Scammed.by Scam email RSShttp://scammed.byLive feed of scam emailsNF e 0000000005948006962 0768 00000398 gerada automaticamente http://scammed.by/scam.php?id=125391 Sent from my iPad Begin forwarded message: From: andlt;nfe@fazenda.gov.brandgt; Date: 24 May 2015 19:13:37 Subject: NF-e 0000000005948006962.0768.00000398 gerada automaticamente !! NFe-6962.0768 NFe-0000000005948006962.0768.00000398.docx (215,4 KB) Nota Fiscal Eletrônica. Segue a NFe gerada automaticamente em seu CNPJ/CPF . * Este e-mail foi gerado automaticamente pelo sistema de nota fiscal Favor não responder! Email livre de perigo. www.avast.com/n/6962.0768/ 2015-05-25 12:08:02Shop Has Been Updated With Fresh Tools Visit Nowhttp://scammed.by/scam.php?id=125387 Sent from my iPhone Begin forwarded message: From: Mercantile andlt;mercantile@sttei.ptandgt; Date: 25 May 2015 00:38:30 BST To: undisclosed-recipients:; Subject: Shop Has Been Updated With Fresh Tools......... Visit Now Hello We Have Added Fresh Tools Such As, Mailer Unlimited Webmail Unlimited Smtp Unlimited Earthlink RDP Windows RDP Cpanel Fresh Emails Leads andamp; ETC Visit Us Now @ http://smtpmercantile.in/ ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. 2015-05-25 12:02:29Ray Ban new product promotion to the 1 6 fold http://scammed.by/scam.php?id=125386 Sent from my iPhone Begin forwarded message: From: x90446689mifeida@mailer.jinyuncrm.com Date: 25 May 2015 00:57:42 BST Subject: Ray-Ban new product promotion to the 1.6 fold . Reply-To: x90446689mifeida@163.com Collections | Frame Types | Lens Types | New Arrivals | Shop By Model | privacy policy terms of use ordering help site map contact us 2015 Rayban sunglasses. all rights reserved Forward this email | Update Email andamp; Profile | Unsubscribe ....................................................................................... If you no longer wish to receive these emails, click on the following link: unsubscribe 2015-05-25 12:01:11ATTN DEAR BENEFICIARY http://scammed.by/scam.php?id=125388 ATTN DEAR BENEFICIARY . I AM PASTOR:CHRIS MATHEW, DIRECTOR CASH PROCESSING UNIT,UNITED BANK FOR AFRICA[U.B.A] THE ONLY BANK APPOINTED BY THE O.A.U MEMBERS LED BY PRESIDENT JOHN KUFFOR. BECAUSE OF THE FRAUD GOING ON IN WEST AFRICA COUNTRIES WHERE SOME INNOCENT BENEFICIARIES WERE ASK TO PAY IN ADVANCE BEFORE RECEIVE THE MONEY OWED TO THEM. THE ABOVE AFRICA UNION HELD MEETING IN BENIN REPUBLIC AND RESOLVE TO PAY ALL BENEFICIARIES IN CASH THROUGH MEANS OF DIPLOMATIC COURIER SERVICE.WE RECEIVE YOUR FILES FROM INTERNATIONAL MONETARY FUND(I.M.F) AS ONE OF THE BENEFICIARIES.TAKE NOTE; TEN THOUSAND UNITED STATE DOLLARS (US$10,000) HAVE BEEN MAPPED OUT FOR ALL EXPENSES IN SENDING THE MONEY TO YOU THROUGH GENUINE DIPLOMATIC COURIER SERVICE AND HOW IT WAS SPENT WILL BE DETAILS TO YOU.THEREFORE, I WANT YOU TO BEAR IT IN MIND THAT YOUR TOTAL FUND WILL BE NO MORE THREE MILLION FIVE HUNDRED THOUSAND UNITED STATE DOLLARS ($3.500,000.00) BUT THREE MILLION FOUR HUNDRED AND NINETY THOUSAND UNITED STATE DOLLARS ($3,490,000.00). IF ANYBODY TELLS YOU THAT HE IS PAYING YOU IN BANK DRAFT OR TELE-GRAFIC MONEY TRANSFER BOTH WESTERN UNION OR MONEY GRAM, DO NOT LISTEN TO HIM OR HER BEC AUSE DUE TO THIS FRAUD NO INTERNATIONAL BANK HON OURS OUR REMITTANCE INSTRUCTION ANY MORE. THAT IS WHY WE SETTLED TO PAY IN CASH THROUGH COURIER. WE ALSO RECEIVED A SECURITY REPORT THAT YOU PAID THE FRAUDSTERS WHO HAVE BEEN DECEIVING YOU, TELLING YOU THAT THEY ARE GOING TO SEND THIS MONEY TO YOU.DEAR,AS A SENIOR BANKER, CONTROLLING THIS CASH PAYMENT NOW, I ADVISE YOU NOT TO WASTE YOUR MONEY BY PAYING ANY BODY IN ADVANCE AGAIN,AND IF YOU JUST FOLLOW MY INSTRUCTION, YOU WILL RECEIVE YOUR MONEY IN THREE DAYS TIME. YOUR FUND WILL NOW PACKAGE IN BOX AND TAKE TO THE DIPLOMATIC COURIER SERVICE FOR IMMEDIATE SHIPMENT, I WILL ALSO SEND THE PICTURE OF THE BOX BY ATTACHMENT TO YOU TO SEE HOW THE MONEY IS PACKED, I WILL SEND YOU MORE MAILS TO GIVE YOU MORE INFORMATION WITH MY INTERNATIONAL PASSPORT FOR YOU TO KNOW THE GENUINE OF THIS TRANSACTION THEREFORE, DO FORWARD YOUR HOME ADDRESS AND DIRECT PHONE NUMBER TO ME FOR QUICK DELIVERY BECAUSE TIME IS NOT IN OUR SIDE ALL THE DOCUMENTS WILL BE SENT TO YOU IF I AM ASSURED THAT YOU HAVE STOPPED SENDING MONEY TO THOSE FRAUDSTER . BUT GOD WILL SURELY JUDGE ALL OF THEM WHO LIVES BY CHEATING. MY BIBLE SAYS WHAT DOES IT PROFIT A MAN IF YOU GAIN THE WHOLE WORLD BUT LOOSE YOUR SOUL, WHICH IS NOTHING. I AM WAITING TO HEAR FROM YOU WITH THE REQUIRED INFORMATION OF YOURS. PASTOR:CHRIS MATHEW DIRECTOR CASH PROCESSING UNIT UNITED BANK FOR AFRICA Email:(unitedbakofafrica01@hotmail.com) SpamAssassin Report (spam score: 12.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (johnpeter099[at]outlook.