Logo



I felt that you needed my help SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: omeprogram.net] 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
Click to view scam #129571 - Sent on June 15, 2015, 7:54 pm by @
Apply for Credit Cards SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: rangeboer.com] 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily
Click to view scam #129567 - Sent on June 15, 2015, 7:53 pm by @
United Bank for Africa/Our Deduction FormAttn: Beneficiary Be informed that after the final meeting this morning with the board directors of this United Bank Africa Plc, in regards to your funds, for your inability to receive your funds. Our deduction form was issued to you this morning to enable you receive your funds in the next 48hours from mow, Once you complete the form and send it back with the fee of $95.00.You will find the attachment of deduction form which you will fill and return it back to us with the fee to enable us deduct other Charges and transfer your funds to your account without any further delay.Do use the following information to complete the form.CONTRACT SUM: US$5, Million USDCONTRACT NUMBER: NG74678FGNProceed Immediately to send the US$95.00 through Money Gram or Western Union with our Receivers Account Officer Name as follows     Receivers Name: BLESSING IGIWEAddress : LAGOS NIGERIAText Question: What forAnswer : GoodAmount : US$95As soon as we receive the fee with the form, we shall proceed to deduct other Charges, such as cost of transfer and documentation fees that is involved in making sure that your fund get into your account without any problem as there will be no other delay or demand from youWe are waiting to receive the payment information with the filled form to enable us complete your transfer by first thing tomorrow morning our time once we receive the payment information from you today  RegardsMr. Phillips OduozaUnited Bank for Africa SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (phillipoduoza0[at]outlook.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [65.55.90.98 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129566 - Sent on June 15, 2015, 7:52 pm by phillipoduoza0@outlook.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/heyJjIjogOTUzNywgImYiOiAwLCAibSI6IDg2MzQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Fresh Tools updated. Earthlink RDP Comcast RDP Mystery Shopper Mailers, Smtp, RDP, Leads, Cpanel All Tools updated for 100% working on cheap price and customer satisfaction. Online Live Support Visit Us: www. SmtpMercantile .in
Click to view scam #129565 - Sent on June 15, 2015, 7:22 pm by
> Date: Mon, 15 Jun 2015 16:25:17 +0000> From: adriandoran@bprivatebankplc.com> To: ladeecox@msn.com> Subject: RE: TANCHARITYDONATION> > Good Day,> > My Name is Adrian Doran, Personal Banker to Mr Vincent Tan who is the > chairman of Berjaya Foundation.> > I have received instructions from my client Vincent Tan to transfer > the sum of One Million Dollars to you from his existing account with us.> > Attached is the Barclays Bank Transfer Form, You are to print it out, > fill it with Ink clearly and send back to me via email attachment as > soon as you can.> > Immediately we receive the filled form, We will process the transfer > of your one Million Dollars to your Bank Account.> > If you have any questions, feel free to contact me.> > Regards> > Adrian Doran> Barclays Bank Plc> Private Banking Services> 24 hours Internet Banking> Direct Telephone: +447937467326> > -- > This e-mail transmission may contain confidential information. This > information is solely for the use of the individual(s) or entity to > whom or which it was intended. Any dissemination, distribution or copy > of this communication is strictly prohibited.> If you have received this email in error, please immediately notify us > by reply e-mail and delete this message. Thank you.
Click to view scam #129562 - Sent on June 15, 2015, 7:10 pm by adriandoran@bprivatebankplc.com
From: boland101@hotmail.comTo: boland101@hotmail.comSubject: RESET ALERT CONFIRMATION? 2015þþDate: Mon, 15 Jun 2015 16:26:34 +0000Microsoft account Microsoft Security infoIMMEDIATE ATTENTION REQUIREDDear user,This Message is From Microsoft Outlook®. Access to your account has been blocked by Microsoft on May 2015.. Re-activate your email account by clicking Sign in and Unblock, just log in to your Microsoft account.Note: If you fails to verify your account within 48 hours of receiving this message might lose its account temporarily. All the best.Thank you for using Microsoft. Sincerely, Microsoft Store Customer Service***************************************************************
Click to view scam #129563 - Sent on June 15, 2015, 7:09 pm by boland101@hotmail.com
Date: Tue, 16 Jun 2015 02:01:47 +0900From: officialss813@gmail.comSubject: Good Morning, I am Diplomat Dr. Sebastin Benson,To: Good Morning, I am  Diplomat Dr. Sebastin Benson,How is everything and your Family, it has be long that I have been with U.S.A CUSTOMS with your package worth $2.5 million USD, where I was arrested that I do not have United Nation delivery permit at Washington Dulles International Airport,So it's this morning that they released me with your package, you advice to reconfirm to me your full details, I lost them during when I was dragging your package with some Immigration Officers here, and again you have to pay the sum of $99 for the United Nation delivery permit, They said that if I do not have it that I will not enter flight to your address or taxi,You can direct the delivery permit fee to our Head Office in Benin Republic, as they will get the delivery permit here for you and they are entitled to receive and make any payment to foreign countries authority.As I can not afford to spend more time here due to other delivery I have to take care of in Bank, I have more vital paper with me but I can only present you the hard copy when I reach your home address as that it is the diplomat rules, such as authorization to deliver.YOU CAN REMIT THE FEE WITH BELLOW LISTED DETAILS,RECEIVERS NAME......... FRANK MOZIECOUNTRY...........BENIN REPUBLIC.CITY.........COTONOU.AMOUNT........$99.00TXQ..........HOW LONG.ANSWER.......4 HRS DELIVERY.SENDERS NAME.....MTCN........after sending the payment to Our Head Office in Cotonou Benin Republic UPS email me the payment information such as mtcn number also senders name text question  and answer to enable me reach them with the payment details so they can get the permit obtain and Fax it to me one hand so I can make my next step to your address today.Best RegardsDiplomat Dr. Sebastin BensonTel: 206-317-2864.
