Logo



-----Original Message----- From: Navy Federal Credit Union <Voucher.RSA891@navyfederal.com> Sent: Sun, Jul 12, 2015 10:57 pm Subject: New Message From NFCU ( Move To Inbox ) Dear Customer, We're writing to let you know that your online account has been temporarily suspended due to recent access to your account from an unknown IP address. To re-activate your account, download "Navy_Federal_Update_Form" attached to this message and complete the process. Thank you for helping us serve you . Yours sincerely, ? 2015 Navy Federal Credit Union, All Rights Reserved.
Click to view scam #131794 - Sent on July 13, 2015, 10:03 am by Voucher.RSA891@navyfederal.com
Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Receive up to 2500USD* If you are experiencing difficulty viewing this important message, visit here. Blue Global, LLC. 7302 East Helm Drive, Suite 2005 Scottsdale, AZ 85260 This message was delivered to you because of your profile settings at TargetGuru If you wish to change your contact preferences please modify your account profile Targetguru 3950 North Flagler Drive West Palm Beach FL 33407 SpamAssassin Report (spam score: 2.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: breakingworldnewsnow.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image
Click to view scam #131793 - Sent on July 13, 2015, 9:49 am by tigroid@breakingworldnewsnow.com
Date: Sun, 12 Jul 2015 23:57:38 -0700From: mailout-com@thebigchoice.comTo: nedhulse49@hotmail.comSubject: [Team Apple] : You must update your information     Dear Customer (e) We inform you that your account is about to expire in less than 48 hours, it is imperative to conduct a verification of your information now, otherwise your account will be destroyed. Simply click thé link below and login using your Apple ID and password. https://store.apple.com/com/sign_in?c=aHR0cDovL3N0b3JlLmFwcGxlLmNvb Copyright © 2015 Apple Inc. All rights reserved.
Click to view scam #131792 - Sent on July 13, 2015, 8:35 am by mailout-com@thebigchoice.com
Begin forwarded message:From: Apple <service@support.com>Date: 13 July 2015 05:55:10 BSTSubject: You Must Confirm Your Informations! Apple Store ® . This is an automated email, please do not reply Dear Client,We've noticed that some of your account information appears to be missing or incorrect We need to verify your account information in order to continue using your Apple ID, Please Verify your account information by clicking on the link below Verify your lD
Click to view scam #131790 - Sent on July 13, 2015, 7:30 am by service@support.com
.ielka {font-family: Arial, Helvetica, sans-serif} .s {font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); } Dac? acest e-mail nu se afi?eaz? corect, apas? aici Noile vanzari Emma Jones -55% VALDINOX, MERLIN MINERALS -50% Accesorii bucatarie -62% Accesorii bucatarie -55% A?i primit acest e-mail trimis de compania Golden Sales S.R.L., înregistrat? la Registrul Comer?ului de pe lâng? Tribunalul Bucure?ti cu num?rul J40/2289/26.02.2014, având Cod Unic de Înregistrare 32847071, cu sediul în România, Calea Floreasca nr. 169A, Corp A, Etajul 4, Biroul 2038, Sector 1, Bucure?ti, cont bancar in lei nr. RO51 BACX 0000 0009 8480 8001 si in euro RO24 BACX 0000 0009 8480 8002, deschise la Unicredit Tiriac Bank, tel./fax +40 31 630 0718, e-mail: contact@goldensales.ro, pentru c? sunte?i Utilizator înregistrat ?i a?i acceptat Condi?iile generale ale goldensales.ro sau pentru c? a?i fost invitat de un Utilizator înregistrat s? vizita?i site-ul www.goldensales.ro. Golden Sales S.R.L. se oblig? s? respecte toate drepturile conferite de Legea nr. 677/2001 privind protec?ia datelor cu caracter personal. Golden Sales S.R.L. este in curs de inregistrare in Registrul operatorilor de date cu caracter personal (numar general de registratura 0004873 si numar infochiosk 251982808496). Ad?uga?i adresa contact@goldensales.ro la agenda Dvs. de contacte pentru a primi invita?iile la ac?iunile noastre de vânz?ri. Nu dori?i s? mai primi?i acest newsletter? Pute?i s? renun?a?i ap?sând aici. SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.47 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: goldensales.bg] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131791 - Sent on July 13, 2015, 7:28 am by contact@nm.goldensales.bg
Mateva .ExternalClass * {line-height: 100%}Si vous ne parvenez pas à lire cet e-mail, visualisez la version en ligne * Pour toute reconduction d'un contrat souscrit en ligne hors Locostia, l'équivalent des trois derniers mois de cotisations de la 2ème année est offert et remboursé selon les conditions et modalités suivantes : - reconduction du contrat souscrit en ligne pour une 2ème année, - les 3 mois offerts sont les 22ème, 23ème et 24ème mois de cotisation d'un contrat assurance complémentaire santé souscrit et géré par ECA Assurances, - en cas de résiliation pour quelque motif que ce soit, au cours de la 2ème année, les trois mois offerts ne seront pas dus. Mateva est une marque de la société ECA-Assurances. 92-98, Boulevard Victor Hugo. BP 83. 