Logo



Begin forwarded message:From: GOVERNMENT COMPENSATION <honjosephamadi@hotmail.com>Date: 3 May 2015 21:58:48 BSTTo: "kinglling15@gmail.com" <kinglling15@gmail.com>, "greg@masleyassociates.com" <greg@masleyassociates.com>, "uwe@luxuryofred.com" <uwe@luxuryofred.com>, "p.raimo@tiscali.it" <p.raimo@tiscali.it>, "jdapdx@mac.com" <jdapdx@mac.com>, "kim.willenbring@gmail.com" <kim.willenbring@gmail.com>, "jayrajjoshi@live.com" <jayrajjoshi@live.com>, "ishan.ddd@gmail.com" <ishan.ddd@gmail.com>, "viglen@gmail.com" <viglen@gmail.com>, "suephillips1010@aol.com" <suephillips1010@aol.com>, "." <shannonjaugare@aol.com>, "anders.blewett@gmail.com" <anders.blewett@gmail.com>, "facey_tom@hotmail.com" <facey_tom@hotmail.com>, "senatorhamlett@gmail.com" <senatorhamlett@gmail.com>, "domenicanieddu1@gmail.com" <domenicanieddu1@gmail.com>, "domenikantolik@sigaint.org" <domenikantolik@sigaint.org>, "accuratetranzlt@aol.com" <accuratetranzlt@aol.com>, "achi.myllys@gmail.com" <achi.myllys@gmail.com>, "ad.armistead@outlook.com" <ad.armistead@outlook.com>, "adam-saari12@hotmail.com" <adam-saari12@hotmail.com>, "anthonyfrench43@gmail.com" <anthonyfrench43@gmail.com>, "anthonywilliams@ymail.com" <anthonywilliams@ymail.com>, "k.abbeyjohn20001@gmail.com" <k.abbeyjohn20001@gmail.com>, "k.brethorst@biglake.k12.mn.us" <k.brethorst@biglake.k12.mn.us>, "k.princessanna@yahoo.com.tw" <k.princessanna@yahoo.com.tw>, "k.rachid@qip.ru" <k.rachid@qip.ru>, "k.rafael4@msn.com" <k.rafael4@msn.com>, "kenneth_gram@ymail.com" <kenneth_gram@ymail.com>, "kim.ma283@gmail.com" <kim.ma283@gmail.com>, "kim.ma7895@gmail.com" <kim.ma7895@gmail.com>, "joyballinger@ymail.com" <joyballinger@ymail.com>, "daniellaeatonrealtor@gmail.com" <daniellaeatonrealtor@gmail.com>, "realtoremilycaudill@outlook.com" <realtoremilycaudill@outlook.com>, "WallaceAppraisal@msn.com" <wallaceappraisal@msn.com>, "pastorchaoldkoffielom@gmail.com" <pastorchaoldkoffielom@gmail.com>, "." <snezhbosh@gmail.com>, "alisonbarclaysfincontroller@outlook.com" <alisonbarclaysfincontroller@outlook.com>, "heart_loanfunds@ymail.com" <heart_loanfunds@ymail.com>, "kim.worldwide20911@aol.com" <kim.worldwide20911@aol.com>, "a.lexandra87657@gmail.com" <a.lexandra87657@gmail.com>, "aklima0015@gmail.com" <aklima0015@gmail.com>, "alicehoggofficial@hotmail.com" <alicehoggofficial@hotmail.com>, "angeloners@aol.com" <angeloners@aol.com>, "astalnaker@ymail.com" <astalnaker@ymail.com>, "david@kim.nazuka.net" <david@kim.nazuka.net>, "isiahkimb@gmail.com" <isiahkimb@gmail.com>, "wuwunion2@outlook.com" <wuwunion2@outlook.com>, "nedhulse49@hotmail.com" <nedhulse49@hotmail.com>, "jms.chambers@ymail.com" <jms.chambers@ymail.com>, "info.greenstar@mail.bg" <info.greenstar@mail.bg>, "kim.xiu2@aol.fr" <kim.xiu2@aol.fr>, "abukhano4@aol.fr" <abukhano4@aol.fr>, "te989000000095@gmail.com" <te989000000095@gmail.com>, "." <a_zeti@aol.com>, "." <mikedunnfins@gmail.com>, "." <tony_bruceint@hotmail.com>, "." <tulayersoy@hotmail.com>, "." <cturkkusu@hotmail.com>, "lovie321@ymail.com" <lovie321@ymail.com>, "bourelc@gmail.com" <bourelc@gmail.com>, "Wpike@amphi.com" <wpike@amphi.com>, "cillaglasson@yahoo.com" <cillaglasson@yahoo.com>, "rushtyler@hotmail.com" <rushtyler@hotmail.com>, "bickett@owensboro.kyschools.us" <bickett@owensboro.kyschools.us>, "kathybiernat@gmail.com" <kathybiernat@gmail.com>, "storifydaniellasteve@aol.com" <storifydaniellasteve@aol.com>Subject: GOOD NEWS!!! CONGRAT!!! Federal Republic of NigeriaDebts Reconciliation CommitteeFederal Capital Territory,Wuse 2 Abuja-Nigeria.Dear BeneficiaryWe wish to officially confirm from you if you authorized oneMr.Richard Schulz  ppeal gate . of  No: 1301 ST.Anthony Lane PetalumaCA, USA as your NEXT OF KIN with your representative in nigeria Mrmicheal william to claim your compensation approved payment of ThreeMillion And Five Hundred Thousand United States Dollars($1.5M USD).Mr.Richard Schulz Applea gate forwarded to us the above informationclaiming that you instructed him to claim your $3.5M USD on yourbehalf, this is the reason why we are trying to avoid any mistake inorder not to put us into trouble .We will apprrciate if you can come or send someone to our office forhim to testify if micheal william is really your representative herein Nigeria.As a matter of urgency, you are required to re-confirm to us theinformation stated with the email below:Your.First Name???Your.Middle Name??-Your.Surname????Your.Address1???-Your.Address2???-Your.City?????Your.State/Province?-Your.Post/Zip???-Your.Country????Your.Telephone No??Your.Fax No????Your.Phone????-Your.E-mail Address?-Your.Company Name??Once we receive from you the reconfirmation of the above listedinformation, Your payment will be processed and the payment details /MODES will be send to you without delay for you to choose your own wayor mode of receiving your payment.You are to reply this letter before 24hour or this FUND PAYMENT willbe send to Mr.Richard Schulz  Appeal gate your Next of Kin as hestated because silent we called acceptance.Thanks for your Understanding,Yours FaithfullyHon. Joseph AmadiDirector, Bond Auctioning System
Click to view scam #121855 - Sent on May 3, 2015, 10:14 pm by honjosephamadi@hotmail.com
Begin forwarded message:From: Joseph Vanderwerken <email@jv-automatedleadgenerator.co>Date: 3 May 2015 18:30Reply-To: <dutchjv@juno.com> Freebie Money Printer .com       For more info, call 757-477-4721 or  dutchjv@juno.com    http://freebiemoneyprinter.com/cp5.php?user=dutchjv     First Name: Last Name: Email:                   We respect your email privacy powered by AWeber Email Marketing Services       freebiemoneyprinter.com - Work part-time from Home on the internet for full-time income, entirely Free of charge. unsubscribe
Click to view scam #121858 - Sent on May 3, 2015, 10:13 pm by dutchjv@juno.com
From: honjosephamadi@hotmail.comSubject: GOOD NEWS!!! CONGRAT!!!Date: Sun, 3 May 2015 20:58:48 +0000Federal Republic of NigeriaDebts Reconciliation CommitteeFederal Capital Territory,Wuse 2 Abuja-Nigeria.Dear BeneficiaryWe wish to officially confirm from you if you authorized oneMr.Richard Schulz  ppeal gate . of  No: 1301 ST.Anthony Lane PetalumaCA, USA as your NEXT OF KIN with your representative in nigeria Mrmicheal william to claim your compensation approved payment of ThreeMillion And Five Hundred Thousand United States Dollars($1.5M USD).Mr.Richard Schulz Applea gate forwarded to us the above informationclaiming that you instructed him to claim your $3.5M USD on yourbehalf, this is the reason why we are trying to avoid any mistake inorder not to put us into trouble .We will apprrciate if you can come or send someone to our office forhim to testify if micheal william is really your representative herein Nigeria.As a matter of urgency, you are required to re-confirm to us theinformation stated with the email below:Your.First Name???Your.Middle Name??-Your.Surname????Your.Address1???-Your.Address2???-Your.City?????Your.State/Province?-Your.Post/Zip???-Your.Country????Your.Telephone No??Your.Fax No????Your.Phone????-Your.E-mail Address?-Your.Company Name??Once we receive from you the reconfirmation of the above listedinformation, Your payment will be processed and the payment details /MODES will be send to you without delay for you to choose your own wayor mode of receiving your payment.You are to reply this letter before 24hour or this FUND PAYMENT willbe send to Mr.Richard Schulz  Appeal gate your Next of Kin as hestated because silent we called acceptance.Thanks for your Understanding,Yours FaithfullyHon. Joseph AmadiDirector, Bond Auctioning System
Click to view scam #121854 - Sent on May 3, 2015, 10:08 pm by honjosephamadi@hotmail.com
    From: "Total Petroleum" Sent: Friday, May 01, 2015 8:49 AM Subject: [Bulk] GOOD DAY MY BELOVED FRIEND.   YOUR ATM CARD NUMBER: 4278763100030014   I HAVE REGISTERED THE ATM CARD WITH DHL COMPANY THIS MORNING AS WE AGREED AND THE DELIVERY WILL TAKE OFF TOMORROW MORNING BASED ON MY AGREEMENT WITH THE DHL DIRECTOR REV. ONWUEGBU JIAJI, MOST IMPORTANTLY RECONFIRM YOUR CURRENT DELIVERY ADDRESS TO HIM THEN CONTACT HIM VIA HIS PRIVATE EMAIL:(onwuegbu.jiaji@deliveryman.com) I WILL NOT BE REACHED TILL JUNE 3OTH 2015, I AM ON MATERNITY LEAVE. THE AMOUNT IN YOUR ATM CARD IS 1.2 MILLION USD, AND THE PIN-CODE OF YOUR ATM CARD IS (0609)   THANKS   MRS.ELIZABETH EDRIS.