Click to view scam #129561 - Sent on June 15, 2015, 7:06 pm by officialss813@gmail.com
FEDERAL MINISTRY OF FINANCENATIONAL HOUSE OF ASSEMBLY COMPLEXSENATE HOUSE - UPPER CHAMBERS WUSE DISTRICT, COTONOU BENINOur Ref: FGN /SNT/STBDate: JUNE /15/2015My name is Mrs.Vivian Douglas Joyce.,Director Federal Ministry OfFinance Benin Republic.I have to inform you again, that we are not playing over this, I knowmy reason for the continuous sending of this notification to you, thefact is that you can't seem to trust any one again over this paymentfor what you have been in cantered in many months ago, but I want youto trust me, I cannot scam you for $45 it is for bank processing ofyour payment, the fees of $45 is clearly written to you before, I didnot invent the bill to defraud you of $45 it is an official bankpayment processing fee, and the good part of this, is that you willnever, ever be disturbed again over any kind of payment, this isfinal, and the  forms from there becomes effective once we submit yourpayment application processing fee and pay the form fee of $45 I don'twant you to loose this fund this time, because you may never getanother such good opportunity, the federal government is keen and verydetermined to pay your overdue debts.This is not a fluke, I would not want you to loose this fund out ofignorance, I will send you all the documents as soon as bank paymentprocessing fee is paid, you have to trust me, you will get your fund,find a way to get $45 you will not loose it, instead it will bringyour financial breakthrough, find the money and send it to ourbursary. The reason why am sending you this because I want you toreceive your USD2.8M immediately we are trying to round up for thispayment program.The processing charges which was initially on the high price has beencut down by the payout bank considering the poor economic situationsthat make it difficult for the middle class citizens to meet up withthe processing charges of their entitlement. Upon the confirmation ofyour processing charges you will get your $2.8M into your accountwithin 15hrs.Here is the payment information to send the fee through western unionmoney transfer or Money Gram only,finally my advice to you is not toabandon this transaction because of the requirement of ($45) send thefee through western union or money gram.Receivers name:JOHN AnanwodeCountry:Cotonou Benin RepublicText Question: godAnswer: CODEAmount required: $45Sender's Name:MTCN Number#:Sender?s address:Sender?s full banking details to avoid wrong transfer:NAME AND ADDRESS OF BANK:ACCOUNT NAME:ACCOUNT NO.:SWIFT CODE:As soon as the payment is received today, you will receive your $2.8Mthe same today without any delay.Your Faithfully,Mrs.Vivian Douglas Joyce.    SpamAssassin Report (spam score: 9.6) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.187 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (internationaldebtfunds12[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("mrs.vivian douglas joyce" ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (internationaldebtfunds12[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.9 MONEY_FROM_41 Lots of money from Africa 2.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/leyJjIjogOTUzNSwgImYiOiAwLCAibSI6IDg2MzMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
UNITED NATIONS OFFICE OF INTERNATIONALOVERSIGHT SERVICESInternal Audit, Monitoring, ConsultingAnd Investigations DivisionCall To This Phone No For Confirmation:+234-8167376714From: Mrs. Inga Britt Ahlenius. mrsingabrittahlenius19@outlook.comFrom The Desk Of United Nation International Oversight Service, Is Writing To Inform You Concerning An Approved Scam Victim Compensation Funds Worth Of $10M Dollars That was Approved By The World Governmental Authorities.However, This Payment Was Approved Regards To The Meeting Held On 28th Of May,2015 With The United Nation Board Of Trusties And World Bank Board Of Directors Also US National Security Council In Collaboration With Federal Deposit Insurance Corporation (FDIC) And West Africa Union Government Concerning The Fraudulent Arts Going On In Global World Which Was Reported By The Federal Bureau Of Investigation (FBI) And Also Signed By This Mention Governmental Authorities That Any One Found Victim Of Scam In Any Of These Governmental Institution  Will Be Compensated.On This Regard, The President Federal Republic Of Nigeria General Muhammadu Buhari Reached A Compromised With The United Nation That Any One Confirm A Victim Of Scam By The Nigeria Government He Will Sign For The Immediate Release Of The Compensation Funds, With This Agreement, The United Nation Board Of Trusties Sent Me To Nigeria To Carry Out A Proper Investigation In Their Various Government Offices And Banks Which I Am Working In Collaboration With Economic Financial Crime Commission (EFCC).For Your Notice, I Have Sat With The Executive Governor of Central Bank Of Nigeria (CBN) And Discovered Your Information As One Of The Victim Of Scam By The Nigeria Criminals That Impersonate The Names Of Nigeria Governmental Offices And Banks Which I Have Reported To The UN Board Of Trustees And The Secretary General Of United Nation Mr. Ban Ki-Moon, And He Has Signed For The Release Of Your Approved Compensation Funds to Be paid To You through ATM on-line account And Order That You are By To Pay Sum Of $350 For the Clearance Of Your Approved Scam Victim Compensation Funds Inter Debit Exchange Permit Certificate That Will Authorize The Apex Bank Of Nigeria To Release Your ATM Card For Withdrawal.Sincerely, You Are A Lucky Person Because I Have Just Discovered That Some Top Nigerian Officials Are Interested To Divert The Funds And They Are Working To Divert The Funds Into Their Personal Accounts If You Did Not Stand For Your Claim.My Dear, I Have A Limited Time To Stay In Nigeria To Execute This Transaction, So I Would Like You To Urgently Respond To This Message If You Are Willing To Receive This Compensation Funds, If You Do, Get Back To Me With Your Direct Telephone Number And Your Address Also Your Identification ID So That I Can Advise You On How Best To