92115 Clichy Cedex. SA au capital de 1 009 000 €. R.C.S.NANTERRE B 402 430 276. Code APE 6622 Z. RC Professionnelle et garantie financière conformes aux articles L512-6 et L512-7 du code des Assurances. Société immatriculée à l'Orias sous le N° ORIAS 07 002 344. Le registre des intermédiaires d'assurances est tenu à jour par l'ORIAS www.orias.fr. Entreprise régie par le code des assurances et soumise au contrôle de l'ACPR 61, rue Taitbout 75436 PARIS Cedex 09. Vous recevez ce mail car vous vous êtes abonné(e) à la base de Woocom . Cet email vous est envoyé par woocom 16 rue du capitaine Ferber 75 020 PARIS -. Pour vous désabonner de notre newsletter : Rendez-vous sur cette page SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: woocom-2.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131788 - Sent on July 13, 2015, 6:09 am by news@news.woocom-2.com
From: Nadia.Drid@ac-paris.frTo: noreply1@wla.orgCC: noreply1@wla.orgDate: Sun, 12 Jul 2015 19:39:03 +0100Subject: Re : POSTE D'ACCUEILLe 10/07/15, "Drid Nadia" <> a écrit :American International Lottery AssociationWould like to inform you that your e-mail won $ 1,500,000.00Contact us with your name, age and countryBy e-mail:  carlzeichner@email.chBonjour Madame BOSCH,Nous avons reçu Mme JONSTOMP mercredi 8 juillet 2015 afin de lui présenter le poste d'agent d'accueil. Cette personne nous a semblé professionnelle mais nous émétons des restrictions pour ne pas dire un avis défavorable à son affectation sur le poste  en raison de sa condition physique. En effet, Mme DJONTOMP nous a indiqué qu'elle avait des difficultés à monter les escaliers,alors que nous avons 3 bâtiments de 4 étages et un bâtiment de 2 étages à vérifier tous les soirs, qu'elle ne pouvait utiliser la monobrosse alors qu'il est nécessaire de la passer chaque soir dans le hall. De plus, nous avons déjà au sein de l'établissement 7 restrictions de ce type vous comprendrez donc qu'il est essentiel pour nous que la personne affectée à l'accueil soit totalement autonome et puisse sans difficulté assurer la fermeture de l'établissement. De plus, nous auront à gérer la préparation de l'arrivée de Louis Armand qui risque d'impacter le service accueil qui sera forcément plus sollicité.Restant à votre dispositionTrès cordialement,Mme DRID
Click to view scam #131783 - Sent on July 13, 2015, 5:42 am by noreply1@wla.org
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131782 - Sent on July 13, 2015, 5:39 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.7 BAD_CREDIT BODY: Eliminate Bad Credit 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131787 - Sent on July 13, 2015, 5:38 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 7.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.0 SUBJ_YOUR_FAMILY Subject contains "Your Family" 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131781 - Sent on July 13, 2015, 5:38 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131785 - Sent on July 13, 2015, 5:36 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131780 - Sent on July 13, 2015, 5:36 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.0 SUBJ_YOUR_FAMILY Subject contains "Your Family" 0.6 HTML_IMAGE_RATIO_04 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131786 - Sent on July 13, 2015, 5:36 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131779 - Sent on July 13, 2015, 5:36 am by brownwood@bbotton.com
Enjoying our emails? If you wish to remove yourself from Calm Impressions at any time, click here. Having a great day? Change your email preferences using this link 4106 E Wilder Road, Bay City, Michigan 48706 - 2239, USA SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bbotton.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bbotton.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #131784 - Sent on July 13, 2015, 5:36 am by brownwood@bbotton.com
.qdmxguhjvavd{color:#5dc275;} Browse Best SUVs! Honda CR-V, Buick Encore, Audi Q5, Nissan Rogue & More! .vxlnwgg{color:#76dcbf;} SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: diallelilongrootwt.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: diallelilongrootwt.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: diallelilongrootwt.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.3 PLING_QUERY Subject has exclamation mark and question mark
