Logo



Sent from my iPadBegin forwarded message:From: "Email Service" <officalmail@absa.co.za>Date: 19 March 2015 00:24:02 GMTSubject: Settings Your mailbox has exceeded the storage limit is 1 GB, which is defined by the administrator, are running at 99.8 gigabytes, you can not send or receive new messages until you re-validate your mailbox.To renew the mailbox kindly CONFIRMThank you!Yahoo Mail system administrator!WARNING! Protect your privacy. Logout when you are done and completelyexit your browser.
Click to view scam #113515 - Sent on March 19, 2015, 11:55 am by officalmail@absa.co.za
Sent from my iPhoneBegin forwarded message:From: Jenny Shine <jenny@funnwin.com>Date: 18 March 2015 04:51:58 GMTSubject: Lu winning notificationReply-To: Reply@funnwin.com Congratulations L Your email address was selected! We are pleased to inform you have received 2OFREESPINS! Email Draw #54685 Winners:1. MollieScott@xxxx.xxx2. Henry_Walters@xxxxxxx.xxx3. lu2345@aol.com4. Lola82Wade@xxxxxxx.xxx To enjoy this, please click the button below and follow the instructions on the website. Follow this Links will be enabled in your inbox folder only In order to unsubscribe from this mailing list, please click here
Click to view scam #113521 - Sent on March 19, 2015, 11:54 am by jenny@funnwin.com
Sent from my iPhoneBegin forwarded message:From: "Low cost multi monitor video wall solution with IP Manager camera supported / Attn: Technical" <hffv5@it.gghhge.com>Date: 19 March 2015 07:17:43 GMTSubject: Low cost multi monitor video wall solution with IP Manager camera supported / Attn: Technical????????Reply-To: "Low cost multi monitor video wall solution with IP Manager camera supported / Attn: Technical" <hffv5@it.gghhge.com> ????? Low cost multi monitor video wall solution with IP Manager camera supported / Attn: Technical ???? Low cost multi monitor video wall solution with IP camera supported Attn Technical Manager2 Low cost multi monitor video wall solution with IP camera supported Attn Technical Manager2 2015?2?4? ????Low cost multi monitor video wall solution with IP Manager camera supported / Attn: Technical ???? ????? ?? Low cost multi monitor video wall solution with IP Manager camera supported / Attn: Technical ???? Dear Sirs, After visiting your web-site I decided to contact your esteemed company as one of the leaders of digital signage field . MSP5000 is a multi monitor video wall processor, supporting to up 32 channel display monitor. What is more MSP5000 can compatible with multi capture type, including IP camera ,DVI,VGA SDI and BNC .The PC and FPGA architecture offer users with stable, flexible and cost effective image processing capabilities. All these features make it a good choice for surveillance application . I would appreciate if you forward this letter to Technical Manager or to other expert responsible for technical integration of new products in your company, or provide me with his contact for we could discuss all the details of our future cooperation.Your early reply is highly appreciatedAnna ???????????????????????????????????? https://picasaweb.google.com/lh/sredir?uname=101436064713406718801&target=ALBUM&id=6127842142082669073&authkey=Gv1sRgCJPts6OR5tb-Gg&invite=CJX9oVM&feat=email ?????????????????????????????????? Picasa ???????
Click to view scam #113514 - Sent on March 19, 2015, 11:52 am by hffv5@it.gghhge.com
HI
Begin forwarded message:From: edwincole@manresa.netDate: 18 March 2015 18:19:35 GMTTo: barrister.tonynwaigwe@gmail.comSubject: HIDear friend.I am Barrister Tony Nwaigwe , a lawyer and the personal attorney to late client who died alongside with his wife and their only son in auto crash here in Togo which claimed the lives of his family. On their way back from a short holiday here in my country Togo.The main reason why I have contacted you is on the issue of (kinship). I want you to stand as the real next of kin to my late client in order for this huge sum of money, which he left behind before he died, valued (USD $7,500,000,00)to be transferred over to you there in your country for our mutual benefits instead of it been seized by the government of this country and the unscrupulous top bank officials as they are planning to do.Thanks, waiting to confirm your urgent response immediately in my private email adress (barrister.tonynwaigwe@gmail.com) as soon as you confirm this letter today.Best regards,Edwin Cole Secretary to,Barrister Tony Nwaigwe.From Lome-Togo+228 90 93 21 85.
Click to view scam #113517 - Sent on March 19, 2015, 11:50 am by edwincole@manresa.net
Begin forwarded message:From: "Dr. Norbert Reithofers"<JamesMcGill312@Earthlink.net>Date: 19 March 2015 06:54:27 GMTSubject: Dear BMW Enthusiast (Your secret pin code Number BMW: 2551256003/15)Reply-To: <bmwautomobile3600@gmail.com> Dear BMW Enthusiast This is to inform you that you have been selected for a prize of a brand new 2014 Model BMW 7 Series Car and a Check of $800,000.00 United States Dollars from international programs held at the 1st section of 2015, here in the UNITED STATES OF AMERICA. The selection process was carried out through random selection in our computerized email selection system (ESS) from a database of over 250,000 email addresses drawn from all the continents of the world which you were selected. The BMW Lottery is approved by the British Gaming Board and also Licensed by the International Association of Gaming Regulators (IAGR). To begin the processing of your prize you are to contact our fiduciary claims department for more information as regards procedures to claim your prize. Name:  Mr. David Mark Email: bmwautomobile3600@gmail.com Contact him by providing him with your secret pin code Number BMW: 2551256003/15. You are also advised to provide him with the under listed information as soon as possible: 1. Name in full. 2. Address. 3. Nationality. 4. Age. 5. Occupation. 6. Phone/Fax. 7. Present Country. 8. Email address. 9. Pin code Number BMW:2551256003/15 Dr. Norbert Reithofers. THE BMW SALES DIRECTOR PROMOTIONS BMW SALES LOTTERY DEPARTMENT UNITED STATES OF AMERICA.
