Scammed.by Scam email RSShttp://scammed.byLive feed of scam emailsA Single Senior Could be yours Today http://scammed.by/scam.php?id=193751 -*-*-*-*-*-*-*-*-*-*-*-*-*- Senior Dating Options -*-*-*-*-*-*-*-*-*-*-*-*-*- Meet singre People -*-*-*-*-*-*-*-*-*-*-*-*-*- Don't miss out! SpamAssassin Report (spam score: 1.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: offer-bizconceptgroup.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-24 17:20:37Enjoy Your Safe Date with Hot Russian Ladieshttp://scammed.by/scam.php?id=193749 Hello, You've got an EXCITING chance to meet thousands of gorgeous Russian girls on RussianBeautyOnline.com! See their Photos and Videos, Email Them, and Chat with Them Now! Free Membership is available only for a few days. Act now and find your hot new romance at RussianBeautyOnline.com! SpamAssassin Report (spam score: 1.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: learnndiscover.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-24 17:11:15Notice of Pre approval 500 unsecured credit linehttp://scammed.by/scam.php?id=193750 -*-*-*-*-*-*-*-*-*-*-*-*-*- Horizon Gold Card -*-*-*-*-*-*-*-*-*-*-*-*-*- Congratulations! You are PRE-APPROVED. -*-*-*-*-*-*-*-*-*-*-*-*-*- Don't miss out! SpamAssassin Report (spam score: 1.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: learnndiscover.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-24 17:11:13Chat with 20000 Russian and Ukrainian Beautieshttp://scammed.by/scam.php?id=193748 -*-*-*-*-*-*-*-*-*-*-*-*-*- RussiaWomenOnline.com -*-*-*-*-*-*-*-*-*-*-*-*-*- Care for the lonely women -*-*-*-*-*-*-*-*-*-*-*-*-*- Don't miss out! SpamAssassin Report (spam score: 1.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: offer-bizconceptgroup.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-24 16:54:20Can you make more money in less time at home than your job?http://scammed.by/scam.php?id=193747 -*-*-*-*-*-*-*-*-*-*-*-*-*- CNN Frontline -*-*-*-*-*-*-*-*-*-*-*-*-*- You WONT BELIEVE latest Trump Bombshell SpamAssassin Report (spam score: 1.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: learnndiscover.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-24 16:53:16Mtcn 0716797753http://scammed.by/scam.php?id=193746 This is to inform you that we want to start sending your winning lottery of $4.8Million USD today and you can only be receiving two timesdaily from us through your payment file,note that you will pay $55 only for your transferring file. I have made today's payment for you below is the Mtcn, you can also track it on-line Website;https://wumt.westernunion.com/asp/orderStatus.asp?country=NG Sender's name:Clarence Corass Amount Sent $5,000 Mtcn# .0716797753 Text Question: When Text Answer: Now Re-confirm your information's to enable us activate the MTCN in your name you name___ you country__ you address___ you Occupation____ you Age/sex__ Your occupation Direct phone number__ EMAIL:(westernunionmrjohn@gmail.com) CONTACT PHONE +229 99077083 Best Regards Mr John White (IMF.) SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.138.89.198 listed in dnsbl.sorbs.net] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [153.149.233.7 listed in bb.barracudacentral.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2016-07-24 16:41:30Legal Consultant Adviserhttp://scammed.by/scam.php?id=193745 ---------- Forwarded message ---------- From: John Anthony, Esq Date: Sun, Jul 24, 2016 at 9:02 AM Subject: Legal Consultant Adviser To: Dear Sir/Madam I am Barrister John Anthony, Esq. An Investment Consultant/Legal Adviser. My client is interested in investing the sums of (Thirty Six Million Dollars) in your country with the partnership of your company. If you are interest in this offer kindly respond and give us your full name and contact details plus company profile to my email address and in respond we will send you an elaborate proposal and details of the offer. Thanks, John Anthony, Esq. SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-24 16:29:03TAKE NOTE REPLY ONLY THROUGH THIS EMAIL western union316@hotmail com http://scammed.by/scam.php?id=193744 blockquote, div.yahoo_quoted { margin-left: 0 !important; border-left:1px #715FFA solid !important; padding-left:1ex !important; background-color:white !important; } Begin forwarded message: On Friday, July 22, 2016, 11:23 AM, Mrs.Maryann Jacob wrote: Attention My Dear. We have deposited the check of your fund ($5.70000000USD) through Western Union department after our final meeting regarding your fund,All you will do is to contact Western Union director Mr.Kevin Anthony, He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as, Receiver's Name____ Address: __________ Country: __________ Phone Number: _____ Though, Mr.Kevin Anthony has sent $5000 in your name today Senders so contact Mr.Kevin Anthony or you call him +229 68717650 as soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to pick the $5000 Please let us know as soon as you received all your fund, E-mail:western.union316@hotmail.com Regards Mr.Kevin Anthony, WESTERN UNION DIRECTOR. SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-24 16:28:06GOOD DAYhttp://scammed.by/scam.php?id=193743 DEAR THIS IS TO INFORM YOU THAT YOUR ESTRANGED FUNDS IN AFRICA HAS BEEN SWIFTLY TRANSFERRED OUT OF ABROAD AND IS NOW IN THE CUSTODY OF THE CORRESPONDENT BANK (CITI BANK USA), AWAITING THE RECONFIRMATION OF YOUR CURRENT BENEFICIARY BANK COORDINATES SO AS TO ENABLE THE IMMEDIATE EFFECT OF AN ONWARD SWIFT TRANSFER INTO ANY OF YOUR NOMINATED BANK ACCOUNT GLOBALLY. THE NEW WORLD FOUNDATION INTERNATIONAL AND OFFICE OF THE PRESIDENCY HAS BROKERED THIS DEAL ON YOUR BEHALF WITH THE WITH AFRICAN STATES GOVERNMENTS, AND IN CONJUNCTION WITH THE AFRICAN DEVELOPMENT BANK. A RESIDENT DIPLOMAT REV DOMINIC IWUNIOR HAVE BEEN APPOINTED AS YOUR FIDUCIARY AGENT. PLEASE, DO CONTACT REV DOMINIC IWUNIOR IMMEDIATELY WITH THE INFORMATION BELOW, AND SEND YOUR CURRENT BANKING COORDINATES TO HIM FOR FURTHER CORRESPONDENCE AND DIRECTIVES. FULL NAMES: REV DOMINIC IWUNIOR EMAIL: (dominiciwunior47@gmail.com) TEL: (+229. 6446.0437) THE OUTSTANDING AMOUNT FOR YOUR PAYMENT IS ($7 500 000.00) REGARDS, MRS ELIZABETH WAZABANGA REPRESENTATIVE TOTAL PETROLEUM. SpamAssassin Report (spam score: 17.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.85.176.46 listed in dnsbl.sorbs.net] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (carpenicchia[at]alice.it) 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.0 MONEY_FROM_41 Lots of money from Africa 2.5 LOTTO_AGENT Claims Agent 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 3.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 2016-07-24 16:19:17Dine out tonight at Red Lobster with this 100 Gift Card Click here for more details http://scammed.by/scam.php?id=193742 Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Get a 100USD Red Lobster Card* If you are experiencing difficulty viewing this important message, visit here. DineoutTonight, 2360 Corporate Circle, Suite 400, Henderson, Nevada 89074 Thank you for signing up for this affiliates publications. If at any time you would like to stop receiving offers of this type from this affiliate, please go here to remove yourself. Please allow up to five days for your request to be processed. If you would prefer to write, you may do so by writing to: AccomplishMail 8201 Peters Road, Suite 1000 Plantation, FL 33324 SpamAssassin Report (spam score: 2.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: agencyaccessguide.com] 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image 2016-07-24 16:09:18You can become fitter and more beautiful Sscatchpolenn http://scammed.by/scam.php?id=193741 Well that she whispered something Take a look at our new SUMMER offers and save and#1186;UGE on the best drugs. Bestseller Products: Barbara harding had stood looking at last and divine.Already he met his majesty. MEN'S SEXUAL and#919;EALTH: + and#86;iagra as low as $1.10 $0.99 + and#264;ialis as low as $1.77 $1.59 + and#315;evitra as low as $2.24 $2.02 + and#86;iagra Pro as low as $2.61 $2.35 + and#262;ialis Pro as low as $5.26 $4.73 and more... GENERAL and#1290;EALTH: + Propecia as low as $0.61 $0.55 + and#321;asix low as $0.39 $0.35 + Prozac as low as $0.39 $0.35 + Prednisolone as low as $0.39 $0.35 + and#1057;lomid as low as $0.83 $0.75 and more... ANTI-ALLERGIC/ASTHMA: + Ventolin as low as $21.06 $18.95 + Advair as low as $35.50 $31.95 + Spiriva as low as $28.90 + Prednisone as low as $0.49 + Nasonex as low as $23.50 and more... ANTIBIOTIand#199;S: + and#512;moxicillin as low as $0.58 $0.52 + Zithromax as low as $0.83 $0.75 + and#1021;ipro as low as $0.30 + Flagyl as low as $0.35 + and#1022;ephalexin as low as $0.59 and more... Peter has been an angry with drawn up before. Slowly and two more.Our Benefits:Just now that saved her upon.+ We Take and#165;isa, MasterCard, AMEX, Discover and E-check! + We Deliver to and#570;LL destinations Worldwide! + and#334;rder 3+ goods and get free and#258;irmail Shipping! + Free Tablets and#298;ncluded in and#280;ach and#927;rder! + Meds and#278;xpiration Date of and#336;ver 2 Years! + No and#1031;mitations! 100% and#913;uthentic Meds! + Secure and Confidential Online Shopping! + and#518;asy Refunds and 24/7 and#268;ustomer Support!_ _ _ _ _ _ _ _ _ _ _ Our Shop is licensed pharmacy, international lic number:0437656943 issued 16 Nov 2009 SpamAssassin Report (spam score: 12.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL [88.249.186.43 listed in zen.spamhaus.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.9 HELO_DYNAMIC_SPLIT_IP Relay HELO'd using suspicious hostname (Split IP) 0.2 CK_HELO_GENERIC Relay used name indicative of a Dynamic Pool or Generic rPTR 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [88.249.186.43 listed in bb.barracudacentral.org] 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 MISSING_MID Missing Message-Id: header 2.2 DRUGS_ERECTILE Refers to an erectile drug 2016-07-24 15:13:34Find A Psychology Degree and Start Your Career http://scammed.by/scam.php?id=193740 Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Uamediadba (dot) com, 340 S. Lemon Ave., #3083, Walnut, CA 91789 This message was delivered to you because you have subscribed at the site of one of our Certified properties. If you received this in error and/or want to stop additional mailings, you may do so here. Please allow 2 to 5 days for this to take effect. Postal correspondence to: CertifieDirectMail, Suite 487 3389 Sheridan St Hollywood, FL 33021 SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: capitalbenefitupdate.net] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: capitalbenefitupdate.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: capitalbenefitupdate.net] 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-07-24 14:59:58FRESH CHEAP PRICES HURRY UPhttp://scammed.by/scam.php?id=193739 On Friday, July 22, 2016 5:10 PM, UnlimitedTools.Pw wrote: -- LIMITED TOOLS and PRICES ADDED HURRY UP Shells: 7$ ONLY ) cPanels: 10$ FRESH RDP: USA ADMIN RDP HOSTED - 30$ / USA USER RDP HACKED - 12$ SMTP INBOX Delivery 7$ / 13$ ONLY SMTP PACKS 10 Smtp 55$ WEBMAIL  12$ / 30$ Mailer 10$ Live Set-up Support Through teamviewer. We accept these payment methods: Bitcoin and PerfectMoney Visit http://www.unlimitedtools.pw right now and enjoy the best tools on the internet! SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-24 13:51:11VIEW THE ATTACHED FILE OF YOUR CERTIFIED BANK DRAFT FOR CONFIRMATIONhttp://scammed.by/scam.php?id=193738 On Sunday, July 24, 2016 11:59 AM, REV DR MARK EZE wrote: DEAR BENEFICIARY, I AM REV,DR.MARK EZE,THE AUDITOR GENERAL OF THE FEDERAL REPUBLIC OF NIGERIA AND I WISH TO KNOW IF YOU HAVE RECEIVED THE SCAN COPY OF YOUR CERTIFIED BANK DRAFT IN THE AMOUNT OF $10,5M USD WHICH I SENT TO YOUR EMAIL ADDRESS YESTERDAY AND THIS APPROVED DRAFT INCLUDES YOUR FUND INTEREST AMOUNT FOR THIS YEARS AWAITING,SO CALL ME NOW TO CONFIRM IT OKAY:-+234-9085454436 NOTE THAT WE ARE PAYING YOU THROUGH OUR OIL RESERVE BANK ACCOUNT WITH THE JP MORGAN CHASE BANK NEW YORK,USA AND THEY WILL CREDIT YOUR FUND ONCE YOU HAVE THE ORIGINAL CERTIFIED BANK DRAFT HARD COPY AND DEPOSIT IT TO ANY BANK OF YOUR CHOICE IN THE WORLD. YOU ARE HEREBY ADVICE TO TAKE THE SCAN COPY OF YOUR CERTIFIED BANK DRAFT TO YOUR LOCAL BANK AND CONFIRM IT BEFORE WE CAN SEND YOU THE ORIGINAL HARD COPY OR YOU CAN COME DOWN FOR THE COLLECTION HERE OKAY. I AWAIT TO HEAR FROM YOU SOONEST. YOURS, REV,DR.MARK EZE SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-24 13:19:36VIRTUAL CHARITY ASSISTANT WANTEDhttp://scammed.by/scam.php?id=193737 Hello My Dear Friend and Partner Greetings to you my dear Beloved, my name is Mrs. Alice Walton, a business woman an America Citizen and the heiress to the fortune of Walmart stores, born October 7, 1949. I have a mission for you worth $100,000,000.00(Hundred Million United State Dollars) which I intend using for CHARITY PROJECT to help the less privilege and orphanage. I must say my spirit has been lifted since I received your mail indicating your readiness to assist me with this humanitarian project. You won?t be able to know the number of lives we can impact with this project in your country. But I think we need to get to know ourselves more better before we proceed further on this project. Here are some information about me and also an interview of me live on YOUTUBE which was published on the 6th of November 2014 the Alice Walton's Crystal Bridges Museum Art lunching in Texas U.S.A. http://en.wikipedia.org/wiki/Alice_Walton http://www.youtube.com/watch?v=DsX8yBnWHNU As you already know from the above links, I am Alice Louise Walton (born October 7, 1949) the daughter of Wal-Mart founder Sam Walton, an America Citizen, a business woman and a graduate of Trinity University and lives in Mineral Wells, Texas U.S.A. I want to establish a foundation with your help to reach out to the less privilege, orphans and homeless people around the world. Due to my current state of health which brought me from the United State to UK, it?s only with your cooperation and efforts that this project can see the light of day. So I use this medium to implore you to do all you have to make this a reality. Please kindly send the following details below. NAME........................ ADDRESSES.................. MOBILE........................ NUMBER...................... OCCUPATION.................. I may not live to see the realization of this project but I have implicit confidence that you would be able to complete this humanitarian project at all cost. Attached to this mail are copies of my photographs, I shall provide you with an agreement document prepared by my Legal Counsel for you to sign your own part of the agreement in my next letter as soon as I get the required data which is as stated above and a scan copy of your photo ID. I would expect same gesture from you so that we can proceed further. Your details would also be required by my Legal Counsel to prepare cover documents for this project. Get back to me in the nearest possible time. ThanksMrs.Alice Walton SpamAssassin Report (spam score: 4.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.7 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [174.46.138.36 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wikipedia.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (alicewaltondmg[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 2016-07-24 13:12:02Donación urgentes para Ustedhttp://scammed.by/scam.php?id=193736 On Saturday, July 23, 2016 8:50 PM, GRAACC wrote: Saludos Soy Neil Trotter, un mecánico de 41 años de edad, de Londres y quiero notificarle que va a recibir £ 3 millones GBP de nuestra Euromillones premio de £ 108 millones de libras esterlinas. Su dirección de correo electrónico fue enviado a mí desde el mejor directorio web y motor de búsqueda por los asesores legales. Ha recibido este mensaje porque está catalogado como uno de nuestros 5 persona suerte de recibir esta donación grant.If interesa volver a mí a través de mi correo electrónico personal para que yo puedo aportar sobre cómo recibir el dinero en efectivo A continuación grant.View página web para obtener más información. http://www.theguardian.com/uk-news/2014/mar/18/euromillions-jackpot-winner-named-neil-trotter Email; cakigss@hotmail.com Decidía donar Las personas que pueden ayudar a otros con mi donación y ponen una sonrisa en la cara de la donación needy.My DE 3 millones £ Libra esterlina (GBP) puede que no sea mucho para ti, pero yo creo que va a recorrer un largo camino para la mejora de su nivel de vida como mi bote ganador hizo a mí, Me gustaría que envíe la siguiente información a continuación de nuevo a mí, como se le guiará sobre cómo puede ponerse en contacto con mi agente de entrega de las instrucciones que pueda recibir la donación, Nombre: Dirección: Años: Sexo: Ocupación: Número de teléfono: Espero que usted será capaz de utilizar el dinero con prudencia y criterio más allá en su país. emplearemos a hacer todo lo posible para aliviar el nivel de pobreza en su región y también tratar de mejorar el nivel de vida de tantas personas como sea posible, ya que es el único objetivo de donar este dinero a usted en primer lugar . Que el Señor bendiga su corazón para ser una bendición para su familia y su sociedad en cuanto mi donación llegue a usted Sinceramente Sr. Neil Trotter. cakigss@hotmail.com SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-24 11:00:34You Can Save 8O Right N0W Right HEREhttp://scammed.by/scam.php?id=193735 GET ALL YOUR MEDS DIRECTLY FROM OUR CANADIAN PHARMACY AND SAVE 80% DISCRETELY SHIPPED TO YOUR DOOR, NO PRESCRIPTION NEEDED! FDA APPROVED!! Purchase Viagra - Cialis and many more Medications Instantly Online while Saving Money! CLICK THE LINK BELOW AND SAVE 80% NOW Coupon Code: " bigboner " Save 5% OFF on your order. Additional Special Offer **** With Your Order You'll Get 4 free Viagra or Cialis Pills Included For FREE!! ***** Or copy and paste this url into your browser: http://www.magicrxprogram.club SpamAssassin Report (spam score: 22.0) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [14.169.155.42 listed in zen.spamhaus.org] 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: firstcurativestore.ru] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: firstcurativestore.ru] 1.1 NO_PRESCRIPTION BODY: No prescription needed 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [14.169.155.42 listed in bb.barracudacentral.