Logo



MRS JASMINE PETERSON SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.180 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (webvxzaqqq[at]outlook.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122296 - Sent on May 6, 2015, 11:47 am by webvxzaqqq@outlook.com
U.S.A. Internal Revenue Service Department. Bureau of Consular Affairs Washington , DC 20520 Greeting from USA I.R.S ATTENTION DEAR CUSTOMER, We write to inform you that your package with No.35460021, Allocation No: 674632 Password No: 339331, Pin Code No: 55674 and your Certificate of Merit Payment No: 103, Released Code No: 0763; Immediate Telex confirmation No:-1114433; Secret Code No: XXTN013. has been in Customs facility custody waiting for resolutions of the clearance to further the delivery to your delivery address by the delivery Agent. We have been waiting for you to contact us regarding your ATM Card which the agent suppose to deliver to you which was on hold by USA Customs Department and they are requesting for clearance certificate which will be obtain from the origination of the ATM Card before it will be released from the Customs to the delivery agent to complete the delivery to anyway your country is Europe, Oceania,Canada Antarctica,South America And The United States Of America. After the phone call we made on your behalf to the USA Customs Authority and the Government of Benin Republic, it was resolved that the delivery of your ATM Card of $8.3 million usd to your address must be complete within THREE (3) working days upon your compliance to our directives; You should send the sum of $89 USD to obtain the needed Ownership-clearance certificate from Benin Republic. The clearance charges which was initially on the high price has been cut down by the US Embassy in Benin Republic considering the poor economic situations that make it difficult for the middle class citizens to meet up with the clearance of their entitlement. We will upon the confirmation of your clearing charge assign our Diplomat Agent (HENRY BAILEY) to handle your package and proceed with the delivery. Meanwhile you are advice to reconfirm the below information upon contacting us to avoid delivery to wrong person after obtaining the needed Ownership-clearance certificate from Benin Republic because that is what the Customs are waiting for. 1- Your Full Name: 2- Your Delivery Address: 3- Your Contact Mobile Number: 4- Your Occupation: 5- Your Identification (Passport number or ID Card number): Once you notify us with the above information and the needed Ownership-clearance certificate from Benin Republic, the USA Customs will release your ATM CARD to you and it will be delivered to you by the delivery agent, You also advise to contact the delivery agent as well with the delivery address of yours and his name is this below Name HENRY BAILEY Note that you are expected to pay only $89 USD for Ownership-clearance certificate and you are to pay it to Benin Republic as the origination of the package in favor of VICKER EDU as our accountant officer in Benin Republic Send the $89.00 usd through western union or money gram once you receive this mail with the information below for immediate release of your ATM Card, Send it via western union or money gram Receiver's Name:====VICKER EDU Country/City:======¾nin Republic Test Question:=======How Long Answer: ============Urgent Amount:===========$89 USD Mtcn#========== Once you send the money to Benin Republic to this name, please try to notify us with the MTCN so that we can contact Receivers Name:====(VICKER EDU ) for easy pick up and for immediate action on the release of your Ownership-clearance certificate. Note that any unclaimed Fund will be return to Benin Republic Government after 5 days. So you are urgently advised to comply with our directives so that the Customs will release your ATM Card. Yours Sincerely Mrs.Marry Daniel Commissioner of Internal Revenue Service. SpamAssassin Report (spam score: 14.8) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 MILLION_USD BODY: Talks about millions of dollars 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrdavidrdoye[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.178 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (usa.revenueservice2015[at]yandex.com ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.6 MONEY_ATM_CARD Lots of money on an ATM card 3.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #122287 - Sent on May 6, 2015, 11:26 am by mrdavidrdoye@gmail.com
SalaamI am pleased to contact you on a business platform haven received yourdetails from an investment consultant in a recent leadinginternational business round-table engagement.We are a UAE based investment company working on financing projectsand my company will be interested and willing to fund you in anycurrent project you are undergoing as we are privately seeking meansof expanding Al Sayegh Investment portfolio internationally. To this end, we seek to know the possibility of going intopartnership discussion with your company within your present scope ofbusiness. Should you be interested to engage us for a more detaileddiscussion on the aforementioned proposal, we would be happy to do soin whatever medium you find much more appropriate for this engagement.I look forward to your favorable response.Khalid Al MassDirector Investment & Loans| Al Sayegh Investments khalid.almass01@gmail.comSkype: alsayeghinvestmentTel: +971-151-024340 SpamAssassin Report (spam score: 4.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hassan.rona86[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.9 MIME_NO_TEXT No (properly identified) text body parts 2.8 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #122283 - Sent on May 6, 2015, 11:08 am by hassan.rona86@hotmail.com
