Logo



MISS FELICIA JOHNSONAUDITOR GENERALDEAR,RE: TRANSFER OF US$15.200.000 00 MILLION TO YOUR ACCOUNT.I feel quite safe dealing with you in this important business.Though this medium (Internet) has been greatly abused, I choose to reach you through it because it still remains the fastest medium of communication.However, this correspondence is private, and it should be treated in strict confidence.At first I will like to assure you that this transaction is 100% risk and trouble free to both parties, In order to transfer outFIFTEEN MILLION TWO HUNDRED THOUSAND DOLLARS, (US$15.200 000 00) from our bank here in Burkina Faso The fund for transfer is of clean origin.The owner of the fund is a foreigner, a program leader who was believed to acquire the fund through his secret Crude Oil deal with the Former IRAQ government.The deceased died with all the members of his family in an auto-accident in June 23, 2001 without a WILL.The amount involved is US$15,200,000.00 and I want to transfer this money into your account as the foreign beneficiary of the fund.I know that this letter will come to you as a  surprise as we don't know ourselves before, BUT BE SURE THAT IT IS REAL AND A GENUINE BUSINESS.I CONTACT YOU BELIEVING THAT YOU WILL NOT LET ME DOWN ONCE THE FUND GOES INTO YOUR ACCOUNT.PLEASE REPLY ME WITH THIS EMAIL ADDRESS ( feliciajohnson111@yahoo.com)Let me hear from you.  RegardsFelicia SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (feliciajohnson0016[at]outlook.fr) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119158 - Sent on April 18, 2015, 11:11 am by feliciajohnson0016@outlook.fr
WILLIAM CHAMBERS & ASSOCIATES, SOLICITORS ADVOCATES TRADE MARK AGENTS 104 GARY HILSON CRESENT BIRMINGHAM UNITED KINGDOM Dear friend Before I proceed, I must first apologize for this unsolicited mail to you. I am aware that this is certainly not a conventional way of approach to establish a relationship of trust, but you will realize the need for my action. I am Barrister William Koko, a legal practitioner and I am the personal attorney to late Engineer Paul....WITHELD, a national of your country who used to work with Manchester & Cheshire Construction Company United Kingdom. He used to be my client. On the 21st of April,2002, my client, his wife and their only daughter were involved in a car accident along Oldfield Road Salford Manchester. All occupants of the vehicle unfortunately lost their lives. Since then I have made several inquiries to your embassy here to locate any of my clients extended relatives but all proved unsuccessful. I hereby seek your consent to present you as my late client's next of kin since you share the same last name with him. I have contacted you to assist me in repartrating the fund valued at EIGHT MILLION FIVE HUNDRED THOUSAND POUNDS left behind by my client before it gets confisicated or declared unserviceable by the Bank where this huge amount were deposited. The Said Bank has issued me a notice to provide the next of kin or have his account confisicated within the next twenty one official working days which is three weeks from now. Since I have been unsuccesful in locating the relatives for over 10 years now, I seek the consent to present you as the next of kin to the deceased since you have the same last names with him so that the proceeds of his account can be paid to you as the bonafide beneficiary. All I require from you is your honest cooperation to enable us see this transaction through. I guarantee that this will be executed under legitimate arrangement that will protect you from any breach of the law. On receipt of your positive response, we shall then discuss the sharing ratio and modalities for the transfer. I have all the necessary information and legal documents needed to back you up this claim. All that i needed from you is to be honest, trustworthy and transperant both in business and in spirit with his or her loyal co-operation to enable us see this transaction through. I once more guarantee that this will be executed under legitimate arrangements that will protect you from any breach of the law. Please contact me through my private email address, (williamkoko7@gmail.com) for more details. Best Regards, Barr.William Koko. [Esq] SpamAssassin Report (spam score: 14.8) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (williamchambers101[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.0 MONEY_BARRISTER Lots of money from a UK lawyer 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 3.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases 2.2 MONEY_FORM_SHORT Lots of money if you fill out a short form 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.2 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #119160 - Sent on April 18, 2015, 11:06 am by williamchambers101@gmail.com
18.04.15---------- Forwarded message ----------From: Mr. Warren Buffet <sakuraaayuuko@yahoo.co.jp>Date: 2015-04-16 19:13 GMT+02:00Subject: Donation From Mr. Warren BuffettTo: Hi,My name is Warren E. Buffett Foundation, an American business magnate, investor and philanthropist, one of the largest private foundations in the world. I believe strongly in?giving while living? I had one idea that never changed in my mind ? that you should use your wealth to help people and i have decided to secretly give {$1,500,000.00} One Million Five Hundred Thousand United Dollars, to randomly selected individuals worldwide. On receipt of this email, you should count yourself as the lucky individual. Your email address was chosen online while searching at random. Kindly get back to me at your earliest convenience, so I know your email address is valid.Thank you for accepting our offer, we are indeed grateful You Can Google my name for more information: Mr Warren Buffett.God bless youMr Warren Buffett Billionaire investor   
Click to view scam #119152 - Sent on April 18, 2015, 11:02 am by sakuraaayuuko@yahoo.co.jp
Making money is very easy if you use the financial Robot....[stcoj] http://tinyurl.com/p4z6mya [qjmax] [scqwz] [hkzmd] [tztxe]
Click to view scam #119162 - Sent on April 18, 2015, 10:59 am by
(RBC) Royal Bank Of Canada 3068 Mayfield Rd, Brampton, Ontario L6Z 0E3, Canada Office: 1 (917) 724 8846 Office: 1 (703) 951 6099 Dear: Beneficiary, The Board of Trustees and Management of Royal Bank Of Canada wish to inform you today that your outstanding Inheritance fund valued at the total sum of US$7,500,000,00 Million Dollars which was deposited with our bank here in Canada to your name many years ago has been legally approved and Authorized by the European Union committee on Foreign Payment Resolution, following with the payment release letter we received from Canadian Ambassador to U.S, for onward transfer, therefore, an instruction to credit your fund have been given to this Bank by the (FRB) Federal Reserve Bank Of Scotland for immediate release of your fund to your bank account. As the newly appointed/accredited International Paying Bank, we have been instructed by the World Governing Bodies, together with the Committee on International Debt and the Board of Foreign Transfer Unit, Inheritance and Contract Review Panel, to release your funds with immediate effect; with this exclusive Vide Transaction No:US/UN/WB/ICB/2011 and Transfer Allocation No:ICBPLC/X44/701LN/FRB/GB, Password: 339331, Pin Code: 78569, Certificate of Merit No: 104, Release Code No: 0876; Be informed that we have verified your payment file as directed to us, and your email address is next on the list of our outstanding fund beneficiaries to receive their payment before the end of this first Quarter term of the year 2015. Be advised that because of too many funds beneficiaries due for payment at this first quarter of the year, you are entitled to receive your inheritance sum of US$7,500 Million Dollars, therefore, your fund transfer notification latter has been forwarded to the Central Bank Of Canada and to the Canadian Ministry of Finance for final approval. We advise you as a matter of fact to quickly reconfirm your full banking details and your Residential Home Address with your valid telephone number to this bank to enable us proceed with the claim process of your fund transfer, also be informed that we have some necessary legal documents concerning this transaction already in our bank which will be given to you as well for proof and confirmation. We awaiting your immediate response with your information to enable this bank proceeds and serve you better as we where directed. Thank you for choosing Royal Bank Of Canada. Signed, Yours Faithfully, Rev. Jim C. David, The Managing Director. SpamAssassin Report (spam score: 15.3) pts rule name description ---- ---------------------- -------------------------------------------------- 3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary: 1.0 HK_RANDOM_REPLYTO Reply-To username looks random 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.178 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (brank.canadaoffice[at]aol.fr) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (rbnkcanada21[at]hotmail.com ) 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 2.8 YOU_INHERIT Discussing your inheritance 1.0 FREEMAIL_REPLYTO R