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: firstcurativestore.ru] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: firstcurativestore.ru] 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.1 MISSING_MID Missing Message-Id: header 2.2 DRUGS_ERECTILE Refers to an erectile drug 2016-07-24 08:57:50VERY URGENT http://scammed.by/scam.php?id=193734 Greetings to you and your family my good friend, I am the manager of bill and exchange in the AFRICA DEVELOPMENT BANK (A.D.B) in Burkina Faso, I have a business of $2.3 million dollars to be transfer to your account for investment in your country, if you are ready to assist me get back to me I will give you full details on how the money will be transfer to you. You must assure me that everything will be handled confidentially because we are not going to suffer again in life. It has been 10 years now that most of the greedy African Politicians used our bank to launder money overseas through the help of their Political advisers. Most of the funds which they transferred out of the shores of Africa were gold and oil money that was supposed to have been used to develop the continent. Their Political advisers always inflated the amounts before transfer to foreign accounts so I also used the opportunity to divert part of the funds hence I am aware that there is no of facial trace of how much was transferred as all the accounts used for such transfers were being closed after transfer. I acted as the Account Officer to most of the politicians and when I discovered that they were using me to succeed in their greedy act; I also cleaned some of their banking records from the Bank files and no one cared to ask me because the money was too much for them to control. They laundered over $69 Million dollars during the process, as I am sending this message to you; I was able to divert ($2.3 million dollars) to an escrow account belonging to no one in the bank. The bank is anxious now to know who the beneficiary to the funds is because they have made a lot of profits with the funds. It is more than Eight years now and most of the politicians are no longer using our bank to transfer funds overseas. The $2.3 million dollars has been lying waste but I don't want to retire from the bank without transferring the funds to a foreign account to enact bled me share the proceeds with the receiver. The money will be shared 60% for me and 40% for you .There is no one coming to ask you about the funds because I secured everything, I want to let you to understand that before I contact you I have pray and Almighty God direct me to you, this money is coming to your account without any delay, do not be afraid all arrangement has been made to secure this money and safely deliver to your account as the owner, no institution will poke nose, promise me when this money is transfer into your account you will not betray me. My address is: No.120 Airport road, Ouagadougou, Burkina Faso. (i) Your full names and contact address. (ii) Your company name if any. (iii) Your private telephone numbers. (iv) Your Country. (v) Your age (VI) occupation. As soon as I receive this information I shall pest your name and information as the owner of the account and later I will forward you the account number for the claim, but you must keep this details of this funds secret from anyone to avoid leakages as no one in the bank knows about the funds. Waiting for your urgent response if you are ready to assist me to transfer this fund into your bank account, get back to me immediately. Yours Faithfully, Mr. Abu Ali SpamAssassin Report (spam score: 13.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrabuali7530[at]yahoo.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [98.137.177.225 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (mr abu ali ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mrabuali7530[at]yahoo.com) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-07-24 06:18:25Records Indicate you May Qualify for a Reverse Mortgagehttp://scammed.by/scam.php?id=193733 Get Funds Now Through a Reverse Mortgage! - Click Show Images SpamAssassin Report (spam score: 11.6) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: oakumstudios.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [176.121.32.189 listed in zen.spamhaus.org] 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 1.2 MISSING_HEADERS Missing To: header 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: oakumstudios.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: oakumstudios.com] 1.6 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.1 MISSING_MID Missing Message-Id: header 1.4 MISSING_DATE Missing Date: header 0.0 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 0.0 T_REMOTE_IMAGE Message contains an external image 2016-07-24 03:34:28Your urgent letter is needed immediately http://scammed.by/scam.php?id=193732 Dear Partner, We want to transfer to overseas ($50.500, 000.00) FiftyMillion Five Hundred Thousand United States Dollars) from the Bank of Africa, Iwant to ask you to quietly look for a reliable and honest person who will becapable and fit to provide either an existing bank account or to set up a newBank ACCOUNT immediately to receive this money, even an empty ACCOUNT can serveto receive this funds quietly. I am Mr. Sirmad, the accountant personal confidant to Mr.Raymond Beck. Who died together with his wife in a plane crash on the Tuesday,November 2, 1999 on their way to attend wedding in Boston. Mr. Raymond Beck, is an American, a physician andindustrialist, he died without having any beneficiary to his assets includinghis ACCOUNT here in Burkina Faso which he opened in a Bank of Africa in theyear 1994 as his personal savings for the purpose of expansion and developmentof his company before his untimely death in 1999. The amount involved is (U S D $50,500,000.00) Fifty MillionFive Hundred Thousand U S D, no other person knows about this ACCOUNT, I amcontacting you for us to transfer this funds to your account as the beneficiaryas foreigner, I am only contacting you as a foreigner because this moneycannot be approved to a local person here, without valid international foreignpassport, but can only be approved to any foreigner with valid internationalpassport or driver's license and foreign ACCOUNT because the money is in USDollars and the former owner of the ACCOUNT Mr. Raymond Beck is a foreignertoo, and as such the money can only be approved into a foreign ACCOUNT.However, I am revealing this to you with believe in God that you willnever let me down in this business, you are the first and the only person thatI am contacting for this business, so please reply urgently so that I willinform you the next step to take urgently. Send also your private telephone and fax number includingthe full details of the account to be used for the deposit. I need your fullco-operation to make this work fine. Because the management is ready to approvethis payment to any foreigner who has correct information of this account,which I will give to you, upon your positive response and once I am convincedthat you are capable and will meet up with instruction of a key bank officialwho is deeply involved with me in this business. At the conclusion of this business, you will be given 40% ofthe total amount, 50% will be for me, while 10% will be for expenses bothparties might have incurred during the process of transferring. I look forwardto your earliest reply. NOTE: THIS TRANSACTION IS CONFIDENTIAL. Thanks for your assistance in advance. Mr. Sirmad. Bill and Exchange (assistant) Manager. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [98.138.90.65 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (siralireza1950[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (siralireza1950[at]gmail.com) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-24 02:26:23THE REASON AND THE TRUTH ABOUT YOUR PAYMENThttp://scammed.by/scam.php?id=193731 From The Desk Of Godwin Emefiele The new Executive Governor Central Bank of Nigeria (CBN) Dear Sir/Madam THE TRUTH OF THE MATTER ABOUT YOUR PAYMENT!. I am delighted to contact you on a private note based on your unclaimcontract/inheritance funds which has been approved and programmed for payment to you. I sincerely apologize to you for the delay in releasing these payment to you, which was caused by past predecessors Prof Carles Soludo and my immediate predecessor Mr Sanusi Lamido the former governor of central bank of Nigeria due to the breach of agreement between him Sanusi Lamido and your so called partners in Nigeria who introduced you into the business. Your Nigerian partners approached Sanusi Lamido that they want to present you as the beneficiary of this fund as a result of an OVER-INVOICE payment made when transferring contract/inheritance funds into our various contractors bank accounts abroad. So after the negotiation, your so called partner in Nigeria unanimously agreed that they will give Sanusi Lamido the sum of USD400,000.00 (CASH) on acceptance to assist them to transfer the fund into your account. When Sanusi Lamido accepted the offer, they forwarded all your banking particulars to him for onward transfer of the funds. Immediately he made some fruitful effort on the business and demanded for his USD400,000.00 as agreed. Your partners deviated from the agreement and decided to go through the International Remittance Department at his back and make a change of some vital documents in other to disappoint him and you also not knowing that the International remittance Department is also under his control. unaware to your partners the International Remittance Department informed Sanusi Lamido of their evil plans and he made their illicit efforts abortive. That is why you have been pursing this payment, spending unnecessary funds to some fraudulent individuals and impostors in Nigeria who claimed to be in charge for releasing your funds. Though they now parade themselves as staffs and managements of various banks, some even claim to be a Barrister of different kind and some also go as far as claim staffs of the Central bank Of Nigeria, they are all deceiving them selves and will not be able to get the fund out of the Central Bank for you. I want to re-emphasis to you that the fund of which you are the rightful beneficiary as acclaimed, is still intact with CBN and under my control as the new governor of the Central Bank of Nigeria. Now with deep soul of my heart I want to enter into real business with you in a sincere agreement since your partners have disappointed you and the fund is still floating in your name waiting for a proper documentation and claim. 1. On agreement, I assured you with all my heart that I will transfer the funds USD35.9 Million into your account. (Thirty Five Million, Nine Hundred Thousand US Dollars) that is the original sum, not previous as mentioned by your so called partners. 2. You will assure me of keeping my dealings with you to an utmost secrecy and confidential because of my position in the government. 3. You will promise to give me 30% of the total fund as soon as the fund gets into your account with a written promissory note signed by you. 4. I will assist you in making a proper legal documentation to make your claim genuine as a bona-fide foreign beneficiary to the said fund. 5. You are to Re-forward to me your contact address, phone and fax number, along with an account where you would like the fund to be if possible a virgin account. I am also aware that some fraudulent individuals have been impersonating this office to contact you and other beneficiary as reported by the Central Bank of Nigeria security department. Henceforth, I advice you to suspend any further dealings with Sanusi Lamido and as well from any group of person(s) either from the CBN or any other financial institution from Nigeria or overseas that might be contacting you in this purpose and endeavor to keep this information confidential until we finalize this transaction to avoid them using it as an advantage to scam you again or even make you lose your money. Also on no account should you contact these partners any more, this is for my own safety and for the security of the funds. Because they will not get this fund and also on no account should you let them know of my contact with you. Please reply this message urgently for further details. Thanks for adhering to this instruction. I await your favorable response. God bless you. Mr. Godwin I. Emefiele The new Executive Governor Central Bank of Nigeria (CBN) SpamAssassin Report (spam score: 47.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [91.228.168.31 listed in psbl.surriel.com] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [91.228.168.31 listed in bb.barracudacentral.org] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 NSL_RCVD_HELO_USER Received from HELO User 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 4.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.0 LOTTO_DEPT Claims Department 2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-24 01:41:26COMPENSATION AWARD HOUSE http://scammed.by/scam.php?id=193730 Dear Friend, My name's are Ms.linda Barbara, I am a US citizen, am 33 years Old. I reside here in Gainesville. My residential address is as follows. 6909 Sw 33rd Pl, Gainesville, Florida 32608-2112, United States, i'm thinking of relocating since I am now rich. I am one of those that took part in the Compensation in Nigeria many years ago and they refused to pay me, I had paid over $19,950USD while in the United States trying to get my payment all to no avail. I decided to travel down to Lagos, Nigeria with all my compensation documents and i was directed to meet Barrister Marcus Benson who is the member of COMPENSATION AWARD COMMITTEE, I contacted him and he explained everything to me. He said whoever is contacting us through emails are fake because the Inheritance/Compensation Law clearly states that the beneficiary/recipient is exempt from paying any out of pocket fees or charges to receive said funds. Barrister Marcus Benson took me to the paying bank for the claim of my Compensation payment. Right now I am the most happiest woman on earth because I have received my compensation funds of $4,500,000.00 (four million five hundred thousand dollars). Moreover, Barrister Marcus Benson showed me the full information of those that are yet to receive their payments and I saw your name and email address as one of the beneficiaries that is why I decided to email you to stop dealing with those people, they are not with your funds, they are only making money out of you. I will advise you to contact Barrister Lord Smith. You have to contact him directly on this information below. COMPENSATION AWARD HOUSE NAME: Barrister Marcus Benson EMAIL: barrister.marcus@yahoo.com Listed below are the names of mafias and banks behind the non release of your funds that I managed to sneak out for your kind perusal. 1) Prof. Charles soludo 2) Senator David Mark 2) Micheal Edward 3) Chief Joseph Sanusi 3) Sanusi Lamido 4) Dr. R. Rasheed 5) Mr. David Koffi 6) Barrister Awele Ugorji 7) Mr. Roland Ngwa 8) Barrister Ucheuzo Williams 9) Mr. Ernest Chukwudi Obi 10) Dr. Patrick Aziza Deputy Governor - Policy / Board Member 11) Mr. Tunde Lemo Deputy Governor - Financial Sector Surveillance/Board Member 12) Mrs. W. D. A. Mshelia Deputy Governor - Corporate Services / Board Members 13) Mrs. Okonjo Iweala 14) Mrs. Rita Ekwesili 15) Barr Jacob Onyema 16) Dr. Godwin Oboh: Director Union Bank Of Nigeria. 17) Mr. John Collins: Global Diplomat Director. 18) Foreign fund diplomatic courier 19) Rev. Steven Jones 20) Mr. Alfred Johnson 21) Mrs. Sherry Williams 22) Mr. Scott Larry 23) Barr Alex Jackson You really have to stop dealing with those people that are contacting you and telling you that your fund is with them, it is not in anyway with them, they are only taking advantage of you and they will dry you up until you have nothing. The only money I paid after I met Barrister Marcus Benson was just $600USD for the delivery charges, take note of that. ( NOTE: TELLING YOU TO PAY FOR ANY ADMINISTRATIVE CHARGE OR SECURITY KEEPING FEE IS ALL NOTHING BUT LIES, I REPEAT THE ONLY MONEY YOU WILL HAVE TO PAY AND WHICH I ALSO PAID IS $600USD FOR THE DELIVERY CHARGES IMPOSED BY THE GOVERNMENT AND YOUR PACKAGE CONTAINING YOUR CERTIFIED BANK DRAFT CHEQUE WILL BE REACHING YOU THROUGH THE ROYAL EXPRESS COURIER SERVICE.) Once again stop contacting those people, I will advise you to contact Barrister Marcus Benson so that he can help you to deliver your funds instead of dealing with those liars that will be turning you around asking for different kind of money to complete your transaction. Thank You and Remain Blessed. Ms. linda Barbara SpamAssassin Report (spam score: 51.0) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [123.56.177.84 listed in psbl.surriel.com] 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [123.56.177.84 listed in bb.barracudacentral.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.9 SPF_FAIL SPF: sender does not match SPF record (fail) 1.2 MISSING_HEADERS Missing To: header 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 1.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 1.8 FROM_MISSP_USER From misspaced, from "User" 0.9 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 4.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.0 LOTTO_DEPT Claims Department 2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-24 01:19:00GOOD NEWS FROM MRS MICHELLE OBAMA I am Mrs Michelle Obama and I am writing to inform you about your Bank Check Draft brought back by the United Embassy from the government of Benin Republic in the white house Washington DC been mandated to be deliver to your home address once you reconfirm it with the one we have here with us to avoid wrong delivery twentty million united states dollars 20 000 000 00usd that was assigned to be delivered to your humble home address by my husband Honorable president Barrack Obama the president of this great country this week by a delivery agent Mr JAMES BOOMBERG I will like you to reconfirm to me the following details Your phone number………… ? Your current home address……? Your full name…………………? Occupation ? Next of kin ? The reason I ask you to reconfirm to me this following details is to avoid wrong delivery FOR MORE INFORMATION ABOUT THE ORIGIN OF YOUR FUND YOU CAN CALL OR TEXT MY HUSBAND THE PRESIDENT OF THIS GREAT NATION 1 Telephone 530 710 8830 Yours Sincerely MRS MICHELLE HUSSEIN OBAMA FIRST_LADY USA GOD BLESS AMERICA 1600 Pennsylvania Ave NW Washington DC 20500 United Stateshttp://scammed.by/scam.php?id=193729 SpamAssassin Report (spam score: 9.