    From: Williams Martins Sent: Thursday, April 30, 2015 8:43 AM To: Pearl Subject: YOUR ORDER   We are send you the information of your need, to enable the officers approval donation with immediately effect. We also hereby state that we will handle with respect and confidentiality your entire information at our disposal. With the requested data we can commence the facilitation of your funds transfer to you. Congratulations once again and Best regards !!! Rev, Allen Williams ( Transfer Manager ) From: illbcngu@att.netTo: grant_donation97@outlook.comSubject: Re: [Bulk] Date: Sun, 26 Apr 2015 19:59:54 -0500 Rev.Williams I am contacting you in regards to monies deposited for me, Please Advise   Pearl Turner         From: Williams Martins Sent: Sunday, April 26, 2015 4:29 PM Subject: [Bulk]   THIS IS TO NOTIFY YOU THAT $300,000.00 WAS DEPOSITED FOR YOU IN THE EU/UN 2015 GLOBAL GRAND DONATIONS CONTACT FOR DETAILS ABOUT FUND EMAIL:(grant_donation79@outlook.com)   REGARDS REV.ALLEN WILLIAMS
> From: info@fbi.gov> Subject: CONGRATULATIONS FROM FACEBOOK TEAM> Date: Sun, 3 May 2015 14:06:17 +0530> > FROM: THE DESK OF THE PRESIDENT.> INTERNATIONAL PROMOTIONS/PRIZE AWARD.> BATCH NUMBER: FB-0281/544> SERIAL NUMBER: 99352748-2015> TICKET NUMBER: FB-172-60> CATEGORY: 2ND> > The Entire Facebook team are very happy to inform you that your name appear on the FACEBOOK ONLINE INTERNATIONAL LOTTERY and we are giving out the total sum of US$950,000.00 (Nine HUNDRED AND FIFTY THOUSAND UNITED STATE DOLLARS) which is what you have just won.> > Your name was selected in a raffle that was made for the FACEBOOK ONLINE INTERNATIONAL LOTTERY for the year 2015 with the lucky number (FB-225-7736) so we need your fast response so that we can proceed with the claim process of your winnings.> > Your name was selected by Mr Mark Zuckerberg the CEO of Facebook (Founder & amp Chief Executive Officer ). The promotion was made to make all Facebook users to benefit from the profit the company made while they use Facebook.> > Facebook is the first and ever largest means of meeting both old and new friends.> > The promo was done to serve as a means of appreciation to visitors on our site and also to help people to fight off poverty and to maintain a good standard of living.> > Kindly contact Mr. Thomas Charlse the General secretary of the FACEBOOK TEAM and appointed as your claims officer via this email (facebookclaimsdept25@hotmail.com) immediately with the following information about you below:> > Full Name:> Residential Address:> Private Mobile Number:> Age:> Occupation:> Marital Status:> Sex:> City:> State:> Country:> Zip/Postal Code:> > As soon as he gets your email with all the information stated above he will tell you on what next to do as regards the claiming and receiving of your winnings of US$950,000.00.> > Thank you and More Congratulations.> > Agent Name: Thomas Charlse for CDAA> > Get some Zero paid Gear FBI SCAM PROTECTED> > Note: For security reasons and due to the mix-up of some numbers and names, we ask that you keep this notification strictly from public notice until your claim has been processed and your money remitted. This is part of our security protocol to avoid double claiming or unscrupulous acts by non-participants of this program. BE WARNED"
Click to view scam #121851 - Sent on May 3, 2015, 9:31 pm by info@fbi.gov
> Date: Sun, 3 May 2015 07:53:55 -0300> From: josewillis56@gmail.com> Subject: $2.500,000.00> To: > > --> Hello ,> > Greetings to you as I pray my message arrives to you in good health? This is> to inform you that we receive an urgent message from our head office in> United States of America regarding your payment which has been approve by> the Government to pay out to you through Western Union Money Transfer.> > Mr. Guy A. Batista,Executive Vice President and President of Western Union> Financial Services, Inc contacted this office this afternoon and inform us> that your payment will not be paid to you through Western Union Money> Transfer because of the World Economic Crisis (WEC) and the International> Monetary Fund (IMF) has also informed Western Union Money Transfer in United> States of America that such fund $2.500,000.00 should not paid out through> Western Union Money Transfer because it's against the world/International> Monetary Fund (IMF) Rules and regulations, we have been advice by Mr. Guy A.> Batista,Executive Vice President and President of Western Union Financial> Services, Inc this afternoon that such funds should be paid through bank to> bank wire transfer and not through Western Union Money Transfer.> > And in view of this new development we proceeded to the Oceanic Bank plc> Nigeria to deposit the fund ,so that the fund will be directly transfer to> you via Online Banking account and you will be transferring the funds into> your destination bank account with out any further delay,> > The bank needed you to write an application to them demanding them to> transfer the funds into your Online Banking account,> Now be advise to contact the bank now and tell them to transfer the sum of> $2.500,000.00 to your Online Banking account in the United States and the> payment director will proceed immediately and transferring the fund into> your account,> > Use the below information in contacting the bank and demand them to transfer> the fund to your account immediately:> > Oceanic Bank plc> Dr John (Payment Director)> Phone; +234-90-31-84-75-75.> Emails :( oceanicbank_nigeria@yahoo.com )> > Please get in-touch with the bank immediately and get back to me as soon as> you contact them.> Thanks and remain bless> > Goodluck Uba> > > > ________________________________________________> Este e-mail foi enviado por: Proserv NET - WebMail 2.7.2>
Click to view scam #121850 - Sent on May 3, 2015, 9:05 pm by josewillis56@gmail.com
Date: Sun, 3 May 2015 12:00:34 +0000Subject: How are you today?From: chrisgoodluck22@gmail.comTo: Good day Friend,How are you today? I hope you are doing great and I also pray that this email message meets you well. I am Mr.chris goodluck and a well placed personnel in a reputable Bank here in Burkina Faso (West Africa) and during the 27 years old leadership of the defunt president of our Country ( Blaise compaore), I have overseen Billions of Dollars transferred under my office to different countries of the World for undisclosed reasons but we are powerless to ask certain questions.The new Government is on a random seizure and closure of accounts connected to the defunt Goverment and I happen to be aware of the sum of $10.5 Million dollars in a classified account in my department and I want to transfer this money into your account if you are ready to cooperate with me with further details to be given to you upon the receipt of your response.Please send your full name and your directly phone numbers, and address, Please You have tocontact me through my private e-mail at (dr.chrisgoodluck@hotmail.ru)Your prompt reply will be highly appreciated.Fill below info for the renewing of your file.(1) FULL NAME .................(2) ADDRESS ....................(3) COUNTRY ...................(4) PRIVATE TEL ................(5) PRIVATE FAX ...............(6) YOUR FILE NO.............(7) YOUR MARITAL STATUS/AGE..........(8) YOUR OCCUPATION................(9) YOUR PASSPORT/DRIVING LICENSE......... (10) YOUR OCCUPATION.............Thanks and remain blessed.Contact: E-Mail :(dr.chrisgoodluck@hotmail.ru)Mr.chris goodluck
Click to view scam #121849 - Sent on May 3, 2015, 9:04 pm by chrisgoodluck22@gmail.com
> Date: Sun, 3 May 2015 13:43:09 -0400> From: mrs-sarah147@outlook.com> To: info@charity.gov> Subject: Re: I Have a Charity Project Transaction# for you- Reply If Interested>
Click to view scam #121845 - Sent on May 3, 2015, 8:51 pm by mrs-sarah147@outlook.com
Sir/MadamYour good name and reputations have been recommended to us as an authorized manufacturers/exporters, We  Amit Import Corporation/Export/Purchaser Co, Ltd, in Saudi Arabia. We are very interested in importing products from your company into the 15 regions under the auspices of our potential end-buyer. We would therefore love you to send to us your complete product catalog and price list to enable us discuss good and lucrative business with our potential and anxious end-buyers. We are hoping that you will treat this issue as real urgent because we need this information to commence business.Looking forward to hearing from you at your earliest convenience.Best RegardsM/s Amit CorporationPurchasing/Export/Import Manager P.O. Box: 51357,Jeddah 21543,Kingdom of Saudi Arabia SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (amitimportcorporation[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Attn: Sir/Madam I am Honourable Barrister Paul Williams the personal resident Attorney here in Burkina Faso to Late Mr. Muammar Muhammad Abu Minyar al-Gaddafi of Libya c. 1942 ? 20 October 2011. Late Mr. Muammar Muhammad Abu Minyar al-Gaddafi c. 1942 ? 20 October 2011, commonly known as Colonel Gaddafi, was a Libyan former head of state, revolutionary and a politician, who died on 20 October 2011, was my client here in Burkina Faso Africa. My client Late Mr. Muammar Muhammad Abu Minyar al-Gaddafi c. 1942 ? 20 October 2011, was having a deposit sum of {thirty million four Hundred thousand united state dollars} only ($30.4M USD) with a security finance firm affiliated with African development bank here in Burkina Faso. With the above explanation?s I want to move this money from Burkina Faso to your country, affidavit on your name, but note that this is a deal between me and you and should not be related to anybody until the deal is over for security reasons, please if interested reply as soon as possible. Thanks, Honourable Barrister Paul Williams. SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (barristerpaulwilliams62[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.52 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MONEY_BARRISTER Lots of money from a UK lawyer 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
FROM: US AMBASSADOR TO Benin republicSenders Ambassador Michael Raynor,U.S. Embassy Benin rep Town HallCotonou, Benin RepublicGood day Dear I want to inform you that I shall be coming to your country for an official meeting and i willbe bringing your funds of $1.2 million united state dollars along withme as part of compensation from the president of Benin republic for thoseaffected in scams activities in Benin republic but this time i will not gothrough customs because as an ambassador to Benin republic, I am a usgovernment agent and i have the veto power to go through customs. Assoon as i am through with the meeting i shall then proceed to youraddress. (Send your cell phone number and the address where you wantme to bring the package).You have really paid so much in this delivery that makes me wonder.You are a very lucky this time because i shall be bringing your fund myself andthere is nothing anyone can do about it.Your package $1.2 million united state dollars must be registered asan ambassadorial package for me to defeat all odds and the cost ofregistering it is $120 usd the fee must be paid by you via Money Gram and attach to me the payent slip so that allnecessary arrangement can be made before time will be against us. i suppose to pay the fee on your behalf but due to thesituation of your fund it's noted that you must be the sender of the fee.This development is coming now that the ministry wants to offset allyour outstanding payments to all our legal foreign beneficiariesaround the world in which your payment file was affected. As you mayknow(1). MONEY GRAM MONEY or WESTERN UNION TRANSFER TO:Recipient: Sylvester okekeCountry: Benin republicCity: Porto-NovoCountry code: 00229Text Question: okText Answer: okAmount: US$120.00As soon as you send the fee make sure you send me the paymentinformation. to this email address: ( ambmichaelraynor@mail2american.com ) or text it to my cell +229 6860 2702 or 00229 6860 2702My flight is Tuesday next week and i expect you to comply before thenso that the delivery can be completed. If you do not comply, then itwill not be my fault if you do not receive your package.Ambassador Michael Raynor,U.s. Ambassador to Benin republic SpamAssassin Report (spam score: 13.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.84.243.252 listed in list.dnswl.org] 2.5 MILLION_USD BODY: Talks about millions of dollars 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
Click to view scam #121841 - Sent on May 3, 2015, 7:47 pm by SJREPUESTOS@SPEEDY.COM.AR