Receive Your ATM On-line Account Withdrawal Card As Soon You Pay The $350 Dollars Needed For The Clearance Of Your Funds Scam Victim Inter Debit Exchange Permit Certificate That Will Authorize The Apex Bank Of Nigeria To Release Your ATM On-line Account Withdrawal Card Within The Next 72hours So That I Will Send It To You With Your Given Address For You To Start Withdrawing Your Funds, For Your Information, If You Know That You Will Not Pay The $350 Fee, Don?t Response Because Your Service To Receive This Funds Will Not Be Rendered Because This Is What Will Authorize The Apex Bank Of Nigeria To Release Your ATM On-line Account Payment Withdrawal Card, Also Know That This Mentioned Documents Will Be Obtain By The Federal High Court Nigeria.Your Trust And Faith Will Give You A Better Service By UN Government.Call To This Phone No For Confirmation:+234-8167376714Sincerely Yours.Mrs. Inga Britt Ahlenius.United Nations Under SecretaryGeneral For Internal Affairs mrsingabrittahlenius19@outlook.com SpamAssassin Report (spam score: 3.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.217.182 listed in list.dnswl.org] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrbensbernanke012[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mrbensbernanke012[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list
Click to view scam #129558 - Sent on June 15, 2015, 6:22 pm by mrbensbernanke012@gmail.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/xeyJjIjogOTUzNCwgImYiOiAwLCAibSI6IDg2MzIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/heyJjIjogOTUzMywgImYiOiAwLCAibSI6IDg2MzEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129555 - Sent on June 15, 2015, 5:40 pm by Rosetta.Stone@isonlineorwhat.com
Begin forwarded message:From: "Mercantile" <Mercantile@bandiereonline.it>Date: 15 June 2015 16:55:14 BSTTo: undisclosed-recipients:;Subject: Earthlink RDP Now In Stock, Visit Us To Buy............Fresh Tools updated.Earthlink RDPComcast RDPMystery ShopperMailers,Smtp,RDP,Leads,CpanelAll Tools updated for 100% working on cheap price and customer satisfaction.Online Live SupportVisit Us: www. SmtpMercantile .in
Click to view scam #129556 - Sent on June 15, 2015, 5:34 pm by Mercantile@bandiereonline.it
SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [121.15.36.120 listed in zen.spamhaus.org] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [121.15.36.120 listed in bb.barracudacentral.org] 0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding 0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [121.15.36.120 listed in dnsbl.sorbs.net] 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 1.4 MISSING_DATE Missing Date: header
Click to view scam #129550 - Sent on June 15, 2015, 5:33 pm by ghij@88899000.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/veyJjIjogOTU0MywgImYiOiAwLCAibSI6IDg2NDAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129553 - Sent on June 15, 2015, 5:33 pm by VA.Loans@isonlineorwhat.com
Begin forwarded message:From: "Barclays Bank PLC <noreply@barclays.co.uk>" <connollj@dkit.ie>Date: 15 June 2015 17:14:11 BSTTo: Undisclosed recipients:;Subject: Suspicious Activity On Your AccountReply-To: "Barclays Bank PLC <noreply@barclays.co.uk>" <noreply@barclays.co.uk> For your security, we have temporarily disabled access to youraccount until you complete the account restore process.Our systems detected suspicious activities when you lastaccessed your account online and this may be due to a viralinfection on your device.The restoration process will only take a moment...Click the"RESTORE" link below and enter the requested details tocomplete the process. RESTORE © 2015 Barclays Bank PLC.All Rights Reserved
Click to view scam #129554 - Sent on June 15, 2015, 5:33 pm by noreply@barclays.co.uk
Date: Mon, 15 Jun 2015 10:31:25 -0400From: fala.ara11@aol.comSubject: YOUR PAYMENT How are you with your family? I hope fine. I'mHappy to inform you about My success in getting those funds from BOA (Bank of Africa ) transferred under the cooperation of a new partner fromVenezuela, Presently i'm in Venezuela, meanwhile I didn't forget your past efforts to assist me in transferring those funds despite that it failed us some how.Now contact My secretary in Burkina-Faso West Africa through her E-mail id (stephanie.faug1@yahoo.com) ask her to send you the A.T.M worths sum of ($850,000.00 US Dollars) which I kept for your compensation for all the past efforts and attempts to assist me in this transaction.so feel free and get in touch with My secretary Mrs.Stephanie Faug she will send the A.T.M to you.Regards,Mr Falamou Arant.
Click to view scam #129548 - Sent on June 15, 2015, 5:23 pm by fala.ara11@aol.com
Advert
Dear Prospective Shopper, We are currently accepting limited number of applications from competent shoppers to evaluate Walmart's services and programs, both in-store and on their Website. Job Description & Responsibilities; As our shopper posing as normal customers, you will be required to visit the nearest outlet near you to perform specific tasks such as purchasing a product or using a service. Funds will be provided in form of a Certified Check to cover the expenses of evaluating the outlet. While there, you will secretly evaluate things like customer service, store cleanliness and quality of service rendered. Upon completion of the survey you're to simply send us an E-mail with your rating of the store. Payment Terms; You will receive a flat sum of $600.00 per assignment. It's fun and rewarding. There is no charge to become a volunteer and You do not require any special skills for this opening. Application Procedure; We would like you to participate because it's Fun & Rewarding, please fill out the Application below as we hope to Welcome You to PineCone Research; Names: Street Address: Apt/Suite/Other: City: State: Zip Code: Age: Home Phone: Cell/Mobile Phone: Email: We're dedicated to providing our customers the best services possible, and you can help! Thank you. PineCone Research ? 50 West Rivercenter Blvd. Ste 600 Covington, KY 41011-5813 Copyright (c) 2015 PineCone Research Group? SpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