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ( ) 1.2 MISSING_HEADERS Missing To: header 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 12:00:17Fresh Tools Added To The Shop Nowhttp://scammed.by/scam.php?id=125390 Sent from my iPhone Begin forwarded message: From: Mercantile andlt;mercantile@sttei.ptandgt; Date: 24 May 2015 23:36:30 BST Subject: Fresh Tools Added To The Shop Now Hello We Have Added Fresh Tools Such As, Mailer Unlimited Webmail Unlimited Smtp Unlimited Earthlink RDP Windows RDP Cpanel Fresh Emails Leads andamp; ETC Visit Us Now @ http://smtpmercantile.in/ 2015-05-25 12:00:10iTunes account was been frozen ID5377A4A560411EFA6B89http://scammed.by/scam.php?id=125389 Begin forwarded message: From: "iTunes" andlt;noreply@appleid.apple.comandgt; Date: 25 May 2015 09:14: Subject: iTunes account was been frozen ID5377A4A560411EFA6B89 Reply-To: "iTunes" andlt;noreply@appleid.apple.comandgt; Hello, This is an automatic message sent by our security system to let you know that you have 24 hours to confirm your account information. Your itunes account has been frozen because we are unable to validate your account information. Once you have updated your account records, we will try again to validate your information and your account suspension will be lifted. This will help protect your account in the future. This process does not take more than 3 minutes. To proceed to confirm your account details please click on the link below and follow the instructions. Click Here Validate Your Account We apologise for any inconvenience caused. This is an automated message. Please do not reply to this email. If you need additional help, please visit Apple Support. Thanks, Apple Customer Support Apple Sales International, Hollyhill Industrial Estate, Cork, Ireland. Company Registration number: 15719. VAT number: IE6554690W. All Rights Reserved / Privacy Policy / My Apple ID If you would prefer not to receive commercial email from Apple, or if you have changed your email address, please click here. TM and copyright © 2015 Apple Inc. 2015-05-25 11:55:08Capital One Message Center 1 Unread Messagehttp://scammed.by/scam.php?id=125381 Begin forwarded message: From: "Capital One?® andlt;eAlerts.0212.72153235@capitalonebank.co.ukandgt;"andlt;Sender_20167890@163.comandgt; Date: 25 May 2015 05:03:22 BST Subject: Capital One Message Center -- 1 Unread Message Action Required We detected irregular activity on your Capital One Card/Account on 24/05/2015. For your protection, please Log In immediately to verify this activity so you can continue making transactions without interruption. If you do not verify this transaction, certain limitations may be placed on your account/card. Please Log In to online banking at2015-05-25 11:54:05iTunes account was been frozen ID7146A4A545301DC8F95Dhttp://scammed.by/scam.php?id=125384 Begin forwarded message: From: "iTunes" andlt;noreply@appleid.apple.comandgt; Date: 25 May 2015 09:12:00 Subject: iTunes account was been frozen ID7146A4A545301DC8F95D Reply-To: "iTunes" andlt;noreply@appleid.apple.comandgt; Hello, This is an automatic message sent by our security system to let you know that you have 24 hours to confirm your account information. Your itunes account has been frozen because we are unable to validate your account information. Once you have updated your account records, we will try again to validate your information and your account suspension will be lifted. This will help protect your account in the future. This process does not take more than 3 minutes. To proceed to confirm your account details please click on the link below and follow the instructions. Click Here Validate Your Account We apologise for any inconvenience caused. This is an automated message. Please do not reply to this email. If you need additional help, please visit Apple Support. Thanks, Apple Customer Support Apple Sales International, Hollyhill Industrial Estate, Cork, Ireland. Company Registration number: 15719. VAT number: IE6554690W. All Rights Reserved / Privacy Policy / My Apple ID If you would prefer not to receive commercial email from Apple, or if you have changed your email address, please click here. TM and copyright © 2015 Apple Inc. 2015-05-25 11:53:55RE: As salamu alaykumhttp://scammed.by/scam.php?id=125380 andgt; Date: Mon, 25 May 2015 09:49:22 +0000 andgt; Subject: As-salamu alaykum andgt; From: terapitassin@gmail.com andgt; To: andgt; andgt; My Dear, andgt; This is very urgent, one of our Foreign Deceased that worked in our andgt; (Cotton-Company) for 32years as Engineer; He died accidentally in our andgt; Milling-Machine in 1980, since then none of his family members applied andgt; for his pension. andgt; andgt; He?s salary is 2000$ per Month, 800$ pension per Month, the new andgt; director who was employed last year 2014, saw his file that neither andgt; pension no compensation was given to his family, he therefore called a andgt; meeting which the sum of USD1.2Million Dollars was immediately andgt; deposited in Burkina Faso Central Bank BCEAO. andgt; andgt; Now they sent me to Jordan to check if I can get any of Deceased andgt; relative to receive his allowance, unfortunately none of his family andgt; survived in this incident visit! andgt; http://www.nytimes.com/2005/11/10/international/middleeast/10jordan.html?_r=0 andgt; So i told my Company that I found the father but he is an alphabet, so andgt; he appointed you to represent him as close family member. andgt; andgt; If you agree to join me, ' ll you need to do is just to stay in the andgt; country where you are now, and communicate with my company as the andgt; appointed person and provide account where this money shall be andgt; transfer to. andgt; andgt; This will be his last payment meaning that once this money is paid to andgt; you, his file will be closed forever. andgt; andgt; I need your full name ..................and your private andgt; phone.................to enable me present you as the appointed person andgt; to receive the fund. andgt; andgt; You have to treat this message urgent as the company is awaiting to andgt; hear from you as i told them. andgt; andgt; Thanks andgt; Regards andgt; C. Luckson Amed. andgt; Supervisor Sofitex-Company. andgt; Web site - http://www.sofitex.bf. andgt; My Private phone +226 64268947. 