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.7 MILLION_USD BODY: Talks about millions of dollars 2.4 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (banktobanktransfer8[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [106.10.148.70 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (banktobanktransfer8[at]gmail.com) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 2016-07-24 00:26:06HELLO MY DEAR GOOD FRIENDhttp://scammed.by/scam.php?id=193728 -- Hello my dear friend, How are you over there in your country or elsewhere? I believe you are fine and doing well. I hope my mail meets you in good health today. I am much delighted and privileged to contact you again, after all these time, it takes destiny and courage to remember good friends like you and at the same time, show gratitude to you despite circumstances that made us separate and disrupted our transaction, which ultimately did not work out as we had projected then. I am happy to inform you that I have successfully transferred the fund with the cooperation of a new partner from Netherlands. I use this opportunity to inform you that the transaction has finally worked out and I am contacting you to let you know that I have left a bank draft check of $1.5 million for your compensation, I handed the bank draft check to a Reverend Father John Mark before leaving the country, and I instructed him to deliver the check to you once you contact him. I will like you to accept the check as it is from the bottom of my heart. I really appreciated your tremendous effort and contribution to start off and make things work to the stage you were unable to continue. Please contact reverend Father John Mark with bellow info. NAME: REV JOHN MARK EMAIL:dhlcompeny1234@gmail.com PHONE: +229 688-669-49 Please remember to fill your information as bellow when contacting Reverend Father John Mark ok. Full Name:---------- Home Address:---------- Your country:---------- Your phone number:---------- A copy of your ID Card:---------- Greetings Bella William SpamAssassin Report (spam score: 9.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: iprimus.com.au] 3.1 HK_SCAM_N8 BODY: HK_SCAM_N8 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2016-07-23 20:52:53No subjecthttp://scammed.by/scam.php?id=193727 I'm Karl Han, from Bern,Switzerland.Contacting you due to abandoned funds,totaling $36 Million.I'm seeking your permission to front you as the benefactor of the funds and we 'll share the proceeds 50%50.Please reply to (karlhanbrader2014@gmail.com)with NAME, ADDRESS,TELEPHONE NUMBER. SpamAssassin Report (spam score: 14.6) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [197.211.56.5 listed in zen.spamhaus.org] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [200.48.60.138 listed in bb.barracudacentral.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_SHARE_50_50 Share the money 50/50 0.0 T_MONEY_PERCENT X% of a lot of money for you 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-07-23 20:49:05RE:http://scammed.by/scam.php?id=193726 http://occasion.220athlete.com/Nelson_Jim Nelson Jim SpamAssassin Report (spam score: 0.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 2016-07-23 20:31:36HELLO MY DEAR GOOD FRIENDhttp://scammed.by/scam.php?id=193724 -- Hello my dear friend, How are you over there in your country or elsewhere? I believe you are fine and doing well. I hope my mail meets you in good health today. I am much delighted and privileged to contact you again, after all these time, it takes destiny and courage to remember good friends like you and at the same time, show gratitude to you despite circumstances that made us separate and disrupted our transaction, which ultimately did not work out as we had projected then. I am happy to inform you that I have successfully transferred the fund with the cooperation of a new partner from Netherlands. I use this opportunity to inform you that the transaction has finally worked out and I am contacting you to let you know that I have left a bank draft check of $1.5 million for your compensation, I handed the bank draft check to a Reverend Father John Mark before leaving the country, and I instructed him to deliver the check to you once you contact him. I will like you to accept the check as it is from the bottom of my heart. I really appreciated your tremendous effort and contribution to start off and make things work to the stage you were unable to continue. Please contact reverend Father John Mark with bellow info. NAME: REV JOHN MARK EMAIL:dhlcompeny1234@gmail.com PHONE: +229 688-669-49 Please remember to fill your information as bellow when contacting Reverend Father John Mark ok. Full Name:---------- Home Address:---------- Your country:---------- Your phone number:---------- A copy of your ID Card:---------- Greetings Bella William SpamAssassin Report (spam score: 9.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: iprimus.com.au] 3.1 HK_SCAM_N8 BODY: HK_SCAM_N8 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2016-07-23 20:20:43Checkout the latest Cable Service Options http://scammed.by/scam.php?id=193723 Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } High Speed Internet for Less* If you are experiencing difficulty viewing this important message, visit here. 1000 N. West St., Suite 1200, Wilmington, DE 19801, USA This message was delivered to you because you have subscribed at the site of one of our Certified properties. If you received this in error and/or want to stop additional mailings, you may do so here. Please allow 2 to 5 days for this to take effect. Postal correspondence to: CertifieDirectMail, Suite 487 3389 Sheridan St Hollywood, FL 33021 SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: capitalbenefitupdate.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: capitalbenefitupdate.net] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: capitalbenefitupdate.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-07-23 20:16:29Aide Menagere a domicile Tarifs en lignehttp://scammed.by/scam.php?id=193725 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/a9P2agNS0IKUjSBsfSF9kQ/2f4d79d7 2. http://links.so-reduc.com/u/chN/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/3b1b8cc2 [1]Ménage et vous. Aise énagère à domicile [2]Comparateur d'offres de Services à domicile [3]jusq'à 50% de réduction d'impôts * [4]92% Des clients sont satisfaits ** ....Gratuit et sans engagement [5]Votre devis en moins de 1 minute * Conformément à la loi du 26 juillet 2005 relative au développement des SAP, vous pouvez bénéficier d'un remboursement du Trésor Public équivalent à la moitié des sommes engagées pour la réalisation de votre ménage par une entreprise spécialisée. ** Source : Ekomi.fr [imp?type(inv)g(23229646)a(2497923)] References Visible links 1. http://links.so-reduc.com/c/chN/2gn/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/0f1e0963 2. http://links.so-reduc.com/c/chN/2gj/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/f3c9bb5e 3. http://links.so-reduc.com/c/chN/2gs/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/dd42b00c 4. http://links.so-reduc.com/c/chN/2gI/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/a28ac493 5. http://links.so-reduc.com/c/chN/2gN/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/8467818f Hidden links: 6. http://links.so-reduc.com/c/chN/2gg/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/6429c647 7. http://links.so-reduc.com/c/chN/2g5/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/7fc44f96 8. http://links.so-reduc.com/c/chN/2gv/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/687caf2e 9. http://links.so-reduc.com/c/chN/2gt/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/fbaff510 10. http://links.so-reduc.com/c/chN/2gq/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/4e91ea32 11. http://links.so-reduc.com/c/chN/2gd/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/be133166 Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/a9P2agNS0IKUjSBsfSF9kQ/I/oMoR/3b1b8cc2 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lookiday.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 20:14:14Account Closure Barclays http://scammed.by/scam.php?id=193722 Dear Customer, Your Barclays Bank Online security is not active. Please Login below to activate your Online Banking security. 2016-07-23 19:21:17 600 000 00 Compensation::::http://scammed.by/scam.php?id=193721 Attention: Scam Victims. Congratulations, you have been picked among 20 Scam Victims to be compensate with the sum of $600.000.00 by IMF conjunction World Bank, this was made possible after meeting between some Africa heads of state and the IMF. You are advice to contact Rev. Eric Houry the zonal officer coordinating the payment through ATM DEBIT CARD payment system, attach your personal details to him. Details as followed Name..... Country..... Address..... Telephone..... His email id is (zonalcoordinator@yahoo.com.hk) Thanks Dr. Andy Johnson IMF/WORLDBANK OFFICE BENIN REPUBLIC SpamAssassin Report (spam score: 37.4) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 SUBJ_DOLLARS Subject starts with dollar amount -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.hk] 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 1.8 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSP_PHISH Malformed, claims to be from financial organization - possible phish 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.4 FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.5 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 2016-07-23 18:46:21Am_I_your``dream_LOVEhttp://scammed.by/scam.php?id=193720 Russian_Girls_Looking_F0r_Serious_Dating CLICK_HERE 2016-07-23 18:35:56RE : YOUR ATM CARDhttp://scammed.by/scam.php?id=193719 Customers Service Hours--Monday to Saturday: Office Hours Monday to Saturday: Greetings !!! We have been waiting for you to contact us regard your ATM CARD worth $1,250,000.00 (One Million, Two Hundred and Fifty Thousand United States Dollars), being compensation fund for 150 scam victims, but I did not hear from you all this while. I have deposited your ATM CARD with the COURIER SERVICE in Asia, I traveled out of the country for a 3 Months Course and I will not be back until completion of my 3 months course. What you have to do now is to contact the COURIER SERVICE immediately to know when they will deliver your ATM CARD to you because of the expiring date on it. For your information, I have paid for the delivery Charge, Insurance premium and Clearance Certificate Fee of the consignment showing that it is not a Drug Money or meant to sponsor Terrorism attack in your Country. The only money you will send to the COURIER SERVICE is to deliver your ATM CARD direct to your postal Address in your country is US$139 only being Security Keeping Fee of the Courier Company so far. Again, don't be deceived by anybody to pay any other money except US$139. I would have paid that but they refused, because they don't know when you will contact them and in case of demurrage. You have to contact the INTERNATION COURIER SERVICE now for the delivery of your ATM CARD with this information below: Contact Agent: Mr Jone Cole Email Address: pacelagent@gmail.com Phone Number: 647-486-4883 Reconfirm the below information to the agent: 1. Full Names: 2. Residential Address: 3. Phone Number: 4. Identification: 5. Occupation: 6. Country: Let me repeat again, try to contact them immediately you receive this mail to avoid any further delay and remember to pay the Security Keeping fee of US$139 for their immediate action. You should also let me know through email as soon as you receive your ATM CARD. Yours Faithfully, Ms. Johnson Alisha SpamAssassin Report (spam score: 29.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FILL_THIS_FORM Fill in a form with personal information 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) 1.5 MONEY_FORM Lots of money if you fill out a form 0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 3.1 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money 2.9 MONEY_FRAUD_5 Lots of money and many fraud phrases 2016-07-23 18:27:14Party_live_with_lovely_Asian_women?http://scammed.by/scam.php?id=193718 Enjoy_dating_action_with_new_Asian_beauties! SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (med30612[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 18:17:24Exclusive Offer: First Month FREE On Every Home Warrantyhttp://scammed.by/scam.php?id=193717 Dear, Exclusive Offer: First Month FREE on Every Home Warranty gmail.com SpamAssassin Report (spam score: 5.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [144.76.40.175 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (berougzouhair[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 18:12:02Get_a_new_Alarm_Special 100_Visa_Card_Bonushttp://scammed.by/scam.php?id=193716 Sleep_Safely-Alarm_Special-$100_Visa_Card_Bonus SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (med30612[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 17:17:27Congrats You_Qualify_for_2016_Federal_Rebates_on_Solar_Panelshttp://scammed.by/scam.php?id=193714 Dear, Save BIG This Labor Day: $0 Down on Home Solar Panels SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (tnewman178[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 17:16:33You have to contact the ZENITH COURIER COMPANY now for the delivery of your ATM CARDhttp://scammed.by/scam.php?id=193715 Dear Friend, I have been waiting for you since to contact me for your ATM CARD of $10.5 million United States Dollars, but I did not hear from you for a very long time now. Then I went and deposited the draft with ZENITH COURIER COMPANY HERE IN ABUJA NIGERIA, before I traveled . presently I am in Cyprus Island for Heart Operation What you have to do now is to contact the ZENITH COURIER COMPANY ABUJA as soon as possible to know when they will deliver your package to you before the expiring date of the ATM CARD. For your information, I have paid the delivering Charges and Insurance fees.The only money you will send to the ZENITH to deliver your ATM CARD direct to your postal Address in your country is ($110.00 US) ONE HUNDRED AND Ten United States Dollars only being Security Keeping Fees. Again, don't be deceived by anybody to pay any other money except $110.00 US Dollars. I would have paid that but they refused because they don't know when you will contact them for the shipping due to the delay demorage charges. You have to contact the ZENITH COURIER COMPANY now for the delivery of your ATM CARD with this required information below: Contact Person : Rev. Paul Ekeh. Email Address : zenithcouriercompany@gmail.com Email Address : infocustomerserviceairportcago@gmail.com Telephone: +234-81540900677 Finally, make sure that you reconfirm your Postal address and Direct telephone number to them again to avoid any mistake on the Delivery and ask them to give you the tracking number to enable you track your package over there and know when it will get to your address. Let me repeat again, try to contact them as soon as you receive this mail to avoid any further delay and ask them to give you the information where you will pay them their Security Keeping fees of $110.00 US Dollars for their immediate action.You should also let me know through email as soon as you receive your ATM CARD. I wait to hear from you immediately and I will be back in Nigeria as soon as I recover from the Operation in the next one month. Regards Mrs. Veronica Amadi Director Foreign Remt. Dept. SpamAssassin Report (spam score: 9.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: onmicrosoft.com] 0.7 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [104.47.37.236 listed in list.dnswl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-23 17:02:42Messagehttp://scammed.by/scam.php?id=193713 Attn: Send your reply to jjoshua430 (at) gmail.com I am Barrister Justice Joshua, a legal practitioner, I am the personal attorney to Mr.Joseph Ebenezer who died in a motor accident on the 7th June, 2013, my client, his wife and their only daughter were involved in a car accident along Novissi express Road. All occupants of the vehicle unfortunately lost their lives. Since then I have made several inquiries to locate any of my clients extended relatives for the claiming of US$7.5 million he deposited in a bank in Togo,this has also proved unsuccessful. I have been unsuccessful in locating the relatives for over 2 years now I seek your consent to present you as the next of kin to the deceased since you have the same last names and also my obligation to appoint the person of my choice as the next of kin so that the proceeds of his account can be paid to you. On receipt of your positive response, we shall then discuss the sharing ratio and modalities for transfer I have all necessary information and legal documents needed to back you up for claim. I require from your honest cooperation to enable us see this transaction through. Best Regards, Justice Joshua Send your reply to jjoshua430 (at) gmail.com SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jjoshua430[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.45 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 16:54:41GET BACK TO ME IMMEDIATELYhttp://scammed.by/scam.php?id=193712 I am Barrister Chima Nwachukwu and. Advocats Associés / My address: No:95,Igbosere RoadLagos Island-Lagos Nigeria , Barr.Chima nwachukwu San/ Bar Associate, based in Nigeria, Under the Legal Oath of Federal Republic of Nigeria is a firm of solicitors which specializes in providing clients with assistance in connection with General law-related matter. Our law firm has been established for over decades. During that time we have continuously improved our quality. REPLY to my Private Email Address. ivanmorah11@gmail.com Dear Friend, I sincerely apologize for intruding into your privacy especially by contacting you through this means for a business transaction of this magnitude, but due to its seriousness and urgency it therefore became necessary for me to seek your assistance. I am Barrister Chima Nwachukwu ,the personal lawyer to Late Mr Abdul Lattif Issah , a Foreigner who worked with an Oil Servicing Company in the oil rich Niger Delta Area of Bayelsa State . I am contacting you concerning my late client and an investment he made. I would respectfully request that you keep the contents of this mail confidential. And respect the integrity of the information you come by as a result of this mail. I contacted you independently and no one should be informed of this communication. I would like to intimate you with certain facts that I believe would be of interest to you. I know that in the past you may have received such proposals of which ,I am assuring you that with honestly and truth with the fear of God almighty this is real truth of which I cannot be awake why this fund sleep away because of my incapacitation financially or contact with who should represent the late Mr.Abdul Issah Latif. This is a genuine transaction and is 100% risk free. All I'm demanding from you is your honest co-operation to enable us achieve our goal, and not a perfidious person. On the 6th of May, 2015 it was reported to my firm that my Client, his wife and their three (3) daughter were slaughtered by the Iraqi Da'ish fighters {Popularly called isis } who were fighting in Syria