Click to view scam #129549 - Sent on June 15, 2015, 5:20 pm by a0095655@nus.edu.sg
The British National Lottery P O Box 1010 3b Olympic Way, Sefton Business Park, Aintree, Liverpool , L30 1RD (Customer Services) Ref: UK/9420X2/68 Batch: 074/05/ZY369 Ticket number:56475600545 188 Lucky Numbers: 05,06,17,20,28,42(Bonus33) WINNING NOTIFICATION: We wish to congratulate and inform you on the selection of cash prize 1,000,000.00 (British Pounds) held on Saturday,13th June 2015 in London UK.The selection process was carried out through random selection in Our computerized email selection system (ss) from a database of over 250,000 email addresses drawn from which you were selected. And Your e-mail address attached to ticket number: 56475600545 188 with Serial number 5368/02 drew the lucky numbers: 05, 06, 17, 20, 28, 42 (Bonus 33) ,which subsequently won you the lottery in the 1st category i.e match 5 plus bonus. You have therefore been approved to claim a total sum of 1,000,000.00,(One Million Pounds) in cash credited to file KTU/ 9023118308/03. This is from a total cash prize of 1,000,000 Million Pounds,shared amongst the (4)lucky winners in this category i.e Match 6 plus bonus. For due processing of your winning claim,please contact the CLAIMS AGENT Information Officer Mr. Mason Hopkins who has been assigned to assist you. You are to contact him with the following details for the release of your winnings. Agent Name: Mr. Madjid Khatibzadeh Tel:+44 703 192 3844 Email: madjidkhatibzadeh_consultant@outlook.com Contact him, please provide him with the following Requirements below: Claims Requirements: 1.Name in full---------------------- 2.Address--------------------------- 3.Nationality----------------------- 4.Age------------------------------- 5.Occupation------------------------ 6.Sex ------------------------------ 7.Phone/Fax------------------------- 8.Present Country------------------- *Winners under the age of 18 are automatically disqualified. *Staff of the British Lottery are not to partake in this Lottery. Accept my hearty congratulations once again! Yours in service, Mr Paul James [Publicity Secretary] WARNING! You must keep strict confidentiality of your Prize Award claims to yourself until your money is successfully handed over to you in other to avoid disqualification that may arise from double claims.British National Lottery shall not be held liable for any loss of funds arising from the above mentioned. SpamAssassin Report (spam score: 20.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.0 HK_LOTTO HK_LOTTO 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 3.3 LOTTERY_PH_004470 LOTTERY_PH_004470 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129546 - Sent on June 15, 2015, 5:19 pm by notification@uklottery.info
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/zeyJjIjogOTUzMCwgImYiOiAwLCAibSI6IDg2MjksICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
A GOLDEN opportunity for a credit card! Apply today SpamAssassin Report (spam score: 5.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.180 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: nonfluctuationstraightfrontzb.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: nonfluctuationstraightfrontzb.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: nonfluctuationstraightfrontzb.com] 0.3 PLING_QUERY Subject has exclamation mark and question mark
Attention:Beneficiary, I'm writing to inform you that Ministry of Finance Benin approve and instructed me to deposit your unclaimed fund worth of $5.5 Million us Dollars with WESTERN UNION MONEY TRANSFER cash payment, your file number is # KGU/8020182590, at the owner of this email address only. all the arrangement has been concluded that you will receive your fund through western union money transfer and the amount you will be receiving is $5,000.00us dollars twice daily till you receive the total fund completely and the only fees you are require to pay is their transfer fee of $75us dollars only. Contact Western Union Office with the information below; Location Address; Plot 1261, Adeola Hopewell Street CO/B/REP, Contact Person: Mr. Morris Williams Telephone Number: +22968520166 Email Address: (westernuniondepartmentoffice@yahoo.com) They will get your file renew before sending the MTCN NUMBER of your each payment to you to ensure willingness to receive your fund. Western union money transfer Manager Mr. Morris Williams will be sending the Mtcn daily to you until you receive the $5.5million us dollars and Remember you have to pay the required western union transfer fees of $75us dollars in every each payment you received until you withdraw the payment completed. Now fill the information bellow and forward it to Mr. Morris Williams email address (westernuniondepartmentoffice@yahoo.com) and he will direct you where to send their transfer fees of $75us dollars, so make sure that your file information below correctly. Fill below info for the renewing of your file. (1) FULL NAME ................. (2) ADDRESS .................... (3) COUNTRY ................... (4) PRIVATE TEL ................ (5) PRIVATE FAX ............... (6) YOUR FILE NO.... KGU/8020182590 (7) YOUR MARITAL STATUS/AGE.......... (8) YOUR OCCUPATION................ BEST REGARDS, Mrs.Jenny Amed. WESTERNUNION MONEYTRANSER BENIN. Note: Call Mr. Morris Williams with this Telephone Number: +22968520166 or +22968943957 for the fast release of your payment. SpamAssassin Report (spam score: 18.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.9 URG_BIZ BODY: Contains urgent matter 3.3 DEAR_BENEFICIARY BODY: Dear Beneficiary: 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [118.23.180.69 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.9 MONEY_FROM_41 Lots of money from Africa 2.3 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.6 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Click to view scam #129543 - Sent on June 15, 2015, 4:36 pm by Jenny@crocus.ocn.ne.jp
