Logo



  Contact Agent Fred Ugo for the delivery of yourUBA ATM Card,worth of 8.5 million with information below.your Name,home address,phone number. Sincerely, Rev.Paul. SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [209.85.216.169 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Click to view scam #124122 - Sent on May 18, 2015, 7:40 am by chessman@cantv.net
www.junolux.com www.junolux-led.com --Best Regards, TomMSN/Skype: tomogx@hotmail.comTel: 86-15013038390SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.170 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (junolux8[at]163.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header
Click to view scam #124119 - Sent on May 18, 2015, 7:30 am by junolux8@163.com
Dear Listed beneficiary, This is the 3rd attempt to harmonize your payment of $12.5 Million being long withheld by these governments in West Africa. Due to the stringent monetary policies in various countries in Europe mostly UK, the EU Anti-Fraud in another meeting concluded yesterday evening in London, UK the EU Anti fraud International has once again resolved that we allow you to open the proposed new bank account in any commercial bank in West Africa here and your fund can easily be remitted into your new account which you can control directly from your country via online access and Debit (ATM) card for both cash download and purchases at POS. We are still here to guide and ensure that this is concluded without hitches. This payment conclusion cannot be actualized without your maximum co-operation. As far as we are are here to protect your interest, you do not need to spend any money before receiving your fund. We have to ensure that no money whatsoever is requested from you from these African government agents except a new bank account opening deposit which does not exceed a $100 anywhere in the world. You must seize this opportunity by calling me immediately on my direct telephone for further guidance, assurance and clarification. Call me right now on my West Africa telephone number: +234 814 886 4303 All in your best interest. Roderick Oarelle BufordEuropean Union Anti-Fraud InternationalRoma-Italia. (Presently) in West Africa.Tel: +234 814 886 4303  SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 SUBJ_DOLLARS Subject starts with dollar amount 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (eumail1011[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [74.125.82.41 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (eumail1011[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #124117 - Sent on May 18, 2015, 7:25 am by eumail1011@gmail.com
.ielka {font-family: Arial, Helvetica, sans-serif} .s {font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); } ??? ?? ?????? ???? ?????, ??? ?????? ?????? ???? ??????????? ?????? -85% Guess -70% ?????? ????????? -55% Bamboo's -50% ??????????? last minute ?????? ??????? Jocca Cougar ????? ?? ?? ????????? ???? ?????????? ?????????, ????????? ?? ????????? ????????? ? ?????????? ??????????? ?????? ????????? ????????? ????, ??? ???????? ? ????? ?? ??????????: ????? 1000, ?????? ??????????, ????? ????????, ???. ???? ???????????? ? 10, ??. 3, ? ??? 202706277, ?????? ??? ??????????? ?????????? ? ??? ?????? ?????? ??????? ?? ???????? ?? ?????, ??? ????? ??? ??????? ?? ? ??????? ?? ?? ???????????? ??? ????? goldensales.bg ?????? ?????? contact@goldensales.bg ? ????????? ?? ?????, ?? ?? ????????? ?????? ?????? ?? ?????? ???????????. ?? ????? ?? ????????? ???? ???????? ????? ?? ?? ???????. ??? SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: goldensales.bg] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124116 - Sent on May 18, 2015, 6:05 am by contact@nm.goldensales.bg
.rmfesncbqbuvf{color:#81a26d;} Free Xarelto Injury Case Evaluation! .jebtemvqznmgzao{color:#2c25c6;} SpamAssassin Report (spam score: 10.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ftnonchalances.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ftnonchalances.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: ftnonchalances.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Barrister Ben Cook La Sagrada Familia Calle Mallorca, 601 08713 Seville Spain. Mobil: +34 631 093 714 Attn: Dear Friend, I am Barrister Ben Cook a solicitor at law. I am the personal attorney to late Mr. Robert a national of your country, who was an official contractor (category D) with REPSOL YPF, SPAIN (RY) an oil firm in Spain. Here in after shall be referred to as my client. On the 11th of March 2010, my client, his wife and their two only sons were involved in a car accident on holiday trip along Las Palmas express way. All occupants of the vehicle unfortunately lost their lives. Since then I have made several enquiries and presentations to locate any of my client's extended relatives, this has also proved abortive. It is after these several unsuccessful attempts to locate any member of his family failed that I decided to contact you since coincidentally you have your last name believing that you can invariably be of help in this situation to stands as the next of kin to this my client. I am contacting you to assist in repatriating the money and property left behind by my client before th! !ey get confiscated or declared uns Already, the finance company where the deceased had an account valued at about 1 Million Euros has issued me a notice/ultimatum to provide the next of kin or have the account confiscated within the next one Month. Since It has been unsuccessful in locating the relatives for over 2 years now, I seek your consent to present you as the next of kin of the deceased, so that the proceeds of this account valued at 1 Million Euros can be paid to your account and there after we can share the fund (money) in the ratio of 7:3. That is, I will have 70% of the proceed while you have 30% for your assistance. I have all necessary legal documents that can be used to back up any claim we may make. All I require is your honest co-operation to enable us see this transaction through .I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. Please get in touch with me by my email and send to me your telephone and fax numbers to enable us discuss further about this transaction. Best regards, Barrister Ben Cook xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx AddressXXXListXXXusa SpamAssassin Report (spam score: 27.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 3.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.8 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 0.0 LOTS_OF_MONEY Huge... sums of money 1.5 FSL_NEW_HELO_USER Spam's using Helo and User 4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 1.0 MONEY_BARRISTER Lots of money from a UK lawyer 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 0.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #124114 - Sent on May 18, 2015, 5:37 am by test@certifiedtransmission.com
From: cashsplash15@androidcashsplash-a.comTSubject: Visit Promo Link, Bernard HulseDate: Mon, 18 May 2015 01:10:33 +0100Bernard HulseDear ,For more information on the Android Promo, visit our website:http://www.androidcashsplash-a.comThank youPatrick PichetteChief Financial OfficerAndroidGoogle IncUnited Kingdom  
Click to view scam #124111 - Sent on May 18, 2015, 5:15 am by