Click to view scam #119157 - Sent on April 18, 2015, 10:55 am by brank.canadaoffice@aol.fr
Attn: Railway Line Rehabilitation:   With due respect I am Honourable Dr. Williams Sani Zida Nigeria nationality , a lower level politician based in Abuja presently, I am contacting you believing you are a sub contractor or a general contractor, and also believing that you have experience in rail way rehabilitation, I mean maintenance of rail way line or reconstruction of rail way line.  My reason of contacting you is because of the opportunity at hand presently, this opportunity was give to G5 board members including me to look for foreign contractors that will be awarded the contract of rehabilitation of Nigeria rail way line in deferent states in Nigeria.  The new president of Nigeria his Excellency is using this medium to compensate all the G5 board member that contributed to make sure he win this past election, he is compensating the G5 board members to enable them put more effort for him to win his second tenor of office.  The contracts need new foreign contractors for the deal at hand to be perfected because through the contract every mediator will be compensated accordingly  If you are interested in this contract of rehabilitation of rail way line in some states in Nigeria, note that you will come down to Nigeria in person; on your arrival to Nigeria I will link you to the first lady her Excellency for further negotiations and for proper documentation as protocols demands.  This contract is direct from presidency that is the reason why you have to meet with her Excellency the first lady one and one to counter sign all needed documentation before awarding you the contract.  If interested I advice you forward your dates as listed bellow,  Your full name:  Your company name:  Nationality:  City:  Occupation:  Position:  Sex:  Age:  Mobile telephone number:  Thanks for your co operation,  Honourable Dr. Williams Sani Zida SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (honwilliamsszidaa[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #119146 - Sent on April 18, 2015, 10:50 am by honwilliamsszidaa@gmail.com
Begin forwarded message:From: "  Alcohol Detox                                  "              <newsletter@tcsef.eltrapere.com>Date: 18 April 2015 05:52:04 BSTTo: <Undisclosed-Rcpts@tcsef.eltrapere.com>Subject: Beat Alcoholism Today.                  Reply-To: <newsletter@tcsef.eltrapere.com> Can't see images? View as a webpage
Click to view scam #119151 - Sent on April 18, 2015, 10:48 am by newsletter@tcsef.eltrapere.com
Sent from my iPhoneBegin forwarded message:From: "e-mail helen.jones2004" <helen.jones2004@ntlworld.com>Date: 18 April 2015 07:21:12 BSTTo: undisclosed-recipients:;Subject: SMTP, MAILER, WEBMAIL, FRESH LEADS, HACKED DATING SITES AVAILABLEI sell fresh spammed tools.. tools like rdp, smtp, webmail( 500 bccunlimited), mailer, fresh cc bin, track 1 and 2, dump, virus( trojan,zeus, botnet), fresh hacked paid dating sites( seniorpeoplemeet.com,match.com, meetic.com, jdate.com, christianmingle.com, rsvp.com.au,farmersonly.com, evow.com)PAYMENTS OF DATING SITES AND OTHER SITESOther tools available: Monster job posting and resume search database,Mystery results address, personal assistant address, hacked alibabaemail and pass, fresh email and pass worldwide, bank login, banktransfer, usa and canada cc top up.Alibaba posting, alibaba company email and pass, craigslist postingOctober 20th 2014 worldwide email leads database updated...Free 500bcc inbox mailer for order above $50Bonus: Flowers, rings, pizza, hampers and gift delivery to yourclients worldwide.. 100% guaranteed deliveryCONTACT ONLY FOR SERIOUS DEAL..Yahoo id for chat: chenj099
Click to view scam #119145 - Sent on April 18, 2015, 10:47 am by helen.jones2004@ntlworld.com
Facebookfacebook??????????? Newman ?? Facebook?????????????????? Facebook ??????????????????????????? ??????????????????????? ????????????????? ????????????????????????? ???????????????????? Newman ?? Facebook????????????????????? submit@scammed.by ???? ?????????????????????????????????????? Facebook ????????????????????????????????????????????????????????????? ??????????????????????Facebook, Inc., Attention: Department 415, PO Box 10005, Palo Alto, CA 94303
Click to view scam #119159 - Sent on April 18, 2015, 10:46 am by
Begin forwarded message:From: Alfred Cambell <messages-noreply@linkedin.com>Date: 18 April 2015 02:04:54 Subject: I'd like to add you to my professional network on LinkedIn                 Alfred Cambell Nurse Greater New Orleans Area     I'd like to add you to my professional network on LinkedIn.   - Alfred     Confirm that you know Alfred         You received an invitation to connect. LinkedIn will use your email address to make suggestions to our members in features like People You May Know. Unsubscribe Learn why we included this. If you need assistance or have questions, please contact LinkedIn Customer Service.   © 2015, LinkedIn Corporation. 2029 Stierlin Ct. Mountain View, CA 94043, USA  
Click to view scam #119150 - Sent on April 18, 2015, 10:44 am by messages-noreply@linkedin.com
Begin forwarded message:From: "Elena Martin" <americangreetings@fkm.com>Date: 18 April 2015 07:39:07 Subject: Check out the eCard I sent you from Yahoo! Greetings You've just received a Yahoo! Exclusive eCard via AmericanGreetings.com Viewing your eCard is just a snap! Click on the following link: http://egreetcards.mooo.com/ecards/view.pd?i=584221553&m=9681&rr=y&source=yahoo968 We hope you enjoy your eCard. If you have any comments or questions, please visithttp://egreetcards.mooo.com/ecards/view.pd?source=yahoo968 Sending ecards and creating printables has never been more enjoyable.Get ready to experience the next generation of American Greetings Thanks for using Yahoo! AmericanGreetings.com 
Click to view scam #119143 - Sent on April 18, 2015, 10:40 am by americangreetings@fkm.com
Dear Sir/Madam;I want to make an urgent purchase order from your company on behalf ofNetrade Marketing (pvt)Ltd, but before placing an order, I'd like to know if you oryour company can make a provision exactly  products here kindly view the attachment to see the products,Please get back to me if its available and, also, please let me know:- Your minimum order quantity.- Your FOB Prices and FOB Port.- Your estimated delivery time.Best RegardSales and managing Director,Mr Hanssan MalikNetrade Marketing (pvt)LtdTell,,+905314948597Fax,,,+905314948591SKYPE...Malik231Email;salessalesdepartment@hotmail.com SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.182 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jainarvindlodha[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.1 NAME_EMAIL_DIFF Sender NAME is an unrelated email address 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #119139 - Sent on April 18, 2015, 10:29 am by jainarvindlodha@gmail.com
Begin forwarded message:From: Fbi Office <chiratchaya2066@yahoo.co.jp>Date: 18 April 2015 10:15:01 BSTTo: undisclosed recipients: ;Subject: Re: FBI Headquarters, Washington, D.C. (Be Aware!!!)Reply-To: Fbi Office <officeimf534@yahoo.it>Anti-Terrorist And Monetary Crimes DivisionFBI Headquarters, Washington, D.C.Federal Bureau Of InvestigationJ.Edgar Hoover Building935 Pennsylvania Avenue, NwWashington, D.C. 20535-0001ATTENTION: BENEFICIARYThis e-mail has been issued to you in order to Officially inform you that we have completed an investigation on an International Payment in which was issued to you by an International Lottery Company. With the help of our newly developed technology (International Monitoring Network System) we discovered that your e-mail address was automatically selected by an Online Balloting System, this has legally won you the sum of $2.4million USD from a Lottery Company outside the United States of America. During our investigation we discovered that your e-mail won the money from an Online Balloting System and we have authorized this winning to be paid to you via INTERNATIONAL CERTIFIED BANK DRAFT.Normally, it will take up to 5 business days for an INTERNATIONAL CERTIFIED BANK DRAFT by your local bank. We have successfully notified this company on your behalf that funds are to be drawn from a registered bank within the world winded, so as to enable you cash the check instantly without any delay, henceforth the stated amount of $2.4million USD has been deposited with IMF.We have completed this investigation and you are hereby approved to receive the winning prize as we have verified the entire transaction to be Safe and 100% risk free, due to the fact that the funds have been deposited with IMF you will be required to settle the following bills directly to the Lottery Agent in-charge of this transaction whom is located in Cotonou, Benin Republic. According to our discoveries, you were required to pay for the following,(1) Deposit Fee's ( IMF INTERNATIONAL CLEARANCE