpòíûõ îïeðàöèé. Áëoê 6. Êaê ñýêoíîìèòü ía êàæäoì ýòàïe? èícòpóìeíòû îïòèìèçaöèè ðaáîòû ía ýêcïîðò êaê ïoñòpîèòü îïòèìaëüíóþ cxeìó ðaáîòû? ÁÈÇHEÑ-ÒÐÅÍÅÐ Ëeñíÿê Ìèxaèë ? Ýêcïåðò â öeïÿõ ïocòàâîê, ìåæäóíaðîäíîé ëoãècòèêe âíeøíeýêîíîìè÷åñêîé äåÿòåëüíoñòè. Áîëee 9 ëeò çaíèìàeòñÿ íaïpàâëåíèåì ìåæäóíaðîäíîé òîpãoâëè äëÿ ïpoèçâoäñòâåííûõ êîìïaíèé è FMCG ñeêòîðà. Oïûò â ìeæäóíapîäíîé òoðãoâëå è ëoãèñòèêå ïoçâoëÿeò èñïoëüçoâàòü ìíoæecòâî èíñòpóìåíòîâ äëÿ ñíèæeíèÿ pàñõîäîâ ía äocòàâêó, óìeíüøeíèÿ òpaíçèòíoãî âðeìeíè è ïoèñêå ïaðòíeðîâ ça póáeæîì. PÅÃËÀÌÅÍÒ ÑÒOÈÌOÑÒÜ 3000.00 ãpí. ça îäíoão ó÷àcòíèêà. Äëÿ âòopoãî è òpåòüåãî ó÷àñòíèêa cêèäêè ? 5% è 7% cooòâåòñòâåííî. B còîèìîñòü âõoäèò: èíôopìàöèîííî-êîíñóëüòàöèîííîå oáñëóæèâaíèå ía cåìèíaðå, ñáoðíèê ìaòeðèàëîâ, êoôe-ápåéê, oáeä â pecòîðàíå, îácóæäåíèå äoêëàäoâ è îáìeí ìíeíèÿìè c ëeêòîpîì. ÎÒÊAÇÀÒÜÑ?Î?ÐÀÑÑÛËÊÈ Èçâèíèòe, åcëè ýòo ïècüìî ïpè÷èíèëo Âaì íåóäîácòâà. Baø aäpeñ âçÿò èç oòêpûòûx ècòî÷íèêîâ: áaç äaííûx ïpeäïðèÿòèé, ôîpóìîâ, âeá-càéòîâ è ò. ï. ×òoáû îòêaçàòüñÿ oò ðaññûëêè, oòïpàâüòå íaì, ïîæaëóécòà, ñooáùåíèå ía ýë. aäpåñ  nik.krechet@mail.ru èëè cîîáùèòå ïo òåëeôîíó. ÐEÃÈÑÒÐÀÖÈß Òeë.: (044) 237-90-íóëü-ï'ÿòü, 233-÷îòèpè-øiñòü-69 Kaæäûé ó÷àcòíèê ceìèíaðà ïîëó÷àeò áóõãaëòeðñêèé êoìïëåêò ? îðèãèíaëû äoêóìeíòoâ: äîãoâoð, aêò, opèãèíàë c÷eòà, êoïèè câèäåòeëüñòâ. ãàçåòà ïðàêòèêà ðåøåíèå èçäàíèå ïðåäëîæåíèå ïîääåðæêà æóðíàë ïîääåðæêà èñòîðèÿ ïðîâåðêè îáùåñòâî âûáîð àóäèòîðèÿ öåëåâîé êîìïàíèÿ èíñïåêöèÿ þðëèöî ïðîâåðêè êîíñóëüòàöèÿ ãîòîâíîñòü SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (katiya.pormizan[at]mail.ru) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #131809 - Sent on July 13, 2015, 12:31 pm by katiya.pormizan@mail.ru
.kzwhibdicxj{color:#4f01df;}.rwwukhuyhfkbrq{color:#911a4c;} Make Your Phone Your New Fax Machine .hffmeyww{color:#e79b46;} SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: disturbationtoohp.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: disturbationtoohp.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: disturbationtoohp.com]
? P { MARGIN: 0px } X-x: TimeOutReturn-path: <alba.olmos@educacionbc.edu.mx>Envelope-to: anntiran@polka.co.zaDelivery-date: Mon, 13 Jul 2015 08:16:37 +0200Received: from cpt-prewall-07.mweb.co.za ([196.28.150.157]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from <alba.olmos@educacionbc.edu.mx>) id 1ZEX2b-00043t-3o for anntiran@polka.co.za; Mon, 13 Jul 2015 08:16:37 +0200Received: from cpt-viruswall-02.mweb.co.za ([196.28.149.22] helo=cpt-mx-04.mweb.co.za) by cpt-prewall-07.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from <alba.olmos@educacionbc.edu.mx>) id 1ZEX2a-0007hn-PZ for anntiran@polka.co.za; Mon, 13 Jul 2015 08:16:36 +0200Received: from cpt-mx-04.mweb.co.za (cpt-mx-04.mweb.co.za [196.28.149.154]) by cpt-viruswall-02.mweb.co.za (esets_smtp); Mon, 13 Jul 2015 08:16:36 +0200Received: from securemail-pl-mx25.synaq.com ([196.35.198.137]) by cpt-mx-04.mweb.co.za with esmtp (Exim 4.84) id 1ZEX2a-000PaX-2i for <anntiran@polka.co.za>; Mon, 13 Jul 2015 08:16:36 +0200Received: from mail.educacionbc.edu.mx ([201.140.157.74] helo=correo.educacionbc.edu.mx) by securemail-pl-mx25.synaq.com with esmtp (Exim 4.63) (envelope-from <alba.olmos@educacionbc.edu.mx>) id 1ZEX1s-0006UI-RR for anntiran@polka.co.za; Mon, 13 Jul 2015 08:16:29 +0200Received: from localhost (localhost [127.0.0.1]) by correo.educacionbc.edu.mx (Postfix) with ESMTP id 4C6FCC011; Sun, 12 Jul 2015 23:52:20 -0600 (MDT)X-Virus-Scanned: amavisd-new at educacionbc.edu.mxReceived: from correo.educacionbc.edu.mx ([127.0.0.1]) by localhost (correo.educacionbc.edu.mx [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id sJM5Lhmtr0b3; Sun, 12 Jul 2015 23:52:15 -0600 (MDT)Received: from correo.educacionbc.edu.mx (correo.educacionbc.edu.mx [172.31.54.17]) by correo.educacionbc.edu.mx (Postfix) with ESMTP id D7F21C003; Sun, 12 Jul 2015 23:52:07 -0600 (MDT)Date: Sun, 12 Jul 2015 23:52:07 -0600 (MDT)From: Alba Rosa Olmos Guzman <alba.olmos@educacionbc.edu.mx>Message-ID: <2034887092.205987.1436766727727.JavaMail.root@educacionbc.edu.mx>In-Reply-To: <341048906.205912.1436766508944.JavaMail.root@educacionbc.edu.mx>Subject: Ref: UK/JA2C110P5MIME-Version: 1.0Content-Type: multipart/mixed;  boundary="----=_Part_205983_395716422.1436766727685"X-Originating-IP: [197.228.84.231]X-Mailer: Zimbra 7.2.4_GA_2900 (ZimbraWebClient - FF3.0 (Win)/7.2.4_GA_2900)To: undisclosed-recipients:;X-SYNAQ-Pinpoint-Information: Please contact MWEB for more informationX-SYNAQ-Pinpoint-ID: 1ZEX1s-0006UI-RRX-SYNAQ-Pinpoint: Found to be cleanX-SYNAQ-Pinpoint-SpamCheck: not spam (too large)X-Pinpoint-From: alba.olmos@educacionbc.edu.mxX-Spam-Flag: NOX-Antivirus: avast! (VPS 150713-0, 2015/07/13), Inbound messageX-Antivirus-Status: Clean     ----- Original Message ----- From: Alba Rosa Olmos Guzman To: undisclosed-recipients Sent: Monday, July 13, 2015 7:52 AM Subject: Ref: UK/JA2C110P5 You have won the UK Lottery International promotion for 2015. Please open the attached document for details of winning and payment procedure.Mrs.Alba Rosa Guzman.( Online coordinator.)The UK Lottery International Promotion Inc. This email has been checked for viruses by Avast antivirus software. www.avast.com
Click to view scam #131807 - Sent on July 13, 2015, 12:06 pm by alba.olmos@educacionbc.edu.mx
Fw:
Return-path: Envelope-to: anntiran@polka.co.za Delivery-date: Mon, 13 Jul 2015 07:14:38 +0200 Received: from cpt-prewall-06.mweb.co.za ([196.28.150.156]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from ) id 1ZEW4c-0004HI-8g for anntiran@polka.co.za; Mon, 13 Jul 2015 07:14:38 +0200 Received: from cpt-viruswall-08.mweb.co.za ([196.28.149.28] helo=cpt-mx-14.mweb.co.za) by cpt-prewall-06.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from ) id 1ZEW4c-000FcL-6w for anntiran@polka.co.za; Mon, 13 Jul 2015 07:14:38 +0200 Received: from cpt-mx-14.mweb.co.za (cpt-mx-14.mweb.co.za [196.28.149.164]) by cpt-viruswall-08.mweb.co.za (esets_smtp); Mon, 13 Jul 2015 07:14:38 +0200 Received: from securemail-pl-mx3.synaq.com ([196.35.198.143]) by cpt-mx-14.mweb.co.za with esmtp (Exim 4.84) id 1ZEW4b-000ACe-VS for ; Mon, 13 Jul 2015 07:14:38 +0200 Received: from mail-ig0-f179.google.com ([209.85.213.179]) by securemail-pl-mx3.synaq.com with esmtps (TLSv1:RC4-SHA:128) (Exim 4.63) (envelope-from ) id 1ZEW4C-0003ws-Ff for anntiran@polka.co.za; Mon, 13 Jul 2015 07:14:12 +0200 Received: by iggf3 with SMTP id f3so12818666igg.1 for ; Sun, 12 Jul 2015 22:14:09 -0700 (PDT) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d100.net; s 130820; h=x-gm-message-state:mime-version:reply-to:date:message-id:subject :from:to:content-type; bhæ9raoDTFQ7M/BKf/vytmnY4zJ/zbIaA59MspEtjEk8=; b=UnbScRxddNz92iVE70a7bngnvkldaws9yxyZMx9T2mZtIKUJbWSwEO9dkgCNHR6zEz JJFWWiPV8DB3V/4t8GPY3i+2bDNhbPWHp+WuN4NRXZjalseUA4rTQIsUVI2AERcAlnVl JjRhTBA/kCppsFsgWzkwZ6gA1ZpIDTEAJS5FGUMCTDFqZUvuGmZ+ju4a9iOoqBiyo1Rw jibQ+EVvUZODLOu5B0N5jsMRprMRElDRlhFt5XAzbsESODuU9FHb91ZqsiVveJ8fsklB inJy6sJz75I0UhrsV+nFICLxZtmI0HcPs3bFcP7RWBn9sydZggqcx5QY/ldwDWT7OdRa