Click to view scam #113513 - Sent on March 19, 2015, 11:50 am by JamesMcGill312@Earthlink.net
    Important: You need to verify your BT ID Hello, You haven't verified your BT ID yet. You need to verify it so you can go online to see your bills, products and extras, including the BT SmartTalk and BT Sport Apps. Verify your BT ID now. You might need your BT account number for this ? you'll find it at the top of your bill. We'll send you a confirmation email once your account's up and running. Need more help? Please don't reply to this email as we won't get your message. If you've got any questions, or for more ways to get in touch, go to http://www.bt.com/help. Thanks for choosing BT, Warren Buckley Managing Director, Customer Service     See your account online Verify your BT ID now to see your bills, products and extras online.   This is an automatic email, so please don't reply. To ensure future emails from BT are delivered to your inbox and not treated as spam, please add ebilling@bt.com to your address book. This email was sent to you at because you subscribe to BT services. Log in to BT    |     Contact us    |     Privacy policy© British Telecommunications plc 2015. Registered Office: 81 Newgate Street, London EC1A 7AJ.Registered in England No.1800000. URN:51150.0.0.0   SpamAssassin Report (spam score: )
Click to view scam #113511 - Sent on March 19, 2015, 11:43 am by ebilling@bt.com
ChEck_out_tHe_LateST_inReplacemeNt_windows SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image
Click to view scam #113509 - Sent on March 19, 2015, 11:32 am by contact@dispersion.carpetlan.gen.in
Äëÿ ïðîñìîòðà âåá-âåðñèè ïèñüìà êëèêíèòå çäåñü Íàëîãîâîå ïëàíèðîâàíèå äëÿ óêðàèíñêîãî áèçíåñà ïîñðåäñòâîì íåðåçèäåíòíûõ ñòðóêòóð. Ïðàêòèêà ïðèìåíåíèÿ íàëîãîâîãî çàêîíîäàòåëüñòâà 21 ìàðòàã. Êèåâ, Ñïîðòèâíàÿ ïëîùàäü, 1à, 17 ýòàæ Áèçíåñ öåíòð «Ãóëëèâåð» Ïðîãðàììà:1. Õàðàêòåðèñòèêà îôôøîðíûõ êîìïàíèé. Îñîáåííîñòè ðåãèñòðàöèè2. Åâðîïåéñêèå êîìïàíèè êàê èíñòðóìåíò íàëîãîâîãî ïëàíèðîâàíèÿ3. Óêðàèíñêàÿ ïðàêòèêà îïðåäåëåíèÿ «Áåíåôèöèàðíîãî ñîáñòâåííèêà»4. Âîïðîñû-Îòâåòû   Áîëåå ïîäðîáíî î ó÷àñòèè ñåìèíàðå ÷èòàéòå íà ñòðàíèöå Íàëîãîâîå ïëàíèðîâàíèå äëÿ óêðàèíñêîãî áèçíåñà ïîñðåäñòâîì íåðåçèäåíòíûõ ñòðóêòóð. Ïðàêòèêà ïðèìåíåíèÿ íàëîãîâîãî çàêîíîäàòåëüñòâà.   Ñòîèìîñòü ó÷àñòèÿ: 750.00 ãðí. - çà îäíîãî ó÷àñòíèêà.--Ñ óâàæåíèåì, Ïè÷óãèí Äìèòðèé Ñåðãååâè÷Òåë: 063 2-379-005/044 2-284-669Ñàéò: http://3nbc.info/ ×òîáû ïåðåñòàòü ïîëó÷àòü ïðîâåðåííûå èäåè î ïðîäàæàõ íà ðàññòîÿíèè íàâñåãäà, ïåðåéäèòå ïî ññûëêå SpamAssassin Report (spam score: 10.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.43 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: anions.kiev.ua] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #113506 - Sent on March 19, 2015, 11:16 am by sales@anions.kiev.ua
Bangkok Heart Hospital, Bangkok, Thailand. CLICK TO SEE THE IMAAGE   SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mailchimp.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (bangkokhospitaloffice[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #113508 - Sent on March 19, 2015, 11:16 am by bangkokhospitaloffice@gmail.com
hello i hope you have good health please sorry if i disturb ok i make this request for that only hope for us survive ok am a widow from syria and my life and kid are danger i need help from someone honest and sincere that care humanity for help save our life ok we not know where good thing come from but i pray if it touch your heart for help a poor widow with child then please reply me so i tell you details of what i want you do for us ok.thank you for understand SpamAssassin Report (spam score: )
Click to view scam #113503 - Sent on March 19, 2015, 11:04 am by hannansukhera@gmail.com
Date: Thu, 19 Mar 2015 05:53:48 -0400From: vivaskone0517kone@aol.jpSubject: DEAREST ONE PLEASE REPLY MEFrom Vivias Yak , DEAREST PLEASE REPLY BACK TO ME THROUGH MY PRIVATEEMAIL ADDRESS(VIVIASYAKKONE1@YAHOO.FR)   Greetings my dearest one,my name is Vivias Yak am 22 years old Girl from Southern    sudan.I want to have acommon relationship with you, I need to tell you more things, but first I needyour help to Stand for me as a trustee.   My father Dr. Justin YAK Arop was the former Ministerfor SPLA Affairs and Special Adviser to President Salva Kiir of South Sudan forDecentralization. My father Dr. Justin YAK, my mother including other topMilitary officers and top government officials where on board when the planecrashed on Friday May 02, 2008. You can read more about the crash through thebelow site: http://news.bbc.co.uk/2/hi/africa/7380412.stmSome months after the burial of my father, my uncle conspired with my stepmother and sold my father's properties to a Chinese Expatriate. On a faithfulmorning I opened my father's briefcase and found out document which my belovedlate father used and deposit money in a Bank in Burkina Faso , with my name asthe next of kin. I travelled to Burkina Faso to withdraw the money so that Ican start a better life and take care of myself.   The Branch manager of the Bank whom I met in persontold me that my present status does not permit me by the local law to clearmoney or make a transfer of money into an account, he advice me to provide atrustee who will help me and invest the money or I should wait till when I willget married it demand by their Authority......... I have chosen to contact youafter my prayers  and I believe that you will not betray my trust. But rathertake me as your own blood sister and help me.   Though you may wonder why I am so soon revealingmyself  to you without knowing you, well, I will say that my mindconvinced me that you are the true person to help me. More so, I will like todisclose much to you if you can help me to relocate to your country because myuncle has threatened to assassinate me. The amount is ($7.5 Million DOLLARS andI have confirmed from the bank in Burkina Faso .   You will also help me to place the money in a moreprofitable business venture in your Country. I am writing this email to youwith the private office computer of the coordinator in charge of the refugeecamp where I leave now, his name is Rev. Father DAVID FRANK of sacred hearthCatholic Church Burkina Faso, However, you will help by recommending a niceUniversity in your country so that I can complete my studies. It is myintention to compensate you with 20% of the total money for your services andthe balance shall be my capital in your establishment. As soon as I receiveyour interest in helping me, I will put things into action immediately.      In the light of the above, I shall appreciate anurgent  message indicating your ability and willingness to handlethis  transaction sincerely. Please do keep this only to your self. I begyou not to disclose it till i come over because I am afraid of my wicked unclewho has threatened to kill me.   DEAREST PLEASE REPLY BACK TO ME THROUGH MY PRIVATEEMAIL ADDRESS(VIVIASYAKKONE1@YAHOO.FR)   Sincerely yours   Miss Vivias Yak  