Dear listed beneficiary,Your inability to go to your local banker and process your allocated ICBPO two weeks ago made you to lose the opportunity of receiving payment via Italian bank however, We have finally succeeded in securing an Irrevocable Conditional Bank Pay Order (ICBPO) coming from United Kingdom of Great Britain for the the remaining affected foreigners who have since been frustrated for their funds in several countries in Africa.You are one of these affected beneficiaries once again. You are no. 6 in the Master-List given to us by the EU - Anti-Fraud International before we departed Europe for Africa. Right now we have stayed couple of weeks here in West Africa going through their rigorous court systems but finally we have succeeded in securing payments for all concerned/affected beneficiaries in this list.The method authorized by the EU - Anti-Fraud International is payment only via discounting of this  Irrevocable Conditional Bank Pay Order (ICBPO) through your local banker. This method of bank to bank payment is secure and prevents fraud.Simply take the details below to your local banker and ask him/her to advice you on how to process it. This is bank to bank. Once your bank is able to verify and process this Irrevocable Conditional Bank Pay Order (ICBPO) from this account, your long withheld $12,500,000.00 will be released by the HSBC, London UK directly to your local bank.Pay Order No:    1097567700010Bank Name:       HSBCBank Address:    13-14 Sloane Square SW1W 8SB, United KingdomAccount Name:    EU Fund Recovery (EFR)Account Number:  20033245swift Code:      MIDLGB22Iban Code:       GB22MIDL50021520033245We still remain in West Africa here to ensure that you are able to process your fund and receive this transfer successfully from the HSBC, London UK.You have to keep constant communication with us via email or telephone for maximum guidance and directives.My name is Roderick Oarrell Buford. I am a US Citizen working for the Anti-Fraud International in Europe. However, I and my entire team are presently in West Africa for this Fund Recovery assignment. We wish you take this great advantage by complying and following up this directive timely.Confirm acknowledgement of this information by replying to us, confirming that you are the real owner of this email and re-stating your Full names and present direct telephone number.Best regards.Roderick Oarell BufordEuropean Union Anti-Fraud International(Presently) in West Africa. SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.66 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (legal10177601[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (legal10177601[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #122268 - Sent on May 6, 2015, 9:44 am by legal10177601@gmail.com
ADT monitored security system for $0 see details SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: meddlingvomicineye.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: meddlingvomicineye.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Olá phredphucker@gmail.com Mais Um Cliente Ganhou o Prêmio De Mais De 40 Mil Reais O Prêmio saiu no concurso 1653 realizado no dia 14/11/2014 que você pode conferir direto no site da Caixa. O bilhete premiado está abaixo. Estudamos o sistema da MegaSena e criamos um sistema de estatísticas que pode aumentar suas chances de acerto em até 80%. Já fizemos dezenas de ganhadores por todo Brasil. Para ter acesso basta acessar nosso site http://www.lloterias.com.br/maria/mega e faça seu pedido. A Equipe e-MegaSena dá uma força para você ter uma boa sorte. Atenciosamente, Equipe e-MegaSena Caso não queira mais receber essas mensagens acesse esse link SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: central365.com.br] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.169 listed in list.dnswl.org] 1.1 DKIM_ADSP_ALL No valid author signature, domain signs all mail -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #122263 - Sent on May 6, 2015, 7:44 am by maria@central365.com.br
.mtgtprouemvoj{color:#5b038f;} .zwlocpvgiwqugv{color:#76bf76;} Get a Free LASlK EvaIuation .nbqpjchrd{color:#2140db;} SpamAssassin Report (spam score: 9.4) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: adcobjecteeku.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_L
¶W±j¼?ì«???´Î ¸õ³J GÂI°ª¼?¾¹ ¦B¼ö·P¼í·?G ©?Pº?ç ¥R®?«½ ­¸¾÷ªM ±jºë®M ¦?¢®M ©¹´_¦¡¦?¢¾¹ ¥þÀ]¯}½L»ù Á?«º¡¤d¦A¨?K¹B¶O³á! ¤?³?yº?º§?N 100%°ª¥é¯u¥R®ð¬ü¤?k ¯u¤H¤ñ¨?¡½?«½ ¥«»ù120,000¤¸ ¤u¼tª½¾P¯S»ù7,980¤¸ ­­¶qÀu´f¤¤ ½??sºô§} http://motor.geocities.jp/lrfwwq7 ©?N¥»«H¥óÂkÃþ¨ì ¦¬¥ó§¨ §Y¥i¥¿±ÂI¿ï³sµ² vvwxyzaaabcdeeefghiijklmnnnopqrrstuvvwwxyzaaabcd SpamAssassin Report (spam score: 8.4) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [187.102.153.146 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: motor.geocities.jp] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 UNRESOLVED_TEMPLATE Headers contain an unresolved template 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.8 PERCENT_RANDOM Message has a random macro in it 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Exclusive Smartphone Sale .wnpgclbf{color:#303470;} SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: lidflowerweaveablekn.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Hi,I'm new in town looking to purchase a home, Please let me know if you are available to assist me i just sold my other home in Texas, so i can buy a new house. I will wait for your email.Andrew Becker270 240 0069 SpamAssassin Report (spam score: 7.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [65.54.190.225 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (webnuwas[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122237 - Sent on May 5, 2015, 10:32 pm by webnuwas@outlook.com