qlGQ=X-Gm-Message-State: ALoCoQkR3LdgFt/71wVtPA4wywgbm4Juq/CueicAoZgxll5HSmfoLZAYYVUmfz3d5+UkT8jBSaZ3 MIME-Version: 1.0 X-Received: by 10.50.59.148 with SMTP id z20mr10724633igq.77.1436764449134; Sun, 12 Jul 2015 22:14:09 -0700 (PDT) Received: by 10.64.3.3 with HTTP; Sun, 12 Jul 2015 22:14:08 -0700 (PDT) Reply-To: nigel.kleeman@gmail.com Date: Mon, 13 Jul 2015 07:14:09 +0200 Message-ID: From: "Sethi, Durgesh" To: undisclosed-recipients:; Content-Type: text/plain; charset=ISO-8859-1 Bcc: anntiran@polka.co.za X-SYNAQ-Pinpoint-Information: Please contact MWEB for more information X-SYNAQ-Pinpoint-ID: 1ZEW4C-0003ws-Ff X-SYNAQ-Pinpoint: Found to be clean X-SYNAQ-Pinpoint-SpamCheck: not spam, SpamAssassin (not cached, score=2.009, required 5, DCC_CHECK 1.10, DCC_REPUT_13_19 -0.10, FREEMAIL_REPLYTO 1.00, RCVD_IN_HOSTKARMA_YE 0.01, SPF_PASS -0.00) X-SYNAQ-Pinpoint-SpamScore: ss X-Pinpoint-From: ds63@njit.edu Subject: X-Spam-Flag: NO X-Antivirus: avast! (VPS 150713-0, 2015/07/13), Inbound message X-Antivirus-Status: Clean ----- Original Message ----- From: "Sethi, Durgesh" To: "undisclosed-recipients:" Sent: Monday, July 13, 2015 7:14 AM > -- > Rob George offers loans of up to R2Million. For an application, kindly > email > on georgelendingsolution@gmail.com for an application. For a quick > response, feedback, for more information interest rate is 3.2%. Loans > are also available for blacklisted > clients. > > Regards > Rob George --- This email has been checked for viruses by Avast antivirus software. http://www.avast.com
Click to view scam #131806 - Sent on July 13, 2015, 12:04 pm by ds63@njit.edu
Do you need a Loan? Do you need Financial assistance of any kind? If YES, kindly reply to this email: (frankcartercashflowinvestment@yahoo.com) immediately for a Certified Loan @ an interest rate of 3%.  For more info,reply with your Name: Amount Needed: Duration: NB: Send all replies to (frankcartercashflowinvestment@yahoo.com) SpamAssassin Report (spam score: 4.6) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Click to view scam #131805 - Sent on July 13, 2015, 11:48 am by salvator@un.org
Spam detection software, running on the system "panoramix.funcecp.br", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see postmaster for details. Content preview: QATAR FOUNDATION Al Wajba Area,P.O.Box 50025 Doha,Qatar. Attn: Recipient (PIN: QF14-016-2971) Qatar Foundation is a government-funded organization founded in 1995 by decree of Sheikh Hamad bin Khalifa Al Thani (Emir of Qatar). You have been SELECTED and APPROVED to RECEIVE the sum of ONE MILLION GBP as charity/aid from this FOUNDATION FREE OF CHARGE, and you are therefore advised to EMAIL your Pin, Full Names, Sex, Age, Occupation, Contact Address and Mobile/Tel No. to *qrtinfoyou@gmail.com* for verification and documentation to aid the FREE RELEASE of your funds to you. On behalf of the Foundation board; Congratulations!! AUTHORIZED BY: Dr Mohammad Asim Juthamah President Qatar Foundation QATAR FOUNDATION Al Wajba Area,P.O.Box 50025 Doha,Qatar. Attn: Recipient (PIN: QF14-016-2971) Qatar Foundation is a government-funded organization founded in 1995 by decree of Sheikh Hamad bin Khalifa Al Thani (Emir of Qatar). You have been SELECTED and APPROVED to RECEIVE the sum of ONE MILLION GBP as charity/aid from this FOUNDATION FREE OF CHARGE, and you are therefore advised to EMAIL your Pin, Full Names, Sex, Age, Occupation, Contact Address and Mobile/Tel No. to *qrtinfoyou@gmail.com* for verification and documentation to aid the FREE RELEASE of your funds to you. On behalf of the Foundation board; Congratulations!! AUTHORIZED BY: Dr Mohammad Asim Juthamah President Qatar Foundation [...] Content analysis details: (8.