CERTIFICATE )(3) Shipping Fee's ( This is the charge for shipping the Cashier's Check to your home address)The total amount for everything is $96.00 We have tried our possible best to indicate that this $96.00 should be deducted from your winning prize but we found out that the funds have already been deposited IMF and cannot be accessed by anyone apart from you the winner, therefore you will be required to pay the required fee's to the Agent in-charge of this transactionIn order to proceed with this transaction, you will be required to contact the agent in-charge ( MR. NICHOLAS SMITH ) via e-mail. Kindly look below to find appropriate contact information:CONTACT AGENT NAME: MR. NICHOLAS SMITHPHONE NUMBER: +229-99212821You will be required to e-mail him with the following information:FULL NAME:ADDRESS:CITY:STATE:ZIP CODE:DIRECT CONTACT NUMBER:OCCUPATION:You will also be required to request Western Union or Money Gram details on how to send the required $96.00 in order to immediately ship your prize of $2.4    million USD via INTERNATIONAL CERTIFIED BANK DRAFT from IMF, also include the following transaction code in order for him to immediately identify this transaction : EA2948-910.This letter will serve as proof that the Federal Bureau Of Investigation is authorizing you to pay the required $96.00 ONLY to MR. NICHOLAS SMITH via information in which he shall send to you,MR. JAMES B. COMEYFederal Bureau of Investigation F B IYours in Service,Photograph of DirectorJAMES COMEY, IIIJAMES COMEY,III Director Office of Public Affairs
Click to view scam #119138 - Sent on April 18, 2015, 10:28 am by chiratchaya2066@yahoo.co.jp
Dear FriendPlease accept to assist me in this Noble money transaction that will benefit you and i and make us richThis is Noble and i will required your commitment and Financial obligation to have this transaction done and for a great achievement.RegardsHami SuleSpamAssassin Report (spam score: )
Click to view scam #119136 - Sent on April 18, 2015, 10:15 am by hamisule@yahoo.com
BEST OFFER EVER! Take $10 Off Proactiv+, plus FREE shipping + gifts! .zzbtfqsnbwjvon{color:#31a983;} SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.180 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: wostotter.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wostotter.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 PLING_QUERY Subject has exclamation mark and question mark
Click to view scam #119135 - Sent on April 18, 2015, 10:04 am by contact@539OBBP.wostotter.com
18.04.15---------- Forwarded message ----------From: Rose Alico <chessman@cantv.net>Date: 2015-04-16 19:54 GMT+02:00Subject: Att: Our Esteem Customer,To: robertbrant66@gmail.com  Att: Our Esteem Customer,We have deposited the cheque of your fund ($1.50000000USD) through Western Union department after our final meeting regarding your fund, All you will do is to contact Western Union director Mr. Mark Ben via Tel+229_98798030 He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name;;;;;;Address:;;;;;;;;; Country:;;;;;Phone Number:Though, Mrs.Anaet Mark has sent $5000 in your name today so contactMr. Mark Ben as soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund,Best RegardsThanks,Mrs Rose
Click to view scam #119134 - Sent on April 18, 2015, 9:55 am by chessman@cantv.net
To order send through a list of names and a company logo you would like on the badge and we will quote you right away we have designers who will do a design layout and send you a quote all at once. Please Note: we accept a min order quantity of 5 name badges. We also do printing- business cards – flyers – fridge magnets – key rings – website design and name badges.   Business cards 500 full colour 300gsm board -  R450 5000 flyers size A5 full colour -free artwork design.  R1850 website Design - 3 page website. R1850 100 fridge magnets business card size- R1420 2m pull up banner with carry case - R1250   New product:email marketing - send 10000 emails to your customers for R500   To get a fast quote send us a email graham@printing2design.co.za     Kind Regards Graham Lloyd Cell :081 701 5048  Office 031 837 6050 Please Note : Please Supply us with a PO.Box Address for Delivery of badges  Sample of badges- https://www.youtube.com/watch?v=1NMvag0wuSk   http://www.youtube.com/watch?v=tCtCEcRH62Q   https://www.youtube.com/watch?v=3Tf2ei6fOVg   https://www.youtube.com/watch?v=sEZKWz1Vbm4 SpamAssassin Report (spam score: 3.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.171 listed in list.dnswl.org] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: dnpmarketing.biz] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: dnpmarketing.biz] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 T_FROM_12LTRDOM From a 12-letter domain
Click to view scam #119133 - Sent on April 18, 2015, 9:26 am by info@dnpmarketing.biz
There has been an automatic security update on your email address. CLICK HERE here to complete updatePlease note that you have within 24 hours to complete this update because you might lose access to your Email Box. ThanksFrances O. ThomasFor IT Helpdesk   
Click to view scam #119132 - Sent on April 18, 2015, 9:01 am by
Advert
---------- Forwarded message ---------- From: Parit Tunyapisitchai Date: Sat, 18 Apr 2015 06:42:17 +0700 Subject: Fwd: ?????????????????????. To: martinngu9@gmail.com, ???????? ???????????????????66 Dear Martin, I was forced by the old creditors to find a new person to find 90,000 Baht to complete and get the box latest on Monday, next week. I can find one but you must help me GUARANTEE to this new person: That we will be the Agent of MAROOMTHAI Products and also the FINANCIER of his trading firm. After we get the box on Monday, the 20th of this month, we will sign MOU for Mr Tan's company to get a long term loan with interest rate saem as commercial bank. I will try to call and make an appointment with him first. Then, send you the update. Maybe I've to meet him and show him all the documents concerning the box. Thanks. PARIT TUNYAPISITCHAI ---------- Forwarded message ---------- From: ???????? ???????????????????66 Date: Fri, Apr 17, 2015 at 2:48 PM Subject: Re: ?????????????????????. To: Parit Tunyapisitchai Dear Mr. Parit, Sorry we didn't call you back as promised because we are quite busy now.We also thank you for your kind interested in our Moringa products. It's easy to start representing our products.After payment done for the selected products,we'll deliver you products within 24 hours after payment confirmed.Our representatives normally get discounts base on the quantity bought as follow:- 1.discounts 15% off retail price if order between 1- 10 dozens 2.discounts 30% off retail price if order above 11 dozens( except moringa oil only 20% discounts is maximum) Price checked =>http://maroomthai.com=>?????????? Please feel free to contact us for more details. Regards, Tan 089-7719005 2558-04-06 9:24 GMT+07:00, Parit Tunyapisitchai : > *Greetings from:* > *Mr. PARIT TUNYAPISITCHAI* > Nationality: THAI > Marital Status: Divorced > Occupation: CEO of Simm Trading & Thai African Foundation > Age: 66 YEARS > Address: 58-60 SOI THIP VAREE, PHAHURAT ROAD, > BANGKOK 10200, THAILAND. > *Phone numbers: 084-881-4322, 083-053-2929* > > Parit Tunyapisitchai > Bangkok, Thailand > tel 084-881-4322 > 083-053-2929 > fax: 02-890-6079 > -- *Parit Tunyapisitchai* tel. +6684-881-4322, +6683-053-2929
Click to view scam #119130 - Sent on April 18, 2015, 8:56 am by heng2me@gmail.com
Dear Sir/Madam;I want to make an urgent purchase order from your company on behalf ofNetrade Marketing (pvt)Ltd, but before placing an order, I'd like to know if you oryour company can make a provision exactly  products here kindly view the attachment to see the products,Please get back to me if its available and, also, please let me know:- Your minimum order quantity.- Your FOB Prices and FOB Port.- Your estimated delivery time.Best RegardSales and managing Director,Mr Hanssan MalikNetrade Marketing (pvt)LtdTell,,+905314948597Fax,,,+905314948591SKYPE...Malik231Email;salessalesdepartment@hotmail.com SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (racheljohn32[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #119127 - Sent on April 18, 2015, 8:41 am by racheljohn32@gmail.com
-- Dear Friend, Goodday, I am Barr. James Prices, a solicitor at law in UK,I have an inheritance proposal of ¢G9.8 million for you from my Late client who has the same last name with you.If this proposal is acceptable by you I shall provide you with more details. Please,if interested contact me via this email address: stampsadee61@gmail.com SpamAssassin Report (spam score: 5.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.176 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (adessstamps50[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 3.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
Click to view scam #119126 - Sent on April 18, 2015, 8:32 am by adessstamps50@gmail.com