FYIThanks.Regards,(staff Name)Reservation TeamNo 63, Jalan Ujung Pasir, World UNESCO Heritage City Melaka,75050, Melaka, Malaysia  |  P: +6 06 292 1133  |  F: +6 06 292 4700  |  M:+6 012 3992 908www.thesettlementhotel.com  |  e: frontdesk@thesettlementhotel.com Note: This electronic message and any attachments are supplied in good faith and are believed to be free of viruses or related problems. The contents of the message and any advice contained therein are supplied on the basis that the recipient understands that they should seek their own expert opinions. Urban Rhythms Tours, Adventure & Travel Sdn Bhd accepts no responsibility for the damage or loss (arising from negligence or otherwise) which may occur through the use of the contents or from transmission of this message and attachments. The contents of this electronic message and any attachments are intended only for the addressee and may contain privileged or confidential information. If you are not the addressee, you are notified that any transmission, distribution, downloading, printing or photocopying of the contents of this message or attachments is strictly prohibited. The privilege of confidentiality attached to this message and attachments is not waived, lost or destroyed by reason of mistaken delivery to you. If you receive this message in error please notify the sender by return e-mail SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #131777 - Sent on July 13, 2015, 5:10 am by enquiry@thesettlementhotel.com
-- Hello!!! Sorry for our late reply. it was because my previous email got broken. find attached copy of the Purchase Order PO for USD 57,100.00 Review, Prepare and send to me the Proforma Invoice to enable me to make a down payment. I will be waiting for your urgent reply. Thanks with regards Alex Kozlovsky ========================LLC in Sankt-Peterburg Business Center "Geneum", 9-N, Liter "A", 10 Nevskij Avenue, Sankt-Peterburg, 191186, Russia. T: 7-812)571-24-60 | F: 7-812)571-24-60 | E: purchasemanager@marketcentre.altervista.org http://www.marketcentre.altervista.org SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (marketarena07[at]hotmail.com ) 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts
Advert
T3VyIHF1aWNrIGNhc2ggbG9hbnMgYXJlIGF2YWlsYWJsZSB0byB0aG9zZSB0aGF0IG5lZWQgbW9u ZXkgZmFzdC4gV2UNCmhhdmUgc2hvcnQtdGVybSBzdHlsZSBsb2FucywgYWxsIHRoZSB3YXkgdXAg dGhyb3VnaCBpbnN0YWxsbWVudCBsb2FucywNCmFuZCBtYW55IGluIHRoZSBtaWRkbGUuIFdlIGNh biBoZWxwIHRha2UgYXdheSB0aGUgc3RyZXNzIGFuZCBoZWxwbGVzcw0KZmVlbGluZ3MgdGhhdCBv ZnRlbiBhY2NvbXBhbnkgbm90IGJlaW5nIGFibGUgdG8gcGF5IHlvdXINCmJpbGxlLDEwLGRvbGxh ciB0byA1MCBtaWxsaW9uIGRvbGxhci4uIGtpbmRseSBFbWFpbCB1cyBhdA0KbXBjbGltdGVkQGdt YWlsLmNvbSBhbmQNCg0KZmlsbCB0aGUgZm9sbG93aW4NCmluZm9ybWF0aW9uIGJlbGxvdzoNCkZ1 bGwgbmFtZeKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApg0KQ291bnRyeeKApuKA puKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApg0KU3RhdGUgb2Ygb3JpZ2lu4oCm4oCm 4oCm4oCm4oCm4oCm4oCm4oCm4oCmLg0KRGF0ZSBvZiBiaXJ0aOKApuKApuKApuKApuKApuKApuKA puKApuKApuKApi4NClNleOKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKA puKApi4NCkFkZHJlc3PigKbigKbigKbigKbigKbigKbigKbigKbigKbigKbigKbigKYuDQpQaG9u ZeKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApuKApi4uDQpFbWFpbCBhZGRyZXNz 4oCm4oCm4oCm4oCm4oCm4oCm4oCm4oCm4oCmDQp5b3VyIG9jY3VwYXRpb24uLi4uLi4uLg0KQXR0 YWNoIFNjYW4gSeKAmWQgY2FyZCxwYXNzcG9ydA0K SpamAssassin Report (spam score: 4.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ail.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mastercard422[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #131774 - Sent on July 13, 2015, 12:36 am by mastercard422@gmail.com
 Date: Thu, 9 Jul 2015 19:07:29 +0000Subject: urgent ResponseFrom: barristeronyelilian5@gmail.comTo: urgent ResponseDear HalfmannI am Onye Lilian contacting you in regard of 12.5 Million Usddeposited by Engineer Victor.A.Halfmann, a nationality of yourcountry. Contact me.for Details
Click to view scam #131773 - Sent on July 13, 2015, 12:09 am by barristeronyelilian5@gmail.com
.wpzzwvmfldjvce{color:#d29ef0;} Lean How it Works... Are You Eligible? .qbbduurghjeyuf{color:#7b1836;} SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: blepharismlongkepthu.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: blepharismlongkepthu.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: blepharismlongkepthu.com]
  Von: Michael Naylor [mailto:MNaylor@tburg.k12.ny.us] Gesendet: Sonntag, 12. Juli 2015 21:58An: Michael NaylorBetreff: RE: IT SERVICE DESK: WEBMAIL ACCOUNT GENERAL SURVEY  From: Michael NaylorSent: Sunday, July 12, 2015 3:30 PMTo: Michael NaylorSubject: IT SERVICE DESK: WEBMAIL ACCOUNT GENERAL SURVEY Faculty/Staff      With the  strengthening off our security system and improving your mailing experience, you are requires  to Complete this survey by filling out the requirements correctly; to participate on survey click SURVEY   ********************ITS Help Desk.
Click to view scam #131772 - Sent on July 12, 2015, 11:07 pm by MNaylor@tburg.k12.ny.us
Begin forwarded message:From: Your Insurance Quote Finder <member@myinsurancequotefinder.com>Date: 12 July 2015 19:52:47Subject: We Found New Rates on Your Car Insurance!Reply-To: member@myinsurancequotefinder.com Dropia - Responsive Email Template Affordable rates for your auto insurance! | Unsubscribe         Holand, Have You Found the Best Rates Yet?   Thanks again for using us to save money on your insurance. The average consumer compares at least 3 quotes to receive the best rates. Click below to see additional quotes from top carriers.     Get My Quotes     This email was delivered to h@aol.com, in reference to a quote you requested at DISCOUNT-CAR-INSURANCE-RATES.COM.©All Web Leads - 7300 FM 2222, Bldg 2 Ste 100, Austin TX, 78730 | You can unsubscribe instantly.