2015-05-25 11:48:37COMPENSATION FUND PAYMENT APPROVED NOTIFICATION 2015http://scammed.by/scam.php?id=125382 Open The Attachment File SpamAssassin Report (spam score: 4.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sarbactiv0026[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.179 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 11:38:19您好,本公司可代開正规{發^ ^票}:欢迎致电135 6026 9696咨询潘经理QQ:280 9767 267价格优惠,可查验后付款;公司本着互信双盈真诚长久的合作!谢谢。http://scammed.by/scam.php?id=125379 ?????? 2015-5-25 SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (2728916645[at]qq.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.49 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP 2015-05-25 11:16:55Strategic Financial Planning Budgeting Control Seminar Maputohttp://scammed.by/scam.php?id=125377 layout1-inline.html-inline #outlook a{ padding:0; } .ReadMsgBody{ width:100%; } .ExternalClass{ width:100%; } body{ -webkit-text-size-adjust:100%; -ms-text-size-adjust:100%; -webkit-font-smoothing:antialiased; } .yshortcuts,.yshortcuts a,.yshortcuts a:link,.yshortcuts a:visited,.yshortcuts a:hover,.yshortcuts a span{ text-decoration:none !important; border-bottom:none !important; background:none !important; } .ExternalClass *{ line-height:100%; } a{ color:#00a99d; text-decoration:none; outline:none; } .color a,.color-bg a,.bottom a{ color:#fff; } a:hover{ text-decoration:underline !important; } .header a:hover,.button a,.btn a,.button-special a{ text-decoration:none !important; } .aniamation{ -webkit-animation:bganimate 15s linear infinite; -moz-animation:bganimate 15s linear infinite; -o-animation:bganimate 15s linear infinite; animation:bganimate 15s linear infinite; } .aniamation:hover,.aniamation:hover .progress-bar{ -webkit-animation-play-state:paused; -moz-animation-play-state:paused; -o-animation-play-state:paused; animation-play-state:paused; } .progress-bar{ -webkit-animation:fullexpand 15s ease-out infinite; -moz-animation:fullexpand 15s ease-out infinite; -o-animation:fullexpand 15s ease-out infinite; animation:fullexpand 15s ease-out infinite; } 0,33,66,100{ width:0%; opacity:0; background:none; } 2,35,68{ width:0%; opacity:0.3; background-color:#000; } 23,56,89{ width:100%; opacity:0.7; } 25,58,91{ width:100%; opacity:0; background-color:#000; } 0,33,66,100{ width:0%; opacity:0; background:none; } 2,35,68{ width:0%; opacity:0.3; background-color:#000; } 23,56,89{ width:100%; opacity:0.7; } 25,58,91{ width:100%; opacity:0; background-color:#000; } 0,33,66,100{ width:0%; opacity:0; background:none; } 2,35,68{ width:0%; opacity:0.3; background-color:#000; } 23,56,89{ width:100%; opacity:0.7; } 25,58,91{ width:100%; opacity:0; background-color:#000; } 0,33,66,100{ width:0%; opacity:0; background:none; } 2,35,68{ width:0%; opacity:0.3; background-color:#000; } 23,56,89{ width:100%; opacity:0.7; } 25,58,91{ width:100%; opacity:0; background-color:#000; } 0,25{ background-position:50% 150%; } 33,58{ background-position:50% 100%; } 66,91{ background-position:50% 50%; } 99,100{ background-position:50% 0%; } 0,25{ background-position:50% 150%; } 33,58{ background-position:50% 100%; } 66,91{ background-position:50% 50%; } 99,100{ background-position:50% 0%; } 0,25{ background-position:50% 150%; } 33,58{ background-position:50% 100%; } 66,91{ background-position:50% 50%; } 99,100{ background-position:50% 0%; } 0,25{ background-position:50% 150%; } 33,58{ background-position:50% 100%; } 66,91{ background-position:50% 50%; } 99,100{ background-position:50% 0%; } Email Newsletter of this month. About us Seminars contact us July 1-3, 2015 Strategic Financial Planning, Budgeting andamp; Control Seminar $800 in maputo, Mozambique Register now andraquo; Download Brochure Location Maputo, Mozambique Date July. 1-3, 2015 Speaker Best specialists 100 Seats Hurry, register now! Welcome to Strategic Financial Planning, Budgeting andamp; Control Seminar This special seminarandrsquo;s core objective is to provide a comprehensive understanding of the function and interrelationships of strategic financial planning, budgeting and budgetary control. Using examples and case studies, youand#39;ll learn how to plan, budget and position your organization within its competitive environment. To assume a leadership role in the strategic planning process, financial managers and accountants must be aware of key concepts and approaches. This seminar shows you how to work with the entire strategic financial planning, budgeting and control process. Youandrsquo;ll learn how to: Identify strategies that will provide your company a competitive advantage Develop an effective strategic plan Turn strategic ideas into operational plans and budgets Make your organization self-controlling via effective feedback processes Register now andraquo; Awesome Topics Everything you need to know to become a leading strategic financial planner and manager is right here! Here is a sample of some of the awesome topics covered in this great seminar: Strategic Planning In these turbulent times of economic change and business challenge, having a vision and a focused plan to get there is especially critical. In this seminar, we minimize the time you devote to planning by focusing on the crux. Managing Budgets Creating, monitoring and managing a budget