I sell fresh spammed tools.. tools like rdp, smtp, webmail( 500 bcc unlimited), mailer, fresh cc bin, track 1 and 2, dump, virus( trojan, zeus, botnet), fresh hacked paid dating sites( seniorpeoplemeet.com, match.com, meetic.com, jdate.com, christianmingle.com, rsvp.com.au, farmersonly.com, evow.com) PAYMENTS OF DATING SITES AND OTHER SITES Other tools available: Monster job posting and resume search database, Mystery results address, personal assistant address, hacked alibaba email and pass, fresh email and pass worldwide, bank login, bank transfer, usa and canada cc top up. Alibaba posting, alibaba company email and pass, craigslist posting October 20th 2014 worldwide email leads database updated...Free 500 bcc inbox mailer for order above $50 Bonus: Flowers, rings, pizza, hampers and gift delivery to your clients worldwide.. 100% guaranteed delivery CONTACT ONLY FOR SERIOUS DEAL.. Yahoo id for chat: chenj099
Click to view scam #119125 - Sent on April 18, 2015, 8:27 am by
Hi Friend, How are you doing over there,Am Derrick Nicholas by name i saw your profile on Facebook and i become interested to contact you also i will send my pictures to your email as soon as you reply me back. Thanks NICHOLAS SpamAssassin Report (spam score: 0.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 FSL_PHP_EXPLOIT_41 PHP Script being run by someone in Africa -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record
Click to view scam #119123 - Sent on April 18, 2015, 8:23 am by info@trusted.net
  -- Dear Friend, My name is Hannah Anderson; I am 25 years old, from London -England, where I school and work as a fashion designer for part time job after my school. Am the only daughter of my parents, my father died on a fatal auto accident on his way to see my sick mother at the hospital where she was admitted for Cancer treatment, she also died when she heard about the death of my father in same day at the hospital. Before the death of my father, he had willed part of his Real Estate Business, Gas Stations and a total sum of £50,700,000.00(Fifty Million, Seven Hundred Thousand Pounds Sterling) to me. After the death of my both parents, things became hard for me, paying my school fees, putting food on the table and taking care of my other needs with my fashion designer work which I do as a part time work after my school, I went to the bank where my late father deposited the fund on my behalf to with-draw money in other to take care of my self and pay for my school fees with other bills. I was shocked when the Bank Manager explained to me that I will not be able to with-draw from the deposited money, because my father had put a clause on the Will, which he used in depositing the fund with them, saying that before I will be given access to the money, I will either have to be 30 years old or if only I get married before the age of 30 , in which case, my husband will be legible to claim the money on my behalf by standing in as my late fathers next of kin to claim the deposited fund on my behalf. Today I am only 25 years old. And I have no access to the money till I'm 30 years. So, I’m contacting you to stand as my husband to claim this fund on my behalf and in case if you are married already, you can still help me by standing in as my late father’s next of kin to the deposited fund. So, please get back to me as to know how you will be remunerated as I will part with 25% of the total sum £50,700,000.00 (Fifty Million, Seven Hundred Thousand Pounds Sterling),while 10% will be mapped out for any expenses that we're to use to receive the money from the deposited Bank. Please remember that I am writing you this email purely on the ground of trust so we can achieve this deal together. This transaction will last for two weeks after you get back to me on how serious you are to claim this fund on my behalf. Reply me at: hannahanderson288@yahoo.com.tw Yours Truly, Hannah Anderson SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hannahanderson821[at]yahoo.co.uk) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119121 - Sent on April 18, 2015, 7:55 am by hannahanderson821@yahoo.co.uk
Hi, Hi, I Am Maria Sen,  (Business Development Manager)  We specialize in re-designing and re-developing websites if you are considering any of the following projects. Please let us know in case you are interested.  I would be happy to share our Work Portfolio, Client testimonials and Service Packages You can give me your Skype id or Phone number to discuss more. Kind Regards, Maria Sen Business Development Manager   SpamAssassin Report (spam score: 1.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rakeshseo4567[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119119 - Sent on April 18, 2015, 7:22 am by rakeshseo4567@hotmail.com
.ielka {font-family: Arial, Helvetica, sans-serif} .s {font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); } ??? ?? ?????? ???? ?????, ??? ?????? ?????? ???? ??????????? Villeroy & Boch, Mexx, Joop -50% Tommy Petersen -90% Gingier -60% Andreu Toys -55% Ian Mosh -60% Krusell -90% ????????? -90% Versace, Dsquared, Iceberg -80% ????? ?? ?? ????????? ???? ?????????? ?????????, ????????? ?? ????????? ????????? ? ?????????? ??????????? ?????? ????????? ????????? ????, ??? ???????? ? ????? ?? ??????????: ????? 1000, ?????? ??????????, ????? ????????, ???. ???? ???????????? ? 10, ??. 3, ? ??? 202706277, ?????? ??? ??????????? ?????????? ? ??? ?????? ?????? ??????? ?? ???????? ?? ?????, ??? ????? ??? ??????? ?? ? ??????? ?? ?? ???????????? ??? ????? goldensales.bg ?????? ?????? contact@goldensales.bg ? ????????? ?? ?????, ?? ?? ????????? ?????? ?????? ?? ?????? ???????????. ?? ????? ?? ????????? ???? ???????? ????? ?? ?? ???????. ??? SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.170 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: goldensales.bg] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119117 - Sent on April 18, 2015, 6:05 am by contact@nm.goldensales.bg
Dear Sir/Madam, Hello, this is Abby from Shenzhen Matrix Battery CO.,LTD. Our company is a professional SLA battery manufacturer with 16-year¡¯s experience.So we want to avail ourselves of opportunity establishing business relation with you.If you want to know more about our product,please contact us,by the way, free sample are available. Widely Used in:1.Fire protection ,security uninterruptible power supply, backup power supply2.Telephone and telecommunication equipment3.Uninterruptible power supply systems for bank4.Emergency lighting or small lamp fitting5.Electric power system6.Security systemThank you in advance Best regards Abby Shenzhen Matrix Battery Co.LtdSales Representative of European-Market***************************** Tel: +86 755 8357 7116   Fax: +86 755 8357 7126phone:+86 13575417265**************************** SpamAssassin Report (spam score: 0.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mbattery1234[at]163.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mbattery1234[at]163.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #119115 - Sent on April 18, 2015, 5:18 am by mbattery1234@163.com
Samsung Electronics (UK) Limited Samsung House, 1000 Hills wood Dr. Chertsey, KT16 0PS GBR Tel: +44 705 3833 397. Samsung Asia and Euro zone has nominated your email account for a prize of 500,000GBP and a Samsung galaxy S4 smartphone through a microsoft data base email random selection. To redeem or claim your nominated prize,send your details as requested below to our email samsunggloba@outlook.com Full Names: Age: Current Home Address: Mobile Number: Identity proof: Conutry : Bank Account Details Confirm Nominated Email: Alternative Email Address: Contact us via email samsunggloba@outlook.com Congratulation once again from all staff and directors of Samsung Promotion Team. MR Georgy Galli. Manager/Promotion Director. Samsung Electronics Uk Ltd. Tel: +44 705 3833 397. SpamAssassin Report (spam score: 1.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.42 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
Click to view scam #119114 - Sent on April 18, 2015, 5:09 am by samsunggloba@info.net
Attention This is the MTCN= 7191803020 from western union to pick up your first payment $5,000USD today Contact Western union Agent Mr Benn Adam TEL: +229 68522992 Thanks SpamAssassin Report (spam score: 4.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [82.57.200.117 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (antonia.baires[at]alice.it) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #119112 - Sent on April 18, 2015, 4:25 am by antonia.baires@alice.it
Dear submit@scammed.by, VAADI Herbals has Contacted you to bring forth a Special Opportunity.  Become a Distributor of an Internationally Accepted Brand and Promote it in your City! A Leading Herbals Cosmetics Brand with a Product Range of over 175 Unique Products in Skin, Face, Hair, Bath & Body, Foot Care and Gifting Categories Becoming a Wholesaler a highly profitable venture due to correct product positioning. Retail prices of all Products are very affordable leading to high repeat purchase from end customers Products are being exported to USA, France, United Kingdom, Russia, Malaysia, South Africa, Nigeria, Yemen, New Zealand, Indonesia and several other countries.Products meet International Standards in Quality and Packaging. Minimum Requirement Minimum Investment of Rs.50,000 is Required to become a WHOLESALER You should have experience with Sales and Marketing You should have a network & know where to sell the products in your region   Click Here. Regards, Vaadi Herbals Team                                               --If you do not want to receive any newsletters, please click here
