Logo



Begin forwarded message:From: "Marks & Spencer" <ms@lincolnimpersonator.com>Date: 10 June 2015 21:59:07 Subject: Free In-Store VouchersReply-To: <ms@lincolnimpersonator.com>     Your chance to win a Marks & Spencer voucher! You have a chance to win a Marks &Spencer voucher! Join the competition now, answer the question and perhaps you will shop for free soon at Marks & Spencer. E-mail: j Attention: limited subscriptions available     If you wish to unsubscribe from future mailings please click here
Click to view scam #128597 - Sent on June 10, 2015, 11:22 pm by ms@lincolnimpersonator.com
Begin forwarded message:From: "Kaila Tranter" <phuongrtmjtidsch@cheerful.com>Date: 10 June 2015 16:26:44 BSTSubject: Your New Online-business - Activation Required!Hey,I'm creating $13,605 a week.EVERYONE can do the exact same.The inquiry is:Why aren't you?This system is actually perfect.I'm assured that it may alter yourfinances precisely the same manner it changed mine.Don't wait!Move it or lose it:http://goo.gl/lF44ey?azezrRegards-Beverlee Mcquaide105 BRITTANEY LN, VA, 24301"I'm all in favor of keeping dangerous weapons out of the hands of fools. Let's start with typewriters."- Frank Lloyd Wright (1868-1959)
Click to view scam #128585 - Sent on June 10, 2015, 11:21 pm by phuongrtmjtidsch@cheerful.com
Sent from my iPhoneBegin forwarded message:From: PayPal Sync <paypal@service.com>Date: 10 June 2015 21:14:34 Subject: [Important] : Please Update You Paypal Informations Notice of changes to the PayPal user agreement. Dear Customer, Log in to your PayPal account as soon as possible We have recently encountered a problem in your account. when you created your PayPal account to make sure you're the account holder Click the Activation link and Follow the instructions. !Activation linkGet more out of your accountNow is the time to make your PayPal account even more useful:Account OverviewGet up-to-date information about your payments.Get notifications of important information, like changes to PayPal policies.Add or withdraw money from your PayPal account.See a detailed transaction history.Yours sincerely,PayPal Help Center | Security CenterPlease do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page.Copyright ??A¯??A?? ?A½ 1999-2014 PayPal Inc. All rights reserved.Consumer advisory: PayPal Pte Ltd, the Holder of the PayPal??A¯??A?& #195;?A½ payment service stored value facility, does not require the approval of th e Monetary Authority of Singapore. Consumers (users) are advised to read the terms and conditions carefully.PayPal Email ID PP1642 - 1b8ddaef7324e
Click to view scam #128592 - Sent on June 10, 2015, 11:20 pm by paypal@service.com
If you cannot click the link above, Copy & Paste this link: http://playgamesforgarden.com/keyJjIjogOTI1NywgImYiOiAwLCAibSI6IDg0MDEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playgamesforgarden.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playgamesforgarden.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128579 - Sent on June 10, 2015, 11:13 pm by Chris@playgamesforgarden.com
From: service@intl.paypal.comSubject: Unusual activity in your PayPal accountDate: Wed, 10 Jun 2015 13:14:07 -0700 Email Confirmation - New Account Dear ,We need your help resolving an issue with your PayPal account.Until you help us resolve this issue, we've temporarily limited what you can do with your account. What's going on?What to do nextPlease log in to your PayPal account and complete the steps to confirm your identity and your recent account activity. To help protect your account, your account will remain limited until you complete the necessary steps. The security of your PayPal account is a top priority for us and we want to work together to help protect it. If you need help or have any questions, call us for free on 0800 358 7911. We're open from 8am to 10pm Monday to Friday, from 8am to 9pm on Saturday and from 9am to 9pm on Sunday. Login In Please Yours sincerely,PayPal Copyright ¿ 1999-2015 PayPal. All rights reserved. PayPal (Europe) S.Á r.l. et Cie, S.C.A. SociÊtÊ en Commandite par Actions Registered Office: 22-24 Boulevard Royal L-2449, Luxembourg RCS Luxembourg B 118 349PayPal PPC000372:a6908c1084df0
Click to view scam #128580 - Sent on June 10, 2015, 11:02 pm by service@intl.paypal.com
Attention:Victim Based on the scam reports we received, the International Police and the  African Union (AU) in collaboration G20 Anti-fraud team are making sure that internet fraud is eradicated from the European and African continent and the world at large. The Internet Service Providers have noticed the increased email trafficking, originating from Africa and Europe to other continents, hence the action of the Security Operatives. In this regard, three hundred and six (306) scam artistes have been arrested and convicted so far and arrest is still on We have also recovered the total sum of US$137.8 Billion from them, both cash and assets confirmed to have come from their victims. We have also found email addresses of victims in their address books including YOURS. It is at this juncture that we are contacting you. The  African Union (AU) supported by the world’s G20 are making refunds of US$5,000,000.00 each to victims whom their email addresses are listed on the scam artiste's address books and also paying fully all those who were defrauded in pursuit of their legal Contract, Lottery Winning or Inheritance funds.Please be informed that you are among the first Group to received they payment. A payment form will be send to you and your request but if you decide to decline the payment, kindly inform this commission. Reply via email. dj2166430@gmail.com David Jackson Head Of Investigation SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.177 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dj2166430[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 XPRIO Has X-Priority header 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128581 - Sent on June 10, 2015, 10:59 pm by dj2166430@gmail.com
If you cannot click the link above, Copy & Paste this link: http://playgamesforgarden.com/neyJjIjogOTI1NiwgImYiOiAwLCAibSI6IDg0MDAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: playgamesforgarden.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: playgamesforgarden.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/geyJjIjogOTI1NCwgImYiOiAwLCAibSI6IDgzOTksICJsIjogMzAsICJzIjogMywgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128574 - Sent on June 10, 2015, 10:13 pm by Miracle.Smoke@caseeforphone.com
ATM Master Card Delivering Department. Cannon Bridge House 25 Downstate Hill, EC4R 2SB020 7815 3000 Nigeria (Standard Bank International Plc) Nigerian Republic. RICHARD OKOLIE, Office line:+2348142283125. Office line:+2348142283125. Email . (Info@standardbank.com) Good Day, This is to officially inform you that your long awaited Inheritance/Contract payment with Standard Bank Plc has been approved today, after a board meeting with the board of directors we have agreed to release your payment of (1.5M USD) One Million Five Hundred Thousand United State Dollars via our ATM MASTER CARD mode of payment. Please you are advise to get back to us immediately, with your Full name, Address, Occupation and telephone number to this email: card.delivery@hotmail.com Regard Mr Richard Okolie. Email: .carddelivery81@gmailcom SpamAssassin Report (spam score: 34.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: standardbank.com] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.5 NSL_RCVD_HELO_USER Received from HELO User 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.203.69.14 listed in zen.spamhaus.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 2.8 YOU_INHERIT Discussing your inheritance 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 3.2 FROM_MISSP_PHISH Malformed, claims to be from financial organization - possible phish 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 MONEY_FROM_41 Lots of money from Africa 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128575 - Sent on June 10, 2015, 10:00 pm by Info@standardbank.com
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/veyJjIjogOTI1MiwgImYiOiAyLCAibSI6IDgzOTgsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
WE OFFER AFFORDABLE LOAN SERVICE TO INDIVIDUALS AND FIRMS AT 3% INTEREST RATE. CONTACT US FOR MORE INFORMATION AT MARVIN SOLUTIONS - CONTACT EMAIL: marvinsolutions@yahoo.comCountry:.......    Sex:.......Name:.......    Telephone:.......    Occupation:.......    Loan Amount:.......Purpose of Loan:.......Duration of Loan:.......For swift response, Please send your request to email: marvinsolutions@yahoo.comWebsite: http://marvinsoln.xtgem.com/SpamAssassin Report (spam score: 4.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.170 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: xtgem.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
Click to view scam #128572 - Sent on June 10, 2015, 9:48 pm by noordina@un.org
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/peyJjIjogOTI0OSwgImYiOiAwLCAibSI6IDgzOTcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
    From: Marks & Spencer Sent: Wednesday, June 10, 2015 8:48 PM     Your chance to win a Marks & Spencer voucher! You have a chance to win a Marks &Spencer voucher!Join the competition now, answer the question and perhaps you will shop for free soon at Marks & Spencer.E-mail: yolly@talktalk.net Attention: limited subscriptions available     If you wish to unsubscribe from future mailings please click here
Click to view scam #128568 - Sent on June 10, 2015, 8:56 pm by title=ms@lincolnimpersonator.com
Good day, My Name is Mrs.Pauline Brown, I know this will be a surprise to you.Please consider this message as a request from a family in dares need of your help. I am the Wife of Late Mr. Chris Brown, from Sudan Darfur, My husband Mr.Chris Brown, was the owner of Omar Sea Food Industry in Darfur region and a Farm Land in Darfur region and supplier of Central African Countries with sea food till the Government find out that Darfur region was rich on Oil and Mineral Resources which was discovered by an individual Group called Organization Rebel Movement. The Government and Rebel Movement are fighting over who will inherit the Darfur region because of the Oil discovered and Rebel Movement are killing all the people in Darfur region to enable them inherit the land, and my Late husband was murdered in cold blood and our Farm, Sea Food Industry was burnt down. Before then, my Late husband had moved ( US$25.5M) Twenty-Five Million Five Hundred Thousand United States Dollars to South Africa for establishment of another branch in South Africa,the fund was deposited in a private Security & Finance Company in the name of my son George as the beneficiary. My husband was killed because of the Oil discovered in our Farm Land since the murderer's, Rebel Movement believed once my husband is killed they will have no challenge in taking over the land. Now the Rebel Movement turned against us looking for the remaining existing family of Brown in order to achieve their aim and objective. We decided to leave Darfur to Johannesburg, South Africa to seek Asylum (Refugees). Now all the documents issued when the consignment was deposited has been handed over to our family Lawyer in South Africa who assisted my late husband when the consignment was safely deposited. The financial laws in South Africa on Refugees do not warrant us to invest the funds here as we cannot operate any bank account, which is why we decided to look for a Foreign Partner who will assist us in moving the funds out of South Africa for my family investment. We have decided to offer you 25% of the total amount, 5% mapped out to defray all expenses that will be incurred during the process of concluding the transaction, while the remaining 70% will be for my family and will be invested in your country under your management. Immediately you receive this E-mail, kindly contact us, i am here with my son, Mr.George Brown, on the below stated email for proceedings due to my poor English and old age. My son has been mandated to over-see the transaction with the support of my family Lawyer. Looking forward to hearing from you soonest. Sincerely yours, Mrs.Pauline Brown, For The Family SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.175 listed in list.dnswl.org] 0.0 HK_SCAM_N1 BODY: HK_SCAM_N1 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128567 - Sent on June 10, 2015, 8:25 pm by info@trusted.com
BECKWORTH CHAMBERS UK 68 Doughty Street, London, WC1N 2LS UK Dear Friend. I am Barrister Harry Beckford, a Legal practitioner here in London and I wish to solicit your assistance in a deal that involves reasonable amount of money. This deal by virtue of its nature must be utterly confidential and top secret. Though I know that transaction of this magnitude will make any one apprehensive and worried, but I am assuring you that this will be done under a legitimate arrangement that will protect both of us from any breach of the law. Like I stated above, I am a Legal practitioner here in London and I came to know you in my private search for a reliable and reputable Business Person/individual that can handle this confidential deal with me, which requires maximum confidence and trust from both sides. MY PROPOSITION; I had a wealthy client named Satoshi Nagata who was one of the richest men in Japan but did most of his businesses in Germany and middle east . He was into several businesses before his untimely death in an air mishap in March 2015. This website will give you comprehensive picture of what I am talking about http://www.japantimes.co.jp/news/2015/03/25/world/plane-with-148-on-board-crashes-in-french-alps/#.VVY4DpMt9yN My client who died along with his wife deposited the Sum of $41.7 Million (Forty One million, Seven Hundred Thousand United States Dollars Only) with a bank here in the UK.During the bank audit exercise, the bank discovered my late client's deposit as an unclaimed credit balance, hence issued me a notice to provide any relatives of my client otherwise they will have the account closed and the fund confiscated. I have made several inquiries to his high commission to locate my client's extended relatives, but all my efforts proved abortive, I then decided to trace his relatives or family member over the internet, and hence I found you as my instinct convinced me that you will be a trustworthy and honest business partner and I decided to contact you to assist me with the legal transfer of my late client's deposit before it is confiscated or declared unserviceable by the Financial institution where the fund is lodged. I now seek your permission to present you as my deceased client relative and have you stand as the Next of Kin to my deceased client so that the funds of $41.7 Million (Forty One million, Seven Hundred Thousand United States Dollars Only) can be released and paid into your account as the beneficiary and next of kin. I will provide all necessary legal documents that can be used to back up your claim. Please get in touch with me immediately if you are interested to assist me and send to me your contact address, and direct telephone number, then I will commence work in your name. Be informed that this transaction is risk free otherwise my chambers will not contact you because it is against our ethics. Please acknowledge receipt of this message in acceptance of our mutual business endeavor by furnishing me with the followings; 1. YOUR FULL NAME 2) YOUR CONTACT ADDRESS 3) DIRECT TELEPHONE NUMBERS AND FAX NUMBERS 4) AGE 5) OCCUPATION 6) MARITAL STATUS 7) SEX These requirements will enable us file letters of claim to the appropriate departments for necessary approvals in your favor. Call me as soon as you receive this message for further clarification. Looking forward to your prompt response.Private e-mail to reply all your infos to : fiveyrsjh@ukr.net Yours Sincerely, Barrister Harry Beckford(Esq). Phone Number: +44-704-578-9371 E-mail: fiveyrsjh@ukr.net SpamAssassin Report (spam score: 15.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ukr.net] 2.6 HK_SCAM_N3 BODY: HK_SCAM_N3 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FOUND_YOU I found you... 0.9 MONEY_BARRISTER Lots of money from a UK lawyer 2.7 RISK_FREE No risk! 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #128564 - Sent on June 10, 2015, 8:22 pm by info@ttc.com
Hi, You look cute, i hope we could be good friend's,Please email at: joy.bare@hotmail.com for privacy so that i will send you my photos, phone number, and tell you more about my self MISS JOY RUBACA BARE SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (joyruaca0bare[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.196 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #128561 - Sent on June 10, 2015, 8:22 pm by joyruaca0bare@gmail.com
Batas Oil Group of Company. 62nd Street, Al Ihsan Group Building, Iraq, Baghdad. Date: 30/05/2015. Dear Sir/Madam, We are contacting you to be our International Representative in your country without leaving your business or present job. Reply and we shall discuss this business transaction along with your benefit. Note that you might receive this message in your inbox or spam or junk folder depends on your web host. Please do not reply if you are not the rightful owner of this e-mail address. Yours sincerely, Mr. Mostafa Yasin (Director) SpamAssassin Report (spam score: 3.6) pts rule name description ---- ---------------------- -------------------------------------------------- 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 HK_SCAM_N13 BODY: HK_SCAM_N13 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.174 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.6 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)
Click to view scam #128566 - Sent on June 10, 2015, 8:18 pm by news@foundation3d.com
Enclosed you find the swift copy of our settlement to your account, please send out the original B/L as early as possible. thanks.Best regards,Mohammed SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (fifuzzy77[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.178 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128563 - Sent on June 10, 2015, 8:18 pm by fifuzzy77@gmail.com
Advert
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/jeyJjIjogOTI0OCwgImYiOiAwLCAibSI6IDgzOTYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #128556 - Sent on June 10, 2015, 7:53 pm by golfmates@caseeforphone.com
-----Ursprüngliche Nachricht----- Von: WILLIAM PARKER [mailto:betreuung.praktika@berufskolleg-elberfeld.de] Gesendet: Dienstag, 9. Juni 2015 22:54 An: Recipients Betreff: Check Proposal from previous mail ? Please recontact: ( wlm.parker23@gmail.com ) call:+447031899987
Click to view scam #128558 - Sent on June 10, 2015, 7:52 pm by wlm.parker23@gmail.com
-----Ursprüngliche Nachricht----- Von: Mr. Simon Scot [mailto:simon_scot2015@yahoo.co.uk] Gesendet: Mittwoch, 10. Juni 2015 16:43 An: undisclosed-recipients: Betreff: INVESTMENT PROPOSITION-G Hello, I have a INVESTMENT PROPOSITION for you. At your feedback, I will divulge details to you. Yours sincerely. Mr. Simon Scot.
Click to view scam #128555 - Sent on June 10, 2015, 7:51 pm by simon_scot2015@yahoo.co.uk
  Von: SAMSUNG AWARD [mailto:srilatha@ignou.ac.in] Gesendet: Dienstag, 9. Juni 2015 21:48An: undisclosed-recipients:Betreff: Congrats  
Click to view scam #128557 - Sent on June 10, 2015, 7:50 pm by srilatha@ignou.ac.in
  Von: Mr. John Williams [mailto:salman@benetexindustries.com] Gesendet: Mittwoch, 10. Juni 2015 12:05An: undisclosed-recipients:Betreff: NATIONAL HOUSE OF ASSEMBLY COMPLEX  -- FEDERAL MINISTRY OF FINANCENATIONAL HOUSE OF ASSEMBLY COMPLEXSENATE HOUSE - UPPER CHAMBERS WUSEDISTRICT, COTONOU BENINOur Ref: FGN /SNT/STBDate:10/06/2015Dear Customer,I have to inform you again, that we are not playing over this, I know my reason for the continuous sending of this notification to you, the fact is that you can't seem to trust any one again over this payment for what you have been in cantered in many Year ago, but I want you to trust me, I cannot scam you for $95 it is for bank processing of your payment,Note, the fees of $95 is clearly written to you before, I did not invent the bill to defraud you of $95 it is an official bank payment processing fee, and the good part of this, is that you will never, ever be disturbed again over any kind of payment, this is final, and the forms from there becomes effective once we submit your payment application processing fee and pay the form fee of $95 I don't want you to loose this fund this time, because you may never get another such good opportunity, the federal government is keen and very determined to pay your overdue debts, this is not a fluke, I would not want you to loose this fund out of  ignorance,  I will send you all the documents as soon as bank payment processing fee is paid, you have to trust me, you will get your fund, find a way to get $95 you will not loose it, instead it will bring your financial breakthrough,The processing charges which was initially on the high price has been cut down by the payout bank considering the poor economic situations that make it difficult for the middle class citizens to meet up with the processing charges of their entitlement. Upon the confirmation of your processing charges you will get your $1.500, 000.00 into your account within 15hrs.Here is the information to send the Fee through western union money transfer, or Money Gram finally my advice to you is not to abandon this transaction because of the requirement of ($95)Receiver's Name::: frank orjiCountry: Benin Republic.City::: Cotonou,Text Question: WhenAnswer:      TodayAmount: required:$95Sender's Name:MTCN Number#:Sender?s address:Yours Full Banking Details to avoid wrong Transfer Such as:Bank Name:--Bank Address:--Account Number:--Account Name:---Routing Number:--As soon as the payment is received today, you will receive your $1.5 Million United State Dollars the same today without any delay.Best RegardsMr. John Williams
Click to view scam #128554 - Sent on June 10, 2015, 7:49 pm by salman@benetexindustries.com
  Attention,This is to inform you that your fund ($6.50000000USD) has approved to release via Money Gram Office after our finally meeting with IMF concern overdue your fund. All you will do is to contact Money Gram director Rev. CharlesWilliam via (m_gram71@yahoo.co.uk) He will give you direction on how you will be receiving the funds daily. Remember to send him your Full information to avoid wrong transfer such as,Receiver's Name____Address: _______Country: _______Phone Number: _____Note, Mr. Franklin Van has sent $6000 in your name today so contact Rev. Charles William or you call him +229-98521608as soon as you receive this email and tell him to give you reference number of $6000, sender name to pickup the $6000, Please let us know as soon as you received all your fund,Best Regards,Jave Musa SpamAssassin Report (spam score: 9.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.11 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (m_gram71[at]yahoo.co.uk ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 MONEY_FROM_41 Lots of money from Africa 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128553 - Sent on June 10, 2015, 7:30 pm by seanjohn@cantv.net
Good Day.I am Mrs Aabida Almuntasir. Yacouba, I am sending this brief letter to solicit your partnership to transfer $9.2 million US Dollars.I shall send you more information and procedures when I receive positive response from you. my husband family drove me out of my late husband house because i don't have a male child. please as soon you receive this fund in your country i and my daughter will come to your country and start a new life, Best Regards,ThanksMrs. Aabida Almuntasir. SpamAssassin Report (spam score: 2.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (hsenrins1131[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (aabida_almuntasir10[at]yahoo.com ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128548 - Sent on June 10, 2015, 7:04 pm by hsenrins1131@gmail.com
A GOLDEN opportunity for a credit card! Apply today .uorofszmpieyi{color:#fcdc23;} SpamAssassin Report (spam score: 10.1) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: rhodymeniascheffeljb.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: rhodymeniascheffeljb.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.46 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: rhodymeniascheffeljb.com]
HelloHow are youI'm Kate FilionFrom States 28yrsold Single,your files look responsiblei would like  to discuss important  Matter with you kindly contact on myprivate E-mail Address if  you wish(Katefilionsy@hotmail.com) Skype(kate.filion SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (katefilionthy[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #128547 - Sent on June 10, 2015, 7:00 pm by katefilionthy@hotmail.com
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/heyJjIjogOTE5NiwgImYiOiAwLCAibSI6IDgzNDYsICJsIjogMzAsICJzIjogNiwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128542 - Sent on June 10, 2015, 6:58 pm by AT&T@caseeforphone.com
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/teyJjIjogOTIyNywgImYiOiAwLCAibSI6IDgzNzUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128538 - Sent on June 10, 2015, 6:33 pm by From.Kroger@caseeforphone.com
Subject: regarding payments(2015/010/06)To: nedhulse49@hotmail.comFrom: kizilkurye@kiziltoprakkurye.comDate: Wed, 10 Jun 2015 06:29:59 -07002015/27/05ATTN:nedhulse49@hotmail.comLong time, please accept our deepest apology for the long delay, hope you received our payment by now. here's approved letter for you peusal. So kindly sign where needed and return.waiting your reply.Thanks and regards.  --Sent from my iPhone Scan0521.pdf (2.3 MB)                          View   |  Download
Click to view scam #128539 - Sent on June 10, 2015, 6:30 pm by nedhulse49@hotmail.com
Date: Wed, 10 Jun 2015 15:12:19 +0100From: reply1s001r@outlook.comTo: Subject: Request To Close Your Accountþþþþþ MICROSOFT SECURITYWe have received your request to close your Hotmail Email Account Your request is being processed and the email address and all associated data,  will be removed  from our  servers shortly.If this request was made or received in error and you do not wish to terminateyour  email and account services ,indicate this by choosing below,  I choose to keep my account and cancel termination requestI Choose To Keep My Account And Cancel Termination Request If you have chosen to keep your account, log in your account  follow the step in the  above link and the termination request will be cancelled.NOTE: You must enter your correct log in detail Failure to do so, your mailbox will be  shut-down However, if you still want to terminate your account, no further action is  required from you.  Thanks, The Microsoft Account Team 
Click to view scam #128537 - Sent on June 10, 2015, 6:22 pm by reply1s001r@outlook.com
Date: Wed, 10 Jun 2015 20:02:22 +0300From: md1096@kolumbus.fiTo: Subject: Re: Cash Available For Pickup? - $ 500,000.00 (USD) deposited at Western Union in your EMAIL is available for pickup. Contact Elena Rodriguez. Email: agent60323@qq.com For Claims
Click to view scam #128535 - Sent on June 10, 2015, 6:21 pm by md1096@kolumbus.fi
IMPORTANT PAYMENT WIRE NOTIFICATION VALUED $10.5M     I humbly wish to inform you that the Department of Credit & Telex control of the BANK OF AMERICA has received an instruction Order to effect the wire transferring of  your approved fund of USD$10,500,000.00 MILLION to you immediately. I therefore request you to urgently re-confirm the HSBC Bank A/C. number stated below as your receiving Bank information, since this account was submitted by your lawyer Barrister Godson Gabriel of (GODSON & CO. LAW CHAMBERS) for the payment without any delay.     Note: In a case were you think you are not familiar with the bellow banking information as presented by your legal representative and agent,we advice you send to us now without any delay your detail in full containing your Banking information and other personal information so we dont transfer to wrong account.     Bank: HSBC HONGKONG BRANCH Address: Paterson Street, HSBC Premier Centre Shops G03-04.G/F Hang Lung Centre 2-20 Paterson Street Cause way Bay, Hong Kong Account number: 627 826464-001 Account name: Bob Andria SWIFT code: HSBCKHKHH     However, it is our principle to initiate direct contact with the beneficiary of fund before final crediting of such fund. Therefore, I am personally contacting you directly in order to seek your approval to remit into the above account. In the meantime, the process of programming and registering of your transfer payment status code that will enable a hitch free wire transferring of your fund into your account within 72hours is in progress and I will be willing to assist you believing that  you will in turn show some appreciation to me. Note, I can successfully achieve this transfer within the shortest time from now if only you can offe to us the banking information requested bellow.   Now you?re new Payment, Approval No;PUN5685P,united States Government No:WH44CV, Reference o.-35460021, Allocation No: 674632 Password No: 339331 , Pin Code No: 55674 and your Certificate of Merit Payment No : 103 , Released Code No: 0763; Immediate BOA Telex confirmation No: -1114433 ; Secret Code No:XXTN013.Base on this numbers your above states Institutions and Bodies have officially approved this payment valued $10.5M to be remmited without any delay.     (PROVIDE THE BELLOW INFORMATION IF YOU ARE NOT FAMILIAR WITH THE ABOVE BANKING INFORMATION AS PROVIDED BY YOUR LAWYER (GODSON & CO. LAW CHAMBERS).   FILL COMPLETE YOUR VERIFICATION FORM BELOW: 1. Full Names: 2. Residential Address: 3. Mobile Number: 4. Occupation: 5. Sex: 6. Age: 7. Country: 8. Marital Status: 9. E-mail id: 10. Bank Name: 11. Account Number: 12. Account Holders Name: 13. Bank Address: 14: Bank Swift Code 15: Bank Routing No: 16 Bank Address: 17. Scan Copy of passport or Driver?s License   Get back to me quickly. Respectfully!   MR MOORE CARRICK ACCOUNTANT, BANK OF AMERICA SpamAssassin Report (spam score: 21.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.9 MONEY_BARRISTER Lots of money from a UK lawyer 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 0.0 FILL_THIS_FORM Fill in a form with personal information 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) 0.0 MONEY_FORM Lots of money if you fill out a form 0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 2.1 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Click to view scam #128534 - Sent on June 10, 2015, 6:19 pm by mksat@mksat.net
A/C Marketing / Compras Somos uma empresa especializada no segmento promocional. Trabalhamos com: CAMISETAS, BONES, POLOS, ECOBAGS E CHAPEUS... Oferecendo aos nossos clientes qualidade, precos competitivos, rapidez na entrega e um excelente atendimento. Em anexo nosso catalogo de promocao.                                                                "Responda a esta mensagem com o assunto 'Retirar' para excluir seu e-mail de nosso banco de dados"   Faca seu orcamento sem compromisso! No aguardo, Atenciosamente, ------------------------------- Daniel Evangelista Depto de vendas Fone: (43) 3423 9189 email: vendas4@attuantebones.com.br email: attuantevendas4@uol.com.br skype: vendas4attuante www.attuantebones.com.br   SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: attuantebones.com.br] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 2.0 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only
Click to view scam #128536 - Sent on June 10, 2015, 6:15 pm by nkgh@roussosweb.com
Hello Dear Friend,Pls i want you to read this letter very carefully and i must apologize for berging this message into your mail box without any formal introduction due to the urgency and confidential of this issue and i know that this message will come to you as a surprise, Pls this is not a joke and i will not like you to joke with it. I am Mr Allen Ibrahim, a staff in African Development Bank (A.D.B) Ouagadougou, Burkina faso West Africa. I Hoped that you will not expose or betray this trust and confident that i am about to extablish with you for the mutual benefit of you and i. I need your urgent assistance in transferring the sum of $15.2 )millionusd into your account within 7 banking days. This money has been dormant for years in our Bank without claim due to the owner of this fund died along with his entire family and supposed next of kin in an air crash since July 31 2000. I want the bank to release the money to you as the nearest person to our deceased customer while i come over to your country to share this fund with you as soon as you confirm this fund into your account and ask me to come over.Please I would like you to keep this proposal as a top secret and delete it if you are not interesting. Upon the receipt of your reply and indication of your capability, i will give you full details on how the business will be executed and also note that you will have 40% of the above mentioned sum if you agree to handle this business with me while 60% will be for me, Because i don't want anyone here in our bank to know my involvement until you confirm this fund into your account and ask me to come over for the sharing as i indicated. Please, dont entertain any atom of fear because the transaction is 100%risk free.Note that, to be relation with the deceased or not will not impose or prevent you to claim the money, the fact is that whatever information we will present to the bank should be accurate. Rests assured that I will provide all the necessary information which the bank may require from you during the process to make sure everything goes well and fast.Am looking forward hearing from you for more details informationThanks with my best regardsMr Allen Ibrahim SpamAssassin Report (spam score: 18.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 2.5 HK_SCAM_N2 BODY: HK_SCAM_N2 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (allen_ibrahim21[at]terra.com.pe) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [208.84.243.209 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (allen_ibrahim21[at]terra.com.pe) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #128533 - Sent on June 10, 2015, 5:53 pm by allen_ibrahim21@terra.com.pe
Advert
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/xeyJjIjogOTIyNiwgImYiOiAwLCAibSI6IDgzNzQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128531 - Sent on June 10, 2015, 5:51 pm by Email.Lookup@caseeforphone.com
Buenos dias Estamos dispuestos a ofrecer préstamos con tasa de interés del 2% a cualquier persona en necesidad, ofrecemos préstamos que van desde 5000 a 10000000 euros redimibles en períodos de 1 a 20 años máximos. ofrecemos préstamos personales, consolidación de deudas, capital riesgo, préstamos comerciales, préstamos estudiantiles, préstamos para la vivienda etc.. Tienes la posibilidad de indicar la cantidad del préstamo y también la duración de la amortización, somos bien registrado y certificado. Por favor contáctenos vía correo electrónico para obtener más informaciónes. Correo electrónico: mockisabella66@gmail.com Para facilitar el procedimiento, el consorcio puede como apropiados soportar el coste del notario para ti, pero una vez que su solicitud ha sido aceptada y su archivo llegó al nivel del banco, honorarios de transacción bancaria su dinero estará a su cargo. Por favor rellene el siguiente formulario de pedido así que abrimos un archivo de préstamo: Apellidos Nombres: Edades: Profesión: Casados o solo: Número de niños si es casado: Cantidad solicitada: Duración de amortización: Razones para la solicitud de préstamo: Renta mensual: Número de teléfono: Dirección: Ciudad: País: Código postal: Nos certifican y confirmar que usted estaría satisfecho en un plazo de 72 horas si se cumplen exactamente con nuestras condiciones y colaborar. Esperando esta información a tener en cuenta su petición tan pronto como sea posible SpamAssassin Report (spam score: 1.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.54 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 MONEY_FROM_41 Lots of money from Africa
Click to view scam #128532 - Sent on June 10, 2015, 5:49 pm by 13101026@bhp.stpbali.ac.id
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/teyJjIjogOTIyOCwgImYiOiAwLCAibSI6IDgzNzYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0
Dear Sir/ Madam, Please if you made any payment to any one in the past or present through Western Union/Money Gram/Bank Transfer/ for any kind of transaction contract payment/Inheritance Fund/Lottery Fund/Jackpot/and so on. Please you are hereby advised to send a copy of the payment slip you used if it?s Western Union/Money Gram or Bank Transfer, Just send the copy of the slip transaction to proof that you were scammed before. If you don?t keep any record of your payment then send to me the email you have being receiving from the people that scammed you or any prove that will enable us to verify and then approve your compensation of $800,000.00 ( Eight Hundred Thousand United States Dollars). As it was instructed by the United Nation(UN) in Collaboration with Africa Union(AU) to pay the sum of USD$800,000.00 to each of the scam victims. Yours sincerely, Mr.John Uzo SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 2.3 HK_SCAM_N8 BODY: HK_SCAM_N8 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
This message might meet you in utmost surprise,however,it?s just my urgent need for foreign partner that made me to contact you for this transaction.I am Dr.J.E.G Van Der Kaap,a citizen of Netherlands who lives and work in Ghana as a banker by profession and currently holding the post of Director Auditing and Accounting unit department of our bank (UBA) United Bank for Africa Ghana Limited.I have the opportunity of transferring the amount of $31,500,000.00 ( Thirty-One Million,Five Hundred Thousand United States Dollars )to our bank customer who died along with his entire family on 31st July 2000 in a plane crash. You can confirm the genuineness of the deceased deathby clicking on this web site http://news.bbc.co.uk/1/hi/world/europe/859479.stmHowever, I am inviting you for a business deal where this money can be shared between us in the ratio of 50/50,under top-secret and i will also want you to understand that it is 100% risk free and legally blinded,as it will strictly be bank to bank transfer;so kindly furnish me with the information?s:Your Full name,Occupation & Position,Contact & Mailing Address, Date of Birth & Age ,Place of Birth & Residing, Marital Status , Gender,Scan valid identity card,identification picture,Mobile/Cell/ Tel/Fax Numbers,Nationality,Name of Your Next of Kin and E-mail address,to enable me affixed them in our account data file, so that you will be recognized in our bank as a customer and fund beneficiary before the onward transfer will be made to your account.Copy the e-mail below & reply after reading.Regards,Dr.J.E.G Van Der Kaap                 SpamAssassin Report (spam score: 0.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dr.kaap001[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128527 - Sent on June 10, 2015, 5:19 pm by dr.kaap001@hotmail.com
GreetingThis is to inform you of our interest and desire to make a publicity of our industry a small scale mining firm here in west Africa to seek for a foreign individual or body for exportation of Gold & Diamond to any part of the world based on your experience, idea & interest in this proposal. Furthermore, we will furnish you the necessary documents of our existing firm including the government authorization certificate for mining Gold & Diamond in this territory. Do not hesitate to message us back in case you are interested  for further action.As our Agent we are ready to give some commission of the total purchase if you can connect us to a buyer. Our Email Address (preciousmetal530@gmail.com)Best RegardsMarketing Manager.
Click to view scam #128523 - Sent on June 10, 2015, 5:12 pm by preciousmetal530@gmail.com
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/yeyJjIjogOTIyNSwgImYiOiAwLCAibSI6IDgzNzMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #128522 - Sent on June 10, 2015, 5:11 pm by Rent.and.Own@caseeforphone.com
Contact Bank of America Corporate Office Headquarters 100 N.Tryon St Charlotte,NC 28255 Our Ref:BOA/IRU/SFE/15.5/WD/011 United States of America Monday-Friday 8 a.m.-9 p.m. Eastern Daylight Time(EDT) Saturday and Sunday 8 a.m.-4 p.m. Eastern Daylight Time(EDT) Dear esteemed customer, The Management of the Bank of America Corporate Office Headquarters here in 100 N.Tryon St Charlotte,NC 28255 wishes to inform you that after a brief meeting held by the Bank executives yesterday,the 9th Nov of Jun,2015 at precisely 8 a.m. Eastern Daylight Time(EDT), we deem it appropriate to intimate you that your funds will be transferred into the United States Treasury Account with the JP Morgan Chase Headquarters at 270 Park Avenue in New York according to the record we got from Africa due to your inability to complete the transaction and your failure to meet up with a minor payment obligation.The actual transfer of your funds(15,500,000.00) into the government account comes up next week. This is in line with the instructions of the USA Treasurer,Mrs.Rosa Gumataotao Rios that all unclaimed funds be paid into the United States Government Treasury Account as unserviceable funds in compliance to section 3 subsection 1(a) of the United States Financial Law enacted in 2001 after an attack on our dear country on September 11,2001. Find below the profile of the banking institution where your funds will be transferred into following the government directive:, And note to responds to us with below Name of Bank: JP Morgan Chase Headquarters at 270 Park Avenue in New York. JP Morgan Chase Official Bankers for the United States Treasury Department AC NO: 68302945093 Routing NO:021108593 Account Name:United States Treasury Department,USA Note that if you still wish to receive your funds do get back to us immediately so that we will remove your funds transfer from the list of those transactions to be seized by the United States Government.Also be informed that we need only a DIPLOMATIC IMMUNITY SEAL OF TRANSFER(DIST) to complete the wire transfer.The fee to obtain the SEAL was reduced from 198 to $46 and no other fee is involved. You are required to send the fee of $46 by WESTERN UNION or MONEY GRAM to the issuing officer at the bank where your transaction originated as stated below: INFORMATION RECEIVERS NAME : Emmanuel Ekwealorv COUNTRY : BENIN REPUBLIC CITY : COTONOU QUESTION : IN GOD ANSWER : WE TRUST Amount To Send; $46 The name of the city from where the money was sent If we receive the MTCN today,we will transfer your funds (15,500,000.00) before we close office and the funds will reflect 3hours after the transfer.We will send you all the transfer documents to enable you start making cash withdrawals from your account same day the funds are transferred.We have waited for so long and we cannot continue to wait. Thank you for giving us the opportunity to serve your banking needs. Yours faithfully, Mr.Benson Moynihan(CEO) Bank of America® Corporate Office Headquarters,Charlotte,N.C. Bank of America, N.A. Member FDIC. © 2013 Bank of America Corporation. All rights reserved. AR72768/DD6A66 SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (shernandez5510[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.212.172 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (card.card18[at]outlook.com ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (shernandez5510[at]gmail.com) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.5 ADVANCE_FEE_5_NEW Appears to be advance fee fraud (Nigerian 419)
Click to view scam #128524 - Sent on June 10, 2015, 5:07 pm by shernandez5510@gmail.com
                                                    NOTIFICATION OF BEQUESTMy name is Mr. Gordon Forster. I am the Personal Assistant to the great Atlanta Physician and Philanthropists Mr.George Brumley. On behalf of the Trustees and Executor of the Estate of the beneficiaries of his estate. He left the sum of Five Million One Hundred Thousand Dollars(USD$5,100.000.00) to you. This may sound strange and unbelievable to you,but it is real and true.Late Mr.G. Brumley and all his family were among the victims that died in a charter plane crash. I wish to notify you that late George Brumley made you a beneficiary. The flight crashed into the snow-capped,16,355-foot Lenana Peak on Mount Kenya destroying the entire plane and killing passengers on board. Late George Brumley died on the month of July 2012 at the age of 68. You can see details of his death in the CNN link below:http://www.cnn.com/2003/WORLD/ africa/07/20/kenya.crash/ index.htmlHe was a widely traveled man and devoted most of his time and wealth to charity and humanitarian work. His great philanthropist works is well known and recorded all over the world. He must have been in contact with you in the past or you were nominated to him in his vision to expand the Charity works. Simply put, he was a very dedicated Sufis and Christian who loved to give out. His great philanthropy earned him numerous awards during his life time. In dedicating this funds to you and other beneficiaries, he instructed that you are to use part of the funds to promote his legacy through activities that aims to help the old, poor, needy and disabled in the society. Late Brumleys' legacy is the love of charity.Please If I reach you as I am hopeful, endeavor to get back to me as soon as possible so we can start processing the release of the funds to you. You are to reply me immediately providing the following information:1.Your Full names.2.Valid Contact address.3.Contact Telephone and fax numbers.Yours In Service,Mr. Gordon Forster.(ESQ).14 York Road,Ilford Essex,IG1 3AD London, England. SpamAssassin Report (spam score: 7.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (gordonfoster1961[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.7
Click to view scam #128521 - Sent on June 10, 2015, 4:51 pm by gordonfoster1961@hotmail.com
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/ueyJjIjogOTIyNCwgImYiOiAwLCAibSI6IDgzNzIsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.6 FROM_STARTS_WITH_NUMS From: starts with several numbers -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