Hello dearMy name is Samira I am a single girl,I saw your profile on (http://www.rusimpex.ru)and my spirit ask me to contact you about this important issueplease write me so we can talk privatelyfor important issues.write me through my privateemail.( samiradiane5@hotmail.com )so that l will give you my picturesand tell you more about myself,Thank youMiss Samira????????????, ??????????? ????? ??????, ? ??????? ????,? ????? ??? ??????? ?? (http://www.rusimpex.ru)? ??? ??? ?????????? ???? ????????? ? ???? ?? ???? ?????? ?????????????????, ???????? ???, ????? ?? ????? ???????? ? ??????? ?????????? ?????? issues.write ???? ????? ??? ???????????????? ?? ??????????? ?????. (samiradiane5@hotmail.com)????? ???????, ????? l ???? ??? ??? ??????????? ?????????? ??? ?????? ? ????,??????????? ??????SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (samiradiane5[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (samira diane ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122225 - Sent on May 5, 2015, 9:26 pm by samiradiane5@hotmail.com
hello, Are you looking for a business loan, personal loans, mortgages, car loans, student loans, debt consolidation loans, unsecured loans, risk capital, etc ... You are in the right place Your loan solutions! I am a private lender who lends Individuals and businesses at a low interest rate and affordable Interest rate of 2%. Contact us by email:Sterlingloanfirm@outlook.com Loan application. Your full name Street address country state Loan Amount Needed sex Length of Loan phone fax Monthly income The exact date you need the loan occupation God bless you thanks Regards SpamAssassin Report (spam score: 3.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sterlingloanfirm2[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [74.125.82.67 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (sterlingloanfirm2[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #122211 - Sent on May 5, 2015, 6:28 pm by sterlingloanfirm2@gmail.com
CITIBANK LONDON25 Canada Square Canary WharfLondon E14 5LB United Kingdom===========================Attention:BeneficiaryOn behalf of the entire staff of Citibank London and British Government in collaboration with World Bank/United Nation we apologize for the delay of your inheritance payment and all the inconveniences you encountered while pursuing this payment. However, from the records of outstanding over due payment with British Government, your name and company was discovered as next of the outstanding inheritor who have not yet received their fund.I wish to inform you that your payment is being processed and will release to you as soon as you respond to this letter. Also note that from the record in our file, your outstanding payment worth of 8.300,000,00 (Eight Million Three Hundred United State Dollars), will be release to you as long as you can get back to us urgently and Kindly re-confirm to us the below following.1) Your full name2) Your full address3) Your Mobile number4  Your Nearest airport close to you5) Your scan drivers license6) Your age7) Your OccupationNote: Any e-mails you receive without this code (551) do not respond to it. And bear in mind that as soon as you hear from DIPLOMAT AGENT at your airport, please do co-operate with diplomat, so that you can help the diplomat secure a Tag Permit, from the arrival airport to enable your consignment not to have problem in your airport authorities.I wait for your call: + 4474-5203-7639 OR +44-70457-11888  Yours faithfully, MR. SCOTT PETERS(OFFICIAL APPOINTEE FOR THE PAYMENT)TELEPHONE NO: + 4474-5203-7639 SpamAssassin Report (spam score: 8.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (payyment.desk[at]outlook.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122208 - Sent on May 5, 2015, 6:02 pm by payyment.desk@outlook.com
.yhigzckgsfeaa{color:#1b0cae;} FREE QUOTE: Get Simplified Issue Term Life Insurance Starting At $3.50/ Month Now!* .rpaater{color:#e58faa;} SpamAssassin Report (spam score: 7.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [209.85.220.179 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: disembowerjointwormha.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
No1好康王 ( 05/06 ) 網路特賣會 -- 玻璃保鮮盒3.4折 受夠了一個動輒三四百的玻璃保鮮盒嗎? 網路特賣超好康報你知 禮盒包裝自用送禮兩相宜 過年年菜吃不完,絕對實用的過年伴手禮! I am not recommending this plan as a universal panacea. But at the moment, it's working for me. Diabetes facts are frightening: A 2014 report from the Centers for Disease Control and Prevention notes that more than 29 And people in the U..?/p> 進入好康特賣會說明頁 本訊息由No1好康王不定期發佈通知,No1好康王是專注於提供好康資訊的網站. 如果您不想要再次收到任何好康通知請至No1好康王網站登記拒收 SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (familiarielias[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature,
Click to view scam #122200 - Sent on May 5, 2015, 5:14 pm by familiarielias@yahoo.com
From: Mccarty, Katina, W (SES) Sent: Monday, May 04, 2015 2:23 PM To: Mccarty, Katina, W (SES) Subject: GIFT I have a project donation for you, it's a private donation to you and I will give you more information after you reply to this my personal contact  Email: lilianebetcourt@163.com SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #122186 - Sent on May 5, 2015, 3:05 pm by KatinaMccarty@KATYISD.ORG
    INTL PROMOTION   REFERENCE NUMBER:  AA/1004BF/2015 WINNING NUMBER:  11 16 33 35 39 51   ATTN: Dear Winner,                                                              EMAIL USERS NOTIFICATION 2015   Congratulations! Your email address has won you the sum of 1,615,810.00 Euros, from the free Microsoft Email lotto promotion. This is one of our yearly promotion programs between the selected E-mails Addresses around the globe.   You are advised to contact the Payment Consultant immediately for the release of your cash prize. You will continue getting this notification until you have received your award before we could close your file.   For claim contact your claim agent at: claims-allianz@consultant.com / emailpromotionaward@europe.com  with the above reference number.   Congratulations from the Staffs & Members of Microsoft Networking Madrid Spain.     Best Regards Agata Consuelo Cayetano Board Managing Director       SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 HK_LOTTO_NAME HK_LOTTO_NAME 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mcawardclaims[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122189 - Sent on May 5, 2015, 2:59 pm by mcawardclaims@gmail.com