From: natwestbranch@visanetworklondon.comSubject: Transfer from Google Inc to Date: Mon, 18 May 2015 01:20:19 +0100Dear Bernard HulseDear ,Today, we received instruction from Google Inc to pay you 500,000.00 GBP asmoney won from Android promo. We are supposed to request for your account andtransfer 500,000.00 GBP directly to your account but we cannot do that as a result of restrictions from your country. We cannotbreak down your 500,000.00 GBP in parts because of the insurance policy coveringit. As a solution to this problem, we have created and funded a new Visa® debit account for youwith the information we received from Android Inc. With your Visa® debitaccount, you can transfer your 500,000.00 GBP in smaller amounts of 100,000.00GBP per day to any bank account you desire. Find your Visa® debit accountdetails below.Account Details:The details of your Visa® debit account are:Type Of Account: Virtual Visa® DebitAccount Name: Visa® Account/Card Number:4447962225093719Expiry: January 2019Current Balance: 500,000.00 GBPDaily Transfer Limit: 100,000.00 GBPYou will be able to transfer your 500,000.00 GBP from yourVisa® debit account to any account worldwide. You are only allowed to transferup to 100,000.00 GBP per day.To access your Visa® debit account via the internet with the details below:1.Access your personal web portal:CLICKHERE TO OPEN2.Enter your account/card number and password to continue3.Your account/card number is:44479622250937194.Your password for online access is:ck28ef445.Login to confirm your account balance6.You can transfer funds from your Visa® debit account to any bank. Please loginto your Visa® debit account to activate this feature.Online Wire Transfer:You are now required to login to your account and transfer your funds using theFunds Transfer option. You are to call +44-703-196-2338 or +44-703-190-6152 if you are havingany difficulties whatsoever.Please keep the contents of this email confidential because it containssensitive financial information. If you are having problems opening the portal,notify us.Sharon BurnettFund ManagerNatWest Bank PLC34 Henrietta Street London, WC2E 8NLUnited KingdomTel:+44-703-196-2338Tel:+44-703-190-6152Tel:+44-750-975-3414  
Crédit consommation body {background-color: #f6f6f6;}Si vous ne parvenez pas à lire cet e-mail, visualisez la version en ligne Comparez les crédits et concrétisez vos projets En remplissant un seul questionnaire simplifié, notre comparateur de crédits vous permet d’effectuer plusieurs demandes simultanées chez les principaux organismes de crédit du marché. Par définition, le prêt personnel n’est pas affecté à un projet précis. Son utilisation se fait donc librement. Cependant, son principe est le même que les autres crédits : un organisme vous prête une certaine somme que vous devez rembourser, chaque mois, avec les intérêts. Un crédit vous engage et doit être remboursé. Vérifiez vos capacités de remboursement avant de vous engager. Vous recevez ce mail car vous êtes abonné(e) à woocom-2.com . Cet email vous est envoyé par woocom-2.com 16 rue du capitaine Ferber 75 020 PARIS -. Pour vous désabonner de notre newsletter : Rendez-vous sur cette page SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: woocom-2.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.170 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124109 - Sent on May 18, 2015, 5:03 am by news@news.woocom-2.com
Dear User, Your email address [censored]@gmail.com is at risk!!! Please strengthen the security of your mail box. To avoid Email closure. please click the link below Google Server 2015 © Google INC 2015 SpamAssassin Report (spam score: 3.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: abnews24.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.178 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.1 TO_IN_SUBJ To address is in Subject
Click to view scam #124108 - Sent on May 18, 2015, 4:50 am by no+reply@acct21.com.cn
Ani externus, which hatch in new to hotel can summer theatre. Magically disappears i-loved having embraced human foods petfood. Alabama andoffices in obedience, agility and blame charles lamb. Enter regular tournaments and levin. Buy cհeap viaĠŗaPencil signatures dont disposals could go into. Provoked by jacqueline landman gay clergy. Engineers map, and jerry springer however, the jacuzzi tub please do thumbnail. Searchmaster, who whatchamacallit is rented. Stabilised as taking blood type flesh under a stainless steels sometimes. Pisces and solutions in from track starts. Add, that placing the one hughesinvite you philadelphia. Carbon dioxide even akinbiyi you libaray here it. Next, you beads, and manages all day latest fishing investigation establish. SpamAssassin Report (spam score: 6.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.0 T_HK_NAME_DR T_HK_NAME_DR 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 1.0 MIME_NO_TEXT No (properly identified) text body parts
LT777777777 hostgator.com send you a full refund of $ 450 USD to purchase If you have any questions about this amount, please contact hostgator.com The amount goes into your account. Case Number: PP-015-487-280-335 Go Now Amount To find out all the details of the transaction, please log into your PayPal account It may take a few moments for this transaction to appear in your account Thank you PayPal Please do not reply to this email because we are not monitoring this inbox To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page. SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: huahinhills.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.0 XPRIO Has X-Priority header
Click to view scam #124105 - Sent on May 18, 2015, 3:42 am by paypal.int@paypa.int.com
    Notice of changes to the PayPal user agreement. Dear Customer, Log in to your PayPal account as soon as possible We have recently encountered a problem in your account. when you created your PayPal account to make sure you're the account holder Click the Activation link and Follow the instructions. ! Activation link Get more out of your account Now is the time to make your PayPal account even more useful:   Account Overview Get up-to-date information about your payments. Get notifications of important information, like changes to PayPal policies. Add or withdraw money from your PayPal account. See a detailed transaction history. Yours sincerely, PayPal     * SpamAssassin Report (spam score: 1.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.51 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: 202.44.69.24] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4 address 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Click to view scam #124104 - Sent on May 18, 2015, 3:35 am by No-Reply@Account-PayPal.Com
McAfee®?????? ???????? ??: ????:??FB???? ?????vs????????:<hiiijklmnn@yahoo.com>???:<[censored]@gmail.com>UTC ??:2015-05-18_02:31:18_GMT_(+0000)????: 2015-05-18_10:31:18_CST_(+0800)??????????????????????????????????????????http://mqm.kingteam.com.tw/MQMuserUI/0404/Index.htmlSee your system administrator for further information. Kingteam.com.tw Copyright © 1993-2010 McAfee, Inc.All Rights Reserved.http://www.mcafee.comSpamAssassin Report (spam score: 3.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #124101 - Sent on May 18, 2015, 3:31 am by spammail@kingteam.com.tw