.ReadMsgBody {width: 100%;} .ExternalClass {width: 100%;} .ExternalClass * {line-height:100%;} .undoreset * {line-height:100%;} @media screen and (max-device-width: 480px){ /* Main Resize Table */ *[class=resize_table320]{ width:320px !important; height:auto !important; } /* General Class */ *[class=nomob]{ display:none !important; } table[class=emailnomob],td[class=emailnomob],img[class=emailnomob], span[class=emailnomob] {display:none !important;} *[class=border_line]{ border-top:1px solid #e3e3e3 !important; border-bottom:1px solid #e3e3e3 !important; } *[class=full_width]{ width:100% !important; } *[class=block1]{ display:block !important; } *[class=align_left]{ text-align:left !important; } *[class=bg_color]{ background-color:#f2f2f2 !important; } *[class=resizeh31]{ font-size:13px !important; line-height:17px !important; } *[class=resizeh34]{ height:34px !important; } *[class=bg_image]{ background-image:url(images/img_bg1_mob.gif) !important; height:34px !important; } /* Resize Width Spacer Class */ *[class=resize_w20]{ width:20px !important; } /* Resize Height Spacer Class */ *[class=resize_h6]{ height:6px !important; } *[class=resize_h14]{ height:14px !important; } *[class=resize_h18]{ height:18px !important; } *[class=resize_h28]{ height:28px !important; } *[class=resize_h31]{ height:31px !important; } *[class=resize_btn1]{ height:34px !important; } /* Font Resize Class */ *[class=font10]{ font-size:10px !important; line-height:12px !important; } *[class=font26]{ font-size:26px !important; line-height:30px !important; text-align:left !important; } a[class=footer]{ display:block !important; font-size:14px !important; font-weight:bold !important; padding:6px 4px 8px 4px !important; line-height:18px !important; background:#dddddd !important; border-radius:5px !important; margin:10px auto;width:240px; text-align:center; text-decoration:none; color:#717074 !important;} } Your Account Will Be Limited. Dear customer, Please be aware that your PayPal Account expire in less than 48 H , It is indispensable to perform an audit of your data is present otherwise Your Account will be destroyed. Just click the link below (or copy and paste the link into your browser): Verify Now Reference Number : PP-003-348-781-311 Help Center  |   Partner Directory  |   Logo Center  |   Security  |   Business Center SpamAssassin Report (spam score: 2.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: paypal-communication.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.5 URI_NOVOWEL URI: URI hostname has long non-vowel sequence 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only
Click to view scam #128520 - Sent on June 10, 2015, 4:44 pm by costumerppl@henri.pitiwa.net
Découvrez comment j'ai pu augmenter mes revenus grace à cette formation .ReadMsgBody { width: 100%; } .ExternalClass { width: 100%; } td {border-collapse: collapse; } Suivez ce lien pour consulter la version en ligne Vous pouvez à tout moment décider de ne plus recevoir nos offres ici Vous recevez ce message car vous êtes membre de Selection Privee. Vous pouvez exercer votre droit d'accès et de suppression à tout moment en nous contactant à : info@selection-privee.fr, ou en nous écrivant à Selection Privee - Avenida Diagonal, 440 7a - 08037 Barcelona. Suivez ce lien pour vous désabonner. Politique de confidentialité. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: selection-privee.fr] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #128517 - Sent on June 10, 2015, 4:35 pm by info@selection-privee.fr
If you cannot click the link above, Copy & Paste this link: http://caseeforphone.com/peyJjIjogOTIyMywgImYiOiAwLCAibSI6IDgzNzEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: caseeforphone.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: caseeforphone.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
---------- Forwarded message ----------From: MRS.ORABIII <201002712@tati.ub.bw>Date: Wed, Jun 10, 2015 at 12:32 AMSubject: How are you My Dearest OneTo: Hello My  Beloved in  The  Lord.   May  peace be to unto you and your family,I am Mrs  Mona Taneeb Orabi, I am married to Late Mohamed El Orabi , I was adopted  and  married by  him.  Before he died,We were married for many years without a child.He died after a brief illness that lasted for only four days.Before his death we were both devoted Muslims ,since his death  all his families abandoned me  and I was adopted Child before I married to my late Husband I tried to trace my family but all my efforts are in vain.  At this  point I  have been battling with both Cancer and Stroke sickness problems. When my late Husband was alive he deposited the sum of $9.5 million with a Finance House.     Recently,my doctor told me that I have short life to live  due to cancer and Stroke problems that i am suffering. Though what disturbs me most is my stroke sickness.Having known my condition I decided to donate this fund to either a Christian organization,Muslim organization, devoted Christian individual or devoted muslim individual that will utilize this money the way I am going to instructs herein. I want this Christian organization, Muslim organization or individual to use this money in all sincerity to fund such as churches,mosques ,vein yard, orphanages, widows,Disable people and also propagating the word of God and to ensure that the society upholds the views and belief of the word of God.The word of God emphasizes so much on god benevolence and this has encourage me to take the bold step.I took this decision because  AFTER LISTING TO THE NEWS LINE ABOUT 100 YEARS OLD WOMAN WHO SECRETLY DONATE HER FORTUNE UPON HER DEATH AND  SINCE  I  HAVE  NO CHILD   The  family  of my late  husband  has Abandoned me in the hospital without any of them care for my health.All Property  of my  late  husband  has  being  sold  by  them  and  share  within  them, all they are waiting for me to die,so I don't want a situation where this money will be used in an Unholy manner,ungodly way,criminal way,buying weapons.Hence the reasons for this bold decision. I know that after death I will be with god the most beneficent and the most merciful. I don't need any telephone communication in this regard because of my health, because of the presence of my husband's relatives who are monitoring me on the day i will die. I don't want them to know about this development. With God all things are possible. Before I will forget you will take 35% out of the total money then you will use the 65% to work as i directed you. FOR MORE DETAILS REPLY TO ME Mrs  Mona T. Victoria Orabi   -- Thank you for your patronage Dovid Lando          This message may contain confidential information and is intended only for the individual named. If you are not the intended recipient you are notified that disclosing, copying, distributing or taking any action in reliance on the contents of this information is strictly prohibited.
Click to view scam #128513 - Sent on June 10, 2015, 4:18 pm by 201002712@tati.ub.bw