Click to view scam #113502 - Sent on March 19, 2015, 10:57 am by vivaskone0517kone@aol.jp
Date: Thu, 19 Mar 2015 11:08:11 +0100Subject: HiFrom: george.blake585@gmail.comTo: Hope this mail find you well. I got your contact from the internet during a reseach of a partner and i came accross your nice profile and i decided to know more about you by sending you this little mail.I'm Mr. George Blake from the United State of America Texas, 49 years of age,i'm a gold merchantand work with Chevron Scotland pertime. I will also like to know more about you. Waiting for your response.  George Blake
Click to view scam #113507 - Sent on March 19, 2015, 10:56 am by george.blake585@gmail.com
Date: Thu, 19 Mar 2015 06:41:29 -0400From: mrsalibaaa@aol.jpSubject: Dear Partner Dear PartnerI know that  message come to you as a surprise. I am the Auditing and Accounting section manager with Bank  Burkina faso. I Hope that you will not expose or betray  trust and confident which I am respose on you the mutual benefit for families.I need your urgent assistance in transferring the sum of($6)million to your account within 10 or 14 banking days.note that you will have 40% of the above mentioned sum while 60% will be for me money has been dormant for years in our Bank without claim.I want the bank to release the money to you as the nearest person to our deceased customer,besides I don't want the money to go into government treasury as an abandoned fund. So  is the reason why I am contacting you so that the bank can release the money to you as the next of kin to the deceased customer.Please I would like you to keep  proposal as a top secret between me and you. Upon receipt of your reply,I will give you full details on how the business will be executed and also note that you will have 40% of the above mentioned sum while 60% will be for me,if you agree to handle  business with me reply immediately.PLS DO NOT FAIL TO REPLY TO  Email(mrelias.saliba88@gmail.com)(1.) your Name:(2.) Country:(3.)Phone Nb:(4.)your passport:(5.)your Occupation:Best Regards,Mr Elias Saliba Call Me +22679873393
Click to view scam #113497 - Sent on March 19, 2015, 10:55 am by mrsalibaaa@aol.jp
> Date: Thu, 19 Mar 2015 03:25:09 +0900> Subject: REPLY> From: tonyosita51@gmail.com> To: > > Dear Friend,> > > This is CAPTAIN GEORGE OWEN, a captain in charge and responsible for the> shipment of unrefined crude oil for KOSMOS ENERGY EXPLORATION COMPANY one> of the registered oil & gas exploration company. I need your collaboration> to investing in your country some funds generated from the sale of> unrefined crude oil and Gold. Can you assist me and two other captains to> "RECEIVING AND RE -PROFILING" some huge sums of funds raised from sale of> crude oil and Gold? Get back to me for more details. The funds are readily> available for investment in good project which will be suggested and> handled by you.> > On the other hand, my direct family have a large quantity of Gold dust and> bars for sale to a direct buyer. On a mutual understanding, the family> will agree with you as the sole middle man for the sale of the gold dust> and bars.> > > Waiting for your response. Contact me through this email address> (captaingeorgeowen42@yahoo.com.hk )> > > Thanks for your cooperation and understanding> > > CAPTAIN GEORGE OWEN> KOSMOS ENERGY EXPLORATION COMPANY> OFFSHORE SHIPPING TANK CAPTAIN> > > >
Click to view scam #113501 - Sent on March 19, 2015, 10:53 am by tonyosita51@gmail.com
> From: FromHongKong@Bank.com.hk> Subject: Urgent-NEXT OF KIN> Date: Thu, 19 Mar 2015 00:59:38 +0000> > I am Vice Chairman, Board of Directors Dr Raymond Chien;> I work with the Hang Seng Bank Hong Kong. Do not be > surprised! I got your email contact via the World Email On-> line Directory"> > A deceased client of mine, that shares the same last name > as yours, Died without a NEXT OF KIN.$16,M in my Branch.> > Contact Person E-Mail: draymndch8@yahoo.co.jp> Send with your Private email ok.code: [CODE NO: AM-002].> Regards,> Dr Raymond Chien Kuo Fung
Click to view scam #113496 - Sent on March 19, 2015, 10:53 am by FromHongKong@Bank.com.hk
Date: Wed, 18 Mar 2015 21:13:43 -0400From: m.benoitemarois6@aol.comSubject: Dear Beloved Friend,Dear Beloved Friend,I am Mrs Nicole Benoite Marois and I have been suffering from ovarian cancer disease and the doctor says that i have just few weeks to leave. I am from (Paris) France but based in Burkina Faso since eleven years ago as a business woman dealing with gold exportation before the death of my husband many years ago.I have $4.5 Million US Dollars at Eco-Bank here in Burkina Faso and I instructed the bank to transfer the fund to you as foreigner that will apply to the bank after I have gone, that they should release the fund to him/her, but you will assure me that you will take 50% of the fund and give 50% to the orphanages home in your country for my heart to rest.kindling reply me thrown this email adress (mrsnicolebenoitemarois@postafiok.hu)Yours fairly friend,Mrs. Nicole Benoite Marois
Click to view scam #113504 - Sent on March 19, 2015, 10:52 am by m.benoitemarois6@aol.com
Date: Wed, 18 Mar 2015 21:15:08 -0400From: mohamed.issa2589@aol.frSubject: WITH DUE RESPECT/ Please read carefully and quickly reply me on this email (mohamedisa176@gmail.com) Good dayI am Mr. Mohamed Isa of B.O.A Bank in (Burkina Faso). I got your email account while searching for  abusiness oriented personality  in my private study in the internet. I bring forth a business proposal in the tune of US$10 million U.S  dollars to be transferred to an offshore account with your assistance acting as beneficiary and next-of-kin to the funds. If you know you are capable of involving and partaking in this transaction, please send down the following personal details to me at this my private email address for briefing: (mohamedisa176@gmail.com) (1)Full names:.............................(2)Occupation:...............................(3)Age and Sex:..........................(4)Marital Status:................(5)Private phone number:...................(6)Current residential address:.................. Thank you.Mr. Mohamed Isa.