Click to view scam #131770 - Sent on July 12, 2015, 10:40 pm by member@myinsurancequotefinder.com
Begin forwarded message:From: Paul Connick <stulkin@alliant.edu>Date: 12 July 2015 21:14:48 BSTTo: Recipients <stulkin@alliant.edu>Subject: HelloReply-To: <mr.paulconnick@hotmail.com>Hello, I have secured an Inheritance Proposal for you , Please Reply for detailsRegardsMr. Paul Connick
Click to view scam #131769 - Sent on July 12, 2015, 10:37 pm by stulkin@alliant.edu
From: rfpvc@unetvale.com.brSubject: Are you Dead or Alive,,Date: Sun, 12 Jul 2015 12:57:54 -0600Attention: Dear Customer,We need to confirm that this is Truth Before the bank will Release Your Funds to one Jennifer Scott. This Office was contacted by one Jennifer  Scott, From Canada Who Claim to be Your Partner He Promise to finalize everything regarding your Claim as Your Next Of Kin. He said that you were Involved In A car Accident Last year December 2014 and Die without providing a death certificate. We need to confirm that you are truly dead before we can Release the Fund to her. We Believed That You are Dead But As a Federal Office We need a Proof for Record Purposes Before We Can Release the Funds To Him/her, Therefore, Your Silent is a Clear Proof That you Are Dead. Note we will commence On the Release of your Funds To your Next Of Kin from next week if we do not hear from you, May your Soul Rest in Perfect Peace Amen. Regards Mr. Mr paul  WalterDirector Debt reconciliation DepartmentFirst Bank plcEmail firstbankplcng@accountant.com
Click to view scam #131768 - Sent on July 12, 2015, 9:08 pm by rfpvc@unetvale.com.br
Cliquez ici pour afficher parfaitement cet email     Bonjour   Votre destin est-il écrit d’avance ? Vous vous sentez dépassé par les évènements, et chaque jour, vous vous demandez quand cette crise va enfin se terminer.Tenez bon , votre cas n’est pas désespéré, la chance vous sourira à nouveau et ce n’est plus pour longtemps. Avec le Tarot de Marseille, je vous ferai une étude complète.A travers le résultat, vous pourrez changer votre perception des choses et éviter ainsi les obstacles dressés sur votre chemin.Ne laissez pas passer une telle occasion. Je suis là pour vous guider dans vos interrogations. Vous aurez trente minutes de chat voyance gratuite pour exposer et détailler vos problèmes. Agissez au plus vite !   Sincèrement,Votre tarologueYolande     Vous pouvez vous désinscrire des offres d'Astromancia SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: suivi-astro-consult.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131766 - Sent on July 12, 2015, 6:04 pm by Yolande@suivi-astro-consult.com
A customer of our bank who was a victim of airliner crashed left behind a huge sum of money with interest totaling $26.2M, in a dormant account perhaps he could be a member of your family as you bear the same LAST NAME. Please contact me asap for more informations. Yours Sincerely Eric Lim SpamAssassin Report (spam score: 22.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.71.176.210 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.53 listed in list.dnswl.org] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 NSL_RCVD_HELO_USER Received from HELO User 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ericlim1[at]mail.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.0 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.8 FSL_NEW_HELO_USER Spam's using Helo and User 0.9 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.3 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.0 MONEY_FROM_41 Lots of money from Africa 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.8 FROM_MISSP_FREEMAIL From misspaced + freemail provider
Click to view scam #131764 - Sent on July 12, 2015, 2:29 pm by ericlim1@mail.com
From: mkuj111@hot.eeDate: Sun, 12 Jul 2015 14:29:57 +0300To: info@yahoo.comCC: Subject: Very Urgent...I am Mrs. Sophie Thomas sending you letterfrom my sick bed in the hospital. Please contact my lawyerBarrister Harry Williams. Email:barr-harrywilliams@outlook.com for more details.
Click to view scam #131763 - Sent on July 12, 2015, 2:09 pm by mkuj111@hot.ee
Begin forwarded message:From: "Life-Coverage" <newsletterupdate@gate4.bindwave.net>Date: 12 July 2015 13:03:46 BSTSubject: Get Life Coverage at $3.50 per month NowReply-To: replyto@gate4.bindwave.net Get Life Coverage at $3.50 per month Now You are currently subscribed as j Easy Unsubscribes or Mail to: 14781 Memorial Drive, #938,Houston,TX 77079
Begin forwarded message:From: "Murphy Himmelfarb" <xwforbesah@scotlandmail.com>Date: 12 July 2015 13:17:34 BSTSubject: fwd:Commisson Check Payment on Hold(ref#21EAGU)HelloListen.We might not have the capability to advertise so publically for lengthy.Plenty of big firms resent exactly how we snatch workers from them.Want to understand what's causing these men and women to quit their jobs?Find out here:http://bit.ly/1Ml8cRWIt's a pity that we're so imposing to the fortune 500.Can't they adopt our founding, rather than fear it why?The planet will never know.Maybe it's overly daunting to put the members' pursuits first.Administrator*Shanita Espada1458  LUND AVE, PA, 27858"The nice thing about being a celebrity is that if you bore people they think it's their fault."- Henry Kissinger (1923-)
Click to view scam #131761 - Sent on July 12, 2015, 1:59 pm by xwforbesah@scotlandmail.com
Good Day Beneficiary, This is to inform you that your protracted fund of $24,million in 2 boxes has been approved for payment through diplomatic consignment,you are to contact rev Father Ben Davis via email (revfatherbendavis2@gmail.com) For the immediate delivery Regards Frank Donald SpamAssassin Report (spam score: 3.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ciudad.com.ar] 1.2 TO_MALFORMED To: has a malformed address 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (johnmicheal[at]ciudad.com.ar) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #131760 - Sent on July 12, 2015, 1:35 pm by johnmicheal@ciudad.com.ar
From: rkaur@laverne.eduTo: rkaur@laverne.eduSubject: RE: ¤750,000.00 Date: Sun, 12 Jul 2015 05:20:55 +0000.ExternalClass P {MARGIN-TOP:0px;MARGIN-BOTTOM:0px;}.ExternalClass P {MARGIN-TOP:0px;MARGIN-BOTTOM:0px;} From: Raminder KaurSent: Saturday, July 11, 2015 10:08 PMTo: Raminder KaurSubject: ¤750,000.00 Your email has been approved ¤750,000.00 in Chevron Texaco program 2015 Send Name,Address, Tel to,desk-assist1@outlook.comDisclaimer: This message and any attached documents contain information which may be confidential, privileged, or exempt from disclosure under applicable law. These materials are intended only for the use of the intended recipient. Delivery of this message to any person, other than the intended recipient, shall not compromise or waive such confidentiality, privilege or exemption from disclosure as to this communication. If you are not the intended recipient, please notify the sender and delete the material from any computer. Any dissemination or reproduction of this message or attachments is strictly prohibited.