Dear sir,I would like to follow up the earlier quotation that your company sent to my colleague and we just made some little adjustments to the entire official order note.We decided to increase the quantity of the  items so just kindly check our revised order and revert back to us with your invoice and payment term as well.Your urgent response will be appreciated.Regards,Kim XiAssistant Sales Manage SpamAssassin Report (spam score: 8.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.173 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (almuslimtraders_pk[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #124099 - Sent on May 18, 2015, 3:09 am by almuslimtraders_pk@yahoo.com
body,table,td,tr,p,input {font-family: Verdana, Arial, Helvetica, Sans-Serif; font-size: 11px} hr {height: 1px} ¬°½T«O±z¯?§Q¦¬¨ì¥ø??s¬¡°?q¤l³ø¡A½?Nservice@yuncheng.familyds.com ¥[¤J¦?l¥óÁpµ¸¤H²M³?¡C ­YµLªk¥¿±ÂsÄý¡A½?N¤U¦C³sµ²½?s¶K©óÂsÄý¾¹·j´M¡A§Y¥i½u¤WÂsÄý¡Chttp://www.yuncheng.com.tw/h-cerclass/ope.html ©?a²£µ?^§??@°_¬D¾Ô300¸U¦~Á~ ¤@±i¯u¥¿·|??§AÁ?úªºÃ?Ó   ¤j³°§ë¸ê¼ö¿ú¤£Â_´é¤J¡A¨?©?«»ô°_­¸ ·Q¶X¾÷¤jÁ?H¥??ô¹À!?   ¤@±iÃ??N¥i¥HÅý§A³q¦Y¨?¥«³õ §K¥X°ê¡B¦b¥xÆW´N¥i¥H¦ÒÃ?A ­«ÂI¬O¨C¤?u­n¤@ªM©@°?ú…   ¡?»¦~«?WÃB©??£¦h¡A·q½??¡Ö   >>>>>>¥?Y¯??ú¸ê®Æ<<<<<<   ©Î   ¼·¥´0800-65-1698   ¡m¼öªù±ÀÂ?n ¤j³°¥«³???¬OÁ??A¦?O²{¦b¶i¦?¡I ¡u¨?¶g¥½³]­p®v¦¨§?v¡A«?º³]­p°?¬y¦æÁ??I ³o¬O±z­q¾\ªº¥ø?q¤l³ø¡A¦p¦³°ÝÃD½??Hcindy@yuncheng.familyds.com¡A½??^Â?»«H¡C ¦p±z¤£§?æ¦A¦¬¨ì¥ø?q¤l³ø¡A½????¨ú®ø­q¾\¡C SpamAssassin Report (spam score: 0.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124097 - Sent on May 18, 2015, 2:56 am by service@yuncheng.FamilyDS.com
This is the mail system at host mxstgxmpgw06.localdomain. I'm sorry to have to inform you that your message could not be delivered to one or more recipients. It's attached below. For further assistance, please send mail to postmaster. If you do so, please include this problem report. You can delete your own text from the attached returned message. The mail system : host gmail-smtp-in.l.google.com[173.194.65.26] said: 550-5.7.1 [196.201.216.172 12] Our system has detected that this message is 550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 550-5.7.1 this message has been blocked. Please visit 550-5.7.1 http://support.google.com/mail/bin/answer.py?hl=en&answer8131 for 550 5.7.1 more information. es2si9658112wib.45 - gsmtp (in reply to end of DATA command) SpamAssassin Report (spam score: 11.2) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [196.201.216.172 listed in zen.spamhaus.org] 2.4 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server [196.201.216.172 listed in dnsbl.sorbs.net] 2.5 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 FROM_DOMAIN_NOVOWEL From: domain has series of non-vowel letters 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 1.0 MIME_NO_TEXT No (properly identified) text body parts
Your Account Will Be Blocked! Your Account will Blocked If you would like to continue using your Email Address,(User*****@yahoo.com) UPGRADE YOUR ACCOUNT NOW YOU WILL LOSE YOUR EMAIL ADDRESS IF YOU DO NOT UPGRADE YOUR ACCOUNT.   UPGRADE IS FREE OFF CHARGE _____________________________________________________________________ The transmittal and/or attachments are confidential, privileged and proprietary to us or the intended recipient. If you are not the intended recipient, you are hereby notified that you have received this transmittal in error and; any review, dissemination, distribution or copying of this transmittal is strictly prohibited. You should therefore notify us immediately by reply or by telephone and immediately delete this message and all its attachments. Thank you.- http://www.consolidated-bank.com SpamAssassin Report (spam score: 0.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.172 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124094 - Sent on May 18, 2015, 1:43 am by asaina@consolidated-bank.com
Advert
-- Salaamuleikum Sir, I am from A UAE Based Investment Group. We are expanding our global presence by investing in projects outside the United Arab Emirates in the form of debt finance only/Soft Loan. We grant our funding at a guaranteed 6% ROI per Annum for projects 6 years term and above, 8% ROI for projects below 6 years term. We have the financial muscle and capacity to fund projects between $500,000 -$700 Million USD, so if you have any viable project and interested in us funding your project, i will be happy to receive an NDA sent for our endorsement if you wish and also send your business plan and executive summary for our investment team review and immediate funding. Waiting for your mail for further details and discussion so as to proceed. contact my private email: nadirmourad2015@gmail.com Allah Bless Mr Mourad Al Nadir SpamAssassin Report (spam score: 0.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (muratdem2002[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.44 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #124091 - Sent on May 18, 2015, 1:01 am by muratdem2002@hotmail.com
½ñÌìµÄÏúÊÛ 2002-1-1 SpamAssassin Report (spam score: 8.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (611361146[at]qq.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.54 listed in list.dnswl.org] 2.1 DATE_IN_PAST_96_XX Date: is 96 hours or more before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #124088 - Sent on May 18, 2015, 12:59 am by 611361146@qq.com
MR.SUNG LEE DAH SING BANK LTD DES VOEUX RD.BRANCH,CENTRAL HONG KONG, HONG KONG. Good Day, I am Mr.Sung Lee, Auditing and Account Credit Officer, Dah Sing Bank Ltd (Hong Kong). I do insist in your confidence in this transaction. I am making this contact with you, based on reliable information available to me courtesy of internet business index and confirmed by my local chambers of commerce and industry concerning your reputation.Thus I am convinced you would be capable to provide me with a solution to a money transfer transaction of Forty Three Million, Six Hundred Thousand United State Dollars. This is to seek your cooperation as my foreign partner and your assistance to enable me own a property and invest in the stable economy of your country. Accept my apologies if this mail does not suit your personal or business ethics. All other information to facilitate the remittance of the funds will be revealed to you in due course. For your assistance, you shall receive 25% of the funds to be transferred and 10% will be set aside for all expenses incurred by both parties. I will appreciate if you can reply me. Kindly delete this e-mail if it does not suit your personal or business ethics, as I will gladly appreciate. Yours faithfully, Sung Lee SpamAssassin Report (spam score: 43.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 3.5 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.8 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.5 FSL_NEW_HELO_USER Spam's using Helo and User 4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 3.6 FROM_MISSP_USER From misspaced, from "User" 2.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.9 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 3.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 3.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
Click to view scam #124086 - Sent on May 18, 2015, 12:45 am by root@brofab.com
Sent from my iPhoneBegin forwarded message:From: Ame Wolfe <ame_wolfe@a.clickme.my>Date: 16 May 2015 22:15:59 BSTSubject: info Whats's up handsom, I saw you on a dating site sometime last week, i got some dirtypics 4 ya.. text my numbr real fast its +17026875238. I'm just a 25 year old gal. I'm lookin to meet new people and maybe hookup. text me if you get a min please.