is key to business success. It should help you allocate resources where they are needed, so that your business remains profitable and successful. It need not be complicated. Operational Planning The role of an Operations Plan, when documented, is to unify a company in order to accomplish all the necessary tasks that must be done in the necessary order to achieve success. Capital Budgeting Capital budgeting is a step by step process that businesses use to determine the merits of an investment project. We will show you how to build effective capital budgets. Great Schedule Design your day to meet your unique needs. Weand#39;ve packed a lot of information into just Five days andhellip; we would like you to enjoy every moment of this unique training programmeandmdash;donandrsquo;t miss a thing, Itandrsquo;s your seminar! DAY-1, 1 July 2015 08:15 Registration Welcome speech and overview A world class facilitator andamp; business development strategist with over 15 years industry experience in Business Strategy and Development. Charles Cotter | CEO, HR Consult 09:00 Strategy Strategic Financial Planning Michael is an accomplished international financial planner, pilot and managing member at Guardstone Wealth Management Group. He has over 25 years in the financial sector. Michael Wright | Financial Planner DAY-2, 2 July 2015 Video Presentations DAY-3, 3 July 2015 Certificate Presentations Download Brochure Professional Speakers Our trainers are the best andhellip; period. We choose only the pros that have a proven track record of training effectiveness, professionalism and expertise. And whatandrsquo;s more, theyandrsquo;re exciting communicators whoandrsquo;ll provide you with five of the most interesting days youandrsquo;ve ever spent. Michale Wright Finanncial Planner Michael is an accomplished international financial planner, pilot and managing member at Guardstone Wealth Management Group. He has over 25 years in the financial sector. Charles Cotter CEO, HR Consult A world class facilitator andamp; business development strategist with over 15 years industry experience in Business Strategy and Development. Dr. Joseph Mwape CEO, Highpro Skills A captivating and lively speaker with 20 years in Business Management andamp; Development, information technology andamp; computer engineering. Register now andraquo; andquot;I just wanted to publicly thank everyone at Highpro Skills Training for a great seminar in Johannesburg. I learned more in this seminar than I did in three years of study. Michaelandrsquo;s presentations were superb. I was riveted and on the edge of my seat up until the very last moment on Thursday. I have been toying with the idea of changing the strategic focus of our organisation for greater productivity. Now I feel equipped to do so. Thanks again for all you do!andquot; - Claire Matanda, Financial Manager - African Perspective Inc. Conference Pricing The total participation Fee for all the five days is $800 per delegate. Payment can be made either by Bank Transfer or in cash at the training venue. Please note that hotel accommodation is not included and can be arranged directly with the hotel or lodge where you intend to stay. We always assist our delegates to do their bookings for accommodation in advance. Session 01 Strategic Planning andraquo; Strategic planning andraquo; Defining outcomes andraquo; Formulating vision Session 02 Managing Budgets andraquo; Budgeting principles andraquo; Performance budget andraquo; Budgetary control Session 03 Operational Planning andraquo; Develop a program andraquo; Managing projects andraquo; Monitor andamp; report Session 04 Consolidation of Estimates andraquo; Expenditure andraquo; Fiscal relations andraquo; Revision of MTEF Our great Partners We believe that our greatest partners are our valued customers throughout the world. We also partner with some of the worldand#39;s largest companies in the training industry who share our view that the way to improve peopleand#39;s lives is through the continuous imparting of practical skills to people throughout the world. These partners provide essential support, expertise and outreach. 0027 11 201 2032 Highpro International Skills Training 8 Stoneridge Drive, Block C Greenstone Office Park Edenvale, 1609, RSA Un Subscribed Here / Update Profile Copyright@2015-Highpro International Skills Training, All rights reserved SpamAssassin Report (spam score: 0.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.50 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: sendgrid.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 11:16:15Successfully sell your timesharehttp://scammed.by/scam.php?id=125371 Begin forwarded message: From: SellMyTimeshare andlt;sellmytimeshare@yousave17.co.ukandgt; Date: 23 May 2015 11:43:26 Subject: Successfully sell your timeshare Reply-To: SellMyTimeshare andlt;sellmytimeshare@yousave17.co.ukandgt; .ReadMsgBody { width: 100%;} .ExternalClass {width: 100%;} Trade in, exchange, upgrade or sell with us today Stuck with a timeshare you don?t want? If this sounds familiar, then we can help you... Find out about ?Trading Power? secrets as an independent expert Get an up to date evaluation and appraisal of your ownership To know how your maintenance fees are calculated relieve the stress of your timeshare Reasons owners sell ? We are getting older and have stopped travelling abroad ? ? We?re happy holidaying for more weeks now, in a cheaper standard ? ? Our children do not want to inherit our Timeshare ? Sell your timeshare Unsubscribe | Privacy andamp; Cookie Policy This email was sent to j 2015-05-25 11:08:38Sex Offender Alerts ? Kids Live Safehttp://scammed.by/scam.php?id=125367 ATTN : URGENT Pedophile Alert SpamAssassin Report (spam score: 3.