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 0.9986] 0.0 MISSING_MID Missing Message-Id: header 1.5 FH_RELAY_NODNS We could not determine your Reverse DNS 1.1 HELO_EQ_IP_ADDR HELO using IP Address (not private) 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS 1.0 TVD_PH_SUBJ_META TVD_PH_SUBJ_META 1.1 FM_MULTI_ODD2 FM_MULTI_ODD2 The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor. SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #131802 - Sent on July 13, 2015, 11:13 am by laracastro@unicerp.edu.br
  open the attachment file from Mr Samuel JudeSpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [105.112.8.147 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131796 - Sent on July 13, 2015, 10:17 am by deerymaswe@cantv.net
-----Original Message----- From: Navy Federal Credit Union <Voucher.RSA891@navyfederal.com> Sent: Sun, Jul 12, 2015 10:57 pm Subject: New Message From NFCU ( Move To Inbox ) Dear Customer, We're writing to let you know that your online account has been temporarily suspended due to recent access to your account from an unknown IP address. To re-activate your account, download "Navy_Federal_Update_Form" attached to this message and complete the process. Thank you for helping us serve you . Yours sincerely, ? 2015 Navy Federal Credit Union, All Rights Reserved.
Click to view scam #131794 - Sent on July 13, 2015, 10:03 am by Voucher.RSA891@navyfederal.com
Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Receive up to 2500USD* If you are experiencing difficulty viewing this important message, visit here. Blue Global, LLC. 7302 East Helm Drive, Suite 2005 Scottsdale, AZ 85260 This message was delivered to you because of your profile settings at TargetGuru If you wish to change your contact preferences please modify your account profile Targetguru 3950 North Flagler Drive West Palm Beach FL 33407 SpamAssassin Report (spam score: 2.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: breakingworldnewsnow.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image
Click to view scam #131793 - Sent on July 13, 2015, 9:49 am by tigroid@breakingworldnewsnow.com
Date: Sun, 12 Jul 2015 23:57:38 -0700From: mailout-com@thebigchoice.comTo: nedhulse49@hotmail.comSubject: [Team Apple] : You must update your information     Dear Customer (e) We inform you that your account is about to expire in less than 48 hours, it is imperative to conduct a verification of your information now, otherwise your account will be destroyed. Simply click thé link below and login using your Apple ID and password. https://store.apple.com/com/sign_in?c=aHR0cDovL3N0b3JlLmFwcGxlLmNvb Copyright © 2015 Apple Inc. All rights reserved.
Click to view scam #131792 - Sent on July 13, 2015, 8:35 am by mailout-com@thebigchoice.com
Begin forwarded message:From: Apple <service@support.com>Date: 13 July 2015 05:55:10 BSTSubject: You Must Confirm Your Informations! Apple Store ® . This is an automated email, please do not reply Dear Client,We've noticed that some of your account information appears to be missing or incorrect We need to verify your account information in order to continue using your Apple ID, Please Verify your account information by clicking on the link below Verify your lD
Click to view scam #131790 - Sent on July 13, 2015, 7:30 am by service@support.com