to overthrow the Syrian President Assad. Meanwhile, until his death, my late client had a Fixed Deposit Account of USD $25 Million deposited in a Security Company ( UNIC SECURITY AND FINANCE COMPANY LTD ) In the United Kingdom . Recently, just two week ago I received an ultimatum from the Security Company asking me to provide my late client's relative so that the money would be given to them. But unfortunately it was discovered that my late client did not declare any identifiable family member in all the official documents he tendered to the Unic Security and Finance Company Ltd , while opening the account with their company affiliated Bank in Europe which you may be require you come to their office at UK . Therefore, this development leaves me as the only person with the full picture of what the Prevailing situation is in relation to the deposit my late client made and who is entitled to be the Bona Fide Beneficiary/Next of Kin or relative because he die on the gauge of the Islamic State ??. Therefore, if I fail to locate any of his relatives or his next of kin(and have this money paid to them) the Security Company will at the expiration of the 4 weeks ultimatum given to me confiscate the Fund according to the ultimatum issued to me by the Unic Security and Finance Company Ltd -UK , if I fail to present to them my late client's relative, with a legitimate statement of claim for the money before the given time they will confiscate the Fund and the money declared' UNCLAIMED BALANCE'. This will result in the money being taken over by the Unic Security and Finance Company or by UK Government . This will not happen if I have my way. Since I have been unsuccessful in locating the relatives of my late client all these while, my proposal, therefore, is to present you as the next of in/relative of my client due to the fact that you are a foreigner and can easily pass as a possible relative of my client. I know you will be wondering how possible this could be but I assure you that this is simple. I therefore seek your consent to present you as the Next of Kin to my client so that the money he deposited with the Unic Security Company would be paid to you and there after you and I will share the money 60% for you and I will be taking 40%. I assure you that the deposit would be released to you within a few days because I have all the relevant information that would facilitate that will be required on Documentation but the expenses must be taking care by both of us . First, I will like you to provide immediately the following Information: Your full names______________________ Contact address________________________ Telephone/Fax Numbers______________________ Occupations____________________ International Passport___________________________ With these information I will fly to UK to get prepare the necessary documents and Affidavit that will put you in place as the next of kin. After we have successfully satisfied the Requirements of the Unic security and Finance Company Ltd , then the Bank the money totaling USD$25,Million would be paid into your account for you to take 60% and I will be taking 40% . All I require is your honest co-operation to enable us see this through. There is no risk at all because everything would be done legally and my position as a qualified attorney will facilitate everything then with your maximum cooperation?s we must definitely succeed . Secondly, I will give you all the necessary documents that would serve as Evidence proving that you are the Next of Kin/ Relative of my late client. These documents will legally confer on you the status to act as the Beneficiary of the Estate of my late client. What I related to you might smack of unethical practice but I want you to understand that this is a Once in life time opportunity capable of turning around our situation. The truth is that this money would not be taken by the Government on the United Kingdom , or by some greedy Unic Security Company Officials and I would not fold my arms and watch this happen hence my decision to contact you. If you are interested in doing this transaction with me kindly send your reply to this email address: ivanmorah11@gmail.com Thank you as I await your positive response. Regards, Reply To Emails : ivanmorah11@gmail.com Phone: +234-706-598-8540 Barrister Chima Nwachukwu and. Advocats Associés. SpamAssassin Report (spam score: 44.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [141.8.193.193 listed in bb.barracudacentral.org] 2.4 HK_SCAM_N2 BODY: HK_SCAM_N2 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 NSL_RCVD_HELO_USER Received from HELO User 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 4.3 FROM_MISSP_REPLYTO From misspaced, has Reply-To 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.5 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-23 16:50:55Demande de correspondancehttp://scammed.by/scam.php?id=193711 Demande de correspondance Je m'appelle Vesina Cecilia nationalité canadienne. J'ai 28 ans et célibataire. Une personne de plus comme ami est unebonne chose dans la vie d'un humain, car nul ne sait là ou se trouve son bonheur sauf en cherchant qu'il le trouvera.Tu dois te demandé ou j'ai eu ton adresse mais c'est grâceaux différentes recherches fait sur le net je te laisse mon mail: vesinacecilia@yahoo. ca Répond moi sur cette adresse pour plus de connaissance. SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.53 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (nicolaboccuzzo[at]tin.it) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [212.216.176.195 listed in list.dnswl.org] 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 2016-07-23 16:38:39Your urgent response will be highly appreciatedhttp://scammed.by/scam.php?id=193710 Hello, Please take your time to read this message; although we have never met before, this is no spam. It's a real message sent to you. I know also that you will be amazed at the level of trust that I am willing to place in a person that I have never seen nor spoken with. My name is Joshua Noble ; I have been a catholic priest for over 25 years. I had a heart surgery on the 30-04-2015 and the Doctors have just informed me that I cannot live longer; I had a serious bleeding after the operation. I have decided to give to you the total sum of $12.970.000.00 (Twelve million Nine Hundred and seventy Thousand US DOLLARS) which was deposited in my bank account by a dying elderly woman in my congregation. I want you to use this amount to make the world a better place for the poor and less privileged, help the needy and also help your family members. I took this decision because I was raised in an Orphanage so I don't have relatives and presently, I'm hospitalized at a Benin hospital, where I am undergoing treatment. That's why I have decided to contact you so that you can make good use of the money which I willed to you. Now, the people around me are only waiting for me to die, so that they can use my money for their selfish interests. I hate evil minded people and that's why I want you to now contact my Lawyer with the information below: Contact name :-David Hassan Email address: (davidhassan5252@yahoo.com) Office address: Rue 354 Sacre Ceour, Cotonou Benin Republic. He will direct you on what to do in order to receive funds immediately; I have passed on my instructions to him so feel free to contact him. Please make sure you contact my Lawyer, he is the only one that can respond to you in due time. I wish you the very best in life. Always pray for my soul to rest in perfect peace, I would be a very happy man even in death if you use these funds for Good work to help humanity. I am 77 years old now and has been good to everyone around... please assure me that you would help me carry on the good work. Fr. Joshua Noble SpamAssassin Report (spam score: 16.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (fatherjoshua77[at]outlook.com ) 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-23 16:34:29Take your coworkers out for Happy Hour with this 100 Dollar Applebees gift card http://scammed.by/scam.php?id=193709 Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } Enjoy your $100 USD card* If you are experiencing difficulty viewing this important message, visit here. Thank you for signing up for this affiliates publications. If at any time you would like to stop receiving offers of this type from this affiliate, please go here to remove yourself. Please allow up to five days for your request to be processed. If you would prefer to write, you may do so by writing to: AccomplishMail 8201 Peters Road, Suite 1000 Plantation, FL 33324 SpamAssassin Report (spam score: 2.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: agencyaccessguide.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image 2016-07-23 16:04:12for any man with difficulty maintain an erectionhttp://scammed.by/scam.php?id=193707 Dear, An important message for any man with difficulty maintain an erection gmail.com SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (berougzouhair[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 15:57:35Mlle Suzane Brighthttp://scammed.by/scam.php?id=193708 Mlle Suzane Bright Je suis sûr que ce courrier vous viendrait certainement comme une surprise, mais vous prendrait vraiment votre temps ci précieux pour le lire, Mon nom est Mlle Suzane Bright. J'ai perdu mon père une année et quelques mois de cela . Mon père était un directeur de service du conseil d'Agro-exportation jusqu'à son mort. Il a été assassiné par les rebelles pendant le soulèvement politique dans mon Pays. Avant sa mort, il a fait un dépôt de 5.5 millions d'euros dans une Banque au MAROC somme qui était destinée pour l'achat de la machine de traitement de cacao et le développement d'une autre usine avant son décès prématuré. Étant donner que cette partie du monde éprouve le temps de crises politique sans nombre, n'est là aucune garantie de vies et des prospérités. Je ne peux pas investir cet argent ici n'importe la cause, malgré le fait que cela avait été l'un des plans industriels de mon défunt père. Je veux que vous me rendiez service pour recevoir ces fonds dans votre pays ou n'importe quel endroit plus sûr comme le bénéficiaire, j'ai des plans d'investissement de cet argent dans la suite avec la vision d'investissement de mon défunt père, mais pas en cet endroit de nouveau ,plutôt dans votre pays. J'ai la vision d'entrer à la production immobilière et dans l'industries ou n'importe quelle entreprise rentable d'affaires. Je vous indemnise avec 15 % du montant total de la somme, maintenant tout mon espoir est misé en vous et je veux vraiment investir cet argent dans votre pays, où il y a la stabilité de Gouvernement, le bien-être politique et économique. J'attendrai votre réponse urgente pour vous donner plus de détails. Merci et restez bénit Mlle Suzane Bright SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (suzanebright2016[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 15:43:54Humanitarian needshttp://scammed.by/scam.php?id=193706 Hello May God Bless you, My name, is Jafafa Balz the Owner of  Gulfstreamoil Company from Muscat, Oman. I am 60 years old. I was diagnose of esophageal cancer about 2 years ago and it has eaten deep into my system and also has defiled all forms of medical treatment,right now my doctor told me that i have only three months to live on earth. Well,i have particularly lived my life so well, as I never really cared for anyone (not even myself) but my business. Though I am very rich, I was never generous, I was always hostile to people and only focused on my business as that was the only thing I cared for. But now I regret all this as I now know that there is more to life than just wanting to have or make all the money in the world. I once asked members of my family to close one of my accounts and distribute the money which I have  to any charity organization world wide but they refused and kept the money to themselves. Hence, I do not trust them anymore, as they seem not to be contended with what I have left for them. I have decided to will/donate the sum of £10,000,000:00 GBP(Ten million Great British Pound) the last of my money which none of my family knows about to you for you to help orphans in orphanage/motherless homes and humanitarian needs. Also, you are to keep 40% of the total money for yourself after the donation.The reason why i am giving you this offer is because i want this last act of mine to be an offering unto GOD so anybody  who get help from this funds  can pray for me when i die . Contact my Lawyer with below information so he can facilitates on how the money will be release to you; Name: Gerald Goodison Email: geraldgoodison@momott.ru I got your email from my personal search. God bless you as you help me carry out my last will on earth. Regards, Jafafa Balz SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [216.158.224.21 listed in zen.spamhaus.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: meettoflirt.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: meettoflirt.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 15:37:38Humanitarian needshttp://scammed.by/scam.php?id=193705 Hello May God Bless you, My name, is Jafafa Balz the Owner of  Gulfstreamoil Company from Muscat, Oman. I am 60 years old. I was diagnose of esophageal cancer about 2 years ago and it has eaten deep into my system and also has defiled all forms of medical treatment,right now my doctor told me that i have only three months to live on earth. Well,i have particularly lived my life so well, as I never really cared for anyone (not even myself) but my business. Though I am very rich, I was never generous, I was always hostile to people and only focused on my business as that was the only thing I cared for. But now I regret all this as I now know that there is more to life than just wanting to have or make all the money in the world. I once asked members of my family to close one of my accounts and distribute the money which I have  to any charity organization world wide but they refused and kept the money to themselves. Hence, I do not trust them anymore, as they seem not to be contended with what I have left for them. I have decided to will/donate the sum of £10,000,000:00 GBP(Ten million Great British Pound) the last of my money which none of my family knows about to you for you to help orphans in orphanage/motherless homes and humanitarian needs. Also, you are to keep 40% of the total money for yourself after the donation.The reason why i am giving you this offer is because i want this last act of mine to be an offering unto GOD so anybody  who get help from this funds  can pray for me when i die . Contact my Lawyer with below information so he can facilitates on how the money will be release to you; Name: Gerald Goodison Email: geraldgoodison@momott.ru I got your email from my personal search. God bless you as you help me carry out my last will on earth. Regards, Jafafa Balz SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [216.158.224.21 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.54 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: meettoflirt.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: meettoflirt.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 15:30:04From: UN Office Of International Oversight Services http://scammed.by/scam.php?id=193704 ---------- Forwarded message ---------- From: United Nations Date: Sat, Jul 23, 2016 at 12:04 AM Subject: From: UN Office Of International Oversight Services.. To: notice@un.org From: Ms. Carman L. Lapointe. UNITED NATIONS OFFICE OF INTERNATIONAL OVERSIGHT SERVICES Internal Audit,Monitoring,Consulting And Investigations Division. It is a distinct pleasure to write you again and as you are well aware many foreigners have invested thousands of United States Dollars into Nigeria transactions in Hopeless Dreams to have none of them become a reality. Right now, as directed by our secretary general Mr. Ban Ki-Moon, We have agreed with the Nigeria Government that One Hundred Thousand United States Dollars Only would be paid to you through the Money Gram Money Transfer Via special arrangement as first installment. This is to enable you have enough funds to pay for the Tax Clearance and bank charges before you will receive the balance of your funds. Please take note that you will pay US$185 only, being Notarization fee and this is the only financial obligation that you will undertake to receive the One Hundred Thousand United States Dollars Only through the Money Gram Money Transfer. Lastly,i will like you to reconfirm your information to me such as your full name, address and telephone number so that I will proceed with your Money Gram Money Transfer within the next 24 hrs and the transaction information will be released to you. I await your response for further proceedings. Sincerely yours, Ms. Carman L. Lapointe {Under-Secretary-General} United Nations SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 15:27:42Attention your ATM CARD is Ready http://scammed.by/scam.php?id=193703 Attention Beneficiary   This is to inform you that your fund Worth $5.7 Million have been credited into an ATM MASTERED CARD which will enable you to make a withdraw of your fund at any ATM PAYING MACHINE CENTER around you.   Note that your maximum withdraw is valued at $10,000 per day until you finish your total Remittance.Below is your ATM SECRET PIN CODE which will enable you to withdraw your fund (5550)   Now you are advise to contact Rev.Lee Johnson who is in charge of Delivery of your card.Contact him now with your personal information including your Delivery Home Address And Your Direct Tel Phone Number and instruct him where to deliver your card within 2 days.   Contact him with this Information Below.   Rev.Lee Johnson EMAIL:rev.leejohnson000@gmail.com Tel Phone:+2348099435473   Regards Mr.Jeffery Morgan. Director Federal Minister Of Finance. SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (senete_330[at]yahoo.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [72.30.238.138 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (jeffery morgan ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (senete_330[at]yahoo.com) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-23 14:37:24Hi Welcome to 2016Dating ushttp://scammed.by/scam.php?id=193702 VGhlIHdvbWVuIGhlcmUgcmVhbGx5IHdhbnQgdG8gbWVldCBuZXcgbWVuIHRoYXQgdGhleSBjYW4g aGF2ZSBmdW4gd2l0aCBpbiB0aGUgYmVkcm9vbSEgUHJlc3MgaHR0cDovL3d3dy5hbGxoYWlybmV0 d29yay5jb20vcGhvdG8va2F0YWNvbS5odG1sICB0byBnZXQgeW91ciB0cmlhbCBtZW1iZXJzaGlw IA0K SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 14:20:43Turbinando o Desempenho Sexual em 48hhttp://scammed.by/scam.php?id=193701 Descubra Como Homens Comuns Estão ConseguindoPotentes e Longas Ereções em Apenas 48h, Sem Remédios!A.cesso.: http://vejasobre.com/turbinando48hSatisfaça sua Mulher e Faça ela Pedir mais... SpamAssassin Report (spam score: 17.7) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [191.7.111.186 listed in zen.spamhaus.