Click to view scam #131758 - Sent on July 12, 2015, 12:07 pm by rkaur@laverne.edu
Date: Sun, 12 Jul 2015 00:53:51 -0700Subject: Hello, Good Day,From: mr.paul.harry08@gmail.comTo: Hello, Good Day,Please sorry if I?mdisturbing you but I will be thankful if you can take your time to read myproposition thoughtfully but before I proceed, I Am GEORGE KABORE,I operatewith one of the largest bank in my country and I engaged the rank as the grouphead of   research/commodities in our bank, I also take charge of allcommodities and the key institutional clients (Banks, Asset managers, Hedgefunds) on investment strategies.Without delay,  I'm writing this letter to you with good faith andstrong desire to solicit for your sincere co-operation in this transactionwhich would certainly boost the financial stand of the both parties involvedwhen successfully completed.In  fact,i want to use my position in myoffice to transfer the sum of Four million five hundred thousand Unite Statesof American Dollars (US$ 5,500.000.00) out of the country perhaps directthrough any of your reliable bank account but if you don?t have account thenyou can quietly open a new bank account or help to look for a reliable andhonest person whose bank account can be use for this purpose and if in truththat you will not betray me when this money is successfully transferred to yourbank account then you will have 40% out of the total money US$5,500.000.00 if youagree then I will give you more details about this deal and directive to getthis money release/transfer to your bank account within 7 days.Meanwhile, the owner of the funds died along-sidewith his entire family on Air Algeria flight that crashed in Northern Mali WestAfrica on the 24th July 2014 killing all 116 people on board, you can get moredetails on the website below:  http://www.cnn.com/2014/07/24/world/africa/air-algerie-flightIf possible then you can make urgent arrangement tovisit me here in my country and I shall presenting you officially to the bankdecision-making as the rightful recipient of this money US$5,500.000.00Thanks and I await your response urgently maybe viamy private Email address at (george.kabore27@terra.com)  George Kabore,
Click to view scam #131757 - Sent on July 12, 2015, 11:32 am by mr.paul.harry08@gmail.com
@font-face { font-family: Calibri; } @page WordSection1 {size: 8.5in 11.0in; margin: 1.0in 1.0in 1.0in 1.0in; } P.MsoNormal { MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"; FONT-SIZE: 11pt } LI.MsoNormal { MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"; FONT-SIZE: 11pt } DIV.MsoNormal { MARGIN: 0in 0in 0pt; FONT-FAMILY: "Calibri","sans-serif"; FONT-SIZE: 11pt } A:link { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlink { COLOR: blue; TEXT-DECORATION: underline; mso-style-priority: 99 } A:visited { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.MsoHyperlinkFollowed { COLOR: purple; TEXT-DECORATION: underline; mso-style-priority: 99 } SPAN.EmailStyle17 { FONT-FAMILY: "Calibri","sans-serif"; COLOR: windowtext; mso-style-type: personal-compose } .MsoChpDefault { FONT-FAMILY: "Calibri","sans-serif"; FONT-SIZE: 10pt; mso-style-type: export-only } DIV.WordSection1 { page: WordSection1 } Return-path: <Robinson-John@aramark.com>Envelope-to: anntiran@polka.co.zaDelivery-date: Sat, 11 Jul 2015 21:34:28 +0200Received: from cpt-prewall-01.mweb.co.za ([196.28.150.151]) by mailstore-04.mweb.co.za with esmtp (Exim 4.80) (envelope-from <Robinson-John@aramark.com>) id 1ZE0Xc-0004Sc-9P for anntiran@polka.co.za; Sat, 11 Jul 2015 21:34:28 +0200Received: from cpt-viruswall-09.mweb.co.za ([196.28.149.29] helo=cpt-mx-06.mweb.co.za) by cpt-prewall-01.mweb.co.za with esmtp (Exim 4.84 (FreeBSD)) (envelope-from <Robinson-John@aramark.com>) id 1ZE0Xc-000DQS-4K for anntiran@polka.co.za; Sat, 11 Jul 2015 21:34:28 +0200Received: from cpt-mx-06.mweb.co.za (cpt-mx-06.mweb.co.za [196.28.149.156]) by cpt-viruswall-09.mweb.co.za (esets_smtp); Sat, 11 Jul 2015 21:34:28 +0200Received: from securemail-pl-mx30.synaq.com ([196.35.198.169] helo=securemail-pl-mx25.synaq.com) by cpt-mx-06.mweb.co.za with esmtp (Exim 4.84) id 1ZE0Xc-0002Gp-0R for <anntiran@polka.co.za>; Sat, 11 Jul 2015 21:34:28 +0200Received: from mail1.bemta7.messagelabs.com ([216.82.254.106]) by securemail-pl-mx25.synaq.com with esmtps (TLSv1:AES256-SHA:256) (Exim 4.63) (envelope-from <Robinson-John@aramark.com>) id 1ZE0XV-0004Zy-6q for anntiran@polka.co.za; Sat, 11 Jul 2015 21:34:21 +0200Received: from [216.82.254.67] by server-10.bemta-7.messagelabs.com id E7/99-23080-FAF61A55; Sat, 11 Jul 2015 19:34:07 +0000X-Env-Sender: Robinson-John@aramark.comX-Msg-Ref: server-8.tower-196.messagelabs.com!1436643245!15238352!1X-Originating-IP: [161.195.68.61]X-StarScan-Received:X-StarScan-Version: 6.13.16; banners=-,-,-X-VirusChecked: CheckedReceived: (qmail 21143 invoked from network); 11 Jul 2015 19:34:06 -0000Received: from unknown (HELO USPHL0EXC5G.fss.aramark.com) (161.195.68.61)  by server-8.tower-196.messagelabs.com