Click to view scam #113495 - Sent on March 19, 2015, 10:52 am by mohamed.issa2589@aol.fr
> Date: Thu, 19 Mar 2015 06:33:56 +0100> Subject: Pick up Your USD5,000.00 Now!!> From: e09djn0403r@sepdf.gob.mx> To: > > Good Day Beneficiary,> > I write to inform you that we have been given the mandate to transfer your> full compensation payment of $1,800,000.00 USD via western union by this> government.> > We tried to give you the Western Union Instructions through phone, but we> could not locate your numbers in our database to reach you last week even> this morning.> > So, I decided to email you the MTCN and Sender Names so that you can pick> up the USD5,000.00 to enable us send another USD5,000.00 by tomorrow as> you knows we will be sending you only USD5,000.00 per day.> > Please pick up this information and run to any western union in your country> to pick up the USD5,000.00 and send us email back to send you another payment> tomorrow.> > Manager Mrs. Anita Daniel> Email: wtransferoffice823@gmail.com> > email us once you picked up this USD5,000.00 today.> > Here is the western union information to pick up the USD5,000.00,> https://wumt.westernunion.com/asp/orderstatus.asp?country=global> > Mtcn : 0726503952> Sender First Name: Tatianna> Sender Last Name: Allsop> Country: Nigeria> City: Abuja> Amount Sent: $5,000 Usd> > I am waiting for your email once you pick up USD5,000.00,> > Thanks!> Mrs. Anita Daniel> Western Union Online Coordinator
Click to view scam #113500 - Sent on March 19, 2015, 10:51 am by e09djn0403r@sepdf.gob.mx
Advert
Reply to  nancywilliams330@gmail.com if interested Dear friend.       Greetings to you and your family, I am the manager of bill and exchange in THE BANK, I have a business of 5.5 Million United State Dollars to be transfer to your account for investment in your country, if you are ready to assist me get back to me, I will give you full details on how the fund will be transfer to you. Please note that if you must get in touch with me then you must reply me back through my private box (nancywilliams330@gmail.com) and please if you are not interested do not waste your time to reply kindly delete my message from your box ok. Waiting to hear from you soon. Yours Faithfully, Mrs Nancy.Williams, Reply to  nancywilliams330@gmail.com if interested SpamAssassin Report (spam score: )
Click to view scam #113493 - Sent on March 19, 2015, 10:51 am by nancy_williams17@aol.fr
Date: Thu, 19 Mar 2015 08:38:02 +0000To: nedhulse49@hotmail.comFrom: brit_high_commission1988@yahoo.com.hkSubject: $BVaC!'(B Contact western Union AT THIS EMAIL ( westernunion90@qq.com )== 3$B7n(B 01 "Contact western Union AT THIS EMAIL ( westernunion90@qq.com )==" has been $BVaC(B $B;~4V(B $B@14|F|(B, 01 $B;07n(B 2015 10:00 $B2
Click to view scam #113494 - Sent on March 19, 2015, 10:50 am by nedhulse49@hotmail.com
Dear Sir/MadamWe are running a company by the name Jong Stit (Indonesia) Exports Ltd.(A distribution, Wholesale and Retail Company) .We saw your catalog from Export directory and hope to start a business with you if price are considerable,We kindly ask you to send us price list of available items so wecan study and give you a quick feedback.Thank you in advance.Regards,Sales Manager  SpamAssassin Report (spam score: )
Click to view scam #113498 - Sent on March 19, 2015, 10:40 am by yasartpr74@gmail.com
Untitled Document                     ............... SpamAssassin Report (spam score: 3.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: googleapis.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (cardoso.nivaldo[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.175 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MALFORMED_FREEMAIL Bad headers on message from free email service 0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #113491 - Sent on March 19, 2015, 10:26 am by cardoso.nivaldo@gmail.com
www.officeshop.bg ??? ???? ????????? ?? ?? ??????? ????????, ???? ????????? ???. Ako tova saobshtenie ne se pokazva pravilno, molq natisnete tuk. ?????????? ???? ? ????????? ?? ? ???? ??? ???. ????????????? ?? ??????? ?? 31 ???? 2015 ?. ??? ?? ?????????? ?? ???????????? ??????????? ??? ??????????? ?? www.officeshop.bg ????????? ???????? ?? ??. ????? ?? ??????? ??? 20 ??.???? ?? ???????? 3 ?? ??? ????????? ???????? ?? ?????????. (???? ?? ??????? ??? 20 ??. ?? ??. ?????) ?????????? / ???? / ???????? ?????? OfficeShop. ??? ??? ???????? ?????? ?? ???????????? ???????? ?? ???????????, ?? ???? ???? ?? ? ?????????? ????????? ?????????.??? ???? ?? ?? ???????? ??? ??????????. ?????????? ???? ?????, ?????? ??????????? ? ?????? ????? ?? 'OfficeShop'.??? ?? ??????? ?? ?????????? ?????? ?????????? ?? "Office Shop", ???? ??????????? ?????? ?????????  ?? ?? ???????????? ??????????? ?? ????????? ????????? ??? ?????? ????????.??? ??? ?? ???????????, ???? ?? ?? ????????! SpamAssassin Report (spam score: 1.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.53 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: officeshop.bg] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 0.3 HTML_FONT_FACE_BAD BODY: HTML font face is not a word 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 LIST_PARTIAL Has incomplete List-* header set
Click to view scam #113490 - Sent on March 19, 2015, 10:13 am by officeshop@bg-oferta.eu
ÀîËÄ 2015-3-19 Attachment content - zmalmeunv.gif:Image text:ClamAV for Windows - Antivirus report:Known viruses: 3770925 Engine version: 0.98.6 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 15.729 sec (0 m 15 s) SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.177 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: scammed.by] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 XPRIO Has X-Priority header
Click to view scam #113489 - Sent on March 19, 2015, 10:13 am by januskovaj@zsmendelova.cz
  Attention,We have deposited the check of your fund ($3.800000E00USD) through Western Union department after our finally meeting regarding your fund, All you will do is to contact Western Union director DR Edward via E-mail:(union.western920@yahoo.com.vn).He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name_______________Address: ________________Country: _____________Phone Number: _____________Though, Mrs .Mary Nduba has sent $5000 in your name today so contact DR Anthony or you call him +229-68922559as soon as you receive this email and tell him to give you the Mtcn, sender name andquestion/answer to pick the $5000 Please let us know as soon as you received all your fund,Best Regards.WESTERN UNION AGENT SpamAssassin Report (spam score: 10.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.47 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.vn] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (union.western920[at]yahoo.com.vn ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MONEY_FROM_41 Lots of money from Africa 2.1 MONEY_FORM_SHORT Lots of money if you fill out a short form
Click to view scam #113486 - Sent on March 19, 2015, 10:03 am by johnsonjank26@cantv.net