Click to view scam #119110 - Sent on April 18, 2015, 3:41 am by submit@scammed.by
Dear sir,Zhongshan Yijia factory,which have over 13 years experience of producing LED mosquito traps/killers.We have profuse designs with series quality grade, and expressly, our price is very competitive because we are manufactory.MT599, MT699, MT882, MT858 ,MT999 are the hottest selling mosquito killers and fly traps, if have any interested,pls feel free to contact me.Attached our catalog and spec. for yr reference.Yr early reply will be much appreciated.Best Regards,wincy   Sales manager:Wincy Huang Zhongshan Yijia Lighting Factory  M: +86-18676002894 E: wincy@elonglighting.com.cnskype:wincywong90QQ:1158552392 W: http://elonglighting.com        SpamAssassin Report (spam score: 1.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.172 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119108 - Sent on April 18, 2015, 3:23 am by wincy@elonglighting.com.cn
YOU NEED A LOAN AND CANT GET FROM YOUR BANK WE CAN GIVE A NON SECURE LOAN UPTO $500,000 TO $2,000,0000 TO FINANCE YOUR BUSINESS CONTACT US TODAY WITH YOUR PERSONAL DETAILS OR COMPANY DETAILS FOR QUICK LOAN APPROVAL YOUR FULL NAMES ADDRESS TELEPHONE AGE OCCUPATION COMPANYS NAMES EMPLOYER NAME TELEPHONE SpamAssassin Report (spam score: 31.4) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [89.190.209.254 listed in zen.spamhaus.org] 1.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.3 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 3.1 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.8 UPPERCASE_50_75 message body is 50-75% uppercase 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 1.3 FROM_MISSP_TO_UNDISC From misspaced, To undisclosed 1.7 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Click to view scam #119109 - Sent on April 18, 2015, 3:17 am by david@megalan.bg
Hello Good day! We are in Tulsa Int'l Airport,Usa with your 2 Consignment Merchandise valued US$6.7Million, confirm your address and mobile number reply by sms (646) 439-6273 / Mr Hull Michael. SpamAssassin Report (spam score: 0.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hull.michael4[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (hull.michael4[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #119104 - Sent on April 18, 2015, 2:05 am by hull.michael4@gmail.com
Dear Invitee, Nonprofit/NGO Colleague, UN General Assembly invites companies and organizations to participate in this important meeting. UN convening a Four-day Global Summit of Economists, Educationists, Administrators, Manufacturers, International Finance, Corporate Finance, Researchers, Non-Governmental Organizations, Religious Leaders, Community Organizations,lawyer and law firm,individuals from the public and Private Sector from 5th-9th May, 2015 in London (UK) to assess the worst global economic down turn since the Great Depression. The aim is to identify emergency and long-term responses to mitigate the impact of the crisis, especially on vulnerable populations, and initiate a needed dialogue on the transformation of the international financial architecture, taking into account the needs and concerns of all countries of the world. You are invited to take part in the International Conference. Registration to this Summit is absolutely "free" and strictly for invited individuals and organizations only. As an invitee, you have received a registration code UN/CODE/66987/2015-UK with the invitation letter, which grants you access to the registration form. The United Nations General Assembly will sponsor free travel costs and all-round flight tickets for all participant. Invited participants will only be responsible for their hotel accommodation and feeding cost at the Royal Queens Hotel. Venue: Queen Elizabeth II Conference Center (QEIICC) Date:5th-9th May, 2015. Conference Theme:Impact and implications of the global financial and economic crisis on sustainable development & climate change proposals for an integrated global response to the crisis. For further details about registration form,visa,flight ticket and other details, write an acceptance letter to be part of this event and send it directly via our Official e-mail together with your cellphone number for confirmation. Send us e-mail: unitednations_summit@secretary.net unitednations.summit@aol.fr or Call Dr. Pitt Thomas for more information +44703-597-1620. We look forward to meeting you at the forthcoming Global Financial and Economic Crisis conference. Register Now!!!! Mrs.Kathleen Fitzpatrick (Organizing Secretary) Communication and Public Affairs. United Nations-Nations Unites Division for Social Policy and Economic Development Department of Economic and Social Affairs Room UK2-1324, 2 United Nations Plaza, England, United Kingdom. --- This email is free from viruses and malware because avast! Antivirus protection is active SpamAssassin Report (spam score: 0.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: secretary.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (no_replytoold[at]live.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.5 DATE_IN_PAST_24_48 Date: is 24 to 48 hours before Received: date 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #119103 - Sent on April 18, 2015, 1:30 am by no_replytoold@live.com
Dear Beneficiary,This is to officially inform you that we have written to you before without getting respond from you  and we believe that our previous mail did not get to you therefore we write you again. We are  contacting you concerning the release of your inheritance fund / Draft /Cheque /ATM Card which have  been delayed for transfer by some officials who claim to be in position of your fund thereby extorting  money from you in one way or the other.Your Fund has finally been approved for transfer by the West  Africa Fund Monitoring Unit. Your fund will be transfer to you via MasterCard ATM which is cash-able in any ATM machine or Bank anywhere in the world.We hereby inform you that the ATM card worth US$4.8,million US dollars has been credited in your favour as the first part payment of your inheritance fund which has been delayed by these officers who claim  to be in position of your fund.Therefore you are warned to stop any further communication with anybody  concerning your inheritance fund.Your fund to be released via MasterCard ATM in act to uphold the rule of law which we represent.You  have to reconfirm the informations below for security reasons. And also be informed that delivery agent will leave this country as soon as you comply with (Courier)Company requirementSend them the following information of yours for the conclusion of your Atm Card: DHL director,  Mr.Duhung Pierre,Phone:+229 6166 98491. YOUR FULL NAMES:2. Delivery Address:3 PHONE NUMBER:4. CELL NUMBERS:5. EMAIL ADDRESS:6. SEX:7. AGE:8. OCCUPATION:9. COUNTRY:10. CITY:11. COPY OF UR PASSPORT OR ID.Therefore you have to stop contacting anybody or offices regards the check draft since I have  authorized the bank to issue you an ATM CARD so that you can withdraw your funds to avoid any further  problem.contact him once you received  this email.Thanks for your antispation.From Hon Mrs. Juliet OdiliSpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (oruga0211[at]yahoo.co.jp) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #119102 - Sent on April 18, 2015, 12:55 am by oruga0211@yahoo.co.jp
Advert
WAYN Invite Hi, Lazarus Kalu from Lomé has left you a message on WAYN.    Read message    All the best,The WAYN Team To stop receiving requests from Lazarus Kalu, click hereTo stop receiving any notifications from WAYN, click here SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119100 - Sent on April 18, 2015, 12:46 am by invitation@whereareyounow.net