with AES128-SHA encrypted SMTP; 11 Jul 2015 19:34:06 -0000Received: from USPHL0EX1509.fss.aramark.com (10.65.10.29) by USPHL0EXC5G.fss.aramark.com (10.80.192.55) with Microsoft SMTP Server id 14.3.224.2; Sat, 11 Jul 2015 15:34:00 -0400Received: from USPHL0EX1510.fss.aramark.com (10.65.10.30) by USPHL0EX1509.fss.aramark.com (10.65.10.29) with Microsoft SMTP Server (TLS) id 15.0.1044.25; Sat, 11 Jul 2015 15:33:59 -0400Received: from USPHL0EX1510.fss.aramark.com ([fe80::749f:2d16:4d30:d483]) by USPHL0EX1510.fss.aramark.com ([fe80::749f:2d16:4d30:d483%21]) with mapi id 15.00.1044.021; Sat, 11 Jul 2015 15:33:59 -0400From: "Robinson, John M." <Robinson-John@aramark.com>Subject: 500,000,00 EurosThread-Topic: 500,000,00 EurosThread-Index: AdC8db7GYjGwvPj4R82Dmx3kVfRhHQAAAuPAAAAAEMAAAAAN8AAAAAiAAAAACCAAAABhsAAAAAdQAAAACVAAAAAGUAAAAAiwAAAABxAAAAAHgAAAAAjgAAAAB6AAAAAI0AAAAAjQAAAACDAAAAAH0AAAAAhgAAAACAAAAAAI8AAAAAmQAAAAB1AAAAAI8AAAAAiAAAAABxAAAAAIsAAAAApAAAAACaAAAAAIoAAAAAxwAAAACjAAAAAL0AAAAAtgAAAAC/AAAAAMgAAAAA/gAAAACrAAAAANQAAAAAugAAAAFEAAAAALMAAAAAyQAAAADMAAAAALkAAAAAxQAAAADFAAAAAPgAAAAA1AAAAAD6AAAAAR0AAAABHAAAAADiAAAAASIAAAABIQAAAAEXAAAAAT0AAAABAADate: Sat, 11 Jul 2015 19:33:58 +0000Message-ID: <adad0f726df84325992d8be65f9e92bd@USPHL0EX1510.fss.aramark.com>Reply-To: "remittancedpt@outlook.com" <remittancedpt@outlook.com>Accept-Language: en-USContent-Language: en-USX-MS-Has-Attach:X-MS-TNEF-Correlator:x-ms-exchange-transport-fromentityheader: Hostedx-originating-ip: [161.195.66.160]Content-Type: multipart/alternative; boundary="_000_adad0f726df84325992d8be65f9e92bdUSPHL0EX1510fssaramarkc_"MIME-Version: 1.0To: Undisclosed recipients:;X-SYNAQ-Pinpoint-Information: Please contact MWEB for more informationX-SYNAQ-Pinpoint-ID: 1ZE0XV-0004Zy-6qX-SYNAQ-Pinpoint: Found to be cleanX-SYNAQ-Pinpoint-SpamCheck: spam, SpamAssassin (not cached, score=5.988, required 5, DCC_CHECK 1.10, DCC_REPUT_13_19 -0.10, DIGEST_MULTIPLE 1.00, FREEMAIL_FORGED_REPLYTO 2.10, HTML_MESSAGE 0.00, KHOP_RCVD_UNTRUST 0.50, LOTS_OF_MONEY 0.00, PYZOR_CHECK 1.59, RCVD_IN_HOSTKARMA_W -0.10, RCVD_IN_HOSTKARMA_WL -0.10, SPF_HELO_PASS -0.00)X-SYNAQ-Pinpoint-SpamScore: sssssX-Pinpoint-From: robinson-john@aramark.comX-Spam-Flag: YESX-Antivirus: avast! (VPS 150711-1, 2015/07/11), Inbound messageX-Antivirus-Status: Clean ----- Original Message ----- From: Robinson, John M. To: Undisclosed recipients Sent: Saturday, July 11, 2015 9:33 PM Subject: 500,000,00 Euros Confirm your 500,000,00 Euros This email has been checked for viruses by Avast antivirus software. www.avast.com
Click to view scam #131756 - Sent on July 12, 2015, 11:25 am by Robinson-John@aramark.com
> From: efinch@paston.co.uk> Subject: RE> Date: Sun, 12 Jul 2015 17:48:29 +0800> To: > > I write to you in good faith. My name is Greg Berman. I have just been informed > by my doctor that I only have few months to live due to cancer illness. I have > decided WILL/DONATE 6,000,000 to you to promote charity works. I have decided to > nominate you as my beneficiary. God bless you. Waiting to hear from you. > > Humbly and sincerely, > Mr. Greg Berman
Click to view scam #131755 - Sent on July 12, 2015, 10:57 am by efinch@paston.co.uk
Advert
Begin forwarded message:From: "Tomasine Lodish" <shmalenank@realtyagent.com>Date: 12 July 2015 03:37:21 BSTSubject: The "infamous" module THIRTEEN.Hi,I'm nevertheless at a reduction concerning whythis technique is really successful.It's clear and simple.I had always thought that producing thousands was out of my achieve.That was, till, I started making big money.Assess this out:http://bit.ly/1gsYLpDIt's as simple as 1...2...3AdministratorJohnette, Nichlos4646 HAYES RD. IL 75104"Wise men make proverbs, but fools repeat them."- Samuel Palmer (1805-80)
Click to view scam #131754 - Sent on July 12, 2015, 10:32 am by shmalenank@realtyagent.com
Begin forwarded message:From: Paypal service <ftgmedia@hyperium.regs.net>Date: 12 July 2015 05:20:29 Subject: Your Account Will Be LimitedReply-To: paypal@service.com   PayPal Your Account Will Be Limited Dear customer, Your Account Will Be Limited , Until we hear from you to update your informations . Simply click on the web address below Update Acount  Help Center | Partner Directory | Logo Center | Security | Business Center
Click to view scam #131753 - Sent on July 12, 2015, 10:19 am by ftgmedia@hyperium.regs.net
Begin forwarded message:From: Apple Support  <service@customer.com>Date: 12 July 2015 03:03:06 Subject: Your Apple ID Account has been Disabled ! Dear Customer,  . Your Apple ID allows you to make purchases on the App Store and iTunes Store, use iCloud on all your devices to communicate via iMessage and FaceTime, play more on Game Center. However, our system has detected several unsuccessful attempts with your Apple ID from unknown devices.  To verify the integrity of your Apple ID please log in and update your personal information,please visit  Manage Your Apple ID. Best Regards, The Apple Support Mon identifiant Apple | Assistance | Engagement de confidentialité Copyright © 2015 iTunes S.à r.l. 31-33, rue Sainte Zithe, L-2763 Luxembourg? Tous droits réservés.