    ??????-??????????? ???? ?????? ???? ?????????? ???????? 25 ????? ?????????? ?? ???????? ?? ??? 100%! 25-26 ????? ????? ?????????? ?? ????????????, ?????????? ? ???????? ?????????? ???????????? ????????? ?? ??????????? ????? 26 ????? ??????? ??????????: ?????????? ????? ?????? 26 ????? ????????? ????? ???????? ??????????? ???? 27 ????? ??????? - 2015! 2 ?????? SelfMadeMan: ?????????????? ? ????????????? 2-3 ?????? ???????????? ????????? ????????? ??????????? 3 ?????? ???????? ???????: ??????? ???????????????? ??????????? ???????? 7 ?????? ??????-???????????: ???????? ? ??????? ???????? ?????????????? ??????????? 8 ?????? ??? ???????????? ?????????? ?????? ????????????. ???????????????? ?????????? ???????????? ?? «?» ?? «?» 8 ?????? ?????????? ????????? ?????????? ??????????? ?? ??????? ??????????? 8 ?????? ?????????????? ??????????. ?????????? ?????????? ??????????? 15-16 ?????? ????????????? ?????????? ?????????? ?????????????? ????????? ? ?????? ????????? ? ?????????????? 16 ?????? 11 ???????? ????????? ???????, ??????? ?? ?????? ???? ???? ?????????? ????????? ?????????? ?? ????? ??? ????????? ?????????? ???????? ??????? ?????????? ????????? ???????? ? ????????. ??? ???????????? ?? ???????? ????????? ?????? ?????? ? ??????? ?????????? ??????-????? "????????????" ???.: (044) 237-90-05 ????: (044) 233-46-69 E-mail: info@3vnbc.com Web: 3nbc.info   ??????????: ????????? ?? ?????? SpamAssassin Report (spam score: 8.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.47 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #113483 - Sent on March 19, 2015, 9:32 am by sekretar.anna@ro.ru
¥¿©v¤é¨t¤k¹²¡?¤F¤u§@¤§¥~ ¥¿©v¤é¨t¤k¹²¡?¤F¤u§@¤§¥~¡AÁ?nÓV¸?D¤Hªº©?¤®@ AV¼t°ÓÁ|¿ì¼v°g¦^õXªA°?A¥i¥H¸ò¦?v³ßÅwªº¤kÀu·R·R ½?ö·?«¥kÁä½?s¶K¤W¤U¦Cºô§}Æ[¬?s§i http://ppt.cc/pgp8 ¡@ SpamAssassin Report (spam score: 18.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.177 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (svawelecgjppk[at]163.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.7 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #113482 - Sent on March 19, 2015, 9:03 am by svawelecgjppk@163.com
UNITED BANK FOR AFRICA BENINAGBOKOU STREET,COTONOUP.M.B. 0127, AGBOKOU, COTONOU. Hello,Am George Henry, director cash processing unit, united bank for Africa (UBA) the only bank appointed by the O.A.U. Members lead by President John Kuffor. Because of the frauds going on in West Africa countries where some innocent beneficiaries were asked to pay in advance before receiving their money owed to them. The above Africa union held meeting in Benin republic and resolve to pay all beneficiaries in cash through means of diplomatic courier service. We receive your files from international monetary fund (I.M.F.) as one of the beneficiaries. Take note; ten thousand united state dollars (us$10,000) have been mapped out for all expenses in sending the money to you through genuine diplomatic courier service and how it was spent will be detailed to you. Therefore, I want you to bear it in mind that your total fund will be no more Ten million five hundred thousand united state dollars ($10,500,000.00) but Ten million four hundred and ninety thousand united state dollars ($10,490,000.00). If anybody tells you that he is paying you in bank draft or telegraphic money transfer both western union and money gram, do not listen to him or her because due to this frauds no international bank honors our remittance instruction any more that is why we settled to pay in cash through courier. We also received a security report that you paid the fraudsters who have been deceiving you, telling you that they are going to send this money to you. Dear as a senior banker, controlling this cash payment now, I advise you not to waste your money by paying any body in advance again, and if you just follow my instruction, you will receive your money in three days time. Your fund will now be packaged in box and take to the diplomatic courier service for immediate shipment, I will also send the picture of the box by attachment to you to see how the money is packed, and I will send you more mails to give you more information for you to know the genuineness of this transaction. Therefore, do forward your home address and direct phone number to me for quick delivery because time is not in our side. All the documents will be sent to you if I am assured that you have stopped sending money to those fraudsters. Am waiting to hear from you with the required information of yours. George Henrydirector cash processing unitunited bank for Africa. (U.B.A).Email: georgehenry2015@outlook.com SpamAssassin Report (spam score: 21.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.43 listed in list.dnswl.org] 2.5 MILLION_USD BODY: Talks about millions of dollars 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (georgehenry2015[at]outlook.com ) 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 XFER_LOTSA_MONEY Transfer a lot of money 0.0 XPRIO Has X-Priority header 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 4.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 2.1 MONEY_FORM_SHORT Lots of money if you fill out a short form 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.2 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #113481 - Sent on March 19, 2015, 8:08 am by farmaciajunin@speedy.com.ar
×?ºÉèÖà 2015-3-19 Attachment content - jpcn.gif:Image text:EMIR . :?:#El%%% HE #@É:?:%# E 5FF 'BiiiI u:493 3U9 sum : 1391 3939 635ClamAV for Windows - Antivirus report:Known viruses: 3770925 Engine version: 0.98.6 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 15.454 sec (0 m 15 s) SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.169 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: scammed.by] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 XPRIO Has X-Priority header
Click to view scam #113480 - Sent on March 19, 2015, 8:06 am by hr@meiyigou.com
P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } You are a winner in this edition of the Australian Lottery.  For payment, contact (aussiedraws2013@gmail.com) SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [157.56.111.254 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.5 AXB_X_FF_SEZ_S Forefront sez this is spam -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [157.56.111.254 listed in list.dnswl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.6 SUBJ_ALL_CAPS Subject is all capitals
Click to view scam #113477 - Sent on March 19, 2015, 8:03 am by marissa.guerrero@bexar.org
I sent a reply to this query but decided to check on the Company name in the meantime and I came across your website. They have now responded to my email and I thought I would forward this to you in the hope that you could check where this email originated from . I am not prepared to give out my banking details etc.   From: ykf [mailto:hankefuf@163.com] Sent: 19 March 2015 02:50 AMSubject: Re:RE: re  Dear sirThank you for your letter.The products we need is a gas mask, dust masks, protective clothing, protective shoes, protective glasses, protective gloves.In order to we can agree on both sides.Please give us favorable price.In order to cooperation.Best regards. HANGood day Han Kefuf Thank you your enquiry with OHSA Health and Safety Consultants. In order to understand your needs we will need to know what industry your business is in. Can you be more specific so we can quote you accordingly please. from: ykf [mailto:hankefuf@163.com] Sent: 18 March 2015 07:52 AM Hello.We are Kunming Ce Zhe Commerce Co., Ltd.Due to the company's recent requirement, we need to purchase Safety protective equipment   .If you can provide us, please contact me with email.I am looking forward to your reply.Thank you!Best wishes,Han kefuE-mail: hankefuf@163.comNo virus found in this message.Checked by AVG - www.avg.comVersion: 2015.0.5751 / Virus Database: 4311/9328 - Release Date: 03/18/15No virus found in this message.Checked by AVG - www.avg.comVersion: 2015.0.5751 / Virus Database: 4311/9333 - Release Date: 03/18/15