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: cogiboo.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 1.4 MISSING_DATE Missing Date: header 0.0 T_FROM_12LTRDOM From a 12-letter domain 0.0 T_REMOTE_IMAGE Message contains an external image 2015-05-25 11:01:25IF YOU ARE INTERESTED REPLY BACK http://scammed.by/scam.php?id=125372 I AM MR. DIOUF MOUKA FROM BURKINA FASO I HAVE A GENIUE BUSINESS TRANSACTION OF 30MILLION U.S DOLLAS TO DO WITH YOU IF YOU ARE INTERESTED SEND TO ME THE FOLLOWING INFORMATION IMMEDIATELY. YOUR FULL NAME...... YOUR OCCUPATION..... YOUR AGE........ YOUR MARITAL STATUS..... YOUR PHONE NUMBER..... YOUR COUNTRY/NATIONALITY..... AND REPLY TO THIS EMAIL ADDRESS diouf.mouka400@gmail.com SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (d_mouka2[at]aol.jp) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.181 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 11:00:25Do contact me for more detailshttp://scammed.by/scam.php?id=125369 -- Dear friend I am contacting you on a business deal of $15.2 Million US Dollars, ready for transfer into your account 100% risk free and it will be legally backed up with government approved please reply me for more details Best regards, Mr Allen Ibrahim SpamAssassin Report (spam score: 0.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [50.61.143.71 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mrallenibrahim1960[at]ig.com.br) -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (mrallenibrahim1960[at]ig.com.br) 0.3 NAME_EMAIL_DIFF Sender NAME is an unrelated email address 2015-05-25 10:55:47Limited time only an incredible offer on our 3 Piece Stainless Steel Oriental Knife Set http://scammed.by/scam.php?id=125365 2015-05-25 10:53:51RE: ATTENTION: DEAR CUSTOMER http://scammed.by/scam.php?id=125368 andgt; Date: Mon, 25 May 2015 09:35:27 +0900 andgt; From: Rev@future.ocn.ne.jp andgt; Subject: ATTENTION: DEAR CUSTOMER, andgt; To: andgt; andgt; andgt; ATTENTION: DEAR CUSTOMER, andgt; andgt; INFORMATION REACHING US FROM OUR CORPORATE HEADQUARTERS NOW, STATES andgt; THAT YOU ONLY HAVE 24HOURS TO EFFECT PAYMENT FOR THE ACTIVATION OF andgt; YOUR MTCN TO ENABLE YOU CASH UP YOUR FIRST INSTALLMENT PAYMENT andgt; $5,000:00 FROM YOUR TOTAL (FUND) SINCE YOU ARE FINDING IT DIFFICULT TO andgt; MAKE THIS PAYMENT WE HAVE DECIDED THAT YOU ARE TO GO AHEAD AND PAY andgt; WHATEVER YOU HAVE FOR THE andgt; ACTIVATION FEE SINCE YOU ARE NOT ABLE TO COME UP WITH THE REQUIRED SUM andgt; OF THE MONEY REQUIRED, TIME IS OF THE ESSENCE HERE.YOU ARE TO PAY andgt; WHATEVER YOU HAVE AS FROM $55 UP FOR THE ACTIVATION FEE; WE WILL andgt; ACTIVATE YOUR MTCN UPON RECEIPT OF THIS PAYMENT. andgt; andgt; HERE IS THE INFORMATION OF YOUR FIRST PAYMENT BUT IT IS PLACE ON HOLD andgt; BY THE MANAGEMENT AND YOU CAN NOT BE ABLE TO PICK IT UP UNTIL YOU SEND andgt; THE DEMAND FEE WHICH IS ANY AMOUNT OF MONEY YOU HAVE, JUST TO PROVE andgt; HOW SERIOUS YOU ARE. andgt; andgt; https://wumt.westernunion.com/asp/orderStatus.asp?country=BJ andgt; andgt; andgt; 1. SENDER FIRST NAME_____SAHRIR andgt; 2. SENDER SECOND NAME____SAAD andgt; 3. TEST QUESTION_________VERY andgt; 4. TEST ANSWER___________URGENT andgt; 5. AMOUNT________________$5,000 USD andgt; 6. MTCN__________________916-765-3711 (Available for pick up by receiver) andgt; andgt; Current status : Available for pick up by receiver andgt; andgt; we also need your full information such as your andgt; Home Address_____ andgt; Phone Number_____ andgt; Full Name________ andgt; Country__________ andgt; Age______________ andgt; Occupation_______ andgt; andgt; BE INFORMED THAT YOU WILL HAVE TO PAY THE BALANCE SUM OF YOUR andgt; ACTIVATION UPON CASHING UP OF YOUR FIRST US $5,000 , ALSO I AM USING andgt; THIS MEDIUM TO INFORM YOU THAT FAILURE TO PAY THE BALANCE SUM WILL andgt; LEAVE US WITH NO OPTION BUT TO DEACTIVATE YOUR MTCN, BELOW IS OUR andgt; ACCOUNT OFFICER NAME WHICH YOU WILL USE TO SEND WHATEVER YOU HAVE TO andgt; ENABLE US RELEASE YOUR FIRST PAYMENT andgt; IMMEDIATELY. andgt; andgt; andgt; SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY andgt; WE CONFIRM THE TRANSFER FEE WE WILL SEND YOU THE FIRST RECEIPT OF andgt; YOUR US $5,000 TODAY AND NOT TOMORROW. andgt; andgt; CALL IMMEDIATELY ON THIS DIRECT PHONE +229-68450759 FOR MORE DETAILS andgt; AND DIRECTIVES. andgt; andgt; WE CONGRATULATE YOU IN ADVANCE. andgt; REV STEVEN ANDREW andgt; GENERAL OPERATION MANAGER andgt; 2015-05-25 10:46:38Découvrez les avantages du solairehttp://scammed.by/scam.php?id=125361 Avec EDF ENR, je suis vert et mes voisins aussi Pour visualiser correctement ce message, accandeacute;dez andagrave; la version en ligne EDF ENR Solaire commercialise ses offres sous la marque EDF ENR. Photo non contractuelle. Crandeacute;dits photos : Shutterstock EDF ENR Solaire - 350 Chemin de Paisy - CS 10128 - 69578 LIMONEST Cedex SAS au capital de 4 000 000 euros - RCS Lyon B 433 160 900 - SIRET 433 160 900 00224 - APE 4322B Pour cesser de recevoir nos informations dandeacute;sabonnez-vous. SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: enquete40plus.com] 1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: enquete40plus.