 United Bank For Africa06 BP 1409 AKPAKPA DODOME COTONOU,REPUBLIC OF BENIN.PHONE: +229 9911-3883,Attention Beneficiary. We the Board of Directors, United Bank Of Africa (UBA BANK) HAS ordered Our Foreign Payment Remittance Unit to Issue you a  CORPORATE ATM CARD where Beneficiary Fund of $ 8.6 million US Dollars Will BE Uploaded, and today we got notice  That your Payment HAS Been uploaded into this CORPORATE ATM CARD and also have registered it with DHL courier company {DHL} forDelivery to You.They Were Supposed to Have shipped your Packaged ATM CARD but They Insisted That you MUST re-confirm to Them your  . current Delivery address to Ensure Accurate Delivery MOST IMPORTANT: Due to the content of the package, DHL mandated That  before your package will be shipped, A Tax / Stamp Duty MUST be procured according to the New Customs Creed and the essence ofsuch Document is to ensure a hitch-free delivery .Therefore reconfirm your current delivery address as listed below. 1.Full Names2.Delivery Address3.Telephone Number4.Your Occupation5.Your Age6.Your IDThese are the people who have received their packages.Name: Ruth Brinson: Tracking Number 1Z 96R 406 22 1003 4521Name: Leigh Gilchrist: Tracking Number 1Z 96R 406 22 1003 4530Name: Amanda R. Hamilton: Tracking Number 1Z 96R 406 22 1003 4549Name: Deborah Dominick: Tracking Number 1Z 96R 406 22 1003 4558Contact them Today to avoid increase of their keeping fee and letme know once you receive your ATM Card.All could track in DHL site.Your Shipment Code: #AXIB 131ZXR,Your Package Registration No; # Eg2272,Security Code No: # 01721457,Please Hurry Now as your package Might Cure in Demurrage if it stays more than 2 0r 3 days with DHL, As you send the Above information your Delivery agent who IS in USA, Washington DC AIRPORT HIS phone numbers SHOULD BE send to you Immediately for IMMEDIATE conversation between you and him.Thanks,Mrs.Joyce CarterATM OFFICE,Tel: 0022961728725SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (huihuikawaijp[at]yahoo.co.jp) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #119098 - Sent on April 18, 2015, 12:25 am by huihuikawaijp@yahoo.co.jp
From: ECOWAS <info@serv2.linked-new.org>Date: 2015-04-17 16:19 GMT+02:00Subject: Is this your email Id XXXXXXXXXX ?To:   Hello,If this is your email Id XXXXXXXXXX please contact me urgently. My records indicate that you have an unclaimed funds worth over US$10million in one of the Ecowas  country. To help confirm the details i have on record please send to me the following:(a) A copy your Passport.(b) A letter addressed to ECOWAS from you authorizing the release of your funds. In the letter of instructions, please provide your address and also include your contact phone number. Throughout the Ecowas  community currently we have approximately $35 Billion remains unclaimed in Ecowas community banks. ECOWAS Payment division acts as custodian of these unclaimed funds from banks, insurance companies, governments, and other entities. Once it is reported to this division, efforts are made to pay it to the rightful owner. Consists of uncashed checks, unused bank accounts, unclaimed consignment and other property such as stocks and bonds that has not been claimed by the owner for a specified period of time (generally two to five years) in some cases the payment may have simply been forgotten by the owner . I am contacting you because your email Id XXXXXXXXXX was found on the file as the beneficiary contact email. Your funds which has been identified as unclaimed, will be escheated to government in accordance with Ecowas unclaimed property laws after two months unless you respond.After providing all requirement please allow a minimum of 4-to-8 to receive your funds.Thank you,-ECOWAS PAYMENT COORDINATOR-
Click to view scam #119097 - Sent on April 18, 2015, 12:20 am by info@serv2.linke
View available psychology degree plans online .tdadfhcewemlhr{color:#3a2ab2;} SpamAssassin Report (spam score: 9.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ohfetologist.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ohfetologist.com] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Click to view scam #119095 - Sent on April 17, 2015, 11:58 pm by contact@TGg01r3dXn.ohfetologist.com
Dearest One, How are you doing Thank you very much for your kind reply,My name is Captain Mark Clark an American soldier based in Afghanistan on peace keeping ,Being so ignorant of the internet since but a friend has opened my eyes about the internet and that is why i am writing you as i have already gone through your profile and found you very attractive and interestingIt?s very hard for me to tell you this but I do not have a choice now. I am just hoping you can keep secrets.Please, read the next paragraph carefully and comment.About ten days after I arrived here in Afghanistan, I was attached to a special tactical unit as a command relay engineer for an operation which busted a Taliban bunker and the troop that went for that operation looted the bunker before setting it on fire. They recovered over 150 million US dollars of the Taliban funding. The commander agreed with the rest of the troops not to return the money to the authorities. They split the money among themselves and in other to have me keep my mouth shut; they gave me 15 million dollars which I rapped up among my clothing and have been hiding it since then. I knew it would never be possible for me to leave the base with the money myself as they have all kinds of security laser scans.Right now as I am about to leave Afghanistan, I  arranged with that security courier company who brings medical supplies in and out of the base from the US to the RED CROSS without security checks to deliver it to you as my personal effects. The box I mailed to you contains 15million dollars carefully wrapped up in my clothing and paintings in a luggage sealed and stamped in your name as the receiver.There is no other way I could have been able to bring it out from Afghanistan. I cannot bring it with me because I will be searched and scanned before I leave the base. There is no risk involved at all because the courier company is reliable and will deliver it to you safely without knowing what is contained underneath my clothes. I would also like for you to honestly and fairly tell me how much of the money you would like to have as compensation for the receipt. This is not stealing     Friend because the money is better in our hands than being used for guns and suicide bombers. We can give a substantial amount to charity to clear our conscience. Please, be honest with me on this and do not disclose this information to anybody else until the delivery is made.I only require your1) Home  Address2) Full Name3) Direct Telephone Number4)Your email AddressPlease do reply to this my email Address for security reason  markclark12@hotmail.co.ukMind you all this re-gusted from you did not post any risk but only needed for documentation and delivery up keepingYour FriendMark Clark SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (internationalmonetaryfund37[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.179 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Hello Apply For Your Loan TodayI am a loan lender and i offer loan to people that are in need of financial help and that want to pay his/her debt or bill ifyou are such one that need help you can contact us at f.cinvestplc@gmail.com as soon as you contact us you will get what you need, hurry and get what youwant, do not fail to contact us atAPPLICATION  INFORMATION* Name Of Applicant:....................* State: ...........................* Country: ................* Age:....................* Occupation:.........* Income Rate: .....................* Amount/Money Requested: ......* Loan Duration:..................* Contact Phone Number:...........contact us at f.cinvestplc@gmail.comSpamAssassin Report (spam score: 3.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.53 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119092 - Sent on April 17, 2015, 11:34 pm by hrd-sinartambang@panasiagroup.co.id
Dearest One, How are you doing Thank you very much for your kind reply,My name is Captain Mark Clark an American soldier based in Afghanistan on peace keeping ,Being so ignorant of the internet since but a friend has opened my eyes about the internet and that is why i am writing you as i have already gone through your profile and found you very attractive and interestingIt?s very hard for me to tell you this but I do not have a choice now. I am just hoping you can keep secrets.Please, read the next paragraph carefully and comment.About ten days after I arrived here in Afghanistan, I was attached to a special tactical unit as a command relay engineer for an operation which busted a Taliban bunker and the troop that went for that operation looted the bunker before setting it on fire. They recovered over 150 million US dollars of the Taliban funding. The commander agreed with the rest of the troops not to return the money to the authorities. They split the money among themselves and in other to have me keep my mouth shut; they gave me 15 million dollars which I rapped up among my clothing and have been hiding it since then. I knew it would never be possible for me to leave the base with the money myself as they have all kinds of security laser scans.Right now as I am about to leave Afghanistan, I  arranged with that security courier company who brings medical supplies in and out of the base from the US to the RED CROSS without security checks to deliver it to you as my personal effects. The box I mailed to you contains 15million dollars carefully wrapped up in my clothing and paintings in a luggage sealed and stamped in your name as the receiver.There is no other way I could have been able to bring it out from Afghanistan. I cannot bring it with me because I will be searched and scanned before I leave the base. There is no risk involved at all because the courier company is reliable and will deliver it to you safely without knowing what is contained underneath my clothes. I would also like for you to honestly and fairly tell me how much of the money you would like to have as compensation for the receipt. This is not stealing     Friend because the money is better in our hands than being used for guns and suicide bombers. We can give a substantial amount to charity to clear our conscience. Please, be honest with me on this and do not disclose this information to anybody else until the delivery is made.I only require your1) Home  Address2) Full Name3) Direct Telephone Number4)Your email AddressPlease do reply to this my email Address for security reason  markclark12@hotmail.co.ukMind you all this re-gusted from you did not post any risk but only needed for documentation and delivery up keepingYour FriendMark Clark SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (markclark22223[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119089 - Sent on April 17, 2015, 10:55 pm by markclark22223@gmail.com