Click to view scam #113474 - Sent on March 19, 2015, 7:57 am by hankefuf@163.com
Dear Sir/Madam,Reply Dr.Van Saun for more details Attachment content - x.doc:ÐÏ?áx.doc: No such file or directory WARNING: \\?\c:\inetpub\wwwroot\imap-dump\x.doc: Can't access file SpamAssassin Report (spam score: 10.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (6141508[at]aruba.it) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.170 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.5 NULL_IN_BODY FULL: Message has NUL (ASCII 0) byte in message 0.0 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 1.0 FREEMAIL_REPLY From and body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 3.1 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #113475 - Sent on March 19, 2015, 7:54 am by 6141508@aruba.it
Do you need a loan at 3% to pay your bills or start up a business of your own? If yes ,contact US with this following details... (1)Full Name (2)Loan Amount Needed (3)Duration (4)Country (5)Phone numbers Best Regards, Donaldfinancialloan09@yahoo.com SpamAssassin Report (spam score: )
Click to view scam #113471 - Sent on March 19, 2015, 7:02 am by huihua@mocs.gov.tw
Compliment of the day to you. My name is Steve Douglas, an International Business Relations Manager with HSBC Bank London. I have a very important and urgent issue on my desk that needs your urgent attention. Contact me back for full details. Your urgent reply is required. Regards, Steve Douglas SpamAssassin Report (spam score: )
Click to view scam #113472 - Sent on March 19, 2015, 6:57 am by steve_douglas2002@outlook.com
Dear Customer, Attached is your Shipping documents/Invoice and copy of DHL receipt for your tracking. Please confirm accordingly if your address is correct, before we submit to our outlet office for dispatch to your destination. Regards, Loosveldt Attachment content - Shipping Documents.html:? Dear Customer,A Package is coming your way through DHL.Track your Package till it gets to your doorstep.Track Your Package DHL Worldwide Delivery ©.ClamAV for Windows - Antivirus report:Known viruses: 3770925 Engine version: 0.98.6 Scanned directories: 0 Scanned files: 1 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 15.192 sec (0 m 15 s) SpamAssassin Report (spam score: )
Click to view scam #113469 - Sent on March 19, 2015, 6:51 am by albamer@bleta.net
Advert
  On Wednesday, March 18, 2015 3:31 PM, Dr Morris Uba <upsdeliveryservice25@yandex.com> wrote: ZENITH BANK INTERNATIONALZenith Heights Plot 87 AroseAdigun Street , Abuja,Nigeria,Attn:Payment Notification,This is to bring to your notice that, I have paid the re-activation fee and the delivery of your ATM MASTER CARD. I paid it because the ATM Card with Code 8119 $8.5million, has less two months to expire and when it expires, the money will go into Government purse.With that I decided to help you pay the money so that the ATM Card will not expire, because I know that when you get your ATM Card definitely you must pay me back my money and even compensate me for helping you. Like i stated earlier, The delivery charges has been paid but i did not pay their official keeping fees since they refused.They refused and the reason is that they do not know when you are going to contact them and demurage  might have increase. They told me that their keeping fee is $85 dollars and i deposited it a week ago. Contact him with your delivery address And  Your current phone number.  Call him as soon as you receive this mail. Just be inform that the only fee you have to pay is there Keeping fee of $85. and here is the pin code of your ATM card (6543)Below is their Contact Information's,Contact Person: DR. JERRY LEOUPS COURIER COMPANYEmail:( upsdeliveryservice255@outlook.com )Contact then Today to avoid increase of their keeping fees and let me know once you receive your Card.Regards.Dr Morris UbaATM OFFICE ZENITH BANK INTERNATIONALzenithbank.international@yandex.com
Click to view scam #113468 - Sent on March 19, 2015, 6:47 am by upsdeliveryservice25@yandex.com
P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px } Dear User     You have 1 new alert from Gmail plus.     Go to https://www.gmail.com and view message.     Happy Emailing,   Gmail Team.   Google Inc., 1600 Amphitheatre Pkwy, Mountain View, CA 94043 USA Important: This email is confidential and may be privileged. If you are not the intended recipient, please delete it and notify us immediately; you should not copy or use it for any purpose, nor disclose its contents to any other person. Thank you. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.44 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.203.69.1 listed in zen.spamhaus.org] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.203.69.1 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: centroesfera.cl] 0.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: centroesfera.cl] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
Click to view scam #113466 - Sent on March 19, 2015, 6:37 am by kiat_siang_sim@nuhs.edu.sg
  On Wednesday, March 18, 2015 7:28 PM, Mr. Thomas Douglas <paolinivioleta@speedy.com.ar> wrote: Greeting from Diplomat Agent Thomas Douglas!This Is To Inform You About My Successfully Arrival At Rick Husband Amarillo International Airport Texas USA, Meanwhile I AmHaving A Little Problem With The Custom Authority Because Of TheINTERNATIONAL CLEARANCE PERMIT  Of Your  consignment box Which One OfThe Airport Authority That It Will Be Obtained From Benin RepublicCustom Authority With The Sum Of $87.Use This Below Information To Send The INTERNATIONAL CLEARANCE PERMITcertificate Fee Which Is The Sum Of $87 To The Benin With Name Of Custom Accountant Officer.Receivers Name: == James UzoCountry Benin Republic.Text Question. In GodAnswer: We TrustSenders? name::::::::Amount:: $87Mtcn:::::::You Have To Contact Me With This Telephone Or Send Me An Sms Okay I AmWaiting To Hear From You With the payment details Asap.ThanksMr.Thomas Douglas Courier Express CompanyDiplomatic Agent Call Me NowTel No: call or sms  806)341-9280Email(mr.thomasdouglas@yahoo.com.ph)
Click to view scam #113464 - Sent on March 19, 2015, 6:34 am by paolinivioleta@speedy.com.ar
èº~¥S§??í¤W¦?v èº~¥S§??í¤W¦?v¡A¤@°_¥]¾i°ª¤¤¤k¥?AÀH®?µ·R¤¤¥X ¶W¥¿¤k¤j¥?A?¨?¿úÁ?N¨??W¨®¡A¶}©l¤º®g 3P ÃC®g ½?ö·?«¥kÁä½?s¶K¤W¤U¦Cºô§}Æ[¬?s§i http://ppt.cc/pgp8 SpamAssassin Report (spam score: )
Click to view scam #113465 - Sent on March 19, 2015, 6:29 am by ryast@163.com
??? ?? ?????? ???? ?????, ??? ?????? ?????? ???? ??????????? John Galliano, Diesel, Guess -80% XTI -50% Girls Love Shopping -80% Galvanni -80% Dr Renaud -55% ?????? ????????? -40% ????? ?? ?? ????????? ???? ?????????? ?????????, ????????? ?? ????????? ????????? ? ?????????? ??????????? ?????? ????????? ????????? ????, ??? ???????? ? ????? ?? ??????????: ????? 1000, ?????? ??????????, ????? ????????, ???. ???? ???????????? ? 10, ??. 3, ? ??? 202706277, ?????? ??? ??????????? ?????????? ? ??? ?????? ?????? ??????? ?? ???????? ?? ?????, ??? ????? ??? ??????? ?? ? ??????? ?? ?? ???????????? ??? ????? goldensales.bg ?????? ?????? contact@goldensales.bg ? ????????? ?? ?????, ?? ?? ????????? ?????? ?????? ?? ?????? ???????????. ?? ????? ?? ????????? ???? ???????? ????? ?? ?? ???????. ??? SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: goldensales.bg] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.182 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #113462 - Sent on March 19, 2015, 6:11 am by contact@nm.goldensales.bg