Click to view scam #124087 - Sent on May 18, 2015, 12:40 am by ame_wolfe@a.clickme.my
hi!
Begin forwarded message:From: Latoya Yates <latoya_yates@planetlife.es>Date: 16 May 2015 07:39:26 BSTSubject: hi! Whats's up cutie, I saw you on a dating site sometime last week, i got sum naughtypic 4 ya.. text my num real quick its 1.682.710.5973. I'm just a 24 year old gal. I'm lookin to meet new guys and maybe hookup. text me when you get a min please.
Click to view scam #124085 - Sent on May 18, 2015, 12:38 am by latoya_yates@planetlife.es
  On Sunday, May 17, 2015 12:20 PM, Mr. James J. Edward <ofice.agnt@outlook.com> wrote: From the Desk Of: Mr. James J. EdwardThe New Foreign Paymaster General World Bank Of West Africa Benin Republic Tinubu Square CotonouOur Ref: CBB/IRD/CBX/027/2015 DATE: 10/5/2015LETTER OF GUARANTEE Attention Please.Responding to the latter we received today from office of the Presidency and office of the Senator David Mark. Senate President and Chairman Senate Committee in what they said over the past experiences with you have encounter in years past has now boarder them so much to consider to treat fair signing of Clearance paperwork entrust base on your second paragraph of the latter I received. Therefore wish if this situation regards to this institution law act was not made to guide illegal transactions abroad which Chief Accountant of the Federation could have go on sign the the final Clearance paper on your favor without the charges backing up the transaction to confirmed into your account before your reporting, but at the same time, he ask you if you can be on his shoe reason with him office of the Federation he make a credible endorsement of transaction done after you send the needed fee of $78.00 only as soon as the obligations is being done perfect you will get paid immediately.  I, Mr. James J. Edward, Director, Foreign Paymaster General, World Bank Of West Africa Benin Republic wish to guarantee you that as soon as you pay the total sum of $78.00 only for the (Final Transfer Pin Code) I, Mr. James J. Edward, promise to transfer your fund immediately without any problem. This letter of guarantee will be treated as stated as soon as you, send the fee of $58 only. This is to notify you that after our meeting this morning with the President, Accountant General of the Federation, and broad of directors the bank CBB. They instructed me to transfer your funds as soon as possible you come up with obligations required $78 only. Please i have to explain to you. it was based on the instruction receive from our President Federal Republic of Benin to release all foreign debt through this office urgent you send the needed charge before we will release your funds to you as soon as possible. Based on the above, you,1,2 Milton, have been given 100% guarantee that as soon as you made the payment of $78.00 only for (Final Transfer Pin Code) your $6.500.000.00 usd will be transfer and reflect into your account as stated above within 24hrs. Note: This letter of guarantee was made with good intentions this 5TH day of MAY, 2015, and the content of this Promissory note/guarantee letter will be treated as stated there in Money Gram or western union with receiver's stated below.and please send the fee only money gram with this information    RECEIVER NAME: PETE IBIACOUNTRY: BENIN REPUBLIC.CITY: COTONOUQUESTION: GOOD?ANSWER: GOODAmount: $78MTCN:_______Senders Name:_______ Congratulation and remain God bless, while we look forward to hear positive from. Hope to receive good news from you shortly. Thanks and have a great and wonderful day more ahead.Expecting your urgent response. Yours faithfully.Mr. James J. EdwardThe New Foreign Paymaster General, World Bank Of West Africa Benin Republic
Click to view scam #124082 - Sent on May 17, 2015, 10:34 pm by ofice.agnt@outlook.com
Your Westpac Bank e-statement is available. To view, click on the "ACCOUNTS" tab and then click on "Statements" to verify your transaction.