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mandou.com.br] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2016-07-23 13:18:46WESTERN UNION UNDER WORLD BANKhttp://scammed.by/scam.php?id=193700 WESTERN UNION UNDER WORLD BANK WESTERN UNION UNDER WORLD BANK has finalize all the necessary arrangement to pay your due funds of $7.5 Million USD,and this funds has been approved and legalized by the board of directors of WORLD BANK,IMF AND IRS altogether; So you will be receiving $8000 per day until you receives your due payments of $7,500 000.00 USD So we are waiting for your urgent response so that our attorney will go to the inland revenue tax office to obtain a letter of administration tax clearance approval on your behalf from high Court.But as am writing to you now,your first payment has been made through western union. MTCN:6181645629) SENDERS FIRST NAME: ANDERSON SECOND NAME: NELSON TEST : WHEN ANS $B!D (BTODAY Moreover,you are advise to send us the below information for the obtaining of your ownership certificate: Your name___ Your country__ Your address___ Direct phone number__ Your home phone number__ Yours Faithfully, DR.philip mark Email westernunionunderworldbank@gmail.com SpamAssassin Report (spam score: 9.0) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.54 listed in list.dnswl.org] 0.7 MILLION_USD BODY: Talks about millions of dollars 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_DR T_HK_NAME_DR 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.0 MONEY_FROM_41 Lots of money from Africa 2016-07-23 13:09:12😎 Эти люди хотят с тобой пообщаться http://scammed.by/scam.php?id=193699 ??????? ?? ?????????? ? ????? ??????? ?? Twoo ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTE5JnU9JTJGcHJvZmlsZSZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ????? ???????????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTIwJnU9JTJGMTc1OTk0OTYwNSZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ????? ???????????? ???????: ????, 22 ????? ?????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTIxJnU9JTJGbWVzc2FnZXMlMkYlM0ZpZCUzRDE3NTk5NDk2MDUmdD01MjgmYT1qN3M2YzNfYmE0OGY2YzFlYQ )-?????????? ??????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTIwJnU9JTJGMTc1OTk0OTYwNSZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTIzJnU9JTJGMTE2MzcyODY3MCZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ????? ???????????? ???????: Dima Radjabov, 29 ????? ?????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTI0JnU9JTJGbWVzc2FnZXMlMkYlM0ZpZCUzRDExNjM3Mjg2NzAmdD01MjgmYT1qN3M2YzNfYmE0OGY2YzFlYQ )-?????????? ??????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTIzJnU9JTJGMTE2MzcyODY3MCZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTI2JnU9JTJGMTM5MjQ3NDI4MyZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ????? ???????????? ???????: ???????, 30 ????? ?????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTI3JnU9JTJGbWVzc2FnZXMlMkYlM0ZpZCUzRDEzOTI0NzQyODMmdD01MjgmYT1qN3M2YzNfYmE0OGY2YzFlYQ )-?????????? ??????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTI2JnU9JTJGMTM5MjQ3NDI4MyZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTI5JnU9JTJGMjAwNTEyNzA5NiZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ????? ???????????? ???????: Tariq, 24 ????? ?????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTMwJnU9JTJGbWVzc2FnZXMlMkYlM0ZpZCUzRDIwMDUxMjcwOTYmdD01MjgmYT1qN3M2YzNfYmE0OGY2YzFlYQ )-?????????? ??????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTI5JnU9JTJGMjAwNTEyNzA5NiZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh ) ??????????? ??????? ???? ?? ????????? ????? ?????????? Twoo ???????? ?????????? Twoo ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTMyJnU9JTJGZG93bmxvYWQmdD01MjgmYT1qN3M2YzNfYmE0OGY2YzFlYQ ) Twoo ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTMzJnU9JTJGJnQ9NTI4JmE9ajdzNmMzX2JhNDhmNmMxZWE ) ???? ???? ?????????? ??? ?????????, ?????? ??? ?? ???????????????(?) ??? ?????? Sscatcher (sscatcher@yahoo.com ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTMzJnU9JTJGJnQ9NTI4JmE9ajdzNmMzX2JhNDhmNmMxZWE )) ?? Twoo - ?????????? ( https://www.twoo.com/mailurl/aT0xYjYtZ2QzeXViLTVoYzJqMHEwLWM1MSZsPTM1JnU9JTJGc2V0dGluZ3MlMkZlbWFpbHMlMkYlM0Z2aWV3JTNEdW5zdWJzY3JpYmUlMjZhY3Rpb24lM0R1bnN1YnNjcmliZUZyb21UeXBlJTI2dmFsdWUlM0ROTyUyNnR5cGVpZCUzRDElMjZza2lwU3BsYXNoJTNEbWFpbCZ0PTUyOCZhPWo3czZjM19iYTQ4ZjZjMWVh )Massive Media Match NV, 10 Presnenskaya naberegnaya, 123317 Moscow, RussiaBE0537240636.info-ru@twoo.com ( mailto:info-ru@twoo.com ) SpamAssassin Report (spam score: -6.2) pts rule name description ---- ---------------------- -------------------------------------------------- -3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact cert-sa@returnpath.net [Return Path SenderScore Certified {formerly] [Bonded Sender} - ] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: netlogmail.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact safe-sa@returnpath.net [Return Path SenderScore Safe List (formerly] [Habeas Safelist) - ] -2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium trust [193.164.158.72 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 12:55:58Re:SMTP for unlimited emails discount price arrivalhttp://scammed.by/scam.php?id=193698 SGVsbG8NCk5vdyB3ZSBhcmUgZG9pbmcgcHJvbW90aW9uIGZvciBiZWxvdyBidWxrIG1haWxpbmcg c2VydmVyDQpQYWNrYWdlIG9uZToNClNNVFAgc2VydmVyIGFjY291bnQgKDk5VVNEL01vbnRoKQ0K MS1kZWRpY2F0ZWQgc2VydmVyIGFuZCBkZWRpY2F0ZWQgSVA7DQoyLVJETlMsIFNQRiwgREtJTSwg RE1BUkMgaW1wbGVtZW50ZWQ7DQozLXVubGltaXRlZCBlbWFpbCB2b2x1bWUNCjQtaGlnaCBpbmJv eCByYXRlDQpUaGlzIHBhY2thZ2Ugb25seSBwcm92aWRlIHNtdHAgYWNjb3VudCAoaW5jbHVkZSBl bWFpbCBhZGRyZXNzLCB1c2VybmFtZSwgcGFzc3dvcmQgYW5kIHNtdHAgYWNjb3VudCksIGN1c3Rv bWVyIHNob3VsZCB1c2UgUkRQIHN1Y2ggYXMgdHVyYm8gbWFpbGVyL2Ftcy9zZW5kYmxhc3RlciBp biB0aGVpciBvd24gY29tcHV0ZXINCg0KIA0KUGFja2FnZSB0d286DQpTTVRQIHNlcnZlciBpbnN0 YWxsZWQgd2ViLWJhc2VkIG1haWxpbmcgc29mdHdhcmUgKDE1NVVTRC9Nb250aCkNCjEtZGVkaWNh dGVkIHNlcnZlciBhbmQgZGVkaWNhdGVkIElQOw0KMi1SRE5TLCBTUEYsIERLSU0sIERNQVJDIGlt cGxlbWVudGVkOw0KMy11bmxpbWl0ZWQgZW1haWwgdm9sdW1lDQo0LWhpZ2ggaW5ib3ggcmF0ZQ0K NS1JbnRlcnNwaXJlIEVtYWlsIE1hcmtldGVyIGxhdGVzdCB2ZXJzaW9uIGluc3RhbGxlZA0KVGhp cyBwYWNrYWdlIHByb3ZpZGUgd2ViLWJhc2VkIGVtYWlsIHNlbmRpbmcgc29mdHdhcmUsIHlvdSBj YW4gZmluaXNoIGFsbCBvcGVyYXRpb24gb24gd2Vic2l0ZSwgbm90IG5lZWQgUkRQLg0KDQogDQog DQpXZWxjb21lIGFkZCBteSBTa3lwZSBJRDogbGpzYW5pdGFyeTE5OTggZm9yIGRldGFpbHMgYW5k IGRlbW8gdHJpYWwgdXNlLg0KIA0KIA0KQmVzdCByZWdhcmRzLCANClNtYXJ0IFdvbmcNCk1hbmFn aW5nIERpcmVjdG9yDQpTTUFSVCBPTkxJTkUgTUFSS0VUSU5HIElOQy4NCkVtYWlsOiBwbGVhc2Ug cmVwbHkgdG8gdGhpcyBlbWFpbCBkaXJlY3RseSBvciBzZW5kIGFueSBpbnF1aXJ5IHRvIDcyODU1 Njk2OUBxcS5jb20NClNLWVBFOiBMSlNBTklUQVJZMTk5OA0KIA0KDQoNCiANCiA SpamAssassin Report (spam score: 2.9) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [47.88.103.140 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FAKE_REPLY_C FAKE_REPLY_C 2016-07-23 12:27:03 AD 信用宝 在线申请信用卡可申请5 100万http://scammed.by/scam.php?id=193697 ???????????????? SpamAssassin Report (spam score: 9.0) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: necesint.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: necesint.com] 0.0 WEIRD_QUOTING BODY: Weird repeated double-quotation marks 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image 2016-07-23 12:17:20󾀽 ????? ????? ??????? ??? ??????? ?????? 󾀽 http://scammed.by/scam.php?id=193696 Dear_"felixcramb",Asian_girls_looking_for_serious_dating__ CLICK_HERE 2016-07-23 12:07:51No subjecthttp://scammed.by/scam.php?id=193695 This is to notify the general public that Uber Solution Center Loan Firm has opened an opportunity to every one in need of any financial help.We give out loan to individuals, firms and companies under a clear and understandable terms and condition. Email:solutioncne@aol.com Best Regards, Mr Michael Richards SpamAssassin Report (spam score: 8.7) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [198.1.114.176 listed in bb.barracudacentral.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: csdenven.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: csdenven.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2016-07-23 12:04:44ATTENTION PLEASE http://scammed.by/scam.php?id=193694 CENTRAL BANK OF NIGERIA (CBN) FOREIGN REMITTANCE UNIT. CBN HOUSE, LAGOS NIGERIA. TELEGRAM: CENTRAL BANK. DEAR BENEFICIARY, VERIFICATION OF YOUR PAYMENT/WINNINGS FILE. THIS IS TO INFORM YOU THAT FROM THE RECORDS OF OUTSTANDING PAYMENT WITH THE FEDERAL GOVERNMENT OF NIGERIA, THE SOUTH AFRICAN GOVERNMENT, THE UNITED KINGDOM GOVERNMENT, DEMOCRATIC REPUBLIC OF GHANA, REPUBLIQUE DE COTE D'LVOIRE YOUR NAME/PARTICULARS WAS DISCOVERED AS NEXT ON THE LIST OF OUTSTANDING CONTRACTOR/INHERITANCE/LOTTERY WINNER WHO HAVE NOT RECEIVED THEIR PAYMENT. I WISH TO INFORM YOU THAT YOUR PAYMENT IS BEING PROCESSED FROM THE ABOVE PAN AFRICAN BANK (CENTRAL BANK OF NIGERIA) AND WILL BE RELEASED TO YOU AS SOON AS YOU RESPOND TO THIS LETTER. ALSO NOTE THAT FROM THE RECORD IN MY FILE, YOU ARE FOUND AS ONE OF THE ABOVE BENEFICIARIES FROM THE ABOVE MENTIONED NATIONS YET TO RECEIVE OUTSTANDING PART PAYMENT OF US$950,000.000 (NINE HUNDERED AND FIFTY THOUSAND UNITED STATES DOLLARS). KINDLY RE-CONFIRM TO ME THE FOLLOWING: 1) YOUR FULL NAME...................................... 2) YOUR CONTACT ADDRESS ............................... 3) YOUR FULL BANKING DATA.............................. 4) PHONE, FAX AND MOBILE............................... 5) PRIVATE EMAIL ADDRESS.............................. 6) PLACE OF WORK AND ADDRESS........................... 7) AGE AND MARITAL STATUS.............................. AS SOON AS THE ABOVE INFORMATION ARE RECEIVED, YOUR PAYMENT WILL BE MADE TO YOU IN A CERTIFIED BANK DRAFT OR DIRECT WIRE TRANSFER TO YOUR NOMINATED BANK ACCOUNT FROM EITHER OF OUR UNITED STATES PAYMENT CENTERS; CITI BANK NEW YORK OR BANK OF AMERICA CALIFORNIA, ROYAL BANK OF SCOTLAND AND HSBC BANK IN LONDON UK. PAYMENTS ARE ALSO DESIGNED TO BE PAID THROUGH OUR U.S.A CORRESPONDENT BANK OF FIRST NATIONAL BANK, PSG INVESTMENT BANK, NBS BANK, NED BANK, SOUTH AFRICAN RESERVE BANK, STANDARD BANK OF SOUTH AFRICA, STANBIC BANK, RAND MERCHANT BANK, WESBANK, FIRST RAND BANK, MERCHANTILE LISBON BANK, ALLIED BANK AND ABN AMRO IF BENEFICIARIES FUNDS ORIGINATE FROM SOUTH AFRICA. BENEFICIARIES ARE STRONGLY NOTIFIED THAT FINAL PAYMENTS ARE MADE THROUGH PAN AFRICAN BANK (CENTRAL BANK OF NIGERIA) w YOU CAN EMAIL ON OUR DIRECT MAIL ADDRESS: wwwcentral1bank@gmail.com AS SOON AS YOU RECEIVE THIS MEMO FOR MORE DETAILS. KINDLY SHIT IT TO THE INBOX WHEN REPLYING. REGARDS, REMAIN BLESSED REV FR PHILLIPS MATTHEWS DIRECTOR FOREIGN REMITTANCE UNIT. CENTRAL BANK OF NIGERIA (CBN) SpamAssassin Report (spam score: 21.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 TVD_RCVD_SPACE_BRACKET TVD_RCVD_SPACE_BRACKET -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] 2.4 RCVD_IN_SORBS_SOCKS RBL: SORBS: sender is open SOCKS proxy server [163.54.70.3 listed in dnsbl.sorbs.net] 2.5 RCVD_IN_SORBS_HTTP RBL: SORBS: sender is open HTTP proxy server 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 T_HK_NAME_FROM T_HK_NAME_FROM 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.0 LOTTO_DEPT Claims Department 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-23 11:40:39TRUTH OF THE MATTER http://scammed.by/scam.php?id=193693 Attn:Beneficiary/Contractor, I have decided to contact you directly and personally after a serious thought because I do not have any hatred on you, but your Nigerian partners. I am the Director, Tested Computerization Foreign Transfer Unit Central Bank of Nigeria (CBN). Sometime a go, your Nigerian partners approached me through a friend of mine and requested me to assist them to conclude a money transfer deal. They gave me your name, and bank particulars and told me to include them into our computer system in the central computer unit so that it will appear as if you are one of the genuine contractors that have been cleared for payment. According to them, they wanted to use this strategy to transfer a huge amount of money which they accumulated through inflated contract awards and the money have been floating in the CBN since then. The original contractors have been paid therefore they wanted to use your account to transfer the inflated amount out of Nigeria. We agreed that once I do this, they would give me 20% and another US$100,000.00 when I release the fund to your account. When they saw that I have done so and your name have been approved among the list of those to be paid, instead of giving me the agreed amount, they started avoiding me and resorted to threat. I immediately deleted the transfer access code (TAC) and your personal identification numbers (PIN), which is only known to me due to my position and duty but released other contractors fund without yours. They became angered the more when they saw that their threat did not work, they started bribing other officials to get another approval to transfer the money to you but without success. it is not funny that a contractor is being asked to pay one tax or the other. I am 100% responsible for the delay and obstructions of this fund,because of their breach of agreement. if you doubt what I have just told you, pay any amount you like you will not get this fund from them and after a short time, they will come up with another reason to pay again and it goes on and on. They are simply wicked and do not know where their problem lies. now, if you want us to work together, these are my conditions: (A) Most importantly, we must be very sincere and transparent with each other by ensuring that we stand by our words. (B) I will have 10% of the money because it's only two of us left now. (C) You will assist me to open an account in your country or any other place of my choice where I will pay in my own share. (D) As you have seen, it will be useless and a mere waste of time and money if you continue with any other person, so it is better we agree with each other and conclude the transaction with utmost secrecy. If these conditions are acceptable to you, so that we can finalize this traction, But if you are not interested, I advise you to forget the fund as it will be transferred into the federal government of Nigeria consolidated national reserve. Kindly get back to me only on this email or call me immediately upon receipt of this message for further information :+234-809-505-6343. Yours Faithfully. Mr.James Udokam Director, Tested Computerization foreign Transfer Unit. Central Bank of Nigeria(CBN). SpamAssassin Report (spam score: 11.2) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 T_MONEY_PERCENT X% of a lot of money for you 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-07-23 11:05:23a slim bodyhttp://scammed.by/scam.php?id=193692 On Thursday, July 21, 2016 5:34 PM, Flattern your belly wrote: Get your body on track SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 10:14:51After serious thoughts my decisionhttp://scammed.by/scam.php?id=193690 On Thursday, July 21, 2016 10:28 AM, Suleiman Barau (ONN) wrote: Dear Friend, After serious thoughts, my decision to contact you personally became urgent, since I have no grudge against you, other than your Nigerian partners. I happen to be the new Deputy Governor of Operations at Central Bank of Nigeria. Sometime ago, your partners approached me through a contact who works with one of the ministries here with a request to assist them conclude a transfer deal which required programming a transfer on your behalf. What I gathered, is they want the use of my position and office to strategically transfer a sum; which has been supposedly dormant in the CBN suspense account for quite a while. Our agreement was that I make this happen and be rewarded with one hundred thousand initial advance payment and another one hundred thousand when I finally release to your nominated account. Having successfully programmed the transfer as agreed and your name approved amongst the list of contractors/recipients /beneficiaries to be paid for that period, the story changed and instead of standing by agreed arrangements, they implored an avoidance tactic and then resorted to threats. Well, that prompted my decision to immediately delete the transfer code, but released other payments as listed, excluding yours. This resulted to several threatening calls which did not scare me though and then they started making frantic efforts to bribing other officials to get another approval for the transfer to you, but without success. I take 100 percent responsibility for the delay and obstructions, caused by their breach of agreement and trust. If you have doubts as to this privileged information, then consider what has transpired through the entire course of your claim process, they continue to ask you to pay one charge or the other and at the end no results and they continue to tell you to send another fee with yet no results. In very simple words, I can only say that they are just wicked. Now if you want us to work together,these are my conditions: 1: I will be entitled to twenty percent of the total sum, since it's just both of us left in the matter. 2: You will assist my son with opening an account in your domain where I will transfer my share. 3: It will be useless and mere waste of time and resources if you continue with any other person. So well conclude this process with the utmost of secrecy using only the included telephone and email details as provided. 4: You will provide me your direct telephone, mobile and your private email to facilitate easy communication between you and I. If you find these conditions acceptable, contact me at your earliest convenience to have us finalize arrangements, so the transfer can be released to your nominated account after completion of the mandatory protocols. However, in case you're not interested, then I strongly advice you jettison the idea of receiving your funds and stop wasting your time with your so called partners. Your immediate reply is expected. Yours truly. Suleiman Barau (OON) Deputy Governor, Operations Directorate SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 10:12:34GOOD DAYhttp://scammed.by/scam.php?id=193691 Dear Friend, I am YASMIN MUHAMMAD, I need your urgent assistance in transfer in the sum of 4.3 million dollars, to your account for investment in your country if you are ready get back to me i will give you my full details 1.) Your full name...................................... 2.) Country..................................... 3.) Your private number............. 4.) your age:........................... 5)Your Photo.................................... 6)Your profession....................... As soon as I receive your details from you I will send you information on how to contact the bank for the transfer,Do not be angry with me that I requested all this information from you is because i don't want to fail a Victim this is the only hope I have in live to make it.Reply me back through this E-mail: yasmin2muhammad@gmail.com Best Regards YASMIN MUHAMMAD my number +22896613421 SpamAssassin Report (spam score: 4.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (yasmin2muhammad[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.54 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-23 10:06:41Mr David Markhttp://scammed.by/scam.php?id=193689 Attn Fund Beneficiary, What is happening? I have sent you several emails but no respond from you. well, I just want to inform you that your representative have registered your ATM CARD of $5.5 Million united state dollars with unscratched sealed ATM card pin number under FedEx Express Courier Service, and the registration code is (XGT0283). He has paid for the delivery and issuance fee with an instruction to hand the package over to you once we get to your country. Now, our diplomat is about living Nigeria to your country with your ATM card package but want to make sure that your aware of his coming, Pls indicate the registration code and reconfirm it to us with the below information, to enable him proceed the delivery. You're Name......., You're Address...... Country/city........ You're Telephone No....... A copy of your Passport or ID Card Occupation.............. Sex............. You're nearest Air-Port........... For your information, your representative includes in the package all the necessary legal coverage back up paper in your name and the instructions on how you can use the ATM Card just to make sure you will not have any problem with the Card. once you reconfirm this, he will leave this country Nigeria to your country immediately and he will call, text or email you for your package hand over as soon as he arrive. Waiting to hear from you as soon as possible. Please call me on this number immediately you reply to this mail. +2348034444408 Thanks Mr David Mark Managing Director Telephone: +2348034444408 SpamAssassin Report (spam score: 0.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (davidmarkonly5[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 09:50:25NOTIFICATION OF YOUR PAYMENT VIA ATM CARD 2016 S14 http://scammed.by/scam.php?id=193688 Dear Sir/Madam, NOTIFICATION OF YOUR PAYMENT VIA ATM CARD 2016. This is to officially inform you that we have verified your contract file presently on my desk, and I found out that you have not received your payment due to your lack of co-operation and not fulfilling the obligations giving to you in respect to your contract payment.Secondly, you are hereby advised to stop dealing with some non-officials in the bank as this is an illegal act and will have to stop if you so wish to receive your payment immediately. After the Board of director's meeting held in Abuja in conjunction with United Nations and G8 countries, we have resolved in finding a solution to your problem. We have arranged your payment through our SWIFT CARD PAYMENT With Central Bank Of Nigeria, this is part of the mandate passed by the Senate in respect to overseas contract payment and debt re-scheduling. And also the Nigerian Government is using this means to reward all the citizens of the United states and all part of Europe including Asia, Australia, South America, Canada, Antarctica e.t.c and all those who have lost their funds in either scam, or an uncompleted business, or otherwise, You should know that if you are interested to receive your ATM card which will be credited with $5,000,000.00 united states dollars before it is being sent to you direct to your doorstep through the FedEx courier service, you will have to respond to me with your full information?s, After your response you will be directed to the FedEx shipping courier representative He will send you your ATM CARD which you will use to withdraw your money via ATM MACHINE in any part of the world, and the maximum daily limit is Fifteen Thousand United States dollars ($15,000.00) only. And also note that the Nigerian Government has taken care of the shipping fee of your ATM card, so if Mr. Edward is requesting for another shipping fee, you will have to report him to me immediately. As soon as your ATM card is dispatched i will immediately send your withdrawal pin code to you because your Atm Card has already been activated. If you like to receive your fund this way, kindly contact me with the following information?s below. (1) Your Full Name (2) Full residential address (3) Phone and Fax Number (4) Occupation. (5) Personal Identification. Driver?s license or International Passport. (6) Age (7) Marital Status (8) Sex This message is supported by the Nigerian Government, United Nations(UN) and G8countries.Note that you might receive this message in your inbox or spam or junk folder depends on your web host or server network. Thanks for your co-operation. Respectively, Dr. Ngozi Okonjo Iweala Minister, Federal Ministry of Finance SpamAssassin Report (spam score: 41.4) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [41.203.71.182 listed in zen.spamhaus.org] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.203.71.182 listed in dnsbl.sorbs.net] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 1.8 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.0 MONEY_FROM_41 Lots of money from Africa 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-07-23 09:20:50100 Authenti__Asian Ladies on linehttp://scammed.by/scam.php?id=193687 [image: http://bit.ly/2ajlBiv] [image: http://bit.ly/29QYyOm] SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (asia.euro124[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-23 09:03:04We Do Care: Spread The Wordhttp://scammed.by/scam.php?id=193686 Bank of America New York Department of Telex and Credit Control 495 Elmwood Ave, Buffalo, NY 14222, USA Webpage: http://www.bankofamerica.com. Transfer Notification This is to inform you that the World Bank Switzerland and the US Govt has Approved US$4.500.000 Dollar to 700 hundred thousand lucky beneficiary in America, Europe, Africa and Asia to improve their business which you are among. Please get back to with the below information this will enable us process for the transfer of your fund. 1. Your full name: 2. Your direct cell or office phone to reach you: 3. Your address: Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment. Dr. Grey Watson Director Credit / Telex Dept. Bank of America, NY USA SpamAssassin Report (spam score: 3.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (boa.info[at]yandex.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bankofamerica.com] 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2016-07-23 08:28:00You Won’t Believe Oz’s Latest Sleep Bombshell http://scammed.by/scam.php?id=193685 Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } One momand#8217;s sleep trick* If you are experiencing difficulty viewing this important message, visit here. 1000 N. West Street, Suite 1200, Wilmington, DE 19801 This message was delivered to you because you have subscribed at the site of one of our Certified properties. If you received this in error and/or want to stop additional mailings, you may do so here. Please allow 2 to 5 days for this to take effect. Postal correspondence to: CertifieDirectMail, Suite 487 3389 Sheridan St Hollywood, FL 33021 SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: capitalbenefitupdate.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: capitalbenefitupdate.net] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: capitalbenefitupdate.net] 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-07-23 08:11:24N Ahttp://scammed.by/scam.php?id=193684 I, Amancio Ortega Gaona is a Spanish fashion businessman and founding chairman of the Inditex fashion group, best known for its chain of Zara clothing and accessories retail shops. you can read about me on: https://en.wikipedia.org/wiki/Amancio_Ortega_Gaona I intend to give to you a portion of my Net-worth $1.5 million each to 4 individuals worldwide as part of our charity project of which I have been banking.if you have received my email, kindly send us your details so that, we direct our bank to effect the transfer of the funds $1.5 million, hoping it would be of help to you and others too. Email for confirmation below. With love, Amancio Ortega Gaona response to: ortegagaona01@outlook.com SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2016-07-23 07:17:37Check out this season’s Lasik special http://scammed.by/scam.php?id=193683 Responsive Email .portrait{ display:none; font-size:0; max-height:0; line-height:0; padding:0; mso-hide:all; overflow:hidden; } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } @media (min-width: 1px) and (max-width: 480px){ body{ background-color:#FFFFFF !important; } } @media (min-width: 1px) and (max-width: 480px){ .mobile-hide{ display:none; font-size:0; line-height:0; height:0; } } @media (min-width: 1px) and (max-width: 480px){ .portrait{ display:block !important; overflow:visible !important; width:auto !important; max-height:none !important; height:auto !important; } } @media (min-width: 481px){ .mobile-hide{ display:block !important; overflow:visible !important; width:auto !important; max-height:inherit !important; height:auto !important; } } @media (min-width: 481px){ .portrait{ display:none; font-size:0; line-height:0; height:0; overflow:hidden; } } LASIK Starting at 299USD Per Eye If you are experiencing difficulty viewing this important message, visit here. LVI Customer Service Center 1555 Palm Beach Lakes Boulevard #200 West Palm Beach, FL 33401 Thank you for signing up for this affiliates publications. If at any time you would like to stop receiving offers of this type from this affiliate, please go here to remove yourself. Please allow up to five days for your request to be processed. If you would prefer to write, you may do so by writing to: AccomplishMail 8201 Peters Road, Suite 1000 Plantation, FL 33324 SpamAssassin Report (spam score: 2.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: agencyaccessguide.com] 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image 2016-07-23 06:41:39Invitation from Emind Technologies to write a Review http://scammed.by/scam.php?id=193682 UrbanPro.com - Welcome Message Hi, Looks like you are/were a customer of Emind Technologies. Emind Technologies has invited you to write a review. Please click on the button below andamp; give feedback about Emind Technologies. Write a Review for Emind Technologies Thank you, UrbanPro.com Team Don't want to receive these emails anymore? Unubscribe here About UrbanPro.com | In The News | Testimonials | Feedback | Customer Service UrbanPro.com is India's largest local and online marketplace for hiring Tutors, Trainers and Training Institutes. With a need posted every minute, we help Students in finding the right local or online Tutor and also help Tutors and Trainers to grow their earnings by getting connected with more Students. UrbanPro.com #15, 2nd floor, Bannerghatta Road, 3rd phase, J.P Nagar, Bangalore - 560076 SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 06:22:48Attention Pleasehttp://scammed.by/scam.php?id=193681 Dear friend With a very desperate need for assistance, I have summed up courage to contact you. I am from (will disclose this later),presently working in Iraq with an international organization that I will also disclose later, I found your contact particulars in an address journal.I am seeking your assistance to evacuate the sum of (US$18.523 Million Dollars) Eighteen Million, five Hundred And Twenty Three Thousand US Dollars to your country or any other safe country of your choice, as far as I can be assured that my share will be safe in your care untill I complete my service here,this is no stolen money,and there are no dangers involved. SOURCE OF MONEY: http://news.bbc.co.uk/2/hi/middle_east/2988455.stm Some money in various currencies was discovered concealed in barrels with piles of weapons and ammunitions at a location near one of Saddam,s old palaces during a rescue operation, and it was agreed by all party present that the money be shared amongst us, this was quite an illegal thing to do, but I tell you what? no compensation can make up for the risks we have taken with our lives in this hell hole. The above figure was given to me as my share, and to conceal this kind of money became a problem for me, so with the help of a German contact working here, and his office enjoys some immunity, I was able to get the package out to a safe cation entirely out of trouble spot. He does not know the real contents of the package, and believes that it belongs to an Asian/American who died in an air raid, and before giving up, trusted me to hand over the package to his business associate. I have now found a secured way of getting the package out to a safer country for you to pick up, and will discuss this with you when I am sure that you are willing to assist me.One passionate appeal I will make to you is not to discuss this matter with a third party, should you have reasons to reject this offer, please destroy this mail as any leakage of this information will be too bad for us.I do not know for how long we will remain here, and I have survived 6 suicide bomb attacks by the special grace of God, this and other reasons I will mention later has prompted me to reach out for help, I honestly want this matter to be resolved immediately. kindly fill up this requirements like:Kindly respond . Your full name: Your country: Contact phone/fax number Age: Occupation: Regards, Mr Ali Ibrahim. SpamAssassin Report (spam score: 25.1) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 NSL_RCVD_HELO_USER Received from HELO User -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: pbhfoundation.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.9 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-23 05:45:59Details About Your Funds Reply Asap As Urgency Implies http://scammed.by/scam.php?id=193680 SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 04:59:02 SPAM Keine Antwort von Ihnen No response from you http://scammed.by/scam.php?id=193679 Hallo, Ich habe einige Tage die Nachricht vor, keine Antwort von Ihnen Grüße, Veronica Garcia Hello, I sent the message few days ago, no response from you Regards, Veronica Garcia SpamAssassin Report (spam score: 29.8) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 3.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (vero.garcia[at]consultant.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.4 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 2.0 FSL_NEW_HELO_USER Spam's using Helo and User 4.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 1.8 FROM_MISSP_USER From misspaced, from "User" 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2.4 FROM_MISSP_FREEMAIL From misspaced + freemail provider 2016-07-23 03:49:25No subjecthttp://scammed.by/scam.php?id=193677 SpamAssassin Report (spam score: 8.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.53 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (favouredwin614[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-23 02:43:00Medicine Shop 100 Pure Pharmacy Sscatchelld http://scammed.by/scam.php?id=193678 Smiling and held out something else Take a look at our new SUMMER offers and save and#1053;UGE on the best drugs !! Top-Sellers Today: Inquired perker and darkness of england.Sammy it does this one instant. MEN'S SEXUAL and#502;EALTH: and#186; and#86;iagra as low as $1.10 $0.99 and#186; and#266;ialis as low as $1.77 $1.59 and#186; and#315;evitra as low as $2.24 $2.02 and#186; and#404;iagra Pro as low as $2.61 $2.35 and#186; and#1021;ialis Pro as low as $5.26 $4.73 and more... GENERAL and#1290;EALTH: and#186; Propecia as low as $0.61 $0.55 and#186; and#573;asix low as $0.39 $0.35 and#186; Prozac as low as $0.39 $0.35 and#186; Prednisolone as low as $0.39 $0.35 and#186; and#262;lomid as low as $0.83 $0.75 and more... ANTI-ALLERGIand#1023;/ASTHMA: and#186; and#86;entolin as low as $21.06 $18.95 and#186; and#1040;dvair as low as $35.50 $31.95 and#186; Spiriva as low as $28.90 and#186; Prednisone as low as $0.49 and#186; Nasonex as low as $23.50 and more... ANTIBIOTIand#391;S: and#186; and#195;moxicillin as low as $0.58 $0.52 and#186; Zithromax as low as $0.83 $0.75 and#186; and#1057;ipro as low as $0.30 and#186; Flagyl as low as $0.35 and#186; and#1028;ephalexin as low as $0.59 and more... Pickwick rising eight or six months afterwards. Strong effort to get rid of beer.Features of Our Drugstore:Thus expressing himself as nobody. and#186; We Accept and#404;isa, MasterCard, American Express, Discover and E-check! and#186; We Deliver to and#512;LL destinations Worldwide! and#186; and#1254;rder 3+ goods and get free and#260;irmail Shipping! and#186; Free Tablets and#1216;ncluded in and#1045;ach and#492;rder! and#186; Meds and#201;xpiration Date of and#556;ver 4 Years! and#186; No and#1031;mitations! 100% and#260;uthentic Meds! and#186; Secure and Confidential Online Shopping! and#186; and#904;asy Refunds and 24/7 and#262;ustomer Support!_____________ Our Mall is licensed pharmacy, international lic #0630284 issued 8 Sep 2004 SpamAssassin Report (spam score: 12.5) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [123.26.109.65 listed in zen.spamhaus.org] 0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL 0.0 HK_NAME_DRUGS From name contains drugs 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [123.26.109.65 listed in bb.barracudacentral.org] 0.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address [123.26.109.65 listed in dnsbl.sorbs.net] 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.9 SPF_HELO_SOFTFAIL SPF: HELO does not match SPF record (softfail) 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 MISSING_MID Missing Message-Id: header 2.2 DRUGS_ERECTILE Refers to an erectile drug 2016-07-23 02:38:16Always naturalhttp://scammed.by/scam.php?id=193676 On Friday, July 22, 2016 3:54 PM, "Onl1ne Viagra > Brand Cialis" wrote: Health should be number one to you SpamAssassin Report (spam score: 7.9) pts rule name description ---- -----------------2016-07-23 01:34:05onebrownpridehttp://scammed.by/scam.php?id=193675 On Friday, July 22, 2016 2:58 PM, Elizabeth Williams wrote: Open the link to view message If you can't click above, then click here Elizabeth Williams SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 01:33:04onebrownpridehttp://scammed.by/scam.php?id=193674 On Friday, July 22, 2016 5:20 AM, Patricia Williams wrote: You got an eCard If you can't click above, then click here Patricia Williams SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-23 01:32:34Attention: Beneficiary http://scammed.by/scam.php?id=193673 CENTRAL BANK REMITTANCE UNIT, CENTRAL BUSINESS DISTRICT, CADASTRAL ZONE, ABUJA, FEDERAL CAPITAL TERRITORY, CONTRACT #: MAV/NNPC/FGN/MIN/013, Swift Code: BPH KPL PK, A/C#: 329606=101244=169=678 FOREIGN REMITTANCE Our Ref: CBN/IRD/CBX/021/11 Email: central.bnkofnigeria@aol.com Attn: Beneficiary, CBN DEBT PAYMENT NOTICE OF YOUR FUNDS My name is Mr Godwin Emefiele the new Executive Governor Of The Central Bank of Nigeria (CBN) and the Executive Chairman of "E.C.D.R".I discovered your name and email address (in the Central Computer among the list of unpaid contractors, inheritance next of kin and lotto beneficiaries that was originated from Africa (Nigerian Government) Europe, Asia Plus Middle east, Americans) among the list of individuals and companies that your unpaid fund has been located to a suspense account. Your name appeared among the beneficiaries who will receive a payment of $15,000,000,00 Million and has been approved already for Payment. Last Monday two foreigners (Mr. David L Smith and Mr. John Shook) visited my office on your behalf and stated that You and Mr. Jesus Martinez Cardona sent them to come and represent you in your stead to inform me that they are your Representatives from United State, whom has been working with the CBN as a beneficiary since. We in this Bank do not understand why you sent these men to come and Collect your Funds on your behalf. If actually you want them to help you Collect your contract fund, at least you should have informed me as the new Executive Governor of this Bank. They actually tendered some Vital Documents which Proved that you actually sent them for the Collection of this Funds. Honestly, it really baffles me that you took such decision without my consent.Here are the Document which they tender to this Bank today: 1. LETTER OF ADMINISTRATION. 2. ORDER TO RELEASE. Actually, these Documents which they tendered to this Noble Bank is a clear Proof that you sent them to Collect this Funds for you.Finally, I told them to come back Next week Monday morning and they promised to come back. As the Governor of this Noble Bank, I was supposed to Release this Funds to them but I refused to do so because I wanted to hear from you first. Due to the Nature of my job, I will not want to make any mistake in Releasing this Funds to anyone except you whom is the Recognized Bonfire Beneficiary to this Funds. Kindly clarify us on this issue before we make this Payment to these foreigners whom came on your Behalf. In receipt of this confidential Letter, you are required to email this Bank immediately you receive this Confidential Letter. You are required to reconfirm to me your information bellow. 1, Your full name and your address 2, Your Telephone number or fax 3, Your Age and Marital status, 4, Your Occupation As soon as i receive these information?s, I will proceed with the Processing of your fund transfer to your account. Best Regards Sincerely . OFFICIALLY SIGNED. MR. GODWIN EMEFIELE. Executive Governor Central Bank of Nigeria Email: central.bnkofnigeria@aol.com SpamAssassin Report (spam score: 14.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.65 listed in list.dnswl.org] 2.7 DEAR_BENEFICIARY BODY: Dear Beneficiary: 2.4 HK_SCAM_N2 BODY: HK_SCAM_N2 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dikeefe240[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (dikeefe240[at]gmail.com) 0.0 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 1.7 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 1.2 FORM_FRAUD_5 Fill a form and many fraud phrases 2016-07-22 23:13:27MANPOWER RECRUITMENT FOR CANADAhttp://scammed.by/scam.php?id=193672 Dear Sir/Madam, We are authorized to recruit 200 unskilled workers to work in Canada on a two years contract. Please kindly let us know if you can supply the same workers as my clients requirement for the following positions.Fish Packers, Cleaners, Laborers,Supervisors,store manager,sales man/woman, Store keeper, Ground Maintenance, Gardener, Truck Drivers. Age from 20 to 55 years old is eligible to work, Primary Location: Montreal Quebec Canada. NOTE: No qualification is needed. TERMS AND CONDITIONS: 1. Accommodation - Provided. 2. Ticket -Provided. 3. Medical - Provided. 4. Transportation - Provided. 5. Working hours - 8a.m-4p.m [Mon-Sat] 6. Vacation - 28.5 days every year 7. Salary - Ca$20 per hourly 8. Contract - 2 years. Renewable 9. Extra time - Ca$22per hourly 10. Insurance and Pension - According to Quebec Labor laws. 11. Requirement 120 workers 12. job description Laborers 13. Skilled required Physically fit Other Benefits Family Status, group benefit and other fringe benefits. If you need more information regards to this recruitment please feel free to contact us at your most convenient time. Your Quick and Favorable Response would be highly appreciated. Best Regards, Mr. Harry Donald GHR Services 1652 Avenue Letourneux Montréal, QC H1V 2M7 Canada Phone: +1-(514)612-1631 Skype id: ghrservices SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ghrsrecruit[at]outlook.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-22 22:39:02Hihttp://scammed.by/scam.php?id=193671 PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMCBUcmFuc2l0aW9uYWwv L0VOIj4NCjxIVE1MPjxIRUFEPg0KPE1FVEEgaHR0cC1lcXVpdj1Db250ZW50LVR5cGUgY29udGVu dD0idGV4dC9odG1sOyBjaGFyc2V0PXV0Zi04Ij4NCjxNRVRBIGNvbnRlbnQ9Ik1TSFRNTCA2LjAw LjI5MDAuNTU4MyIgbmFtZT1HRU5FUkFUT1I+PC9IRUFEPg0KPEJPRFk+DQo8RElWIGNsYXNzPWFs bW9zdF9oYWxmX2NlbGwgY2xvc3VyZV91aWRfMmx2ejBwPSIxMzAiPjxTUEFOIGxhbmc9aXQgDQpj bG9zdXJlX3VpZF9yNHU5MWQ9IjEyOSIgQmM9InVuZGVmaW5lZCIgdmc9IjQiPjxTUEFOIGNsYXNz PWhwcyB0aXRsZT3ngrnlh7vlj6/mmL7npLrlhbbku5bnv7vor5EgDQpjbG9zdXJlX3VpZF9yNHU5 MWQ9IjEwNCI+PFNQQU4gbGFuZz1wdCBCYz0idW5kZWZpbmVkIiB2Zz0iNCIgDQpjbG9zdXJlX3Vp ZF9leGJpbTc9IjEzMCI+PFNQQU4gY2xhc3M9aHBzIHRpdGxlPeeCueWHu+WPr+aYvuekuuWFtuS7 lue/u+ivkSANCmNsb3N1cmVfdWlkX2V4YmltNz0iNDM3MiI+PFNQQU4gY2xhc3M9aHBzIHRpdGxl PeeCueWHu+WPr+aYvuekuuWFtuS7lue/u+ivkSANCmNsb3N1cmVfdWlkX2JrNTR6ND0iMjA0NTEi PjxTUEFOIGxhbmc9ZnIgQmM9InVuZGVmaW5lZCIgdmc9IjQiIA0KY2xvc3VyZV91aWRfaGR5eGRy PSIxOTkiPjxTUEFOIGNsYXNzPWhwcyB0aXRsZT3ngrnlh7vlj6/mmL7npLrlhbbku5bnv7vor5Eg DQpjbG9zdXJlX3VpZF9oZHl4ZHI9IjE3MCI+PFNQQU4gbGFuZz1lcyBCYz0idW5kZWZpbmVkIiB2 Zz0iNCIgDQpjbG9zdXJlX3VpZF9mZ3hxZj0iMTQzIj48U1BBTiBjbGFzcz1ocHMgdGl0bGU954K5 5Ye75Y+v5pi+56S65YW25LuW57+76K+RIA0KY2xvc3VyZV91aWRfZmd4cWY9IjEyMyI+PFNQQU4g Y2xhc3M9aHBzIHRpdGxlPeeCueWHu+WPr+aYvuekuuWFtuS7lue/u+ivkSANCmNsb3N1cmVfdWlk X3VzbTNvND0iMjk5NSI+PFNQQU4gY2xhc3M9aHBzIA0Kc3R5bGU9IldPUkQtU1BBQ0lORzogMHB4 OyBGT05UOiAxNnB4IGFyaWFsLCBzYW5zLXNlcmlmOyBURVhULVRSQU5TRk9STTogbm9uZTsgQ09M T1I6IHJnYig1MSw1MSw1MSk7IFRFWFQtSU5ERU5UOiAwcHg7IFdISVRFLVNQQUNFOiBub3JtYWw7 IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNDUsMjQ1LDI0 NSk7IFdJRE9XUzogMjsgT1JQSEFOUzogMjsgd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87 IHdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4Ij48Rk9OVCANCnN0eWxlPSJCQUNLR1JPVU5E LUNPTE9SOiAjZmZmZmZmIiBmYWNlPSJUaW1lcyBOZXcgUm9tYW4iIGNvbG9yPSMwMDAwMDA+PFNQ QU4gDQpzdHlsZT0iRElTUExBWTogaW5saW5lISBpbXBvcnRhbnQ7IEZMT0FUOiBub25lOyBXT1JE LVNQQUNJTkc6IDBweDsgRk9OVDogMTRweCBBcmlhbCwgSGVsdmV0aWNhOyBURVhULVRSQU5TRk9S TTogbm9uZTsgQ09MT1I6IHJnYigwLDAsMCk7IFRFWFQtSU5ERU5UOiAwcHg7IFdISVRFLVNQQUNF OiBub3JtYWw7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IHdlYmtpdC10ZXh0LXNpemUtYWRqdXN0 OiBhdXRvOyB3ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBweCI+aGk8L1NQQU4+PC9GT05UPjwv U1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NQQU4+PC9T UEFOPjwvU1BBTj48L1NQQU4+PC9ESVY+DQo8RElWIGNsYXNzPWFsbW9zdF9oYWxmX2NlbGwgY2xv c3VyZV91aWRfMmx2ejBwPSIxMzAiPjxTUEFOIGxhbmc9aXQgDQpjbG9zdXJlX3VpZF9yNHU5MWQ9 IjEyOSIgQmM9InVuZGVmaW5lZCIgdmc9IjQiPjxTUEFOIGNsYXNzPWhwcyB0aXRsZT3ngrnlh7vl j6/mmL7npLrlhbbku5bnv7vor5EgDQpjbG9zdXJlX3VpZF9yNHU5MWQ9IjEwNCI+PFNQQU4gbGFu Zz1wdCBCYz0idW5kZWZpbmVkIiB2Zz0iNCIgDQpjbG9zdXJlX3VpZF9leGJpbTc9IjEzMCI+PFNQ QU4gY2xhc3M9aHBzIHRpdGxlPeeCueWHu+WPr+aYvuekuuWFtuS7lue/u+ivkSANCmNsb3N1cmVf dWlkX2V4YmltNz0iNDM3MiI+PFNQQU4gY2xhc3M9aHBzIHRpdGxlPeeCueWHu+WPr+aYvuekuuWF tuS7lue/u+ivkSANCmNsb3N1cmVfdWlkX2JrNTR6ND0iMjA0NTEiPjxTUEFOIGxhbmc9ZnIgQmM9 InVuZGVmaW5lZCIgdmc9IjQiIA0KY2xvc3VyZV91aWRfaGR5eGRyPSIxOTkiPjxTUEFOIGNsYXNz PWhwcyB0aXRsZT3ngrnlh7vlj6/mmL7npLrlhbbku5bnv7vor5EgDQpjbG9zdXJlX3VpZF9oZHl4 ZHI9IjE3MCI+PFNQQU4gbGFuZz1lcyBCYz0idW5kZWZpbmVkIiB2Zz0iNCIgDQpjbG9zdXJlX3Vp ZF9mZ3hxZj0iMTQzIj48U1BBTiBjbGFzcz1ocHMgdGl0bGU954K55Ye75Y+v5pi+56S65YW25LuW 57+76K+RIA0KY2xvc3VyZV91aWRfZmd4cWY9IjEyMyI+PFNQQU4gY2xhc3M9aHBzIHRpdGxlPeeC ueWHu+WPr+aYvuekuuWFtuS7lue/u+ivkSANCmNsb3N1cmVfdWlkX3VzbTNvND0iMjk5NSI+PFNQ QU4gY2xhc3M9aHBzIA0Kc3R5bGU9IldPUkQtU1BBQ0lORzogMHB4OyBGT05UOiAxNnB4IGFyaWFs LCBzYW5zLXNlcmlmOyBURVhULVRSQU5TRk9STTogbm9uZTsgQ09MT1I6IHJnYig1MSw1MSw1MSk7 IFRFWFQtSU5ERU5UOiAwcHg7IFdISVRFLVNQQUNFOiBub3JtYWw7IExFVFRFUi1TUEFDSU5HOiBu b3JtYWw7IEJBQ0tHUk9VTkQtQ09MT1I6IHJnYigyNDUsMjQ1LDI0NSk7IFdJRE9XUzogMjsgT1JQ SEFOUzogMjsgd2Via2l0LXRleHQtc2l6ZS1hZGp1c3Q6IGF1dG87IHdlYmtpdC10ZXh0LXN0cm9r ZS13aWR0aDogMHB4Ij48Rk9OVCANCnN0eWxlPSJCQUNLR1JPVU5ELUNPTE9SOiAjZmZmZmZmIiBm YWNlPSJUaW1lcyBOZXcgUm9tYW4iIGNvbG9yPSMwMDAwMDA+PFNQQU4gDQpzdHlsZT0iRElTUExB WTogaW5saW5lISBpbXBvcnRhbnQ7IEZMT0FUOiBub25lOyBXT1JELVNQQUNJTkc6IDBweDsgRk9O VDogMTRweCBBcmlhbCwgSGVsdmV0aWNhOyBURVhULVRSQU5TRk9STTogbm9uZTsgQ09MT1I6IHJn YigwLDAsMCk7IFRFWFQtSU5ERU5UOiAwcHg7IFdISVRFLVNQQUNFOiBub3JtYWw7IExFVFRFUi1T UEFDSU5HOiBub3JtYWw7IHdlYmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyB3ZWJraXQtdGV4 dC1zdHJva2Utd2lkdGg6IDBweCI+dGhpcyANCmlzIGEgZ29vZCZuYnNwOyBjaGFuY2UgdG8gYnV5 IGdpZnQgZm9yIHlvdXIgDQpmYW1pbHk8L1NQQU4+PC9GT05UPjwvU1BBTj48L1NQQU4+PC9TUEFO PjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NQQU4+ PC9ESVY+DQo8RElWIGNsYXNzPWFsbW9zdF9oYWxmX2NlbGwgY2xvc3VyZV91aWRfMmx2ejBwPSIx MzAiPjxTUEFOIGxhbmc9aXQgDQpjbG9zdXJlX3VpZF9yNHU5MWQ9IjEyOSIgQmM9InVuZGVmaW5l ZCIgdmc9IjQiPjxTUEFOIGNsYXNzPWhwcyB0aXRsZT3ngrnlh7vlj6/mmL7npLrlhbbku5bnv7vo r5EgDQpjbG9zdXJlX3VpZF9yNHU5MWQ9IjEwNCI+PFNQQU4gbGFuZz1wdCBCYz0idW5kZWZpbmVk IiB2Zz0iNCIgDQpjbG9zdXJlX3VpZF9leGJpbTc9IjEzMCI+PFNQQU4gY2xhc3M9aHBzIHRpdGxl PeeCueWHu+WPr+aYvuekuuWFtuS7lue/u+ivkSANCmNsb3N1cmVfdWlkX2V4YmltNz0iNDM3MiI+ PFNQQU4gY2xhc3M9aHBzIHRpdGxlPeeCueWHu+WPr+aYvuekuuWFtuS7lue/u+ivkSANCmNsb3N1 cmVfdWlkX2JrNTR6ND0iMjA0NTEiPjxTUEFOIGxhbmc9ZnIgQmM9InVuZGVmaW5lZCIgdmc9IjQi IA0KY2xvc3VyZV91aWRfaGR5eGRyPSIxOTkiPjxTUEFOIGNsYXNzPWhwcyB0aXRsZT3ngrnlh7vl j6/mmL7npLrlhbbku5bnv7vor5EgDQpjbG9zdXJlX3VpZF9oZHl4ZHI9IjE3MCI+PFNQQU4gbGFu Zz1lcyBCYz0idW5kZWZpbmVkIiB2Zz0iNCIgDQpjbG9zdXJlX3VpZF9mZ3hxZj0iMTQzIj48U1BB TiBjbGFzcz1ocHMgdGl0bGU954K55Ye75Y+v5pi+56S65YW25LuW57+76K+RIA0KY2xvc3VyZV91 aWRfZmd4cWY9IjEyMyI+PFNQQU4gY2xhc3M9aHBzIHRpdGxlPeeCueWHu+WPr+aYvuekuuWFtuS7 lue/u+ivkSANCmNsb3N1cmVfdWlkX3VzbTNvND0iMjk5NSI+PFNQQU4gY2xhc3M9aHBzIA0Kc3R5 bGU9IldPUkQtU1BBQ0lORzogMHB4OyBGT05UOiAxNnB4IGFyaWFsLCBzYW5zLXNlcmlmOyBURVhU LVRSQU5TRk9STTogbm9uZTsgQ09MT1I6IHJnYig1MSw1MSw1MSk7IFRFWFQtSU5ERU5UOiAwcHg7 IFdISVRFLVNQQUNFOiBub3JtYWw7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IEJBQ0tHUk9VTkQt Q09MT1I6IHJnYigyNDUsMjQ1LDI0NSk7IFdJRE9XUzogMjsgT1JQSEFOUzogMjsgd2Via2l0LXRl eHQtc2l6ZS1hZGp1c3Q6IGF1dG87IHdlYmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4Ij48Rk9O VCANCnN0eWxlPSJCQUNLR1JPVU5ELUNPTE9SOiAjZmZmZmZmIiBmYWNlPSJUaW1lcyBOZXcgUm9t YW4iIGNvbG9yPSMwMDAwMDA+PFNQQU4gDQpzdHlsZT0iRElTUExBWTogaW5saW5lISBpbXBvcnRh bnQ7IEZMT0FUOiBub25lOyBXT1JELVNQQUNJTkc6IDBweDsgRk9OVDogMTRweCBBcmlhbCwgSGVs dmV0aWNhOyBURVhULVRSQU5TRk9STTogbm9uZTsgQ09MT1I6IHJnYigwLDAsMCk7IFRFWFQtSU5E RU5UOiAwcHg7IFdISVRFLVNQQUNFOiBub3JtYWw7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IHdl YmtpdC10ZXh0LXNpemUtYWRqdXN0OiBhdXRvOyB3ZWJraXQtdGV4dC1zdHJva2Utd2lkdGg6IDBw eCI+bGFwdG9wLHR2LGJyYW5kIA0KZ3VpdGFyLHdhdGNoLGJpa2UuLi4uZnJlZSBzaGlwcGluZyAN CjwvU1BBTj48L0ZPTlQ+PC9TUEFOPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj48L1NQQU4+ PC9TUEFOPjwvU1BBTj48L1NQQU4+PC9TUEFOPjwvU1BBTj48L0RJVj4NCjxESVYgY2xhc3M9YWxt b3N0X2hhbGZfY2VsbCBjbG9zdXJlX3VpZF8ybHZ6MHA9IjEzMCI+c2l0ZTombmJzcDsgc2xvb29u ZSZuYnNwOyANCi5jb208L0RJVj4NCjxESVYgY2xhc3M9YWxtb3N0X2hhbGZfY2VsbCBjbG9zdXJl X3VpZF8ybHZ6MHA9IjEzMCI+Jm5ic3A7PC9ESVY+PC9CT0RZPjwvSFRNTD4NCg= SpamAssassin Report (spam score: 3.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (brittany_olson[at]aol.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-07-22 22:02:44CRUDE OIL MARKETING http://scammed.by/scam.php?id=193670 Attention: Dear Friend, I wish to introduce you to this highly prospective crude oil sale and refining venture. I propose that we may become partners in a crude oil and Petroleum products sales project under the umbrella of the West Africa Petroleum and Oil Marketing Agency. In this project, we will register either your company as our partner or a joint company with the local Corporate Affairs Commission; re-assign an already allocated crude oil and Petroleum products sale license to the company and act as representative of the Petroleum Agency in selling of crude oil and Petroleum products to the end buyers. In the end of year review some of the companies, now could not actualize their dream in the project as a result of incapability. So their licence have been frozen and declared vaccant in this January. I will package you as the crude oil and Petroleum products sale partner beneficiary. We would re-assign the license earlier given to them now to your/our company. This will give our joint company the legal authority to act as crude oil and Petroleum products sales agent/representative. The assignment of the crude oil and Petroleum products sale and refining license allocation to our company gives us the privilege to operate as first lifters of crude oil and Petroleum products from the block. This attracts US$2.00 discount per barrel to the lifter on crude oil. The US$2.00 is our (lifter) entitlement from the local petroleum agency, also been able to get final buyers entitles us also to a US$1.00 discount from the discount given to the end buyer as "mandates". as we are going to be lifting 2 million barrels per month from the block, based on double registration and allocation for both your and our already existing company now as partners. US$2.00 discount from local petroleum agency sums up to US$4 million per month. And US$1.00 discount from the end buyer comes to US$2 million per month. Other petroleum products attracts USD $1 and 0.50 on each case as above. This totals to US$6 million gross coming to our group per transaction/each month from crude oil sales. On equity sharing ration, this proceeds known as commissions will be shared equally on equity between both of us at the end of every sales operation per month. This implies that each of us shall earn US$3 Million. From the local refinery, our company shall offer you a 50% share of the annual profit and 5%share holding if you may accept our partnership investment offer. What is so interesting about the project is that our both presence is not much needed, rather after the registration of your/our company partnership and obtaining the crude oil sales license, there are always buyers who have no licence and are ready to buy from those whose allocation are available for immediate sales. I will gladly appreciate your keen interest to be part of this venture. Get back to me urgently VIA abdul_umar@mail.ru / wacoppma@consultant.com Engr. AL- ABDULLAH UMAR W.Licencing and Proccurement Department WAOPMA Crude Oil and Petroleum Product Marketing Agency. SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.de] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (lion_elliote[at]yahoo.de) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.7 MONEY_FRAUD_3 Lots of money and several fraud phrases 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2016-07-22 21:46:34I am jennifer am interested to know more about youhttp://scammed.by/scam.php?id=193669 SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jenniferbabe17[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (jennifer babe ) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-22 20:47:21Demande de correspondance http://scammed.by/scam.php?id=193668 Demande de correspondance Je m'appelle Vesina Cecilia nationalité canadienne. J'ai 28 ans et célibataire. Une personne de plus comme ami est unebonne chose dans la vie d'un humain, car nul ne sait là ou se trouve son bonheur sauf en cherchant qu'il le trouvera.Tu dois te demandé ou j'ai eu ton adresse mais c'est grâceaux différentes recherches fait sur le net je te laisse mon mail: vesinacecilia@yahoo.ca Répond moi sur cette adresse pour plus de connaissance. SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (graziano.digge[at]tin.it) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.17 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-22 20:33:10RE: Timesharehttp://scammed.by/scam.php?id=193667 _____________________________________________ From: Austin Shaw Sent: Friday, July 22, 2016 10:25 AM Subject: Timeshare Timeshare. Is it still available for sale? Reply to chandrah78@gmail.com SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2016-07-22 19:28:12RE: Timesharehttp://scammed.by/scam.php?id=193665 _____________________________________________ From: Austin Shaw Sent: Friday, July 22, 2016 10:25 AM Subject: Timeshare Timeshare. Is it still available for sale? Reply to chandrah78@gmail.com SpamAssassin Report (spam score: -0.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2016-07-22 19:28:02reply as quick as possiblehttp://scammed.by/scam.php?id=193666 Dear Sir, My name is Mr. Stanly Hilson. I am the Chief Inspection Agent- United Nations Inspection Unit at John F. Kennedy International airport, New York- working hand in hand with Department of Homeland Security and U.S Customs and Border Protection. During our investigation, I discovered an abandoned shipment from a Diplomat from London, UK and when scanned it revealed an undisclosed sum of money in a metal trunk box weighing approximately 25kg each. The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect to avoid diversion by the shipping agent and also the Diplomat inability to pay for Non Inspection Fees. On my assumption, each of the boxes will contain about $3Million to $4Million each and the consignment is still left in the storage house till today. The consignment are two metal boxes with weight of about 25kg each (Internal dimension: W61 x H156 x D73 (cm). Effective capacity: 110 LBS.). Approximately, the details of the consignment including your name and address, the official document from United Nation office in London are tagged on the Metal Trunk boxes. PROVIDE YOUR NAME, PHONE NUMBER AND FULL HOME ADDRESS, TO CROSS CHECK IF IT CORRESPONDS WITH THE NAME AND ADDRESS ON THE CONSIGNMENT INCLUDING THE NAME OF NEAREST AIRPORT AROUND YOUR CITY AND OTHER DETAILS. You can send the required details to me by email for onward delivery. All communication must be held extremely confidential. I can get everything concluded within 5-6 hours upon your acceptance and proceed to your address for delivery if you assure me of sharing the content 30% for me / 70% with you on my arrival to your house. I want us to transact this business with you and share the money, since the shipper has abandoned it and disappeared. I will pay for the Non inspection fee and arrange for the boxes to be moved out of this airport to your address by myself. But I will share it 30% : 70% with you. Below is my direct telephone number. Call me as soon as you receive this mail and send me all the requested information to my email. Yours sincerely, Mr. Stanly Hilson, SpamAssassin Report (spam score: 0.9) pts rule name description ---- ---------------------- ------------------------------------------------2016-07-22 19:27:31FRESH CHEAP PRICES HURRY UPhttp://scammed.by/scam.php?id=193664 -- LIMITED TOOLS and PRICES ADDED HURRY UP Shells: 7$ ONLY ) cPanels: 10$ FRESH RDP: USA ADMIN RDP HOSTED - 30$ / USA USER RDP HACKED - 12$ SMTP INBOX Delivery 7$ / 13$ ONLY SMTP PACKS 10 Smtp 55$ WEBMAIL 12$ / 30$ Mailer 10$ Live Set-up Support Through teamviewer. We accept these payment methods: Bitcoin and PerfectMoney Visit http://www.unlimitedtools.pw right now and enjoy the best tools on the internet! SpamAssassin Report (spam score: 0.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: unlimitedtools.pw] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2016-07-22 19:01:11Re:http://scammed.by/scam.php?id=193663 PLEASE CONTACT ME THROUGH MY PRIVATE EMAIL ADDRESS misssamirakipkalya@yandex.com HELLO MY DEAR I am writing this mail to you with tears and sorrow from my heart. with due respect to humanity and trust, please I appeal to you to exercise a little patience and read this my mail carefully, I want you personally now for a long term investment assistance in your country and I feel quite safe dealing with you in this important issue having gone through your remarkable profile, honestly I am writing this mail to you with a heart full of pains, tears and sorrows, I will really like to have a good relationship with you and its among the special reasons why I decided to contact you due to the urgency of my situation, My names are Miss Samira Kipkalya Kones, 23yrs old female and I held from Kenya in East Africa. My father was the former Kenyan road Minister. Him and the Assistant Minister of Home Affairs Lorna Laboso had been on board the Cessna 210, which was heading to Kericho and crashed in a remote area called Kajong, in western Kenya. The plane crashed on the Tuesday 10th, June, 2008. You can read more about the crash through the below site: http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html After the burial of my father, my stepmother and uncle conspired and sold most of my father's property to an Italian business man which they shared the money and other things among themselves since then she had continue to hate anything that i do in the home and even until now my step mother refused me access to my share, they planned to take away all my late father's treasury and properties from me since the death of my Father. Luckily for me that faithful morning which I opened my father's briefcase and found some documents which he have used to deposit huge amount of money in one bank in Burkina Faso with my name as the next of kin then i decided I traveled to Burkina Faso to withdraw this money before my step mother will know that i found something so important and maybe take it back from me,i don't know why she hate me that much so I took all these documents with me and travel out of my country for my life then I run to the refugee camp where I am presently seeking asylum under the United Nations High Commission from the Refugee camp here in Ouagadougou, Republic of Burkina Faso. Later on after my arrival in the camp i arranged all the documents containing information's about the money which my late father had deposited to a bank in Burkina Faso here with my name as the next of kin,i went to the bank for my inherited fund but i wasn't allowed to withdraw from this money and I have try several times on my own to withdraw this money so that I can take care of myself and start a new life ease-where, but unfortunately for me like always the Bank Director whom I always met in person will always tell me that my late father's instructions/will to the bank is that the money will only be release to me when I am able to present a foreign trustee who will help me with the profitable investments with the money overseas or married which is why I am now in search of a honest and reliable person who will help me and stand as my trustee to this Bank so that the transfer of my money to a trustee bank account overseas will be done. I have chosen to contact you after my prayers and I believe that you will not betray the trust i have on you. Although, you may wonder why I am so soon revealing myself to you without knowing much about you, well the truth is that my mind convinced me to believe that you are the true and only person to help me now.More so, my father of blessed memory deposited the sum of $6.7M ( Six Million seven Hundred Thousand Dollars ) in ISLAMIC GROUP AFRICAN DEVELOPMENT BANK BURKINA FASO which he used my name as the next of kin. However, I shall forward you with the necessary documents on confirmation of your acceptance to assist me for the transfer and statement of the fund in your country. As you will help me in an investment and I will also complete my studies because I was in my 1st year in the university when i left my country for Burkina Faso, It is my intention to compensate you with 30% of the total money for your services and the balance will be mine which you will help me invest in a risk free business. As soon as I receive your positive response showing your interest I will put things into action immediately. In the light of the above. I will appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely. 1. Can you handle this transfer for me? 2. Can i trust you as a genuine friend? AM AWAITING YOUR URGENT AND POSITIVE RESPONSE, Please do keep this only to your self for now until the bank will transfer the fund. I plead to you not to disclose it till I come over because I am afraid of my wicked stepmother who has threatened to kill me and have the money alone, I thank God Today that am out from my country (KENYA) but now In (Burkina Faso) where my father deposited these money with my name as the next of Kin. I have all the documents for the claims. please reply me here misssamirakipkalya@yandex.com for a confidential discussions may be like that we can become best of friends in future sorry that i did not add my photo i will enclose it in my next mail and more about me when i hear from you okay i am now in the refugee camp. Kisses and warmest regards, Yours Sincerely, Miss Samira Kipkalya Kones. PLEASE CONTACT ME THROUGH MY PRIVATE EMAIL ADDRESS misssamirakipkalya@yandex.com SpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: aol.fr] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ljlglkf.dadsfsv[at]aol.fr) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-07-22 18:55:20Dear Beneficiary http://scammed.by/scam.php?id=193662 -- Dear Beneficiary, This is to bring you notice that the issuing bank has released your inheritance fund value(Us$2.500,000.00 Dollars)They converted the fund into ATM CARD,The A.T.M have been programmed by the issuing bank,note that the issuing bank has package the ATM with secret code and registered it with FEDERAL EXPRESS COMPANY to delivery to you,your ATM card number is (5428050011004432)and the Security pin code has been credited in your favor,your personal Identification number is 822.YOU HAVE TO FORWARD IT TO FEDEX COMPANY FOR IDENTIFICATION. Contact FEDEX COMPANY for the shipment. According to the approval of your ATM CARD by the manager of the issuing bank,the maximum amount sign for you to be withdrawing is sum of $7,000 usd only daily,till you withdraw all your total fund credit on your ATM account(Us$2.500,000.00 Dollars), FedEx Director Name Mr.Jackson Willie. E-mail address: fedexx.contactoffice(officalpresident@yahoo.co.id) Direct Office Telephone Numbers: +229-99-51-98-90 Provide them your full contact details as stated below: 1. Your full name................ 2. Contact Address.......... 3. Private telephone number................... 4. Sex/Age?.............. 5. Occupation?........... 6. Country Of Origin...... 7. Attached any of Your Identification Copy........ Your should pay $57 USD,to FedEx Company for the shipping charges. FedEx Company will contact you with the waybill tracking number immediately the ATM CARD is read to dispatch form FedEx Office to your country. Regards, Rtd. Rev. Dr. Solski Piotr. Contact FEDEX COMPANY for the shipment. SpamAssassin Report (spam score: ) pts rule name undefined2016-07-22 18:23:45 50 Walgreens Gift Cardhttp://scammed.by/scam.php?id=193661 Confirmation of Gift Delivery - Click Show Images SpamAssassin Report (spam score: 13.3) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [176.99.37.143 listed in zen.spamhaus2016-07-22 18:15:25Re:http://scammed.by/scam.php?id=193660 http://pleasure.drnickson.com/Tiffany_Colly Tiffany Colly SpamAssassin Report (spam score: 0.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.44 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 2016-07-22 17:41:31DEAR SIRhttp://scammed.by/scam.php?id=193657 Dear Sir, How are you and family? Hope well. Thanks God. Open attached file. Attachment content - ATM CARD WORLD PAYEMENT.pdf SpamAssassin Report (spam score: 3.3) pts rule name description ---- ---------------------- -------------------------------------------------- 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (westerutt[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.42 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-22 17:40:23FRESH CHEAP PRICES HURRY UPhttp://scammed.by/scam.php?id=193658 -- LIMITED TOOLS and PRICES ADDED HURRY UP Shells: 7$ ONLY ) cPanels: 10$ FRESH RDP: USA ADMIN RDP HOSTED - 30$ / USA USER RDP HACKED - 12$ SMTP INBOX Delivery 7$ / 13$ ONLY SMTP PACKS 10 Smtp 55$ WEBMAIL 12$ / 30$ Mailer 10$ Live Set-up Support Through teamviewer. We accept these payment methods: Bitcoin and PerfectMoney Visit http://www.unlimitedtools.pw right now and enjoy the best tools on the internet! SpamAssassin Report (spam score: 0.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.49 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: unlimitedtools.pw] 2016-07-22 17:35:21No subjecthttp://scammed.by/scam.php?id=193659 On Thursday, July 21, 2016 10:53 PM, Anthony Johnson wrote: Open the link to view message If you can't click above, then click here Anthony Johnson SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-22 17:34:33REhttp://scammed.by/scam.php?id=193656 On Thursday, July 21, 2016 11:23 PM, Mr.Frank Williams wrote: Hi,A late client who shares same last name as you died Intestate with an unclaimed asset , we want to present you as heir to the asset. reply for details Mr.Frank SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 NO_RELAYS Informational: message was not relayed via SMTP 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 1.8 MISSING_SUBJECT Missing Subject: header 2.3 EMPTY_MESSAGE Message appears to have no textual parts and no Subject: text 1.0 MISSING_FROM Missing From: header -0.0 NO_RECEIVED Informational: message has no Received headers 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers 2016-07-22 17:32:27I NEED YOUR HELPhttp://scammed.by/scam.php?id=193655 I need your help. I am writing this mail to you with heavy tears In my eyes and great  sorrow in my heart, My Name is Mrs Kura George and I am contacting  you from my country Tunisia I want to tell you this because I don't  have any other option than to tell you as I was touched to open up to  you, I married to Mr.George Brown who worked with Tunisia embassy in  Burkina Faso for nine years before he died in the year 2009.We were  married for eleven years without a child. He died after a brief illness that lasted for only five days. Since  his death I decided not to remarry, When my late husband was alive he  deposited the sum of US$ 8.5m (Eight Million Five hundred Thousand  Dollars) in a bank in Ouagadougou the capital city of Burkina Faso in  west Africa Presently this money is still in bank. He made this money  available for exportation of Gold from Burkina Faso mining. Recently, My Doctor told me that I would not last for the period of  seven months due to cancer problem. The one that disturbs me most is  my stroke sickness. Having known my condition I decided to hand you  over this money to take care of the less-privileged people, you will  utilize this money the way I am going to instruct here I want you to take 30 Percent of the total money for your personal use  While 70% of the money will go to charity, people in the street and  helping the orphanage. I grew up as an Orphan and I don't have any  body as my family member, just to end endeavor that the house of God  is maintained. Am doing this so that God will forgive my sins and  accept my soul because these sicknesses have suffered me so much. As soon as I receive your reply I shall give you the contact of the  bank in Burkina Faso and I will also instruct the Bank Manger to issue  you an authority letter that will prove you the present beneficiary of  the money in the bank that is if you assure me that you will act  accordingly as I Stated herein. Always reply to my alternative for security purposes (  kurageorge1@gmail.com ) Hoping to receive your reply: From Mrs Kura George SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (kurageorge1[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-07-22 16:58:50I am writing this mail to you with heavy tears In my eyes and great sorrow in my hearthttp://scammed.by/scam.php?id=193654 Dearest, I am writing this mail to you with heavy tears In my eyes and great sorrow in my heart, My Name is Mrs Anna Patrick. I am contacting you from my country home, I married to Mr Eric Patrick, who worked with Tunisia embassy in Cote D'Ivoire. For Nine years before he died in the year 2013. We were married for nine years and God blessed us with a son My husband died after a brief illness that lasted for only five days. Since His death I decided not to remarry, When my late husband was alive he deposited the sum of US$ 10.5m (Ten Million Five hundred Thousand Dollars) in a bank in Yamoussoukro the capital city of Cote D'Ivoire in west Africa Presently this money is still in bank. he made this money available for exportation of Gold from Cote d'Ivoire mining. Recently, My Doctor told me that I would not last for the period of time due to cancer problem. The one that disturbs me most is my stroke sickness. Having known my condition I decided to hand you over this money to take care of the less-privileged people, you will utilize this money the way I am going to instruct herein. I want you to take 30 Percent of the total money for your personal use While 70% of the money will go to charity, people in the street, helping the orphanage and the future of my only son also. As soon as I receive your reply I shall inform you all the necessary requirement you have to send to me so that I can go to the bank officially, present you as the actual person that I have directed to handle and manage this money on behalf of my son and I will also instruct the Bank Manger to issue you an authority letter that will prove you the present beneficiary of the money in the bank that is if you assure me that you will act accordingly. Regards From Mrs. Anna Patrick. SpamAssassin Report (spam score: 9.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (annapatric01[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (mrs anna patrick ) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 1.5 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.3 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-07-22 16:20:15Votre guide Investissez dans l’immobilier sans apport est disponiblehttp://scammed.by/scam.php?id=193653 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/PrIZzaKz1bJn9a-Fchf7qQ/90e6514a 2. http://links.so-reduc.com/u/chN/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/1c1dec2e [1]Réside-études Réside-études [2]Réalisez un placement immobilier rentable et sans risque. Recevez le Guide de l'Immobilier Locatif Meublé et les recommandations d'un conseiller spécialisé Réside-études [3]Simulation [4]Avantages [5]Réside-études (1) Dans le cadre des dispositions de la loi de finances en vigueur, selon la loi Censi-Bouvard, réduction d'impôts équivalente à 11% du montant HT de votre investissement immobilier plafonné à 300 000?, soit 3 666? par an pendant 9 ans. Cette économie d'impôts est applicable pour toute acquisition en 2016 d'un logement neuf dans une résidence avec services gérée par le Groupe Réside études. (2) Jusqu'à 4,25% HT/HT, taux proposé au 01/07/2016 selon les stocks disponibles. Revenus nets de charges d'entretien, selon les conditions du bail commercial proposé par le Groupe Réside études et ses filiales, hors impôts fonciers et taxe d'ordures ménagères, et dans le cadre de la Location Meublée Non Professionnelle (LMNP). Loyers garantis versés trimestriellement selon les conditions du bail commercial proposé par le Groupe Réside études et ses filiales. [uniqueId] References 1. http://links.so-reduc.com/c/chN/2Nd/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/0c4a554f 2. http://links.so-reduc.com/c/chN/2Nx/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/97ff413f 3. http://links.so-reduc.com/c/chN/2Nl/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/2e943774 4. http://links.so-reduc.com/c/chN/2NA/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/320dc281 5. http://links.so-reduc.com/c/chN/2NR/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/ad8bf1d6 Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/PrIZzaKz1bJn9a-Fchf7qQ/I/oMoR/1c1dec2e SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lookiday.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-22 15:59:19H Y P N O T H E R A P E U T E en cabinet en entreprise ou à domicilehttp://scammed.by/scam.php?id=193652 pour ne plus recevoir de mails de ma part, il vous suffit de randeacute;pondre andagrave; ce mail en mettantle mot STOP dans l'objet du mail SpamAssassin Report (spam score: 6.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 BAD_ENC_HEADER Message has bad MIME encoding in the header 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 2.6 FORGED_MUA_OIMO Forged mail pretending to be from MS Outlook IMO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2016-07-22 14:59:39