                                  NOTIFICATION DHL Tracking info:   Email:                                 [censored]@gmail.com Status of your parcel:           eNotification sentService:                               Express ShippingParcel Number:                    U712149356NUInsurance:                           YesTracking No:                        3071437040     Kindly Download/Print attached label(pdf) file for Parcel details: Thank you for using our services.DHL Global. (c) 2015 Copyright DHL INC 2013. All Rights Reserved. SpamAssassin Report (spam score: 4.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #122178 - Sent on May 5, 2015, 1:37 pm by dhlcoureir@delivery.net
Advert
-- Am Maria from USA am glad today because am now a successful woman of Illuminati, i have taught of been one of the Illuminati member so that i will be wealthy for life and my family will be forever rich. I get linked up by a man called john who introduce me to this agent who have a successful influence with this occultist Illuminati, so he took me joining the team to their real powerful man in USA who was the head of all Illuminati member,He really helped me becoming a member of Illuminati. and now am so glad of becoming a Illuminati member, i am now rich and wealthy.Thank you Sifer Crown For your support. Illuminati is a great and powerful means to get popular in life Do you want your parents to be proud of you, or you want to protect yourself as a popular man in your country email the Sifer Crown on (sifercrownilluminatigroup@outlook.com) he will help you to become rich and achieve all your heart desire. Yours Faithfully Mrs Maria SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (abagawhite[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #122107 - Sent on May 5, 2015, 6:24 am by abagawhite@gmail.com
$1.99 for 100 business cards. SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: deducibleverrierenc.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.176 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
    Goods No1 好康王 -- 折價券瘋狂送 森森購物2000元折價券瘋狂送!森活價滿千就可折200,生活小物超好用! 到森森購物網血拚,結帳前先領取2000元折價券 讓購物更輕鬆! -領取森森購物2000元折價券-步驟說明   好康王小編實購心得 ◎有買女性益生菌的朋友千萬別錯過,折價券使用後,可以用800元購得哦! ◎有的商品是用優惠價就比較便宜,有些商品勾選回森活價再用折價券較便宜喔!有想買的東西先領折價券就對了~ 本訊息由No1好康王不定期發佈通知,No1好康王是專注於提供好康資訊的網站. 如果您不想要再次收到任何好康通知請至No1好康王網站登記拒收 SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (allmanrandall[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #122095 - Sent on May 5, 2015, 5:01 am by allmanrandall@yahoo.com
$2,000,000.00 USD was donated to you by GLORIA MACKENZIE. who won the mega jackpot in United State. for more info contact Gloria Mackenzie via email : macgloriazie@outlook.com SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.172 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.5 AXB_X_FF_SEZ_S Forefront sez this is spam -0.0 SPF_PASS SPF: sender matches SPF record 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 0.4 HK_LOTTO HK_LOTTO 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
Click to view scam #122094 - Sent on May 5, 2015, 4:31 am by roberts_cornelius@asdk12.org
I care to have a good relationship with you,my name Jessyca,good looking girl that is trusted and God fearing,Sharing and loving in nature,I will like to have a good relationship with you,write to me or send your ID at my email,I have a special thing I want to share with you about my life and from the,we know each other and also exchange our pictures. SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (roselyn26x26[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.179 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (jessyca244[at]live.com ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #122092 - Sent on May 5, 2015, 4:05 am by roselyn26x26@gmail.com
My company see yours as a reliable supplier of our needingproducts,Give us detailsabout your products & price list along with phone numbersMr Mubarak Al-Somaily Best Regards,P.O. Box: 51357, Jeddah 21543, Kingdom of Saudi Arabia SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (anaamintholdinggroup[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.9 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #122079 - Sent on May 4, 2015, 11:12 pm by anaamintholdinggroup@gmail.com
.guhlskhwfcndo{color:#ff02ca;} Beautiful Hair in 1 Day, Plus Free Shipping SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.181 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: lidflowerweaveablekn.