Click to view scam #124081 - Sent on May 17, 2015, 10:30 pm by
-----Original Message----- From: Hudak, Allison <AHudak@marietta-city.k12.ga.us> To: Undisclosed recipients:; Sent: Sun, May 17, 2015 6:46 pm Subject: Steve Tran Foundation #AOLMsgPart_2_f327a022-fe96-4574-8f6f-b758dfd8abba td{color: black;} .aolReplacedBody P { MARGIN-BOTTOM: 0px; MARGIN-TOP: 0px } I am Hudak, Allison  .Steve Tran is donating a grant of 550,000USD to you. Contact him via email at (stevetann108@qq.com) for further details. Best Regards, Hudak, Allison For: Steve Tran Foundation
Click to view scam #124080 - Sent on May 17, 2015, 9:45 pm by stevetann108@qq.com
$2 million has been donated to you by Mr:Pedro contact him for claim via email pedroquezada321@gmail.comSpamAssassin Report (spam score: 3.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.180 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124079 - Sent on May 17, 2015, 9:31 pm by ellen@smtp.ut.ac.id
Unbeatable Savings on New Tires! SpamAssassin Report (spam score: 11.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.178 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: dybarleygrinding.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: dybarleygrinding.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: dybarleygrinding.com] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
             2015, SCAMMED VICTIM COMPENSATION FUND FROM FEDERAL REPUBLIC OF NIGERIA.                                                                                                [ACCESS-BANK NIGERIA]    On behalf of the trustees of the Access- bank and United Nation, I once again try to notify you as my earlier message was returned undelivered. I hereby attempt to reach you again by this same e-mail as regarding your ATM MASTER CARD.ATTENTION BENEFICIARY.this is to notify you that we received a payment credit instruction from the [APEX-BANK NIGERIA]to pay you via ATM master card with your full compensation fund of usD$8.5 million dollars. what we required from you now is you to reconfirm your information to the fedex delivery company Nigeria so that the will verify it with the one we send to them for the delivery of your ATM MASTER CARD. NOTE BENEFICIARY; WE HAVE DELIVERED ALL THE LEGAL DOCUMENT TO THE FEDEX, AND ALSO THE DIRECT TRANSFER DOCUMENT WHICH YOU MUST REMIND HER TO GIVE YOU TO FILL. AND THE BANK ALSO DELIVERED THE ATM MASTER CARD AND ALSO THE PIN SEAL WITH THE BANK PIN PACKAGE TO DELIVER TO YOU IMMEDIATELY YOU RESPOND TO THEM WITH THIS EMAIL; vivianibe6@gmail.com  her ID  NUMBER [2333575974]she is Mrs THOMAS VIVIAN JANELL the fedex agent,she is the person assigned to delivery your ATM MASTER CARD to you. so you are advice to send her email  or call her on  +2349050204006,so that is will verify your information to avoid miss delivery.BE INFORMED  THAT DELIVERY WILL COMMENCE IMMEDIATELY SHE HEAR FROM YOU. THE BANK HAS PAID FOR THE DELIVERY FEE TO THEM.  NOTE; ALL THIS VITAL PAYMENT NUMBERSNow your new Payment, APEX BANK Government Approval No; UN5685P, White House Approved NO :WH44CV, Reference No.-35460021, Allocation No: 674632 Password No: 339331,Pin Code No: 55674 and your Certificate of Merit Payment No: 103, Realize Code No: 0763; Immediate APEX  Bank Telex Confirmation No: -1114433;Secret Code No: XXTN013, Having received these vital payment number, therefore you are qualified now to received and confirm your ATM VALUED CARD with FEdEX Agent once you send them email. Congratulation to your scammed victim compensation  fund.THANKS AND REMAIN BLESS.FROM BENNETT EZETHE FINANCIAL ANALYST. SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (benntteze6[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.174 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (benntteze6[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #124074 - Sent on May 17, 2015, 8:48 pm by benntteze6@gmail.com
Date: Sun, 17 May 2015 19:36:14 +0000From: support@maildeliverability.netSubject: Please verify your PayPal address Hello,We need to verify your PayPal address to submit payment unless you do not want your money.Click Here To Verify Your PayPal AddressIf we do not hear from you in the next 8 hours we will have no choice but to assume you're not interested in making money. Regards,- VIP Admin Support Mail Deliverability, Inc.533 NE 3rd Ave. Suite 9043 Fort Lauderdale Florida 33301United StatesClick here to UnsubscribeReport Abuse
Click to view scam #124075 - Sent on May 17, 2015, 8:45 pm by support@maildeliverability.net
From: spamercob@outlook.comDate: Sun, 17 May 2015 09:27:25 -0500Subject: Paypal notification nedhulse49@hotmail.com : Update paypal account Notice to , Now check the account informations that belongs to you ! Hello Thank you for signing up for Paypal. But we face a problem in the verification of the real owner of the account.And for that you must follow the following steps   1. Click on the Button Below2. Verify Your Information To Activate Your Account  Verify Your Account Thank you for your understanding and cooperation. If you need further assistance, please click Contact at the bottom of any ?aypal page. Sincerely, ?aypal Copyright © 1999-2015 ?aypal. All rights reserved. ?aypal (Europe) S.à r.l. et Cie, S.C.A., Société en Commandite par Actions. Registered office: 22-24 Boulevard Royal, L-2449, Luxembourg, R.C.S. Luxembourg B 118 349. ?aypal PPC000264:34ab11782e4b2
Click to view scam #124072 - Sent on May 17, 2015, 8:33 pm by spamercob@outlook.com
Subject: Account Update.To: alerts@wellsfargo.comFrom: bernhard-hertel-motzen@t-online.deDate: Sun, 17 May 2015 17:19:33 +0200Your WellsFargo online access is blocked.To avoid any activity not approved by you,please log on to your online banking using our website below,and update your online profile.UPDATE-NOWSincerely,Welcome
Click to view scam #124073 - Sent on May 17, 2015, 8:29 pm by alerts@wellsfargo.com
From: webscan@scanbynorton.comSubject: Your email account nedhulse49@hotmail.com will be terminated if you don't resolve problemDate: Sun, 17 May 2015 19:38:21 +0100New Page 2Dear ,Your email address  has been transmitting viruses to ourservers and will be deactivated permanently if not resolved.You are urgently required to sanitize your email or your access to emailservices will be terminated Click here now to scan and sanitize your e-mail accountNote that failure to sanitize your email account immediately will lead topermanent deactivation without warning.We are very sorry for the inconveniences this might have caused you and weassure you that everything will return to normal as soon as you have done theneedful. Admin   This email has been checked for viruses by Avast antivirus software. www.avast.com
Click to view scam #124071 - Sent on May 17, 2015, 8:27 pm by webscan@scanbynorton.com
U1ZnTUNkbQ0KDQq2yrGhqqurfsX9p0Gtq6xCvPaxoQ0KsO21d6ZwxUsgr1OuxKv5pFsNCr3Q wkm/76RVpkO69Kd9s+kNCmh0dHA6Ly9oaWdoODg5Lm5ldA0KDQqmcLVMqmuzc7WyIL3Qwkm/ 76H3s2+ko6xPqVWno6tIILK+pl6m3KaspfOnWLROpWmzc7WyDQoNCm9TNEZhZA=SpamAssassin Report (spam score: 7.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (726spzwbb[at]ms3.hinet.net) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.170 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header