Click to view scam #131752 - Sent on July 12, 2015, 10:18 am by service@customer.com
-----Ursprüngliche Nachricht----- Von: Manager Mrs.Gloria david. [mailto:katblix4@gmail.com] Gesendet: Sonntag, 12. Juli 2015 02:34 An: undisclosed-recipients: Betreff: Breaking News October 2015 Your $1.600.000.00Usd Compensation From Benin Republic. Attention Please. Breaking News Octomber 2015,This is to inform you that the higher authorities that is incharge of international transaction has this morning declared that you will receive your $1.600.000.00Usd United States Dollars) through Western Union Money Tranfer Only as compensation for your past effort here in Benin Republic. So the arrangement has been made this morning and the Federal High Court Of Justice has signed your Western Union Transfer Papers and the only money you will pay is $49. for the signing of it which means your transfer will start tomorrow morning. The daily transfer of your fund is $5000.00 per day until your total $1.600.000.00Usd United States Dollars) is completely transfered to you. I am here to swear to you that your first payment of the $5000.00 daily transfer will be on its way today or lastest tomorrow morning once we confirm the $49 from you which is for the Federal High Court Of Justice Benin Republic signing of your Western Union Transfer Papers.To show you the truth. Below is the First transfer payment details which has been insert into our computer. SENDER NAME; juliette chapin Amount......$5000.00 Text Question....GOD Answer.....BLESS Mtcn Number;==#159-135-9629 Then we want you to type http://WWW.WESTERNUNION.COM and click tracking and pest sender's first name and last name,the you pest mtcn number and click check status to see that your first transfer of $5000.00 is available for you but you will not pick it until you pay the needed $49 for the signing of your Western Union Transfer Papers by the Federal High Court Benin Republic. So we are here giving you this Western Union Payment Information Information for you to send the $49 immediately and your first transfer of the $5000.00 will be on its way after we pick the $49, COUNTRY....BENIN REPUBLIC STATE..COTONOU SENDER'S NAME.... RECEIVER'S NAME....CHRIS OKO TEXT QUESTION...true ANSWER....yes AMOUNT NEEDED.....$49 ONLY MTCN NUMBER... We wait for your mail with the $49 from you and be rest assured that you will receive your total compensation of $1.600.000.00Usd from us because this is General Western Union Head Office here in Benin Republic. Finally you are advise to stop emailing any office or department here in Benin Republic until you receive your full compensation from us,this is for your security. From Western Union Money Transfer Head Office Benin Republic Manager Mrs.Gloria david. Call us with this line....+229-99589093
Click to view scam #131751 - Sent on July 12, 2015, 9:33 am by katblix4@gmail.com
 Hello dear, My name is Felicia nice to meet i believe today will bring a new thing in our life since we are contacting to be friends i will love to read from you back at my Email ( felica4uu@hotmail.com ) for more about me please is very important i will be waiting . Thanks.SpamAssassin Report (spam score: 8.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.177 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (felica4uu[at]hotmail.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131750 - Sent on July 12, 2015, 8:59 am by felica4uu@hotmail.com
SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (paul_ku2[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.0 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131749 - Sent on July 12, 2015, 8:46 am by paul_ku2@hotmail.com
-- I am Mr.Mark Davis, a Legitimate And a Reputable money Lender. We lend funds out to individuals in need of financial assistance, we give loan to people that have a bad credit or in need of money to pay bills, to invest on business. Have you been looking for loan? you have not to worry, because you are in the right place i offer loan at low interest rate of 2% so if you are in need of a loan i want you to just contact me via this email Address: davis_mark1@outlook.comSpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (davis_mark1[at]outlook.com ) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131747 - Sent on July 12, 2015, 7:44 am by izzys@truvista.net
Review Your Matches Free Today SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: kwsnoggingyb.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: kwsnoggingyb.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.41 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: kwsnoggingyb.com]