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Ecobank Nigeria Plc Address: Head Office: 2, Ajose Adeogun Street, Victoria IslandAttention: Beneficiary:I am Dr. Ken Mba, ATM Head of Operation Department Ecobank Nigeria PLC, I resumed to this office on the 5th of last Month and during my official research last week I discovered an abandoned ATM Master card valued sum of $12.5Million with card number 5491 3750 1192 5477 belonging to you as the rightfully intimate beneficiary.I tried to know why this card have not been released to you but I was told that the former  ATM head of operation who left this office two months ago with-held your card for his own personal use without knowing that I will not approve or support him to take your card. Now that your ATM Master card is still available for you to pick it up here in our bank, I want to know how you wish to receive your ATM card along with your four digits pin code number.Your advice comedown here in our bank to pick up your card direct from my office or alternatively you will take responsibility of shipping cost of $250 dollars if you cannot comedown to our bank to pick your ATM CARD your self. In that case you will be required to forward to me your shipment address to enable me deposit your ATM Card to FEDEX or DHL Courier Company for delivery to you.Your direct telephone number and address will be needed and more details of your ATM card payment will be made known to you as soon as I receive your swift positive response, to enable you know the amount programmed for your ATM daily withdrawal. We will serve you better.Yours Faithfully,Dr. Kenneth Mba,EcoBank PlcEmail:Ecobnk-group@accountant.com SpamAssassin Report (spam score: 10.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (federalbureau222[at]outlook.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.0 FBI_SPOOF Claims to be FBI, but not from FBI domain 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122073 - Sent on May 4, 2015, 9:50 pm by federalbureau222@outlook.com
kingsburygrandparentcavitatemandarinacquaintmuseum realmgummybudweiserrutlandsswblat OK©¾°V»?æ¶U´Ú20-200¸U¡I«J©÷©ú±ÀÂ?A»?æ¶U´?K¶O¿??I OK©¾°V»?æ¶U´Ú20-200¸U¡I«J©÷©ú±ÀÂ?A»?æ¶U´?K¶O¿??I ¶i¤J­¶­±¡I         ©?´¦¬¨ì¼s§i«H         dolphinbarrymorelateraexploreasparagusafoot towheadinfinitudenabiscofenceallowfussy appalachiamodemsimplifyvancoughbillion radiologysanctimoniousairliftsavoyardchapterdownriver haneyalephphilturnoffbudgetarydictionary comparativemonstrousburroterminusgrownuppool promiscuoushospitableimmobilityballlashomicron roeebbdriscolldisturbindependentslap zealousphosphorapparelbrainardshudderycambrian fugitivedemandgunkylightheartedroomytoot antagonistmarshlandaffinitybandwagonthoughbinaural SpamAssassin Report (spam score: 15.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 1.0 HK_RANDOM_REPLYTO Reply-To username looks random 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.9 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #122055 - Sent on May 4, 2015, 7:50 pm by wdpganmftei@pillsbury.com
Make Your Phone Your New Fax Machine SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: traditionaryunprejudiceiy.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [209.85.192.48 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
Dear Sir, I am Mr. Ying Fong, It is my interest to contact you in respect of our client from your country That opened a draft account in my bank, It is with good spirit of heart I opened up this great opportunity to you. This deceased client of mine shares almost the same name as yours, He died as a result of heart-related condition on 14 of November 2011. His heart condition was due to the death of all the members of his family in the fukushima earthquake and tsunami disaster on the March 11, 2011 in northeastern Japan where they all lost their lives. His draft account opened in my bank before his unfortunate death,The amount in this account is currently US$19,526,200.00 (Nineteen Million Five Hundred and Twenty Six Thousand Two Hundred United states Dollars Only). I want to present you as the beneficiary of the deceased. I will use my position and influence in our bank to make sure they release this money to you for us to share.If I wait for days and did not hear from you, I shall look for another person. Kindly get back to me for more details.Please reply to my private email address for security purpose : y.fong64@yahoo.comSincerely,Mr. Ying Fong,Email :  y.fong64@yahoo.com SpamAssassin Report (spam score: 3.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ying.fong33[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122042 - Sent on May 4, 2015, 6:46 pm by ying.fong33@outlook.com
BANK OF AMERICA® 56 East 42nd Street New York, NY 25017 USA. Website: http://www.bankofamerica.com Attention: Sir&Madam, Know  this message is from the Management of the Bank of America N.Y. branch wishes to inform you that after a brief meeting held by the Bank executives on the 15th of Aug, 2014 at precisely 9:00a.m,we deem it appropriate to intimate you that your funds will be transfer into the United States Treasury Account with the JP Morgan Chase Headquarters at 270 Park Avenue in New York due to your inability to complete the transaction and your failure to meet up with a minor payment obligation. The actual transfer of your funds ($15,500,000.00) into the Government Account comes up on 25th of Sept,2014. This is in line with the instructions of the USA Treasurer, Mrs. Rosa Gumataotao Rios that all unclaimed funds be paid into the United States Government Treasury Account as unserviceable funds in compliance to section 3 subsection 1(a) of the United States Financial Law enacted in 2001 after an attack on our dear country on September 11,2001. Find below the profile of the banking institution where your funds will be transferred into following the Government directive: Name of Bank: JP Morgan Chase Headquarters at 270 Park Avenue in New York. JP Morgan Chase Official Bankers for the United States Treasury Department AC NO: 68302345093 Routing NO:021109593 Account Name: United States Treasury Department, USA JP Morgan Chase & Co. Type: Public (NYSE: JPM) Dow Jones Industrial Average Component Industry Banking Financial services Founded New York City, New York (1799) Headquarters: New York City, New York, U.S. Area served: Worldwide Key people: Jamie Dimon (Chairman, President & CEO) Products: Finance and insurance Consumer Banking Corporate Banking Investment Banking Global Wealth Management Mortgage loans Credit Cards Revenue increase $250.434 billion (2013) Operating income decrease $48.082 billion (2013) Profit: increase $11.729 billion (2013) Total assets: decrease $2.142 trillion (3Q 2014) Total equity: increase $173.830 billion (3Q 2014) Employees: 236,810 (2014) Website: JPMorganChase.com JPMorgan.com Chase.com Note that if you still wish to receive your funds do get back to us immediately so that we will remove your funds transfer from the list of those transactions to be seized by the United States Government.Also be informed that we need only a Fund Transfer Pin Code to complete the wire transfer. If you want to received your fund, that mean you we be sending the Fund Transfer Pin Code fee which is $200 by Money Gram to the issuing officer at the bank where your transaction originated Get Back for the details. Please this is just the only issue, that has been holding you from claiming your fund. Beside, you might have been dealing with Internet Scammer, Hacker and Impostor, in regards of this fund, but do to the wrong information, that is why you have not receive your fund, Now Bank of America are working with the help of U.S Treasurer to ensure that you receive your fund before within three working days We have sent this message since 5th FEB 2015 without any response from you, Right now, we will have the fund transfer to U.S Treasury Account as Unserviceable Fund, we are working with the instruction of U.S Treasurer Mrs.Rosa Gumataotao Rios that all unclaimed funds be paid into the United States Government Treasury Account as unserviceable funds in compliance to section 3 subsection 1(a) of the United States Financial Law enacted in 2001 after an attack on our dear country on September 11,2001. The earlier the better you obtain the Fund Transfer Pin Code, so that your fund we not be seized by U.S Government, the Fund Transfer Pin Code gives your access to received your fund and it prove that the fund is now made fully to you as the real beneficiary. Get Back for full details. Thank you, Your's Faithfully, Frank Brown: Transfer Dept. Bank of America® Bank of America, N.A. Member Fdic. Equal housing lender © 2015 Bank of America Corporation. All rights reserve SpamAssassin Report (spam score: 10.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dr.rubenabbati[at]hotmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [65.55.90.110 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.9 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #122022 - Sent on May 4, 2015, 5:26 pm by dr.rubenabbati@hotmail.com
Attn: Dear  Your fund transfer transaction is now successful, UBA Bank has finally credited the money in your name, And to inform you that we have finally transferred the sum of $4.6 Million today to you into the new online Account that was credited for you by UBA Bank . Meanwhile you are advice to click at  (Click here to view your payment online)  And log your email and password correctly and  should in-case you log one of your email and you did not view the Online Account opened for you, Then you can try with another emails of yours with their correct passwords and you will view your transferred payment Online. And remember to forward to your inbox if you found my email on your Spam, If you left it on your spam it will not let you to click the Above link, So you must forward to your inbox OK But before you can have access to this money you are to make sure you log in correctly and that is the only way you can view your payment online, Then you can transfer your fund into your private Account. website (Click here to view your payment online) So  you are advised to go through this website and Log in with your real email address and password to confirm the transfer information, do it now and get back to us with Confirmation.E-MAIL: (unitedbank2219@inbox.lv) Yours truly, Mrs. Antonina Simcaria SpamAssassin Report (spam score: 5.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rodanpe9005[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.66 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (rodanpe9005[at]gmail.com) 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #121971 - Sent on May 4, 2015, 1:34 pm by rodanpe9005@gmail.com
Attn: Dear  Your fund transfer transaction is now successful, UBA Bank has finally credited the money in your name, And to inform you that we have finally transferred the sum of $4.6 Million today to you into the new online Account that was credited for you by UBA Bank . Meanwhile you are advice to click at  (Click here to view your payment online)  And log your email and password correctly and  should in-case you log one of your email and you did not view the Online Account opened for you, Then you can try with another emails of yours with their correct passwords and you will view your transferred payment Online. And remember to forward to your inbox if you found my email on your Spam, If you left it on your spam it will not let you to click the Above link, So you must forward to your inbox OK But before you can have access to this money you are to make sure you log in correctly and that is the only way you can view your payment online, Then you can transfer your fund into your private Account. website (Click here to view your payment online) So  you are advised to go through this website and Log in with your real email address and password to confirm the transfer information, do it now and get back to us with Confirmation.E-MAIL: (unitedbank2219@inbox.lv) Yours truly, Mrs. Antonina Simcaria SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (fatimaassad[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.196 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #121977 - Sent on May 4, 2015, 1:25 pm by fatimaassad@gmail.com