Click to view scam #124070 - Sent on May 17, 2015, 8:12 pm by 726spzwbb@ms3.hinet.net
DQpEZWFyIGZyaWVuZCwNCg0KV2UgYXJlIExvZ2lzdGljcyBFcXVpcG1lbnRzIGNvbXBhbnksIHdo aWNoIGlzIHNwZWNpYWxpemUgaW4gbWFudWZhY3R1cmluZyBhbmQgZGVzaWduaW5nIHRoZSByYWNr aW5nIHN5c3RlbSBmb3Igb3ZlciAxMCB5ZWFycyB3aXRoIHJpY2ggZXhwZXJpZW5jZS4NCg0KT3Vy IHJhY2tpbmcgc3lzdGVtIGNhbiBzYXZlIHlvdXIgY29tcGFueSAgbW9uZXkgYW5kIGltcHJvdmUg d2FyZWhvdXNlIHV0aWxpemF0aW9uLiANCg0KTWVhbndoaWxlLCB5b3VyIHdhcmVob3VzZSB3aWxs IGJlY29tZSBtb3JlIG5lYXRseS4gSWYgeW91IGFyZSBpbnRlcmVzdGVkLCB3ZWxjb21lIHRvIGNv bnRhY3QgbWUuDQoNCkJlc3QgUmVnYXJkcywNCkljeQ0KDQpTTUFDTyBTVE9SQUdFIExPR0lTVElD UyBFUVVJUE1FTlRTIENPLixMVEQNClNoYW5nZGkgSW5kdXN0cmlhbCBEaXN0cmljdCwgTGlhb2J1 IFRvd24sIERvbmdndWFuIDUyMzQwMCwgUC5SLiBDaGluYQ0KVGVsOiArODYtNzY5LTg5MDg4ODgy IEV4dC4gODU1DQpEaXJlY3QgVGVsOis4Ni03NjktMzkwMTA5NjQNCkZheDorODYtNzY5LTg5MTgx MTk5DQpDZWxsOis4Ni0xMzQxMjAxNjg4OQ0KTVNOo7ppY3kxODhAaG90bWFpbC5jb20NClFROjI2 Njk5ODc1ODANCg=
Click to view scam #124069 - Sent on May 17, 2015, 7:59 pm by
Advert
Dear Sir/ Madam,  Inquiry For Investment In Your CountryMy name is Mr. Ali Tarhouni, from Tripoli? Libya, I am former Minister for Oil and Finance on the National Transitional Council, but presently I'm here in Burkina Faso (West Africa). Due to the crises that going on in my country.Please I'm consulting you for my personal investment plan which I would like to discuss with you and know the possibility of how we can co-operate and work together to carry it out as business partner; which I believe it will be beneficial to both parties if handled with honesty.If you have idea of any business in your country where we can invest the sum of USD$22.5Million, kindly reply me urgently and we will discuss on how to achieve this effectively.However, due to the crises in my country Libya, I find it necessary to diversify my investments to outside my country to safe guard against the future of my family. For your kind assistant, I'm willing to offer you the 20% of the total amount for your assistance, while the balance shall be my capital investment in your country when we come over.Pls reply through my private email: mralitarhoun22@mynet.comI am expecting to read from you soon,Best Regards,Mr. Ali Tarhouni. SpamAssassin Report (spam score: 15.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mynet.com] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mralitarhou44[at]terra.com.pe) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_MONEY_PERCENT X% of a lot of money for you 1.0 XPRIO Has X-Priority header 0.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #124068 - Sent on May 17, 2015, 6:46 pm by mralitarhou44@terra.com.pe
RXpSWnYNCg0KMTAyvsemfqRVvse0wbDqpKSkR6Z+r8WwxqqpqPemWL/oqqkNCrDqpHCw8sKm vMa+x0RWRL3StXstsOqkcKRUpXymfq/FDQrBwqlztESm0a52IEhvbWUgUnVuIEVuZ2xpc2gg pKSvxaTlqmsNCr3Qwkm/76RVpkO69Kd9s+kNCmh0dHA6Ly9lbnV6cWEuc2l3bDJzLmNuDQoN CqZwtUyqa7NztbIgvdDCSb/vofezb6SjrE+pVaejq0ggsr6mXqbcpqyl86dYtE6labNztbIN Cg0KbGdwQw0KDQoSpamAssassin Report (spam score: 19.4) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [91.229.20.73 listed in zen.spamhaus.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (842nmeuyfk[at]ms58.hinet.net) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.5 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server [91.229.20.73 listed in dnsbl.sorbs.net] 2.4 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server -0.0 SPF_PASS SPF: sender matches SPF record 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header
Click to view scam #124064 - Sent on May 17, 2015, 5:15 pm by 842nmeuyfk@ms58.hinet.net
Hi friend. I want to transfer USD5.5Million to your bank account Contact me in my privat E mail Address( mrclifail@gmail.com) for more details.  SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrclifail[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.175 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124062 - Sent on May 17, 2015, 4:54 pm by mrclifail@gmail.com
.ReadMsgBody { width: 100%; } .ExternalClass {width: 100%; } .ExternalClass * {line-height: 100%;} Caso tenha problemas em visualizar essa mensagem, copie e cole esse link direto no seu navegador: oferta-superlegal.com/nissan   Caso tenha problemas em visualizar essa mensagem, copie e cole esse link direto no seu navegador: oferta-superlegal.com/nissan   Caso nao queria mais receber nossos e-mails, suspender SpamAssassin Report (spam score: 5.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.173 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: uni5.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.0 T_REMOTE_IMAGE Message contains an external image
Click to view scam #124061 - Sent on May 17, 2015, 4:48 pm by b1pyxy@localhost
Good day Beloved Friend ,I am Mr.Aka.Bakayoko I personally discovered a dormant account with a total sum of 125,000,000.00 GBP [ONE HUNDRED & TWENTY FIVE MILLION British Pounds] during our Bank's Annual Year Account Auditing. The owner of this dormant account is a foreigner by name "John Shumejda" who died on 4th Jan 2002. In a plane crash in Birmingham; you can view this CNN website for his true details.ht tp:// edition.cnn.com/2002/ WORLD/europe/01/04/england. plane/Since the death of this deceased, nobody has operated on this account till date. Moreover, this account has NO BENEFICIARY attached to it.Definitely, this fund will be confiscated by our BANKING CODE OF ETHICS if it remains dormant for period of [12] years without any claims. In this regard, I earnestly need your full co operation in transferring this dormant fund out of our bank to avoid confiscating this fund.I will split the transfer into two stages for easy and smooth transfer. First, I will transfer GBP25,000,000.00 to any valid foreign account you will nominate, upon a successful Transfer without any disappointment from your side; I will then fly to meet you in your home destination for sharing, thereafter we jointly transfer the remaining balance of GBP100,000,000.00 for magnitude investments.If you are willing to cooperate in this project, Contact me for more details and.Simply fill out the form and send fill out the form and send it to our regional office for payment. CONTACTS.{IT IS HIGHLY CONFIDENTIAL AND 100 ( RESK FREE} (RE: TRANSFER OF (GBP125,000.000.00 USD} I personally discovered a dormant account with a total sum of125,000,000.00 GBP ONE HUNDRED & TWENTY FIVE MILLION British Pounds during our Bank's Annual Year Account Auditing.fill out the form and send to me .This money belon to a foreigner,and the money can only be approved into a foreign a/c. Arrange your A/c and send it to me as follows for theprocessing of the payment:ACCOUNT NUMBER:..............ACCOUNT NAME:...................BANK NAME:.................BANK ADDRESS:..............SWIFT CODE:....................Please, i need your urgent response because of my situation in bankYours truly,Mr.Aka.Bakayoko SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (danielbakayoko20012001[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Attention Dear , Your Total Funds Sent To Your Through United Bank Of Africa The PAYMENT was Sent to you and it converted with your email to avoid mistake, Log In To Your Account With the United bank Information and you will transfer your funds into your Local Bank Account,We Access Your funds with this link for the security reason because self conscious, copy and past the link and feel the information to access your funds now and let me know once you transferred your funds into your account, http://ubatransferconfig.net.tf/ Thank You For Banking With United Bank Of Africa , SpamAssassin Report (spam score: 3.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_DBL_ABUSE_REDIR Contains an abused redirector URL listed in the DBL blocklist [URIs: ubatransferconfig.net.tf] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ubatransferconfig.net.tf] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hpdarkman24[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.193 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (hpdarkman24[at]gmail.com) 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 LOTTO_DEPT Claims Department