.rdmeqrveguftfgw{color:#9f833f;} Get a Free LASlK EvaIuation SpamAssassin Report (spam score: 9.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: wjmultipliable.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wjmultipliable.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
Click to view scam #119088 - Sent on April 17, 2015, 10:41 pm by contact@b0nTBOqL.wjmultipliable.com
 Date: Fri, 17 Apr 2015 13:31:49 -0700From: lisa.treib106@gmail.comTo: roel.joosten@hotmail.comSubject: AUTOCAD 2015 products ( I am selling CAD/CAM )Solidworks & Bentley Products ,PCB ,ADOBE ,CORLE ,Windows 7/8 PRO 64 bit & OFFICE 2013 PRO 64 BIT,Electronic ,Architecture ,PTC
Click to view scam #119099 - Sent on April 17, 2015, 10:39 pm by lisa.treib106@gmail.com
 > Date: Thu, 16 Apr 2015 22:29:54 +0000> From: officeu972@gmail.com> To: > Subject: FROM HEAD QUARTER POLICE STATION> > > FROM HEAD QUARTER POLICE STATION> ZOGBO COTONOU INSPECTOR GENERAL OF POLICE> BENIN REPUBLIC WEST AFRICA> Email: inspectorgeneral@hotmail.ru> Telephone: +229 68446032> > ATTN MY DEAR,> > We are very sorry for what happened for you in this our Country, My > name is Mr. David Wilson the inspector general of police Benin > Republic, This is to inform you that the government of this country > Benin Republic are sending you the sum of $7.5 million dollars by ATM > CARD which you have lost in before because you have been waiting to > receive it from Dr. Jose Mallam, We got him arrested today.> > The government is rewarding this funds as one of the scam victim. We > where able to get your email through those that extort money from you > when the police got them arrested , One of them gave us your email > address who called his name Jerry Wilfred. The president of this > country His Excellency has sent aside the sum of $7.5 million Dollars > in consignment to send to you through Dhl Courier Company. We thereby > have made a concrete arrangement with the DHL Courier Company for a > safe delivery to your door-step once the beneficiary meets up the > demand of the conveyance.> > Note that all the delivery fee has been paid on your behalf. But you > are advise to send only $88.00 dollar immediately to our office for > your clearance certificate because our agent will proceed to Du' > Benin High Court, so that he should get the certificate before your > consignment will leave this country. The DHL Courier agent will use > the certificate to obtain the transaction.> > So you advice to contact inspector general of police Benin Republic > Office immediately with your full information for delivery of your > consignment and also to enable our office confirm that you are the > real owner of this Email address to avoid any mistake.> > Your Full Name.......> Your Country........> Your City.............> Your Telephone Number........> The Amount You Lost..........> Your Passport..........................> Your Age................................> > Contact our Office with this information below for more information > and for quick deliver of your consignment.Please, Please, Please, we > want you check this tracking numbers below are few list of tracking > numbers you can track from dhl website (http://www.dhl.com) to confirm people > like you who have received their payment successfully.> > BRAIN PAUL MISK ===========1059842280> Roberta Carson=========== 4413364756> YISI SHEN==============1039882605> GAVAN LROD ===========1222949486> Mr. Kerry Schmidt===========1106956535> > God bless.Inspector David call our office telephone number once you > receive this message for more information Telephone: +229 68484107> >
Click to view scam #119086 - Sent on April 17, 2015, 10:39 pm by officeu972@gmail.com
Dearest One, How are you doing Thank you very much for your kind reply,My name is Captain Mark Clark an American soldier based in Afghanistan on peace keeping ,Being so ignorant of the internet since but a friend has opened my eyes about the internet and that is why i am writing you as i have already gone through your profile and found you very attractive and interestingIt?s very hard for me to tell you this but I do not have a choice now. I am just hoping you can keep secrets.Please, read the next paragraph carefully and comment.About ten days after I arrived here in Afghanistan, I was attached to a special tactical unit as a command relay engineer for an operation which busted a Taliban bunker and the troop that went for that operation looted the bunker before setting it on fire. They recovered over 150 million US dollars of the Taliban funding. The commander agreed with the rest of the troops not to return the money to the authorities. They split the money among themselves and in other to have me keep my mouth shut; they gave me 15 million dollars which I rapped up among my clothing and have been hiding it since then. I knew it would never be possible for me to leave the base with the money myself as they have all kinds of security laser scans.Right now as I am about to leave Afghanistan, I  arranged with that security courier company who brings medical supplies in and out of the base from the US to the RED CROSS without security checks to deliver it to you as my personal effects. The box I mailed to you contains 15million dollars carefully wrapped up in my clothing and paintings in a luggage sealed and stamped in your name as the receiver.There is no other way I could have been able to bring it out from Afghanistan. I cannot bring it with me because I will be searched and scanned before I leave the base. There is no risk involved at all because the courier company is reliable and will deliver it to you safely without knowing what is contained underneath my clothes. I would also like for you to honestly and fairly tell me how much of the money you would like to have as compensation for the receipt. This is not stealing     Friend because the money is better in our hands than being used for guns and suicide bombers. We can give a substantial amount to charity to clear our conscience. Please, be honest with me on this and do not disclose this information to anybody else until the delivery is made.I only require your1) Home  Address2) Full Name3) Direct Telephone Number4)Your email AddressPlease do reply to this my email Address for security reason  markclark12@hotmail.co.ukMind you all this re-gusted from you did not post any risk but only needed for documentation and delivery up keepingYour FriendMark Clark SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ogujusticeobumneke[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119085 - Sent on April 17, 2015, 10:34 pm by ogujusticeobumneke@gmail.com