? alert("You have been signed out of your account because the attachment is not compatible with your version of google mail. Click ok to sign in again and continue.Contact customer care if problem persists \" ") Gmail html, body { font-family: Arial, sans-serif; background: #fff; margin: 0; padding: 0; border: 0; position: absolute; height: 100%; min-width: 100%; font-size: 13px; color: #404040; direction: ltr; -webkit-text-size-adjust: none; } a, a:hover, a:visited { color: #427fed; cursor: pointer; text-decoration: none; } a:hover { text-decoration: underline; } h1 { font-size: 20px; color: #262626; margin: 0 0 15px; font-weight: normal; } h2 { font-size: 14px; color: #262626; margin: 0 0 15px; font-weight: bold; } input[type=email], input[type=number], input[type=password], input[type=tel], input[type=text], input[type=url] { -moz-appearance: none; -webkit-appearance: none; appearance: none; display: inline-block; height: 36px; padding: 0 8px; margin: 0; background: #fff; border: 1px solid #d9d9d9; border-top: 1px solid #c0c0c0; -moz-box-sizing: border-box; -webkit-box-sizing: border-box; box-sizing: border-box; -moz-border-radius: 1px; -webkit-border-radius: 1px; border-radius: 1px; font-size: 15px; color: #404040; } input[type=email]:hover, input[type=number]:hover, input[type=password]:hover, input[type=tel]:hover, input[type=text]:hover, input[type=url]:hover { border: 1px solid #b9b9b9; border-top: 1px solid #a0a0a0; -moz-box-shadow: inset 0 1px 2px rgba(0,0,0,0.1); -webkit-box-shadow: inset 0 1px 2px rgba(0,0,0,0.1); box-shadow: inset 0 1px 2px rgba(0,0,0,0.1); } input[type=email]:focus, input[type=number]:focus, input[type=password]:focus, input[type=tel]:focus, input[type=text]:focus, input[type=url]:focus { outline: none; border: 1px solid #4d90fe; -moz-box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); -webkit-box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); } input[type=checkbox], input[type=radio] { -webkit-appearance: none; display: inline-block; width: 13px; height: 13px; margin: 0; cursor: pointer; vertical-align: bottom; background: #fff; border: 1px solid #c6c6c6; -moz-border-radius: 1px; -webkit-border-radius: 1px; border-radius: 1px; -moz-box-sizing: border-box; -webkit-box-sizing: border-box; box-sizing: border-box; position: relative; } input[type=checkbox]:active, input[type=radio]:active { background: #ebebeb; } input[type=checkbox]:hover { border-color: #c6c6c6; -moz-box-shadow: inset 0 1px 2px rgba(0,0,0,0.1); -webkit-box-shadow: inset 0 1px 2px rgba(0,0,0,0.1); box-shadow: inset 0 1px 2px rgba(0,0,0,0.1); } input[type=radio] { -moz-border-radius: 1em; -webkit-border-radius: 1em; border-radius: 1em; width: 15px; height: 15px; } input[type=checkbox]:checked, input[type=radio]:checked { background: #fff; } input[type=radio]:checked::after { content: ''; display: block; position: relative; top: 3px; left: 3px; width: 7px; height: 7px; background: #666; -moz-border-radius: 1em; -webkit-border-radius: 1em; border-radius: 1em; } input[type=checkbox]:checked::after { content: url(//ssl.gstatic.com/ui/v1/menu/checkmark.png); display: block; position: absolute; top: -6px; left: -5px; } input[type=checkbox]:focus { outline: none; border-color: #4d90fe; } .stacked-label { display: block; font-weight: bold; margin: .5em 0; } .hidden-label { position: absolute !important; clip: rect(1px 1px 1px 1px); /* IE6, IE7 */ clip: rect(1px, 1px, 1px, 1px); height: 0px; width: 0px; overflow: hidden; visibility: hidden; } input[type=checkbox].form-error, input[type=email].form-error, input[type=number].form-error, input[type=password].form-error, input[type=text].form-error, input[type=tel].form-error, input[type=url].form-error { border: 1px solid #dd4b39; } .error-msg { margin: .5em 0; display: block; color: #dd4b39; line-height: 17px; } .help-link { background: #dd4b39; padding: 0 5px; color: #fff; font-weight: bold; display: inline-block; -moz-border-radius: 1em; -webkit-border-radius: 1em; border-radius: 1em; text-decoration: none; position: relative; top: 0px; } .help-link:visited { color: #fff; } .help-link:hover { color: #fff; background: #c03523; text-decoration: none; } .help-link:active { opacity: 1; background: #ae2817; } .wrapper { position: relative; min-height: 100%; } .content { padding: 0 44px; } .main { padding-bottom: 100px; } /* For modern browsers */ .clearfix:before, .clearfix:after { content: ""; display: table; } .clearfix:after { clear: both; } /* For IE 6/7 (trigger hasLayout) */ .clearfix { zoom:1; } .google-header-bar { height: 71px; border-bottom: 1px solid #e5e5e5; overflow: hidden; } .header .logo { margin: 17px 0 0; float: left; height: 38px; width: 116px; } .header .secondary-link { margin: 28px 0 0; float: right; } .header .secondary-link a { font-weight: normal; } .google-header-bar.centered { border: 0; height: 108px; } .google-header-bar.centered .header .logo { float: none; margin: 40px auto 30px; display: block; } .google-header-bar.centered .header .secondary-link { display: none } .google-footer-bar { position: absolute; bottom: 0; height: 35px; width: 100%; border-top: 1px solid #e5e5e5; overflow: hidden; } .footer { padding-top: 7px; font-size: .85em; white-space: nowrap; line-height: 0; } .footer ul { float: left; max-width: 80%; padding: 0; } .footer ul li { color: #737373; display: inline; padding: 0; padding-right: 1.5em; } .footer a { color: #737373; } .lang-chooser-wrap { float: right; display: inline; } .lang-chooser-wrap img { vertical-align: middle; } .hidden { height: 0px; width: 0px; overflow: hidden; visibility: hidden; display: none !important; } .card { background-color: #f7f7f7; padding: 20px 25px 30px; margin: 0 auto 25px; width: 304px; -moz-border-radius: 2px; -webkit-border-radius: 2px; border-radius: 2px; -moz-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); -webkit-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); } .card *:first-child { margin-top: 0; } .rc-button { display: inline-block; min-width: 46px; text-align: center; color: #444; font-size: 14px; font-weight: 700; height: 36px; padding: 0 8px; line-height: 36px; -moz-border-radius: 3px; -webkit-border-radius: 3px; border-radius: 3px; -o-transition: all 0.218s; -moz-transition: all 0.218s; -webkit-transition: all 0.218s; transition: all 0.218s; border: 1px solid #dcdcdc; background-color: #f5f5f5; background-image: -webkit-linear-gradient(top,#f5f5f5,#f1f1f1); background-image: -moz-linear-gradient(top,#f5f5f5,#f1f1f1); background-image: -ms-linear-gradient(top,#f5f5f5,#f1f1f1); background-image: -o-linear-gradient(top,#f5f5f5,#f1f1f1); background-image: linear-gradient(top,#f5f5f5,#f1f1f1); -o-transition: none; -moz-user-select: none; -webkit-user-select: none; user-select: none; cursor: default; } .card .rc-button { width: 100%; padding: 0; } .rc-button:hover { border: 1px solid #c6c6c6; color: #333; text-decoration: none; -o-transition: all 0.0s; -moz-transition: all 0.0s; -webkit-transition: all 0.0s; transition: all 0.0s; background-color: #f8f8f8; background-image: -webkit-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: -moz-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: -ms-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: -o-linear-gradient(top,#f8f8f8,#f1f1f1); background-image: linear-gradient(top,#f8f8f8,#f1f1f1); -moz-box-shadow: 0 1px 1px rgba(0,0,0,0.1); -webkit-box-shadow: 0 1px 1px rgba(0,0,0,0.1); box-shadow: 0 1px 1px rgba(0,0,0,0.1); } .rc-button:active { background-color: #f6f6f6; background-image: -webkit-linear-gradient(top,#f6f6f6,#f1f1f1); background-image: -moz-linear-gradient(top,#f6f6f6,#f1f1f1); background-image: -ms-linear-gradient(top,#f6f6f6,#f1f1f1); background-image: -o-linear-gradient(top,#f6f6f6,#f1f1f1); background-image: linear-gradient(top,#f6f6f6,#f1f1f1); -moz-box-shadow: 0 1px 2px rgba(0,0,0,0.1); -webkit-box-shadow: 0 1px 2px rgba(0,0,0,0.1); box-shadow: 0 1px 2px rgba(0,0,0,0.1); } .rc-button-submit { border: 1px solid #3079ed; color: #fff; text-shadow: 0 1px rgba(0,0,0,0.1); background-color: #4d90fe; background-image: -webkit-linear-gradient(top,#4d90fe,#4787ed); background-image: -moz-linear-gradient(top,#4d90fe,#4787ed); background-image: -ms-linear-gradient(top,#4d90fe,#4787ed); background-image: -o-linear-gradient(top,#4d90fe,#4787ed); background-image: linear-gradient(top,#4d90fe,#4787ed); } .rc-button-submit:hover { border: 1px solid #2f5bb7; color: #fff; text-shadow: 0 1px rgba(0,0,0,0.3); background-color: #357ae8; background-image: -webkit-linear-gradient(top,#4d90fe,#357ae8); background-image: -moz-linear-gradient(top,#4d90fe,#357ae8); background-image: -ms-linear-gradient(top,#4d90fe,#357ae8); background-image: -o-linear-gradient(top,#4d90fe,#357ae8); background-image: linear-gradient(top,#4d90fe,#357ae8); } .rc-button-submit:active { background-color: #357ae8; background-image: -webkit-linear-gradient(top,#4d90fe,#357ae8); background-image: -moz-linear-gradient(top,#4d90fe,#357ae8); background-image: -ms-linear-gradient(top,#4d90fe,#357ae8); background-image: -o-linear-gradient(top,#4d90fe,#357ae8); background-image: linear-gradient(top,#4d90fe,#357ae8); -moz-box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); -webkit-box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); } .rc-button-red { border: 1px solid transparent; color: #fff; text-shadow: 0 1px rgba(0,0,0,0.1); background-color: #d14836; background-image: -webkit-linear-gradient(top,#dd4b39,#d14836); background-image: -moz-linear-gradient(top,#dd4b39,#d14836); background-image: -ms-linear-gradient(top,#dd4b39,#d14836); background-image: -o-linear-gradient(top,#dd4b39,#d14836); background-image: linear-gradient(top,#dd4b39,#d14836); } .rc-button-red:hover { border: 1px solid #b0281a; color: #fff; text-shadow: 0 1px rgba(0,0,0,0.3); background-color: #c53727; background-image: -webkit-linear-gradient(top,#dd4b39,#c53727); background-image: -moz-linear-gradient(top,#dd4b39,#c53727); background-image: -ms-linear-gradient(top,#dd4b39,#c53727); background-image: -o-linear-gradient(top,#dd4b39,#c53727); background-image: linear-gradient(top,#dd4b39,#c53727); } .rc-button-red:active { border: 1px solid #992a1b; background-color: #b0281a; background-image: -webkit-linear-gradient(top,#dd4b39,#b0281a); background-image: -moz-linear-gradient(top,#dd4b39,#b0281a); background-image: -ms-linear-gradient(top,#dd4b39,#b0281a); background-image: -o-linear-gradient(top,#dd4b39,#b0281a); background-image: linear-gradient(top,#dd4b39,#b0281a); -moz-box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); -webkit-box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); box-shadow: inset 0 1px 2px rgba(0,0,0,0.3); } .google-header-bar.centered { height: 83px; } .google-header-bar.centered .header .logo { margin: 25px auto 20px; } .card { margin-bottom: 20px; } html, body { font-size: 14px; } .google-header-bar.centered { height: 73px; } .google-header-bar.centered .header .logo { margin: 20px auto 15px; } .content { padding-left: 10px; padding-right: 10px; } .hidden-small { display: none; } .card { padding: 20px 15px 30px; width: 270px; } .footer ul li { padding-right: 1em; } .lang-chooser-wrap { display: none; } pre.debug { font-family: monospace; position: absolute; left: 0; margin: 0; padding: 1.5em; font-size: 13px; background: #f1f1f1; border-top: 1px solid #e5e5e5; direction: ltr; white-space: pre-wrap; width: 90%; overflow: hidden; } .banner { text-align: center; } .banner h1 { font-family: 'Open Sans', arial; -webkit-font-smoothing: antialiased; color: #555; font-size: 42px; font-weight: 300; margin-top: 0; margin-bottom: 20px; } .banner h2 { font-family: 'Open Sans', arial; -webkit-font-smoothing: antialiased; color: #555; font-size: 18px; font-weight: 400; margin-bottom: 20px; } .signin-card { width: 274px; padding: 40px 40px; } .signin-card .profile-img { width: 96px; height: 96px; margin: 0 auto 10px; display: block; -moz-border-radius: 50%; -webkit-border-radius: 50%; border-radius: 50%; } .signin-card .profile-name { font-size: 16px; font-weight: bold; text-align: center; margin: 10px 0 0; height: 1em; } .signin-card input[type=email], .signin-card input[type=password], .signin-card input[type=text], .signin-card input[type=submit] { width: 100%; display: block; margin-bottom: 10px; z-index: 1; position: relative; -moz-box-sizing: border-box; -webkit-box-sizing: border-box; box-sizing: border-box; } .signin-card #Email, .signin-card #Passwd, .signin-card .captcha { direction: ltr; height: 44px; font-size: 16px; } .signin-card #Email + .stacked-label { margin-top: 15px; } .signin-card #reauthEmail { display: block; margin-bottom: 10px; line-height: 36px; padding: 0 8px; font-size: 15px; color: #404040; line-height: 2; margin-bottom: 10px; font-size: 14px; text-align: center; overflow: hidden; text-overflow: ellipsis; white-space: nowrap; -moz-box-sizing: border-box; -webkit-box-sizing: border-box; box-sizing: border-box; } .one-google p { margin: 0 0 10px; color: #555; font-size: 14px; text-align: center; } .one-google p.create-account, .one-google p.switch-account { margin-bottom: 60px; } .one-google img { display: block; width: 210px; height: 17px; margin: 10px auto; } .banner h1 { font-size: 38px; margin-bottom: 15px; } .banner h2 { margin-bottom: 15px; } .one-google p.create-account, .one-google p.switch-account { margin-bottom: 30px; } .signin-card #Email { margin-bottom: 0; } .signin-card #Passwd { margin-top: -1px; } .signin-card #Email.form-error, .signin-card #Passwd.form-error { z-index: 2; } .signin-card #Email:hover, .signin-card #Email:focus, .signin-card #Passwd:hover, .signin-card #Passwd:focus { z-index: 3; } .banner h1 { font-size: 22px; margin-bottom: 15px; } .signin-card { width: 260px; padding: 20px 20px; margin: 0 auto 20px; } .signin-card .profile-img { width: 72px; height: 72px; -moz-border-radius: 72px; -webkit-border-radius: 72px; border-radius: 72px; } .need-help-reverse { float: right; } .remember .bubble-wrap { position: absolute; padding-top: 3px; -o-transition: opacity .218s ease-in .218s; -moz-transition: opacity .218s ease-in .218s; -webkit-transition: opacity .218s ease-in .218s; transition: opacity .218s ease-in .218s; left: -999em; opacity: 0; width: 314px; margin-left: -20px; } .remember:hover .bubble-wrap, .remember input:focus ~ .bubble-wrap, .remember .bubble-wrap:hover, .remember .bubble-wrap:focus { opacity: 1; left: inherit; } .bubble-pointer { border-left: 10px solid transparent; border-right: 10px solid transparent; border-bottom: 10px solid #fff; width: 0; height: 0; margin-left: 17px; } .bubble { background-color: #fff; padding: 15px; margin-top: -1px; font-size: 11px; -moz-border-radius: 2px; -webkit-border-radius: 2px; border-radius: 2px; -moz-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); -webkit-box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); box-shadow: 0px 2px 2px rgba(0, 0, 0, 0.3); } One account. All of Google. Sign in to continue to Gmail Email Password Stay signed in For your protection, keep this checked only on devices you use regularly. Learn more Need help? Create an account One Google Account for everything Google Google Privacy & Terms Help ?Afrikaans? ?az?rbaycanca? ?Bahasa Indonesia? ?Bahasa Melayu? ?català? ??e?tina? ?dansk? ?Deutsch? ?eesti? ?English (United Kingdom)? ?English (United States)? ?español (España)? ?español (Latinoamérica)? ?euskara? ?Filipino? ?français (Canada)? ?français (France)? ?galego? ?hrvatski? ?isiZulu? ?