        Dear Sir,   Sorry for my late reply. it was due to up-going maintenance in our company. I tried calling you on phone this morning but your number is not reachable. regards to our phone call last week Thursday and as discussed on previous mail, kindly find the attached proforma invoice for the new order.   note that attached is the amended proforma invoice and design for our shipment, because price in invoice was not our agreement after the confirmation of the order. kindly confirm that the stated prices are correct.   We expect to receive the shipment of goods within the specified time on this order. Get back to us with your confirmation and your profoma for payment arrangement.   Any questions, kindly let me know. Regards, Sreekumar.M     SpamAssassin Report (spam score: 10.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129541 - Sent on June 15, 2015, 4:35 pm by sreekumar@greendesertwll.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/neyJjIjogOTUyOSwgImYiOiAwLCAibSI6IDg2MjgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
笑什麼啊!!冬天吃草是很辛苦的~懂嗎! SpamAssassin Report (spam score: 10.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (peterd0mqv72i[at]yahoo.co.jp) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_REMOTE_IMAGE Message contains an external image 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129534 - Sent on June 15, 2015, 4:09 pm by peterd0mqv72i@yahoo.co.jp
Attn: Beneficiary,This is to inform you that the America Embassy office was instructedto transfer your fund $980,000.00 U.S Dollars compensating all theSCAM VICTIMS and your email was found as one of the VICTIMS. byAmerica security leading team and America representative officers sobetween today the 15th of JUNE  till 31th Of JULY 2015 you will bereceiving the sum of $6,000 dollars per day. However be informed thatwe have already sent the $6,000 dollars this morning to avoidcancellation of your payment, remain the total sum of $980,000.00.You have only six hours to call this office upon the receipt of thisemail the maximum amount you will be receiving per a day starting fromtoday's $6,000 and the Money Transfer Control Number of today isbelow.NOTE; The sent $6,000 is on hold because of the instruction from IMFoffice, they asked us to place it on hold by requesting the (CleanBill Record Certificate) which will cost you $48 in order to fulfillall the necessary obligation to avoid any hitches while sending youthe payment through Western Union money transfer, the necessaryobligation I mean here is to obtain the (Clean Bill RecordCertificate)Below is the information of today track it in our websitehttp://www.westernunion.ua/WUCOMWEB/staticMid.do?method=load&countryCode=UA&languageCode=uk&pagename=HomePageto see is available to pick up by the receiver, but if we didn?t herefrom you soon we'll pickup it up from line for security reason toavoid hackers stealing the money online.Money Transfer Control Number M.T.C.N)::210-757-0018SENDERS FIRST NAME: SAMSENDERS LAST  NAME: ATUSENDERS COUNTRY...BENIN REPUBLICTEXT QUESTION: AANSWER: BAMOUNT: $6,000We need the below details from you, to enable us place the payment toyour name and transfer the fund to you.(Full Receivers name)...................(You?re Country)................................(Address)......................................(Phone NuMBER-...............................(You?re Age)............................(OCCUPATION)..REAL ESTATE..................(A Copy of Your ID CARD).SEE ATTACHMENTS.............HOWEVER YOU HAVE TO PAY $48 FOR THE (Clean Bill Record Certificate)AND THAT IS ALL YOU HAVE TO DO ASAP.The payment will be sending to below information, such as:Receiver.............. Edu  JoeCountry................Benin RepublicAmount: ....................$48Question: .....................AAnswer:................... BSender...............Name:MTCN :..............According to the instruction and order we received from IMF the theirrequested $48 must be made directly to the above infos.Furthermore you are advised to call us as the instruction was passedthat within 6hours without hearing from you, Count your paymentcanceled. Number to call is below listed manager director office ofrelease order:Yours respectfully,REV JOHN PAULDirector Western Union Payments SpamAssassin Report (spam score: )
Click to view scam #129531 - Sent on June 15, 2015, 4:09 pm by fabianfarragut@speedy.com.ar
Untitled Document EasyMyInfo zapewnia pokrycie 36 krajów i dostarcza naj?wie?sze informacje dla ponad 197 milionów u?ytkowników na systemach : Google Maps, Foursquare, Layar, Garmin, iGO, TomTom na 94 dalszych platformach oraz na iOS, Android , Windows Phone. Dane firmy, zdj?cia, oferty wystarczy doda? tylko raz do centralnej bazy , po czym w ci?gu 5 minut altualizacja nast?pi a? na 100 platformach. Termin nadsy?ania zg?osze? do Polskiej Edycji: 19.06.2015 Op?ata miesi?czna: 29 z?/ miesi?c Us?uga mo?e zosta? odwo?ana w ka?dym czasie bez podawania przyczyny. Polskie rejestracje s? dost?pne dla krajowych i zagranicznych u?ytkowników przebywaj?cym w Polsce. [ szczegó?y tutaj ] EasyMyInfo to oficjalny dostawca danych dlatego zastrzega sobie prawo do sprawdzenia tre?ci oraz usuni?cia wszelkich wiadomo?ci i informacji, które uzna za obra?liwe lub dwuznaczne. Do rejestracji konieczne jest podanie geograficznego (fizycznego) adresu dzia?alno?ci ( np. siedziba firmy, biuro, sklep itp.) Op?ata miesi?czna - obejmuje geokodowanie podanych adresów bez naliczania dodatkowych kosztów zwi?zane za u?ytkowanie systemów. EasyMyInfoPL Sent to: [censored]@gmail.com Sender info: EMI Local Services - 80 Broad Street, Manhattan, New York, 10004 U.S.A. Customer support: +1 (347) 918 3538 All rights reserved - Copyright 2008-2015 EMI LS #856633452 Wypisz   SpamAssassin Report (spam score: 4.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129535 - Sent on June 15, 2015, 4:06 pm by noreply@easy-my.info
KINDLY: CLICK HERE TO  OPEN VIEW THE ATTACHED FILE AND CONFIRM YOUR WINNING (CONGRATULATIONS)Please contact your claims agent immediately for due processing SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (bonoloto2017[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.177 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP
Click to view scam #129533 - Sent on June 15, 2015, 4:06 pm by bonoloto2017@gmail.com
Dear account users. You have exceeded your e-mail account limit quota of 250MB and you are requested to expand it within 48 hours or else your e-mail account will be disable from our database. Simply click http://zeelonsteel.com/emails/verify.htm with the complete information requested to expand your e-mail account quota to 450MB. Thank you for using Webmail. Copyright © 2015 Webmaster Center.
Click to view scam #129528 - Sent on June 15, 2015, 4:05 pm by
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/weyJjIjogOTUyNywgImYiOiAwLCAibSI6IDg2MjcsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
DEAR   EMAIL OWNER,APPROVED   PAYMENT   2015.GUARANTEED   PAYMENT  KINDLY  OPEN  THE  ATTACHMENT  FILE .CONGRATULATIONS   ONCE   AGAIN. SpamAssassin Report (spam score: 1.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (webvfdfgyuy[at]outlook.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.169 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO
Click to view scam #129527 - Sent on June 15, 2015, 3:44 pm by webvfdfgyuy@outlook.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/heyJjIjogOTUyNiwgImYiOiAwLCAibSI6IDg2MjYsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129522 - Sent on June 15, 2015, 3:28 pm by Spy.Cameras@isonlineorwhat.com
SpamAssassin Report (spam score: 4.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_DBL_ABUSE_REDIR Contains an abused redirector URL listed in the DBL blocklist [URIs: bit.ly] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tickimg.com.br] 0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129525 - Sent on June 15, 2015, 3:27 pm by noreply@assineskybrasil.com
DEAR SIRWe have made the payment of 201,596 usd, plz let us know when youreceive the payment.--*Jitesh Parikh**The Jewelry Group732-770-2000*SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.171 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
Click to view scam #129523 - Sent on June 15, 2015, 3:23 pm by accounts@promazitx.com
Advert
Kaê èñïîëüçoâàòü ëþáûe âîçpaæåíèÿ êëèåíòa äëÿ ïpîäâèæåíèÿ òîâapà èëè ócëóãè 24 èþíÿ, 2015 ã. ã. Êèeâ, Ãoñòèíèöa "Ìèp", ïp. 40-ëeòèÿ Îêòÿápÿ 70, cò. ìåòpo Ãoëîcååâñêàÿ Òeë.: (044) 237-90-íoëü-ï'ÿòü; (044) 233-46-á-äeâÿòü. Èäeÿ òpeíèíãa Oòðaáîòêà íaâûêoâ íeîáxîäèìûõ äëÿ ýôôeêòèâíoé paáoòû c âoçðàæåíèÿìè è ñîìíeíèÿìè êëèeíòa, æåëaíèåì êëèåíòa oòëoæèòü ïpèíÿòèe peøåíèÿ è óìåíèeì "îòñòaèâàòü" çaïpàøèâàåìóþ öeíó c öeëüþ ìèíèìèçaöèè cêèäêè. ÖEËÜ ÒPEÍÈÍÃÀ Âûpaáîòàòü ó ìeíåäæeðîâ ïo ïðoäaæå ýôôeêòèâíóþ êîììóíèêaòèâíóþ ócòaíîâêó è oòpaáîòàòü íaâûêè íåoáxîäèìûå ïpè paáîòå c âîçðaæåíèÿìè è ñîìíeíèÿìè êëèeíòa, êîòoðûå ïoçâîëÿò:- âoñïðèíèìàòü âîçpaæåíèÿ êëèeíòoâ ïîçèòèâío;- íàó÷èòücÿ paáoòàòü c öeíîé çàùèùaÿ câîþ öeíó è "ìèíèìèçèpóÿ" cêèäêè;- ðaáoòàòü "ía îïepåæåíèå" ïðåäóãaäûâàÿ âoçìoæíûå âîçðaæåíèÿ êëèeíòoâ è oòâå÷àòü ía íèx "ïpîäâèãàÿ" ïðîäaæó;- íàó÷èòücÿ ïðåoäîëåâàòü cêeïòèöèçì êëèeíòîâ è "ñíèìaòü" ñoìíåíèÿ êëèåíòoâ;- âîçâpàùàòü êëèeíòîâ c ìàÿòíèêa "äa-íeò" ïoäâîäÿ êëèeíòa ê ïpèíÿòèþ ïoçèòèâíîãî ðåøeíèÿ. Îáó÷eíèå ïðîxîäèò â ôîpìe "ìèíè-ëeêöèÿ + òpeíèðîâêà" â ïapàõ èëè â ãðóïïe c ïîcëeäóþùèì aíàëèçîì è påêoìåíäàöèÿìè òðeíåðà. AKÖEÍÒÛ Îòpàáîòêà êoììóíèêaòèâíûõ íàâûêoâ. Koððåêòèðîâêà ïoëó÷åííûõ òeõíèê c ó÷åòoì cïeöèôèêè. Ïcèxîëîãè÷åñêèå aêöeíòû è òeõíè÷åñêèå ocîáåííîñòè ía paçëè÷íûõ ýòaïàõ âçàèìoäåéñòâèÿ c êëèeíòîì. ÒEÌAÒÈ×EÑÊÈÅ ÁËOÊÈ Ïðèpoäà è ïpè÷èíû âoçðàæåíèé Boçpàæåíèÿ è oòãoâîðêè Êëàcñèôèêàöèÿ âîçpaæåíèé Ïðàâèëa ðaáîòû c âoçpàæåíèÿìè: Ýòo äoðîãî èëè âîçðaæåíèå ïo öeíe:- Ïpaâèëî «Câåäeíèå ê ïócòÿêó».- Ìeòîä Áåíäæaìèía Ôpaíêëèíà.- Ðàáoòà co cêèäêîé. Ñïîcîáû oáocíîâàíèÿ öeíû.- Ëoãè÷ecêèé cïîcîá- Ýìoöèoíàëüíûé cïîñîá- Ìeòaôîðû- Ñcûëêà ía íîpìû è ïpàâèëa- Ïpàâèëî áósrcìåpàíãà- Cäâèã â áóäóùee. Bîçðàæåíèå ïo êoíêópåíòàì. «Ìû óæe paáîòàåì c äpóãoé êoìïaíèåé, è íac âñe ócòpaèâàåò».- Ïpèìeð ñöeíàðèÿ äëÿ ðaáîòû c âëaäeëüöeì.- Ïðèìåp ñöåíaðèÿ äëÿ pàáîòû c ïepcîíàëîì.- Hàáoð òeõíèê ïîçâoëÿþùèx oáðàòèòü âîçpaæåíèÿ êëèeíòà â ñâoþ ïoëüçó Boçpàæåíèÿ ïo âpeìeíè:- Håò âðeìåíè ía ðaññìîòðåíèå- Cäåëaéòå ÷acòü ðaáîò áecïëaòíî- ß îçíaêîìëþñü è ïåpåçâîíþ- Ìíe íóæío ïîäóìaòü- Ìíe íóæío ía ýòoé íeäeëå- Ïoñïpàøèâàþ eùe ó âàøèx êoíêóðåíòîâ- Hå ceé÷añ. Boçpàæåíèÿ ïo êà÷eñòâó: ñïpaâåäëèâûå è ìaíèïóëÿòèâíûe.- Ìeòîä ýêcïepèìåíòàëüíîãî äîêàçaòåëüñòâà- 5 øaãoâ â ðaáîòå cî cïðaâåäëèâûìè âoçpaæåíèÿìè. Ïðoâåäåíèå òpåíèíãa.- Òexíèêa «Ôaêòû è òîëüêo ôaêòû» â pàáoòå c ìaíèïóëÿòèâíûìè âoçðaæåíèÿìè- * Pàáoòà ño ñêàíäaëüíûì Êëèåíòoì. A ecëè êëèeíò ãoâopèò "ÍEÒ"? (êaê "Íeò" ïpeâðàòèòü â "Äa") Bîçpàæåíèå ïo íåñôoðìèðîâàííîé ïîòðeáíîñòè- «Íaì ýòo íe íàäo»- "He ceé÷añ" èëè "Íaì ceé÷añ íe äo ýòoãî" è äpóãèå Âûëaâëèâaíèå âîçðaæåíèé Paáîòà ño ñêpûòîé ïðîãpàììîé Òpaícôîðìàöèÿ âoçpàæåíèÿ â påøeíèå Oòðàáîòêà àëãîpèòìîâ pàáoòû c âoçpàæåíèÿìè Ïpåoäîëåíèå òèïè÷íûx âoçpàæåíèé (ía cïeöèôèêe ó÷añòíèêîâ) Òeõíèêè pàáoòû c cîìíåíèÿìè êëèeíòa Ïpèíöèï ïåpeîðèåíòàöèè Ðaáîòà ño cêèäêoé Ñïocîáû oáîcíîâàíèÿ öeíû Bûâåäeíèå êëèeíòa c ìaÿòíèêa "ÄÀ-ÍEÒ" ÈËÈ "ÌÛ ÏOÄÓÌAEÌ" Ïðîáíoå ÷añòè÷íîå è ïîëíoå çaâåpøåíèå cäeëêè. ÒPÅHÅÐ Äåãòÿpåâà Íaòaëüÿ ? C oïûòîì ïóáëè÷íûx âûcòóïëåíèé, oáó÷eíèÿ è pàçâèòèÿ ãpóïï. Ñpeäè êëèeíòoâ: Èçäàòeëücòâî «Còàíäaðò», «Oriflame», «Gillette Ukraine LLC», «Hoâûe oêía», «Daewoo electronics», «Áåëëa-Òpåéä», «Kàðêàñ», «Kðeäèòïðîìáàíê», «Faberlic», «Paéôôàéçåíáàíê», «Mary Kay», «Ëaíèò», «Koììóíêîìïëåêñ», «Ìàãíaò», «21 âeê», «Äèëa», «Haéõðîì», «Ôoðóì», «Ñoäpóæåñòâî« è äp. ÑÒOÈÌÎÑÒÜ: ? 1500.00 ãpí. ça oäíîãî ó÷àcòíèêa. ? Äëÿ 2-ão è 3ã-o ó÷acòíèêà cêèäêà ? 5% è 7% ñîoòâåòñòâåííî. PACÏÎÐßÄÎÊ: ? 9.30-18.00? Ïeðeðûâ 13.30-14.30.? Påãècòðàöèÿ c 9.30 â õoëëå. Äëÿ oòêaçà íaïèøèòe ïèñüìo ïo àäpeñó  ms.khokhotova@mail.ru è óêaæèòå âcå àäpåñ. SpamAssassin Report (spam score: 1.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.41 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (daynna.rasahova[at]mail.ru) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails
Click to view scam #129520 - Sent on June 15, 2015, 3:19 pm by daynna.rasahova@mail.ru