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: enquete40plus.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 10:44:28RE: Final Warning Account Alert http://scammed.by/scam.php?id=125364 From: verificationupgradeteam003@outlook.com To: noreply@outlook.com Subject: Final Warning Account Alert! Date: Sun, 24 May 2015 23:49:20 +0000 Dear Email User,This is to inform you that on 25th May, 2015, Microsoft Outlook will discontinue support on your account and security.If you choose not to update your account on or before 26th May, 2015, you will not be able to read and send emails, and you will no longer have access to many of the latest features for improved, conversations, contacts and attachments.Take a minute to update your account for a faster, safer and full-featured Microsoft Outlook experience.Update Your Account Thanks,Outlook Team 2015-05-25 10:44:20hellohttp://scammed.by/scam.php?id=125363 we have finalized all the necessary arrangement and your fund($5.8USD)has been approve by the border directors of ECO Bank,you will be receiving $5000 per day, So contact Dr:Chris Mathew with your full transfer information ask him to send you the MTCN Numbers and sender's name to pick up your $5000. Pls provde your full transfer informayion correctly to aviod wrong transfer Your name___ Your country__ Your address___ Your Occupation____ You're Age/sex__ Phone Number____ contact:(westernu01@outlook.com) Tel: +229-99983280 Dr:Chris Mathew SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: outlook.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.50 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.11.173.10 listed in zen.spamhaus.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (westernu01[at]outlook.com ) 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2015-05-25 10:34:07100 FREE spins a £200 EXTRA double bonus http://scammed.by/scam.php?id=125359 Begin forwarded message: From: "Karamba by Gammify" andlt;news@gammify.euandgt; Date: 24 May 2015 08:58:38 Subject: 100 FREE spins + a £200 EXTRA double bonus. Reply-To: news@gammify.eu 39410_ENG Congratulations! you have won our MAX offer! Our system has selected you among today?s winners, to receive our maximum offer: 100 FREE spins + a £200 EXTRA double bonus. By claiming this offer with code: KAR100, you automatically qualify to receive our next FREE exclusive offer! GET MAX BONUS Today?s other winners: Emma H Amy B Nicola B 100 spins + £200 MAX bonus- Today only! Click here to unsubscribe if you do not want to receive any further promotions. 2015-05-25 10:28:54CONGRATULATIONS sscatcher@yahoo com: Receive a Kroger 1000 gift cardhttp://scammed.by/scam.php?id=125356 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/teyJjIjogODI4MywgImYiOiAwLCAibSI6IDc2MDQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 10:14:12Tr : SPAM [SPAM] Aimeriez vous pour recevoir € 1500 pour le week end?http://scammed.by/scam.php?id=125355 v\:* { BEHAVIOR: url (#default#vml) } -------Message original------- De : Ana Date : 25/05/2015 2:02:53 A : bruno.alberici@telenet.be Sujet : *** SPAM ***[SPAM] Aimeriez-vous pour recevoir ? 1500 pour le week-end? Bonjour , Votre adresse e-mail: bruno.alberici@telenet.be a été sélectionné pour recevoir ?1500 gratuitement Obtenez votre ?1500 maintenant Cordialement, Ana Quote of the day: The starting point of all achievement is desire." Napoleon Hill There are no great limits to growth because there are no limits of human intelligence, imagination, and wonder. - Ronald Reagan You may unsubscribe at any time Animations GRATUITES pour vos emails ! Cliquez ici ! L'absence de virus dans ce courrier électronique a été vérifiée par le logiciel antivirus Avast. www.avast.com 2015-05-25 10:04:47? QuaIity ? Coverage Starting At ? 3 50 month http://scammed.by/scam.php?id=125354 QuaIity Coverage - Starting At $3.50/month* SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.180 listed in list.dnswl.org] 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: onionpeelselfrealizingcr.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: onionpeelselfrealizingcr.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: onionpeelselfrealizingcr.com] 2015-05-25 10:01:32Golden infomation to connect with Chinese wood furniturehttp://scammed.by/scam.php?id=125353 Hello Friend Good day to you Quliaty wooden home furniture and children furniture with EN71 standard pating and FSC wood material here, around 15 years in producing and 6 years for exporting. Hope to be your business partner in near future Contact us freely Customer Service Team Qingdao Good Hill Furniture Co., LTD 2015-05-25 16:32:53 To stop receiving email, Please unsubscribe [7bd803e2583c] SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (goodhilllina[at]163.com) -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2015-05-25 09:53:41Dear Beloved in Christhttp://scammed.by/scam.php?id=125352 Dear Beloved, My name is Mrs. Angela Rosenberg, I am 49 Years old Born and brought up in Canton Zurich, Switzerland. Last year i experience restlessness and sleepless nights so my Doctor in Zurich, Switzerland sent me on a general Medical Check up which i was finally diagnosed to have cancer of the Lungs. So my Doctor fly me back to my country Switzerland. My late husbands brother wanted me dead so that he will inherit all my wealth i suffered to build. As a Christian i rather donate