íslenska? ?italiano? ?Kiswahili? ?latvie?u? ?lietuvi?? ?magyar? ?Nederlands? ?norsk? ?polski? ?português? ?português (Brasil)? ?português (Portugal)? ?român?? ?sloven?ina? ?sloven??ina? ?suomi? ?svenska? ?Ti?ng Vi?t? ?Türkçe? ?????????? ??????????? ???????? ????????? ???????? ???????????? ????????? ????????? ???????? ??????? ?????????? ???????? ?????? ???????? ??????? ???????? ??????? ????????? ??????? ???????? ??????? ???????? ??????? ????? ????? ??????? ????? ???????? ????? ?????? ?????? (function(){ var splitByFirstChar = function(toBeSplit, splitChar) { var index = toBeSplit.indexOf(splitChar); if (index >= 0) { return [toBeSplit.substring(0, index), toBeSplit.substring(index + 1)]; } return [toBeSplit]; } var langChooser_parseParams = function(paramsSection) { if (paramsSection) { var query = {}; var params = paramsSection.split('&'); for (var i = 0; i < params.length; i++) { var param = splitByFirstChar(params[i], '='); if (param.length == 2) { query[param[0]] = param[1]; } } return query; } return {}; } var langChooser_getParamStr = function(params) { var paramsStr = []; for (var a in params) { paramsStr.push(a + "=" + params[a]); } return paramsStr.join('&'); } var langChooser_currentUrl = window.location.href; var match = langChooser_currentUrl.match("^(.*?)(\\?(.*?))?(#(.*))?$"); var langChooser_currentPath = match[1]; var langChooser_params = langChooser_parseParams(match[3]); var langChooser_fragment = match[5]; var langChooser = document.getElementById('lang-chooser'); var langChooserWrap = document.getElementById('lang-chooser-wrap'); var langVisControl = document.getElementById('lang-vis-control'); if (langVisControl && langChooser) { langVisControl.style.display = 'inline'; langChooser.onchange = function() { langChooser_params['lp'] = 1; langChooser_params['hl'] = encodeURIComponent(this.value); var paramsStr = langChooser_getParamStr(langChooser_params); var newHref = langChooser_currentPath + "?" + paramsStr; if (langChooser_fragment) { newHref = newHref + "#" + langChooser_fragment; } window.location.href = newHref; }; } })(); var gaia_attachEvent = function(element, event, callback) { if (element.addEventListener) { element.addEventListener(event, callback, false); } else if (element.attachEvent) { element.attachEvent('on' + event, callback); } }; var G;var Gb=function(a,b){var c=a;a&&"string"==typeof a&&(c=document.getElementById(a));if(b&&!c)throw new Ga(a);return c},Ga=function(a){this.id=a;this.toString=function(){return"No element found for id '"+this.id+"'"}};var Gc={},Gd;Gd=window.addEventListener?function(a,b,c){var d=function(a){var b=c.call(this,a);!1===b&&Ge(a);return b};a=Gb(a,!0);a.addEventListener(b,d,!1);Gf(a,b).push(d);return d}:window.attachEvent?function(a,b,c){a=Gb(a,!0);var d=function(){var b=window.event,d=c.call(a,b);!1===d&&Ge(b);return d};a.attachEvent("on"+b,d);Gf(a,b).push(d);return d}:void 0;var Ge=function(a){a.preventDefault?a.preventDefault():a.returnValue=!1;return!1}; var Gf=function(a,b){Gc[a]=Gc[a]||{};Gc[a][b]=Gc[a][b]||[];return Gc[a][b]};var Gg=function(){try{return new XMLHttpRequest}catch(a){for(var b=["MSXML2.XMLHTTP.6.0","MSXML2.XMLHTTP.3.0","MSXML2.XMLHTTP","Microsoft.XMLHTTP"],c=0;c 0; if (hasError && isFocusableField(inputElement)) { return true; } return false; }; var isFocusableEmptyField = function(inputElement) { if (!inputElement) { return false; } var isEmpty = inputElement.value == null || inputElement.value == ''; if (isEmpty && isFocusableField(inputElement)) { return true; } return false; }; if (document.getElementById) { form = document.getElementById('gaia_loginform'); } if (form) { var userAgent = navigator.userAgent.toLowerCase(); var formFields = form.getElementsByTagName('input'); for (var i = 0; i < formFields.length; i++) { var currentField = formFields[i]; if (isFocusableErrorField(currentField)) { currentField.focus(); return; } } for (var j = 0; j < formFields.length; j++) { var currentField = formFields[j]; if (isFocusableEmptyField(currentField)) { currentField.focus(); return; } } } } if (!('ontouchstart' in window)) { gaia_attachEvent(window, 'load', gaia_setFocus); } var gaia_scrollToElement = function(element) { var calculateOffsetHeight = function(element) { var curtop = 0; if (element.offsetParent) { while (element) { curtop += element.offsetTop; element = element.offsetParent; } } return curtop; } var siginOffsetHeight = calculateOffsetHeight(element); var scrollHeight = siginOffsetHeight - window.innerHeight + element.clientHeight + 0.02 * window.innerHeight; window.scroll(0, scrollHeight); } (function(){ var signinInput = document.getElementById('signIn'); gaia_onLoginSubmit = function() { try { document.bg.invoke(function(response) { document.getElementById('bgresponse').value = response; }); } catch (err) { document.getElementById('bgresponse').value = ''; } return true; } document.getElementById('gaia_loginform').onsubmit = gaia_onLoginSubmit; var signinButton = document.getElementById('signIn'); gaia_attachEvent(window, 'load', function(){ gaia_scrollToElement(signinButton); }); })(); var BrowserSupport_={IsBrowserSupported:function(){var agt=navigator.userAgent.toLowerCase();var is_op=agt.indexOf("opera")!=-1;var is_ie=agt.indexOf("msie")!=-1&&document.all&&!is_op;var is_ie5=agt.indexOf("msie 5")!=-1&&document.all&&!is_op;var is_mac=agt.indexOf("mac")!=-1;var is_gk=agt.indexOf("gecko")!=-1;var is_sf=agt.indexOf("safari")!=-1;if(is_ie&&!is_op&&!is_mac){if(agt.indexOf("palmsource")!= -1||agt.indexOf("regking")!=-1||agt.indexOf("windows ce")!=-1||agt.indexOf("j2me")!=-1||agt.indexOf("avantgo")!=-1||agt.indexOf(" stb")!=-1)return false;var v=BrowserSupport_.GetFollowingFloat(agt,"msie ");if(v!=null)return v>=5.5}if(is_gk&&!is_sf){var v=BrowserSupport_.GetFollowingFloat(agt,"rv:");if(v!=null)return v>=1.4;else{v=BrowserSupport_.GetFollowingFloat(agt,"galeon/");if(v!=null)return v>= 1.3}}if(is_sf){if(agt.indexOf("rv:3.14.15.92.65")!=-1)return false;var v=BrowserSupport_.GetFollowingFloat(agt,"applewebkit/");if(v!=null)return v>=312}if(is_op){if(agt.indexOf("sony/com1")!=-1)return false;var v=BrowserSupport_.GetFollowingFloat(agt,"opera ");if(v==null)v=BrowserSupport_.GetFollowingFloat(agt,"opera/");if(v!=null)return v>=8}if(agt.indexOf("pda; sony/com2")!=-1)return true;return false}, GetFollowingFloat:function(str,pfx){var i=str.indexOf(pfx);if(i!=-1){var v=parseFloat(str.substring(i+pfx.length));if(!isNaN(v))return v}return null}};var is_browser_supported=BrowserSupport_.IsBrowserSupported() gaia_attachEvent(window, 'load', function() { OnLoad(); FixForm(); }); (function() { var gaiaLoginForm = document.getElementById('gaia_loginform'); var gaia_onsubmitHandler = gaiaLoginForm.onsubmit; gaiaLoginForm.onsubmit = function() { lg(); if (!fixed) { FixForm(); } gaia_onsubmitHandler(); }; })(); SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (limayelectric[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121840 - Sent on May 3, 2015, 7:42 pm by limayelectric@gmail.com
Sir/Madam, A personal letter for you, Do you know Mrs. Angela Curtis of united kingdom who resides in London, she Informed us that you are dead and you authorized her to claim your compensation sum of Two Million united states dollars($2m). Do you in any way inform her to claim your funds? she provided the following account details to transfer your funds; HSBC BANK ACCOUNT NUMBER: 5625399373 Swift code: HSBXXXDDS BENEFICIARY NAME: MRS. ANGELA CURTIS If you are not aware of this mail kindly inform us to stop the transfer and if we did not hear from you, we shall proceed transferring the fund to her. due to high tax, clearing charges ,Transfer charges and security of the fund, The International Monetary fund has instructed to transfer your fund through smart/Visa card have contacted the central bank to lodge your total sum of Two Million united states dollars into a Premium Visa card. You are required to urgently reconfirm your postal address: Your Address: City: Country: Phone Number: Fax Number: Postal code: Next of kin: Name: Address: Phone number: You are advise to forward your details to the Visa card Inc for onward delivery of your fund through visa card: Contact Person: OFFICE OF THE DIRECTOR, VISA COMPANY INC BENIN Liuis Bentsen Email:liuis_benten@outlook.com Carrefour des trois Banques Avenue Pape Jean Paul 68, Cotonou, Benin P.O. Box 01 BP Phone:+229-200-0252. SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #121838 - Sent on May 3, 2015, 7:20 pm by san@leadersrealestate.com.au
FROM: US AMBASSADOR TO Benin republicSenders Ambassador Michael Raynor,U.S. Embassy Benin rep Town HallCotonou, Benin RepublicGood day Dear I want to inform you that I shall be coming to your country for an official meeting and i willbe bringing your funds of $1.2 million united state dollars along withme as part of compensation from the president of Benin republic for thoseaffected in scams activities in Benin republic but this time i will not gothrough customs because as an ambassador to Benin republic, I am a usgovernment agent and i have the veto power to go through customs. Assoon as i am through with the meeting i shall then proceed to youraddress. (Send your cell phone number and the address where you wantme to bring the package).You have really paid so much in this delivery that makes me wonder.You are a very lucky this time because i shall be bringing your fund myself andthere is nothing anyone can do about it.Your package $1.2 million united state dollars must be registered asan ambassadorial package for me to defeat all odds and the cost ofregistering it is $120 usd the fee must be paid by you via Money Gram and attach to me the payent slip so that allnecessary arrangement can be made before time will be against us. i suppose to pay the fee on your behalf but due to thesituation of your fund it's noted that you must be the sender of the fee.This development is coming now that the ministry wants to offset allyour outstanding payments to all our legal foreign beneficiariesaround the world in which your payment file was affected. As you mayknow(1). MONEY GRAM MONEY or WESTERN UNION TRANSFER TO:Recipient: Sylvester okekeCountry: Benin republicCity: Porto-NovoCountry code: 00229Text Question: okText Answer: okAmount: US$120.00As soon as you send the fee make sure you send me the paymentinformation. to this email address: ( ambmichaelraynor@mail2american.com ) or text it to my cell +229 6860 2702 or 00229 6860 2702My flight is Tuesday next week and i expect you to comply before thenso that the delivery can be completed. If you do not comply, then itwill not be my fault if you do not receive your package.Ambassador Michael Raynor,U.s. Ambassador to Benin republic SpamAssassin Report (spam score: 13.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 MILLION_USD BODY: Talks about millions of dollars 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.84.243.235 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.3 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
---------- Forwarded message ----------From: Mr. Miniakhmetov Anatoly <natoly@qq.com>Date: 2015-05-03 14:52 GMT+02:00Subject: Investment FundsTo: Dear friend,Thank you for responding! I would like to embrace your partnership in profiling funds USD$42,160,000. Please be assured that this is a legitimate business deal but I need to be very discreet in my activities with you because of circumstances surrounding the funds. I will try to confirm your honesty and ability to handle this project professionally before I am able to give out further information of the funds, and I would need some answers from you as follows: (1) Have you handled large funds of this magnitude, if yes! How successful was it? (2) If you have problems, would it affect the activities you undertake with me as an individual rather than a corporate entity? Your answers to the above questions are very essential for me to proceed with you. I must also explain why I am asking these questions, if you do have existing profile problems, I may end up inheriting your backlog thus creating a problem where none exist. I intend to liquidate this large investment through you standing as the Management Consultant and take the capital appreciation derivatives from the existing portfolio to provide a new Investment under your Management for my future foreign investments, thus negating any requirements for declaration of process for income generation here in UAE or in my Country Russia. However, if you do have issues prior to this, it puts anything you do with me in the light, and thus puts me in uncomfortable situation. As I want you to know, these funds belong to late Sheikh Ahmed Bin Zayed Al-Nahyan who was the former head of the Abu Dhabi Investment Authority. I was his Confidential Secretary before his demise.Therefore it is a legitimate operation but I want it done quietly through a non-traditional source like you because if the authorities here in UAE hear about this, I will be indicted for hearing in the judicial system here, and that will be an unwelcome exposure at this time for me and you. Hence I expect you to answer the above questions in honesty so that I can know whether or not I am comfortable with you. I hope you understand why I continue to lay emphasis on being comfortable with you? The reason is not far fetched, I am only trying to ensure that you do not put me in any trouble, and likewise I do not do same to you. I shall provide you with an input as an entity with no history to the investment, only as a Management Consultant and everybody must be safe now and in the future, hence the questions. You must know too that if this project must succeed, then you must remain 100% Confidential. Please write back promptly to enable me educate you further. Yours faithfully,Miniakhmetov Anatoly.
Click to view scam #121837 - Sent on May 3, 2015, 6:12 pm by natoly@qq.com
 Love & Light, KatrinaYou can see my books at Website ----- Forwarded Message ----- From: BBW VIPDatingNetwork Ad-Partner <bbwvipa8bau8@b27pg.constree.com> To: myst.weaver@yahoo.com Sent: Sunday, 3 May 2015, 17:38 Subject: Here is your trial Membership Here is your trial BBW Dating Membership I guess we must really like you because today we are giving you a trial membership to our BBW dating community! Go here to activate your membership   If you don't activate this membership then we will still like you...but we will think that you're a little crazy! Have a great day no matter what you decide! To not receive this message again please visit this page or write to: Single Adult Dating Community Ad-Partner 5425 E. Broadway Suite 238 Tucson AZ 85711
Tired of always looking exhausted? .dfekholu{color:#a17ce5;} SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: homebuiltpectorallyaw.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: homebuiltpectorallyaw.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Advert
-----Original Message----- From: DEPARTMENT OF PETROLEUM <recruitment@energy.gov> To: genspanky <genspanky@aol.com> Sent: Sat, May 2, 2015 10:28 am Subject: JOB VACANCY||| U.S DEPARTMENT OF ENERGY U.S DEPARTMENT OF ENERGY DEPARTMENT OF PETROLEUM AND NATURAL RESOURCES 1000 INDEPENDENCE AVE., S.W. WASHINGTON, DC 20585-1615. WEBSITE: www.energy.gov E-MAIL: humanresourcesdepartment@recruitmentp-energy.com TEL: +1 (760) 230 5986 FAX: +1 (202) 693 4053 ATTN: JOB SEEKER. WE ARE USING THIS MEDIA TO ANNOUNCE THAT UNITED STATES DEPARTMENT OF ENERGY CURRENTLY SEEKING AN EXPERIENCE AND ENTHUSIASTIC 137 WORKERS TO JOIN OUR OIL FIELD REFINERS IN CALIFORNIA, TEXAS AND MINNESOTA REFINERIES. THE APPLICANT MUST COME FROM NON-CRIMINAL ORIGIN AND MUST AGREE TO ABIDE WITH THE U.S DEPARTMENT OF HOMELAND SECURITY RULES AND REGULATIONS. ALL INTERESTED APPLICANTS ARE ADVISED TO SEND HIS/HER C.V/RESUME TO : humanresourcesdepartment@recruitmentp-energy.com SINCERELY, DR. RICK CUTHBERT. DEPARTMENT OF PETROLEUM AND NATURAL RESOURCES, HUMAN RESOURCES DEPARTMENT.
Click to view scam #121833 - Sent on May 3, 2015, 5:16 pm by recruitment@energy.gov
Begin forwarded message:From: "McDonalds" <mcdonalds@boingabout.com>Date: 3 May 2015 14:55:20 Subject: Claim your FREE McDonalds VouchersReply-To: <mcdonalds@boingabout.com> McDonalds Claim your Free McDonalds Food Voucher Worth Over £30 Each Claim Your FREE McDonalds Food Voucher Worth Over £30 Each Vaniki are giving away McDonald?s food vouchers worth over £30. With over 35,000 stores in 118 countries, claim yours now. Enter today for your chance to win T's and C's apply, entrants must be 18 or older. If you wish to unsubscribe from future mailings please click here  
Click to view scam #121831 - Sent on May 3, 2015, 5:01 pm by mcdonalds@boingabout.com
Begin forwarded message:From: "CustomerCare" <customercare@joy.romanticloveopus1.com>Date: 3 May 2015 15:22:25 Subject: To approve a fund transfer - see here.Reply-To: "Complaints Department" <d85f02216c0c631eb91df5d0be539275b2338f1909b84870e61320f464c21f246b9b5e1c17360619880031eefadd6b4d3c39efba750dfef925b4ecea4a88187f@joy.romanticloveopus1.com> Payday Loans Loan Approval - Click Here Congratulations. Here Are Your Cash-Advance Options. - Fast Funds - Online Payday Loans - Monetary Advances - Payday Loans - Payday Advance  Visit Here Right Away Report spam. Click here to unsubscribe, or write to: AdsStars, Inc. 40 East Main Street #768, Newark, DE 19711
ªF¨?ö ªF¨?ö-­è18·³ªºªº¤p¬ü¤k¡Aµo¨|¥¿¦n-¦h¤HµL®M¤º®g ±a¤pºô¤?^®a¡Aµy·LºN¨â¤U¦oº¡Áy³q¬õ¤p¥ÞÅ?nÀã³á ½?ö·?«¥kÁä½?s¶K¤W¤U¦Cºô§}Æ[¬?s§i http://ppt.cc/pgp8 SpamAssassin Report (spam score: 21.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (endjnu[at]163.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121829 - Sent on May 3, 2015, 4:58 pm by endjnu@163.com
Attn: Our Esteem Customer.Congratulations that i borrowed $100.00 yesterday after service from my Pastor in the church. And the amount you have to send now is only $39. but i don't see the reason why you will be silent on me, is this,because of the money? any way there is good news that i raise some money to help you out and to make sure that your payment will be release to you within 3hours after you send the remaining $39.00 today. I know it is because of your past experience that make you not to believe me but I will assure you before my God who is my wittiness that I cannot deceive you because my bible says what shall it profit a man to gain material things and loose his soul. I told you earlier, just drop your old experience and follow instruction of a man of God and you will know what it means to follow somebody that fear God. Honestly I am just disappointed at your behaviors before because you know that I am man of God and cannot deceive you. Just pay t he $39. and leave rest for me, and see, if I am telling you lies.Your payments is already approval today for you to receive it but the management here says that you must pay $39. for the paper and signature charge before you can receive the payment today.please send the charge through western union immediately. I swear If I fail to release your payment within 3hours after you send the $39. as I promise don,t count on me again, I cannot fail you, I promise you. Don’t be afraid of anything, because as soon as you send the $39. today please leave the rest for me and see if I am lie to you or not because I can not use my life swear because of $39. How can I swear against my life because of this little amount? It is to show you that what I am telling you is nothing but the truth?HERE IS THE INFORMATION TO SEND THEMONEY THROUGH WESTERN UNION MONEY TRANSFER BELOW;1.RECEIVER NAME===== OSITA UDO2.COUNTRY===BENIN REPUBLIC.3 CITYCOTONOU3.QUESTION======FINAL?4.ANSWER======= FINAL5.AMOUNT=======$39.Iam waiting to hear from you with the payment detail  MTCN SENDER NAME?GOD BLESS YOUMR.WILLIAMS JOHNSON.WESTERN UNION  HEAD OFFICE DEPARTMENT REPUBLIC OF BENIN.FOREIGN CONTRACTOR PAYMENT OFFICETHIS IS OUR CONDUCT CODE (wu2015)TELEPHONE NUMBER +229-9898-0667E-mail address :(westernunion210@foxmail.com ) ________________________________________________________________ Mensagem enviada usando Telaen Webmail 1.3.0 SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121832 - Sent on May 3, 2015, 4:57 pm by sindicato@aliber.com.br
??
2015/5/3 369615765@qq.com SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.180 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (stlsq4a67[at]sohu.com) -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121827 - Sent on May 3, 2015, 4:52 pm by stlsq4a67@sohu.com
Bonjour, Excuser-moi pour cette intrusion, je suis MARIE BRIGITTE ,Ex-Adjointe au Service des Affaires financières de la Société Italo-Béninoise (SAF/SITEP) je suis d'origine Française, Brièvement, je souffre d?un cancer en phase terminale détecté trop tard et selon les dires de mon docteur, je n?ai plus assez de temps à vivre. J?ai toujours privilégié ce service au détrimen de ma propre santé et voilà cela me rattrape, mais je suis quand même fière d?avoir pu aider des gens autour de moi et je pense pouvoir continuer à le faire à travers vous. J'ai Perdu mon mari et mes deux enfants dans un crash d'avion qui s'était produit à New York . Je vous demande de bien vouloir accepter être le bénéficiaire de cette fortune qui est d'une somme de 1.025.000 Dollars avec laquelle vous aiderez les ONG selon votre possibilité. J?ai pris cette décision parce que, après ma mort vu que je n?ai pas d?héritier après des années cette somme reviendra à la banque ou à ce service. Veuillez m?aider en acceptant mon offre tout en répondant a mon message dans mon émail privé : mariebrigitte_p@hotmail.com SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [82.57.200.117 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mau.ottaviani[at]alice.it) 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 MONEY_FROM_41 Lots of money from Africa
Click to view scam #121825 - Sent on May 3, 2015, 3:15 pm by mau.ottaviani@alice.it
±¨±í 2015-5-3 SpamAssassin Report (spam score: 8.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 2.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121824 - Sent on May 3, 2015, 3:08 pm by gamebox@xtimes.org
You were chosen by God to receive my Grant Donation of $2 Million USD, Please contact: Mrs. Patricia Chandler via email: chandler195@hotmail.com SpamAssassin Report (spam score: 21.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.173 listed in list.dnswl.org] 2.5 MILLION_USD BODY: Talks about millions of dollars 3.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.3 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.8 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 4.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #121823 - Sent on May 3, 2015, 3:00 pm by info@pc.org
----- Forwarded Message ----- From: CougarQuest At HotLocalCougars <couga9i10iau8y1@4l9ry.shellough.com> To: koolnascar@yahoo.com Sent: Sunday, May 3, 2015 9:25 AM Subject: Meet sexy cougars in your area Meet Sexy Women Who Desire Young Men Local Hot Cougars If you no longer wish to receive our emails, please see here. Or write to: 7040 Avenida Encinas Ste 104 PMB 300 Carlsbad,CA 92011
AS YOU CAN SEE THIS IS GOING ON FOR ALMOST A YEAR AND IS  A FAKEFrom:  MRS EMILLY OLIVIER JACKMAN (EMILLYOLIVIERJACKMAN@outlook.com) You moved this message to its current location. Sent: Wed 8/20/14 4:46 AM To: Be careful! This sender failed our fraud detection checks. DEAREST,  THIS IS A BEQUEST NOTICE.  I AM SURE THIS MAIL WOULD BE COMING TO YOU AS A SURPRISE SINCE WE HAVE NEVER MET BEFORE AND YOU WOULD ALSO BE ASKING WHY I HAVE DECIDED TO CHOSE YOU AMONGST THE NUMEROUS INTERNET USERS IN THE WORLD, PRECISELY I CANNOT SAY WHY I HAVE CHOSEN YOU BUT DO NOT BE WORRIED FOR I SAW YOUR PROFILE ON THE INTERNET, WHICH HAS MADE ME ACCOMPLISH MY REQUEST. MAY THE ALMIGHTY GOD BLESS AND SEE YOU THROUGH WITH THIS MISSION IF YOU CAN CAREFULLY READ AND DIGEST THE MESSAGE BELOW.  BEFORE I MOVE FURTHER, PERMIT ME TO GIVE YOU A LITTLE OF MY BIOGRAPHY, I AM MOTHER EMILLY OLIVIER JACKMAN, 67 YEARS OLD WOMAN AND THE WIFE OF LATE SIR JACKMAN OLIVIER WHO DIED ALONGSIDE OUR ONLY CHILD IN A PLANE CRASH ON MONDAY THE 7TH OF SEPTEMBER 1998 GMT 14:22 UK WHILE THEY WERE FLYING FROM NEW YORK TO GENEVA. PLEASE SEE SITE BELOW FOR MORE INFORMATION. HTTP://WWW.CNN.COM/WORLD/9809/SWISSAIR.VICTIMS.LIST/INDEX.HTML  AFTER THE DEATH OF MY HUSBAND AND SON ,I BECAME THE HEAD OF HIS INVESTMENT AND JUST RECENTLY, THE DOCTORS HANDLING MY HEALTH ISSUES AT CANCER CENTER: CHRISTIE HOSPITAL NHS TRUST UK, HAVE SAID I MAY NOT LIVE BEYOND THE NEXT TWO MONTHS AFTER MY NEXT SURGERY,BUT BEFORE THE DEATH OF MY HUSBAND WE HAD A PLAN TO USE THE LAST DAYS OF OUR LIVES TO DONATE HALF OF WHAT WE HAVE WORKED FOR TO THE LESS PRIVILEGE AND CHARITY HOMES AND THE OTHER HALF FOR OURSELVES, FAMILY MEMBERS AND CLOSE FRIENDS, AND IT IS SO UNFORTUNATE THAT MY HUSBAND IS NOT ALIVE TODAY TO DO THIS WITH ME AND I AM VERY WEAK WITH CANCER AND COUPLED WITH THE RECENT ANNOUNCEMENT FROM THE DOCTOR, HENCE I HAVE DECIDED TO DO THIS PHILANTHROPIC WORK ON BEHALF OF MY LATE HUSBAND AND I.  PRESENTLY, I HAVE WILLED OUT ALMOST HALF OF OUR ASSETS TO SEVERAL CHARITY HOMES AND TO SOME OF THE LESS PRIVILEGE IN DIFFERENT COUNTRIES. DESPITE THE AGREEMENT BETWEEN MY LATE HUSBAND AND I TO GIVE AID TO THE DEPRIVED, WE ALSO AGREED TO RENDER SUPPORT TO AN INDIVIDUAL WE HAVE NOT MET BEFORE IN LIFE DUE TO THE FACT WHEN WE WERE STILL YOUNG IN LIFE WE RECEIVED AN ANONYMOUS HELP FROM AN INDIVIDUAL WE DID NOT KNOW AND WHICH WE HAVE NOT BEEN ABLE TO KNOW TILL DATE, THE IMPACT WE GOT FROM SUCH GESTURE MADE US TO DO SAME.  I AM SORRY TO INFORM YOU THAT YOU WILL NEVER HAVE THE CHANCE TO KNOW ME BECAUSE I HAVE JUST CONCLUDED THE ASSIGNMENT WHICH MY HUSBAND AND I HAVE AGREED UPON BEFORE HIS SUDDEN DEATH AND YOU HAPPENED TO BE THE BENEFICIARY OF OUR LAST WILL, IRRESPECTIVE OF YOUR PREVIOUS FINANCIAL STATUS, HENCE I NEED YOU TO DO ME A FAVOR BY ACCEPTING OUR OFFER.  I HAVE PRESENTLY INSTRUCTED MY ATTORNEY TO ASSIST ANY PERSON I WILL INTRODUCE TO HIM AS THE BENEFICIARY TO THE LAST WILL IN THE SUM OF FIVE MILLION EIGHT HUNDRED UNITED STATE DOLLARS ($5,800,000.00) WITH MY BANK. I DECIDED TO DO THIS NOW AND UNCONDITIONALLY KNOWING THAT MY DAYS ARE NUMBERED.  