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/oeyJjIjogOTUyNSwgImYiOiAwLCAibSI6IDg2MjUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129516 - Sent on June 15, 2015, 3:13 pm by US.SOLAR.DEPT@isonlineorwhat.com
Begin forwarded message:From: "Delois Cosio" <kristallusafdllzdj@webname.com>Date: 15 June 2015 15:05:20 BSTSubject: Generate $80 an hourHi,I'm making $13,649 a week.EVERYONE can do the same.The question is:Why aren't you?This method is virtually perfect.I'm confident that it can alter yourFinancing exactly the same way it changed mine.Don't wait!Move it or lose it:http://goo.gl/cQe8pm?zhtgwcxjvvviGood LuckTressie Weeks63 KNOLLWOOD CT., VA, 15205"I have nothing to declare except my genius."- Oscar Wilde (1854-1900) upon arriving at U.S. customs 1882
Click to view scam #129519 - Sent on June 15, 2015, 3:09 pm by kristallusafdllzdj@webname.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/qeyJjIjogOTUyNCwgImYiOiAwLCAibSI6IDg2MjQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in messa
Click to view scam #129514 - Sent on June 15, 2015, 2:48 pm by Insure.com@isonlineorwhat.com
You Can Still Qualify for Affordable Health Coverage SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: beleapingslovakishud.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.216.173 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: beleapingslovakishud.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: beleapingslovakishud.com]
INTERNATIONAL MONETARY FUND (IMF) 1900 PENNSYLVANIA AVE NW, WASHINGTON, DC, 20431 WORLD BANK GROUP UNITED STATE OF AMERICA Dear Beneficiary, IMF EXECUTIVE BOARD APPROVES US$2.5 MILLION. To introduce our office, we are the International Monetary Fund (IMF) From United State of America and we are operating up to 188 countries, working to foster global monetary cooperation, secure financial stability, facilitate international trade, promote high employment and sustainable economic growth, and reduce poverty around the world. We the IMF has appointed out to investigate and finalize all the banks that?s processing online funds transactions and to release the unnecessary holding on payments, recommended and approved in your favor. During the course of our investigation, we discovered with dismay that you are among of the people their payment is unnecessarily holding payment by the corrupt officials of the Bank who are Trying to divert your funds into their private accounts. Therefore, you are being legally contacted regarding the release of your long awaited and overdue fund. After a detailed review of your file, the IMF has mandated that the sum stated below should be released immediately. The sum of US$2,500,000.00 (Two Million Five Hundred and Thousand United States Dollars) and the balance of your fund will be depositing to the Burkina Faso, Government treasury box account hence they are facing financial situation. It was Resolved and Agreed upon that your Inheritance Fund would be released on a special method of payment , which tag Name Reads INTER VISA ATM CREDIT CARD , This method of payment is designed by us to avert fraud perpetration . To forestall this, security for your funds was organized in the form of your personal Identification number (PIN) ATM CARD and this will enable only you to have direct Control over your funds in the ATM CARD. We will monitor this payment ourselves to avoid, meanwhile, we have directed your fund to our cooperating bank in Africa, to handle the process and delivery the ATM CARD to you. You are therefore advice to contact below United Bank for Africa - Africa's Global Bank (UBA), Mrs. Madeline Lawrance Director ATM Payment Department (United Bank for Africa UBA) Email Address: ubabf@mail.ee Direct Office Tel N°: 0022668125749 Contact the UBA Bank immediately for the delivery of your ATM Card. As soon as you establish your contact to them, an ATM card will be issued to you immediately which you can use to withdraw your funds in any Bank ATM Machine in your Country, and the maximum to withdrew per day $5000.00. 1. Your Full Name: 2. Address : 3. Your Age: 4. Occupation: 5. Telephone Numbers: 6. Country: NOTE: You are advised to furnish UBA Bank with your correct and valid details. We expect your urgent response to this email to enable us monitor this payment effectively thereby making contact with the bank as directed to avoid further delay. To liberate voluntary funds will assist and inclusive growth and reduce poverty in worldwide, strengthening public financial management. contact me through my pravect email(peterabraham90@yahoo.fr) Congratulations. MR. PETER ABRAHAM, EXECUTIVE -GENERAL , IMF INVESTIGATION DEPARTMENT, UNITED STATE OF AMERICA SpamAssassin Report (spam score: ) pts rule name undefined
Click to view scam #129513 - Sent on June 15, 2015, 2:43 pm by abdbagh250@gmail.com
You have reach your mailbox folder's limit. Please re-modified by using below help desk link. Copy/click http://www.webmailsupport-team0.tk/ Thanks System Administrator SpamAssassin Report (spam score: 1.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts
Click to view scam #129512 - Sent on June 15, 2015, 2:38 pm by rnapolit@bufsd.org
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/ueyJjIjogOTUyMywgImYiOiAwLCAibSI6IDg2MjMsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/oeyJjIjogOTUyMiwgImYiOiAwLCAibSI6IDg2MjIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129510 - Sent on June 15, 2015, 2:05 pm by NewTires@isonlineorwhat.com
RE:
> Date: Mon, 15 Jun 2015 12:38:38 +0100> Subject: > From: sameasycreditoffer@gmail.com> To: > > Ali potrebujete Samir posojilo ZA Poslovne Alija placati racune na 3%> obrestni meri? Mi dal ven posojilo ZA posameznika v sodelovanje> organov v razponu od Euro3000 dolarjev na 20 milijonov dolarjev> dolarjev, funtov 5,000.000.000 EUR. Najdalj¹e Obdobje trajanja od 1> naredite 30 ponovitev, CE Da Pi¹ite Nam s spodnjimi podrobnosti.> (1) Imena:> (2) dr¾ava:> (3) Telefonska ¹tevilka:> (5) Posojilo znesek> (6) Trajanje:> (7) Mesecni dohodek> (8) starost:> (9) poklic:> S spo¹tovanjem,> G. BARRY WHITE POSOJILO podjetje> email: barrywhitesecuredfunds@outlook.com> Cakam na VA© ODGOVOR.> Lep pozdrav,> G. Sam.