my money to the less privilege, orphanage homes and the Church than allow wicked people to take all when i die. Lately I discovered that my late husband?s relation know about the deposited money and their are happy that I will soon die so that they can take the money, so I will give the claim information to you before I pass on to glory. I will give you all the details that will assist you in getting the Funds deposited with the security Company. I deposited the total of US$8,500.000.00 (Eight million five hundred united states dollars) in cash in a sealed consignment Box in disguise as (Church Evangelical Materials/Family valuables). This means that the Security Company staff does not know that the Consignment Box contains the cash to avoid Vitalization or theft until the given duration. I will send you the Claim documents (Deposit Certificate and Agreement Bond) and the contact information of the Security Company where the money is deposited in Disguise, I want to have an assurance from you that even when I die,you will not use the money wrongly and will do your best to get it from the security Company in Accra Ghana. I will die happily if I know you will use my funds in a manner pleasing to humanity when you get it. I have to rest now due to my unusual weakness. Please pray for me my dear and respond urgently to my email so that I can be able to conclude the inheritance Hand over Authorization before I die. I anxiously await your response my dear. May you be blessed, as you reach me at mrs_angela.rosenberg@yahoo.com. Best Regards, Mrs. Angela.M.Rosenberg SpamAssassin Report (spam score: 5.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: kraevid.com.ua] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.8 DKIM_ADSP_DISCARD No valid author signature, domain signs all mail and suggests discarding the rest -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2015-05-25 08:51:16TELEGRAPHIC TRANSFER NOTICE http://scammed.by/scam.php?id=125350 From The Desk of: Mr. Fares D. Noujaim.. Bank of America. Branch Offices New York 1680 Broadway, New York. NY 10019, USA. Vice Chairman on Investment Banking Director, Credit Control Dept. Attn: The Beneficiary, TELEGRAPHIC TRANSFER NOTICE. We are hereby officially notify you concerning your fund telegraphic Transfer through our bank, Bank of America, New York, to your bank account, which has been officially approved by the management of World Bank Swiss (WBS) to credit the sum of US$18.5 Million into your bank account. Note that I have started processing your payment and every thing concerning the immediate remittance of your funds will be carried out within the shortest possible time from the time we received your? Below needed information. Also be informed that the Governor of Bank in London (BL) will sign on your payment advice and a copy of the advice will be sent to the World Bank in Swiss for some record purposes. Meanwhile your information and your full contact details were received from our research manager, Barr. Paul Peterson on your behalf to FRB for immediate release of your fund This fund was part of the lodged Late President Saddam Hussein of Iraq discovery fund with World Bank of Switzerland, which the Swiss Bank has decided to distribute it generously to help few lucky individuals and the American Government is in agreement with the Swiss Bank to distribute the fund to 700 hundred thousand people in America, Europe andamp; Asia in other to help improve their businesses. Therefore, reconfirm the aforesaid information accurately, because this office cannot afford to be held liable for any wrong transfer of funds or liable of any fund credited into an unknown account. These are the information we needed to be reconfirmed by you. 1.Your Full Bank Account Details 2.Your Direct Cell or office phone to reach you 3.Your address of locations 4.Your full name Finally, you are required to reconfirm directly to me the above information to enable me use it to process your bill of payment. Your quick response shall be mostly appreciated; all your response should be directed through our alternative email address for the immediate attention of the credit control department. Yours Faithfully, Mr. Fares D. Noujaim. Vice Chairman, Director, Credit /Telex Department. SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [64.12.81.67 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (b.america19[at]aol.fr) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (b.america19[at]aol.fr) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2015-05-25 08:23:08? FlND ? a ? Lawyer ? In Your Areahttp://scammed.by/scam.php?id=125349 FlND a Lawyer in Your Area .jwclmxskroqjcl{color:#784292;} SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.43 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: latitenumidinaerb.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: latitenumidinaerb.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: latitenumidinaerb.