TO CONCLUDE WITH THIS BEQUEST, PLEASE PROVIDE ME WITH YOUR DATA TO FULLY ADVISE MY ATTORNEY THAT YOU ARE THE APPOINTED BENEFICIARY OF THE DEPOSIT.  FULL NAMES:PHYSICAL ADDRESS;DIRECT TELEPHONE NUMBEROCCUPATION  NOTE: PLEASE I DO NOT WANT YOU TO THANK ME, SAME GESTURE WAS SHOWN TO US, ALL I NEED YOU TO DO IS, WHEN YOU GET THIS FUND, USE %50 FOR YOUR SELF AND THE REST TO ASSIST THE LESS PRIVILEGED IN YOUR COMMUNITY, THIS IS THE ONLY WAY TO IMMORTALIZE US WHEN I AM GONE.  YOURS FAITHFULLYMRS EMILLY OLIVIER JACKMANCANCER CENTRE: CHRISTIE HOSPITAL NHS TRUST(MANCHESTER, UK) NORTH WEST OF ENGLAND.From: updates.service873@hotmail.comSubject: Mrs. Emilly Olivier JackmanDate: Wed, 29 Apr 2015 09:13:44 +0100 My Dear Beneficiary,    I am sure this mail would be coming to you as a surprise since we have never met before and you would also be asking why I have decided to chose you amongst the numerous internet users in the world. Precisely, I cannot say why I have chosen you but do not be worried for I saw your profile on the Internet, which has made me accomplish my request. May the almighty God bless and see you through with this mission if you can carefully read and digest the message below.    Before I move further, permit me to give you a little of my biography, I am Mother Emilly Olivier Jackman, 87 Years old woman and the wife of Late Sir Jackman Olivier who died in a Plane crash on Monday the 7th of September 1998 GMT 14:22 UK while they were flying from New York to Geneva. Please see site below for more information.    After the death of my husband I became the Head of his investment and now that I am old and weak I have decided to spend the rest of my life with my family and loved ones whom I never had time for during the course of my business life, but before the death of my husband we had a plan to use the last days of our lives to donate half of what we have worked for to the less privileged and charity homes and the other half for ourselves, family members and close friends, and it is so unfortunate that my husband is not alive today to do this with me and I am very weak and old now, hence I have decided to do this philanthropic work on behalf of my late husband and I.    Presently, I have willed out almost half of our assets to several charity homes and to some of the less privileged in different countries. Despite the agreement between my late husband and I to give aid to the deprived, we also agreed to render support to an individual we have not meet before in life due to the fact when we were still young in life we receive an anonymous help from an individual we did not know and which we have not being able to know till date, the impact we got from such gesture made us to do same.    I am sorry to inform you that you will never have the chance to know me because I have just concluded the assignment which my husband and I have agreed upon before his sudden death and you happened to be the beneficiary of our last WILL, irrespective of your previous financial status, hence I need you to do me a favor by accepting our offer that will cost you nothing.    I have presently deposited a Cheque in the sum of 5,800,000.00 United States Dollars with DHL express to deliver to you, what you have to do now is to contact the DHL COURIER SERVICE as soon as possible to know when they will deliver your package to you because of the expiring date.    I only made the deposit with your EMAIL ADDRESS and SECURITY KEEPING CODE (SCT/0433/F) because I do not know your name and the address you would want to receive the parcel with. I couldn't find them on net while browsing your profile if not I would have given it to DHL for immediate and fast delivery of this parcel to you.    For your information, I have paid for the delivery Charge, Insurance Premium and Clearance Certificate Fee of the cheque showing that it is not a Drug Money or meant to sponsor Terrorist attack in your Country.    Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay and remember to ask them to provide you with information how we wish to use in receiving their security keeping fee of $25.00 United States Dollars for their immediate action.Please my dear if you know that you will not help me with the $25.00 dollars please do not contact me or the DHL please i need some one that will help me.    You have to contact the DHL COURIER SERVICE, NIGERIA now for the delivery of the cheque with this information below;    CONTACT PERSON: Mr.Mark Ibe    Emaila:dhlservice.92@hotmail.comAgain, you are not to pay for the delivery Charge, the Insurance premium and the Clearance Certificate Fee of the Cheque because I have already paid for them, the only money you are expected to pay is $25.00 United States Dollars for the security keeping of the cheque so far.I would have paid the fee but the company insisted that I should not because they don't know when you will be contacting them and to avoid demurrage or further cost.    You are to reconfirm the below information to them to avoid any mistake on the Delivery.    Postal address;    Full Names:    Direct telephone number;    Below is the security keeping code: (SCT/0433/F) of the draft, you are to also present it to them for verification before delivery.    Note: Please I do not want you to thank me or late my husband. All I need you to do is, When you get this fund, use ONLY 800.000.00 (Eight hundred thousand United States Dollars) for your effort and USE THE REST OF THIS FUND FOR CHARITY PURPOSE IN THE WAY IT WILL PLEASE HUMANITY.    Yours Faithfully    Mrs. Emilly Olivier Jackman
Calvary greetings in the name of Almighty Lord, I remain convinced that you will be surprised by this mail, but this remains the utmost truth. It is against my official responsibility to release such confidential issue like this to you, but I have no other measures perhaps, I am taking the hazard steps due to my belief as a Christian. It is worthy to notify you on the position of your fund with the Federal Government of Nigeria, the truth is, there are lots of forces working against you right from the last CBN Governor (Mr. Sanusi Lamido Sanusi), and the current Governor (Mr. Godwin Emefiele), with other top officials of all the commercial banks here in Nigeria. They have been frustrating you by impeding your payment. But I have measures to assist you receive your fund without further delay and avoid unnecessary expenses. Though it might be risky but, one has to take it because there is no other option for help. If I tell you that they are using all these money you send to them to work against you, you might not believe it, but it is the reality. The most crucial thing is that, you halt (discontinue) further communication with anybody or group of people contacting you from Central Bank of Nigeria (CBN) or any Nigerian government agency in connection with the transfer of your fund which has left you frustrated and bankrupt for long. It is evident that these people are certainly trying to fulfill their selfish interest which will result in you being totally bankrupt in the end and yet not receiving your inheritance. What you have to do is, set up an account anywhere, may be in any country, and must retransfer the fund into another account immediately you confirm the wire accreditation from the Central Bank of Nigeria into your account. This is for security guarantee. If the transfer is made into your account this week, then you can retransfer in the next 5working days into another account. If you wish that we begin immediate process, kindly notify me as soon as you get this mail for more instruction and procedures. Dr. Mrs. Veronica Amadi [JP] KTT UNIT CBN SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (cbnbank15[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 2.2 YOU_INHERIT Discussing your inheritance 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.6 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
Click to view scam #121818 - Sent on May 3, 2015, 1:55 pm by cbnbank15@gmail.com
--- Weitergeleitete Nachreicht --- Datum: 27. April 2015 16:53:50 Betreff: Re: Sie sind willkommen-Tata-Finance-Zusammenarbeit??? An: "TATA FINANCE CO-OPERATION" <tataco-operation@outlook.com> No scam desired ! Gesendet mit AquaMail für Android http://www.aqua-mail.com Am 27. April 2015 15:53:26 schrieb TATA FINANCE CO-OPERATION <tataco-operation@outlook.com>: > Monday-Saturday:7:30am-6:30pmSunday:12noon-6:30pmTATA FINANCE CO-OPERATION > UNITED KINGDOM.Head Office: A4 Saintpeter Yard, Manchester Quare, United > Kingdom.Telephone:  +44- 705- 382- 3509.Fax:  +44  802- 461- 3896.Attn: Sie > sind willkommen bei TATA FINANCE Kooperation Vereinigtes Königreich. Wir > bieten Ihnen günstige Darlehen bei 3 % Zinssatz für lokale und > internationale Kreditnehmer zur Verfügung. Wir sind zertifiziert, > vertrauenswürdig, zuverlässig, effizient, schnell, dynamisch und eine > Zusammenarbeit Finanzier für Immobilien und jede Art der > Unternehmensfinanzierung, geben wir langfristige Darlehen für maximal fünf > bis fünfzig Jahre. Vor jeder weiteren Prozess müssen Sie die folgenden > Details zu senden:Qualifikationen:1) der Darlehensnehmer muss auf Liste 18 > Jahre alt sein.2) auch mit schlechten Krediten, wir garantieren der > Kreditnehmer das Darlehen.3) das Darlehen kann sein gewährt auch mit > niedrigen Kredit.4) Wir bieten Darlehen von ?3.000,00 bis ?5.000.000,00 > USD/AUD/GBP/EURO/CND.FÜLL- UND RÜCKKEHR DER UNTEN DARLEHENSANTRAG > WEITERVERARBEITUNG IHRES DARLEHENS.* Vollständiger Name:* Adresse:* Stadt:* > Bundesland/Land:* Postleitzahl:* Haustelefon:* Telefon:* Handy:* > Alternative E-mail:* Beruf:* Zweck des Darlehens:* Monatliches Einkommen:* > Kreditbetrag angefordert:* Darlehen Dauer:* Geburtsdatum: Hinweis: In > Anerkennung an die vorstehenden Angaben senden wir, dass Sie einen Brunnen > Geschäftsbedingungen berechnet. Im Lichte des vorstehenden müssen Sie > füllen dieses Formular aus und senden Sie an uns zurück. Beachten Sie, dass > die Anwendung ordnungsgemäß verarbeiten und überprüft werden. Danach können > wir beginnen, mit der Transaktion weiter verarbeiten. Danke, dass du mit > uns noch einmal anwenden; Wir gewähren unseren Kunden das beste.Vielen Dank > und beste Grüße.Herr Paul Robert.Kreditbearbeitung und > Transfer-Offizier.=========================================================================================================Confidentiality > and DisclaimerThis e-mail transmission, including the attachments > (hereinafter collectively referred to as this e-mail) contains information > that is confidential and subject to legal privilege intended only for use > by the individual or entity to which it is originally addressed. Access by > anyone else is unauthorised. If you are not the intended recipient or a > person responsible for delivering this e-mail to the intended recipient, be > advised that you have received this e-mail in error and you must delete > this e-mail in its entirety immediately. ©2015  All rights.    Gesendet mit AquaMail für Android http://www.aqua-mail.com
Click to view scam #121817 - Sent on May 3, 2015, 1:49 pm by tataco-operation@outlook.com
Gesendet mit AquaMail für Android http://www.aqua-mail.com --- Weitergeleitete Nachreicht --- Von: Nomans Investment <nomansinvestment@gmail.com> Datum: 2. Mai 2015 19:58:05 Betreff: Fwd: Send the invoice immediately for payment An: undisclosed-recipients:; Sir,Please use the attach information to prepare an invoice immediately to enable my company do the payment.ThanksBen JuniorNoman investment Ltd
Click to view scam #121815 - Sent on May 3, 2015, 1:45 pm by nomansinvestment@gmail.com
Dear Friend, Let me start by introducing myself,I am Dr Abodi Ahmed, Manager of Bank Of Africa Burkina faso. I am writting you this letter based on the latest development at my Department which I will like to bring to your personal edification.(18.5 million U.S Dollars transfer claims). This is a legitimate transaction and I agreed to offer you 40% of this money as my foreign partner after confirmation of the fund in your bank account. If you are interested,get back to me with the following details below. (1)Your age........................                  (2)Sex........................ (3)Your occupation..... (4)Your marital status..... (5)Your country Name...... (6)Your full residential address....... (7)Your private phone and fax number and your complete name....... (8)A copy of your int'l passport or ID card............ As soon as I receive these data, I will forward to you the application form which you will send to the bank. via my private e mail address:(dr.abodiahmed@barid.com) Best Regard Dr Abodi Ahmed SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (abodi.ahmed[at]aol.fr) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121814 - Sent on May 3, 2015, 1:42 pm by abodi.ahmed@aol.fr