Click to view scam #124056 - Sent on May 17, 2015, 4:30 pm by hpdarkman24@gmail.com
.fxnxnzihw{color:#876aeb;} Beat Alcoholism Today SpamAssassin Report (spam score: 11.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [209.85.216.176 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: xccaestuses.com] 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: xccaestuses.com]
Click to view scam #124053 - Sent on May 17, 2015, 3:37 pm by contact@ByUiB.xccaestuses.com
Dear friendI am Mrs. Margret Lanfranchi, a widow suffering from long time illness (Cancer), I have some funds I inherited from my late loving husband Dr.Lanfranchi John, the sum of(US$2.700.000, 00) which he deposited in a bank here and I need a very honest and God fearing person that can use these funds for God's work, and 15% will be for your compensation for doing this work of God.I took this decision because I don't have any child that will inherit this fund. I don't want a situation where by this money will be used in an ungodly way. That is why I am taking this decision. I am not afraid of death hence I know where I am going. Please if you would be able to use this fund for helping the Less Privileges and help in the Christian Charity Organization, kindly contact me back for more details.Your sister in Christ,Margret Lanfranchi SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (margretlanfranchi[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.176 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (margret_lanfranchi22[at]yahoo.com ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #124052 - Sent on May 17, 2015, 3:23 pm by margretlanfranchi@gmail.com
Attn: My Dear, I am Mrs Alice Bryan, I am a USA citizen 48 years Old. I am from New York, i am thinking of relocating since I am now rich, I am one of those that took part in the Compensation in Nigeria many years ago and they refused to pay me, I had paid over $50,000 while in the United State trying to get my payment all to no avail. So I decided to travel to WASHINGTON D.C with all my compensation documents, And I was directed by the ( F B I) Director to contact Agent Mr.Robert Phillip who his a representative of the ( FB I ) and a member of the COMPENSATION AWARD COMMITTEE in Europe and I contacted him, he explained everything to me. He said whoever is contacting us through emails are fake. He took me to the paying bank for the claim of my Compensation payment. Right now I am the most happiest woman on earth because I have received my compensation funds of $15,Million Us Dollars, Moreover, Mr Robert Phillip showed me the full information of those that are yet to receive their payment and I saw your email address as one of the beneficiaries,that is why I decided to email you to stop dealing with those people that are contacting you they are not with your fund, they are only making money out of you i will advise you to contact Mr Robert Phillip.You have to contact him directly on this information below. COMPENSATION AWARD HOUSE Name: Mr Robert Phillip Email: robertph827@gmail.com You really have to stop dealing with those people that are contacting you and telling you that your funds is with them, it is not in anyway with them they are only taking advantage of you and they will dry you up until you have nothing.The only money I paid after I met Mr Robert Phillip was just $400 for the paper works take note of that. Once again stop contacting those people, I will advise you to contact Mr Robert Phillip so that he can help you to Deliver your fund instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction. Regards, Mrs.Alice Bryan SpamAssassin Report (spam score: 32.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.1 NSL_RCVD_HELO_USER Received from HELO User 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.5 FSL_NEW_HELO_USER Spam's using Helo and User 4.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 2.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.9 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 LOTTO_DEPT Claims Department 1.0 XPRIO Has X-Priority header 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #124050 - Sent on May 17, 2015, 3:09 pm by customerservice@teetalk.vn
Date: Sun, 17 May 2015 09:37:58 -0400From: mrs_nicol@aol.jpSubject: Dear Beloved Friend,Dear Beloved Friend,I am Mrs Nicole Benoite Marois and I have been suffering from ovariancancer disease and the doctor says that i have just few weeks to leave.I am from (Paris) France but based in Burkina Faso since eleven yearsago as a business woman dealing with gold exportation before the deathof my husband many years ago.I have $4.5 Million US Dollars at Eco-Bank here in Burkina Faso and Iinstructed the bank to transfer the fund to you as foreigner that willapply to the bank after I have gone, that they should release the fundto him/her, but you will assure me that you will take 50% of the fundand give 50% to theorphanages home in your country for my heart to rest. Respond to meimmediately via my private email address: (mrsnicole202@gmail.com)for further detailsYour Full Name:..............Your Country:...................Your Direct Phone N°........Your Age:..........................Yours fairly friend,Mrs.Nicole Benoite Marois
Click to view scam #124048 - Sent on May 17, 2015, 2:56 pm by mrs_nicol@aol.jp
Dear Beloved Friend, I am Mrs Nicole Benoite Marois and I have been suffering from ovarian cancer disease and the doctor says that i have just few weeks to leave. I am from (Paris) France but based in Burkina Faso since eleven years ago as a business woman dealing with gold exportation before the death of my husband many years ago. I have $4.5 Million US Dollars at Eco-Bank here in Burkina Faso and I instructed the bank to transfer the fund to you as foreigner that will apply to the bank after I have gone, that they should release the fund to him/her, but you will assure me that you will take 50% of the fund and give 50% to the orphanages home in your country for my heart to rest. Respond to me immediately via my private email address: (mrsnicole202@gmail.com) for further details Your Full Name:.............. Your Country:................... Your Direct Phone N°........ Your Age:.......................... Yours fairly friend, Mrs.Nicole Benoite Marois SpamAssassin Report (spam score: 5.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (nicolebenoitnicol[at]aol.jp) 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [209.85.216.179 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #124046 - Sent on May 17, 2015, 2:43 pm by nicolebenoitnicol@aol.jp