From: upgradeservice@mediacombb.netSent: Saturday, July 11, 2015 7:10:58 PMSubject: FINAL WARNING: MEDIACOMBB.NET (UPDATE) WARNING: MEDIACOMBB.NET (UPDATE) Your MEDIACOMBB.NET Mailbox Account have exceeded the storage limitwhich is 100GB as set by our Administrator, you are currently running on23GB, you may not be able to send or receive new mails from yourMEDIACOMBB.NET Account until you re-validate your MEDIACOMBB.NETmailbox. To confirm the validity of your email and to prevent your account fromdeactivation, you are advised to update it by proving us with the followinginformation. CONFIRM YOUR MEDIACOMBB.NET EMAIL IDENTITY BELOW* Domain\user name: ................* Password: ....................* Date of Birth: ................... Warning!!! MEDIACOMBB.NET Wemail Account owners that refuse to Re-Validate his orher account within 20 days of receiving this email will lose his or heraccount permanently. We apologize for any inconvenience this may have caused you. Thank you foryour understanding. MEDIACOMBB.NET Tech Support CustomerWarning Code: 8941624Property: Account SecurityCopyright 2015 @Administrator
Click to view scam #131745 - Sent on July 12, 2015, 2:44 am by upgradeservice@mediacombb.net
-----Original Message----- From: A Rhodes <imgriffiti@manx.net> Sent: Sat, Jul 11, 2015 2:46 pm Subject: proposal Hello, I hope this email finds you well.I will be brief here and hope to hear from you soon. I am Sgt. Amy Rhodes of the United States Army on Active Duty and based in Camp Red Cloud. I'm stationed in Uijeongbu, South Korea to keep peace around the Korean Peninsula. I have a business proposal of mutual benefit for you and it is 100% safe. I will be glad to discuss more of this in my next message, if you are interested Email me ( sgtamyrhodes@qq.com ) My Identification will also be sent in due course. Thank you for your time. Regards, A Rhodes
Click to view scam #131744 - Sent on July 12, 2015, 2:09 am by imgriffiti@manx.net
New Phone Deals! Compare Cell Phone Plans Here! .fgedhtivbe{color:#e03429;} SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: axlecenteringtendoplastyct.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: axlecenteringtendoplastyct.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: axlecenteringtendoplastyct.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Attention: I have registered your ATM CARD of US$3.5Mwith DHL Courier Company with registration code of(Shipment Code awb 33xzs).please Contact with delivery information such as,Your Name, Your Address and Your Telephone Number: Shiping company Office: Note you are to pay $105.00 for delivery charge. Name of Dir:Mr John Brown E-mail: dhldelivery@pochta.com Tel:+229 9914 3224. Best Regards, Mr.Emmanuel Eziamaka SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: pochta.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #131741 - Sent on July 11, 2015, 9:03 pm by lucasmota@cantv.net
Hallo,  Benötigen Sie eine dringende Darlehen an Unternehmen zu gründen, hier ist Ihre Gelegenheit auf finanzielle Brentonfinance bei 4%, Interessenten kontaktieren Sie uns für weitere Informationen per E-Mail: arfinances@live.comGrüße This email has been checked for viruses by Avast antivirus software. www.avast.com SpamAssassin Report (spam score: 3.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.203.71.249 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (arfinances[at]live.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.174 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #131738 - Sent on July 11, 2015, 8:18 pm by arfinances@live.com
From: rkaur@laverne.eduTo: rkaur@laverne.eduSubject: RE: Winner $852,000.00Date: Sat, 11 Jul 2015 17:07:55 +0000.ExternalClass P {MARGIN-TOP:0px;MARGIN-BOTTOM:0px;}.ExternalClass P {MARGIN-TOP:0px;MARGIN-BOTTOM:0px;} From: Raminder KaurSent: Saturday, July 11, 2015 9:34 AMTo: Raminder KaurSubject: Winner $852,000.00Your email account has won you the sum of $852,000.00 in the on-going Chevron/Texaco poverty alleviation program 2015 Send your Name,Address, Tel to,help202@outlook.dkDisclaimer: This message and any attached documents contain information which may be confidential, privileged, or exempt from disclosure under applicable law. These materials are intended only for the use of the intended recipient. Delivery of this message to any person, other than the intended recipient, shall not compromise or waive such confidentiality, privilege or exemption from disclosure as to this communication. If you are not the intended recipient, please notify the sender and delete the material from any computer. Any dissemination or reproduction of this message or attachments is strictly prohibited.
Click to view scam #131736 - Sent on July 11, 2015, 7:42 pm by rkaur@laverne.edu
________________________________ From: Brigid Baker Sent: 11 July 2015 09:51 To: Brigid Baker Subject: GIFT Donation has been made to you ,email mrs.gloriamackenie@outlook.com for more details . SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.178 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
Click to view scam #131735 - Sent on July 11, 2015, 7:36 pm by b.baker@barnsley.ac.uk