Logo



--  Please can you help me trace my mother's family members in your country?Dear Special one,My name is Beatrice Solin, 24yrs old girl from Syria. I lost my father and mother in Syrian civil war and the same rebels are still after my life so I ran to a neighboring country (Turkey) where my father secretly kept some money in a financial institution for his political ambition in Syria before his sudden death. My father was a gold merchant and politician before his untimely death by the Syrian Rebel because of his good relationship with President Assad.I ran to Turkey as a refuge without any of my personal documents because Syrian Rebel took over our house and the entire city so I had to save my life first. Now as the only surviving person and next of kin to my late father, according to Turkish law, there is no way I can apply for claim without my identity card or international passport so I need someone with identity card or international passport.Can you help me trace my mother's family members in your country because my late mother told me that she is from your country before her sudden death and I want to relocate to my mother's country since civil war in Syria is going higher everyday so I want to use my father's money to stand a charity foundation in my mother's country.Please I want you to assist me and receive $8.2m(Eight Million two hundred thousand dollars) that my father left in a secret account for his political ambition, I will like to visit you so we can use this money to set up a CHARITY FOUNDATION there in my father's name to assist the helpless people and motherless babies. I will give you 30% of this money if you assist me. I think it is the best way to assist helpless people and for my family name to be remembered. I am making arrangement to visit your country since I am no longer safe in my father's country because of the ongoing civil war.I will explain the whole thing in details once you reply to this message.Best Regards,Beatrice Solin SpamAssassin Report (spam score: 0.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sabeenyaman[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.66 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 NAME_EMAIL_DIFF Sender NAME is an unrelated email address 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #128744 - Sent on June 11, 2015, 2:34 pm by sabeenyaman@gmail.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/veyJjIjogOTMxNSwgImYiOiAwLCAibSI6IDg0NDIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Dearest Friend, My name is Rose Cutter. I am an American soldier with Swiss background, serving in the military with the army 3rd infantry division,With a very desperate need for assistance, I have summed up courage to contact you. I found your contact particulars in an address journal. I am seeking your kind assistance to move the sum of ( $ 3.2 million u.s.Dollars )Three Million, Two Hundred Thousand United States Dollars to you, as far as I can be assured that my share will be safe in your care until I complete my service here,This is no stolen money, and there are no danger involved. I am presently in a hospital recovering from injuries sustained in a suicide bomb attack. Source of money: Some money in various currencies was discovered in barrels at a farmhouse near one of Saddam's old palaces in Tikrit-Iraq during a rescue operation, an it was agreed by staff Sgt Kenneth Buff and I that some part of this money be shared among both of us before informing anybody about it since both of us saw the money first. This was quite an illegal thing to do, but I tell you what? No compensation can make up for the risk we have taken with our lives in this hell hole Of which my brother in-law was killed by a road side bomb last week. The above figure was given to me as my share, and to conceal this kind of money became a problem for me, so with the help of a British contact working here and his office enjoy some immunity, I was able to move the money to a security company in Thailand. They are now waiting for us to provide the name of beneficiary who they will transfer the funds to. The reason i want you to claim the funds on my behalf is that as a soldier,I cannot present a concrete evidence on how i made such a big amount of money down here. Besides the US Government is trying their best to keep their eyes on soldiers here in order to effect a high level of discipline among us.The moment i am sure that you are willing to assist me, I will give you the information of the security company and the security code of the Money. I want you to tell me how much you will take from this money for the assistance you will give to me. One passionate appeal I will make to you is not to discuss this matter with anybody, should you have reasons to reject this offer, please and please destroy this message as any leakage of this information will be too bad for us soldiers here in Iraq. I do not know how long we will remain here, and i have been shot, wounded and survived two suicide bomb attacks by the special grace of God, this and other reasons i will mention later has prompted me to reach out for help, i honestly want this matter to be resolved immediately, please contact me as soon as possible, my only way of communication is my private email contact{roselindacutter@outlook.com} Yours in Service. SERGENT ROSE CUTTER Camp MXP-512 Third Infantry Division Unit(T.I.D.U), Abul Uruj,bagdad,irag {roselindacutter@outlook.com} SpamAssassin Report (spam score: 8.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sgtrose_cutter1[at]yahoo.co.uk) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FOUND_YOU I found you... 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128741 - Sent on June 11, 2015, 2:01 pm by sgtrose_cutter1@yahoo.co.uk
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/heyJjIjogOTMxMiwgImYiOiAwLCAibSI6IDg0NDAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128739 - Sent on June 11, 2015, 1:56 pm by Cabo.Vida@toolsandtoolsak.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/oeyJjIjogOTMxMCwgImYiOiAwLCAibSI6IDg0MzksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128731 - Sent on June 11, 2015, 1:31 pm by Avant@toolsandtoolsak.com
Sent from my iPadBegin forwarded message:From: "it's simple" <uhu142@yahoo.de>Date: 11 June 2015 07:57:21 BSTTo: <cleonicolaidou@hotmail.co.uk>, <cleonj@hotmail.co.uk>, <cleonrize@hotmail.co.uk>, <cleoone@hotmail.co.uk>, Subject: Making money - easy and right now! Hello! My name is Peter Hicks, I'm an ordinary man, but I've found the way of earning more - Binary Options. Do you know it? I can show you how to use it, because now I can make $2,300 a week EXTRA, and you can do it as I do! Bye, Peter: Click here
Click to view scam #128734 - Sent on June 11, 2015, 1:20 pm by uhu142@yahoo.de
O segredo das celebridades para combater celulite e gordura! Ver no browserReportar SPAM    Esta mensagem foi enviada para [censored]@gmail.com.Pode em qualquer momento se descadastrar no link em baixo. Não deve responder a este email diretamente pois a sua solicitação poderá não ser respondida. Neste momento está recebendo as melhores ofertas do dia pelo serviço Melhor do Dia, um serviço completamente gratuito para que o usuario esteja sempre a par das melhores novidades e descontos. Caso queira deixar de receber nossas fantástica promoções.SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: atitudeemidia.com.br] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128735 - Sent on June 11, 2015, 1:20 pm by laura@atitudeemidia.com.br
Sent from my iPadBegin forwarded message:From: "Mercantile" <mani@pinnacleapparels.com>Date: 11 June 2015 02:37:28 To: undisclosed-recipientsSubject: Earthlink RDP, COMCAST RDP, Unlimited SMtp Fresh Tools updated.Earthlink RDPComcast RDPMystery ShopperMailers,Smtp,RDP,Leads,CpanelAll Tools updated for 100% working on cheap price and customer satisfaction.Online Live SupportVisit Us: www.SmtpMercantile.in
Click to view scam #128738 - Sent on June 11, 2015, 1:18 pm by mani@pinnacleapparels.com
Sent from my iPadBegin forwarded message:From: Tommy <tommy@cpsetech.com>Date: 11 June 2015 09:50:50 Subject: smartphone parts online wholesaleReply-To: Tommy <tommy@cps-mall.com> Untitled document Hi, CPS-mall is an online store wholesales smarphone parts & cases. we are looking for wholesalers around the world. prices will be updated on our website every two days. we also offer services for example,  QC & packing, warehouse rental, contacts with government, money collector, tour guide of market and so on you need. and we want banners and articles, if your websites have good traffics, please contact us. Kind regards Tommy tommy@cps-mall.com
Click to view scam #128733 - Sent on June 11, 2015, 1:17 pm by tommy@cpsetech.com
Sent from my iPhoneBegin forwarded message:From: ??????????? <info@rtk.lv>Date: 11 June 2015 02:14:28 To: <lsyj@cass.org.cn>, <princefred_taylor@tiscali.co.uk>, <ltgz00495@outlook.com>, <mhchen@ncnu.edu.tw>, <liang@188.net>, <ltgz00781@outlook.com>, <lth3243@daum.net>, <sales@redleaf-hk.com>, <jkuang@bupt.edu.cn>, <ltgz00567@outlook.com>, <ltq_qiqi@126.cn>, <niuniu0301@tianya.cn>, <sales@gddesheng.cn>, <mfgroup@netvigator.com>, <lu.liu@ukpass.org>, <917052531@pp.com>, <jweem@sese.org>, <LUCKYS1@PD.JARING.MY>, <lucy.tran@cnhlc.org.uk>, <lucy1971lyl@docsou.com>Subject: ?? ? ? ? ? ? ?????100???????????????? ?????????????????????????? ?????????? ???????????????????????????????????????????? ???????????????????????????????????????????????????? ?????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ?????????????????????????????????????????????????????????????????????????????????????????????????????????????? ?????????????????????????? ????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????????????????????? ????????????????????????????????????????????????????????????????????????????
Click to view scam #128728 - Sent on June 11, 2015, 1:16 pm by info@rtk.lv
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/qeyJjIjogOTMwOCwgImYiOiAwLCAibSI6IDg0MzgsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
ATTN DEAR: WE FINALLY CONCLUDED TO EFFECT YOUR FUND SUM OF ($1.5USD) VIA MoneyGram AS BEST AND EASIER WAY TO RECEIVE YOUR FUNDS IN ANY NEAREST MoneyGram IN YOUR CITY, BASED ON AGREEMENT WITH moneyGram DIRECTOR. YOU WILL PICKUP $5000 ONCE YOU CONTACT WITH ALL YOUR INFORMATION AS BELOW YOU?RE NAME. YOUR HOME ADDRESS YOU?RE COUNTY/CITY. DIRECT PHONE NUMBER. CONTACT REV. KELVIN MORGAN E-MAIL:(moneygrammoneytransferbj@outlook.com) IMMEDIATELY ISSUE YOU FIRST PAYMENT. BEST REGARDS, MR ROSE KOFFI SpamAssassin Report (spam score: 5.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.45 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.8 UPPERCASE_50_75 message body is 50-75% uppercase 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #128730 - Sent on June 11, 2015, 1:13 pm by koffirose@cantv.net
Editor HTML Online Limpe seu nome!         Limpeza do CPF no SPC (lojas), SERASA (bancos e cartões) e CCF (cheques). Protestos também serão excluídos. Seu nome ficará limpo, como se nunca tivesse sido usado antes. Quando consultado seu CPF, apresentará NADA CONSTA. Porém a dívida continuará nos locais de origem da mesma. Como é feito? Com a utilização de Login's e senhas especificas dos sistemas de Proteção. Quando você paga uma divida que possui restrição ativa, a empresa credora envia uma solicitação de Retirada. Portanto com tais login's e senhas Excluímos suas restrições  sem a solicitação da empresa credora. Outra opção é através da alteração da data em que a dívida é colocada no sistema. Pela lei toda dívida expira em 5 anos. O que fazemos é alterar a data de início de modo a fazer a dívida ?expirar? ENVIE 1 EMAIL PARA libercred@outlook.com e SOLICITE MAIORES INFORMAÇOES   SpamAssassin Report (spam score: 3.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: mailerpro.in] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: promta.in] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128723 - Sent on June 11, 2015, 1:13 pm by consultoriacontato@promta.in
Sent from my iPhoneBegin forwarded message:From: ?????????? <support@spsoft.net.cn>Date: 11 June 2015 11:31:09 To: <Ltd.86-22-83850191t.zHang@greenpine.com.cn>, <docsou.comghua001@docsou.com>, <1689016ebdoorhc@ebdoor.com>, <ltmobi388541@YYY.com>, <ltsdl@sia.com>, <xhp19c8@zdvod.com>, <info@sinodis.com.cn>, <ashish.g@excelpoint.com>, <lu.wang@dsm.com>, <FUQIANG@AJZQ.com>, <lu.zhang@hp.com>, <yuhongj@gsm.pku.edu.cn>, <huihui@258.com>, <cpc@peopledaily.com>, <lu136446@yopmail.com>,  <398685210@q.com>, <lu.chen@1hai.cn>, <qw@dce.com.cn>, <lu.yunbo@docsou.com>, <lujucaishao5@yopmail.com>Subject: 18:31:16  A??????????????????????????????????-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=--------------------        ???????????????????????????????????????????????? ?????????????????????????????????? http://www.fangchi.club/xinxi.htm ??????????? ?????????????????????????????????? ???????????????????????????????????????????????? ?????????? ????????????????????????????????? ?? ?43?(??) ???????????????????????????????????????????????????????????????
Click to view scam #128736 - Sent on June 11, 2015, 1:13 pm by support@spsoft.net.cn
Begin forwarded message:From: ?????????? <fy_lcft@nanhai.gov.cn>Date: 11 June 2015 09:16:32 To: <hoho@iis.sinica.edu.tw>, <hoian@thesinhTourist.vn>, <hoihiohiohioh@outlook.com>, <hoihong@macau.ctm.net>, <hoilee@hkstar.com>, <hoiyeungt2012@ymail.com>, <zzjky2009@gmai.com>, <hojim@kimo.com>, <chengcarolinei@elong.com>, <hokinchong@yahoo.ca>, <Hoktora@KraftAsia.com>, <info@strong-magnet.com>, <hokyung@lgesuppliers.com>,<hola_2005@europe.com>, <gemi@gemi.com.cn>, <holchile@entelchile.net>, <lajfl@asf.com>, <hold@holdglobe.com>, <holder@fs-master.com>, <Holding@aberger.de>Subject: 16:16:43  A??????????????????????????????????-=-=-=-=-=-=-=-=-=--=-=-=-=-=-=-=-=-=-=-=-=-=-=--------------------        ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ?????????????????????????????????? http://www.fangchi.club/xinxi.htm ???? ?????????????????????????????????????????????????? ????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? 11????????????????????????????????????11?????????????????????? ??????????????????????????????????????????????????????????????????????????????????????????????????????????????? ??
Click to view scam #128727 - Sent on June 11, 2015, 1:10 pm by fy_lcft@nanhai.gov.cn
Begin forwarded message:From: Primark <primark@kampen.bottomstir.com>Date: 11 June 2015 12:12:02 Subject: Claim Your £250 Primark VoucherReply-To: <primark@kampen.bottomstir.com> Claim Your £250 Primark Voucher Hello jonnyhu321, You have just been nominated to be our possible winner! We are happy to announce you could be our EXCLUSIVE WINNER of £1000 to spend at Primark. Dont miss your chance to claim this prize. Click Here To Download Your Voucher Everybody loves a bargain, which is why Primark is becoming one of the nation?s favourite high street retailers. Shopping in Primark is truly a bargain hunter?s paradise, and we?re giving one lucky winner the chance to bag some bargains with £1000 to spend in Primark! With stylish fashion at affordable prices you?ll be able to revamp your entire wardrobe with the very latest trends. Catering for women, men and children you could treat the whole family to something new! Primark also have a fantastic range of home products ? from fragranced candles, to velvet throws, to comfy cushions. With £1000 to spend you?ll be spoilt for choice! Enter today for your chance to win! Click Here for Removal Or send mail to: PMB #225 9975 Wadsworth Pkwy., Unit K2 Westminster, CO 80021, United States
Click to view scam #128732 - Sent on June 11, 2015, 1:09 pm by primark@kampen.bottomstir.com
Begin forwarded message:From: secure@paypal.com <intl_p@ypl.com>Date: 11 June 2015 00:29:32 Subject: Second Attempt: Customer account periodic reviewReply-To: secure@paypal.com <intl_p@ypl.com> Dear Customer,   After our first message that you didn't respond to, we have temporarily limited your account (blocked) activity. Original PayPal message was:"Starting JUN 2015 PayPal is making integrity checks related to his customers accounts, how they use the account and if the account is still used by the customer. If the customer account is not used for a longer period of time (2 month) it will be disabled by PayPal Team and then removed in the next two months of inactivity.   The procedures to disable and then delete the account according to the Terms and Conditions of usage will take place in 48 hours after this email was send. - The verification procedure requires a very short time from the customer. - The generated form attached in e-mail is only active for 48 hours.   If during this period the customer does not make verification account will be disabled until further notice." This is our second attempt to contact you in order to resolve the issue. If you do not respond your account will be set as inactive, completely blocked and marked for Removal.Verify your identity as quickly as possible and unlock your account to normal state.   Thank you for your understanding and apologize for any inconvenience that this may create.   Paypal Customers Service. Please note: This email was sent from a notification-only address that can't accept incoming email. Please do not reply to this message.
Click to view scam #128719 - Sent on June 11, 2015, 1:08 pm by secure@paypal.com
Advert
Begin forwarded message:From: ??????????? <bailu@szbailujs.com>Date: 11 June 2015 11:13:42 To: <leszmor@aol.com>, <amber8198@yam.com>, <market02@chemdatang.com>, <mastiffs@live.com>, <989@aggiecatholic.org>, <1326159068@q.com>, <kevin.k1970@msa.hinet.net>, <jomkghs671716@gucc1-magasin.com>, <jon@bocachess.com>, <kwilson@dcwis.com>, <jon@wipanda.com>, <paco.kh.chan@polyu.edu.hk>, <jon.gudmundsson@sjtu.edu.cn>, <417473496@q.com>, <ray_gabriella@aol.com>, <altekitalia@virgilio.it>, <hunain@ms27.hinet.net>, <jonasvallina@yahoo.es>, <jonathan.bird@hesco.com>, <jonathan.davies@iucn.org>Subject: ?? ? ? ? ? ? ?????100???????????????? ????????????????????? ?????????????????????????????????????????????????? ????????????????? ??????????????????????????????????? ??????????????????????????????????????????????????????????????????????? ???????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????????? ????????????????????????????? ??????????????????????????????????????????????????????????????????????????????????????????
Click to view scam #128718 - Sent on June 11, 2015, 1:06 pm by bailu@szbailujs.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/qeyJjIjogOTMyNSwgImYiOiAwLCAibSI6IDg0NDksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128714 - Sent on June 11, 2015, 1:02 pm by Military.com@toolsandtoolsak.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/leyJjIjogOTMwNywgImYiOiAxLCAibSI6IDg0MzcsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128715 - Sent on June 11, 2015, 12:55 pm by Mini.Cameras@toolsandtoolsak.com
NTER GOVERNMENTAL ACTION GROUP AGAINST MONEY LAUNDERING IN WEST AFRICA      (GIABA)    COTONOU BENIN Attention:  Beneficiary Our File Ref No: CCHS/97531/HS-CBN-00X201/10 We kept contacting you but in vain. Be informed that we have officially approved the part payment of your Overdue Inheritance/Contract entitlements programmed to be paid to you, following series of documents tendered by your Representative Mr. David L. Nielsen, and your Attorney Barrister John Swatz, of J. Swatz & Associates. They have presented a "Power of Attorney" duly signed by you in which was clearly stated that due to certain prevailing circumstances beyond your control, you could not finalize the payment process yourself, thus appointing Mr. D.L. Nielsen to act on your behalf. All payment documents have been forwarded to our appointed bank to pay the said amount to them. Therefore, confirm if the said Man and Attorney are your True Representatives, before our final order payment. Find below the account information they have presented for the transfer on your favor;     A/C Name: Blue Bell Realty, Inc., Bank: JP Morgan Chase Bank, 1 Chase Manhattan Plaza, New York , NY.10081 Bank Routing #:021000021 A/C #:227863934766     We look forward to your swift response.   BRIAN SAPATI Deputy Director General   SpamAssassin Report (spam score: 30.4) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.5 NSL_RCVD_HELO_USER Received from HELO User -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 2.8 YOU_INHERIT Discussing your inheritance 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FAKE_REPLY_C FAKE_REPLY_C 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 2.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
Click to view scam #128711 - Sent on June 11, 2015, 12:43 pm by sgarcia@libertyinsurance.com.ph
Get Funding for Your Small Business Today! .ufcirhwiw{color:#fc08a3;} SpamAssassin Report (spam score: 10.4) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: meddlingvomicineye.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.172 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: meddlingvomicineye.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: meddlingvomicineye.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/heyJjIjogOTMwNSwgImYiOiAwLCAibSI6IDg0MzYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128708 - Sent on June 11, 2015, 12:32 pm by WEN.Hair.Care@toolsandtoolsak.com
?Greetings from Dr. mohammad ouattara. AssalamuAlaikum. My Name is Dr. mohammad ouattara, I am a banker by profession. I'm from Ouagadougou, Burkina Faso, West Africa. My reason for contacting you is to transfer an abandoned $10.6M to your account. The owner of this fund died since 2004 with his Next Of Kin. I want to present you to the bank as the Next of Kin/beneficiary of this fund. Further details of the transaction shall be forwarded to you as soon as I receive your return mail indicating your interest.1) YOUR FULL NAME...............................(2) YOUR AGE AND SEX............................(3) YOUR CONTACT ADDRESS..................(4) YOUR PRIVATE PHONE N0..........(5) FAX NUMBER..............(6) YOUR COUNTRY OF ORIGIN..................(7) YOUR OCCUPATION.........................plesa Contact me with this emil Address mohammadouattara532@gmail.com Have a great day,Dr. mohammad ouattara.  SpamAssassin Report (spam score: 16.4) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sallma9[at]terra.com.pe) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.84.243.209 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (sallma9[at]terra.com.pe) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #128707 - Sent on June 11, 2015, 12:01 pm by sallma9@terra.com.pe
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/keyJjIjogOTMwMSwgImYiOiAwLCAibSI6IDg0MzQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Mon nom est RONELLE CRAMER je suis Franco-américaine, je suis actuellement Hospitaliser dans la clinique Ste ÉLISABETH Queensland à Londres, je vous contact pour un projet de Donation  (UN MILLION CINQ CENT MILLE EURO ) 1.500.000 Euros que je compte  faire don à une personne de bonne Moralité qui pourra savoir bien gérer les fonds ,intervenir dans le social et dans l'humanitaire, créer des Temples de Dieu ,desÉcoles et aider les enfants démunis. Je serai heureuse d'avoir une réponse devotre part, j?ai trop réfléchis avant de prendre cette décision, j?ai beaucoupprié dieu afin qu'il m'oriente vers son enfant pouvant accomplis cette mission,dieu a voulu que cette mission soit destiné à une personne physique comme vous.J?attends votre réponse sur mon adresse mail personnel E-mail:ronelle_cramer@yahoo.frQUE LA PAIX DE DIEU SOIT AVEC VOUSSpamAssassin Report (spam score: 13.6) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (katiacreazzo[at]alice.it) 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [41.138.90.67 listed in zen.spamhaus.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128706 - Sent on June 11, 2015, 11:54 am by katiacreazzo@alice.it
  Attention,We have deposited the check of your fund ($4.90000000USD) through Western Union department after our finally meeting regarding your fund,All you will do is to contact Western Union directorHe will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name_______________Address: ________________Country: _____________Phone Number: _____________Though,Johnson has sent $8000 in your name +2298074957or you call him as soon as you receive this email and tell him to give you the Mtcn, sender name andquestion/answer to pick the $8000 Please let us know as soon as you received all your fund,Johnson SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.45 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (office20036[at]yahoo.es ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 MONEY_FROM_41 Lots of money from Africa 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form
Click to view scam #128702 - Sent on June 11, 2015, 11:53 am by seemarf@cantv.net
Untitled Document Se non riesci a leggere questo messaggio, vedere online. Risparmi il 50% con le Affrancatrici Francotyp! clicca qui. Nuova tariffa Posta Light con le Affrancatrici Francotyp * 0,55 cent € (iva esclusa); quantitativi annui consentiti: minimo 1000 massimo 150.000 . Posta light è disponibile solo per affrancatrici dotate di connessione LAN, come la serie PostBase di Francotyp-Postalia. https://fp-francotyp.it Questo messaggio viene inviato via LeadsLeader. C a n c e l l a t i dalla lista SpamAssassin Report (spam score: 11.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: topreff.com] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: topreff.com] 0.0 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist [URIs: topreff.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: topreff.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: topreff.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128705 - Sent on June 11, 2015, 11:48 am by info@topreff.com
-------- Original Message -------- Subject: Order Date: 2015-06-08 10:13 From: Attia Ahmed To: Dear Sir/madam It is my earnest interest to contact you through your mail , as we have try most times to contact you through your telephone directory , but was unable to connect your business lines. Please mail us the offer of your products as mentioned in our attached file below alongst side your proforma invoice/, please refer to the attached and give us reply urgently . Regards, Mark Roy Phoenix Metrology Co.,Ltd Jaladhulagari Vill & P.O-Dhulagori P.S :sankrail Dist:-Howrah(W.B)-711302 Phone -033-66087100Ext-225 Fax - 033 -66087233 -- _____________________________________________________________________________ VINATÂM: Your local supply - Your global source - in Vietnam & Asia VI NA TÂM CO. LTD., Ho Chi Minh City (Zip70000), VIETNAM, Managing Dir. Le Thi Viet Trieu and Business Dev. Dir. R. W. Spiegler Register & VAT No: 0309763328, P:+84.(0)1273.9986.01, FAX:+84.(0)8.3771 2508 http://www.vinatam.com http://www.TWITTER.com/VINATAM
Click to view scam #128704 - Sent on June 11, 2015, 11:46 am by rukiattia@gmail.com
Your email won you $3,000,000.00 (Three million dollars) In the Commonwealth Of Nations E-mail Lottery. Contact Fast Way Couriers for claims, Name: Mr. Murray Duncan e-mail: fastway12@rogers.com Your Name: Your Age: Your country: Your Mobile: Regards, Waleed Raymond. SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [159.90.200.7 listed in bb.barracudacentral.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 HK_LOTTO_NAME HK_LOTTO_NAME 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (p_collection[at]att.net) 0.0 LOTS_OF_MONEY Huge... sums of money 0.2 HK_LOTTO HK_LOTTO
Click to view scam #128699 - Sent on June 11, 2015, 11:35 am by p_collection@att.net
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/keyJjIjogOTMwMCwgImYiOiAwLCAibSI6IDg0MzMsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 HTML_MESSAGE BODY: HTML inc
Hello,   I fully understand that you receive emails like these daily, but please mine is not a joke or a scam. I know very well about scam people play, because am a banker, I see things every day   Am Hon Steven Azulu, I work with a bank here in Togo as a branch manager, the last time in 2007 the late Kaddafi visited Togo with his aids for the (AU) meeting then, three of his security men came to open a secret dollars account with my branch, and I was the person who attended to both of them. What was deposited inside the both accounts then was huge $4 million dollars each.    when the account was opened I took all the opening forms to meet them at their guest house, because they do not want to use their real names to open the bank account even the pictures was not their real pictures. All arrangements were done properly for them because I was the branch manager.   Why am writing these proposal to you is because I want to leave the bank work and do something else on my own very soon. so I need to act fast and change both accounts details, to your own name, which will allow you to have full access of the account from anywhere in the world, and make transfer from my bank branch to your own account anywhere you want it. Even the account ATM card will be sent to you and with the ATM card, you can redraw from any machine anywhere you are. but the condition is myself and yourself will share the funds equally after we must have moved out all the funds in both accounts to a private account chosen by you. You do not need to be afraid am the branch manager, I will do my home work well, am the only person the bank can confirm from if they ask to find out anything about the account. I did some investigations about the two aids of the late Kaddafi, and found out that both of them died during the war in Libya. So it is my chance to act fast and do the business with you, because nobody can come for the claim of the funds if I resign, am the only person to testify and present the real owners.     I will do all the paper work in your name and even change the signature documents to be same with yours. I will want to see a reply from you, showing your interest and a promise that you will not fail or disappoint me when all is set. I don?t need to explain to you that these matter should be kept as a top secret, nobody should see these email apart from you please.   Waiting for your reply with your direct numbers. Then I will tell you the next action we should take because in 5 banking days we will smile, that is if you comply. Please reply to my private box at honsteven2015@yandex.com for security reasons.   Best Regard,   Hon. Steven Azulu Direct Line: +22891045806 Email: honsteven2015@yandex.com SpamAssassin Report (spam score: 10.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (yusufbala959[at]yahoo.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.138.91.102 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("hon. steven azulu" ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (yusufbala959[at]yahoo.com) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #128697 - Sent on June 11, 2015, 11:21 am by yusufbala959@yahoo.com
From Miss. Rose RichardAbidjan,Ivory Coast. Good day my dear,In confidence,i have to introduce myself for i am Miss. Rose Richard,21 years old,I am the only child of late Mr & Mrs. Yve Richard. I prayed before contacting you, please for God sake do not see my mail as embrassment as we do not know each other. I wish to request for your assistance in my efforts to procure the transfer of my inherited money for investment ventures under your care and directive,while i continue my education of there in your country. I inherited Six Million,Four Hundred Thousand Dollars ($6,400,000.00) here in my name with one of the prime bank in my country and I will require your assistance in receiving the transfer of my inherited money in your local account for investment purposes,as it is my wish to come over to your country to further my education while you take care of the investment of the money. Please i am an orphane and i need your assistance to transfer my inherited money to your country and also your assistance to secure a nice school for me in your country where I will continue my education.Please I am waiting to hear from you soonest.Yours sincerely,Miss.Rose RichardSpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (roserichard222[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (rose richard ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #128700 - Sent on June 11, 2015, 11:19 am by roserichard222@gmail.com
body {height: 100%; color:#000000; font-size:12pt; font-family:times new roman, new york, times, serif;}Zurich Insurance Company Ltd, offer?s all kinds of loan at a reduced interest rate of 3%.( Hire Purchase, Working Capital Loan, Fixed Capital Loan, Housing Loan, Educational Loan, Financial Guarantee, Business Loan and Share Loan etc. We borrow out Loan Amount of US$10,000.00, US$50,000.00, US$100,000.00, US$500,000.00 and up to US$1,000,000.00, (One Million US Dollars), we have been leasing out loans to those in financial stress and also for business expansion. Contact us today via e-mail on how to apply or call for more information.Thanks, best regards.Mr. Denise Walker (Chief Operating Officer)Tel: +44-7035935211,(44)-708-7628-520Contact E-mail: zurichinsurerco@foxmail.comSpamAssassin Report (spam score: 3.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.178 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128698 - Sent on June 11, 2015, 11:17 am by harini.velumani@kggroup.com
Advert
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/veyJjIjogOTI5OSwgImYiOiAwLCAibSI6IDg0MzIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128694 - Sent on June 11, 2015, 11:13 am by NewTires@toolsandtoolsak.com
SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.173 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (2098412985[at]qq.com) -0.0 SPF_PASS SPF: sender matches SPF record 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #128695 - Sent on June 11, 2015, 11:13 am by 2098412985@qq.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/veyJjIjogOTI5OCwgImYiOiAwLCAibSI6IDg0MzEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128689 - Sent on June 11, 2015, 10:54 am by ProbioSlim@toolsandtoolsak.com
Date: Thu, 11 Jun 2015 17:38:13 +0900From: larryjames622@gmail.comSubject: Welcome to the first lady Mrs. Michelle Obama Office.To: Welcome to the first lady Mrs. Michelle Obama Office.Good Day.I am Mrs. Michelle Obama this is to officially inform you that your overdue payment from West Africa Benin Republic total sum of ($20,000.000) twenty million us dollars is currently here in my office white house Washington DC and the funds will be delivered to you as soon as you get back to this office and comply with the requirement as needed to deliver your total fund to you as well. Your home address and your cell phone numbers is highly needed to complete this delivering to you as well,  Bear in mind that i am the only one that has your funds in regard to my husband Mr Barack Obama and you will have to pay the sum of $260.00 in Porto Nova Benin before your funds will be delivered to you today so get back to me with your home address and your phone number.Thanks Regard. Mrs. Michelle Obama,First Lady United State Of America,
Click to view scam #128692 - Sent on June 11, 2015, 10:50 am by larryjames622@gmail.com
DQoNCg0KRmFjZWJvb2sgQ29ycG9yYXRlIE9mZmljZSAmIEhlYWRxdWFydGVycw0KSU5URVJOQVRJ T05BTCBQUk9NT1RJT05TL1BSSVpFIEFXQVJELg0KQ0FURUdPUlk6IDJORA0KDQoNCllvdSBoYXZl IGJlZW4gYXBwcm92ZWQgdG8gcmVjZWl2ZSBhIEFUTSBhd2FyZCBvZiAkMTUwLDAwMCBmcm9tIEZh Y2Vib29rIENvcnBvcmF0ZSBPZmZpY2UgDQoNCg0KWW91ciB3aW5uaW5ncyBjYW4gYmUgYWNjZXNz IGJ5IGlzc3VpbmcgYW4gQVRNIGNhcmQuDQoNCkF3YXJkIFJlZmVyZW5jZSBjb2RlOiBGQi81NzUw NjE3MjUNCkZpbGUgbnVtYmVyOjc3ODAxMjA5L04NCkFUTSBDb2RlIDogQVRNODIyDQoNClRvIGNv bGxlY3QgQ2FyZCAsY29udGFjdCBhbmQgcmVjb25maXJtIHlvdXIgZGV0YWlscyB0byBMbG95ZHMg QmFuayB3aGljaCBoYXMgYmVlbiBtYW5kYXRlZCB0byBnaXZlIHlvdSBjYXNoIG91dHMgd2l0aCBi ZWxvdyBkZXRhaWxzIEFTQVA6DQo9PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PQ0KQ3VzdG9tZXIgQ2FyZQ0KaW5xZWNvbTAyMEB5YWhv by5jb20uaGsNCj09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0NCj09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09 DQoNCkZhY2Vib29rIGlzIG9uZSBvZiB0aGUgbGFyZ2VzdCBTb2NpYWwgTmV0d29ya2luZyBzaXRl IHdoaWNoIHZhbHVlZCBtb3JlIHRoYW4gJDEwMCBCaWxsaW9uIERvbGxhcnMgYW5kIGFsc28gZXhw ZWN0aW5nIGl0cyBPbmUgQmlsbGlvbiBVc2VycyB0byBjb21lIG1haW5seSBmcm9tIE1vYmlsZSBk ZXZpY2VzIHRoYW4gZGVza3RvcCBVc2VycyBieSB0aGlzIHllYXIgMjAxNCwgRmFjZWJvb2sgZm91 bmRlciBNYXJrIFp1Y2tlcmJlcmcgaGFzIGRlY2lkZWQgdG8gYm9vc3QgVXNlcnMgYW5kIENvbXBh bmllcyBhIFdJTkRPVyBPRiBPUFBPUlRVTklUWSBieSBMb3R0ZXJ5IFByb2dyYW0gYW5kIEluaXRp YWwgUHVibGljIE9mZmVyIHNhaWQgaW4gYSBwcmVzcyByZWxlYXNlLg0KDQoNCk9uY2UgYWdhaW46 IENPTkdSQVRVTEFUSU9OUyEhIQ0KUmVnYXJkcywNCg0KUHJvbW8gQ29vcmRpbmF0b3IuDQpGYWNl Ym9vayBNYW5hZ2VtZW50Lg0K SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: o.com.hk] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.203.67.170 listed in zen.spamhaus.org] 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.0 LOTS_OF_MONEY Huge... sums of money 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 MONEY_FROM_41 Lots of money from Africa
Click to view scam #128691 - Sent on June 11, 2015, 10:49 am by hr.wxlh@auchan.com.cn
From: "HM Revenue & Customs"<secretary@cabinet-office.gsi.gov.uk>Date: 11 June 2015 02:19:25 pm GMT+6Subject: Awaiting tax rebate paymentDear Customer,The application with reference number: 4GSN9PKVPPEG57E submitted by you or your employee to register for HM Revenue & Customstax rebate received 17th of february, has now been verified.We have decided to pay GBP 194.00 according to your annual calculations of your activity we hold for you.Kindly complete the tax refund request and allow 1-3 working days to process it.Please download the document attached to this email and confirm your tax refund.A refund can be delayed for a variety of reasons. For example: Submitting invalid records or applying after the deadline.Yours sincerely,The Team HM Revenue & Customs.Please do not reply to this e-mail as this is only a notification. Mail sent to this address cannot be answered.
Click to view scam #128690 - Sent on June 11, 2015, 10:45 am by
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/geyJjIjogOTI5NywgImYiOiAwLCAibSI6IDg0MzAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Good day, i'm sorry for contacting you but i have a very urgent business proposer at hand. Kindly do acknowledge this message if interested, with this email: barr.ramon_castellon@europe.com Warm regards, Barr.Ramon Castellon. Esq. SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: europe.com] 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.203.67.173 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #128688 - Sent on June 11, 2015, 10:30 am by info@esq.com
Hello,Safco International Gen.Trading Co. (L.L.C.) strongly aspire to be the leading food and non-food products importer, distributor in the Middle East with a clear business vision. We engage in series of trade based businesses ranging from importing to contracting, consulting and distribution. To cope with our current business demand we are looking for reliable manufacturers and suppliers.We have several different businesses, which operate as trading, as well as wholesale and distribution and We wish to inquire about your products, please kindly revert with a quotation for both FOB and CNF so we can compare, also drop your direct mobile number or Skype address so we can talk. Awaiting your immediate response,Ms. Helen XaivierSecretarySafco International Gen.Trading Co. (L.L.C.)P.O.Box ? 112690Al Ras, Dubai, UAE SpamAssassin Report (spam score: 4.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.181 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (safcogen.trading[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #128682 - Sent on June 11, 2015, 10:23 am by safcogen.trading@gmail.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/keyJjIjogOTI5NSwgImYiOiAwLCAibSI6IDg0MjgsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 5.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128684 - Sent on June 11, 2015, 10:18 am by Toco.Warranty@toolsandtoolsak.com
Untitled document Hi, CPS-mall is an online store wholesales smarphone parts & cases. we are looking for wholesalers around the world. prices will be updated on our website every two days. we also offer services for example,  QC & packing, warehouse rental, contacts with government, money collector, tour guide of market and so on you need. and we want banners and articles, if your websites have good traffics, please contact us. Kind regards Tommy tommy@cps-mall.com SpamAssassin Report (spam score: 11.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cps-mall.com] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: wytyf.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: wytyf.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image
Click to view scam #128686 - Sent on June 11, 2015, 10:02 am by tommy@cpsetech.com
If you cannot click the link above, Copy & Paste this link: http://toolsandtoolsak.com/ueyJjIjogOTI5NCwgImYiOiAwLCAibSI6IDg0MjcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: toolsandtoolsak.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: toolsandtoolsak.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128678 - Sent on June 11, 2015, 9:58 am by Pharmacy@toolsandtoolsak.com
Paypal .ReadMsgBody { width: 100%; } .ExternalClass { width: 100%; } *[class=button_style] { border-radius: 7px !important; -webkit-border-radius: 7px !important; -moz-border-radius: 7px !important; -o-border-radius: 7px !important; -ms-border-radius: 7px !important; } *[class=button_style]:active { background: #008bdb !important; } *[class=button_style]:hover { background: #008bdb !important; } /* ---------------------- IPAD ---------------------- */ @media only screen and (min-device-width: 700px) and (max-device-width: 1024px) { *[class=display_on] { display: block !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_app_display_on] { margin-left: 187px !important; display: block !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_mobapp] { display: block !important; width: 698px !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } } /* END IPAD */ /* ---------------------- PHONE ---------------------- */ @media only screen and (max-device-width: 480px), only screen and (device-aspect-ratio: 9/16), only screen and (device-aspect-ratio: 5/8) and (max-width : 400px), only screen and (device-aspect-ratio: 3/5) { /* ------ OVERALL TABLE CONTROLS ------ */ *[class=display_on] { display: block !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_app_display_on] { display: block !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=no_mobile_all] { display: none !important; } *[class=no_mobile_phone] { display: none !important; } *[class=mobile_table_width_social] { display: block !important; width: 320px !important; float: left !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_table_width] { width: 320px !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=column_split_preheader] { display: block !important; width: 320px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 5px 3px !important; } *[class=mobile_body_table_width_pad29_4up_1] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; } *[class=column_split_large_promo_hero] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; } *[class=column_split_large_promo_hero278] { display: block !important; width: 278px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; } *[class=column_split_bml_banner] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 16px 0 0 0 !important; } *[class=column_split_statement_login] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 16px 0 0 0 !important; } *[class=column_split_bml_banner_phone] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 5px 0 0 0 !important; } *[class=column_split_one_up_large_image] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 0 0 10px 0 !important; } *[class=column_split_one_up_large_image278] { display: block !important; width: 278px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 0 0 10px 0 !important; } *[class=column_split_one_up_large_text] { display: block !important; width: 260px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 0 !important; } *[class=mobile_body_table_width_pad29_3up] { display: block !important; width: 278px !important; height: auto !important; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad29_4up] { display: block !important; width: 278px !important; height: auto !important; max-height: inherit !important; overflow: visible !important; padding: 0 !important; } *[class=mobile_body_table_width_pad29_5up] { display: block !important; width: 278px !important; height: auto !important; max-height: inherit !important; overflow: visible !important; padding: 0 !important; } *[class=mobile_body_table_width] { width: 318px !important; /* 320px - 2px border */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_mobapp] { display: block !important; width: 318px !important; /* 320px - 2px border */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad29] { display: block !important; width: 260px !important; /* 320px - 2px border - 29px left padding - 29px right padding */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad20] { width: 278px !important; /* 320px - 2px border - 20px left padding - 20px right padding */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_only_body_table_width_pad20] { width: 278px !important; /* 320px - 2px border - 20px left padding - 20px right padding */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=addPadding25h] { padding-bottom: 25px !important; } *[class=removePadding] { padding: 0 !important; } *[class=showmobile]{ display:block !important; width:318px !important; height:auto !important; padding:0; max-height:inherit !important; overflow:visible !important; } *[class=showmobile320]{ display:block !important; width:320px !important; height:auto !important; padding:0; max-height:inherit !important; overflow:visible !important; } *[class=showmobileApp]{ display:block !important; width:318px !important; height:auto !important; padding:0; max-height:inherit !important; overflow:visible !important; } /* ------ HEADER CONTROLS ------ */ *[class=head_top_320px] { display: block !important; } *[class=head_top_160px] { display: none !important; } *[class=head_top_220px] { display: none !important; } /* ------ BODY SPACER CONTROLS ------ */ *[class=img_body_spacer] { width: 318px !important; } *[class=bml_banner_height_spacer] { width: 20px !important; height: 130px !important; } *[class=leftRightMargin20] { width: 20px !important; } /* ------ IMAGE CONTROLS ------ */ *[class=mobile_hero_width] { width: 318px !important; height: auto !important; } *[class=mobile_promo_hero_width] { width: 194px !important; height: auto !important; margin: 20px 0 0 0 !important; } *[class=one_up_small_image] { margin: 0 0 0 0px !important; } *[class=body_horizontal_rule] { width: 318px !important; height: 1px !important; } *[class=mobile_promo_hero_width_4_up] { width: 138px !important; height: auto !important; } *[class=mobile_promo_hero_width_5_up] { margin: 0 !important; } *[class=mobile_app_width] { width: 235px !important; height: 10px !important; } *[class=mobile_app_button_width] { width: 95px !important; height: 1px !important; } *[class=oneUpSmallSpacer] { width: 30px !important; height: 20px !important; display: block !important; float: left !important; overflow: visible !important; text-align: left !important; padding: 0 !important; } /* ------ TEXT CONTROLS ------ */ *[class=text_darkblue_header] { font-size: 28px !important; } *[class=text_lightblue_header] { font-size: 28px !important; } *[class=text_gray_paragraph] { font-size: 14px !important; } .appleLinksBlue a { color:#009CDE !important; text-decoration: none !important; } .appleLinksGrey a { color:#666666 !important; text-decoration: none !important; } /* ------ UTILITY NAV CONTROLS ------ */ *[class=mobile_table_width_utility_nav_phone] { display: block !important; width: 320px !important; float: left !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_table_width_utility_nav] { display: block !important; width: 320px !important; float: left !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=utility_nav] { /*display: block !important; background: #666 !important; color: #fff !important; border-radius: 5px !important; -webkit-border-radius: 5px !important; -moz-border-radius: 5px !important; width: 320px !important; padding: 5px 0 !important; margin: 5px 0 !important; line-height:26px !important;*/ font-size: 12px !important; text-align: center !important; } *[class=ultility_nav_padding] { padding: 19px 0 21px 0 !important; text-align: center; width: 320px !important; } *[class=column_split_utility_nav] { display: block !important; width: 320px !important; float: left !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } /* ------ BUTTON CONTROLS ------ */ *[class=button_style] { border-radius: 7px !important; -webkit-border-radius: 7px !important; -moz-border-radius: 7px !important; -o-border-radius: 7px !important; -ms-border-radius: 7px !important; } *[class=button_style]:active { background: #009CDE !important; } *[class=button_style]:hover { background: #009CDE !important; } *[class=mobile_button] { width: 278px !important; } /* ------ FOOTER CONTROLS ------ */ *[class=horizontal_rule] { width: 320px !important; height: 2px !important; } } /* END PHONE CSS */ /* ---------------------- TABLET ---------------------- */ @media only screen and (min-device-width: 481px) and (max-device-width: 699px) { /* ------ OVERALL TABLE CONTROLS ------ */ *[class=display_on] { display: block !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_app_display_on] { margin-left: 75px !important; display: block !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=no_mobile] { display: none !important; } *[class=mobile_table_width] { display: block !important; width: 480px !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=column_split] { display: block !important; width: 480px !important; float: left !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=column_split478] { display: block !important; width: 478px !important; float: left !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width] { display: block !important; width: 478px !important; /* 480px - 2px border */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_mobapp] { display: block !important; width: 478px !important; /* 480px - 2px border */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad29] { display: block !important; width: 420px !important; /* 480px - 2px border - 29px left padding - 29px right padding */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad20] { display: block !important; width: 438px !important; /* 480px - 2px border - 29px left padding - 29px right padding */ height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad29_3up] { display: block !important; width: 134px !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad29_4up] { display: block !important; width: 98px !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=mobile_body_table_width_pad29_5up] { display: block !important; width: 78px !important; height: auto !important; padding: 0; max-height: inherit !important; overflow: visible !important; } *[class=column_split_bml_banner] { display: block !important; width: 420px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 16px 0 0 0 !important; } *[class=column_split_statement_login] { display: block !important; width: 210px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; padding: 8px 0 0 0 !important; } *[class=mobile_body_table_width_pad29_4up_1] { display: block !important; width: 420px !important; float: left !important; height: auto !important; max-height: inherit !important; overflow: visible !important; text-align: left !important; } *[class=addPadding25h] { padding-bottom: 25px !important; } *[class=showmobileApp]{ display:block !important; width:448px !important; height:auto !important; padding:0; max-height:inherit !important; overflow:visible !important; } /* ------ HEADER CONTROLS ------ */ *[class=head_top_320px] { display: block !important; } *[class=head_top_160px] { display: block !important; } *[class=head_top_220px] { display: none !important; } /* ------ BODY SPACER CONTROLS ------ */ *[class=img_body_spacer] { width: 478px !important; } *[class=bml_banner_height_spacer] { width: 20px !important; height: 100px !important; } *[class=leftRightMargin20] { width: 20px !important; } *[class=three_up_horizontal_spacer_19] { width: 19px !important; } *[class=three_up_horizontal_spacer_9] { width: 9px !important; } *[class=four_up_horizontal_spacer_7] { width: 7px !important; } *[class=four_up_horizontal_spacer_4] { width: 4px !important; } *[class=five_up_horizontal_spacer_1] { width: 4px !important; } *[class=five_up_horizontal_spacer_6] { width: 6px !important; } /* ------ IMAGE CONTROLS ------ */ *[class=mobile_hero_width] { width: 478px !important; height: auto !important; } *[class=mobile_promo_hero_width] { width: 134px !important; height: auto !important; } *[class=mobile_promo_hero_width_4_up] { width: 98px !important; height: auto !important; } *[class=mobile_promo_hero_width_5_up] { width: 78px !important; height: auto !important; } *[class=body_horizontal_rule] { width: 478px !important; height: 1px !important; } *[class=mobile_app_width] { width: 398px !important; height: 10px !important; } *[class=mobile_greyspacer436] { width: 436px !important; height: 1px !important; } *[class=mobile_app_button_width] { width: 173px !important; height: 1px !important; } *[class=oneUpSmallSpacer] { width: 30px !important; height: 20px !important; } /* ------ TEXT CONTROLS ------ */ *[class=text_darkblue_header] { font-size: 32px !important; } *[class=text_lightblue_header] { font-size: 32px !important; } *[class=text_gray_paragraph] { font-size: 14px !important; } .appleLinksBlue a { color:#009CDE !important; text-decoration: none !important; } /* ------ UTILITY NAV CONTROLS ------ */ *[class=utility_nav_spacer] { width: 10px !important; } *[class=mobile_table_width_social] { width: 78px !important; } *[class=mobile_table_width_utility_nav] { width: 400px !important; } *[class=mobile_table_width_utility_nav_phone] { display: none !important; } /* ------ FOOTER CONTROLS ------ */ *[class=horizontal_rule] { width: 480px !important; height: 2px !important; } /* ------ BUTTON CONTROLS ------ */ *[class=button_style] { border-radius: 7px !important; -webkit-border-radius: 7px !important; -moz-border-radius: 7px !important; -o-border-radius: 7px !important; -ms-border-radius: 7px !important; } *[class=button_style]:active { background: #008bdb !important; } *[class=button_style]:hover { background: #009CDE !important; } *[class=mobile_button] { width: 278px !important; } } /* END TABLET CSS */ Update Your Account Now Your account will be limited, please update your account information in order to continue and to ensure the best services Update You Account All this for Protect Your Account With New Update of Paypal Case ID Number: PP-001-636-133-457 Update My Account 724340554602432166 SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.173 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: paypal-communication.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_REMOTE_IMAGE Message contains an external image
Click to view scam #128680 - Sent on June 11, 2015, 9:41 am by soludopublishing@gmail.com
Hello My Beloved One, Please bear with me i am writing this mail to you with tears and sorrow from my heat,My name is Miss Mary  Kipkalya, 25yrs old single female never married, I'm from Kenya in East Africa. My father was the former Kenyan road Minister. He and Assistant Minister of Home Affairs Lorna Laboso had been on the Cessna 210, which was headed to Kericho and crashed in a remote area called Kajong, in western Kenya. I lost my father on that day, Secondly because of the political crisis and bomb explosions with kidnapping from the rebels in Africa, Mostly what happened at the university on the date 02 April 2015, Somali militants burst into a university in eastern Kenya on Thursday and killed nearly 150 students, I am afraid to continue my life and studies I am now in a nearby country call Burkina Faso (West Africa) through the help of the united Nations,Please read more from the BBC websitehttp://news.bbc.co.uk/2/hi/africa/7446832.stmhttp://www.breakingnews.com/topic/nairobi-nairobi-area-ke/http://www.dailymail.co.uk/news/article-3022586/Masked-gunmen-launch-attack-morning-prayers-Kenyan-university.htmlI am contacting you because I want you to stand as my guardian and Trustee in the management of a sum $8.5 Million u.s dollars that my late father left for me before he died in one of the banks in Burkina Faso West Africa. I am the only daughter of my parents and I am ever ready to offer you 40% for your help in receiving this fund in your country also you will recommend a good university where I will continue my studies; I will give you more details and the reply from the bank on my arrival here to find how the fund can be release to me as the next of Kin,I am now in A mission refugee camp here in Burkina Faso to hide myself and wait for the transfer,I hope you will read and understand my present situation also I pray God will touch your heart to help me out from here , I promise to spend the rest of my life over there in your country also Please take me as part of your family or your daughter, the fund is legally deposited also will be legally transferred to your bank account, The Bank transfer director Advised me to present someone who will stand as my legal trustee also provide  account where the fund will be transferred, I will send my photos and passport with transfer documents as soon as I read from you indicating your seriousness in helping me out from here to a better place where I will start a new life and complete  my studies,I hope to hear from you soon, May truth and love be the guiding word in my refuge, Regard Love,Miss Mary Kipkalya Kones.Sorry if you received this letter in your spam, is due to recent connection error here in the country.SpamAssassin Report (spam score: 9.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [67.195.87.84 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mary.kipkalya[at]ymail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 BODY_URI_ONLY Message body is only a URI in one line of text or for an image
Click to view scam #128683 - Sent on June 11, 2015, 9:40 am by marykipkalya26@gmail.com
mystery shopper® is accepting applications for qualified individuals (18+) to become mystery shoppers and merchandisers. Its fun and rewarding, and you choose when and where you want to shop Wal-mart, Rite-aid,Walgreen e.t.c . There is no charge to become a shopper and you do not need previous experience. After you sign up, We would pay $200 per assignment which would come in the form of a cashiers check along with comprehensive details in regards your evaluation assignment. Apply now to become a mystery shopper®.   Best Regards, Peter JohnsonSecret Shopper Inc Copyright (c) 2015All Rights Reserved. SpamAssassin Report (spam score: 1.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (coconnor14[at]aol.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [64.12.81.69 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (coconnor14[at]aol.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 MISSING_MID Missing Message-Id: header 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #128676 - Sent on June 11, 2015, 9:35 am by Coconnor14@aol.com