03.05.15---------- Forwarded message ----------From: office <claudina@cantv.net>Date: 2015-05-02 13:41 GMT+02:00Subject: Attention My DearTo: cschonenberg@gmail.com  Attention My Dear We have deposited your fund ($5.70000000USD) through Sky Bank department after our final meeting regarding your fund,All you will do is to contact Sky Bank director Mr Mark Ben, He will give you direction on how you will be receiving the funds through wire transfer.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name_Address:Country:Phone Number: Mr.Mark Ben director as soon as you receive this email contact bank immediately to able the total fund release into your bank account., RegardsKingsley BellyFrom Ministry of Finance
Click to view scam #121813 - Sent on May 3, 2015, 1:33 pm by claudina@cantv.net
Return-path: Envelope-to: anntiran@polka.co.za Delivery-date: Sun, 03 May 2015 12:55:48 +0200 Received: from cpt-prewall-05.mweb.co.za ([196.28.150.155]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from ) id 1YorYq-0007sH-K7 for anntiran@polka.co.za; Sun, 03 May 2015 12:55:48 +0200 Received: from cpt-viruswall-06.mweb.co.za ([196.28.149.26] helo=cpt-mx-01.mweb.co.za) by cpt-prewall-05.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from ) id 1YorYq-00029P-Ik for anntiran@polka.co.za; Sun, 03 May 2015 12:55:48 +0200 Received: from cpt-mx-01.mweb.co.za (cpt-mx-01.mweb.co.za [196.28.149.151]) by cpt-viruswall-06.mweb.co.za (esets_smtp); Sun, 03 May 2015 12:55:48 +0200 Received: from mail-lb0-f195.google.com ([209.85.217.195]) by cpt-mx-01.mweb.co.za with esmtp (Exim 4.84) id 1YorYl-0004t8-8I for ; Sun, 03 May 2015 12:55:48 +0200 Received: by lbio15 with SMTP id o15so5791726lbi.0 for ; Sun, 03 May 2015 03:55:42 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s 120113; h=mime-version:date:message-id:subject:from:to:content-type; bh=jPiLyFhgpfz2VIqfV4apdpikBLHEXQdWcfVhALNO1y0=; b=pq6yCyTna+FypR6fmbSFL0bMBMA8lE6MsT/676cQSqLAB47tHGLKfcpqQrzq9j8YK/ 7x3NkTEC5HYw/lF765Y6a9856xVmT+djM3wkEs+HbmUg9hk/zGxWalg4/oyBvjezV3LS 7o2RAVZgLJ+6XOl9vmPZ3kVUcnnCyQeMy5WzE7X5o/04gd4hyMqtQNkFtBvOFak/Cadf Rhc5X/KQ6oHjfQns5I4F4gkR53yC4uSM4nYW4vcbhbpu7W/oTJqBJCbAA5AsSrOHlSbC 8yoFqNfA6krLcykKwGaykdgQlWb6VjGTYg8pRBCpBgXIka8ER1mBWZ/3an23ir/dwNiw fefQ=MIME-Version: 1.0 X-Received: by 10.152.6.1 with SMTP id w1mr15017084law.91.1430650542376; Sun, 03 May 2015 03:55:42 -0700 (PDT) Received: by 10.25.147.67 with HTTP; Sun, 3 May 2015 03:55:39 -0700 (PDT) Date: Sun, 3 May 2015 12:55:39 +0200 Message-ID: Subject: INBOX SMTP,RDP,UNLIMITED WEBMAIL,FRESH LEADS,BANK LOGIN, FUND TRANSFER TO ALL BANKS IN USA..all available naw.. From: Ambroz Bohuslav To: undisclosed-recipients:; Content-Type: text/plain; charset=ISO-8859-1 Bcc: anntiran@polka.co.za X-Spam-Status: No score=-2.0 testsºYES_00=-1.9,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,FREEMAIL_FROM=0.001,SPF_PASS=-0.001 X-Postwall-Hash: 6783604196155578f8840a324049ac72 X-Antivirus: avast! (VPS 150503-0, 2015/05/03), Inbound message X-Antivirus-Status: Clean ----- Original Message ----- From: "Ambroz Bohuslav" To: "undisclosed-recipients:" Sent: Sunday, May 03, 2015 12:55 PM Subject: INBOX SMTP,RDP,UNLIMITED WEBMAIL,FRESH LEADS,BANK LOGIN, FUND TRANSFER TO ALL BANKS IN USA..all available naw.. > Halo. I am Ambroz Bohuslav from slovakia.......Get ur Admin RDP that > allows you to Send AMS without SMTP and it can send up to 10million > emails as long as the rdp work. it know as Local Host. hve shap inbox > smtp,rdp, webmail nd mailer dat goes 1k once, delivas inbox al domain > nd lasted for 1 mont, fresh updated MARCH. 2014 directors leads. > > Am can also make fund transfa to any bank in usa witout online info acess. > am can create online banking with domain/personalise email address. also > can create nd activate usa number to your mobile line from any destination > in the world. contact me on yahoo mensenger for reel deal. yahoo id is: > (haka.slovakthunder) --- This email has been checked for viruses by Avast antivirus software. http://www.avast.com
Advert
Return-path: <remittancedeptbankny@aol.com>Envelope-to: anntiran@polka.co.zaDelivery-date: Sat, 02 May 2015 16:17:07 +0200Received: from cpt-prewall-03.mweb.co.za ([196.28.150.153]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from <remittancedeptbankny@aol.com>) id 1YoYE7-0005Zz-04 for anntiran@polka.co.za; Sat, 02 May 2015 16:17:07 +0200Received: from cpt-viruswall-01.mweb.co.za ([196.28.149.21] helo=cpt-mx-08.mweb.co.za) by cpt-prewall-03.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from <remittancedeptbankny@aol.com>) id 1YoYE6-0007Hh-Uq for anntiran@polka.co.za; Sat, 02 May 2015 16:17:06 +0200Received: from cpt-mx-08.mweb.co.za (cpt-mx-08.mweb.co.za [196.28.149.158]) by cpt-viruswall-01.mweb.co.za (esets_smtp); Sat, 02 May 2015 16:17:06 +0200Received: from oms-m05.mx.aol.com ([64.12.133.81]) by cpt-mx-08.mweb.co.za with esmtp (Exim 4.84) id 1YoYE1-000Lzc-VQ for <anntiran@polka.co.za>; Sat, 02 May 2015 16:17:06 +0200Received: from omr-m06.mx.aol.com (omr-m06.mx.aol.com [64.12.143.80]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by oms-m05.mx.aol.com (AOL Outbound OMS Interface) with ESMTPS id 37CFB38003264 for <anntiran@polka.co.za>; Sat,  2 May 2015 09:59:25 -0400 (EDT)Received: from mtaomg-aai02.mx.aol.com (mtaomg-aai02.mx.aol.com [172.27.2.100]) by omr-m06.mx.aol.com (Outbound Mail Relay) with ESMTP id BA0B870031639; Sat,  2 May 2015 09:59:22 -0400 (EDT)Received: from core-aba05g.mail.aol.com (core-aba05.mail.aol.com [172.27.22.5]) by mtaomg-aai02.mx.aol.com (OMAG/Core Interface) with ESMTP id 6DD5D38000084; Sat,  2 May 2015 09:59:22 -0400 (EDT)X-MB-Message-Source: WebUISubject: To Your Attention My Dear.X-MB-Message-Type: UserMIME-Version: 1.0From: Miss Rebecca Ankoma Koffi <remittancedeptbankny@aol.com>Content-Type: multipart/alternative;  boundary="--------MB_8D252F7537C535D_ADC_D48A1_webmail-vm064.sysops.aol.com"X-Mailer: AOL Webmail BASICReceived: from 41.207.25.86 by webmail-vm064.sysops.aol.com (149.174.150.55) with HTTP (WebMailUI); Sat, 02 May 2015 09:59:22 -0400Message-Id: <8D252F7537C535D-ADC-79569@webmail-vm064.sysops.aol.com>X-Originating-IP: [41.207.25.86]Date: Sat, 2 May 2015 09:59:22 -0400x-aol-global-disposition: SX-SPAM-FLAG: YESDKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com; s=20140625; t=1430575162; bh=Kr55jiIBj/cHKqcc1gItWkVNUbple/+4LBw3WNhNyyE=; h=From:Subject:Message-Id:Date:MIME-Version:Content-Type; b=tX3Ht71/SWno9JiCpoDke3zuaab+P6EOI9jXbmG/dbD2XXTMzyHavuH2xuWSKWZVg  dt5+7MKp3w4XBvR4ZBbBazrJn21UNxQgD/PPtYapt09uSZcVscCallPwIzvfqklnPw  Sq84DRLvMZTvu6srxvpq9u3Lyksxs8ijMAANDTCQ=X-AOL-REROUTE: YESx-aol-sid: 3039ac1b02645544d83a3604X-Spam-Status: No score=6.2 tests=BAYES_00=-1.9,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,FREEMAIL_FROM=0.001,HTML_MESSAGE=0.001,LOTS_OF_MONEY=0.001,MALFORMED_FREEMAIL=1.429,MILLION_USD=3.247,MIME_QP_LONG_LINE=0.001,MISSING_HEADERS=1.021,MONEY_FROM_41=0.686,SPF_PASS=-0.001,T_RP_MATCHES_RCVD=-0.01,US_DOLLARS_3=1.754X-Postwall-Hash: 4dd151ce0881eb2433fbcaec9607e389X-Antivirus: avast! (VPS 150502-1, 2015/05/02), Inbound messageX-Antivirus-Status: Clean     ----- Original Message ----- From: Miss Rebecca Ankoma Koffi Sent: Saturday, May 02, 2015 3:59 PM Subject: To Your Attention My Dear. HOW ARE YOU TODAY?,Sorry if i have intruded into your privacy,it is a matter of life and death which forced me to send you this urgent massage. I am from the family of Ankoma koffi, my father is the head of cocoa industry whom Laurent Gbagbo used to finance his activities to preserved his grip on power but unfortunately things turn upside down when our house was attacked and burn in city of Duekoue There, i lost my mother and two brothers, After one week i found my father and my little brother in the hospital but before my fathers death, he inform me about his sum of US$15,100.000 (Fifteen Million one hundred thousand united state dollars he secured as a deposit and i was warned to look for a foreign partner and leave the country wity my brotherfor our future live. I am sincerely desire of your assistance if you can be trustworthy to secure the legacy process on my behalf.Yours Sincerely Miss Rebecca. This email has been checked for viruses by Avast antivirus software. www.avast.com
Click to view scam #121810 - Sent on May 3, 2015, 1:21 pm by remittancedeptbankny@aol.com
View the business attachment from Natasha Jones. SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.180 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121808 - Sent on May 3, 2015, 12:54 pm by quintino@cantv.net
    My Greetings  It may surprise you receiving this mail from me, since there was no previous correspondence between us.  Let me start by first introducing myself properly to you. My name is   Gabriel Michel Esq, a legal practitioner in Spain. I am personal Attorney to Late MR GERALD HUGO, an oil merchant who died in author crash 2008 with his wife and only daughter.My purpose of contacting you is for you to help in securing the fund left behind by my late client  to avoid it being confiscated or declared unclaimed deposit by the security company where this consignment valued US 8.500 000.00 (Eight Million, Five Hundred Thousand United States Dollars Only) were deposited by my late client before his death.  The security company has issued me a notice to present the next of kin to come for the claim of this deposit or it will be declared unclaimed deposit and the fund forfeited to the government.So far, all my efforts to locate any of the deceased relative have proved abortive. Hence, I have contacted you. I am actually asking for your consent to present you to the security company as the Next of Kin/beneficiary of my late client's deposit.Note that all the legal documentations to back up your claim as my client's Next of Kin have been taken care of. All I require is your honest cooperation to enable us achieving this great opportunity because if we don?t, the fund will be lost.I wish to point out that I want 10 percent of this money to be shared among the charity Organizations, while the remaining 90 percent is shared equally between us. This transaction will be executed under a legal arrangement. Therefore you have nothing to fear about. It is risk free.  I will use my position as the client?s attorney to guarantee the successful execution of this transaction. If you are interested, please contact me for more clarification.Waiting to receive your reply.          Regards,Gabriel Michel,                                                                                         Email, gabmichel22@yahoo.fr SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (paulchrist61[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121806 - Sent on May 3, 2015, 12:21 pm by paulchrist61@gmail.com
bkZZDQoNCqFtwsWl+rlxvHahbrHAsnqtbqZisd/AXKvhDQqhbcLFpfq5cbx2oW6tq7jLsdCk aA0KoW3CxaX6uXG8dqFuusawqKhxpKek9S+k9btStqEzRKFHxfawqKldwWC3fA0Kwdmms6fz pmiqurKjq3690MJJv++kVaZDuvSnfQ0KaHR0cDovL3NvYXYuZ29vZGJkLm9yZw0KDQqmcLVM qmuzc7WyIL3Qwkm/76H3s2+ko6xPqVWno6tIILK+pl6m3KaspfOnWLROpWmzc7WyDQoNCjFw UHBOYmJaSpamAssassin Report (spam score: 12.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (9123kzvmcs[at]ms24.hinet.net) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 2.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header
Click to view scam #121804 - Sent on May 3, 2015, 12:14 pm by 9123kzvmcs@ms24.hinet.net
Halo. I am Ambroz Bohuslav from slovakia.......Get ur Admin RDP that allows you to Send AMS without SMTP and it can send up to 10million emails as long as the rdp work. it know as Local Host. hve shap inbox smtp,rdp, webmail nd mailer dat goes 1k once, delivas inbox al domain nd lasted for 1 mont, fresh updated MARCH. 2014 directors leads. Am can also make fund transfa to any bank in usa witout online info acess. am can create online banking with domain/personalise email address. also can create nd activate usa number to your mobile line from any destination in the world. contact me on yahoo mensenger for reel deal. yahoo id is: (haka.slovakthunder)
Click to view scam #121802 - Sent on May 3, 2015, 11:55 am by