    From: Brad Sent: Thursday, May 14, 2015 9:50 PM   Subject: Thank You!   Jeez, my inbox is exploding with emailsthanking me for sending them this weirdlittle video... Guess it's an easy way of making somequick ca.sh and you REALLY seem to like it! >>> Take a look http://s8m2.goldbar.net/l/9f6dg0g4y9shvdqf65rr/3e8f36c Regards Brad                 1710 E INDIAN SCHOOL RD85026 PhoenixARIZONAUNITED STATES To unsubscribe or change your subscriber profile please click here: http://s8m2.goldbar.net/uns/m051seybwgq1wpgjl3yq-1azc No virus found in this message.Checked by AVG - http://www.avg.comVersion: 2014.0.4800 / Virus Database: 4311/9776 - Release Date: 05/14/15
gGDropboxYour friend used Dropbox to share Secured File with you securely!View|Download filesscan011.pdf           scan012.pdf© 2015 Dropbox
Click to view scam #124045 - Sent on May 17, 2015, 2:30 pm by
    From: Team of Hope (Chuck Williams) Sent: Wednesday, May 13, 2015 10:29 PM   Subject: Andrew freedom training now available   Hi Andrew,   Great things are happening with the Sherlock.  Let me know how I can best support you and your efforts in building your business and becoming a free entrepreneur.   May I recommend these three videos?   1. Are you prepared for the New Economy?  Global Power Affiliate Mark Levesque shares incredible insights in to the new economy and how to create wealth in this new economy.  Mark said"I'm on a mission to change lives as this economy changes"   https://youtu.be/w4ChhkFtbH4   2. Sherlock Product Overview including the new Fundraising Platform  This 16 minute overview includes all of our free products. Free Sherlock Mobile App, free Desktop app and our brand new FREE Fundraising Platform. All right here in one presentation.   https://youtu.be/oxcdvKxxBOs   3. Compensation Plan Overview? Diamond Chuck Williams explains the compensation plan including the Fundraising Platform and an example of just how easy it is to change your monthly cash flow by as much as $500 to $600 a month without selling or recruiting.  What a great business concept!   https://youtu.be/JrxHVMO56DU   All references to income, implied or stated, through this document and the Shopping Sherlock Compensation Plan are for illustration purposes only. Shopping Sherlock does NOT guarantee any level of income or earnings to any affiliate. Earnings from the Shopping Sherlock Compensation Plan solely depend on Web App usage, sales and each affiliate?s skill, ability, and personal application.God Bless,Chuck WilliamsTeam of Hope Team of Hope: Transforming lives with a dual purpose of saving and raising funds. ?http://globalchuck.com Get the Sherlock Mobile app Team Blog Connect With Me On LinkedIn Skype name: globalchuck Phone: 636-734-0497Note:  If you forward this email to someone and they unsubscribe, that will unsubscribe you from receiving these mailings. Please remove the unsubscribe option when you forward these emails to prevent missing any important information.   To stop receiving emails, unsubscribe. Mailing Address: Team of Hope , 24 Oak Terrace Drive, St. Peters, MO, 63376 | 636-734-0497 No virus found in this message.Checked by AVG - http://www.avg.comVersion: 2014.0.4800 / Virus Database: 4311/9766 - Release Date: 05/13/15
Click to view scam #124043 - Sent on May 17, 2015, 2:18 pm by title=globalchuck007@gmail.com
    From: URGENT Sent: Friday, May 15, 2015 7:15 AM   Subject: You Won?t Believe This! It?s Amazing!   Greetings!Take a good look at this ? HERE IT IS....http://s8m2.goldbar.net/l/dshogyd0n20vjpu5i8e1/3e8f36cEverything is fr.ee, it?s amazing!ACCESS NOW....Talk to you soon,Support         <!--[if !supportLineBreakNewLine]--><!--[endif]-->       Some of our favorite quotes: "The important thing is not being afraid to take a chance. Remember, the greatest failure is to not try. Once you find something you love to do, be the best at doing it." - Debbi Fields   "The winners in life think constantly in terms of I can, I will, and I am. Losers, on the other hand, concentrate their waking thoughts on what they should have or would have done, or what they can't do." - Dennis Waitley   "There is no royal, flower- strewn path to success. And if there is, I have not found it. For if I have accomplished anything in life, it is because I have been willing to work hard." - C.J. Walker   "Whatever the mind of man can conceive and believe, it can achieve. Thoughts are things! And powerful things at that, when mixed with definiteness of purpose, and burning desire, can be translated into riches." - Napoleon Hill     Unless otherwise agreed to in writing, any message or content sent to this address may be subject to reproduction, publication and review by others without notice. Nothing contained herein shall constitute professional advice. You are not entitled to rely on any statement, opinion or information contained herein or attached hereto.  You are solely responsible for your use of any such products, goods, services or content.  You should conduct your own independent research before taking action, or hire a third party to advise you with regard to same.  The sender does not represent or endorse any person, product, good or service referenced directly or indirectly herein, and you agree to hold harmless and indemnity sender regarding any damage or loss associated with same.  In many cases the sender of this email receives a financial benefit when you take action or make a purchasing decision respecting any information or content referenced in this communication. --------------------------------------------------------------   You have signed up to receive these fre.e gift updates. If you no longer wish to receive notifications, please use the link at the bottom of this email to remove yourself from this fre.e newsletter.   However, this is NOT recommended. By staying a member you will keep receiving daily reminders about net's h0ttest m0ney-making systems, blueprints and shortcuts - you will MISS OUT if you leave!   If you have any particular concerns, questions or suggestions, feel f.ree to reply to this email and a staff member will get back to you within 2 business days.   -------------------------------------------------------------- DISCLAIMER You subscribed to my newsletter to receive offers and advice on internet marketing, by entering your email address on one of my websites. You have the right to unsubscribe at any time by clicking the link at the bottom of the page to remove yourself from the list.   1710 E INDIAN SCHOOL RD85026 PhoenixARIZONAUNITED STATES To unsubscribe or change your subscriber profile please click here: http://s8m2.goldbar.net/uns/m051seybwgq1wpgjl3yq-1ay9 No virus found in this message.Checked by AVG - www.avg.comVersion: 2014.0.4800 / Virus Database: 4311/9776 - Release Date: 05/14/15