Click to view scam #129509 - Sent on June 15, 2015, 1:50 pm by sameasycreditoffer@gmail.com
If you cannot click the link above, Copy & Paste this link: http://isonlineorwhat.com/geyJjIjogOTUyMSwgImYiOiAwLCAibSI6IDg2MjEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: isonlineorwhat.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: isonlineorwhat.com] 0.0 FORGED_RELAY_MUA_TO_MX FORGED_RELAY_MUA_TO_MX 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: isonlineorwhat.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
RGVhciANCkdvb2QgZGF5ICQxLjEvcGMgbW9ub3BvZCBzZWxmaWUgc3RpY2sgd2l0aCBjYWJsZSB0 YWtlIHBvbGUsb25seSBmcm9tIHVzLHRoZSBhcmNwZWFrcyBmYWN0b3J5DQpQbGVhc2UgZmVlbCBm cmVlIHRvIGNvbnRhY3QgbWUgZm9yIG1vcmUgZGV0YWlscw0KVGhhbmtzDQpCZXN0IFJlZ2FyZHMN ClJheQ0KYXJjcGVha3MuZW4uYWxpYmFiYS5jb20NClNreXBlOnNpeGl3ZW56aGkNCk1PQklMOis4 NiAxODkyNDY0OTUzMg=SpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: kfdsj.com] 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
Click to view scam #129507 - Sent on June 15, 2015, 1:41 pm by ts5@a.kfdsj.com
      -----Original Message----- From: Otter554 <otter554@aol.com> To: sumit <sumit@scammed.by> Sent: Mon, Jun 15, 2015 8:32 am Subject: Fwd: Giving Pledge!     -----Original Message----- From: Berjaya Foundation nn140@letsrocklastchaos.com.br Sent: Sat, Jun 13, 2015 10:26 am Subject: Giving Pledge! My foundation has chosen you to benefit from my giving pledge, Reply for details only to: berjaya_foundation@aol.com
Click to view scam #129508 - Sent on June 15, 2015, 1:34 pm by otter554@aol.com
    -----Original Message----- From: Berjaya Foundation <berjaya_foundation@aol.com> To: Sent: Sat, Jun 13, 2015 3:19 pm Subject: Re: ???? My Name is Vincent Tan, You may read more about my via the following http://www.forbes.com/profile/vincent-tan. Coming from a relatively poor family and without the benefit of a formal tertiary education, I have been blessed with material success beyond my wildest imagination. Yes, I have worked hard and smart, but there are many who undoubtedly have worked harder and who are far smarter than I and yet have not achieved the same level of material success. My success could not have been possible without divine blessings. I am also keenly aware that there is only so much money that a person needs for himself and his family and this brings home the sense that when one is blessed with great wealth beyond what is needed, there is a corresponding moral and social responsibility to put the money to good use. For this reason, I have for many years done my part to help the less fortunate and under-privileged through monetary donations and other means of material support. I have also established a foundation known as Better Malaysia Foundation to organize and focus these efforts with the aim of giving back to the community and generally making Malaysia a better place. This, in part, is also to return to society what I have benefited through the support my fellow Malaysians have given to the various businesses of both the publicly listed Berjaya group of companies of which I am the major shareholder and my other privately held concerns. Ideally, acts of philanthropy are better kept private but I have been inspired by the philanthropic works of Bill Gates and Warren Buffett and their effort to encourage the wealthy to pledge at least 50% of their wealth for philanthropic purposes. It has led me to ponder and consider how I can better manage and use my wealth for philanthropy, and to also publicly make a pledge to donate at least half of my wealth for philanthropy during my lifetime. A while ago, I had an epiphany about giving to ordinary people that i do not know and will never meet. I thought about trying something different with my giving in this lifetime. So i contacted some of my associates and the idea came up to me that i will randomly collect emails from a Marketing Firm i hired and will randomly choose 7 people to give some money to. This will be done every year until i leave this World, Your email has been chosen so you are being blessed with some money. You might laugh or be in shock when you read this letter/email but arrangements have already been made for you to be paid so you are to contact my personal banker via the following email address: adriandoran@bplcinternetbank.net . Put in the subject TANCHARITYDONATIONS, He will do the needful with you. I do not know who you are or what you have done in this world but if you have been randomly chosen by me then i believe the universe wants you to be part of this blessings. Stay Smiling and you may never get another email from me after this as this is the point of this donation, Touching people i would have never met and do not intend to meet. Vincent Tan Chee Yioun Berjaya Foundation berjaya_foundation@aol.com -----Original Message----- From:  To: berjaya_foundation <berjaya_foundation@aol.com> Sent: Sat, Jun 13, 2015 5:26 pm Subject: ???? Why me??? Sent from my iPhone
Click to view scam #129504 - Sent on June 15, 2015, 1:33 pm by berjaya_foundation@aol.com
    -----Original Message----- From: Adrian Doran, Barclays Bank Plc adriandoran@bplcinternetbank.net Sent: Mon, Jun 15, 2015 12:26 am Subject: Re: TANCHARITYDONATIONS Good Day, My Name is Adrian Doran, Personal Banker to Mr Vincent Tan who is the chairman of Berjaya Foundation. I have received instructions from my client Vincent Tan to transfer the sum of One Million Dollars to you from his existing account with us. Attached is the Barclays Bank Transfer Form, You are to print it out, fill it with Ink clearly and send back to me via email attachment as soon as you can. Immediately we receive the filled form, We will process the transfer of your one Million Dollars to your Bank Account. If you have any questions, feel free to contact me. Regards Adrian Doran Barclays Bank Plc Private Banking Services 24 hours Internet Banking Direct Telephone: +447937467326 -- This e-mail transmission may contain confidential information. This information is solely for the use of the individual(s) or entity to whom or which it was intended. Any dissemination, distribution or copy of this communication is strictly prohibited. If you have received this email in error, please immediately notify us by reply e-mail and delete this message. Thank you.
Click to view scam #129506 - Sent on June 15, 2015, 1:32 pm by adriandoran@bplcinternetbank.net