SpamAssassin Report (spam score: 24.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 NSL_RCVD_HELO_USER Received from HELO User -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date 1.2 MISSING_HEADERS Missing To: header 0.2 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 3.9 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.5 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 1.9 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header
Click to view scam #121947 - Sent on May 4, 2015, 11:31 am by info@orange.pl
re
I an Mrs.Amal Almonte, Crown wife of the late Mr. Juan Almonte. I have a will proposal $ 10.7Million USD dollars for you. Please contact me for more details: amalalmonte1@msn.com Connection, Ms.Amal Almonte SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] 2.5 MILLION_USD BODY: Talks about millions of dollars 2.6 HK_SCAM_N1 BODY: HK_SCAM_N1 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #121931 - Sent on May 4, 2015, 10:54 am by nancy.wong@oracle.com
I have a project, can you help me to execute? Regards Mrs Mai Chang. SpamAssassin Report (spam score: 1.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #121914 - Sent on May 4, 2015, 8:46 am by adbrown510@tds.net
Advert
.dqtntlikphiyjqn{color:#fe3293;} A GOLDEN opportunity for a credit card! Apply today .rgdcxdctpnh{color:#dfe891;} SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ichneumonoideansecha.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ichneumonoideansecha.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.169 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
Get Cash Now Through a Reverse Mortgage! SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: epicraniussyrticdy.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.52 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
Hello, Please I'm Lt. Col, Michael H. CallumAfghanistan Base.Please contact me on my email Address I have something Important to Discourse with you. Thanks.lt.callum22@outlook.com SpamAssassin Report (spam score: 9.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.51 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mcallum2[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121893 - Sent on May 4, 2015, 2:08 am by mcallum2@outlook.com
ªF¨?ö ªF¨?ö-­è18·³ªºªº¤p¬ü¤k¡Aµo¨|¥¿¦n-¦h¤HµL®M¤º®g ±a¤pºô¤?^®a¡Aµy·LºN¨â¤U¦oº¡Áy³q¬õ¤p¥ÞÅ?nÀã³á ½?ö·?«¥kÁä½?s¶K¤W¤U¦Cºô§}Æ[¬?s§i http://ppt.cc/pgp8 SpamAssassin Report (spam score: 16.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jxrjqzhw[at]163.com) -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 3.2 FORGED_MUA_THEBAT_BOUN Mail pretending to be from The Bat! (boundary) 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts 1.0 XPRIO Has X-Priority header
Click to view scam #121888 - Sent on May 4, 2015, 2:08 am by jxrjqzhw@163.com
Enem 2015 O curso mais completo para quem deseja entrar para uma Universidade !! "Você terá em suas mãos todo material necessário para ter um Ótimo desempenho no Exame Nacional do Ensino Médio!" Nosso Material Contém: => Apostilas com todas Matérias => Exercícios e Simulados => Aulas em MP3 => Aulas em Vídeo => Questões e Resoluções => Provas e Gabaritos => Resumos => Material Extra e muito mais. Além disso preparamos um Pacote Super especial especialmente pra você que esta recebendo esse email ! Veja todos os detalhes acessando o site abaixo: http://www.kit-enem.com Havendo dúvidas entre em contato através do e-mail: contato@kit-enem.com Essa mensagem foi enviada para o email: [censored]@gmail.com Nosso objetivo é proporcionar um excelente conteúdo para o aluno que vai prestar exame para o Enem 2015. Caso não seja de seu interesse você pode indicar para alguém que precise. Se desejar não receber mais mensagens nos informe. SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: kit-enem.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (enemdicacerta[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #121886 - Sent on May 4, 2015, 1:54 am by enemdicacerta@gmail.com
Google Drive. Keep everything. Share anythingHello,Please see the document I uploaded for you using Google Docs. Click Here simply sign in with your email to view the document is very important.Greetings .Consuelo Perez SpamAssassin Report (spam score: 4.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (consuelo3003[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121879 - Sent on May 4, 2015, 1:22 am by consuelo3003@gmail.com
.yizrrzoyrk{color:#373ffe;} Browse Best SUVs! Honda CR-V, Buick Encore, Audi Q5, Nissan Rogue & More! SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: mopervermiculariazc.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mopervermiculariazc.com] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
hi
H I'm Emily, I contact your base on partner   ship so I will like you to get back to me on my email (emilyelviss187@outlook.com)Thank you and hope to hear from youEmily SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.177 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (emilyelvis231[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #121869 - Sent on May 4, 2015, 12:27 am by emilyelvis231@outlook.com