  On Wednesday, March 18, 2015 12:27 PM, MAXWELL DZIENCIOL <aibang@aibangtuan.com> wrote: INHERITANCE GRANT.FROM THE DESK OF MAXWELL DZIENCIOL.UNITED KINGDOM, HR4 0BGEmail: gehidiamen@gmail.comATTN:I am Mr. Maxwell Dzieciol an account operator to late (Mr. Tony Hildebrand) a  nationality of your country who unfortunately died in a Terrorist attack in  Liverpool on the 7th July 2005. Since the death of (Mr. Tony Hildebrand), I as  his account operator have made several enquiries to locate his relations to come  up for the inheritance claim here left behind, without any success.I came across your name and contact on the course of my personal search for my late client relations/next of kin so I decided to contact you for this project. I am contacting you to assist in securing the wealth left behind in a fixed deposit account by my late client before they get confiscated or declared unserviceable by my bank where he operates an account. The board of Directors of the bank has issued and spread a notice that after 2 months from now and no relation shown up for the claiming of the said funds, the funds will be confiscated and declared unserviceable.Since The board of Directors of the bank have been unsuccessful in locating my client relatives for sometime now, it's on this note that I seek your consent to present you as the relation/next of kin to my late client so that the proceed of this deposit can be released into your account. The amount deposited is (GBP 5 million). I will agree with you on 40% for you while 60% for me. I guarantee that this transaction will be executed under a legitimate arrangement which will protect you from any breach of the law.To encourage me of your full acceptance and willingness to this proposal, I will need you to confirm your full names, your current address, country of origin and a copy of any legal form of identification (Driver's license or International Passport). I need to be sure that I am transacting with the correct person. I hope you understand why I need all these, the money in question is huge,and I have to ensure that I know you well enough before I furnish you with all the details to execute this project.As soon as I get these from you, I will forward to my hired notary to commence  the necessary legal paper work for claim.I have 2 options to help us secure this funds .1. I am presently investigating an offshore bank that has a very close correspondence relationship with my bank, so you will need to open an online/offshore account in your name with this offshore bank. So that once the funds are released, they will be moved straight into the offshore bank account, and secured for both of us.  After which you can begin to transfer our various shares in safe bits into our designated personal bank accounts.2. Once the funds are released by my bank, I can arrange for them to be moved to our affiliate security/finance company, but in this case, your physical presence will be needed to sign the release document. If required, the security company will release the funds to you, assist you in setting up an account with any bank of your choice, and ensure a smooth deposit of the entire funds into the bank account, and then you can begin to transfer our various shares in safe bits into our designated personal bank accounts.I call on your sincere cooperation to this proposal so we can both benefit from this project maximally.NOTE: If you are interested in this proposal, Please contact me directly via my private email address @ gehidiamen@gmail.comThanking you in advance.Regards,Mr. Maxwell Dzienciol.---This email has been checked for viruses by Avast antivirus software.http://www.avast.com
Click to view scam #113460 - Sent on March 19, 2015, 6:01 am by aibang@aibangtuan.com
Dear sir,   I have been assigned by my colleagues to contact you. I am the Executive Vice President and Group Chief of Staff of the British Petroleum Plc. I am also a member of the audit and compensation committee of BP Plc saddled with the duty to investigate and research contracts awarded by the British Petroleum Plc in 2010 consequent upon the oil spill in the Gulf of Mexico and make recommendations to the board. In the course of our duty, we discovered among other things, that a staggering sum of ?47,900,000.00 (Great British Pounds) is floating in one of the bank accounts of the British Petroleum Plc unclaimed.After a more thorough investigation, we discovered that the amount was theresult of an over-invoiced contract for the supply of Scavenger 2000 Depollution Boats with Voraxial Separators for the cleaning of the oil spills/habours in the Gulf of Mexico, which was originally masterminded by the BP Contract Award Committee with the intention to transfer and use the money. Due to the caliber of people involved in
Click to view scam #113459 - Sent on March 19, 2015, 5:35 am by devsanyal@petroleum.com
bEJjVmE2DQoNCqf1qXa357BnpmwNCqf1qXa356nKt1Kl+rrQDQrB2aazp/OmaKq6sqOrfr3Q wkm/76RVpkO69Kd9DQpodHRwOi8vc2V4My5heC5sdA0KDQqmcLVMqmuzc7WyIL3Qwkm/76H3 s2+ko6xPqVWno6tIILK+pl6m3KaspfOnWLROpWmzc7WyDQoNCkNsdA=SpamAssassin Report (spam score: 6.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (050geumieg[at]ms45.hinet.net) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.175 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 XPRIO Has X-Priority header
Click to view scam #113457 - Sent on March 19, 2015, 5:18 am by 050geumieg@ms45.hinet.net
.waunkczvfojmo{color:#eba660;} Claim Now: Free Glad Samples! Hurry While Supplies Last! .ozbmrzghtvcdeqi{color:#c96fac;} SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.178 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: dmenteradenological.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: dmenteradenological.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Dear, Sorry for late responds, kindly reconfirm pro forma invoiceRegards Attachment content - proforma invoice (2).zip:Zip file contained the following files and folders: - proforma invoice (2).html:ClamAV for Windows - Antivirus report:Known viruses: 3770925 Engine version: 0.98.6 Scanned directories: 0 Scanned files: 0 Infected files: 0 Data scanned: 0.00 MB Data read: 0.00 MB (ratio 0.00:1) Time: 15.223 sec (0 m 15 s) SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sphereumbrella[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #113455 - Sent on March 19, 2015, 4:47 am by sphereumbrella@gmail.com
  Due to the recent upgrade in our SSL server to serve you better, two (2) incoming mails was not delivered to you. Please verify your email account below to start receiving you incoming pending email. Please note that all users are mandated to verify their E-mail account in other to enjoy the new upgrade. You are required to verify through the link below. VERIFY Thanks for using Webmaster! Mail Security Team ©Webmail Inc. 2014   Thanks. All Domain 2014 Team.                                                                                                  LAST WARNING!!! 