  PLEASE REPLY ME THROUGH MY PRIVATE EMAIL ADDRESS wendykipkalya@y7mail.com     I am writing this mail to you with tears and sorrow from my heart. With due respect trust and humanity, I appeal to you to exercise a little patience and read through my letter, I wish to contact you personally for a long term business relationship and investment assistance in your Country so I feel quite safe dealing with you in this important business having gone through your remarkable profile, honestly I am writing this email to you with pains, tears and sorrow from my heart, I will really like to have a good relationship with you and I have a special reason why I decided to contact you, I decided to contact you due to the urgency of my situation, My name is Miss Wendy Kipkalya Kones, 23yrs old female and I held from Kenya in East Africa. My father was the former Kenyan road Minister. He and Assistant Minister of Home Affairs Lorna Laboso had been on board the Cessna 210, which was headed to Kericho and crashed in a remote area called Kajong, in western Kenya. The plane crashed on the Tuesday 10th, June, 2008. You can read more about the crash through the below site:   http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html   After the burial of my father, my stepmother and uncle conspired and sold my father's property to an Italian Expert rate which the shared the money among themselves and live nothing for me. I am constrained to contact you because of the abuse I am receiving from my wicked stepmother and uncle. They planned to take away all my late father's treasury and properties from me since the unexpected death of my beloved Father. Meanwhile I wanted to escape to the USA but they hide away my international passport and other valuable traveling documents. Luckily they did not discover where I kept my fathers File which contains important documents. So I decided to run to the refugee camp where I am presently seeking asylum under the United Nations High Commission for the Refugee here in Ouagadougou, Republic of Burkina Faso.   One faithful morning, I opened my father's briefcase and found out the documents which he has deposited huge amount of money in one bank in Burkina Faso with my name as the next of kin. I traveled to Burkina Faso to withdraw the money for a better life so that I can take care of myself and start a new life, on my arrival, the Bank Director whom I met in person told me that my father's instruction/will to the bank is that the money would only be release to me when I am married or present a trustee who will help me and invest the money overseas. I am in search of an honest and reliable person who will help me and stand as my trustee so that I will present him to the Bank for transfer of the money to his bank account overseas. I have chosen to contact you after my prayers and I believe that you will not betray my trust. But rather take me as your own sister or daughther.   Although, you may wonder why I am so soon revealing myself to you without knowing you, well I will say that my mind convinced me that you may be the true person to help me. More so, my father of blessed memory deposited the sum of (US$11.500, 000) Dollars in Bank with my name as the next of kin. However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer and statement of the fund in your country. As you will help me in an investment, and I will like to complete my studies, as I was in my 1year in the university when my beloved father died. It is my intention to compensate you with 30% of the total money for your services and the balance shall be my capital in your establishment. As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above. I shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely.   AWAITING YOUR URGENT AND POSITIVE RESPONSE, Please do keep this only to your self for now un till the bank will transfer the fund. I plead to you not to disclose it till I come over because I am afraid of my wicked stepmother who has threatened to kill me and have the money alone, I thank God Today that am out from my country (KENYA) but now In (Burkina Faso) where my father deposited these money with my name as the next of Kin. I have the documents for the claims. Yours Sincerely Miss Wendy Kipkalya Kones   PLEASE REPLY ME THROUGH MY PRIVATE EMAIL ADDRESS wendykipkalya@y7mail.com         SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.173 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (wkhgkh[at]aol.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #119082 - Sent on April 17, 2015, 10:29 pm by wkhgkh@aol.com
Please contact me about this business project i have for you. (mrsyuen.c@outlook.com) Regards Mrs Cheong Lee Yuen SpamAssassin Report (spam score: 27.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.53 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.138.180.233 listed in zen.spamhaus.org] 1.6 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 NSL_RCVD_HELO_USER Received from HELO User -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 2.1 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.6 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 3.1 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Click to view scam #119084 - Sent on April 17, 2015, 10:25 pm by in@woosh.com
BODY{font:10pt Tahoma,Verdana,sans-serif} .MsoNormal{line-height:120%;margin:0} MR JOHN ABOH OFFIRST BANK OF NIGERIA PLC35 Marina P. O. Box 5216,LAGOS- NIGERIA.EMAIL: firstbankplc1@pisem.netAttention Beneficiary,I am Mr. John Aboh the Director, International Remittance Department of this Bank, my Boss, Mr. Jacobs M. Ajekigbe, the Managing Director/CEO of this bank is now on compulsory leave and all power have been vested on me to make all international payments.Due to reported cases of corrupt practices in other Nigeria Banks including the Central Bank of Nigeria, the Federal Government has revoked/cancelled all power vested on those banks and has appointed our bank First Bank of Nigeria to make all foreign payments.Be informed that the Federal Government have approved the release of part-payment of $2.5M (Two Million Five Hundred Thousand US-Dollars only) out of your total funds, which has been in this bank for many years unclaimed because my boss Mr. Jacobs Ajekigbe, collaborated with the Governor of Central Bank of Nigeria to refuse to tell you the truth on how to claim your fund because he has been using the interest accumulated from your fund every year to enrich himself without your knowledge.I want to help you pull out this fund to your bank account using the easiest and the quickest method, which have not been made known to you before. By this method, you will open a domiciliary account with this bank First Bank of Nigeria , your fund would be lodged into this domiciliary account and paid in directly to any bank of your choice.After the transfer, you will confirm the fund in your bank account within 5hours the same day. No Cost of Transfer COT and no stoppage from any Government departments as the transfer will be done within the bank alone and it is very safe.The method which was introduced to you before is the Telegraphic Transfer TT for which confirmation was 48hrs, because of the time factor,petitions could come from various organizations stopping your payment and asking you to pay huge fee which would be difficult for you to pay so that they can benefit from the huge interest your fund generates while still in the Bank.This method is not safe for you because it is not done within the bank alone as information of the payment would be sent to the Central Control Unit CCU of the Federal Ministry of Finance and office of the Accountant General of the Federation.As a good Christian, I have nothing to gain by keeping your fund, I want to assist you receive your fund before my boss resumes office. You have to follow up and work with me now, so keep this very confidential because of fraudsters and impostors who go about presenting various bank accounts in order to divert another beneficiary's fund.your present/valid account co-ordinates and amount to be claimed so that I do not transfer your fund to the wrong Bank AccountYours sincerely,Mr. John AbohSpamAssassin Report (spam score: 9.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 3.2 DEAR_BENEFICIARY BODY: Dear Beneficiary: 1.0 HK_RANDOM_REPLYTO Reply-To username looks random 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #119081 - Sent on April 17, 2015, 10:13 pm by firstbank@info.org
Attention:Victim Based on the scam reports we received, the International Police and the African Union (AU) in collaboration G20 Anti-fraud team are making sure that internet fraud is eradicated from the European and African continent and the world at large. The Internet Service Providers have noticed the increased email trafficking, originating from Africa and Europe to other continents, hence the action of the Security Operatives. In this regard, three hundred and six (306) scam artistes have been arrested and convicted so far and arrest is still on. We have also recovered the total sum of US$137.8 Billion from them, both cash and assets confirmed to have come from their victims. We have also found email addresses of victims in their address books including YOURS. It is at this juncture that we are contacting you. The African Union (AU) supported by the world?s G20 are making refunds of US$4,000,000.00 each to victims whom their email addresses are listed on the scam artiste's address books and also paying fully all those who were defrauded in pursuit of their legal Contract, Lottery Winning or Inheritance funds.Please be informed that you are among the first Group to received they payment. A payment form will be send to you and your request but if you decide to decline the payment, kindly inform this commission.Kindly reply via my email davidjacksoninternationalpolice@usa.com OR dj597582@gmail.com David Jackson Head Of Investigation davidjacksoninternationalpolice@usa.com SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.180 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: usa.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.5 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #119077 - Sent on April 17, 2015, 9:44 pm by info@internationalpolice.com