Begin forwarded message:From: "Wright Sue (DERBY TEACHING HOSPITALS NHS FOUNDATION TRUST)" <sue.wright17@nhs.net>Date: 3 May 2015 01:05:48 BSTTo: "Wright Sue (DERBY TEACHING HOSPITALS NHS FOUNDATION TRUST)" <sue.wright17@nhs.net>Subject: RE: News.     From: Wright Sue (DERBY TEACHING HOSPITALS NHS FOUNDATION TRUST) Sent: 02 May 2015 23:46 To: Wright Sue (DERBY TEACHING HOSPITALS NHS FOUNDATION TRUST) Subject: News. Jim McCullar has decided to donate funds to you contact him { jimmccullardonation@gmail.com } for more info.                                                                                                                                                           ******************************************************************************************************************** This message may contain confidential information. If you are not the intended recipient please inform the sender that you have received the message in error before deleting it. Please do not disclose, copy or distribute information in this e-mail or take any action in reliance on its contents: to do so is strictly prohibited and may be unlawful. Thank you for your co-operation. NHSmail is the secure email and directory service available for all NHS staff in England and Scotland NHSmail is approved for exchanging patient data and other sensitive information with NHSmail and GSi recipients NHSmail provides an email address for your career in the NHS and can be accessed anywhere ********************************************************************************************************************
Click to view scam #121800 - Sent on May 3, 2015, 11:38 am by sue.wright17@nhs.net
FROM: US AMBASSADOR TO Benin republicSenders Ambassador Michael Raynor,U.S. Embassy Benin rep Town HallCotonou, Benin Republic Good day Dear I want to inform you that I shall be coming to your country for an official meeting and i willbe bringing your funds of $1.2 million united state dollars along withme as part of compensation from the president of Benin republic for thoseaffected in scams activities in Benin republic but this time i will not gothrough customs because as an ambassador to Benin republic, I am a usgovernment agent and i have the veto power to go through customs. Assoon as i am through with the meeting i shall then proceed to youraddress. (Send your cell phone number and the address where you wantme to bring the package).You have really paid so much in this delivery that makes me wonder.You are a very lucky this time because i shall be bringing your fund myself andthere is nothing anyone can do about it.Your package $1.2 million united state dollars must be registered asan ambassadorial package for me to defeat all odds and the cost ofregistering it is $120 usd the fee must be paid by you via Money Gram and attach to me the payent slip so that all necessary arrangement can be made before time will be against us. i suppose to pay the fee on your behalf but due to the situation of your fund it's noted that you must be the sender of the fee.This development is coming now that the ministry wants to offset allyour outstanding payments to all our legal foreign beneficiariesaround the world in which your payment file was affected. As you mayknow(1). MONEY GRAM MONEY or WESTERN UNION TRANSFER TO:Recipient: Sylvester okekeCountry: Benin republicCity: Porto-NovoCountry code: 00229Text Question: okText Answer: okAmount: US$120.00As soon as you send the fee make sure you send me the paymentinformation. to this email address: ( ambmichaelraynor@mail2american.com ) or text it to my cell +229 6860 2702 or 00229 6860 2702My flight is Tuesday next week and i expect you to comply before thenso that the delivery can be completed. If you do not comply, then itwill not be my fault if you do not receive your package.Ambassador Michael Raynor,U.s. Ambassador to Benin republicSpamAssassin Report (spam score: 5.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.138.121.121 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (emj9450[at]att.net) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (emj9450[at]att.net) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #121799 - Sent on May 3, 2015, 11:15 am by emj9450@att.net
Activity Alert PERSONAL CHECKING/SAVINGS ACCOUNT IP-Conflict detected on your account Dear Valued Customer, We're letting you know that we've detected multiple IP-Conflict on your online account, which will result to restrictions and closure of your online account, Kindly verify your account below to ensure the safety of your assets and online account. For verification click http://www.bankofamerica.com/verify to restore and ensure the safety of your Account . Security Checkpoint To confirm the authenticity of messages from us, always look for this Security Checkpoint. You last signed in to Online Banking on 04/27/2015. Remember: Always look for your SiteKey® before entering your Passcode. We'll ask you for your Online ID and Passcode when you sign in. This is a service email from Bank of America. Please note that you may receive service emails in accordance with your Bank of America service agreements, whether or not you elect to receive promotional email. Read our Privacy Notice. Please don't reply directly to this automatically generated email message. Bank of America Email, 8th Floor-NC1-002-08-25, 101 South Tryon St., Charlotte, NC 28255-0001 Bank of America, N.A. Member FDIC. Equal Housing Lender © 2015 Bank of America Corporation. All rights reserved. SpamAssassin Report (spam score: 22.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [123.88.138.198 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bankofamerica.com] 3.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 NSL_RCVD_HELO_USER Received from HELO User -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.8 FSL_NEW_HELO_USER Spam's using Helo and User 1.2 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 3.1 FROM_MISSP_PHISH Malformed, claims to be from financial organization - possible phish 0.0 T_REMOTE_IMAGE Message contains an external image 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
----- Forwarded Message ----- From: Kate Northmore <info@realtime-offers.com> To: xxxxx xxxx Sent: Sunday, 3 May 2015, 18:31 Subject: Congrats xxxxx xxxx Congrats xxxxx xxxx, This is to confirm that you just won $1K. Follow this link Date: May 03 2015 Intended for: xxxxxx@yahoo.com.au Trouble with the link above? Paste this into your browser: Need some information? Find out more. You can unsubscribe by using this link
Click to view scam #121797 - Sent on May 3, 2015, 10:47 am by xi=db.2232@yahoo.com.au
I am delighted to inform you that the British Prime Minister in conjunction with United States Government have decided to call back all approved fund payment through offshore payment center following directives from UNITED NATIONS & WORLD BANK, and we have concluded arrangements to pay your beneficiary overdue fund via their Online Telephone Banking Funds Transfer System. no more atm card because of fake cards, Go ahead and make contact with the bank information below: Bank Name: USAA BANK. Contact Name: MR JOE MCCOMAS Email: info@usaabk.com Tel: 940 620 1151 Always keep me posted once contact is been made Mrs Marwan Ghaithal Tel:+ 234 9039634426 SpamAssassin Report (spam score: 38.8) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [94.126.144.46 listed in bb.barracudacentral.org] 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [94.126.144.46 listed in list.dnswl.org] 3.3 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.5 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (notice[at]presidency.com) 0.9 SPF_FAIL SPF: sender does not match SPF record (fail) 2.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.8 FSL_NEW_HELO_USER Spam's using Helo and User 1.2 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 1.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL 2.4 FROM_MISSP_USER From misspaced, from "User" 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 3.8 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.8 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope 2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool 4.2 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #121792 - Sent on May 3, 2015, 10:33 am by notice@presidency.com
From: customerservicealet@outlook.comSubject: VERIFY THIS URGENTDate: Sun, 3 May 2015 00:45:39 +0000To All E-mail Account User. VERIFY THIS EMAIL ADDRESS TO AVOID IMMEDIATE CLOSURE We have recently confirmed that your mailbox has exceeded the limit of 30 GB, which is as set by your manager and your are currently at 30.9GB. Different computers have logged into your mailbox account and multiple password errors have been entered. We are hereby suspending your account; as it has been used for fraudulent purposes. Now we need you to reconfirm your account information to us. Click your reply tab, fill in the columns below and send it back to us or your email account will be suspended permanently and you will not be able to create new e-mail to send or receive again until your reconfirm your account information. Name: .........................................User Email:...................................Password: ...................................Reconfirm Password:...................Date of Birth ................................City.......................Country or Territory......................Here are some ways to help you manage your account after you reconfirm your account.Create an archive - Set up a folder on your PC?s hard drive where you can save large attachments. Then just delete them from your inbox. You?ll still have them and your in-box will be that much smaller.Make your filters work for you- Did you know you can set up your E-mail account to immediately delete junk e-mail? Go to Options, and click Filters and reporting. Under the ?Delete junk e-mail? section, select immediately to delete junk e-mail right away. Once you?re finished, click Save and you?re done.Delete a bunch of mail at once- Go to your Junk and Deleted folders, and clear them out by clicking the ?Empty? button in the action bar.Sincerely,The Email Service Team© 2015. All Rights Reserved.
Click to view scam #121794 - Sent on May 3, 2015, 10:15 am by customerservicealet@outlook.com
Place Gulf Oil AD signs on your vehicle for $400 weekly. Reply if interested... SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121798 - Sent on May 3, 2015, 10:10 am by admin1@sirentel.net
UNITED NATIONS ORGANIZATION GENERAL ASSEMBLY PALAIS DES NATIONS, 1211 GENEVA 10, SWITZERLAND. Attention Beneficiary: Please be informed that you have $3,000.000.00 Lodged in Western Union to transfer to you as Compensation.from United Nations. Contact E-Mail: westenunionmoneytransferoutlet20@hotmail.com westenuniononey333@yandex.com claims@westenunionmoneytransferoutlet.1gh.in Thanks for your Prompt Response. Congratulations. MR. KASSYM-JOMART TOKAYEV DIRECTOR-GENERAL UNITED NATIONS ORGANIZATION SpamAssassin Report (spam score: 7.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: 1gh.in] 1.8 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP 1.3 MONEY_FRAUD_3 Lots of money and several fraud phrases
Click to view scam #121790 - Sent on May 3, 2015, 9:50 am by info@un.org
èº~¥S§??í¤W¦?v èº~¥S§??í¤W¦?v¡A¤@°_¥]¾i°ª¤¤¤k¥?AÀH®?µ·R¤¤¥X ¶W¥¿¤k¤j¥?A?¨?¿úÁ?N¨??W¨®¡A¶}©l¤º®g 3P ÃC®g ½?ö·?«¥kÁä½?s¶K¤W¤U¦Cºô§}Æ[¬?s§i http://ppt.cc/pgp8 SpamAssassin Report (spam score: 16.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 1.3 RATWARE_EGROUPS Bulk email fingerprint (eGroups) found 2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender e
Click to view scam #121786 - Sent on May 3, 2015, 9:39 am by qqarkhw@163.com
On Friday, May 1, 2015 11:16 PM, FBI Music Crime Office <whgu@mail.xjtu.edu.cn> wrote:Music Crimes DivisionFBI Headquarters, Washington, D.C.Federal Bureau Of InvestigationJ.Edgar Hoover Building935 Pennsylvania Avenue, Nw Washington, D.C. 20535-0001http://www.fbi.govAttention Criminal,We the FBI of United State have detected that you have downloaded music by Justin Bieber, there is now an International Arrest Warrant out for your arrest on the charges of crimes against music and impersonating a pre-pubescent schoolgirl.To clear your name, please send the amount of $5.99 to the following payment officerName: Harry StylesAddress: 1 Direction, LondonEmail: biebssuxcock@crapmusic.com
Click to view scam #121785 - Sent on May 3, 2015, 7:57 am by whgu@mail.xjtu.edu.cn