Click to view scam #113452 - Sent on March 19, 2015, 4:40 am by admin@emailserver.com
Dear sir/madam, I seek your attention for immediate assistance of a business privilege I have your country I need a reliable and trustworthy business person to handle a profitable business for our mutual benefit. If you are interested to execute a genuine and honest business I will give you more detail. Daniel Tyler SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.52 listed in list.dnswl.org] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dantyyllr[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.3 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only
Click to view scam #113450 - Sent on March 19, 2015, 4:05 am by dantyyllr@gmail.com
Mcgee edward Equity Research Analyst FTB I South East Asia. Hello, This is not Hoax Or Spam Mail. My name is Mcgee edward. Equity Research Analyst at FTB investment bank South East Asia. And personal Accountant to Late (Mr.Hock Miller) From Mexico. I have decided to seek a confidential co-operation with you in the execution of the deal described here-under for our both mutual benefit and 1 hope you will keep it a top secret because of the nature of the transaction, During the course of our bank year auditing On the 18th December 2014. I discovered an unclaimed/abandoned fund, sum total of (21,000.000,00.USD)Twenty One Million United State Dollars. in the bank account that belongs to a Mexican businessman (Late Mr. Hock Miller) Who unfortunately lost his life and entire family in a plane crash. Now our bank has been waiting for any of the relatives to come-up for the claim but nobody has done that. I personally has been unsuccessful in locating any of the relatives for several years now, I sincerely seek your consent to present you as the next of kin / Will Beneficiary to the deceased so that the proceeds of this account valued at (21,000.000.00USD)Twenty One Million United State Dollars can be paid to you, which we will share in these percentages ratio, 70% to me and 30% to you if you accept. All I request is your utmost sincere co-operation; trust and maximum confidentiality to achieve this project successful use all my influence and my personality in our bank to make sure this fund release to you without any breach of contract then i I have carefully mapped out the moralities for execution of this transaction under a legitimate arrangement to protect you from any breach of the law both in your country and here when the fund is being transferred to your bank account. I will have to provide all the relevant document that will be requested from FTB to indicate that you are the rightful beneficiary of this legacy and FTB bank will release the fund to you without any further delay, upon your consideration and acceptance of this offer, I await your swift response and re-assurance so we commence this transaction immediately.and kindly delete it out if you are not interested, i use my personal email address to contact you for security reasons. Best regards, Mcgee edward --- This email is free from viruses and malware because avast! Antivirus protection is active. http://www.avast.com SpamAssassin Report (spam score: 22.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.174 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: avast.com] 2.5 MILLION_USD BODY: Talks about millions of dollars 0.0 FSL_MY_NAME_IS BODY: My name is ... 1.9 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mcgeeedward2[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 1.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FROM_MISSP_USER From misspaced, from "User" 1.5 TVD_PH_BODY_META TVD_PH_BODY_META 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 XFER_LOTSA_MONEY Transfer a lot of money 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 XPRIO Has X-Priority header 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider 4.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #113449 - Sent on March 19, 2015, 4:04 am by mcgeeedward2@outlook.com
O segredo das celebridades foi revelado! Ver no browserReportar SPAM   Esta mensagem foi enviada para [censored]@gmail.com.Pode em qualquer momento se descadastrar no link em baixo. Não deve responder a este email diretamente pois a sua solicitação poderá não ser respondida. Neste momento está recebendo as melhores ofertas do dia pelo serviço Melhor do Dia, um serviço completamente gratuito para que o usuario esteja sempre a par das melhores novidades e descontos. Caso queira deixar de receber nossas fantástica promoções.SpamAssassin Report (spam score: 9.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.160.176 listed in list.dnswl.org] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: nomomento1.com.br] 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: nomomento1.com.br] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #113447 - Sent on March 19, 2015, 3:33 am by melissa@nomomento1.com.br
  THE SHELL PETROLEUM CORPORATION Address: Shell U.K. Limited Shell Centre London SE1 7NA Telephone: +447745247713   Re: CONGRATULATIONS,     THIS IS TO INFORM YOU THAT YOU HAVE WON TWO MILLION (£5,000,000.00) BRITISH POUNDS ON 2015 SHELL UK/QATAR DRAW. REF NO.: CD80. INCLUDE YOUR FULL NAME AND CELL PHONE NUMBER FOR IMMEDIATE RELEASE OF YOUR WINNER'S CERTIFICATE AND PAYMENT TO YOU.     YOUR IN SERVICE,     MRS. KATE WILLIS. CORDINATOR, DRAW PAYMENTS, UK. SpamAssassin Report (spam score: 20.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.50 listed in list.dnswl.org] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.2 NSL_RCVD_HELO_USER Received from HELO User -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ezajil.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 1.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 FAKE_REPLY_C FAKE_REPLY_C 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 XPRIO Has X-Priority header 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.1 MONEY_FORM_SHORT Lots of money if you fill out a short form 0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
Click to view scam #113446 - Sent on March 19, 2015, 2:55 am by support@EZAJIL.COM