Tired of always looking exhausted? .dfekholu{color:#a17ce5;} SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: homebuiltpectorallyaw.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: homebuiltpectorallyaw.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Calvary greetings in the name of Almighty Lord, I remain convinced that you will be surprised by this mail, but this remains the utmost truth. It is against my official responsibility to release such confidential issue like this to you, but I have no other measures perhaps, I am taking the hazard steps due to my belief as a Christian. It is worthy to notify you on the position of your fund with the Federal Government of Nigeria, the truth is, there are lots of forces working against you right from the last CBN Governor (Mr. Sanusi Lamido Sanusi), and the current Governor (Mr. Godwin Emefiele), with other top officials of all the commercial banks here in Nigeria. They have been frustrating you by impeding your payment. But I have measures to assist you receive your fund without further delay and avoid unnecessary expenses. Though it might be risky but, one has to take it because there is no other option for help. If I tell you that they are using all these money you send to them to work against you, you might not believe it, but it is the reality. The most crucial thing is that, you halt (discontinue) further communication with anybody or group of people contacting you from Central Bank of Nigeria (CBN) or any Nigerian government agency in connection with the transfer of your fund which has left you frustrated and bankrupt for long. It is evident that these people are certainly trying to fulfill their selfish interest which will result in you being totally bankrupt in the end and yet not receiving your inheritance. What you have to do is, set up an account anywhere, may be in any country, and must retransfer the fund into another account immediately you confirm the wire accreditation from the Central Bank of Nigeria into your account. This is for security guarantee. If the transfer is made into your account this week, then you can retransfer in the next 5working days into another account. If you wish that we begin immediate process, kindly notify me as soon as you get this mail for more instruction and procedures. Dr. Mrs. Veronica Amadi [JP] KTT UNIT CBN SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (cbnbank15[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 2.2 YOU_INHERIT Discussing your inheritance 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.6 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
Click to view scam #121818 - Sent on May 3, 2015, 1:55 pm by cbnbank15@gmail.com
FROM: US AMBASSADOR TO Benin republicSenders Ambassador Michael Raynor,U.S. Embassy Benin rep Town HallCotonou, Benin Republic Good day Dear I want to inform you that I shall be coming to your country for an official meeting and i willbe bringing your funds of $1.2 million united state dollars along withme as part of compensation from the president of Benin republic for thoseaffected in scams activities in Benin republic but this time i will not gothrough customs because as an ambassador to Benin republic, I am a usgovernment agent and i have the veto power to go through customs. Assoon as i am through with the meeting i shall then proceed to youraddress. (Send your cell phone number and the address where you wantme to bring the package).You have really paid so much in this delivery that makes me wonder.You are a very lucky this time because i shall be bringing your fund myself andthere is nothing anyone can do about it.Your package $1.2 million united state dollars must be registered asan ambassadorial package for me to defeat all odds and the cost ofregistering it is $120 usd the fee must be paid by you via Money Gram and attach to me the payent slip so that all necessary arrangement can be made before time will be against us. i suppose to pay the fee on your behalf but due to the situation of your fund it's noted that you must be the sender of the fee.This development is coming now that the ministry wants to offset allyour outstanding payments to all our legal foreign beneficiariesaround the world in which your payment file was affected. As you mayknow(1). MONEY GRAM MONEY or WESTERN UNION TRANSFER TO:Recipient: Sylvester okekeCountry: Benin republicCity: Porto-NovoCountry code: 00229Text Question: okText Answer: okAmount: US$120.00As soon as you send the fee make sure you send me the paymentinformation. to this email address: ( ambmichaelraynor@mail2american.com ) or text it to my cell +229 6860 2702 or 00229 6860 2702My flight is Tuesday next week and i expect you to comply before thenso that the delivery can be completed. If you do not comply, then itwill not be my fault if you do not receive your package.Ambassador Michael Raynor,U.s. Ambassador to Benin republicSpamAssassin Report (spam score: 5.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.138.121.121 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (emj9450[at]att.net) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (emj9450[at]att.net) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.2 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #121799 - Sent on May 3, 2015, 11:15 am by emj9450@att.net
Place Gulf Oil AD signs on your vehicle for $400 weekly. Reply if interested... SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #121798 - Sent on May 3, 2015, 10:10 am by admin1@sirentel.net
èº~¥S§??í¤W¦?v èº~¥S§??í¤W¦?v¡A¤@°_¥]¾i°ª¤¤¤k¥?AÀH®?µ·R¤¤¥X ¶W¥¿¤k¤j¥?A?¨?¿úÁ?N¨??W¨®¡A¶}©l¤º®g 3P ÃC®g ½?ö·?«¥kÁä½?s¶K¤W¤U¦Cºô§}Æ[¬?s§i http://ppt.cc/pgp8 SpamAssassin Report (spam score: 16.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 1.3 RATWARE_EGROUPS Bulk email fingerprint (eGroups) found 2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender e
Click to view scam #121786 - Sent on May 3, 2015, 9:39 am by qqarkhw@163.com
.rirtbsyhvh{color:#e81cbe;} Save on a New Heating or A/C Unit .ujypayvcpoqq{color:#864c71;} SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.45 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: rhodymeniascheffeljb.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: rhodymeniascheffeljb.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Search Now - All-Inclusive Cruise Deals! SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: meddlingvomicineye.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: meddlingvomicineye.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.45 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark