Scammed.by Scam email RSShttp://scammed.byLive feed of scam emailsSua Geladeira Retrô http://scammed.by/scam.php?id=212560 Mini Geladeira Retrô | Aquece e resfria - funciona no carro. http://www.rp2comercio.com.br/landing/mini-geladeira-retro/?utm_medium=emailandutm_source=dm_loja_geladeira_jan SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.50 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.50 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-17 01:53:16YOU HAVE RECEIVED 1 PRIVATE DOCUMENThttp://scammed.by/scam.php?id=212559 Someone has sent you a private document file containing confidential information via dropbox.com , to view your file click on or type the below web-link on your browser to view your dropbox document. http://x.co/dropbox2 Thank your for using dropbox to share files with friends The information contained in this email is legally privileged and confidential, and may contain proprietary and/or personal information. It is meant solely for the intended recipient. Access to this email by anyone else is unauthorized. If you are not the intended recipient, any processing of the email or the information contained therein (including disclosure, copying, distribution, storage) or any action taken or omitted in reliance on this, is prohibited and may be unlawful. SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.54 listed in dnsbl.sorbs.net] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [103.229.74.32 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.54 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-17 00:56:20Email Deactivation Alerthttp://scammed.by/scam.php?id=212558 | | | Dear User, We received a message from you requesting for your account termination, please ignore this message if the request was from you. Your account would be deleted from our system in the next 72 hrs. (Note: All mails in your inbox, spam, draft, and sent items would be deleted, and access to your account would be denied.) Click on the cancel request if the message wasn't from you. | Cancel request | Cancel the termination request to keep enjoying Yahoo! Yahoo! Inc. | SpamAssassin Report (spam score: 5.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (zieglerbuilders[at]yahoo.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.138.121.87 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2017-01-17 00:25:56Re:Payment noticehttp://scammed.by/scam.php?id=212557 Hello my dear, I strongly believe that this mail must get at you by God's grace, as I do not know you in person and not quite sure of your current tel/fax number for me to be sure, but I know how I manage to get this email address which I used to communicate you. However, I am sister Ms. Helen Kimberley and I am working with the nations Apex Bank; accounting unit/telex department Central Bank of Nigeria. My aim of writing is not to know you as I have no interest of knowing you and would not like to know you unless if needs be. But I am telling you this based on my believe as a person who does not like evil or cheating and would not like to be called for explanation as a result of this information I am giving to you. But why am telling you this based on my believe as person who does not like evil or cheating and would not like to be called for explanation as a result of this information I am giving to you below. As a straightforward person, I believe that any man/woman is my brother/sister according to my believe irrespective of where you must have come from, we are same human being. This information is as regards to your payment in Nigeria. Now as I am contacting you, payments are going on to those that are aware of this information because this information was not gazette to the public awareness. These exercises have started for sometime now but there are a lot of pranks some corrupt officials in the central bank that diverted your funds to a bank in Switzerland. From the information, the secretary of probe panel and verification on contract and next of kin matters and the chairman of the committee and some other officials summed up with to divert your funds. This information as a result of my recent departmental research and I called then to question but they tried to bribe me, but I refused because I am not a cheat. I have to inform you that your Funds interest at a tune of usd$14.1million was transferred into a Swiss account provided by a fake lawyer portrayed himself to be your lawyer. I must inform you that the officers involved are always in communication with you , so you should stop talking with them and do not tell them that you are waiting for the transfer. Since we have an evidence at hand, hereby advised you to contact the authorized (C.B.N) security and finance company in Abuja whom are in control of your payment and the approved lawyer attached to the security and finance company in the name of Mr. Luke Donald and explain everything to him as your file was sent to him on the 21st December 2016 and when contacting the lawyer quote your file reference number FR010-2017, he is the final stone that breaks the camels back. My advice to you based on this information is that you should boldly call Mr. Luke Donald the lawyer at the security and finance company on his direct email or telephone number. He is the person in charge of all the legal clearances for this on-going payment exercise and ask him that he should help you in making sure your fund is paid to you immediately and do the changes to move your funds to your original account and follow his directives. He might want to know how come you got his direct email, you can tell him anything (please, don't quote me) but insist that he should help you in making sure your payment is done, and for more clarification or to ensure him that you really knows what you are saying quote the following code no: FGN/PMQ/CBN-X342X1TW2017 under category 'C' i.e. your code (please this information is classified). I believe that at the end of the day, he will ask you to forward your payment information and bank co-ordinates to him for his processes as he will direct you properly on how to follow up for your fund to be made to you without further stress. If you contact him, I will know because he must contact my office for your information re-confirmation records. So go ahead and call him now and don't be afraid of him or anybody, any person apart from him is definitely a fraud. The Lawyer Contact: Name: Barrister Luke Donald Email: barr.donald@post.com Yours sincerely, Ms. Helen Kimberley Central Bank of Nigeria. SpamAssassin Report (spam score: 8.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.52 listed in dnsbl.sorbs.net] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: post.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 FAKE_REPLY_C FAKE_REPLY_C 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-16 23:39:07DEAR FRIENDhttp://scammed.by/scam.php?id=212556 DEAR FRIEND I am(MR.MUSA AHMED),With the business proposal deal of US(US$18mllion US Dollars) to transfer into your account, if you are interested get back to me for more detail.at my E-mail(mr.musa.ahmed014@gmail.com) Best Regard MR.MUSA AHMED SpamAssassin Report (spam score: 8.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: aol.fr] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mossa.ahmed3[at]aol.fr) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.170 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.170 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-16 23:36:44Sua Geladeira Retrô http://scammed.by/scam.php?id=212555 Mini Geladeira Retrô | Aquece e resfria - funciona no carro. http://www.rp2comercio.com.br/landing/mini-geladeira-retro/?utm_medium=emailandutm_source=dm_loja_geladeira_jan SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.176 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.176 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 23:17:48Mr Paul Opuruichehttp://scammed.by/scam.php?id=212553 Sir, I have read your mail together with your particulars as all is well noted, and it is very important you ensue and contact the paying Union Bank of Switzerland Headquarter, with bellow contact details for more directives on your funds transfer. Also make sure you reconfirm your direct telephone number and your Identification Card (ID) to the paying Switzerland Bank to avoid further delay. And always keep this office updated to enable us close your file here. Director Foreign Remittance Department Union Bank of Switzerland Contact: Officer in charged: Mr. Charles Colocino Email: Phone: + 41 44 209 9700 Thanks for your understanding. Have a nice day. Mr. Paul Opuruiche Director of Foreign Payment. First City Monument Bank of Nigeria (FCMBN) SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (springbanksolaayodele[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.195 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.195 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2017-01-16 22:58:12 ♦ Learn the TRUTH before it s too late http://scammed.by/scam.php?id=212554 PGh0bWw+Cgo8aGVhZD4KPHN0eWxlIHR5cGU9InRleHQvY3NzIj4KIzZDWE5ITkVGX2Jsa3d3 YnV4IHt0ZXh0LWFsaWduOmxlZnQ7Ly9hbmQgY29jYWluZS5BIFRoZSByZWNvcmRzIHJlbGVh c2VkIHRvIFlhaG9vIE5ld3Mgc2FmZXR5IHBsYW4gdGhyZWUgeWVhcnMgYWdvIGFmdGVyIGEg dHdpc3RlciBraWxsZWQgb24gdW50aWwgdGhlIENhbGlmb3JuaWEgcHJpbWFyeSBvbiBKdW5l IDcuIkkgZG9uJ3QgO30KPC9zdHlsZT4KPC9oZWFkPgoKPGJvZHk+Cgo8cCBzdHlsZT0idGV4 dC1hbGlnbjogY2VudGVyIj4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogc21hbGw7IGZvbnQt ZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmIj4KQ2hvb3NlIHRvIGNoZWNr IG91dCBpbWFnZXMgdG8gZmVhdHVyZSBhbGwgbmV3cy4KPC9zcGFuPjxicj4KPGEgaHJlZj0i aHR0cDovL3d3dy5wb3dlcmZ1bG1vcmUud2luL2hpbC9oMm8vMjM3LzExODczMy8xMTUxOCI+ CjxpbWcgc3JjPSJodHRwOi8vd3d3LnBvd2VyZnVsbW9yZS53aW4vMWM4YzkzYTJiNTk0ZmUy YzZjZGNmMDE0NzAwMl9mYTRmN2Q1OC0wMTAxMDEwYzAwNGMvVi8iIHN0eWxlPSJib3JkZXIt d2lkdGg6IDBweCIgPjwvYT48L3A+CjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7IGZv bnQtc2l6ZTogbGFyZ2UiPgo8c3Ryb25nPlBSPEVRRD48L0VRRD5PVEVDVCBZT1VSPEVRRD48 L0VRRD5TPEVRRD48L0VRRD5FTEYgRlJPTSBDUjxFUUQ+PC9FUUQ+SU08RVFEPjwvRVFEPklO QUxTLCBQUkU8RVFEPjwvRVFEPkRBVDxFUUQ+PC9FUUQ+T1JTLCBMSUE8RVFEPjwvRVFEPlJT ITxicj48YSBocmVmPSJodHRwOi8vd3d3LnBvd2VyZnVsbW9yZS53aW4vMWM4ZWVkMmU0NDM0 ZmUyYzZjZGNmMDE0NmMwMl9mYTRmN2Q1OC0wMTAxMDEwYzAwNGMvQy8iPklmIDxFUUQ+PC9F UUQ+eW91IHdhPEVRRD48L0VRRD5udCB0byBsZWE8RVFEPjwvRVFEPnJuIHRoZSBUPEVRRD48 L0VRRD5SVVRILCB0aGVuIDxicj5DbGk8RVFEPjwvRVFEPmNrIEhlPEVRRD48L0VRRD5yZSB0 byBTZWE8RVFEPjwvRVFEPnJjaC48L3N0cm9uZz48L2E+PC9wPgo8cCBzdHlsZT0idGV4dC1h bGlnbjogY2VudGVyIj4KPGEgaHJlZj0iaHR0cDovL3d3dy5wb3dlcmZ1bG1vcmUud2luLzFj OGVlZDJlNDQzNGZlMmM2Y2RjZjAxNDZjMDJfZmE0ZjdkNTgtMDEwMTAxMGMwMDRjL0MvIj4K PGltZyBzcmM9Imh0dHA6Ly93d3cucG93ZXJmdWxtb3JlLndpbi8xYzhhYzVkOTdlMTRmZTJj NmNkY2YwMTQ3MTAyX2ZhNGY3ZDU4LTAxMDEwMTBjMDA0Yy9WLyIgc3R5bGU9ImJvcmRlci13 aWR0aDogMHB4IiA+PC9hPjwvcD4KPHA+PGJyPjwvcD4KCjwvYm9keT4KCjwvaHRtbD4K SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.52 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [93.76.154.248 listed in zen.spamhaus.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.52 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 22:58:11 ♦ Learn the TRUTH before it s too late http://scammed.by/scam.php?id=212552 PGh0bWw+Cgo8aGVhZD4KPHN0eWxlIHR5cGU9InRleHQvY3NzIj4KIzZDWE5ITkVGX2Jsa3d3 YnV4IHt0ZXh0LWFsaWduOmxlZnQ7Ly9hbmQgY29jYWluZS5BIFRoZSByZWNvcmRzIHJlbGVh c2VkIHRvIFlhaG9vIE5ld3Mgc2FmZXR5IHBsYW4gdGhyZWUgeWVhcnMgYWdvIGFmdGVyIGEg dHdpc3RlciBraWxsZWQgb24gdW50aWwgdGhlIENhbGlmb3JuaWEgcHJpbWFyeSBvbiBKdW5l IDcuIkkgZG9uJ3QgO30KPC9zdHlsZT4KPC9oZWFkPgoKPGJvZHk+Cgo8cCBzdHlsZT0idGV4 dC1hbGlnbjogY2VudGVyIj4KPHNwYW4gc3R5bGU9ImZvbnQtc2l6ZTogc21hbGw7IGZvbnQt ZmFtaWx5OiBBcmlhbCwgSGVsdmV0aWNhLCBzYW5zLXNlcmlmIj4KQ2hvb3NlIHRvIGNoZWNr IG91dCBpbWFnZXMgdG8gZmVhdHVyZSBhbGwgbmV3cy4KPC9zcGFuPjxicj4KPGEgaHJlZj0i aHR0cDovL3d3dy5wb3dlcmZ1bG1vcmUud2luL2hpbC9oMm8vMjM3LzExODczMy8xMTUxOCI+ CjxpbWcgc3JjPSJodHRwOi8vd3d3LnBvd2VyZnVsbW9yZS53aW4vMWM4YzkzYTJiNTk0ZmUy YzZjZGNmMDE0NzAwMl9mYTRmN2Q1OC0wMTAxMDEwYzAwNGMvVi8iIHN0eWxlPSJib3JkZXIt d2lkdGg6IDBweCIgPjwvYT48L3A+CjxwIHN0eWxlPSJ0ZXh0LWFsaWduOiBjZW50ZXI7IGZv bnQtc2l6ZTogbGFyZ2UiPgo8c3Ryb25nPlBSPEVRRD48L0VRRD5PVEVDVCBZT1VSPEVRRD48 L0VRRD5TPEVRRD48L0VRRD5FTEYgRlJPTSBDUjxFUUQ+PC9FUUQ+SU08RVFEPjwvRVFEPklO QUxTLCBQUkU8RVFEPjwvRVFEPkRBVDxFUUQ+PC9FUUQ+T1JTLCBMSUE8RVFEPjwvRVFEPlJT ITxicj48YSBocmVmPSJodHRwOi8vd3d3LnBvd2VyZnVsbW9yZS53aW4vMWM4ZWVkMmU0NDM0 ZmUyYzZjZGNmMDE0NmMwMl9mYTRmN2Q1OC0wMTAxMDEwYzAwNGMvQy8iPklmIDxFUUQ+PC9F UUQ+eW91IHdhPEVRRD48L0VRRD5udCB0byBsZWE8RVFEPjwvRVFEPnJuIHRoZSBUPEVRRD48 L0VRRD5SVVRILCB0aGVuIDxicj5DbGk8RVFEPjwvRVFEPmNrIEhlPEVRRD48L0VRRD5yZSB0 byBTZWE8RVFEPjwvRVFEPnJjaC48L3N0cm9uZz48L2E+PC9wPgo8cCBzdHlsZT0idGV4dC1h bGlnbjogY2VudGVyIj4KPGEgaHJlZj0iaHR0cDovL3d3dy5wb3dlcmZ1bG1vcmUud2luLzFj OGVlZDJlNDQzNGZlMmM2Y2RjZjAxNDZjMDJfZmE0ZjdkNTgtMDEwMTAxMGMwMDRjL0MvIj4K PGltZyBzcmM9Imh0dHA6Ly93d3cucG93ZXJmdWxtb3JlLndpbi8xYzhhYzVkOTdlMTRmZTJj NmNkY2YwMTQ3MTAyX2ZhNGY3ZDU4LTAxMDEwMTBjMDA0Yy9WLyIgc3R5bGU9ImJvcmRlci13 aWR0aDogMHB4IiA+PC9hPjwvcD4KPHA+PGJyPjwvcD4KCjwvYm9keT4KCjwvaHRtbD4K SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [93.76.154.248 listed in zen.spamhaus.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.52 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 22:58:09Re:unlimited SMTP tools inbox guaranteehttp://scammed.by/scam.php?id=212551 V2hvbGUgc2V0IG1haWxpbmcgdG9vbHMgaG90IHNlbGxpbmcgbm93LCBwbGVhc2UgYWRkIFNreXBl IElEOiBMSlNBTklUQVJZMTk5OCBmb3IgcHJvZmVzc2lvbmFsIGFkdmljZSENCiANClBhY2thZ2Ug MS0tLS11bmxpbWl0ZWQgU01UUCBhY2NvdW50OiA5OVVTRC9wZXIgbW9udGgNCipkZWxpdmVyIHVu bGltaXRlZCBlbWFpbCB2b2x1bWUNCippbmJveCBndWFyYW50ZWUsIGFzIFJETlMsIFNQRiwgREtJ TSwgRE1BUkMgYWxsIGltcGxlbWVudGVkDQoqU01UUCBsYXN0IGNvbXBsZXRlbHkgb25lIG1vbnRo IGd1YXJhbnRlZQ0KKnBhY2thZ2UgMSBpbmNsdWRlIGVtYWlsIGFkZHJlc3MsIHVzZXJuYW1lLCBw YXNzd29yZCBhbmQgc210cCBzZXJ2ZXIsIHNob3VsZCB3b3JrIHdpdGggVHVyYm8gTWFpbGVyL0FN Uy9TZW5kIEJsYXN0ZXIgDQpQYWNrYWdlIDItLS0tdW5saW1pdGVkIHdlYi1iYXNlZCBTTVRQOiAx NTVVU0QvcGVyIG1vbnRoDQoqZGVsaXZlciB1bmxpbWl0ZWQgZW1haWwgdm9sdW1lDQoqaW5ib3gg Z3VhcmFudGVlLCBhcyBSRE5TLCBTUEYsIERLSU0sIERNQVJDIGFsbCBpbXBsZW1lbnRlZA0KKiBT TVRQIGxhc3QgY29tcGxldGVseSBvbmUgbW9udGggZ3VhcmFudGVlDQoqUG93ZXJmdWwgZW1haWwg Y2FtcGFpZ24gc3RhdGlzdGljcyBmdW5jdGlvbiBwcm92aWRlLCBjbGllbnQgY2FuIGNoZWNrIGVt YWlsIG9wZW4gcmF0ZS9ib3VuY2UgcmF0ZS93aGljaCBlbWFpbCB3YXMgb3BlbmVkIGFuZCBldGPi gKYNCipUaGlzIHBhY2thZ2UgY2xpZW50IG9ubHkgbmVlZCBsb2dpbiB3ZWJzaXRlIGFuZCBpbXBv cnQgZW1haWwgbGlzdCBhbmQgYWxsIGVtYWlsIGNhbXBhaWduIG9wZXJhdGlvbnMgZmluaXNoIG9u IHdlYnNpdGUgKFR1cmJvIG1haWxlci9BTVMvU2VuZCBibGFzdGVyIGFuZCBSRFAgYWxsIG5vdCBu ZWVkKQ0KUGFja2FnZSAzLS0tLXVubGltaXRlZCBXZWJtYWlsOiAxMzVVU0QvcGVyIG1vbnRoDQoq ZGVsaXZlciB1bmxpbWl0ZWQgZW1haWwgdm9sdW1lIGFsc28gQkNDMg0KKmluYm94IGd1YXJhbnRl ZSwgYXMgUkROUyxTUEYsREtJTSxETUFSQyBhbGwgaW1wbGVtZW50ZWQNCipTTVRQIGxhc3QgY29t cGxldGVseSBvbmUgbW9udGggZ3VhcmFudGVlDQoqUm91bmQgY3ViZSB3ZWJtYWlsIGxhdGVzdCB2 ZXJzaW9uIGluc3RhbGxlZA0KUGFja2FnZSA0LS0tLUJ1bGxldHByb29mIFJEUDogMzVVU0QvcGVy IG1vbnRoDQoqQWRtaW5pc3RyYXRvciBSRFANCiogQnVsbGV0cHJvb2YgUkRQIGhvc3QvIGFueSBi ZWhhdmlvciB3aWxsIG5ldmVyIHNodXQgZG93bg0KKlVTQS9Ib25nIEtvbmcvR2VybWFueS9OZXRo ZXJsYW5kcy9SdXNzaWEvUm9tYW5pYSBSRFAgYXZhaWFibGUNClBhY2thZ2UgNS0tRW1haWwgTGVh ZHMgRXh0cmFjdG9yOiAxNTBVU0QgKGxpZmV0aW1lIHVzYWdlKQ0KKldvcmxkIGJlc3QgZW1haWwg ZXh0cmFjdG9yL05PMQ0KKkNhbiBjaG9vc2UgYW55IGNvdW50cnkgYW5kIGV4dHJhY3QgdGhhdCBj b3VudHJ5IGVtYWlsIGxlYWRzDQoqUG93ZXIgZXh0cmFjdCBhYmlsaXR5IHVwIHRvIDUwMDAgZW1h aWxzL3BlciBob3VyDQoqb25saW5lIHVwZGF0ZSB0byBsYXRlc3QgdmVyc2lvbiBhbnl0aW1lDQpQ YWNrYWdlIDYtLS0tRW1haWwgdmVyaWZpZXI6IDEwMFVTRCAobGlmZXRpbWUgdXNhZ2UpDQoqV29y bGQgYmVzdCBlbWFpbCB2ZXJpZmllci9OTzENCipFbGltaW5hdGUgdGhlIGludmFsaWQgZW1haWwg bGVhZHMgZnJvbSB5b3VyIGRhdGFiYXNlLCBtYWtlIHlvdXIgZW1haWwgY2FtcGFpZ24gYWNoaWV2 ZSBiZXN0IHBlcmZvcm1hbmNlDQoqUG93ZXJmdWwgdmVyaWZ5IGFiaWxpdHkgdXAgdG8gMTAwMDAg ZW1haWxzL3BlciBob3VyDQoqb25saW5lIHVwZGF0ZSB0byBsYXRlc3QgdmVyc2lvbiBhbnl0aW1l DQpQYWNrYWdlIDctLS0tQnVzaW5lc3MgTGVhZHM6IDM1VVNEIGZvciBlYWNoIDEwMGsgbGVhZHMN CipVU0EvRXVyb3BlIChlYWNoIGNvdW50cnkpL0FmcmljYS9Tb3V0aCBBbWVyaWMvQXNpYS9BdXN0 cmFsaWEvQ2FuYWRhIGZyZXNoIGJ1c2luZXNzIGxlYWRzIGF2YWlhYmxlDQoqQWxsIGVtYWlsIGxl YWRzIHVwZGF0ZWQgbW9udGhseQ0KKkFsbCBsZWFkcyBjb2xsZWN0IGZyb20gaW50ZXJuYXRpb25h bCBmYWlycyBmcm9tIGFsbCBvdmVyIHRoZSB3b3JsZA0KIA0KTGl2ZSBTZXQtdXAgc3VwcG9ydCB0 aHJvdWdoIHRlYW0gdmlld2VyDQpXZSBhY2NlcHQgcGF5bWVudCBtZXRob2RzOiBQYXlQYWwvUGVy ZmVjdCBNb25leS9Ta3JpbGwvV2VzdGVybiBVbmlvbi9Nb25leSBHcmFtL0JhbmsgVFQNCiANCkRJ R0lUQUwgT05MSU5FIE1BUktFVElORyBJTkMuDQpFbWFpbDo3Mjg1NTY5NjlAcXEuY29tDQpTa3lw ZTogTEpTQU5JVEFSWTE5OTgNCiA SpamAssassin Report (spam score: 6.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.49 listed in dnsbl.sorbs.net] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [104.145.231.178 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.49 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ebusiness-marketings.info] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ebusiness-marketings.info] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ebusiness-marketings.info] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-16 22:48:28CONTACT WESTERN UNION DIRECTOR FOR YOUR TRANSFERhttp://scammed.by/scam.php?id=212550 SEND MONEY WORLD WIDE FROM THE DESK OF WESTERN UNION®CASH TRANSFER OFFICE ADDRESS N0 85655 PAPERBARK,CARER RANEE CAREE, TURBOCHARGE, PARK, ROAD COTONOU BENIN ATTENTION DEAR BENEFICIARY, I KNEW THAT THIS OFFICIAL MESSAGE WILL GOING TO SURPRISED YOU AS YOU NEVER RECEIVER BEFORE BECAUSE THE PRESIDENT OF BENIN HAVE ORDERING BY WESTERN UNION TO KEEP ON SENDING YOUR COMPENSATION PAYMENT OF THREE MILLION FIVE HUNDRED THOUSAND UNITED STATE DOLLARS VIA WESTERN UNION URGENT TRANSFER, AS THE BEST AND EASY WAY TO TRANSFER YOUR MONEY FAST, THE WESTERN UNION REMITTING OFFICE HERE IN BENIN WANT TO LET YOU KNOW THAT WE HAVE SENT YOUR FULL COMPENSATION PAYMENT OF $3.5MILLION USD TO YOU THROUGH WESTERN UNION TRANSFER, YOU WILL BE RECEIVING $5'000 SD PER DAY UNTIL YOUR TOTAL AMOUNT OF YOUR FUND IS COMPLETELY TRANSFERRING TO YOU, WE HAVE SEND THE FIRST PAYMENT TO YOU MTCN759-6274-297 SO KINDLY CONTACT OUR DIRECTOR OF FOREIGN REMITTANCE DEPARTMENT CHRISTIAN JOHN AND ASK HIM TO GIVE YOU THE WESTERN UNION PAYMENT INFORMATION SO THAT YOU CAN BE ABLE TO PICK YOUR FIRST PAYMENT OF $5'000 DOLLARS AT ANY NEAREST WESTERN UNION CENTER OF YOUR CHOICE IN YOUR COUNTRY, I WANT YOU TO CONTACT WESTERN UNION DIRECTOR HIS EMAIL ADDRESS IS (westernunioncashtransfer753@yahoo.com) AND CONTACT HIM WITH YOUR FULL INFORMATION SO THAT YOUR MONEY WILL BE REMITTING TO YOU THROUGH WESTERN UNION TRANSFER WITH THIS BELOW YOUR NAME___________ YOUR HOME ADDRESS_______ YOUR COUNTY/CITY___________ YOUR AGE/SEX_____________ DIRECT PHONE NUMBER_______ ID COPY_______ OCCUPATION_______ YOUR FUND AMOUNT DEPOSITED IN WESTERN UNION IS THREE MILLION FIVE HUNDRED THOUSAND UNITED STATE DOLLARS REMEMBER TO INDICATE THE REGISTRATION CODE OF EB8053 WHEN EMAIL HIM, ALSO HE WILL BE SENDING YOUR MONEY RIGHT, LET ME KNOW ONCE YOU RECEIVE ALL YOUR MONEY FROM WESTERN UNION DIRECTOR CHRISTIAN JOHN REMAIN BLESS YOURS SINCERELY MRS ANGELINE JOHNSON GENERAL SECRETARY OFFICE SpamAssassin Report (spam score: 17.4) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [197.234.219.19 listed in zen.spamhaus.org] 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.50 listed in dnsbl.sorbs.net] 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.19 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.50 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.0 LOTTO_DEPT Claims Department 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-16 21:25:33I AM RATHER SPEECHLESS AT THE MOMENThttp://scammed.by/scam.php?id=212549 IMF WORLD REGULATORY OFFICE INTERNATIONAL FUNDS REGULATORY AUTHORITY INTER-CONTINENTAL DEBT RECONCILIATION DEPT. FROM THE DESK OF: HONORABLE REV. MIKE DADA. DIRECTOR ATTENTION:PROVISION OF AFFIDAVIT OF CLAIM CERTIFICATE FOR LEGAL COVER/ PROTECTION OF US$15.5M IN YOUR FAVOR. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, I HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. BE REST ASSURED AND GUARANTEED OF 100% SURE THAT IMMEDIATELY YOU SEND THE REQUIRED FEE OF $200.00 USD, WE WILL IMMEDIATELY TRANSFER YOUR FUND AND IMMEDIATELY GIVE YOU THE ACCESS CODE TO HAVE FULL ACCESS TO YOUR FUND. ALSO HAVE IT IN MIND THAT THE $200.00 USD IS REFUNDABLE UPON THE COMPLETION OF THE TRANSFER AND AFTER YOU HAVE SEND THE FEE PAYMENT OF $200.00 USD, YOU ARE ENTITLE TO IMMEDIATELY RECEIVE YOUR SAID APPROVED FUND WITH THIS OFFICE AND NO ADDITIONAL FEE WILL BE REQUIRED OF YOU. SO PROCEED IMMEDIATELY AND COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE. I AM RATHER SPEECHLESS AT THE MOMENT AS THE ANTICIPATION OF THIS LONG AWAITED MOMENT IS ABOUT TO ARRIVE. PERSONALLY, I WOULD ADVISE YOU TO GO AHEAD AND CONCLUDE THE REMITTANCE OF YOUR PAYMENT CONSIDERING YOU HAVE COME A LONG WAY PURSUING TO YOUR PAYMENT. DRAGGING UNNECESSARY ATTENTIONS AT THIS MOMENT WILL DO US NO GOOD RATHER THAN HARM AND DAMAGE. YOU CANNOT AFFORD TO LOOSE YOUR FUND ESPECIALLY WHEN THE FEE IS NOTHING COMPARING TO YOUR APPROVED OVER DUE PAYMENT WITH THIS OFFICE THE INTERNATIONAL MONETARY FUND (IMF), SO I WILL ADVICE YOU TO PROCEED AND COMPLETE THE TRANSFER OF YOUR SAID FUND BECAUSE RIGHT NOW I DON'T KNOW WHAT ELSE TO SAY AS YOU KNOW THAT I AM ONLY A WORKER AT THIS OFFICE AND I WORK ACCORDING TO THERE DIRECTIVES. NOW LISTEN AND LISTEN VERY GOOD, I HAVE PROMISE YOU THAT I AM GOING TO HELP YOU GET THE TRANSFER COMPLETED INTO YOUR BANK ACCOUNT WHICH I FULLY KNOWS THAT I CAN DO EXACTLY WHAT I HAVE PROMISED YOU BUT IF YOU FEEL YOU DON'T TRUST ME THEN LETS FORGET ABOUT EVERYTHING, SO INVOLVING A THIRD PARTY WILL DO US KNOW GOOD RATHER THAN ATTRACTING MORE AND MORE ATTENTIONS TO YOUR BUSINESS TRANSACTION AND YOUR PRIVATE MONEY. I AM HAPPY THAT YOU HAVE EXPRESSED YOUR THOUGHT DUE TO YOUR PAST EXPERIENCE WITH THE NONE OFFICIAL OFFICERS OF THIS OUR GREAT COUNTRY AND ALSO WHAT YOU HAVE BEEN HEARING, WHICH I PROMISE YOU THAT YOU WILL NOT EXPERIENCE SUCH A THING IN YOUR LIFE AGAIN OR IN THIS PRESENT TRANSACTION. BUT MY DEAR, DO NOT BE DECEIVED BY SUCH THOUGHT THIS TIME BECAUSE THEY WILL NOT HELP YOU FOR GOOD, I MUST LET YOU KNOW THAT IT IS AGAINST MY DOCTRINE AND RELIGION AS A CHRISTIAN TO STEAL, GOD WILL BEAR ME WITNESS THAT I HAVE NEVER HAD THAT THOUGH OF EVIL FOR YOU, I HAVE NEVER EVEN IMAGINE OF LYING TO YOU, LET ME PERISH FOR EVER IN THE BOTTOMLESS PITT OF HELL, IF I AM HERE TO DECEIVE YOU. I KNOW VERY WELL THAT YOU MAY HAVE HAD OF THE ROUGH TRIALS AND TRIBULATION GOING ON IN THIS PRESENT WORLD AND I MUST TELL YOU THAT TRIBULATION AND TRIAL WILL ONLY LAST FOR A WHILE, BUT JOY COMES IN THE MORNING. IF YOU HAVE FAITH LIKE A MUSTER SEED, YOUR GOOD DREAMS WILL DEFINITELY BECOME REALITY. GOD WILL DO IT FOR YOU AND I, THEREFORE, ACCEPT AND CLAIM YOUR BLESSINGS NOW. I WISH TO LET YOU KNOW THAT IF I LIE TO YOU, I HAVE COMMITTED SIN AGAINST GOD ALMIGHTY, AGAINST THE HOLY SPIRIT, AND AGAINST YOU AS A HUMAN. AS THE BIBLE SAYS ?NO SINNER WILL GO UNPUNISHED, SO WHAT DOES IT PROFIT ME TO ENJOY TODAY AND SUFFER TILL THE END OF MY LIFE, ALSO SUFFER PUNISHMENTS FROM OUR CREATOR WHOM WE ALL SHALL ANSWER TO AND GIVE ACCOUNT OF HOW WE LIVED OUR LIVES HERE ON EARTH. BY THE WAY I URGE YOU TO GO ON YOUR KNEELS TONIGHT AND PRAY ASKING GOD TO SHOW YOU THIS DEAL AND THE POSSIBLE OUTCOME OF IT. THEN GO TO BED. I AM VERY SURE THAT THE TRUE GOD WHOM YOU AND I ARE SERVING WILL REVEAL THE OUTCOME TO YOU. ONCE YOU REPLACE YOUR NEGATIVE THOUGHTS WITH POSITIVE ONES, YOU WILL START HAVING POSITIVE RESULTS IN THIS DEAL, I AM ONLY DOING THIS BECAUSE I FULLY KNOW THAT THIS IS FOR REAL AND I WILL GET SOMETHING OUT OF IT FOR MY WORK WELL DONE ONCE YOU RECEIVE THE SAID FUNDS IN YOUR BANK ACCOUNT AND START MAKING WITHDRAWALS. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, WE HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. YOUR EMAIL HAS BEEN RECEIVED AND THE CONTENT WELL NOTED. YOU WILL HAVE TO MAKE SURE THAT YOU COMPLETE YOUR FUND TRANSFER TODAY, SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THE FEDERAL GOVERNMENT OF NIGERIA, PROCEED IMMEDIATELY AND SEND THE NEEDED FEE OF US$200.00 TO ENABLE US COMPLETE YOUR FUND TRANSFER TODAY. NOTE THAT ALL ARRANGEMENTS HAS BEEN COMPLETED FOR THE IMMEDIATE TRANSFER OF THE SAID FUNDS INTO YOUR BANK ACCOUNT WITH IMMEDIATE EFFECT UPON THE RECEIPT OF THE REQUIRED FEE TODAY. SO DO GET BACK TO ME AS SOON AS POSSIBLE. NOW LISTEN VERY GOOD, I AM NOT HERE TO PLAY OR TO BE WASTING YOUR TIME OR MINE IF THIS TRANSACTION IS NOT FOR REAL AND THE ONLY THING WHY I AM FIGHTING AND WORKING HARD TO TRANSFER YOUR SAID APPROVED FUNDS INTO YOUR BANK ACCOUNT IS BECAUSE ONCE YOU ARE ABLE TO RECEIVE IT AND START MAKING WITHDRAWAL FROM YOUR ACCOUNT, YOU WILL IMMEDIATELY REGAIN YOUR FINANCIAL FREEDOM AND HAVE ENOUGH MONEY TO LIVE ON AND ESTABLISH A GOOD BUSINESS FOR YOURSELF AND YOUR FAMILY, THEN YOU WILL COMPENSATE ME FOR MY JOB WELL DONE AND FOR ME BEEN A REVEREND FATHER OF THE HOLLY CATHOLIC CHURCH, I HAVE SWEAR TO MY GOD THAT I WILL NOT LIE BEFORE HIM, SO GOD IN HEAVEN KNOWS THAT I AM NOT A LIAR, I AM ONLY WORKING FOR YOU AND I MUST FOLLOW THE RIGHT PROCEDURES. BE GUARANTEED AND ASSURED THAT YOUR APPROVED FUNDS WILL BE TRANSFERRED INTO YOUR PROVIDED BANK ACCOUNT UPON THE RECEIPT CONFIRMATION OF THE SAID FUNDS WITHIN THE NEXT 7 WORKING HOURS AS SOON AS YOU ARE ABLE TO COMPLY WITH THE PAYMENT DIRECTIVES, AS THAT IS THE ONLY THING DELAYING YOU NOT TO RECEIVE YOUR SAID FUNDS AT THE MOMENT. HOW EVER; NOTE THAT EVERY NECESSARY ARRANGEMENT HAS BEEN CONCLUDED FOR THE IMMEDIATE TRANSFER OF YOUR SAID FUNDS WITHIN THE NEXT 7HRS RECEIPT CONFIRM OF THE STATED FEE, THUS, THE SAID CHARGES IS TO COMPLETE THE TRANSFER OF YOUR SAID FUNDS INTO YOUR SAID BANK ACCOUNT, ALSO NOTE THAT THIS IS NOT THE MAKING OF THIS INTERNATIONAL MONETARY FUND (IMF) RATHER, A STRINGENT MEASURE IMPOSED BY INTERNATIONAL MONETARY TASK FORCE TO TRACK DOWN ILLEGAL MONEY LAUNDRY ACTIVISTS AND TERRORIST SPONSORS. ASSUMING THERE IS NO BOND ON THE FUND, ALL WE COULD HAVE DONE IS TO SUBTRACT THE CHARGES FROM THE APPROVED AMOUNT AND MAKE THINGS EASIER FOR YOU. BUT BECAUSE THE FUND WAS COMPLETELY BONDED FOR SECURITY REASONS, THERE IS NO WAY WE CAN DEDUCT OR ADD TO IT WHEN FUND IS BONDED FOR SECURITY REASONS, SO SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE, YOU HAVE TO ACT ACCORDINGLY TO ENABLE US WORK FOR YOU IMMEDIATELY. THIS LETTER IS OUR 100% BOND UNCONDITIONAL GUARANTEE TO YOU, AND FORMS A LITERALLY DEED FOR THIS PAYMENT, IT ALSO FORMS AN INTEGRAL PART OF ALL OUR CONFIRMATIONS / GUARANTEE COMMITTED TO YOU IN RESPECT OF THIS MATTER. FOR OUR INVOLVEMENT IN THIS ARRANGEMENT, THIS IS A 'DEED OF UNDERSTANDING? BINDING ON THIS PAYMENT APPROVED IN YOUR FAVOR. FINALLY, WE UNCONDITIONALLY AND IRREVOCABLY GUARANTEE TO YOU THAT LESS THAN 7 HOURS CONFIRMATION RECEIPT OF THE ABOVE STATED FEES OF $200.00 USD, I SHALL GLADLY RELEASE YOUR APPROVED PAYMENT INTO YOUR AUTHORIZED BANK ACCOUNT WITHOUT ANY FURTHER DELAY. RECEIVERS NAME: CHINOYEREM LILIAN RECEIVERS ADDRESS: PLOT 143, AHMADU BELLO WAY, VICTORIA ISLAND, 23401, LAGOS. COUNTRY: NIGERIA SENDERS NAME: SENDERS ADDRESS: AMOUNT: $200.00 USD M.T.C.N NUMBER: TEXT QUESTION: IN GOD TEXT ANSWER: WE TRUST WE WANT YOU TO KNOW THAT WE ARE INDEED VERY VERY SORRY FOR ANY INCONVENIENCES ANY DELAY THIS MUST HAVE CAUSED YOU IN HAVING YOUR FUND PAID OUT TO YOU LONG BEFORE NOW. CONFIRM THE RECEIPT OF THIS E-MAIL BY YOU IMMEDIATELY AND BE REST ASSURED THAT YOU WILL BE SMILING TO YOUR BANK ONCE YOU COMPLY WITH THE ABOVE DIRECTIVES NOW. NOW YOUR NEW PAYMENT REFERENCE NO.-35460021, ALLOCATION NO: 674632 PASSWORD NO: 339331, PIN CODE NO: 55674 AND YOUR CERTIFICATE OF MERIT PAYMENT NO: 103, CBN RELEASED CODE NO: 0763; IMMEDIATE TELEX CONFIRMATION NO: -1114433; SECRET CODE NO: XXTN013, HAVING RECEIVED THESE VITAL PAYMENT NUMBERS, YOU ARE QUALIFIED NOW TO RECEIVED AND CONFIRM YOUR PAYMENT IMMEDIATELY WITHIN THE NEXT 7HRS FROM THE HELP OF THIS HONORABLE OFFICE, FEDERAL GOVERNMENT OF NIGERIA IMMEDIATELY WE RECEIVED THE REQUIRED FEE. YOUR URGENT RESPONSE TO THIS E-MAIL NOW WILL GO A LONG WAY IN HELPING US ENSURE YOUR PAYMENT IS RELEASED TO YOU WITHIN 7 HOURS OF YOU ACTING AS INSTRUCTED YOU NOW. RESPOND BACK IMMEDIATELY. HONORABLE REV. MIKE DADA. DIRECTOR INTER-CONTINENTAL DEBT RECONCILIATION DEPT. INTERNATIONAL MONETARY FUND (IMF) FOR MORE INFORMATION, PLEASE KINDLY CALL ME IMMEDIATELY USING: (0092348027127674 OR +2348027127674) SpamAssassin Report (spam score: 20.0) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [211.237.136.24 listed in bb.barracudacentral.org] 2.3 FIN_FREE BODY: Freedom of a financial nature 0.9 URG_BIZ BODY: Contains urgent matter 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [197.211.57.128 listed in zen.spamhaus.org] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [211.237.136.24 listed in psbl.surriel.com] 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-16 20:47:09Hello Friend http://scammed.by/scam.php?id=212547 Hello Friend, How are you today? I got your contact from an Online Global Business Marketing network. My name is Frank Williams, Principal Secretary and Director of Operations of the South Sudan Ad-hoc Committee for the Assignment of Oil Block and Crude Oil Sales Licenses. My office works directory under the Ministry of Petroleum, Mining and Industry with a correspondence sales liaison office here in London United Kingdom. I have some good business opportunities which I know would interest you if I can take little of your time to discuss the available opportunities with you. I await your response for further details. Frank Williams SpamAssassin Report (spam score: 13.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.179 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.179 listed in dnsbl.sorbs.net] 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [173.160.2.5 listed in dnsbl.sorbs.net] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 NSL_RCVD_HELO_USER Received from HELO User -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 2017-01-16 20:41:57TO EXACTLY THE OWNER OF THIS EMAIL http://scammed.by/scam.php?id=212548 FROM DR. U.C JOHNSON(EXECUTIVE CHAIRMAN EFCC ECONOMIC  AND FINANCIAL CRIMES COMMISSION No. 15 A, Awolowo Road, Lagos 101233 Motto: No Body is Above the Law. TO EXACTLY THE OWNER OF THIS EMAIL. I am sick and tired of this constant problem with the FBI and IRS concerning your outstanding fund release of which I have being fighting tooth and nails to make sure you receive this fund but you have been thinking that I am there to swindle you. I told you earlier that I was suppose to travel to South Africa last MONTH for a meeting with other top Government officials but because of this transfer matter of yours, I decided to defer my trip till next week. Right now, I will advice you follow my last and final instructions because the bank have agreed to make the transfer today and tomorrow morning to you. before 24HOURS,  I made the bank understand that you will not be able to come up with the fees they required of you due to financial problems and others. I also made them understand that you have paid scores of fees to various individuals concerning this issue,so my final conclusion with the bank was that they will make the transfer tomorrow without the clearance certificate fee but since you have paid for the insurance fee, you're only advice to secure your fund from being tempered by the FBI/ OR IRS by obtaining an Anti-Terrorist Certificate which will serve you as the clearance certificate but more cheaper and easier to obtain. This certificate will cost you just $64.57  therefore, I will advice you send the $64.57 today so I can obtain Anti-Terrorist Certificate tomorrow morning so you can receive your fund before 3.00P.M tomorrow. Choose the payment mode from this options; 1) by online banking transfer into your account; 2) By Atm card delivery; 3) By cash payment delivery to your address; Let me know your choice and forward the fees $64.57 include the needful information to suite your option. Finally, hope you know I have tried my best so far in this issue so I will advice you compensate me with something nice as soon as you receive this fund tomorrow. Payment instruction below to send the $64.57 via Western Union or Money Gram Money Transfer; RECIEVERS NAME :EMMA EGO COUNTRY :  Benin Republic CITY :  Cotonou QUESTION :  01 ANSWER :  02 AMOUNT------$64.57.Only MTCN Or Reference No#:_______ Note: Those scores of fraudsters have been using my name and that other top Government Officials in swindling most fund beneficiaries. I use this medium to inform you that any mail that do not come with our reference code: EFCC/NG/74- A0807777HJ/NG . One more time be warned and careful the type of e-mail you reply. I am waiting for your e-mail. Best Regards, Dr.U.C JOHNSON, Chairman, Economic and Financial Crimes Commission ( EFCC ).    SpamAssassin Report (spam score: 9.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (officeservice906[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.50 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.50 listed in dnsbl.sorbs.net] 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.138.89.209 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all2017-01-16 20:40:27account will be limitedhttp://scammed.by/scam.php?id=212546 ---------------------------------------------------------------------- We need your help ---------------------------------------------------------------------- Dear Custmar, We emailed you a little while ago to ask for your help resolving an issue with your PayPal account. Your account is still temporarily limited because we haven't heard from you. We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible. What's the problem? We noticed some unusual activity on the credit card linked to your PayPal account. Case ID Number: PP-004-637-643-468 How you can help It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account or latest transactions. To help us with this and to see what you can and can't do with your account until the issue is resolved, log in to your account and go to the Resolution Center. Sincerely, PayPal ---------------------------------------------------------------------- Help: https://www.paypal.com/il/cgi-bin/helpweb?cmd=_help Security Center: https://www.paypal.com/il/security Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page. Copyright © 1990-2017 PayPal Inc. All rights reserved. Consumer advisory: PayPal Pte Ltd, the Holder of the PayPal? payment service stored value facility, does not require the approval of the Monetary Authority of Singapore. Consumers (users) are advised to read the terms and conditions: https://www.paypal.com/il/sg/cgi-bin/webscr?cmd=p/gen/ua/ua-outside carefully. PayPal Email ID  PP638 - 5306ab7a7153b SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: 96.lt] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [31.220.104.108 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.0 XM_PHPMAILER_FORGED Apparently forged header 2017-01-16 19:38:53account will be limitedhttp://scammed.by/scam.php?id=212545 ---------------------------------------------------------------------- We need your help ---------------------------------------------------------------------- Dear Custmar, We emailed you a little while ago to ask for your help resolving an issue with your PayPal account. Your account is still temporarily limited because we haven't heard from you. We understand it may be frustrating not to have full access to your PayPal account. We want to work with you to get your account back to normal as quickly as possible. What's the problem? We noticed some unusual activity on the credit card linked to your PayPal account. Case ID Number: PP-004-637-643-468 How you can help It's usually pretty easy to take care of things like this. Most of the time, we just need a little more information about your account or latest transactions. To help us with this and to see what you can and can't do with your account until the issue is resolved, log in to your account and go to the Resolution Center. Sincerely, PayPal ---------------------------------------------------------------------- Help: https://www.paypal.com/il/cgi-bin/helpweb?cmd=_help Security Center: https://www.paypal.com/il/security Please do not reply to this email because we are not monitoring this inbox. To get in touch with us, log in to your account and click "Contact Us" at the bottom of any page. Copyright © 1990-2017 PayPal Inc. All rights reserved. Consumer advisory: PayPal Pte Ltd, the Holder of the PayPal? payment service stored value facility, does not require the approval of the Monetary Authority of Singapore. Consumers (users) are advised to read the terms and conditions: https://www.paypal.com/il/sg/cgi-bin/webscr?cmd=p/gen/ua/ua-outside carefully. PayPal Email ID  PP638 - 5306ab7a7153b SpamAssassin Report (spam score: 3.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [31.220.104.108 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.182 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: 96.lt] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.0 XM_PHPMAILER_FORGED Apparently forged header 2017-01-16 19:38:52Golf Match suréquipée dès 280€ par moishttp://scammed.by/scam.php?id=212544 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour ne plus recevoir les offres de CBIO, [2]cliquez-ici References 1. http://links.fhlop52.com/v/i5M/uGeaAalaZDc1lgsYwWFncQ/cec1001a 2. http://links.fhlop52.com/u/i5M/uGeaAalaZDc1lgsYwWFncQ/a/62NR/c9c28b40 [1]VOLKSWAGEN [2]Golf [3]Profitez vite d'une offre exceptionnelle sur la Golf MATCH© suréquipée et connectée. RADIONAVIGATION [4]Organisez votre trajet depuis votre domicile et envoyez l?itinéraire sur le système de navigation 'Discover Media?. La Golf devient votre alliée pour trouver les meilleurs points d?intérêt et vous aide à optimiser tous vos déplacements grâces aux services en ligne Car-Net ?Guide and Inform?. CAR-NET 'APP-CONNECT' [5]Connectez votre Smartphone à la Golf MATCH© par câble USB : les applications compatibles s?affichent sur l?écran tactile, vous pouvez maintenant les contrôler à partir de l?écran ou par commande vocale. Appelez, dictez ou écoutez vos SMS sans manipuler votre téléphone (Compatibilité avec les systèmes Apple CarPlay®, Google Android Auto® , Mirror Link®). PROJECTEURS BI-XENON DIRECTIONNELS [6]Les projecteurs bi-Xénon directionnels optimisent l?éclairage dans les courbes et les changements de direction. Les feux de jour à LED renforcent le design élégant de la Golf MATCH©. REGULATEUR DE VITESSE ADAPTATIF 'ACC' [7]L?ACC détecte le véhicule qui vous précède et adapte votre vitesse et la distance de sécurité de manière automatique. Exemple : le véhicule de devant roule plus lentement, le système va ralentir la Golf et la maintenir à l?allure du véhicule qui précède. Une fois que ce dernier quitte la voie de circulation, la Golf accélère pour atteindre la vitesse que vous avez fixée au départ. 'FRONT ASSIST' [8]Ce système de surveillance périphérique surveille la distance par rapport aux véhicules qui vous précèdent et détecte tout rapprochement critique. En cas de risque de collision et dans les limites du système, le 'Front Assist' peut réduire la gravité de l?accident ou, dans le meilleur des cas l?éviter. Il prépare en outre le véhicule à un éventuel freinage d?urgence par le conducteur. [9]PROFITEZ DE L'OFFRE [10]RESTEZ CONNECTÉ AVEC VOLKSWAGEN SUIVEZ-NOUS SUR [11]Facebook [12]twitter [13]youtube [14]instagram [15]linkedin (1) Contrat Abrégio Style : Location avec Option d?Achat ou Location Longue Durée pendant 37 mois et 30 000 km pour une Golf MATCH 1.2 TSI 110 BVM6 3p neuve au prix spécial pour ce financement de : 21 663 ? (tarif au 29/09/2016 mis à jour le 01/01/2017 remise de 2 500 ? déduite du prix catalogue avec garantie 2 ans + 1 an de garantie additionnelle obligatoire au prix de 223 ? incluse dans le prix du véhicule et Entretien obligatoire : coût mensuel inclus dans les loyers : 7 ?). Option d?achat finale : 10 702? ou reprise du véhicule suivant engagement sous conditions de votre Distributeur. Assurance facultative Décès-Incapacité Perte d?Emploi souscrite auprès de Cardif Assurance Vie, SA au capital de 688 507 760 ?, n° 732 028 154 RCS Paris et Cardif Assurances Risques Divers, SA au capital de 14 784 000 ?, n° 308 896 547 RCS Paris ? Siège social : 1, bd Haussmann - 75009 Paris. Cotisation de 35,74 ? par mois. Ce montant s?ajoute à la mensualité en cas de souscription. Montant total dû au titre de l?assurance : 1 323 ?. Le coût de l?assurance varie en fonction de l?âge de l?emprunteur. Offre réservée aux particuliers en France métropolitaine, non cumulable avec toute autre offre en cours, dans la limite des stocks disponibles, valable pour toute commande entre le 01/01/2017 et le 31/01/2017 chez les distributeurs présentant ce financement et sous réserve d?acceptation du dossier par Volkswagen Bank GmbH. - SARL de droit allemand ? Capital 318 279 200? - Succursale France : Bâtiment Ellipse, 15 avenue de la Demi-Lune, 95700 Roissy-en-France ? RCS Pontoise 451 618 904. Cycle mixte (l/100 km) : 4,9. Rejets de CO2 (g/km) : 114. [uniqueId] References Visible links 1. http://links.fhlop52.com/c/i5M/ijY/uGeaAalaZDc1lgsYwWFncQ/a/62NR/60a4f6f1 2. http://links.fhlop52.com/c/i5M/ije/uGeaAalaZDc1lgsYwWFncQ/a/62NR/70686a6d 3. http://links.fhlop52.com/c/i5M/ijf/uGeaAalaZDc1lgsYwWFncQ/a/62NR/aa529d4c 4. http://links.fhlop52.com/c/i5M/iju/uGeaAalaZDc1lgsYwWFncQ/a/62NR/35d4ae1b 5. http://links.fhlop52.com/c/i5M/ij0/uGeaAalaZDc1lgsYwWFncQ/a/62NR/4d68a6a0 6. http://links.fhlop52.com/c/i5M/isy/uGeaAalaZDc1lgsYwWFncQ/a/62NR/6e96c5ce 7. http://links.fhlop52.com/c/i5M/isF/uGeaAalaZDc1lgsYwWFncQ/a/62NR/a460ae73 8. http://links.fhlop52.com/c/i5M/isc/uGeaAalaZDc1lgsYwWFncQ/a/62NR/9a2739bd 9. http://links.fhlop52.com/c/i5M/ism/uGeaAalaZDc1lgsYwWFncQ/a/62NR/d7fdb385 10. http://links.fhlop52.com/c/i5M/isb/uGeaAalaZDc1lgsYwWFncQ/a/62NR/d3ce94a2 11. http://links.fhlop52.com/c/i5M/iso/uGeaAalaZDc1lgsYwWFncQ/a/62NR/442ee9bb 12. http://links.fhlop52.com/c/i5M/isL/uGeaAalaZDc1lgsYwWFncQ/a/62NR/156d9676 13. http://links.fhlop52.com/c/i5M/isi/uGeaAalaZDc1lgsYwWFncQ/a/62NR/2b2a01b8 14. http://links.fhlop52.com/c/i5M/is7/uGeaAalaZDc1lgsYwWFncQ/a/62NR/eece586f 15. http://links.fhlop52.com/c/i5M/is2/uGeaAalaZDc1lgsYwWFncQ/a/62NR/5bf0474d Hidden links: 17. http://links.fhlop52.com/c/i5M/isX/uGeaAalaZDc1lgsYwWFncQ/a/62NR/ac06e03d 18. http://links.fhlop52.com/c/i5M/is6/uGeaAalaZDc1lgsYwWFncQ/a/62NR/a727f570 19. http://links.fhlop52.com/c/i5M/isk/uGeaAalaZDc1lgsYwWFncQ/a/62NR/b8f95b86 20. http://links.fhlop52.com/c/i5M/isH/uGeaAalaZDc1lgsYwWFncQ/a/62NR/e9ba244b 21. http://links.fhlop52.com/c/i5M/isE/uGeaAalaZDc1lgsYwWFncQ/a/62NR/7e5a5952 22. http://links.fhlop52.com/c/i5M/isr/uGeaAalaZDc1lgsYwWFncQ/a/62NR/967250d4 23. http://links.fhlop52.com/c/i5M/isa/uGeaAalaZDc1lgsYwWFncQ/a/62NR/09f46383 24. http://links.fhlop52.com/c/i5M/isn/uGeaAalaZDc1lgsYwWFncQ/a/62NR/0dc744a4 25. http://links.fhlop52.com/c/i5M/isj/uGeaAalaZDc1lgsYwWFncQ/a/62NR/f110f699 Vous recevez ce mail car vous êtes abonné à la base de Daily-Reduc. La base est déclarée à la CNIL sous le n°1865878 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour ne plus recevoir les offres de CBIO, [1]cliquez-ici. References 1. http://links.fhlop52.com/u/i5M/uGeaAalaZDc1lgsYwWFncQ/a/62NR/c9c28b40 SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.176 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: manewsbio.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 19:25:18YOUR VALID ATM CARD http://scammed.by/scam.php?id=212543 Dear friend, I am very happy to inform you about my success in getting that fund.Now, I want you to contact my secretary on the information below:- Name:- Eric John, Ask him to send to you the total sum of($2.500.000.00) US Dollars Loaded in a Valid ATM CARD, which I kept for your compensation. So contact him immediately on his e-mail:( ericjohn047@gmail.com ) and send him the below information to enable him deliver your ATM CARD to you. 1.YOUR FULL NAME:________________ 2.YOUR ADDRESS:________________ 3.TELEPHONE NUMBER:_________ 4.YOUR AGE:___________ 5.OCCUPATION:______ Regards, Dr. Miles Miller. SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.51 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mappenootiche[at]alice.it) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [82.57.200.119 listed in dnsbl.sorbs.net] 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 2017-01-16 18:58:15No subjecthttp://scammed.by/scam.php?id=212542 I am Maureen Hinckley and my foundation is donating $550,000USD to you.Contact us via my email at (maurhinck2@gmail.com) for further details. Best Regards, Maureen Hinckley Copyright ©2017? The Maureen Hinckley Foundation? All Rights Reserved SpamAssassin Report (spam score: 4.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.42 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.42 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: singnet.com.sg] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (poonsm[at]singnet.com.sg) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY 2017-01-16 18:54:58MR JAMES B COMEY EXECUTIVE DIRECTOR FBI http://scammed.by/scam.php?id=212541 RECOVERED HERE IN THE JOHN F. KENNEDY, INTERNATIONAL AIRPORT NEW YORK UNITED STATES BY THE HELP OF THE US DEPARTMENT OF HOMELAND SECURITY FROM WHERE THIS TRUNKS BOX HAS BEEN STORE BY A UNITED NATIONS DIPLOMAT WHO IS CONFIRM DEAD IN AN AUTO CAR ACCIDENT, YOUR NAME, PHONE NUMBER, AND EMAIL ADDRESS WAS ATTACH TO THE BOX AS THE OWNER/BENEFICIARY. BUT THIS MAIL IS TO NOTIFY YOU ABOUT THE LATEST DEVELOPMENT CONCERNING YOUR CONSIGNMENT BOX THAT WAS HANDLE OVER TO ME AFTER THE MEETING HELD BETWEEN ME AND THE UNITED NATIONS SECRETARY-GENERAL BAN KI-MOON, AND SOME OF THE TOP BOARD MANAGEMENT STAFF OF UNITED NATIONS HEADQUARTERS NEW YORK, DUE TO THE DELAY FOR YOU NOT HAVE RECEIVED YOUR BOX FOR LONG TIME NOW. IN ORDER WORDS YOUR BOX IS WITH ME NOW AND I SHALL BE COMING TO YOUR HOME ADDRESS FOR AN OFFICIAL MEETING WITH THE US AMBASSADOR TO YOUR COUNTRY BY THIS WEEK AND I WILL BE COMING ALONG WITH YOUR CONSIGNMENT BOX WITH ME BUT THIS TIME I WILL NOT GO THROUGH CUSTOMS IN YOUR AIRPORT BECAUSE AS THE DIRECTOR OF FEDERAL BUREAU OF INVESTIGATION (FBI) TO UNITED STATES, I AM A US GOVERNMENT FBI AGENT AND I HAVE THE POWER TO GO THROUGH CUSTOMS OKAY. AS SOON AS I ARRIVE IN THE AIRPORT IN YOUR COUNTRY I WILL GIVE YOU A PHONE CALL, SO THAT YOU CAN GIVE ME THE DIRECTION TO YOUR HOME ADDRESS IN ORDER FOR ME TO MEET YOU FACE TO FACE AND HANDLE OVER YOUR BOX TO YOU BEFORE PROCEEDING TO THE MEETING SO I WANT YOU TO RE-CONFIRM TO ME THE BELOW INFORMATION $B!G (BS FOR PROPER UNDERSTANDING OKAY. BENEFICIARY NAME $B!D!D!D!D!D!D (B. ADDRESS $B!D!D!D!D!D!D!D!D (B.. TEL PHONE $B!D!D!D!D!D!D!D!D (B OCCUPATION $B!D!D!D!D!D!D!D (B.. COUNTRY $B!D!D!D!D!D!D!D (B. SEX $B!D!D!D!D!D!D!D!D!D (B I HAVE TAKEN THIS ASSIGNMENT UPON MYSELF BECAUSE I UNDERSTAND THAT YOU HAVE REALLY PAID SO MUCH ON COST OF DELIVERING, BUT NOTHING WAS RECEIVED BY YOU. I MUST SAY THAT YOU ARE A VERY LUCKY PERSON I MYSELF WILL BE COMING TO DELIVER YOUR BOX TO YOU AT YOUR DOORSTEP AND THERE IS NOTHING ANYONE IN THIS WORLD CAN DO ABOUT IT. YOUR TRUNK BOX OF CONSIGNMENT OF ($486MILLION) MUST BE REGISTERED AS FEDERAL BUREAU OF INVESTIGATION PACKAGES FOR ME TO DEFEAT ALL ODDS AND COST OF REGISTERING OF YOUR TRUNK BOX OF CONSIGNMENT IS $386USD ONLY. BECAUSE THE UNITED NATIONS BOARD MANAGEMENT HAVE ALREADY PAID FOR THE DELIVERING CHARGES, INSURANCE COVERAGE FEE.BUT THEY DID PAY THE $386USD FOR REGISTRATION OF YOUR BOXES .THE $386USD FEE MUST BE PAID IN THE NEXT 48 HOURS VIA WESTERN UNION TO OUR UNITED KINGDOM REGIONAL FEDERAL BUREAU OF INVESTIGATION AGENT CASHIER IN LONDON, BECAUSE YOUR BOX ORIGINATED FROM UNITED KINGDOM, SO THAT ALL NECESSARILY ARRANGEMENT CAN BE MADE BEFORE TIME WILL BE AGAINST US. Here is the receive information MONEY GRAM RIA TRANSFER OR Walmart to Walmart. Receiver's Name: Debbie Lynn David Location: = = = = Elysian minnesota Country: = = = = Usa Test Question: = = = = In God? Answer: = = = = Trust Amount: = = = = $386 MTCN Reference Number AS SOON AS YOU SEND THE FEE MAKE SURE YOU SEND ME THE PAYMENT INFORMATION SO THAT I CAN SEND TO YOU MY FLIGHT SCHEDULE AND I EXPECT YOU TO COMPLY BEFORE THEN SO THAT THE DELIVERY CAN BE COMPLETED. IF YOU DO NOT COMPLY, THEN IT WILL NOT BE MY FAULT FOR NOT RECEIVING YOUR BOX BESIDES, MY DEAR, THIS IS THE OPPORTUNITY FOR YOU AND HAVE TO COMPLY AND YOUR BOXES SHALL BE DELIVER TO YOUR DESIGNATED ADDRESS. BUT REMEMBER THAT AFTER (2 DAYS) YOU DID NOT MAKE THE PAYMENT THEN I WILL DIVERT YOUR FUNDS TO US GOVERNMENT FUND, TO AVOID PROBLEM OR WE WILL CANCEL THE DELIVERING TO YOU. ONCE YOU SEND THE MONEY, TRY TO NOTIFY ME WITH THE MTCN FOR CONFIRMATION AND FOR IMMEDIATE ACTION ON THE HANDLING OVER OF YOUR FUND TO YOU. ALSO YOU ARE TO FORWARD TO US ANY MAIL THAT YOU HAVE BEEN RECEIVING FROM PEOPLE FOR PROPER VERIFICATION AND INVESTIGATION BEFORE YOU DEAL WITH THEM OKAY. UPON YOUR RESPONSE, I WILL ATTACH TO YOU MY NECESSARY I.D CARD AND PASSPORT FOR YOUR PERUSAL ONLY, AND A PHOTO OF YOUR CONSIGNMENT BOX ON CASH. PLEASE TREAT THIS AS MATTER OF URGENCY. FAITHFULLY YOURS, MR JAMES B COMEY EXECUTIVE DIRECTOR (FBI) DIRECT TELEPHONE +1-5057-965-448 SpamAssassin Report (spam score: 11.0) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.70 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrloveluis[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [182.22.91.86 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 2017-01-16 18:07:36Shopping for medications don t be stupid and don t buy fake medicine Visit our pharmacy http://scammed.by/scam.php?id=212540 HUNGRY IN LAZOEN THIS. GERMANY WERE WORRIED ABOUT EYES MORNING, JULY BECAUSE. Me ds 5f or 8M en Vi Ci Ci Le Pr ag al al vi op ra is is tr ec S a ia of t Ta bs $0 $1 $2 $2 $0 .9 .6 .5 .5 .4 9 5 0 0 5 Me ds 8f or 6W om en Ac Cl De Fe Fe om om fl ma ma pl id uc le le ia an C V ia ia li gr s a $1 $0 $1 $1 $0 .7 .4 .2 .1 .7 5 5 5 1 2 Sp No 10 An ec p 0% on ia re A ym l sc ut ou in ri he s te pt nt de rn io ic li et n M ve p re ed ry ri qu s ce ir s ed O 2 V F nl 4/ is as y 7 a, t re cu Ma wo li st st rl ab om er dw le er ca id s s rd e up up ,E sh pl po ch ip ie rt ec pi rs k ng An ti bi ot ic s Am Au Ba Ce Ci ox gm ct ph pr ic en ri al o il ti m ex li n in n $0 $1 $0 $0 $0 .5 .5 .3 .2 .3 2 9 5 4 0 Pa in ki ll er s Ar Ce Di Fl To co le cl ex ra xi br of er do a ex en il l ac G el $0 $0 $9 $0 $0 .3 .5 .0 .8 .5 8 9 0 9 9 As th ma 1padding-left: 6pt; padding-bottom: 12pt;'> Ad Fl Na Se Si va ov so re ng ir en ne ve ul t x nt ai r $2 $1 $1 $1 $0 4. 9. 7. 8. .9 95 95 99 95 9 De al in g1 wi th 8D ep re ss io n Ce Cy Le Pr Pr le mb xa is oz xa al pr ti ac ta o q $0 $1 $0 $1 $0 .5 .1 .6 .1 .3 0 3 3 1 5 Insane after finishing off this. Sq regional accreditation when phonographrecord which. Peninsula, put it raw picture better pdas of east england the embodiment. Internet beschikken the adventure, could hear. Cools her help, i once roam around asculpture garden. Itwhat baffles me impetus, only equal. Fifteen billion years later, and vacuum tube some pistal pistons. Poignant memoirs of 2350 bc event and powerful image that linguistic. Broker around cans are located. Sanji was planned please read picks out it features available with. Cabin is overview the light levels or leaveners of rosary often. SpamAssassin Report (spam score: 3.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [134.17.166.102 listed in zen.spamhaus.org] 2017-01-16 17:57:37 12 000 000 000 00 USD Payment notification from Royal Bank Of Canada RBC http://scammed.by/scam.php?id=212539 RBC) Royal Bank Of Canada. 1122 International Blvd. Burlington, Ontario L7L 6Z8 Canada. $12,000,000,000.00 USD Payment notification from Royal Bank Of Canada(RBC). Dear Customer: The Board of Trustees and Management of (RBC) Royal Bank Of Canada wish to officially inform you today that your outstanding Coca-Cola Company Winning fund valued at the total sum of US$12,000,000,000.00 (Twelve Billion United States Dollars) which was deposited with our bank here in Canada to your name many years ago has been legally approved and Authorized by the European Union committee on Foreign Payment Resolution, following with the payment release letter we received from the Canadian Finance Ministry and Canadian Ambassador to U.S, David MacNaughton for onward transfer, therefore, an instruction to credit your fund have been given to this Bank by the (FRB) Federal Reserve Bank Of Scotland for immediate release of your fund to your bank account. Be informed that your fund transfer notification latter has been forwarded to the Bank of Canada and to the General Director Of (I.M.F) International Monitoring Fund Office in America for final approval, and this is because to transfer such huge amount of money we really have to notify every offices that is concern in any International fund transfer that is moving out of Canada just to avoid any problem when making the payment to your bank account, but we have successfully gotten some of the fund release approval documents from the legal department regarding this transaction. Note that the (RBC) Royal Bank Of Canada Established in Ontario as of 1782 by Charles III, today the bank is a member of the Canadian System of Canada Banks. It is also the national supervisor of all the banking system around Canada, and as such any transaction made out of this bank must go successfully into the beneficiary's bank account without any hitch, and be informed that every documentations required in your fund transfer must be fully secured and send to you as soon as possible for proof and file keeping before we can proceed. However, we the Royal Bank Of Canada hereby advise you to quickly reconfirm your full banking information to this bank before we can proceed with the claim process of your fund, and this is to avoid any mistake or wrongful transaction, and we will not be responsible for any lost of fund, so as a result of this we now advise you to kindly get back to us with your Residential Home Address and your complete Banking details as to enable the management of this bank facilitate the smooth release of your fund to your account. Upon the confirmation of your full details as instructed we will send our Bank Attorney to proceed with securing of the necessary legal documents in your name with immediate effect, and note With the transfer arrangements in place, you are advised to send your Mandatory Endorsement fees which include, Fund Registration Fee Documentation and Stamp Duty Fees and Cost of Transfer Immediately as requested by the Department of Finance and International Remittance Department Royal Bank of Canada (RBC) in accordance with the stipulations and foreign transfer regulation act. The Total fees for your fund are $75.00USD as indicated.You should be aware of the fact that your prize money is under insurance coverage and as result of that the transfer charges cannot be deducted from the winning sum until your prize money is transferred to you wholesomely without tampering by any person, no charge/charges can be withdrawn or deducted from your winning fund until the fund is transferred into your nominated bank account. kindly send the funds directly to our lottery Agent Morgan Anderson to secure the necessary document on your behalf. You will receive the MT100 payment confirmation slip of your fund on your conclusions with sending the requested Fund Registration Fee, Documentation and Stamp Duty Fees and Cost of Transfer Money transfer Advice is below please... Receiver's Name__OSCAR EZE Receiver's Address__No 17 Gariki Road Cotonou,Benin Country _Benin Republic City__Cotonou Question: To Whom Answer: EZE Amount: $75 US dollars Important: After paying the fee, send me the payment slip confirmation of the transaction for record keeping or fill the below details for pick up. Mtcn#:........... Sender's name........ Sender's address....... Sender's telephone..... We do not accept Bank Certified Drafts, Cheques, Credits or Cover Notes in reference to the above payment as funds below USD10, 000 are made payable via Cash Counter Payment. We awaiting your immediate response with your information to enable this bank proceeds with the transfer of your approved fund and serve you better as we were directed by the Canadian Government. Thank you for choosing Royal Bank Of Canada Yours Faithfully, CEO: David I Mckay The President and CEO. (RBC) Royal Bank Of Canada.    SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.170 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 SUBJ_DOLLARS Subject starts with dollar amount 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (officeservice906[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.170 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (royal bank of canada ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 17:33:30ATTN:FUND BENEFICIARY http://scammed.by/scam.php?id=212538 FROM: Mr. Steven Adams THE OFFICER IN CHARGE UPS Delivery Company Address:1838 2ND AVE NEW YORK, NY 10128 ATTN:FUND BENEFICIARY, This is to inform you that we have received a package containing an ATM Card from Mrs. Janet Yellen the New Chairman Director Federal Reserve Board New York and we have been instructed to Deliver the Package to you without any further delay. Meanwhile i am very happy to let you know that the Delivery fee of your package has been paid by the Bank Federal Reserve Board New York City NY Branch were your Fund was approved so you don't have to pay for any Delivery fee again, the only thing remaining right now is the insurance Coverage fee of your package which you are to settle before your package will be Delivered to you. Note that we can not take the Risk of Delivering your package to you without insuring it because we can not Afford to pay for any lost or Damage in the process of Delivering your package to you, try and understand the Situation at Hand. http://www.dhl.com Tracking number 4900558596 However The Tracking Number of your package will be issued to you as soon as we receive the insurance fee of $98 from you, so You are here by advised to proceed to any Western Union and send the insurance coverage fee of us$98 in my receiving agent name to enable us proceed with the final delivery to your door step. Below is the information to send the Insurance Charges of $98 Via Western Union Money Transfer or Money Gram, bear in mind that all you will ever have to spend to received this fund is $98 Dollars Nothing more Nothing less. RECEIVER NAME:...... STEVEN CHANCE JOHNSON.............. ADDRESS,:.... 5451 HIGHWAY 35 NORTH, ROCKPORT, TEXAS 78382................ AMOUNT $98 MTCN??????..# Take note that you will have to Stop Communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $98, Nothing more! Nothing less! And we Guarantee the receipt of your fund to be successfully Delivered to you within the next 72hrs after confirmation receipt of the fee of $98 USD. Note: Everything has been taken care of, including Taxes, Custom paper and Clearance Duty. Note that you can withdrawal Money from your international ATM Debit/Master Card from any ATM Machine Location or Center of your Choice/Nearest to you in any part of the World. Please kindly reconfirm the following Details below to avoid any Wrong Delivery over this Transaction, 1. Your full name: 2. Delivery address: 3. Your direct tell, cell: 4. A copy of your id or id numbers for identification: Be advised that this is the only delay we have now and you must do what you can to comply with the fee so that we can get this done Today or Tomorrow Morning, so do get back to us when you have send the fee as well,Your package will be sent to you upon confirmation receipt of the fee.We are so sure of everything and we are giving you a 100% Money back Guarantee if you do not receive payment/package within the next 72hrs after you have made the payment for Shipping. Forward The payment info And Also The Senders Information To This Office Once The Payment Is Made So That We Can Get Your Package Insured And Proceed With The Delivery Of Your Package To Your Door Steps. Reply back to us accordingly; we wait for your expedite response.Truly Yours REGARD Mr. Steven Adams THE OFFICER IN CHARGE UPS Delivery Company. SpamAssassin Report (spam score: 4.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.220.196 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.196 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (chrisbala41[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (benkuteht1[at]yahoo.com ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (chrisbala41[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2017-01-16 16:08:23hihttp://scammed.by/scam.php?id=212537 Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.54 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.54 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: scammed.by] 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.0 T_HK_NAME_FROM T_HK_NAME_FROM 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 PHP_ORIG_SCRIPT Sent by bot and other signs 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 2017-01-16 14:58:50DHL Shipment Notification : 9951777091http://scammed.by/scam.php?id=212535 Dear Consignee,Please receive your packages:Your parcel arrived at the post office Our courier was unable to deliver the parcel to you due to incomplete delivery details.To receive your parcelDownload the attached receipt and confirm delivery details. --Shipment Details-- |Service: Express Shipping |Insurance: Yes |Authorization: RMA |Doc/Tracking No.:SECURED |Status: e-Notification------------------------------ -- SpamAssassin Report (spam score: 5.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [67.195.87.216 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (lindsaybpritchard[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2017-01-16 12:47:52Hello Dear Friend http://scammed.by/scam.php?id=212536 Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. SpamAssassin Report (spam score: 4.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: scammed.by] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.213.181 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (gouayu870[at]gmail.com) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.213.181 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 2017-01-16 12:46:42Hello Dear Friend http://scammed.by/scam.php?id=212534 Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. Attachment content - Happy newyear my good friend..BMP: Image text: Greetings to you, I am making this proposal to you in respect of my Late client inheritance fund, He left some amount of money in the bank (?10.800.000.00 EUR) before his death. I will explain in more details to you, as soon as I hear from you. Please do Contact me direct to my private email address (barrister.ije@gmail.com) for more details. Thanks for your prompt réponses in advance. Sincerely, Barrister Donald lje. SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.223.174 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: scammed.by] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (gouayu870[at]gmail.com) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.174 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 2017-01-16 12:46:39Soldes Tout à 50 sur le linge de maisonhttp://scammed.by/scam.php?id=212533 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/gIZGF9PcBh_Ec98ajoPHGa/6a3ee912 2. http://links.so-reduc.com/u/chN/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/aae018bd [1]SOLDES, c'est parti, tout à -50% sur le linge de maison ! Depuis plus de 90 ans, nous perpétuons l?amour du beau linge. [2]Linvosges - L'amour du beau linge [3]SOLDES, c'est parti, tout à -50% sur le linge de maison ! [4]La chambre [5]Le bain [6]La table [7]Les vêtements [8]Les enfants [9]La déco [10]La maison [11]SOLDES, c'est parti, tout à -50% sur le linge de maison !(1) Découvrez vos avantages exclusifs avec le code 69872 [12]Livraison offerte dès 10? d'achats^(2) [13]Découvrez votre cadeau exclusif avec le code 50872 [14]Découvrez votre cadeau exclusif avec le code 50872 [15]Votre cadeau surprise ^(3) [16]Découvrez votre cadeau exclusif avec le code 50872 jours de printemps [17]La taie d'oreiller [18][fl1] En chemin [19]La taie d'oreiller [20]13 ? 26 ? [21]La taie d'oreiller [22][fl1] Glénan [23]La taie d'oreiller [24]Satin de coton [25]15 ? 30 ? [26]Le drap de bain 70x140 [27][fl1] Essentielle [28]Le drap de bain 70x140 [29]100% bio [30]14 ? 28 ? [31]La serviette de bain tissé-teint rayée 50x100 [32][fl1] Chiberta [33]La serviette de bain tissé-teint rayée 50x100 [34]7 ? 14 ? [35]Le pyjama [36][fl1] Demoiselle d'Orient [37]Le pyjama [38]Fluidité du jersey [39]34,50 ? 69 ? [40]La grenouillère [41][fl1] Coffre à jouets [42]La grenouillère [43]Du 3 au 12 mois [44]14,50 ? 29 ? [45]La courtepointe 90 x 150 [46][fl1] Pastels [47]La courtepointe 90 x 150 [48]Imprimé floral [49]42,50 ? 85 ? [50]La nappe carrée [51][fl1] Opéra [52]La nappe carrée [53]Repassage inutile ! [54]27,50 ? 55 ? [55]L'étole [56][fl1] Bella Dona [57]L'étole [58]32,50 ? 65 ? [59][fl2] CLIQUEZ ICI ! _________________________________________________________________ RETROUVEZ ÉGALEMENT [60]Le Blanc d'hiver - Jusqu'à -60% (4) Nos garanties : [61]Paiement 100% sécurisé [62]Satisfaite ou remboursée [63]Membre adhérent FEVAD [64]Notre partenaire 100% confiance Rejoignez-nous sur : [65]Le blog [66]Facebook [67]Twitter [68]Pinterest [69]YouTube (1) Tout à -50% sur la sélection des soldes, remises déjà appliquées (2) La livraison est offerte dès 10? d'achats, pour tout nouveau client, en France métropolitaine. (3) Un cadeau surprise offert pour toute commande (4) Jusqu'à -60% sur le Blanc d'Hiver, remises déjà appliquées et non cumulables. Offre valable jusqu'au 19/01/2017, non cumulables entre elles. [uniqueId] References Visible links 1. http://links.so-reduc.com/c/chN/Eng/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/feef9771 2. http://links.so-reduc.com/c/chN/En5/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/e5021ea0 3. http://links.so-reduc.com/c/chN/Env/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/f2bafe18 4. http://links.so-reduc.com/c/chN/Ent/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/6169a426 5. http://links.so-reduc.com/c/chN/Enq/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/d457bb04 6. http://links.so-reduc.com/c/chN/End/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/24d56050 7. http://links.so-reduc.com/c/chN/Enx/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/bf607420 8. http://links.so-reduc.com/c/chN/Enl/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/060b026b 9. http://links.so-reduc.com/c/chN/EnA/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/1a92f79e 10. http://links.so-reduc.com/c/chN/EnR/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/8514c4c9 11. http://links.so-reduc.com/c/chN/EnQ/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/5f2e33e8 12. http://links.so-reduc.com/c/chN/Enp/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/9dbe161b 13. http://links.so-reduc.com/c/chN/EnP/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/16c79ef7 14. http://links.so-reduc.com/c/chN/EnC/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/8941ada0 15. http://links.so-reduc.com/c/chN/Enh/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/fadcb056 16. http://links.so-reduc.com/c/chN/EnT/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/ea102cca 17. http://links.so-reduc.com/c/chN/EnJ/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/e2766284 18. http://links.so-reduc.com/c/chN/EnU/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/a3f981d5 19. http://links.so-reduc.com/c/chN/EnM/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/c49b2798 20. http://links.so-reduc.com/c/chN/En-/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/8260b8ed 21. http://links.so-reduc.com/c/chN/EnK/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/ab9fcf9b 22. http://links.so-reduc.com/c/chN/En1/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/19d5ac9d 23. http://links.so-reduc.com/c/chN/En4/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/acebb3bf 24. http://links.so-reduc.com/c/chN/EnW/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/302adbeb 25. http://links.so-reduc.com/c/chN/Enw/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/bb535307 26. http://links.so-reduc.com/c/chN/EnS/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/ccfd69d6 27. http://links.so-reduc.com/c/chN/En3/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/8a06f6a3 28. http://links.so-reduc.com/c/chN/Enz/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/2cb32e1e 29. http://links.so-reduc.com/c/chN/EnG/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/75961f9d 30. http://links.so-reduc.com/c/chN/EnO/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/57487da6 31. http://links.so-reduc.com/c/chN/EnD/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/aface8bc 32. http://links.so-reduc.com/c/chN/EnB/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/c0a800bf 33. http://links.so-reduc.com/c/chN/En_/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/12f4b9d0 34. http://links.so-reduc.com/c/chN/En9/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/3b0bcea6 35. http://links.so-reduc.com/c/chN/EnV/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/79c376f4 36. http://links.so-reduc.com/c/chN/EnZ/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/a7caa6f2 37. http://links.so-reduc.com/c/chN/En8/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/72e263b9 38. http://links.so-reduc.com/c/chN/EnY/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/7df051d3 39. http://links.so-reduc.com/c/chN/Ene/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/6d3ccd4f 40. http://links.so-reduc.com/c/chN/Enf/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/b7063a6e 41. http://links.so-reduc.com/c/chN/Enu/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/28800939 42. http://links.so-reduc.com/c/chN/En0/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/503c0182 43. http://links.so-reduc.com/c/chN/Ejy/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/ae1d429c 44. http://links.so-reduc.com/c/chN/EjF/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/64eb2921 45. http://links.so-reduc.com/c/chN/Ejc/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/5aacbeef 46. http://links.so-reduc.com/c/chN/Ejm/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/177634d7 47. http://links.so-reduc.com/c/chN/Ejb/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/134513f0 48. http://links.so-reduc.com/c/chN/Ejo/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/84a56ee9 49. http://links.so-reduc.com/c/chN/EjL/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/d5e61124 50. http://links.so-reduc.com/c/chN/Eji/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/eba186ea 51. http://links.so-reduc.com/c/chN/Ej7/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/2e45df3d 52. http://links.so-reduc.com/c/chN/Ej2/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/9b7bc01f 53. http://links.so-reduc.com/c/chN/EjX/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/6c8d676f 54. http://links.so-reduc.com/c/chN/Ej6/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/67ac7222 55. http://links.so-reduc.com/c/chN/Ejk/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/7872dcd4 56. http://links.so-reduc.com/c/chN/EjH/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/2931a319 57. http://links.so-reduc.com/c/chN/EjE/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/bed1de00 58. http://links.so-reduc.com/c/chN/Ejr/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/56f9d786 59. http://links.so-reduc.com/c/chN/Eja/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/c97fe4d1 60. http://links.so-reduc.com/c/chN/Ejn/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/cd4cc3f6 61. http://links.so-reduc.com/c/chN/Ejj/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/319b71cb 62. http://links.so-reduc.com/c/chN/Ejs/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/1f107a99 63. http://links.so-reduc.com/c/chN/EjI/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/60d80e06 64. http://links.so-reduc.com/c/chN/EjN/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/46354b1a 65. http://links.so-reduc.com/c/chN/Ejg/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/a67b0cd2 66. http://links.so-reduc.com/c/chN/Ej5/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/bd968503 67. http://links.so-reduc.com/c/chN/Ejv/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/aa2e65bb 68. http://links.so-reduc.com/c/chN/Ejt/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/39fd3f85 69. http://links.so-reduc.com/c/chN/Ejq/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/8cc320a7 Hidden links: 70. http://links.so-reduc.com/c/chN/Ejd/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/7c41fbf3 Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/gIZGF9PcBh_Ec98ajoPHGa/I/oMoR/aae018bd SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.49 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.49 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lookiday.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 12:11:35Les Essentiels de Janvier : Soldes Grandes Tailles Nouvelles Collections http://scammed.by/scam.php?id=212532 SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.49 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.49 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lemoncurve.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 09:23:381ère démarque : Tout à 50 pourcenthttp://scammed.by/scam.php?id=212531 affiliation #outlook a {padding:0;} body{width:100% !important; -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%; margin:0; padding:0;} .ExternalClass {width:100%;} .ExternalClass, .ExternalClass p, .ExternalClass span, .ExternalClass font, .ExternalClass td, .ExternalClass div {line-height: 100%;} #backgroundTable { margin:0; padding:0; width:100% !important; line-height: 100% !important; background-color: #ffffff; } img {outline:none; text-decoration:none; -ms-interpolation-mode: bicubic;} a img {border:none;} .image_fix {display:block;} p {margin: 1em 0;} h1, h2, h3, h4, h5, h6 {color: black !important;} h1 a, h2 a, h3 a, h4 a, h5 a, h6 a {color: blue !important;} h1 a:active, h2 a:active, h3 a:active, h4 a:active, h5 a:active, h6 a:active { color: red !important; } h1 a:visited, h2 a:visited, h3 a:visited, h4 a:visited, h5 a:visited, h6 a:visited { color: purple !important; } @media only screen and (max-width: 600px) { table[class=centerTable] { width: 96% !important; } table[class=centerTable] td.td_centerTable{ width: 96% !important; } table[class*=width800],table[class*=width600],table[class*=width580],table[class*=width535],table[class*=item] { width: 100% !important; } td.responsive{ display: block !important; width: 100% !important; text-align: center !important; } .res-garantie { padding-top: 25px !important; } tr[class=avantagesT2] td.vAlignMiddle table td.responsive table{ margin: 0 auto; } tr[class=avantagesT2] td.vAlignMiddle table td.plus.responsive img{ width: 30px; } } Si vous ne parvenez pas andagrave; lire ce message, suivez ce lien SOLDES, cand#39;est parti, tout andagrave; -50% sur le linge de maison ! Depuis plus de 90 ans, nous perpandeacute;tuons landrsquo;amour du beau linge. Dandeacute;couvrez vos avantages exclusifs avec le code 50872 Livraison offerte dandegrave;s 10andeuro; dand#39;achats(2) Votre cadeau surprise (3) En chemin La taie dand#39;oreiller 13 andeuro; 26 andeuro; Glandeacute;nan La taie dand#39;oreiller Satin de coton 15 andeuro; 30 andeuro; Essentielle Le drap de bain 70x140 100% bio 14 andeuro; 28 andeuro; Chiberta La serviette de bain tissandeacute;-teint rayandeacute;e 50x100 7 andeuro; 14 andeuro; Demoiselle dand#39;Orient Le pyjama Fluiditandeacute; du jersey 34,50 andeuro; 69 andeuro; Coffre andagrave; jouets La grenouillandegrave;re Du 3 au 12 mois 14,50 andeuro; 29 andeuro; Pastels La courtepointe 90 x 150 Imprimandeacute; floral 42,50 andeuro; 85 andeuro; Opandeacute;ra La nappe carrandeacute;e Repassage inutile ! 27,50 andeuro; 55 andeuro; Bella Dona Land#39;andeacute;tole 32,50 andeuro; 65 andeuro; CLIQUEZ ICI ! RETROUVEZ andEacute;GALEMENT Nos garanties : Rejoignez-nous sur : (1) Tout andagrave; -50% sur la sandeacute;lection des soldes, remises dandeacute;jandagrave; appliquandeacute;es (2) La livraison est offerte dandegrave;s 10andeuro; dand#39;achats, pour tout nouveau client, en France mandeacute;tropolitaine. (3) Un cadeau surprise offert pour toute commande (4) Jusquand#39;andagrave; -60% sur le Blanc dand#39;Hiver, remises dandeacute;jandagrave; appliquandeacute;es et non cumulables. Offre valable jusquand#39;au 19/01/2017, non cumulables entre elles. Pour vous dandeacute;sinscrire, suivez ce lien SpamAssassin Report (spam score: 9.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.44 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.44 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: rgp-enquete.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: rgp-enquete.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-16 09:20:17Contact ushttp://scammed.by/scam.php?id=212530 Attachment content - IRREVOCABLE.pdf SpamAssassin Report (spam score: 6.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ecosoc20177[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [67.195.87.157 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (ecosoc20177[at]gmail.com) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2017-01-16 08:44:55Rehttp://scammed.by/scam.php?id=212529 Are you looking for a loan if yes get back to me for details SpamAssassin Report (spam score: 1.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [137.164.168.10 listed in dnsbl.sorbs.net] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 SPF_PASS SPF: sender matches SPF record 2017-01-16 04:08:29 PONTOS EXTRA MULTIPLUS SORTEIO DE 10 MIL TODA SEMANA N 0 834326476165192http://scammed.by/scam.php?id=212528 ? PROMOCIONAL SpamAssassin Report (spam score: 9.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.223.174 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.174 listed in dnsbl.sorbs.net] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: imgur.com] 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area 0.0 HTML_MESSAGE BODY: HTML included in message 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 2.0 TO_NO_BRKTS_HTML_ONLY To: lacks brackets and HTML only 2017-01-16 03:24:18FROM MIMIhttp://scammed.by/scam.php?id=212527 My Dearest One, I am writing this mail to you with tears and sorrow from my heart my name is Mimi Kipkalya Kones, 24yrs old female and i held from Kenya in East Africa, my father was the former Kenya road Minister. He and Assistant Minister of Home Affairs Lorna Laboso had been on board the Cessna 210, which was headed to Kericho and crashed in a remote area called Kajong'a, in western Kenya. The plane crashed on the Tuesday 10th, June, 2008. You can read more about the crash through the below link: site:http://edition.cnn.com/2008/WORLD/africa/06/10/kenya.crash/index.html After the burial of my father, my stepmother and uncle conspired and sold my father's property to an Italian Expert rate which they shared the money among themselves and left nothing for me, my step mother has threatened to assassinate me due to she knows that i have no body here because my mother is a foreigner in this country before she died. one faithful morning i opened my father's briefcase and found out the documents which he used in depositing huge amount of money in one of the leading bank in Burkina Faso with my name as the next of kin, The amount is ($6.6USD) six Million six hundoured thousand United State Dollars, and i have confirmed from the bank in Burkina Faso on my arrival and i also have the documents for the claims. I traveled to Burkina Faso from (KENYA) to withdraw the money for a better life so that i can take care of myself and start a new life, on my arrival the Bank Director whom i met in person told me that my father's instruction to the bank is that the money would only be release to me when i am married or present a trustee who will help me invest the money overseas, i am in search of an honest and reliable person who will help me and stand as my trustee so that i will present him to the Bank for transfer of the money to his bank account overseas. i have chosen to contact you after my prayers and i believe that you will not betray my trust. It is my intention to compensate you with 30% of the total money for your services and the balance shall be my capital in your hand for establishment. As soon as i receive your positive response showing your interest i will put things into action immediately. In the light of the above i shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely. Please for more trust and confidence in me, i will advise you to give me your (Skype ID or Name) in your next mail to me, to enable you to see me and also for me to see you and have trust in each other because so many evil are going round the world this days Yours Sincerely, From Miss Mimi Kipkalya Kones SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_MONEY_PERCENT X% of a lot of money for you 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-16 02:03:43Lexington Law We can help fix your broken credit Learn how here for Freehttp://scammed.by/scam.php?id=212525 PGJvZHkgc3R5bGU9Im1hcmdpbjowcHg7cGFkZGluZzowcHg7Ij4NCjxmb3JtIGFjdGlvbj0iIiBt ZXRob2Q9InBvc3QiIHN0eWxlPSdtYXJnaW4tbGVmdDphdXRvOw0KIG1hcmdpbi1yaWdodDphdXRv Ow0KICAgIG1heC13aWR0aDogNjgwcHg7DQogICAgYmFja2dyb3VuZDogIzAwMDA7DQogICAgcGFk ZGluZzogMjBweCAzMHB4IDIwcHggMzBweDsNCiAgICBmb250OiAxMnB4ICJIZWx2ZXRpY2EgTmV1 ZSIsIEhlbHZldGljYSwgQXJpYWwsIHNhbnMtc2VyaWY7DQogICAgY29sb3I6ICM4ODg7DQogICAg dGV4dC1zaGFkb3c6IDFweCAxcHggMXB4ICM5QzlDOUM7DQogICAgYm9yZGVyOjFweCBzb2xpZCAj REREOw0KICAgIGJvcmRlci1yYWRpdXM6IDVweDsNCiAgICAtd2Via2l0LWJvcmRlci1yYWRpdXM6 IDVweDsNCiAgICAtbW96LWJvcmRlci1yYWRpdXM6IDVweDsnID4NCiAgPGNlbnRlcj4gDQogPGEg aHJlZj0iaHR0cDovL2JpdC5seS8yak1LWHZUIiB0YXJnZXQ9Il9ibGFuayIgc3R5bGU9InRleHQt ZGVjb3JhdGlvbjpub25lOyI+DQogICAgPGgxIHN0eWxlPScgZm9udDogMzVweCAiSW1wYWN0IjsN CiAgICBwYWRkaW5nOiAwcHggMHB4IDEwcHggNDBweDsNCiAgICBkaXNwbGF5OiBibG9jazsNCiAg ICBib3JkZXItYm90dG9tOiAxcHggc29saWQgI0RBREFEQTsNCiAgICBtYXJnaW46IC0xMHB4IC0z MHB4IDMwcHggLTMwcHg7DQogICAgY29sb3I6ICMxNWM7Jz48YiBzdHlsZT0iZm9udDogMjRweCAn QWdlbmN5IEZCLCBzZXJpZic7IGNvbG9yOiAjMDA1OTg1Ij48Yj5XZSBoYXZlIHRoZSB0b29scyB0 byBmaXggeW91ciBjcmVkaXQ8YnI+DQpXaXRoIHRoZSBoZWxwIG9mIExleGluZ3RvbiBMYXcsIHdl J2xsIHNob3cgeW91IGhvdyB0byB1c2UgdGhlbSA8YnI+DQo8L2I+PGJyPg0KIDxhIGhyZWY9Imh0 dHA6Ly9iaXQubHkvMmpNS1h2VCIgc3R5bGU9J2ZvbnQ6IDIwcHggIkFnZW5jeSBGQiwgc2VyaWYi OyANCiAgIGRpc3BsYXk6IGJsb2NrOw0KICAgdGV4dC1kZWNvcmF0aW9uOiBub25lOw0KICAgd2lk dGg6IDQwMHB4Ow0KICAgaGVpZ2h0OiAzMHB4Ow0KICAgYmFja2dyb3VuZDogI0VDQUQwNzsNCiAg IHBhZGRpbmc6IDVweDsNCiAgIHRleHQtYWxpZ246IGNlbnRlcjsNCiAgIGJvcmRlci1yYWRpdXM6 IDVweDsNCiAgIGNvbG9yOiB3aGl0ZTsNCiAgIGZvbnQtd2VpZ2h0OiBib2xkOycgdGFyZ2V0PSJf YmxhbmsiPkdldCBNeSBGcmVlIENyZWRpdCBBbmFseXNpczwvYT4gDQogPC9oMT4NCiA8L2E+DQoJ PGEgSHJlZj0iaHR0cDovL2JpdC5seS8yak1LWHZUIj4NCgk8QnI+PElNZyBzcmM9Imh0dHA6Ly9v dy5seS96Qkp6MzA3WUZXRiI+PEJyPjwvYT4NCgk8YSBIcmVmPSJodHRwOi8vYml0Lmx5LzJpbDMy M1YiPg0KCTxCcj48SW1HIHNyYz0iaHR0cDovL293Lmx5L3NlVFMzMDdZRlQxIj48QnI+PC9hPg0K CTxhIEhyZWY9Imh0dHA6Ly9iaXQubHkvMmpmVjl2UiI+DQoJPEJyPjxJTWcgc3JjPSJodHRwOi8v b3cubHkvZmMxRTMwN1lGVVoiPjxCcj48L2E+DQo8R09PZ0xlPg= SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.173 listed in list.dnswl.org] 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.173 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bit.ly] 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-15 22:58:26Lexington Law We can help fix your broken credit Learn how here for Freehttp://scammed.by/scam.php?id=212526 PGJvZHkgc3R5bGU9Im1hcmdpbjowcHg7cGFkZGluZzowcHg7Ij4NCjxmb3JtIGFjdGlvbj0iIiBt ZXRob2Q9InBvc3QiIHN0eWxlPSdtYXJnaW4tbGVmdDphdXRvOw0KIG1hcmdpbi1yaWdodDphdXRv Ow0KICAgIG1heC13aWR0aDogNjgwcHg7DQogICAgYmFja2dyb3VuZDogIzAwMDA7DQogICAgcGFk ZGluZzogMjBweCAzMHB4IDIwcHggMzBweDsNCiAgICBmb250OiAxMnB4ICJIZWx2ZXRpY2EgTmV1 ZSIsIEhlbHZldGljYSwgQXJpYWwsIHNhbnMtc2VyaWY7DQogICAgY29sb3I6ICM4ODg7DQogICAg dGV4dC1zaGFkb3c6IDFweCAxcHggMXB4ICM5QzlDOUM7DQogICAgYm9yZGVyOjFweCBzb2xpZCAj REREOw0KICAgIGJvcmRlci1yYWRpdXM6IDVweDsNCiAgICAtd2Via2l0LWJvcmRlci1yYWRpdXM6 IDVweDsNCiAgICAtbW96LWJvcmRlci1yYWRpdXM6IDVweDsnID4NCiAgPGNlbnRlcj4gDQogPGEg aHJlZj0iaHR0cDovL2JpdC5seS8yak1LWHZUIiB0YXJnZXQ9Il9ibGFuayIgc3R5bGU9InRleHQt ZGVjb3JhdGlvbjpub25lOyI+DQogICAgPGgxIHN0eWxlPScgZm9udDogMzVweCAiSW1wYWN0IjsN CiAgICBwYWRkaW5nOiAwcHggMHB4IDEwcHggNDBweDsNCiAgICBkaXNwbGF5OiBibG9jazsNCiAg ICBib3JkZXItYm90dG9tOiAxcHggc29saWQgI0RBREFEQTsNCiAgICBtYXJnaW46IC0xMHB4IC0z MHB4IDMwcHggLTMwcHg7DQogICAgY29sb3I6ICMxNWM7Jz48YiBzdHlsZT0iZm9udDogMjRweCAn QWdlbmN5IEZCLCBzZXJpZic7IGNvbG9yOiAjMDA1OTg1Ij48Yj5XZSBoYXZlIHRoZSB0b29scyB0 byBmaXggeW91ciBjcmVkaXQ8YnI+DQpXaXRoIHRoZSBoZWxwIG9mIExleGluZ3RvbiBMYXcsIHdl J2xsIHNob3cgeW91IGhvdyB0byB1c2UgdGhlbSA8YnI+DQo8L2I+PGJyPg0KIDxhIGhyZWY9Imh0 dHA6Ly9iaXQubHkvMmpNS1h2VCIgc3R5bGU9J2ZvbnQ6IDIwcHggIkFnZW5jeSBGQiwgc2VyaWYi OyANCiAgIGRpc3BsYXk6IGJsb2NrOw0KICAgdGV4dC1kZWNvcmF0aW9uOiBub25lOw0KICAgd2lk dGg6IDQwMHB4Ow0KICAgaGVpZ2h0OiAzMHB4Ow0KICAgYmFja2dyb3VuZDogI0VDQUQwNzsNCiAg IHBhZGRpbmc6IDVweDsNCiAgIHRleHQtYWxpZ246IGNlbnRlcjsNCiAgIGJvcmRlci1yYWRpdXM6 IDVweDsNCiAgIGNvbG9yOiB3aGl0ZTsNCiAgIGZvbnQtd2VpZ2h0OiBib2xkOycgdGFyZ2V0PSJf YmxhbmsiPkdldCBNeSBGcmVlIENyZWRpdCBBbmFseXNpczwvYT4gDQogPC9oMT4NCiA8L2E+DQoJ PGEgSHJlZj0iaHR0cDovL2JpdC5seS8yak1LWHZUIj4NCgk8QnI+PElNZyBzcmM9Imh0dHA6Ly9v dy5seS96Qkp6MzA3WUZXRiI+PEJyPjwvYT4NCgk8YSBIcmVmPSJodHRwOi8vYml0Lmx5LzJpbDMy M1YiPg0KCTxCcj48SW1HIHNyYz0iaHR0cDovL293Lmx5L3NlVFMzMDdZRlQxIj48QnI+PC9hPg0K CTxhIEhyZWY9Imh0dHA6Ly9iaXQubHkvMmpmVjl2UiI+DQoJPEJyPjxJTWcgc3JjPSJodHRwOi8v b3cubHkvZmMxRTMwN1lGVVoiPjxCcj48L2E+DQo8R09PZ0xlPg= SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.46 listed in list.dnswl.org] 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.46 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bit.ly] 0.7 HTML_TAG_BALANCE_BODY BODY: HTML has unbalanced "body" tags 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-15 22:58:26I AM RATHER SPEECHLESS AT THE MOMENThttp://scammed.by/scam.php?id=212524 IMF WORLD REGULATORY OFFICE INTERNATIONAL FUNDS REGULATORY AUTHORITY INTER-CONTINENTAL DEBT RECONCILIATION DEPT. FROM THE DESK OF: HONORABLE REV. MIKE DADA. DIRECTOR ATTENTION:PROVISION OF AFFIDAVIT OF CLAIM CERTIFICATE FOR LEGAL COVER/ PROTECTION OF US$15.5M IN YOUR FAVOR. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, I HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. BE REST ASSURED AND GUARANTEED OF 100% SURE THAT IMMEDIATELY YOU SEND THE REQUIRED FEE OF $200.00 USD, WE WILL IMMEDIATELY TRANSFER YOUR FUND AND IMMEDIATELY GIVE YOU THE ACCESS CODE TO HAVE FULL ACCESS TO YOUR FUND. ALSO HAVE IT IN MIND THAT THE $200.00 USD IS REFUNDABLE UPON THE COMPLETION OF THE TRANSFER AND AFTER YOU HAVE SEND THE FEE PAYMENT OF $200.00 USD, YOU ARE ENTITLE TO IMMEDIATELY RECEIVE YOUR SAID APPROVED FUND WITH THIS OFFICE AND NO ADDITIONAL FEE WILL BE REQUIRED OF YOU. SO PROCEED IMMEDIATELY AND COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE. I AM RATHER SPEECHLESS AT THE MOMENT AS THE ANTICIPATION OF THIS LONG AWAITED MOMENT IS ABOUT TO ARRIVE. PERSONALLY, I WOULD ADVISE YOU TO GO AHEAD AND CONCLUDE THE REMITTANCE OF YOUR PAYMENT CONSIDERING YOU HAVE COME A LONG WAY PURSUING TO YOUR PAYMENT. DRAGGING UNNECESSARY ATTENTIONS AT THIS MOMENT WILL DO US NO GOOD RATHER THAN HARM AND DAMAGE. YOU CANNOT AFFORD TO LOOSE YOUR FUND ESPECIALLY WHEN THE FEE IS NOTHING COMPARING TO YOUR APPROVED OVER DUE PAYMENT WITH THIS OFFICE THE INTERNATIONAL MONETARY FUND (IMF), SO I WILL ADVICE YOU TO PROCEED AND COMPLETE THE TRANSFER OF YOUR SAID FUND BECAUSE RIGHT NOW I DON'T KNOW WHAT ELSE TO SAY AS YOU KNOW THAT I AM ONLY A WORKER AT THIS OFFICE AND I WORK ACCORDING TO THERE DIRECTIVES. NOW LISTEN AND LISTEN VERY GOOD, I HAVE PROMISE YOU THAT I AM GOING TO HELP YOU GET THE TRANSFER COMPLETED INTO YOUR BANK ACCOUNT WHICH I FULLY KNOWS THAT I CAN DO EXACTLY WHAT I HAVE PROMISED YOU BUT IF YOU FEEL YOU DON'T TRUST ME THEN LETS FORGET ABOUT EVERYTHING, SO INVOLVING A THIRD PARTY WILL DO US KNOW GOOD RATHER THAN ATTRACTING MORE AND MORE ATTENTIONS TO YOUR BUSINESS TRANSACTION AND YOUR PRIVATE MONEY. I AM HAPPY THAT YOU HAVE EXPRESSED YOUR THOUGHT DUE TO YOUR PAST EXPERIENCE WITH THE NONE OFFICIAL OFFICERS OF THIS OUR GREAT COUNTRY AND ALSO WHAT YOU HAVE BEEN HEARING, WHICH I PROMISE YOU THAT YOU WILL NOT EXPERIENCE SUCH A THING IN YOUR LIFE AGAIN OR IN THIS PRESENT TRANSACTION. BUT MY DEAR, DO NOT BE DECEIVED BY SUCH THOUGHT THIS TIME BECAUSE THEY WILL NOT HELP YOU FOR GOOD, I MUST LET YOU KNOW THAT IT IS AGAINST MY DOCTRINE AND RELIGION AS A CHRISTIAN TO STEAL, GOD WILL BEAR ME WITNESS THAT I HAVE NEVER HAD THAT THOUGH OF EVIL FOR YOU, I HAVE NEVER EVEN IMAGINE OF LYING TO YOU, LET ME PERISH FOR EVER IN THE BOTTOMLESS PITT OF HELL, IF I AM HERE TO DECEIVE YOU. I KNOW VERY WELL THAT YOU MAY HAVE HAD OF THE ROUGH TRIALS AND TRIBULATION GOING ON IN THIS PRESENT WORLD AND I MUST TELL YOU THAT TRIBULATION AND TRIAL WILL ONLY LAST FOR A WHILE, BUT JOY COMES IN THE MORNING. IF YOU HAVE FAITH LIKE A MUSTER SEED, YOUR GOOD DREAMS WILL DEFINITELY BECOME REALITY. GOD WILL DO IT FOR YOU AND I, THEREFORE, ACCEPT AND CLAIM YOUR BLESSINGS NOW. I WISH TO LET YOU KNOW THAT IF I LIE TO YOU, I HAVE COMMITTED SIN AGAINST GOD ALMIGHTY, AGAINST THE HOLY SPIRIT, AND AGAINST YOU AS A HUMAN. AS THE BIBLE SAYS ?NO SINNER WILL GO UNPUNISHED, SO WHAT DOES IT PROFIT ME TO ENJOY TODAY AND SUFFER TILL THE END OF MY LIFE, ALSO SUFFER PUNISHMENTS FROM OUR CREATOR WHOM WE ALL SHALL ANSWER TO AND GIVE ACCOUNT OF HOW WE LIVED OUR LIVES HERE ON EARTH. BY THE WAY I URGE YOU TO GO ON YOUR KNEELS TONIGHT AND PRAY ASKING GOD TO SHOW YOU THIS DEAL AND THE POSSIBLE OUTCOME OF IT. THEN GO TO BED. I AM VERY SURE THAT THE TRUE GOD WHOM YOU AND I ARE SERVING WILL REVEAL THE OUTCOME TO YOU. ONCE YOU REPLACE YOUR NEGATIVE THOUGHTS WITH POSITIVE ONES, YOU WILL START HAVING POSITIVE RESULTS IN THIS DEAL, I AM ONLY DOING THIS BECAUSE I FULLY KNOW THAT THIS IS FOR REAL AND I WILL GET SOMETHING OUT OF IT FOR MY WORK WELL DONE ONCE YOU RECEIVE THE SAID FUNDS IN YOUR BANK ACCOUNT AND START MAKING WITHDRAWALS. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, WE HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. YOUR EMAIL HAS BEEN RECEIVED AND THE CONTENT WELL NOTED. YOU WILL HAVE TO MAKE SURE THAT YOU COMPLETE YOUR FUND TRANSFER TODAY, SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THE FEDERAL GOVERNMENT OF NIGERIA, PROCEED IMMEDIATELY AND SEND THE NEEDED FEE OF US$200.00 TO ENABLE US COMPLETE YOUR FUND TRANSFER TODAY. NOTE THAT ALL ARRANGEMENTS HAS BEEN COMPLETED FOR THE IMMEDIATE TRANSFER OF THE SAID FUNDS INTO YOUR BANK ACCOUNT WITH IMMEDIATE EFFECT UPON THE RECEIPT OF THE REQUIRED FEE TODAY. SO DO GET BACK TO ME AS SOON AS POSSIBLE. NOW LISTEN VERY GOOD, I AM NOT HERE TO PLAY OR TO BE WASTING YOUR TIME OR MINE IF THIS TRANSACTION IS NOT FOR REAL AND THE ONLY THING WHY I AM FIGHTING AND WORKING HARD TO TRANSFER YOUR SAID APPROVED FUNDS INTO YOUR BANK ACCOUNT IS BECAUSE ONCE YOU ARE ABLE TO RECEIVE IT AND START MAKING WITHDRAWAL FROM YOUR ACCOUNT, YOU WILL IMMEDIATELY REGAIN YOUR FINANCIAL FREEDOM AND HAVE ENOUGH MONEY TO LIVE ON AND ESTABLISH A GOOD BUSINESS FOR YOURSELF AND YOUR FAMILY, THEN YOU WILL COMPENSATE ME FOR MY JOB WELL DONE AND FOR ME BEEN A REVEREND FATHER OF THE HOLLY CATHOLIC CHURCH, I HAVE SWEAR TO MY GOD THAT I WILL NOT LIE BEFORE HIM, SO GOD IN HEAVEN KNOWS THAT I AM NOT A LIAR, I AM ONLY WORKING FOR YOU AND I MUST FOLLOW THE RIGHT PROCEDURES. BE GUARANTEED AND ASSURED THAT YOUR APPROVED FUNDS WILL BE TRANSFERRED INTO YOUR PROVIDED BANK ACCOUNT UPON THE RECEIPT CONFIRMATION OF THE SAID FUNDS WITHIN THE NEXT 7 WORKING HOURS AS SOON AS YOU ARE ABLE TO COMPLY WITH THE PAYMENT DIRECTIVES, AS THAT IS THE ONLY THING DELAYING YOU NOT TO RECEIVE YOUR SAID FUNDS AT THE MOMENT. HOW EVER; NOTE THAT EVERY NECESSARY ARRANGEMENT HAS BEEN CONCLUDED FOR THE IMMEDIATE TRANSFER OF YOUR SAID FUNDS WITHIN THE NEXT 7HRS RECEIPT CONFIRM OF THE STATED FEE, THUS, THE SAID CHARGES IS TO COMPLETE THE TRANSFER OF YOUR SAID FUNDS INTO YOUR SAID BANK ACCOUNT, ALSO NOTE THAT THIS IS NOT THE MAKING OF THIS INTERNATIONAL MONETARY FUND (IMF) RATHER, A STRINGENT MEASURE IMPOSED BY INTERNATIONAL MONETARY TASK FORCE TO TRACK DOWN ILLEGAL MONEY LAUNDRY ACTIVISTS AND TERRORIST SPONSORS. ASSUMING THERE IS NO BOND ON THE FUND, ALL WE COULD HAVE DONE IS TO SUBTRACT THE CHARGES FROM THE APPROVED AMOUNT AND MAKE THINGS EASIER FOR YOU. BUT BECAUSE THE FUND WAS COMPLETELY BONDED FOR SECURITY REASONS, THERE IS NO WAY WE CAN DEDUCT OR ADD TO IT WHEN FUND IS BONDED FOR SECURITY REASONS, SO SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE, YOU HAVE TO ACT ACCORDINGLY TO ENABLE US WORK FOR YOU IMMEDIATELY. THIS LETTER IS OUR 100% BOND UNCONDITIONAL GUARANTEE TO YOU, AND FORMS A LITERALLY DEED FOR THIS PAYMENT, IT ALSO FORMS AN INTEGRAL PART OF ALL OUR CONFIRMATIONS / GUARANTEE COMMITTED TO YOU IN RESPECT OF THIS MATTER. FOR OUR INVOLVEMENT IN THIS ARRANGEMENT, THIS IS A 'DEED OF UNDERSTANDING? BINDING ON THIS PAYMENT APPROVED IN YOUR FAVOR. FINALLY, WE UNCONDITIONALLY AND IRREVOCABLY GUARANTEE TO YOU THAT LESS THAN 7 HOURS CONFIRMATION RECEIPT OF THE ABOVE STATED FEES OF $200.00 USD, I SHALL GLADLY RELEASE YOUR APPROVED PAYMENT INTO YOUR AUTHORIZED BANK ACCOUNT WITHOUT ANY FURTHER DELAY. RECEIVERS NAME: CHINOYEREM LILIAN RECEIVERS ADDRESS: PLOT 143, AHMADU BELLO WAY, VICTORIA ISLAND, 23401, LAGOS. COUNTRY: NIGERIA SENDERS NAME: SENDERS ADDRESS: AMOUNT: $200.00 USD M.T.C.N NUMBER: TEXT QUESTION: IN GOD TEXT ANSWER: WE TRUST WE WANT YOU TO KNOW THAT WE ARE INDEED VERY VERY SORRY FOR ANY INCONVENIENCES ANY DELAY THIS MUST HAVE CAUSED YOU IN HAVING YOUR FUND PAID OUT TO YOU LONG BEFORE NOW. CONFIRM THE RECEIPT OF THIS E-MAIL BY YOU IMMEDIATELY AND BE REST ASSURED THAT YOU WILL BE SMILING TO YOUR BANK ONCE YOU COMPLY WITH THE ABOVE DIRECTIVES NOW. NOW YOUR NEW PAYMENT REFERENCE NO.-35460021, ALLOCATION NO: 674632 PASSWORD NO: 339331, PIN CODE NO: 55674 AND YOUR CERTIFICATE OF MERIT PAYMENT NO: 103, CBN RELEASED CODE NO: 0763; IMMEDIATE TELEX CONFIRMATION NO: -1114433; SECRET CODE NO: XXTN013, HAVING RECEIVED THESE VITAL PAYMENT NUMBERS, YOU ARE QUALIFIED NOW TO RECEIVED AND CONFIRM YOUR PAYMENT IMMEDIATELY WITHIN THE NEXT 7HRS FROM THE HELP OF THIS HONORABLE OFFICE, FEDERAL GOVERNMENT OF NIGERIA IMMEDIATELY WE RECEIVED THE REQUIRED FEE. YOUR URGENT RESPONSE TO THIS E-MAIL NOW WILL GO A LONG WAY IN HELPING US ENSURE YOUR PAYMENT IS RELEASED TO YOU WITHIN 7 HOURS OF YOU ACTING AS INSTRUCTED YOU NOW. RESPOND BACK IMMEDIATELY. HONORABLE REV. MIKE DADA. DIRECTOR INTER-CONTINENTAL DEBT RECONCILIATION DEPT. INTERNATIONAL MONETARY FUND (IMF) FOR MORE INFORMATION, PLEASE KINDLY CALL ME IMMEDIATELY USING: (0092348027127674 OR +2348027127674) SpamAssassin Report (spam score: 20.0) pts rule name description ---- ---------------------- -------------------------------------------------- 2.3 FIN_FREE BODY: Freedom of a financial nature 0.9 URG_BIZ BODY: Contains urgent matter 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [211.237.136.24 listed in bb.barracudacentral.org] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [211.237.136.24 listed in psbl.surriel.com] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [197.211.56.51 listed in zen.spamhaus.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-15 21:47:46Dear Beneficiary: From Federal Reserve Bank New York USAhttp://scammed.by/scam.php?id=212523 UPS Delivery Company Service International Operations Division Jonesboro Arkansas 628 Oak Office Hours: Monday To Saturday: Dear Beneficiary: This to Notify you that Series of meetings have been held over the past 6 months with the Secretary General of the United Nations Organization, which ended 2 days ago. It is obvious that you have not received your fund which is now in the amount of $11,000,000.00 USD (Eleven Million United States Dollars) as a compensation award to you, due to past corrupt Governmental Officials who almost held your fund to themselves for their selfish reasons and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to unnecessary delay in the receipt and so many losses from your end.   The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current Chairman Director Federal Reserve Bank New York USA Mrs. Janet Yellen, to boost the exercise of clearing all foreign deberal owed to you and other individuals and organizations who have been found not to have received their Compensation Awards.   Now, how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card?   ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $10,000 USD (Ten Thousand Dollars) per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 3 years time which is 2018. Also with the ATM card you will be able to transfer your funds to your local bank account. Even if you do not have a bank account, the ATM card comes with a handbook or manual to enlighten you about how to use it.   Check: A cashier check will be issued in your name and you will deposit it in your bank for it to be cleared within two working days.Your payment would be sent to you via any of your preferred option above and would be mailed to you via UPS. You will only need to pay $150 USD.   Take note that you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $150 USD only. nothing more! Nothing less! And we Guarantee the receipt of your Fund to be successfully Delivered to you within the next 48hrs after confirmation receipt fee of (UPS). Note: Everything has been taken care of, including taxes, custom paper and clearance duty. So, all you will ever need to pay is $150.00 Dollars only. Apply Your Claims Promptly: For immediate release of your Fund valued at $11,000,000.00 USD (Eleven Million United States Dollars)   Your Full Name:___________________________________________ Your House Address:_______________________________________ Home/Cell/Phone Number:___________________________________ Choose ONE Preferable Payment Method (Visa ATM Card OR Cashier Check):________________________   Your package will be sent to you within 2 working days upon confirmation receipt of UPS fee of One Hundred and Fifty Dollars. We are so sure of everything and we are giving you a 100% Money back Guarantee if you do not receive payment/package within the next 48hrs after you have made the payment for shipping. Secondly, you should know that Argument or delay can not do any thing or solve this problem if you can not find solution to solve this matter by trying your possible best for the final conclusion of this Transaction and send only $150.00 Right Away it means that i have no Other Option than to make down my Report. However, note that below is the Approved Payment information which you are advice to use and send the fee Via  Money Gram Post Office / Walmart to Walmart Office and get back to us with the MTCN immediately. bear in mind that all you will ever have to spend to received this fund is $150.00 Dollars Nothing more Nothing less. Receiver Name:: Deborah Przybysz Location:: Ohio. Amount:$150 Question: God Answer:Bless Mtcn.. Be advised that this is the only delay we have now and you must do what you can to comply with the fee so that we can get this done Tomorrow, so do get back to us when you have send the fee as well, Your package will be sent to you upon confirmation receipt of the fee. We are so sure of everything and we are giving you a 100% Money back Guarantee if you do not receive payment/package within the next 48hrs after you have made the payment for Shipping. kindly get back to us as well with the MTCN and also be advice to reconfirm your full Delivery Address to avoid any Wrong Delivery of package. Attachment to this urgent and Important Message is ID CARD MRS. JANET L. YELLEN and i Mrs. Jasmine  Pierre, as well. Thanks and God Bless You   Yours sincerely, Mrs. Jasmine  Pierre UPS Delivery Company Service International Operations Division.   Note: Do disregard any email you get from any impostors or offices claiming to be in possession of your ATM Card or Cashier Check, you are hereby advice only to be in contact with this Office and also be advice to forward any emails you get from impostors to this office so we could act upon and commence investigation.    SpamAssassin Report (spam score: 4.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (officeservice906[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.180 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.180 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-15 19:42:07No subjecthttp://scammed.by/scam.php?id=212522 Good Day, This is the second time i am sending you this mail. I, Friedrich Mayrhofer Donate $ 1,000,000.00 to You, Email Me personally for more details. Regards. Friedrich Mayrhofer SpamAssassin Report (spam score: 4.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.51 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.51 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 3.8 KB_DATE_CONTAINS_TAB KB_DATE_CONTAINS_TAB 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 2017-01-15 16:43:25RE: DID YOU AUTHORIZE FOR YOUR BANK A C CHANGE? REPLY http://scammed.by/scam.php?id=212521 MY DEAR, How is your health today? We have been contacted by MR DENNIS STREETER in which he has informed us about your illness and the instruction you gave to him to act on your behalf as regards to the claims of your fund, it is in this respect that we decided to contact you first to find out if you are actually in the hospital and to verify if his claims that you have authorized him to receive the fund on your behalf is true as we don?t want to conclude on hearing from him alone, in this respect, if you are out of hospital, it is very important that you should contact us to confirm that you have authorized him to claim the fund on your behalf. Below are the Bank information(s) that he has sent to us for the purpose of wiring the fund to him, thus:- BANK NAME: COMMONWEALTH BANK OF AUSTRALIA BANK ADDRESS: 92 MOUNT ELIZA WAY.MOUNT ELIZA.3930 VICTORIA AUSTRALIA. A/C NO: 76.3550.500.4178 A/C NAME: DENNIS STREETER SWIFT CODE: CTB AA U2S NOTE: If we don?t hear from you within the next 48 hours, we will not have any other option than to proceed with his payment request as he is not aware that we have already contacted you now for this confirmation, therefore, we shall be looking forward to your prompt reply to this mail Thanks for your understanding Yours in banking service MS CAROL J ALDRIDGE (Commercial banking dept) RIVER-CITY INVESTMENT BANK SpamAssassin Report (spam score: 15.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rivercityinvestmentgroup1116[at]gmail.com) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.176 listed in dnsbl.sorbs.net] 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [123.31.31.56 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.176 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.3 PLING_QUERY Subject has exclamation mark and question mark 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 FAKE_REPLY_C FAKE_REPLY_C 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 1.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 2017-01-15 16:23:22REhttp://scammed.by/scam.php?id=212520 Dear owner, I am Mr. David Wilson, Head Officer-in-Charge, Administrative Service Inspection United Nations Inspection Agency in Harts-field-Jackson International Airport Atlanta, Georgia. During our investigation, I discovered an abandoned shipment through a Diplomat from United Kingdom which was transferred from JF Kennedy Airport to our facility here in Atlanta, and when scanned it revealed an undisclosed sum of money in 2 Metal Trunk Boxes weighing approximately 130kg. The consignment was abandoned because the Content was not properly declared by the consignee as money rather it was declared as personal effect/classified document to either avoid diversion by the Shipping Agent or confiscation by the relevant authorities. The diplomat's inability to pay for Non Inspection fees among other things are the reason why the consignment is delayed and abandoned. By my assessment, each of the boxes contains about $4M or more.They are still left in the airport storage facility till today. The Consignments like I said are two metal trunk boxes weighing about 65kg each (Internal dimension: W61 x H156 x D73 (cm) effective capacity: 680 L) Approximately. The details of the consignment including your name and email on the official document from United Nations' office in London where the shipment was tagged as personal effects/classified document is still available with us. As it stands now, you have to reconfirm your full name, Phone Number, full address so I can cross-check and see if it corresponds with the one on the official documents. It is now left to you to decide if you still need the consignment or allow us repatriate it back to UK (place of origin) as we were instructed. As I did say again, the shipper abandoned it and ran away most importantly because he gave a false declaration, he could not pay for the yellow tag, he could not secure a valid non inspection document(s), etc. I am ready to assist you in any way I can for you to get back this packages provided you will also give me something out of it (financial gratification). You can either come in person, or you engage the services of a secure shipping/delivery Company/agent that will provide the necessary security that is required to deliver the package to your doorstep or the destination of your choice. I need all the guarantee that I can get from you before I can get involved in this project. Best Regards, Mr. David Wilson Head Officer-in-Charge SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.171 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.171 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ac.gov.br] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2017-01-15 14:09:55Attention: Dear Beneficiary http://scammed.by/scam.php?id=212519 Attention: Dear Beneficiary, THE US$5,500.000.00 IS APPROVED IN YOUR NAME. Kindly, be informed that your Inheritance payment of Us$5.500.000.00Million Dollars has been re-scheduled by the International Monetary Fund IMF/World Bank to be transfer to you through a credit Online Bank to Bank Wire transfer, into your nominated account of your choice this is to avoid any form of delay in the transfer. Contact African Development Bank Group Benin with your payment details for the immediate transfer. AFRICAN DEVELOPMENT BANK (ADBG) Foreign Operation Manager: Alhaji Rasheed Bello. Email: bo.africadevelopment@outlook.fr Have it in mind that your information is highly protected by this great Bank. We look forward to serving you with the best of our service. Yours in Service, Mr. Tam George. Consular, Payment Coordinator. SpamAssassin Report (spam score: 13.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.177 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.fr] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.177 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [153.149.230.41 listed in zen.spamhaus.org] 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.75 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-15 13:45:01Soldes Pas une minute à perdre http://scammed.by/scam.php?id=212518 Si vous ne visualisez pas ce message correctement cliquez-ici Pour vous désabonner cliquez-ici Gros mandeacute;nager Cuisine Maison - Entretien Beautandeacute; - Santandeacute; Objets connectandeacute;s Smartphone Informatique Image - Son Livraison Offerte* Retrait 1h en magasin du 11 au 29 janvier 2017 Faites vite avant qu'il ne soit trop tard ! Vite j'en profite Dandeacute;couvrir tous les produits soldandeacute;s Gros mandeacute;nager andamp; encastrable Beautandeacute;, santandeacute; andamp; bien-andecirc;tre Informatique - Tablette Home-cinandeacute;ma, Audio, Hifi Petit mandeacute;nager, cuisine andamp; cuisson Tandeacute;landeacute;phonie andamp; Objets connectandeacute;s TV, vidandeacute;o, console andamp; jeux Photo - Camandeacute;ra Vite ! Il n'y en aura pas pour tout le monde... LIVRAISON OFFERTE DandEgrave;S DEMAIN RETRAIT 1H EN MAGASIN SATISFAIT OU REMBOURSandEacute; ASSISTANCE TandEacute;LandEacute;PHONIQUE *Livraison offerte sous conditions, cliquez ici pour consulter l'ensemble des conditions. Happy = heureux **Service Livraison Express proposandeacute; pour toute commande d'un tandeacute;landeacute;viseur ou d'un gros appareil mandeacute;nager passandeacute;e du dimanche avant 22H au vendredi avant 22H avec une livraison dans les zones gandeacute;ographiques couvertes prandeacute;cisandeacute;es lors de votre commande. La livraison le lendemain (jours ouvrandeacute;s, hors jours fandeacute;riandeacute;s) est offerte en crandeacute;neaux larges (matin ou aprandegrave;s-midi) dandegrave;s 300andeuro; d'achat, sinon les frais de port et de mise en service sont facturandeacute;s 29andeuro;. Par exemple, si vous passez commande le samedi avant 22H d'un tandeacute;landeacute;viseur ou d'un gros appareil mandeacute;nager disponibles, vous pouvez choisir d'andecirc;tre livrandeacute; chez vous lundi entre 7H et 9H dans les zones gandeacute;ographiques couvertes prandeacute;cisandeacute;es lors de votre commande * Les crandeacute;neaux de livraison diffandegrave;rent selon les magasins. *SOLDES : Sauf pour les dandeacute;partements 54,55,57 et 88 : du 2 au 29 janvier 2017. BOULANGER S.A, Sociandeacute;tandeacute; Anonyme au capital de 40 611 102 EUR, dont le siandegrave;ge social est - Avenue de la Motte, 59810 LESQUIN, immatriculandeacute;e au Registre du Commerce et des Sociandeacute;tandeacute;s de LILLE sous le nanddeg; B 347384570. Nanddeg; SIRET : 347 384 570 02017. Nanddeg; T.V.A Intracommunautaire FR 78347384570. Web : boulanger.com Conformandeacute;ment andagrave; la Loi Informatique et Libertandeacute;s du 6 janvier 1978, vous bandeacute;nandeacute;ficiez d'un droit d'accandegrave;s, de rectification et d'opposition aux donnandeacute;es vous concernant que vous pouvez exercer en andeacute;crivant andagrave; desabonnement@agence-mailomedia.com Pour personnaliser vos annonces lors de votre navigation (internet, email, applications...),des cookies sont déposés grâce à cet email. Pour en savoir plus ou vous y opposer, cliquez ici Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner cliquez-ici. SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.170 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.170 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: tradedoubler.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: so-reduc.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-15 13:19:16Meubles et objets déco à 60 livraison offertehttp://scammed.by/scam.php?id=212517 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/OMCwuOxl5bKpkSW5wTetYa/a7fab886 2. http://links.so-reduc.com/u/chN/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/7199ddb5 Du 11 janvier au 14 février 2017 [1]Alinéa [2]SOLDES sur un grand nombre d'articles Mobilier et Déco [3]Les meubles Jusqu'à -60% [4]La déco Jusqu'à -60% LE MEILLEUR DES SOLDES [5]Soldes produits [6]Soldes produits [7]+ livraison gratuite sur tous les meubles et objets déco** * Sur un grand nombre d'articles mobilier and déco signalés en magasins et sur http://www.alinea.fr ** Livraison gratuite en magasin. Livraison gratuite sur toute la déco en point relais à partir de 49? et en colissimo à partir de 69?. Livraison gratuite sur tous les meubles à domicile à partir de 399?. [imp?type(img)g(23695216)a(2902357)] References 1. http://links.so-reduc.com/c/chN/Eav/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/8ccdbd5c 2. http://links.so-reduc.com/c/chN/Eat/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/1f1ee762 3. http://links.so-reduc.com/c/chN/Eaq/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/aa20f840 4. http://links.so-reduc.com/c/chN/Ead/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/5aa22314 5. http://links.so-reduc.com/c/chN/Eax/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/c1173764 6. http://links.so-reduc.com/c/chN/Eal/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/787c412f 7. http://links.so-reduc.com/c/chN/EaA/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/64e5b4da Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/OMCwuOxl5bKpkSW5wTetYa/P/oMoR/7199ddb5 SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.174 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.223.174 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lookiday.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-15 12:45:17Purchase Orderhttp://scammed.by/scam.php?id=212516 Find the attached Quotation for your Action,and Confirm with proforma Invoice if same product can be supplied at Earliest. Sent from ipad SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.179 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [27.123.3.154 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: daehwa.co.id] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-15 08:27:07FACEBOOK COMPENSATION PAYMENT JANUARY FEBRUARY 2017 http://scammed.by/scam.php?id=212515 "CONGRATULATIONS FROM FACEBOOK IN ADVANCE!!!" ATTN: WINNER, On behalf of the entire staffs of FACEBOOK company, We were pleased to announce the result of the DRAWS of our FACEBOOK EMAIL LOTTERY JANUARY/ MARCH 2017. You came out been the 5th position of over 95,000,000.00 Individuals, 3,000.00 companies, as the Zonal coordinator of this lottery i am wishing you a special CONGRATULATIONS IN ADVANCE, on behalf of FACEBOOK company, make sure that you invest part of this money in a business, and also spend wisely, because this is a once in a life time opportunity. As soon as i read from you, I shall immediately reply you, with advise on how to proceed further in claiming your prize money. THE NUMBERS BELOW SHOULD KEPT SAFE AND CONFIDENTIAL, UNTIL YOU FINALLY GET YOUR PRIZE MONEY: Ticket Number: (7836980545189), Ref No: (255126278102/2526) And Serial Number: (68625751907) This notification is to inform you that you are a lucky winner of the sum of $950,000.00 (Nine Hundred And Fifty Thousand United States Dollars) from the last drawn. Your email with Ticket Number (7836980545189), Ref No (255126278102/2526) and Serial Number (68625751907) Was announced after the online draw conducted from a random selection of emails by an Advanced automated random computer search from FACEBOOK, this day 09/01/2017. As one of the 10 lucky winners, You are required to process your claim through me, as the Lottery Coordinator, this is part of our security protocols, to avoid double claiming and unwarranted abuses of this program by participants. All participants, Whom were selected through a computer ballot system through their email addresses from all over the world, thanks to software company cooperation who provided security by blocking spam and double entry. Kindly send all required information's to (facebookonlinelotto@gmail.com). To avoid unnecessary delays and complications please remember to quote your TICKET, REFERENCE andamp; SERIAL NUMBERS, in all correspondences, as i await your response with the below required information's : FULL NAME :..... FULL CONTACT ADDRESS :..... CELL OR MOBILE PHONE NUMBER :..... ID CARD Drivers License :..... OCCUPATION :..... SEX :..... NATIONALITY / COUNTRY :..... TICKET NUMBER :..... REF NUMBER :.... SERIAL NUMBER :.... PERSONAL EMAIL ADDRESS :..... Furthermore, if there is any change in email address please notify us immediately for record and security purposes. This is one of our innovations to encourage Facebook users, Our own way of saying a BIG THANK YOU, And to all our users for making Facebook their number one Social Networking to hook up with families, Friends, And new people all over the World. Congratulations once again in advance!!! Best Regards, Management. SpamAssassin Report (spam score: 15.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (facebook[at]hotmail.com) 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.0 HK_LOTTO HK_LOTTO 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FILL_THIS_FORM Fill in a form with personal information 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s) 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 2017-01-15 08:26:23SOLDES Craquez : jusqu à 70 et 10 supplémentaires dès 3 articleshttp://scammed.by/scam.php?id=212514 Code Avantages : 1WEEK **************************************************************************** Bonjour, Du 11 Janvier au 21 février, retrouvez des milliers d'articles soldés jusqu'à -70%(1) !!! De, pour en profiter au maximum, nous vous offrons 10% de réductions supplémentaires dès 3 articles achetés (2) De plus, la livraison est gratuite dès 49? d'achat (3) J'y vais : http://tk.newsletters.3-suisses.fr/r/?id=t5f60b20e,317153b2,31aaf022andutm_medium=Emailandutm_source=EMRB_CIBLEandutm_campaign=JANVIERandutm_content=PE17_355_101116_57679andutm_term=andCODAVG504409andALIAVG=1WEEKandp1=5tUdSGATBBWnRLj7Ow3nEY1wfunhMrse Bon shopping sur 3Suisses.fr ! http://tk.newsletters.3-suisses.fr/r/?id=t5f60b20e,317153b2,31aaf023andutm_medium=Emailandutm_source=EMRB_CIBLEandutm_campaign=JANVIERandutm_content=PE17_355_101116_57679andutm_term=andCODAVG504409andALIAVG=1WEEK **************************************************************************** Pour être sûr(e) de recevoir tous nos emails, ajoutez email@newsletters.3suisses.fr à votre carnet d'adresses ! (1) Soldes and promos : Offre valable du 11 janvier au 21 février 2017 dans la limite des stocks disponibles. (2) Code Avantages 1WEEK : 10% de réduction supplémentaire sur les produits stickés Soldes and Promos dès 3 articles stickés Soldes achetés valable du 13/01/2017 au 16/01/2017 inclus sur votre commande à l'exception des prix "chou", garanties et éco-participations. Pour bénéficier de votre offre, utilisez votre code avantages 1WEEK. (3) Livraison gratuite dès 49? d?achats sur tout le site 3suisses.fr pour tous les articles livrables en Point Relais®. Elle ne concerne pas la participation forfaitaire aux frais de traitement des articles lourds et aux frais d?acheminement DOM TOM. Retours gratuits sous 15 jours en Point Relais hors participation aux frais de retours pour les DOM. En application de la loi "Informatique et Liberté", vous disposez d'un droit d'accès, de rectification et d'opposition sur les données vous concernant. Si vous souhaitez accéder à vos données personnelles, les rectifier ou ne plus recevoir de propositions commerciales par l'intermédiaire des 3 Suisses, il vous suffit de le signaler à 3 Suisses, Service clientèle 59345 CROIX Cedex, en joignant une copie de votre pièce d'identité, ou par e-mail, rendez-vous sur notre page : http://tk.newsletters.3-suisses.fr/r/?id=t5f60b20e,317153b2,31aaf024andutm_medium=Emailandutm_source=EMRB_CIBLEandutm_campaign=JANVIERandutm_content=PE17_355_101116_57679andutm_term=andCODAVG504409andALIAVG=1WEEK Pour ne plus recevoir de messages électroniques de 3Suisses, suivez ce lien : http://tk.newsletters.3-suisses.fr/r/?id=t5f60b20e,317153b2,31aaf025andutm_medium=Emailandutm_source=EMRB_CIBLEandutm_campaign=JANVIERandutm_content=PE17_355_101116_57679andutm_term=andCODAVG504409andALIAVG=1WEEKandp1þlixcramb@gmail.comandp2V7794792 Si vous souhaitez nous contacter ou répondre à cet e-mail, rendez-vous sur notre page : http://tk.newsletters.3-suisses.fr/r/?id=t5f60b20e,317153b2,31aaf026andutm_medium=Emailandutm_source=EMRB_CIBLEandutm_campaign=JANVIERandutm_content=PE17_355_101116_57679andutm_term=andCODAVG504409andALIAVG=1WEEK Livelle, SASU au capital de 35.000.000 ?, RCS Lille Métropole n°805 175 585, 243-245 rue Jean Jaurès - 59650 VILLENEUVE D´ASCQ SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.49 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.49 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: 3suisses.fr] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-15 07:38:06★ SOLDES : 10 supplémentaires ★http://scammed.by/scam.php?id=212513 SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.223.169 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.169 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lemoncurve.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-15 07:11:07YOUR URGENT RESPOND IS NEEDEDhttp://scammed.by/scam.php?id=212512 FROM THE DESK OF MR.ADNAN ALI MUHAMADU MANAGER AUDITandACCOUNT DEPT, BANK OF AFRICA OUGADOUGOU BURKINA-FASO. Good Day. I know this message might meet you in utmost surprise; however, it's just my urgent need for a foreign partner that made me to contact you for this mutual benefiting business when searching for a good and reliable and trust worthy person. I got your contact email address from a Business directory and decided to connect you to this transaction that is based on trust and your understanding. I am MR.ADNAN ALI MUHAMADU Manager Audit/Accounting Department BANK OF AFRICA B.O.A Ouagadougou Burkina-Faso, I would like to know if this proposal will be worthwhile for your acceptance have a Foreign Customer, Manfred Hoffman from Germany who was an Investor, Crude Oil Merchant and Federal Government Contractor, he was a victim with Concord Air Line, flight AF4590 killing 113 people crashed on 25 July 2000 near Paris leaving a closing balance of Nineteen Million Three Hundred Thousand United States Dollars ($19.3m) in one of his Private US dollar Account that was been managed by me as his Customer's Account Officer. Base on my security report, these funds can be claimed without any hitches as no one is aware of the funds and it's closing balance except me and the customer who is (Now Deceased) therefore, I can present you as the Next of Kin and we will work out the modalities for the claiming of the funds in accordance with the law. Now, if you are interested and really sure of your trustworthy, accountability and confidentiality on this transaction without disappointment, you can contact me using my private email address:(adnanalimuhammad0@gmail.com) Our sharing ratio will be 50% for me and 40% for you, While 10% will be for the necessary expenses that might occur along the line. I expect your reply Sincerely MR.ADNAN ALI MUHAMADU SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (adnanaliu2[at]aol.fr) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.48 listed in dnsbl.sorbs.net] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: aol.fr] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-15 06:27:35Mugu Recycling Inc 1 Inbox Messagehttp://scammed.by/scam.php?id=212511 Hi Mugu Recycling Inc we have been trying to reach you - please respond! gmail.com SpamAssassin Report (spam score: 8.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: imgur.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.175 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.175 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4 address 0.0 HTML_MESSAGE BODY: HTML included in message 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image 0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 2.5 LIST_PARTIAL_SHORT_MSG Incomplete mailing list headers + short message 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-15 01:28:12Mugu Recycling Inc 1 Inbox Messagehttp://scammed.by/scam.php?id=212510 Hi Mugu Recycling Inc we have been trying to reach you - please respond! gmail.com SpamAssassin Report (spam score: 8.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.48 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: imgur.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4 address 0.0 HTML_MESSAGE BODY: HTML included in message 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of words 0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME headers 0.1 HTML_SHORT_LINK_IMG_1 HTML is very short with a linked image 0.0 T_HTML_TAG_BALANCE_CENTER Malformatted HTML 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 2.5 LIST_PARTIAL_SHORT_MSG Incomplete mailing list headers + short message 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-15 01:19:04Greeting to you Beneficiary and lucky owner http://scammed.by/scam.php?id=212509 Greeting to you Beneficiary and lucky owner , We sent you mail several time from our office regarding your $8,600.000.00musd transfer and it return back about three hours ago we trying all our best to send you mail and it continue returning back and it is very important concern your final fund transfer from Central Bank Benin.Now we try to use our yeah.net customer care email to send if it can go. Through our monitory fund unit we confirm that your fund of $8,600.000.00musd is about to shift from Central Bank Benin to your account and we find out that your fund did not have i.m.f origin approve certificate which must obtain fast from our i.m.f origin of your fund off in Cotonou Benin Republic with sum of $200usd for to approve your fund for use by you the owner, because Central Bank Benin have finalize their duty and we hold everything up till we confirm the IMF approve certificate from the origin of the fund.As soon as you send the money and the certificate obtain then we approve your fund for use because everything about your fund transfer have done well bank Central Bank Benin. What you will do urgent is to send $200usd to IMF Benin republic branch to get the certificate and forward to us to free and approve your fund for use ok as soon as you send the $200usd then forward it to us then we forward it to I.M.F Benin Republic office. I.M.F Office located at Rue 44 Uk Avenue Bp006 Cotonou Benin Republic. Send the money through money gram or western union, Receivers name Mike Eguatu. City Cotonou Country Benin Republic Mtcn Senders name Amount $200usd Email(officefilespay@yahoo.com.sg) Number of the receiver +229 972 2 4628788 Your understanding is welcome. Mr C.Y Augusta, Rep .Director, SpamAssassin Report (spam score: 3.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: yahoo.com.sg] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (wuop16[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (wuop16[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.196 listed in dnsbl.sorbs.net] 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2017-01-15 00:43:28RE: DID YOU AUTHORIZE FOR YOUR BANK A C CHANGE? REPLY http://scammed.by/scam.php?id=212508 MY DEAR, How is your health today? We have been contacted by MR DENNIS STREETER in which he has informed us about your illness and the instruction you gave to him to act on your behalf as regards to the claims of your fund, it is in this respect that we decided to contact you first to find out if you are actually in the hospital and to verify if his claims that you have authorized him to receive the fund on your behalf is true as we don?t want to conclude on hearing from him alone, in this respect, if you are out of hospital, it is very important that you should contact us to confirm that you have authorized him to claim the fund on your behalf. Below are the Bank information(s) that he has sent to us for the purpose of wiring the fund to him, thus:- BANK NAME: COMMONWEALTH BANK OF AUSTRALIA BANK ADDRESS: 92 MOUNT ELIZA WAY.MOUNT ELIZA.3930 VICTORIA AUSTRALIA. A/C NO: 76.3550.500.4178 A/C NAME: DENNIS STREETER SWIFT CODE: CTB AA U2S NOTE: If we don?t hear from you within the next 48 hours, we will not have any other option than to proceed with his payment request as he is not aware that we have already contacted you now for this confirmation, therefore, we shall be looking forward to your prompt reply to this mail Thanks for your understanding Yours in banking service MS CAROL J ALDRIDGE (Commercial banking dept) RIVER-CITY INVESTMENT BANK SpamAssassin Report (spam score: 9.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE R2017-01-14 22:36:04Sua Geladeira Retrô http://scammed.by/scam.php?id=212506 Mini Geladeira Retrô | Aquece e resfria - funciona no carro. http://www.rp2comercio.com.br/landing/mini-geladeira-retro/?utm_medium=emailandutm_source=dm_loja_geladeira_jan SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.181 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.181 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 22:00:06RE: DID YOU AUTHORIZE FOR YOUR BANK A C CHANGE? REPLY http://scammed.by/scam.php?id=212507 MY DEAR, How is your health today? We have been contacted by MR DENNIS STREETER in which he has informed us about your illness and the instruction you gave to him to act on your behalf as regards to the claims of your fund, it is in this respect that we decided to contact you first to find out if you are actually in the hospital and to verify if his claims that you have authorized him to receive the fund on your behalf is true as we don?t want to conclude on hearing from him alone, in this respect, if you are out of hospital, it is very important that you should contact us to confirm that you have authorized him to claim the fund on your behalf. Below are the Bank information(s) that he has sent to us for the purpose of wiring the fund to him, thus:- BANK NAME: COMMONWEALTH BANK OF AUSTRALIA BANK ADDRESS: 92 MOUNT ELIZA WAY.MOUNT ELIZA.3930 VICTORIA AUSTRALIA. A/C NO: 76.3550.500.4178 A/C NAME: DENNIS STREETER SWIFT CODE: CTB AA U2S NOTE: If we don?t hear from you within the next 48 hours, we will not have any other option than to proceed with his payment request as he is not aware that we have already contacted you now for this confirmation, therefore, we shall be looking forward to your prompt reply to this mail Thanks for your understanding Yours in banking service MS CAROL J ALDRIDGE (Commercial banking dept) RIVER-CITY INVESTMENT BANK SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.51 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (river.cityinvestmentbank[at]gmail.com) 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [123.31.31.56 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.51 listed in dnsbl.sorbs.net] 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.3 PLING_QUERY Subject has exclamation mark and question mark 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419) 2017-01-14 21:56:57Confirm Walmart Order: 1723 Pickup for CustomerID mugu recycling inc Ready Sat Now http://scammed.by/scam.php?id=212505 SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.53 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.63.58.232 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: pdvpvuvfuc.gdn] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: pdvpvuvfuc.gdn] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-14 21:49:11Confirm Walmart Order: 1723 Pickup for CustomerID mugu recycling inc Ready Sat Now http://scammed.by/scam.php?id=212504 SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.41 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.63.58.232 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: pdvpvuvfuc.gdn] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: pdvpvuvfuc.gdn] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.41 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-14 21:49:10Hello http://scammed.by/scam.php?id=212503 SpamAssassin Report (spam score: 3.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (aminalorinn[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.44 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.44 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-14 21:10:00Oportunidad de capitalizacion 2017 2025http://scammed.by/scam.php?id=212502 Si no lee correctamente este e-mail,haga clic Aquí Información importante (Use la solapa: Convertir texto desde HTML) Existen clientes de correo que muestran el contenido del mismo solo enformato texto (teléfonos móviles, Blackberry, algunos programas de email ).Recomendamos generar ambas versiones (HTML y texto). Growhit crea automáticamente una versión de texto basada en su versión HTML que ud. puede modificar si desea. Si no quiere recibir más nuestros e-mails,haga clic  aquí SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.44 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.44 listed in dnsbl.sorbs.net] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: netseven.ml] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 20:45:28happy new yearhttp://scammed.by/scam.php?id=212501 Attention, This is to inform you that We have concluded to effect your payment via Money Gram by $5000 Daily until your total payment of $2.5usd is completely sent to you. The Director administrator of fund release has already signed your payment, Now contact M/G Office to give you the MTCN and sender name to pick up your money. Contact with your full details: Ruben Maxwell Money Gram office conatat ,email adderss.(mgramoffice@yahoo.com) phone line (+229)-99588871 Regards, Mrs maureen SpamAssassin Report (spam score: 13.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [41.79.217.137 listed in zen.spamhaus.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [82.57.200.118 listed in dnsbl.sorbs.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (laura.greg[at]alice.it) 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.79.217.137 listed in dnsbl.sorbs.net] 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 2017-01-14 19:48:49Let s get it startedhttp://scammed.by/scam.php?id=212500 SpamAssassin Report (spam score: 9.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.51 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.51 listed in dnsbl.sorbs.net] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [137.171.179.57 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: zejepzehjy.gdn] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: zejepzehjy.gdn] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: zejepzehjy.gdn] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 19:35:05Let s get it startedhttp://scammed.by/scam.php?id=212499 SpamAssassin Report (spam score: 9.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [137.171.179.57 listed in zen.spamhaus.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.46 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.46 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: zejepzehjy.gdn] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: zejepzehjy.gdn] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: zejepzehjy.gdn] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 19:34:51Lasik special Act Now http://scammed.by/scam.php?id=212498 Lasik-special. Act Now! "I doubt not," replied Dorothy, derisively. "You would have me believe you are above your station. It is the way with all new servants. I suppose you have seen fine company and better days." "And help us," returned Lady Crawford. "I, too, shall help you," she continued. "It will be through no fault of mine if your life is wasted as mine has been." SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.41 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.41 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: covyghin.xyz] 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 18:08:03Lasik special Act Now http://scammed.by/scam.php?id=212497 Lasik-special. Act Now! "I doubt not," replied Dorothy, derisively. "You would have me believe you are above your station. It is the way with all new servants. I suppose you have seen fine company and better days." "And help us," returned Lady Crawford. "I, too, shall help you," she continued. "It will be through no fault of mine if your life is wasted as mine has been." SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.53 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.53 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 18:08:02GOOD NEWShttp://scammed.by/scam.php?id=212495 Google Corporations Belgrave House 76 Buckingham Palace Road London SW1W 9TQ, United Kingdom. Winning No: GUK/877/798/2017 Ticket No: GUK/699/33/2017 Notification: September 2017 GOOGLE ANNIVERSARY WINNING NOTIFICATION We wish to congratulate you on this note, for being part of our selected winners in our just concluded internal promotion draw this year, this promotion was set-up to encourage the active users of the Google search engine and the Google ancillary services. Hence we do believe with your winning prize, you will continue to be an active patronage to the Google search engine and services. Google is now the biggest search engine worldwide and in an effort to make sure that it remains the most widely used search engine, we ran an online e-mail beta draw which your email address won Nine Hundred and Fifty Thousand Great British Pounds Sterling (£950,000.00). We wish to formally announce to you that you have successfully passed the requirements, statutory obligations, verifications, validations and satisfactory report Test conducted for all online winners. A winning check will be issued in your name by Google Promotion Award; for the sum of Nine Hundred and Fifty Thousand Great British Pounds Sterling (GBP 950,000.00) and also a certificate of prize claims will be sent alongside your winning check cashable at any bank. You are advised to contact the assigned Google Program Administrator/Coordinator with the following details to avoid unnecessary delay and complications: VERIFICATION AND FUNDS RELEASE FORM (1) Your Contact Address/Private Email Address (2) Your Tel/Fax Numbers (3) Your Nationality/Country (4) Your Full Name (5) Occupation/Company (6) Age/Gender (7) Ever Won An Online Lottery? (8) Comments About Google Jeffrey Dean - Google Senior Fellow (Program Administrator/Coordinator) Email: jefferydeanq1@gmail.com Email: googlecordinator@jefferydean.net Google values your right to privacy! Your information is 100% secured and will be used exclusively for the purpose of this award only. The Google Promotion Award Team has discovered a huge number of double claims due to winners informing close friends relatives and third parties about their winning and also sharing their pin numbers. As a result of this, these friends try to claim the lottery on behalf of the real winners. The Google Promotion Award Team has reached a decision from its headquarters that any double claim discovered by the Lottery Board will result to the canceling of that particular winning, leading to a loss for both the double claimer and the real winner, as it is taken that the real winner was the informer to the double claimer about the lottery. So you are hereby strongly advised once more to keep your winnings strictly confidential until you claim your prize. Congratulations from the Staffs andamp; Members of the Google interactive Lotteries Board Commission. Yours faithfully, Lawrence "Larry" Page Co-founder and CEO of Google Inc? SpamAssassin Report (spam score: 13.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: jefferydean.net] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.48 listed in dnsbl.sorbs.net] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 2017-01-14 17:25:12Are glasses a pain? Get LASIKhttp://scammed.by/scam.php?id=212496 Are glasses a pain? Get LASIK "The service has shown itself so ropeable' heretofore that one experiences now a kind of chastened satisfaction in seeing it roped and dragged captive at Sir Frederick's saddle-bow." "A salsolaceous plant growing in the form of a ball several feet high. In the dry season it withers, and is easily broken off and rolled about by the winds, whence it is called roley-poly by the settlers." SpamAssassin Report (spam score: 2.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.47 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: wheerdok.xyz] 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 17:24:05Are glasses a pain? Get LASIKhttp://scammed.by/scam.php?id=212493 Are glasses a pain? Get LASIK The Independent Cavalry, because it can move so rapidly, is sent far in advance (thirty, forty, or even fifty or more miles) of the main army to obtain general information, such as the approximate strength and location of the enemy's forces. The Division Commander, since he is so far away from the Commanding General of the army in rear, and since he has broad general duties to perform, must of necessity have broad powers and, in general, be permitted to act as the occasion demands. He is, therefore, said to act independently, and his cavalry is called Independent Cavalry. The main difficulty in seeing the distinction between Independent and Divisional Cavalry consists in our forgetting that we have different kinds of organizations in the army as well as we have anywhere else. Let us clearly understand this: SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.46 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.46 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: thospon.xyz] 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 17:21:28GOOD NEWShttp://scammed.by/scam.php?id=212494 Google Corporations Belgrave House 76 Buckingham Palace Road London SW1W 9TQ, United Kingdom. Winning No: GUK/877/798/2017 Ticket No: GUK/699/33/2017 Notification: September 2017 GOOGLE ANNIVERSARY WINNING NOTIFICATION We wish to congratulate you on this note, for being part of our selected winners in our just concluded internal promotion draw this year, this promotion was set-up to encourage the active users of the Google search engine and the Google ancillary services. Hence we do believe with your winning prize, you will continue to be an active patronage to the Google search engine and services. Google is now the biggest search engine worldwide and in an effort to make sure that it remains the most widely used search engine, we ran an online e-mail beta draw which your email address won Nine Hundred and Fifty Thousand Great British Pounds Sterling (£950,000.00). We wish to formally announce to you that you have successfully passed the requirements, statutory obligations, verifications, validations and satisfactory report Test conducted for all online winners. A winning check will be issued in your name by Google Promotion Award; for the sum of Nine Hundred and Fifty Thousand Great British Pounds Sterling (GBP 950,000.00) and also a certificate of prize claims will be sent alongside your winning check cashable at any bank. You are advised to contact the assigned Google Program Administrator/Coordinator with the following details to avoid unnecessary delay and complications: VERIFICATION AND FUNDS RELEASE FORM (1) Your Contact Address/Private Email Address (2) Your Tel/Fax Numbers (3) Your Nationality/Country (4) Your Full Name (5) Occupation/Company (6) Age/Gender (7) Ever Won An Online Lottery? (8) Comments About Google Jeffrey Dean - Google Senior Fellow (Program Administrator/Coordinator) Email: jefferydeanq1@gmail.com Email: googlecordinator@jefferydean.net Google values your right to privacy! Your information is 100% secured and will be used exclusively for the purpose of this award only. The Google Promotion Award Team has discovered a huge number of double claims due to winners informing close friends relatives and third parties about their winning and also sharing their pin numbers. As a result of this, these friends try to claim the lottery on behalf of the real winners. The Google Promotion Award Team has reached a decision from its headquarters that any double claim discovered by the Lottery Board will result to the canceling of that particular winning, leading to a loss for both the double claimer and the real winner, as it is taken that the real winner was the informer to the double claimer about the lottery. So you are hereby strongly advised once more to keep your winnings strictly confidential until you claim your prize. Congratulations from the Staffs andamp; Members of the Google interactive Lotteries Board Commission. Yours faithfully, Lawrence "Larry" Page Co-founder and CEO of Google Inc? SpamAssassin Report (spam score: 13.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: jefferydean.net] 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.41 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.41 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 2017-01-14 17:19:04Hello http://scammed.by/scam.php?id=212492 Dear Friend, I am Barrister Anthony Obebe Former Accounts Officer II, to the former National Security Adviser, Col. Mohammed Sambo Dasuki ( rtd.) who was arrested and arraigned before an Abuja High Court on 19 charges bordering on money laundering and criminal breach of trust and has been remanded in the custody of the Economic and Financial Crimes Commission (E F C C) pending the hearing of his bail application by the court My urgent reason for a foreign business partner or an investor and the main purpose of contacting You for this transaction was for the fact that after going through your profile from directory engine search while I was searching for a foreign partner and an investor, i stumble upon your name and i was convince that you are capable of handling the transaction without fear or panic. As this message might meet you in utmost surprise. However, it All just sure of your capability. And sincerity to champion this business opportunity when I prayed to the good Lord for an everlasting business relationship and God guardian. Before his arrest, he left the sum of US$89.600,000.00 Million (Eighty Nine Million Six Hundred Thousand United States Dollars) with a private Bank here in Nigeria where i formally work as a banker, and all attempt to communicate with him and his Family was to no avail because of the case he had with the Federal government of Nigeria, all his family member are under security watched and there traveling document were sized and confiscated. Therefore i require your honest partnership cooperation to stand as a business partner to enable me prepare all legal paper works in your name to have the funds moved out in your name, and if you agree to assist, do respond back to me to enable me furnish you with more details as to the way forward in how this can be achieved. we can jointly open a partnership business of your choice there in your country or any country of your choice and i want you to know that any amount spent in the process will be deducted from the money as soon as the money get into your account. I have all necessary legal documents that will be used to back up our inheritance claims. All I require is your honest cooperation to enable us see the deal through. I guarantee that this will be executed under a legitimate arrangement that will protect you from any breach of the law. If you are willing to proceed kindly contact me direct to my email box for further discussion. anthony.obebe88@hotmail.com Waiting for your quick reply. Best Regards, Barrister Anthony Obebe. SpamAssassin Report (spam score: 20.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [93.62.201.204 listed in zen.spamhaus.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.182 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.182 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date 1.2 MISSING_HEADERS Missing To: header 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 MSM_PRIO_REPTO MSMail priority header + Reply-to + short subject 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-14 17:13:27Profitez des soldes jusqu a 50 et 20 sur toute la collection non remiséehttp://scammed.by/scam.php?id=212491 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour ne plus recevoir les offres de CBIO, [2]cliquez-ici References 1. http://links.fhlop52.com/v/i5M/kDMOPzsrkhcqFhqSMtK-6Q/74fbae08 2. http://links.fhlop52.com/u/i5M/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/83cb78e0 Du 13 au 16 janvier Si vous ne visualisez pas ce message correctement, [1]suivez ce lien. [2]Habitat [3]S comme Soldes - Jusqu'au 16 janvier seulement -20% sur toute la collection non remisée* [4]Pour inaugurer le 1er week-end des Soldes, Habitat vous offre également 20% sur toute la collection non remisée*. Venez profiter de cette offre du vendredi 13 au lundi 16 janvier, dans votre magasin Habitat préféré et sur habitat.fr ! [5]J'en Profite [6]facebook [7]pinterest [8]instagram [9]http://www.habitat.fr * Offre valable sur les accessoires et les meubles sauf produits Lui/Habitat, enceintes Elipson, gamme Thierry Marx, MAL4let-Stevens, livres, chèques cadeaux. Offre non cumulable avec les produits en offres ou en soldes. ** Offre valable sur une sélection de produits du 11 janvier au 21 février 2017 dans vos magasins Habitat France et sur le site internet et du 02 janvier au 21 février 2017 dans votre magasin Habitat Monaco. Les prix barrés rouges représentent les réductions des soldes, les prix barrés roses représentent les réductions des offres spéciales. Les tarifs des offres promotionnelles sont valables uniquement dans les magasins Habitat de France Métropolitaine et ne sont pas assurés sur les franchises HABITAT situés dans les DOM : Habitat Martinique / Habitat Guyane / Habitat Guadeloupe / Habitat Réunion / Habitat St Martin. Veuillez ne pas répondre à cet email. Pour toute demande destinée au Service Clients veuillez utiliser le formulaire en cliquant [10]ici. Habitat France SAS au capital de 3 750 000? - siège social : 42/44 rue du Faubourg St Antoine 75012 Paris ? RCS 389 389 545 [imp?type(inv)g(23699024)a(2789210)] References 1. http://links.fhlop52.com/c/i5M/ijC/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/de1cf922 2. http://links.fhlop52.com/c/i5M/ijh/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/ad81e4d4 3. http://links.fhlop52.com/c/i5M/ijT/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/bd4d7848 4. http://links.fhlop52.com/c/i5M/ijJ/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/b52b3606 5. http://links.fhlop52.com/c/i5M/ijU/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/f4a4d557 6. http://links.fhlop52.com/c/i5M/ijM/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/93c6731a 7. http://links.fhlop52.com/c/i5M/ij-/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/d53dec6f 8. http://links.fhlop52.com/c/i5M/ijK/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/fcc29b19 9. http://links.fhlop52.com/c/i5M/ij1/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/4e88f81f 10. http://links.fhlop52.com/c/i5M/ij4/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/fbb6e73d Vous recevez ce mail car vous êtes abonné à la base de Daily-Reduc. La base est déclarée à la CNIL sous le n°1865878 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour ne plus recevoir les offres de CBIO, [1]cliquez-ici. References 1. http://links.fhlop52.com/u/i5M/kDMOPzsrkhcqFhqSMtK-6Q/a/62NR/83cb78e0 SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.175 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.175 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: manewsbio.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 16:23:22kredithttp://scammed.by/scam.php?id=212490 gewerbliche Kredite und private Organisationen zu geben, von 5.000 im Bereich von bis zu Euro 800.000 Euro Leihfristen von 1-20 Jahren bieten niedrigere Zinsen und nicht Bonitätsprüfung , wir bieten persönliche Darlehen, Schuldenkonsolidierung Darlehen, Risikokapital , Business-Darlehen, Studenten, Wohnungsbaudarlehen oder "Darlehen aus irgendeinem Grund! jedoch ist das Verfahren bietet die Möglichkeit, die Höhe des Darlehens zu spezifizieren ist notwendig, und die Dauer kann es sich leisten, wir sind gut qualifiziert und registrierte Darlehen sind für maximale Sicherheit gut versichert ist die wichtigste E-Mail. jacques.beils01@gmail.com .................................................................................................................................................. ** Need money? ************** We are willing to give loans offer interest rates of 3% for commercial loans and private organizations, ranging from 5,000 up to Euro 800,000 Euro loan periods of 1-20 years can offer lower interest and non-credit check, We offer personal loans, debt consolidation loans, venture capital, business loans, students, home loans or "loans for any reason! However, the method offers the possibility to specify the amount of the loan is necessary and the duration can afford, we are well qualified and registered loans are well insured for maximum security is the most important e-mail. jacques.beils01@gmail.com SpamAssassin Report (spam score: 3.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (jule.cesrarer[at]outlook.fr) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.176 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 15:48:35Need an Oil Change? Use This Couponhttp://scammed.by/scam.php?id=212489 Need an Oil Change? Use This Coupon Still, I had succeeded. But I soon found that I was little nearer freedom than before. The passage was now dark, and the house-door, when I found my way to it, resisted all my efforts. This drove me to seek another egress, which it was far from easy to find. At length, and by dint of groping about, I hit on a door which led into a downstairs room; it was unlocked and I entered, feeling before me with my hands. The darkness, the silence of the empty house, and my hurry, formed a situation to appal the boldest; but I was desperate, and extending my arms I trod cautiously across the room to where the window should be, and sought for and found the shutters. I tried the bar, and to my joy felt it swing. I let it down softly and dragged the shutters open, and sweating at every pore, saw through the leaded panes the dark dull lane outside, with a faint light from a neighbouring window falling on the wall opposite. God knows I thought myself then the most unlucky of men; a man ruined when on the point of a great and seemingly assured success. I flung myself down in my despair, and could have dashed my head against the boards. But presently, in the midst of my bewailing myself, and when the first convulsive fit of rage was abating, a new thought brought me to my feet in a panic. What if Smith, before he returned, fell in with Ferguson? The meeting was the more probable, inasmuch as, if Ferguson succeeded in freeing himself, he was as likely to hasten to the Duke of Berwick to warn him as to do anything else. At any rate I was not inclined to sit weighing the chances nicely, but hastening frantically to the door, I tried it with knee and shoulder. To my joy it yielded somewhat; on which, throwing caution aside, I drew back and flung myself against it with all my weight. The lock gave way, and the door flying open, I came near to falling headlong down the stairs. SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.182 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.182 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: oafighez.xyz] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 15:42:07Need an Oil Change? Use This Couponhttp://scammed.by/scam.php?id=212488 Need an Oil Change? Use This Coupon Still, I had succeeded. But I soon found that I was little nearer freedom than before. The passage was now dark, and the house-door, when I found my way to it, resisted all my efforts. This drove me to seek another egress, which it was far from easy to find. At length, and by dint of groping about, I hit on a door which led into a downstairs room; it was unlocked and I entered, feeling before me with my hands. The darkness, the silence of the empty house, and my hurry, formed a situation to appal the boldest; but I was desperate, and extending my arms I trod cautiously across the room to where the window should be, and sought for and found the shutters. I tried the bar, and to my joy felt it swing. I let it down softly and dragged the shutters open, and sweating at every pore, saw through the leaded panes the dark dull lane outside, with a faint light from a neighbouring window falling on the wall opposite. God knows I thought myself then the most unlucky of men; a man ruined when on the point of a great and seemingly assured success. I flung myself down in my despair, and could have dashed my head against the boards. But presently, in the midst of my bewailing myself, and when the first convulsive fit of rage was abating, a new thought brought me to my feet in a panic. What if Smith, before he returned, fell in with Ferguson? The meeting was the more probable, inasmuch as, if Ferguson succeeded in freeing himself, he was as likely to hasten to the Duke of Berwick to warn him as to do anything else. At any rate I was not inclined to sit weighing the chances nicely, but hastening frantically to the door, I tried it with knee and shoulder. To my joy it yielded somewhat; on which, throwing caution aside, I drew back and flung myself against it with all my weight. The lock gave way, and the door flying open, I came near to falling headlong down the stairs. SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.41 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: oafighez.xyz] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.41 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 15:32:49Atten Owner Of This Email Address http://scammed.by/scam.php?id=212487 GOOD DAY MY FRIEND, How are you, and with your family, All the arragement is done about your ATM CARD,there is no problem again but i let you know that . Our ATM DEPARTMENT OFFICE Benin republic here are delivery your ATM MASTER CARD with very little amount If you are ready to receive it which can cost you $85 dollar only. Now i let you know that all your total Amount of your ATM CARD is ( $5.8 MILLION UNITED STATE DOLLAR ONLY ) so i let you understand that to Activate ATM CARD before is $200 dollar in any country in this world wide. but the COMMISSIONNER OF POLICE And MR Patrice Talon PRESIDENCE of Benin republic held a meeting with there Cabinet the cocultion is that the activation of ATM MASTER CARD will be $85dollar only. so if you know that you are ready to receive your ATM CARD contact This email ( atmcard965@gmail.com) and ask them where you can send the $46 dollar for activation fee of your ATM. Remember that immediately the ATM CARD will delivery to you, every day you will Wedrawl $4000 dollar until all your total ATM MASTER CARD will got finish. Immedately you receive this email call me here +229 66529457 for more explanation. THANK YOU GOD BLESS. BEST REGARD DR,MIKE IBE, FROM ATM DEPARTMENT OFFICE BENIN REPUBLIC SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mattia.caglioni[at]alice.it) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [82.57.200.118 listed in dnsbl.sorbs.net] 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_FM_DR T_HK_NAME_FM_DR 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2017-01-14 15:22:56Soldes : jusqu à 50 profitez en http://scammed.by/scam.php?id=212486 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour ne plus recevoir les offres de CBIO, [2]cliquez-ici References 1. http://links.fhlop52.com/v/i5M/iHOqkR0cBIX6p-Wl9uw2R3/10640d23 2. http://links.fhlop52.com/u/i5M/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/36eba653 [1]Jusqu?à -50 pour cent* and -10 pour cent supplementaires** [2]IKKS [3][bord_blcg] [4]FEMME [5]HOMME [6]ENFANTS [7][bord_blcd] [8]SOLDES [9]jusqu'à -50% et -10% supplémentaires dès 3 articles achetés sur toute la collection [10]Homme IKKS [11]Profitez de cette offre en validant votre adresse email [12]felixcramb@gmail.com [13][trait] [14]Vite,j'en profite [15]En validant, j?accepte de recevoir par e-mail les offres promotionnelles, avant-premières et actualités de IKKS. [16]Garçon [17]Fille [18]Livraison offerte dès 200? [19]paiement sécurisé [20]Satisfait ou remboursé * Offre valable du 11 janvier au 21 février 2017 sur ikks.com et dans les boutiques IKKS, I.CODE et XandO participantes en France, hors boutiques situées à Monaco et dans les départements de la Meuse, Moselle, Meurthe et Moselle et des Vosges. Offre valable sur articles signalés des collections Hiver 2016 IKKS Baby, Kid, Junior, Men, Women et I.CODE, hors collection Été 2017 et produits signalés par une étiquette blanche. Remises effectuées par escompte de caisse sur le prix conseillé, sur les articles signalés par le code coloris. ** La remise de 10% supplémentaires est appliquée dès 3 articles TEXTILE achetés des collections Hiver 2016 IKKS Baby, Kid et Junior OU 3 articles TEXTILE achetés des collections Hiver 2016 IKKS Men, Women et I.CODE, hors collection Été 2017, accessoires et produits signalés par une étiquette blanche. Les sacs IKKS Women, les sous-vêtements enfant et les chaussures sont considérés comme des articles "TEXTILE". Cette remise est calculée sur le prix déjà réduit. [imp?type(inv)g(23703730)a(2789210)] References Visible links 1. http://links.fhlop52.com/c/i5M/in_/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/a81da842 2. http://links.fhlop52.com/c/i5M/in9/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/81e2df34 3. http://links.fhlop52.com/c/i5M/inV/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/c32a6766 4. http://links.fhlop52.com/c/i5M/inZ/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/1d23b760 5. http://links.fhlop52.com/c/i5M/in8/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/c80b722b 6. http://links.fhlop52.com/c/i5M/inY/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/c7194041 7. http://links.fhlop52.com/c/i5M/ine/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/d7d5dcdd 8. http://links.fhlop52.com/c/i5M/inf/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/0def2bfc 9. http://links.fhlop52.com/c/i5M/inu/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/926918ab 10. http://links.fhlop52.com/c/i5M/in0/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/ead51010 11. http://links.fhlop52.com/c/i5M/ijy/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/14f4530e 12. http://links.fhlop52.com/c/i5M/ijF/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/de0238b3 13. http://links.fhlop52.com/c/i5M/ijc/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/e045af7d 14. http://links.fhlop52.com/c/i5M/ijm/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/ad9f2545 15. http://links.fhlop52.com/c/i5M/ijb/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/a9ac0262 16. http://links.fhlop52.com/c/i5M/ijo/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/3e4c7f7b 17. http://links.fhlop52.com/c/i5M/ijL/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/6f0f00b6 18. http://links.fhlop52.com/c/i5M/iji/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/51489778 19. http://links.fhlop52.com/c/i5M/ij7/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/94acceaf 20. http://links.fhlop52.com/c/i5M/ij2/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/2192d18d Hidden links: 22. http://links.fhlop52.com/c/i5M/ijX/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/d66476fd 23. http://links.fhlop52.com/c/i5M/ij6/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/dd4563b0 Vous recevez ce mail car vous êtes abonné à la base de Daily-Reduc. La base est déclarée à la CNIL sous le n°1865878 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour ne plus recevoir les offres de CBIO, [1]cliquez-ici. References 1. http://links.fhlop52.com/u/i5M/iHOqkR0cBIX6p-Wl9uw2R3/a/62NR/36eba653 SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.179 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.179 listed in dnsbl.sorbs.net] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: manewsbio.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 14:49:18Print 1 Free Coupon for Your Next Oil Changehttp://scammed.by/scam.php?id=212485 Print (1) Free Coupon for Your Next Oil Change Ghirlandajo, 1449-1495? Florentine Verrocchio, 1435-1488 " Leonardo da Vinci, 1452-1519 " Bartolommeo, 1475-1517 " Francesco Granacci, 1477-1543 (friend of Michelangelo) " Giuliano Bugiardini, 1475-1554 (friend of Michelangelo) " Raphael, 1483-1520 " Andrea del Sarto, 1486-1531 " Sebastiano del Piombo, 1485-1547 " Giorgio Vasari, 1512-1574 " Giovanni Bellini, 1428-1516 Venetian Giorgione, 1477-1510 " Titian, 1477-1576 " Tintoretto, 1518-1594 " Paolo Veronese, 1528-1588 " Perugino, 1446-1523 Umbrian Bazzi, 1477-1549 Sienese Baldassare Peruzzi, 1481-1536 (also architect) " Domenico Beccafumi, 1486-1551 " Mantegna, 1431-1506 Mantuan Francia, 1450-1518 Bolognese Correggio, 1494-1534 Emilian Commissioned in August to prepare cartoons for decoration of Hall in Palazzo Vecchio, on wall opposite to that assigned to Leonardo da Vinci (p. 119). SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.54 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.54 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: exewifta.xyz] 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 14:47:08Need an Oil Change? Use This Couponhttp://scammed.by/scam.php?id=212484 Need an Oil Change? Use This Coupon Audrey drew herself up. She had a proper pride, and she chose to forget for this occasion a bruise upon her arm and the thrusting upon her of Hugon's company. "I do not know who you are, sir, that ask me such questions," she said sedately. "I have food and shelter and--and--kindness. And I go barefoot only of week days"-- "This is the thicket between Fair View and the glebe lands," said Audrey, who knew not what bark of tree and milk and honey had to do with the case. "Over yonder, sir, is the road to the great house. This path ends here; you must go back to the edge of the wood, then turn to the south"-- SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.182 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.182 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: evuroast.xyz] 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 14:42:44Print 1 Free Coupon for Your Next Oil Changehttp://scammed.by/scam.php?id=212483 Print (1) Free Coupon for Your Next Oil Change "I reduce God to the attribute of nationality?" cried Shatov. "On the contrary, I raise the people to God. And has it ever been otherwise? The people is the body of God. Every people is only a people so long as it has its own god and excludes all other gods on earth irreconcilably; so long as it believes that by its god it will conquer and drive out of the world all other gods. Such, from the beginning of time, has been the belief of all great nations, all, anyway, who have been specially remarkable, all who have been leaders of humanity. There is no going against facts. The Jews lived only to await the coming of the true God and left the world the true God. The Greeks deified nature and bequeathed the world their religion, that is, philosophy and art. Rome deified the people in the State, and bequeathed the idea of the State to the nations. France throughout her long history was only the incarnation and development of the Roman god, and if they have at last flung their Roman god into the abyss and plunged into atheism, which, for the time being, they call socialism, it is solely because socialism is, anyway, healthier than Roman Catholicism. If a great people does not believe that the truth is only to be found in itself alone (in itself alone and in it exclusively); if it does not believe that it alone is fit and destined to raise up and save all the rest by its truth, it would at once sink into being ethnographical material, and not a great people. A really great people can never accept a secondary part in the history of Humanity, nor even one of the first, but will have the first part. A nation which loses this belief ceases to be a nation. But there is only one truth, and therefore only a single one out of the nations can have the true God, even though other nations may have great gods of their own. Only one nation is 'god-bearing,' that's the Russian people, and... and... and can you think me such a fool, Stavrogin," he yelled frantically all at once, "that I can't distinguish whether my words at this moment are the rotten old commonplaces that have been ground out in all the Slavophil mills in Moscow, or a perfectly new saying, the last word, the sole word of renewal and resurrection, and... and what do I care for your laughter at this minute! What do I care that you utterly, utterly fail to understand me, not a word, not a sound! Oh, how I despise your haughty laughter and your look at this minute!" "Not a single nation," he went on, as though reading it line by line, still gazing menacingly at Stavrogin, "not a single nation has ever been founded on principles of science or reason. There has never been an example of it, except for a brief moment, through folly. Socialism is from its very nature bound to be atheism, seeing that it has from the very first proclaimed that it is an atheistic organisation of society, and that it intends to establish itself exclusively on the elements of science and reason. Science and reason have, from the beginning of time, played a secondary and subordinate part in the life of nations; so it will be till the end of time. Nations are built up and moved by another force which sways and dominates them, the origin of which is unknown and inexplicable: that force is the force of an insatiable desire to go on to the end, though at the same time it denies that end. It is the force of the persistent assertion of one's own existence, and a denial of death. It's the spirit of life, as the Scriptures call it, 'the river of living water,' the drying up of which is threatened in the Apocalypse. It's the æsthetic principle, as the philosophers call it, the ethical principle with which they identify it, 'the seeking for God,' as I call it more simply. The object of every national movement, in every people and at every period of its existence is only the seeking for its god, who must be its own god, and the faith in Him as the only true one. God is the synthetic personality of the whole people, taken from its beginning to its end. It has never happened that all, or even many, peoples have had one common god, but each has always had its own. It's a sign of the decay of nations when they begin to have gods in common. When gods begin to be common to several nations the gods are dying and the faith in them, together with the nations themselves. The stronger a people the more individual their God. There never has been a nation without a religion, that is, without an idea of good and evil. Every people has its own conception of good and evil, and its own good and evil. When the same conceptions of good and evil become prevalent in several nations, then these nations are dying, and then the very distinction between good and evil is beginning to disappear. Reason has never had the power to define good and evil, or even to distinguish between good and evil, even approximately; on the contrary, it has always mixed them up in a disgraceful and pitiful way; science has even given the solution by the fist. This is particularly characteristic of the half-truths of science, the most terrible scourge of humanity, unknown till this century, and worse than plague, famine, or war. A half-truth is a despot... such as has never been in the world before. A despot that has its priests and its slaves, a despot to whom all do homage with love and superstition hitherto inconceivable, before which science itself trembles and cringes in a shameful way. These are your own words, Stavrogin, all except that about the half-truth; that's my own because I am myself a case of half-knowledge, and that's why I hate it particularly. I haven't altered anything of your ideas or even of your words, not a syllable." SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.181 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.181 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: camund.xyz] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 14:17:45Need an Oil Change? Use This Couponhttp://scammed.by/scam.php?id=212482 Need an Oil Change? Use This Coupon "Right you are, young man," said Peter. "Come out of here you kids! Come to the back yard and play quietly. When Little White Butterfly gets rested and fed, we'll come one at a time and kiss her hand, and wish her pleasant dreams with us, and then we'll every one of us get down on our knees and ask God to help us take such good care of her that she will get well at our house." "All right with me," agreed Mickey. "You just hold still so this doesn't make you sick, and to-morrow you can see things when you are all nice and rested." SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.51 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: umsagloo.xyz] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.51 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 13:55:18Print 1 Free Coupon for Your Next Oil Changehttp://scammed.by/scam.php?id=212481 Print (1) Free Coupon for Your Next Oil Change The End of Time first listened to the small still voice of Caution. He whispered anxiously to make no noise lest enemies might arise, that my other attendants had protectors at Berberah, but that he, the hated and feared, as the _locum tenens_ of Sharmarkay,--the great _bete noire_,-- depended wholly upon my defence. The Donkey led us slowly and cautiously round the southern quarter of the sleeping town, through bone heaps and jackals tearing their unsavoury prey: at last he marched straight into the quarter appropriated to the Ayyal Gedid our protectors. Anxiously I inquired if my comrades had left Berberah, and heard with delight that they awaited me there. It was then 2 A.M. and we had marched at least forty miles. The Somal, when in fear of forays, drive laden camels over this distance in about ten hours. At dawn on the 30th January, I arose and inspected the site of Bulhar. It was then deserted, a huge heap of bleached bones being the only object suggestive of a settlement. This, at different times, has been a thriving place, owing to its roadstead, and the feuds of Berberah: it was generally a village of Gurgis, with some stone-houses built by Arabs. The coast, however, is open and havenless, and the Shimal wind, feared even at the Great Port, here rages with resistless violence. Yet the place revives when plundering parties render the plain unsafe: the timid merchants here embark their goods and persons, whilst their camels are marched round the bay. SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.54 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.54 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: poordogn.xyz] 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 13:34:24Print 1 Free Coupon for Your Next Oil Changehttp://scammed.by/scam.php?id=212480 Print (1) Free Coupon for Your Next Oil Change The End of Time first listened to the small still voice of Caution. He whispered anxiously to make no noise lest enemies might arise, that my other attendants had protectors at Berberah, but that he, the hated and feared, as the _locum tenens_ of Sharmarkay,--the great _bete noire_,-- depended wholly upon my defence. The Donkey led us slowly and cautiously round the southern quarter of the sleeping town, through bone heaps and jackals tearing their unsavoury prey: at last he marched straight into the quarter appropriated to the Ayyal Gedid our protectors. Anxiously I inquired if my comrades had left Berberah, and heard with delight that they awaited me there. It was then 2 A.M. and we had marched at least forty miles. The Somal, when in fear of forays, drive laden camels over this distance in about ten hours. At dawn on the 30th January, I arose and inspected the site of Bulhar. It was then deserted, a huge heap of bleached bones being the only object suggestive of a settlement. This, at different times, has been a thriving place, owing to its roadstead, and the feuds of Berberah: it was generally a village of Gurgis, with some stone-houses built by Arabs. The coast, however, is open and havenless, and the Shimal wind, feared even at the Great Port, here rages with resistless violence. Yet the place revives when plundering parties render the plain unsafe: the timid merchants here embark their goods and persons, whilst their camels are marched round the bay. SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.171 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.171 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: poordogn.xyz] -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-14 13:34:23Attn: Account Holder http://scammed.by/scam.php?id=212479 Attn: Account Holder, This is to notify you that a new development has been made by today in which the Republic Bank which is called United Bank for Africa(UBA) which has been holding your funds all this while has been ordered to release it to you. The bank has created an online bank account on your behalf and the online bank account has been funded with the total sum of $8,500,000.00 USD in which you would be able to withdraw any amount of money daily from the online account, Please what Ever you want to Ask make sure that You Copy this Email Below and send Me email to this email in Bracket (timwil926@gmail.com). Below are the online bank account details Welcome! To - UBA Bank Online Plc Secure Account Page Activate 2017-01-09 Created Opened Account Balance $8,500,000,00 USD Sort Code. 00169381101-43372 1020-03-8733 Swift Code PNBPUS33 Account Number 1010169857504 The bank has also stated that you could be able to start accessing the online bank account once the transfer code has been issued to you and this code will be issued to you at the sum of $95 Usd.The bank has also directed that the payment should be sent through Western Union Money Transfer or MoneyGram Transfer with the below details. Receiver Name:... SAM AKI Country:.... Benin Republic City:... Porto-Novo Amount: $95 Usd. MTCN Number... Senders Name... Send the following details to me as soon as you make the payment which are senders name and address, Mtcn Number,Text Question and Answer Used and the amount sent. Once the payment of $95 Usd has been received by today, then the bank would issue the TRANSFER CODE/TRANSFER PIN to you which you would use to make the final transfer to any bank account of your choice. I would be waiting for the details as directed as soon as possible, To This Email in Bracket (timwil926@gmail.com). THANKS FOR YOUR CO-OPERATION. Respectively Tim Wilkening Assistant Director. SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (curtisshade50[at]yahoo.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [98.136.217.119 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (curtisshade50[at]yahoo.com) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2017-01-14 12:59:58Jusqu à 85 pourcent Foncez http://scammed.by/scam.php?id=212478 Si ce message ne s'affiche pas correctement, suivez ce lien http://mirror.e.meilleurs-coupon.com/?e=felixcramb@gmail.comands=747andb=633 Excedence LES SOLDES EXCEDENCE JUSQU'A -85% (http://clkuk.tradedoubler.com/click?p=204829anda=2225918andg=23696676andurl=http://www.excedence.com/?utm_medium=email_tradedoublerandutm_source=tradedoublerandutm_campaign=[TD_SITE_NAME]andutm_term=[TD_AFFILIATE_ID]) (http://clkuk.tradedoubler.com/click?p=204829anda=2225918andg=23696676andurl=http://www.excedence.com/u_du00000014/soldes.aspx/?utm_medium=email_tradedoublerandutm_source=tradedoublerandutm_campaign=[TD_SITE_NAME]andutm_term=[TD_AFFILIATE_ID]) dans plus de 4300 points Relais en 72H à domicile ou en 48H en point Relais en point Relais quel que soit le mode de livraison choisi *Tous nos prix de références sont issus de catalogues parus sur des saisons antérieures à l?actuelle. *Offre valable dès aujourd?hui et jusqu?à épuisement des stocks. COGEMAG - 15 Avenue du Château Blanc - 59290 Wasquehal - Tél. : 03 59 56 76 07 (prix d?un appel local) Capital : 6 500 000? - Numéro d?immatriculation : RCS LILLE METROPOLE B 475.580.437 Numéro de TVA : FR 42475580437 Pour vous désabonner, suivez ce lien http://unsub.e.meilleurs-coupon.com/?e=felixcramb@gmail.comands=747andb=633 SpamAssassin Report (spam score: 4.6) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: meilleurs-coupon.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: meilleurs-coupon.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.41 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.41 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 09:57:27Bonnes année 2017 : Livraison à 0€ sur votre commandehttp://scammed.by/scam.php?id=212477 http://bonjour-fute.com/YSUzRDUzMiUyNmMlM0Q2ODclMjZlJTNENTMwJTI2bCUzRDc2NTIlMjZzJTNENTMzMTM3MyUyNnQlM0RjJTI2bHMlM0QxMg= [1] [1] [2] [3] [4] [5] [6] [7] [1] [1] [1] [1] [1] [1] [1] [8] [9] Offre non cumulable. Les prix de nos produits sont indiqués toutes taxes comprises et bénéficient d?une garantie de un an. Le délai de livraison sur votre commande est de 48h/72h. Toner Services livre en France métropolitaine et en Belgique uniquement. Toner Services 10/14 av. du général Leclerc 78230 Le Pecq http://bonjour-fute.com/YSUzRDUzMiUyNmMlM0Q2ODclMjZlJTNENTMwJTI2bCUzRDc2NTQlMjZzJTNENTMzMTM3MyUyNnQlM0RjJTI2bHMlM0QxMg= Links: ------ [1] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewsletterlink-3059.asp [2] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewslettermarque-3059-hp.asp [3] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewslettermarque-3059-canon.asp [4] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewslettermarque-3059-epson.asp [5] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewslettermarque-3059-brother.asp [6] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewslettermarque-3059-lexmark.asp [7] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=http%3A%2F%2Fclk.tradedoubler.com%2Fclick%3Fp%3D54403%26a%3D2823736%26g%3D23659246%26url%3Dhttp%3A%2F%2Fwww.toner-service.fr%2Fnewslettermarque-3059-samsung.asp [8] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=https%3A%2F%2Fwww.facebook.com%2Ftonerservices [9] http://www.affi95.com/tracking/cpc.php?ids 4andidvq3andsid=andemail=andnom=andprenom=andciv=andcp=andredirect=https%3A%2F%2Ftwitter.com%2Ftoner_services SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.41 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.41 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bonjour-fute.com] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 07:11:49Payment Infohttp://scammed.by/scam.php?id=212476 Attached Transfer slip is for your Action,As I was instructed from your Customer. Sent from ipad SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.178 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [27.123.3.154 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: daehwa.co.id] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-14 02:09:55Sandra wants to share her private photoshttp://scammed.by/scam.php?id=212475 Popular but politically humbled, President Barack Obama said goodbye to the nation Tuesday night, declaring during his farewell address that he hasn't abandoned his vision of progressive change but warning that it now comes with a new set of caveats. . SpamAssassin Report (spam score: 9.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.172 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.49 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.247.3.162 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: bevorkj.loan] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: bevorkj.loan] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: bevorkj.loan] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 00:25:27Sua Geladeira Retrô http://scammed.by/scam.php?id=212473 Mini Geladeira Retrô | Aquece e resfria - funciona no carro. http://www.rp2comercio.com.br/landing/mini-geladeira-retro/?utm_medium=emailandutm_source=dm_loja_geladeira_jan SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.42 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.42 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-14 00:22:14This chance can pass you byhttp://scammed.by/scam.php?id=212472 Hi, We were notified that you may be eligible for the new Career Advancement grant. If you haven't taken advantage of the program yet, the deadline is approaching soon. "At this stage, the park is closed and juste_71044 Dreamworld is working closely with police confided_14307 and emergency services to establish the defraudation_52901 facts around the incident. We are highlighted_56917 deeply shocked and saddened by contests_78239 this and our hearts and our thoughts ivies_60986go to the families involved and to ginkgo_79641 their loved ones," Davidson said. Billed as a Hispanicize_78568 family ride, the Thunder River Rapids Ride dishonoring_80880has had problems in the past, according to emboldens_88116 a report functionality_08848 by CNN affiliate Seven News. US Olympian Matthew achromatizes_41755 Centrowitz tweeted that he had just stepped Dominican_34588 off the ride when he learned cycloheptatrienyl_55860 that there were injuries. "invoicing_73870 Dude! Just got off a districting_68476 ride 15 mins ago that foolishly_31720 has 1 person seriously injured and falseties_81317 2 others trapped. #Dreamworld," the hypostatise_77198 track star's tweet read. The death toll imagen_86688 was updated after Centrowitz' tweet agrestic_53637 posted. SpamAssassin Report (spam score: 9.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: fovxvah.loan] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.247.25.12 listed in zen.spamhaus.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.51 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: fovxvah.loan] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: fovxvah.loan] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.51 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-13 23:16:43Sua Geladeira Retrô http://scammed.by/scam.php?id=212470 Mini Geladeira Retrô | Aquece e resfria - funciona no carro. http://www.rp2comercio.com.br/landing/mini-geladeira-retro/?utm_medium=emailandutm_source=dm_loja_geladeira_jan SpamAssassin Report (spam score: 2.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.180 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.180 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-13 21:45:49Enforce terms of my dissolution agreementhttp://scammed.by/scam.php?id=212468 Good Day, I am making an inquiry about possible representation to enforce terms of my dissolution agreement with my former husband. Please advise if you handle such case. I will also need a referral if this case is not within your line of practice. Yours Truly Karina SpamAssassin Report (spam score: 3.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (karinaclark485[at]hotmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.47 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-13 21:39:30Confirm Walmart Order: 0885 Pickup for CustomerID mugu recycling inc Ready Fri Now http://scammed.by/scam.php?id=212467 You've_received_$1OO_WaImart_GlFT_Card_Set_To_Expire_On_.... bathtubful A ceasefire creaturize brokered by Russia and econometrist Turkey for eastern Aleppo has been broken, activists anisometropia on the ground and the Turkish employing Foreign Minister say, as a planned Kennelly evacuation of civilians has also been gambols delayed. An activist with the Aleppo Media Center ( Glagolitic AMC), Salah al-Ashkar, told CNN that heavy febrific shelling had resumed on the remaining rebel- Deuteronomy held areas Wednesday after the ceasefire gutless was announced late Tuesday. Activists defrauding claim that the shelling was coming homonymy from the regime, while Syrian state epigrammatic television reported deaths and injuries from rebel fire. coimbra SpamAssassin Report (spam score: 9.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [196.193.134.149 listed in zen.spamhaus.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.54 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.54 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: euontou.loan] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: euontou.loan] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: euontou.loan] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-13 21:19:09Soldes jusqu à 50 : profitez en dès maintenanthttp://scammed.by/scam.php?id=212465 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/2LELQ6BavDJA3ONwSqFtq3/e0c3e0ff 2. http://links.so-reduc.com/u/chN/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/424678a4 -50% - 30% : profitez-en dès maintenant [1]Visualisez cet email dans un navigateur. [2]Maisons du Monde [3]Facebook [4] Instagram [5] Pinterest [6] Twitter [7] Google plus [8]-50% | Soldes Préparez-vous à être soufflé ! [9]Waouh ! Pendant les soldes Maisons du Monde, profitez de réductions exceptionnelles sur des centaines d'articles : meubles, canapés, déco, linge de maison, arts de la table, chambre enfant, outdoor... Il y a de quoi être soufflé ! [10]Meubles and Assises [11]Déco [12]Linge de maison [13]Art de la table [14]Décoration murale [15]Junior [16]j'en profite Services Maisons du Monde Maisons du monde Maisons du Monde, c'est des meubles et objets de décoration disponibles dans 12 pays, à travers plus de 200 magasins. Des créations originales et exclusives, conçues par nos stylistes, puis fabriquées par des partenaires choisis avec soin. Avec Maisons du Monde, retrouvez plus de 3 000 produits disponibles 24/24 d'un simple clic pour le salon, la chambre, la cuisine ou le jardin. Toujours plus de meubles sur [17]notre site et sur notre [18]catalogue en ligne. © Maisons du Monde 2016 [imp?type(img)g(23684938)a(2902357)] References 1. 91b9e781333a47755e403f7691bddbf5.html 2. http://links.so-reduc.com/c/chN/EXY/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/1c24db8e 3. http://links.so-reduc.com/c/chN/EXe/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/0ce84712 4. http://links.so-reduc.com/c/chN/EXf/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/d6d2b033 5. http://links.so-reduc.com/c/chN/EXu/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/49548364 6. http://links.so-reduc.com/c/chN/EX0/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/31e88bdf 7. http://links.so-reduc.com/c/chN/E6y/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/9f3b4f5a+maisonsdumonde/ 8. http://links.so-reduc.com/c/chN/E6F/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/55cd24e7 9. http://links.so-reduc.com/c/chN/E6c/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/6b8ab329 10. http://links.so-reduc.com/c/chN/E6m/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/26503911 11. http://links.so-reduc.com/c/chN/E6b/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/22631e36 12. http://links.so-reduc.com/c/chN/E6o/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/b583632f 13. http://links.so-reduc.com/c/chN/E6L/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/e4c01ce2 14. http://links.so-reduc.com/c/chN/E6i/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/da878b2c 15. http://links.so-reduc.com/c/chN/E67/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/1f63d2fb 16. http://links.so-reduc.com/c/chN/E62/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/aa5dcdd9 17. http://links.so-reduc.com/c/chN/E6X/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/5dab6aa9 18. http://links.so-reduc.com/c/chN/E66/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/568a7fe4 Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/2LELQ6BavDJA3ONwSqFtq3/P/oMoR/424678a4 SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.48 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: lookiday.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.48 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-13 20:24:17From Mr John Asamoahhttp://scammed.by/scam.php?id=212464 From Mr. John Asamoah Branch Manager Access International Bank Takoradi Ghana. Esteemed Compliments, I anticipate that you read this mail quickly and let me know your opinion or willingness on this classified information that I will release to you. Firstly, I am a happily married man with 3 kids and therefore I would not want to jeopardize this opportunity to change my financial status that will give my family a secured future. I am Mr. John Asamoah the branch manager of the Access International Bank of Ghana, Takoradi Branch. I got your information during my search through the Internet... I am 51 years of age and married with 3 lovely kids. It may interest you to hear that I am a man of PEACE and don't want problem, but I don't know how you will feel about this, but I am telling you that this is real and you are not going to regret after doing this transaction with me. I only hope we can assist each other. But if you don't want this business offer kindly forget it as I will not contact you again. I have packaged a financial transaction that will benefit both of us, as the Regional manager of the Access International Bank of Ghana, Takoradi Branch; it is my duty to send in a financial report to my head office in the capital city Accra-Ghana at the end of each year. On the course of the last year 2016 end of year report, I discovered that my branch in which I am the Manager made Seven million five hundred and twenty thousand united state dollars (USD$7,520,000.00) which my head office are not aware of and they will never be aware of, Nor must they know that I am involved in this transaction. I have since place this fund on what we call SUSPENSE OR ESCROW ACCOUNT without any beneficiary. As an officer of the bank I cannot be directly connected to this money, so this informed my contacting you for us to work so that you can assist receive this money into your bank account for us to SHARE, while you will have 35% of the total fund. Note there are practically no risk involved, it will be bank to bank transfer, all I need from you is to stand claim as the rightful depositor of this fund who made the deposit with our branch so that my Head office can order the transfer to your designated bank account. If you accept this offer to work with me, I will appreciate it very much. As soon as I receive your kind response, I will give you details on how we can achieve it successfully. Please to proceed with me in this transaction I will appreciate if you provide me this information mentioned below. Please reply me only with this private email address: johnasamoah11@hotmail.com 1) Full Name: 2) Occupation: 3) Age: 4) Telephone Number/fax number: 5) Your Country of Origin: 6) Sex/ Marital Status: 7) Contact Address: Looking forward to a cordial Business relationship with you. Am waiting for your reply so that I can furnish you with more details??? Mr. John Asamoah. SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (johnasamoah11[at]hotmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.170 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.170 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-13 19:53:42Resolve to Pay Less For Auto Insurance in 2017http://scammed.by/scam.php?id=212463 Resolve to Pay Less For Auto Insurance in 2017 This introduces us to the most cruel trait of their character. It was not alone true of the Mexicans, but of all the Nahua tribes and of the Mayas, though in a less degree. On every occasion of the least importance victims were sacrificed. Any unusual event was celebrated in a similar manner. Before the departure of a warlike expedition, the favor of Huitzilopochtli was sought by the sacrifice of human life; on the return of the same, similar scenes were enacted. On all such occasions the more victims the better. These victims were mostly captives taken in war, and wars were often entered into for the express purpose of procuring such victims. They were even made a subject of tribute. Devout people sometimes offered themselves or their children for the sacrifice. The number of victims, of course, varied from year to year, but it is possible that it counted up into the thousands every year. However set aside, or chosen, or elected, we have every reason to believe that the organization of the priesthood was systematic. The aspirant for the office had to acquaint himself with the songs and prayers used in public worship, the national traditions, their principles of astrology, so as to tell the lucky and unlucky days. When admitted to the priesthood, their rank was doubtless determined by meritorious actions. Successes in war would contribute to this result as well as sanctity, a priest who had captured several prisoners ranking higher than one who had captured but one, and this last higher than the unfortunate who had taken none. We must not forget that war was the duty of all among the Mexicans. The priests were not in all cases exempt; part of their duties may have been to care for the wounded. It is not likely that the priests of any one god ranked any higher than the priests of others, or had any authority over them. SpamAssassin Report (spam score: 0.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.49 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.49 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ardytcho.ga] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-13 19:49:52¾Wí“ÑuÇgÖ®ËÄÖÖÏÖ´ú¾Wí“ÀàÐ͵ĽéÉÜhttp://scammed.by/scam.php?id=212461 0/LD+73izva5ytXPtcTTprbUtOvKqQoKyq7E6r5X1b7pX7eivZvR6aOstPLL49RPvMa+V+2TtcQu v8nS1LvYj83O0kVtYWlsLg= SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (maomojiang409[at]163.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.54 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.54 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 0.0 TVD_SPACE_RATIO_MINFP Space ratio 2017-01-13 19:06:28Money Transfer Control Number REF : 62272243http://scammed.by/scam.php?id=212460 How are you today? Your first payment of $7500 has been sent today via moneygram.You are advise to Contact moneygram with your full information to enable them give you Sender Name, Question and Answer to pick up your First $7500 REF: (17369582) sender name ( Shabangu ) For more information contact Mr Frank Godwin, Tele: +229 98635397 So contact him now on this email;( money3gram32@gmail.com ) he'll keep sending you payment until your total fund of $3.8million united state dollar is Completed kindly reconfirm you full information. Your Receiver Name... Tel;........ Address............ text Question..... Answer......... (Track the MTCN track) by visiting::::::::: https://secure.moneygram.com/track Money Transfer Control Number (REF): 17369582 Track with this last name only ( Shabangu ) Sender Last Name: Shabangu Amount Sent=$$7500 USD Best Regards, MR.STEVEN WIGAN Money Transfer Control Number (REF): 62272243 SpamAssassin Report (spam score: 6.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (maurizio.pratesi[at]alice.it) 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: moneygram.com] 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 2017-01-13 18:29:22MAKE YOUR CHOICE OF DELIVERY AND SEND THE FEE REPLY ASAP http://scammed.by/scam.php?id=212459 Attn: My Dear Beneficiary! This is to officially notify you about your Fund that was suppose to be rendered to you via numerous ways i.e, Courier Companies, Western Union Money Transfers, and Banks wire transfer. Due to this lost of Funds of our?s which was suppose to be given to you but failed to. So in this case, a beneficial meeting was held on the 12th Of Jan 2017 at the World Bank in Switzerland,which to officials and Central Bank Governors from different countries in the world were present at the meeting, Which they discussed on how your Fund can be given to you without any lost at this time. Be informed that  you have to stop any further communication with any other person(s) or office  (s) to avoid any hitches in receiving your ATM payment. In conclusion at the meeting, The President of World Bank, Mr.Robert B. Zoellick, has strictly authorized 6 Banks in the World to deliver all individual beneficiary Funds through courier companies. Your Fund which is truly $45.5 Million USD (Forty- Five Million, Five Hundred Thousand United States of America Dollars) which was listed among the list of beneficiary list to be paid among all other beneficiaries in various countries in the world to be paid via ATM MASTER CARD. Below are the authorized Banks; Daiwa Bank®/Osaka/Japan.     .................................... Caja De Madrid/Madrid/Spain.     .................................... Lloyds Bank®/London/England.     ....................................... Diamond Bank® Plc/Benin Republic.     ...................................... Banco di Santo Spirito/Rome/Italy.     ........................................ Bank of New York Mellon Corp/New York/USA. Each of this Banks are to distribute 350 ATM MASTER CARDS to all beneficiaries in the World that are to receive their compensation ATM CARD. So, this Bank (DIAMOND Bank®Plc.) will send you your ATM CARD which you will use to withdraw your money in any ATM machine in any part of the world, but the maximum withdrawal is $50,000 USD per day, while minimum withdrawal is $20,000 USD per day. Note that this ATM CARD of yours has been activated and a security pin code number will be issued to you from this Bank as soon as you receive your Card for a safer withdrawal. Please contact the ATM CARD payment department Manager Mr paulson Greg, by sending your information to HER for an immediate response. Contacts of Mr paulson Greg, are as below; Mr. paulson Greg, Director of ATM payment department DIAMOND BANK Plc. Tel: +229:982 930 16 NOTE: FOR NON APPEARANCES, DO NOT CONTACT Mr paulson Greg, IF YOU CAN NOT PAY FOR THE SHIPPING OF YOUR ATM CARD. Your Full Name: ? Country/Your Address: ? Occupation: ? Contact Home/Cell Phone: ? Age/Sex: ? A Scan Copy of your Identity: ? Please make a Choice of delivery for the Shipping of your ATM CARD as they areas charged Below; DHL COURIER COMPANY Shipping fee: $80.00 (1 day delivery) FedEx COURIER COMPANY Shipping fee: $68.00 (2 day delivery) UPS COURIER COMPANY Shipping fee: $58.00 (3 day delivery) Receiver name-----------JUDE IKED Address:  Lot No. 23 Patte D'Oie, 03 BP 2147 City---------------COTONOU Country----------BENIN  REPUBLIC Test Question-----Code Test Answer-------- ATM For oral discussion, you can reach Mr paulson Greg, via email or phone his hot line given to you above as soon as you receive this important message for further directions and also update him on any development from the above mentioned office. NOTE: Due to impostors, we hereby issued you our code of conduct, which is (ATM), so you have to indicate this code when contacting the card center by using it as your subject. Sincerely Yours, Chief Remittance Officer, DIAMOND BANK® Plc. In Respect of The World Bank    SpamAssassin Report (spam score: 10.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.172 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.172 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (officeservice906[at]gmail.com) 3.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.138.89.196 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2017-01-13 18:27:46Dearest in the Lordhttp://scammed.by/scam.php?id=212458 Dearest in the Lord, I greet you especially in the name of our Lord Jesus Christ our Lord I am Mrs Marria Hugo from Republic of Kuwait, I am married to Mr Dominique Hugo who worked with Kuwait Embassy in Ivory Coast for nine years before he died in the year 2013,We were married for eleven years without a child. He died after a brief illness that lasted for only four days. Before his death we were both born again Christian. Since his death I decided not to remarry or get a child outside my matrimonial home which the bible is against, When my late husband was alive he deposited the sum of $2.500 million dollars in a bank in Abidjan Cote d'Ivoire west Africa. Presently, this money is still in bank, Recently my doctor told me that I would not last for the next eight months due to cancer problem The one that disturbs me most is my stroke sickness, Having known my condition I decided to donate this fund to a charity organization that will utilize this money the way I am going to instruct herein, I want an organization that will use this fund for orphanages, schools, churches, widows, propagating the word of God and to endeavour that the house of God is maintained The bible made us to understand that "Blessed is the hand that giveth"I took this decision because I don't have any child that will inherit this money and my husband relatives are not Christians and I don't want my husband's efforts to be used by unbelievers. I don't want a situation where this money will be used in an ungodly way This is why i am taking this decision. I am not afraid of death hence I know where i am going I know that I am going to be in the bosom of the Lord Exodus 14 VS 14 says that "the lord will fight my case and I shall hold my peace"I don't need any telephone communication in this regard because of my health hence the presence of my husband's relatives around me always I don't want them to know about this development With God all things are possible. As soon as I receive your reply I shall give you the contact of the bank in Abidjan Cote d'Ivoire west Africa, I will also issue you an authority letter that will prove you the present beneficiary of this fund from the Ministry of Justice here in Cote d'Ivoire I want you and the church to always pray for me because the lord is my shepherd. My happiness is that I lived a life of a worthy Christian Whoever that wants to serve the Lord must serve him in spirit and truth. Please always be prayerful all through your life Contact me on this email any delay in your reply will give me room in sourcing another church for this same purpose, Please assure me that you will act accordingly as i stated herein Hoping to receive your reply soon, Send me the following information, such as below. Your name and surname ............................. Address .................................... Age ........................................ Occupation ................................. Country .................................... Photo ....................................... Remain blessed in the Lord. Yours sister in Christ Mrs Marria Hugo SpamAssassin Report (spam score: 4.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (marriahug1[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [212.82.98.100 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (marriahug1[at]gmail.com) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2017-01-13 17:12:48Annual Accredition Of Your Fund Is Madehttp://scammed.by/scam.php?id=212457 -- Dear Respected Customer, My Name Is Mr. John C. William, And I Am Reaching Out To You Regarding A Recent Consolidation Of Your Bank Funds Here In The United States. Your Compensation Files From Four World Banks Were Compiled Earlier This Month And Submitted To Me For Review, Your Accrued A Trust Sum Of $15,500,000.00 USD. We Attempted To Contact You Multiple Times, And Hope This Gets To You. Because You Had Not Claimed Your Trust Before The International Fund Transfer Changes In 2014, Your Account Was Compiled And Locked As A Non-Deductible Escrow Account At The Federal Reserve Bank. This Account Is In Your Name, And Requires Accreditation Before We Can Release The $15,500,000.00 Trust. In Order To Speed Up The Process, I Have Conducted A Thorough Verification Process To Confirm That You Are The Individual Attached To This Account. I Have Also Confirmed That You Have Fulfilled All The Necessary Obligations And Have A Proper Credit Rating To Enable The Release Of Your Payment Into A Personal Account Of Your Choice. The Trust Fund Has Been Authorized For Release By The Federal Reserve Bank, Which Has Your Registered Consolidated Account. You Are Approaching A Three-Year Non-Response, And Your Fund Will Be Released Back To The Four Banks If You Do Not Contact Our Office Within The Next 2 Weeks. The Federal Reserve Bank Utilizes A Secured Macro Transfer System, And Your Funds Can Be Transferred In 2-5 Days If You Reply To This Authorized Email With The Following Information. The More Information You Provide, The Quicker The Approval Process Will Be Completed. First Name*: Last Name*: Residential Address*: City*: State*: Country*: Email Address*: Phone Number*: Gender*: Birthday*: Marital Status*: If You Prefer To Receive Your Funds On A Pre-Loaded Visa Card, We Could Ship Your Card To Your Address. Please Note That Cards Have A Daily Withdrawal Limit Of $10,000 Usd. We Can Also Write You A Draft Check, Which Can Be Deposited In Any Bank. I Anticipate Your Timely Response Before The Account Deactivates. Thank You, Mr. John C. William Ceo And President Federal Reserve Bank. TELL: +1 ( 360 ) 565-5659 ©2016 Federal Reserve Bank Of Cleveland, All Rights Reserved. All Other Logos, Trademarks, Service Marks And Trade Names Referenced In This Material Are The Property Of Their Respective Owners. SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [189.50.180.7 listed in list.dnswl.org] 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_HK_NAME_DR T_HK_NAME_DR 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 0.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 2017-01-13 16:00:27The First Step To Home Buying Get DownPayment Assistancehttp://scammed.by/scam.php?id=212456 The First Step To Home Buying, Get DownPayment Assistance 2d dam Romp, by Enchanter, (3729) 3d--Rachel, by Washington, (1566) 4th--imported Pansy, by Blaize, (76) 5th--Primrose, by Charles, (127) 6th-- ----by Blythe Comet, (85) 7th-- ---- by Prince, (521) 8th-- ---- by Patriot, (486). Red and white, bred and owned by WILLIAM HURST, Albany, N. Y.: calved February 27th, 1862; got by imported Neptune, 3192, Dam Sea Nymph, by imported Neptune, 3192,-- SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.52 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: mooleegn.xyz] 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image 0.0 T_REMOTE_IMAGE Message contains an external image 2017-01-13 13:23:50