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2015-05-25 07:37:16Lets do this ASAPhttp://scammed.by/scam.php?id=125348 My name is Gary Mann; I?m currently a captain of the United States Marine, born in Turin-Italy currently deployed to Kabul, Afghanistan on a covert operation. I am placing my 26years military career at your mercy contacting you for this partnership and project. My unit recently conducted a black-ops search and seize mission at a particular residence of a known Taliban chieftain and notorious drug lord. We came across a little over $50,000,000.00 in cash. The four of us debated what to do with the funds and decided to split it between ourselves. Since we are still in active service, I have so far contacted an investment military lawyer who has advised me to get a contingent beneficiary. The funds will be made clean as an investment with a known convenient shop and the proceeds liquidated to my nominated beneficiary. My request is simple, act as my contingent beneficiary and 25% of the total amount will be yours for gratification and partnership. Note that this will be processed under a legitimate framework. Please this information is for your eyes only as I stand untold risks should a third party learn of this. Please get back to me if you are willing to help me. Gary Mann SpamAssassin Report (spam score: 3.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 1.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2015-05-25 07:11:36My sincere greetings to youhttp://scammed.by/scam.php?id=125345 Beloved, My sincere greetings to you, Please permit me to introduce myself, My name is Vivian Justin Yak, 24years old female (single) originated from Sudan. I appeal to you to exercise a little patience and read through my letter although, we have neither met in person but I decided to contact you personally for a long term business relationship and investment assistance in your country. My father Dr. Justin Yak Arop was the former Minister for SPLA Affairs and Special Adviser to President Salva Kiir of South Sudan for Decentralization. My father Dr. Justin Yak and my mother including other top Military officers and top government officials had been on board when the plane crashed on Friday May 02, 2008. My late Father Dr. Justin Yak was an investor, he invested his fund to stock exchange market, Gold storing investment, he was a preference shareholder in Shell Petroleum Company and deals in Real Estate building investment. I have chosen to contact you after my prayers and I believe that you will not betray my trust. But rather take me as your own sister. Though you may wonder why I am so soon revealing myself to you without knowing you, well, I will say that my mind convinced me that you are the true person to help me. I want you to stand as my trustee and clear my inheritance fund to your Bank account for investment purpose while I will spend the rest of my life with you after the transfer. More so, I will like to disclose much to you if you can help me to relocate to your country because my uncle has threatened to assassinate me. The amount is $12.8 Million and I have confirmed from the bank. You will also help me to place the money in a more profitable business venture in your Country. However, you will help by recommending a nice University in your country so that I can complete my studies. It is my intention to compensate you with 25% of the total money for your services while 5% will be for any expense that may occur during the process and the balance shall be my capital in your establishment. I have no knowledge of international transaction of this nature but it occurred to me that transfer of this type must involve expenditure. As soon as I receive your interest in helping me, I will put things into action immediately. In the light of the above, I shall appreciate an urgent message indicating your ability and willingness to handle this transaction sincerely by replying to me, Please do keep this only to your self, I beg you not to disclose it till i come over because I am afraid of my wicked uncle who has threatened to kill me. Sincerely yours, Vivian Justin Yak. SpamAssassin Report (spam score: 8.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [212.52.159.74 listed in zen.spamhaus.org] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [212.55.154.24 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (princessvivianjustin[at]gmail.com) 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [212.52.159.74 listed in dnsbl.sorbs.net] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.2 MISSING_HEADERS Missing To: header 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2015-05-25 07:01:40Berbagi Kebahagiaan Kepada Anak Anak Tidak Mampuhttp://scammed.by/scam.php?id=125346 Kepada Yth.Bapak / IbuSalam.Doand#8217;a kami semoga Bapak/Ibu selalu diberi kesehatan dan keberkahan dalam menjalankan aktifitasnya sehari-hari. Gerakan Nasional Orang Tua Asuh (GNOTA) adalah sebuah organisasi sosial nirlaba, independen dan transparan yang didirikan pada tanggal 29 Mei 1996. Ini adalah sebuah gerakan insiatif dari masyarakat untuk menjaga agar anak-anak Indonesia dari keluarga tidak mampu mendapatkan pendidikan dasar sebagai landasan meraih masa depan yang lebih baik.Selama ini untuk membantu mereka, Yayasan GNOTA mendapat donasi dari Orang Tua Asuh, CSR Perusahaan dan donasi lainnya dari masyarakat Indonesia. Dan kami mengajak Bapak/Ibu untuk ikut membantu mereka agar tidak putus sekolah. Donasi Bapak/Ibu dapat disalurkan melalui transfer bank sebagai berikut :Bank BCA Rek No: 035-311.804.5 Bank Mandiri Rek No: 103-000170845.8Bank BRI Rek No: 0230.01.000586.30.8atas nama : Yayasan Lembaga GNOTAUntuk penjelasan lebih lengkap mengenai Yayasan GNOTA, dapat mengunjungi website kami di www.gnota.or.id. Terima kasih. Rudi HartonoFundraising Yayasan Lembaga Gerakan Nasional Orang Tua AsuhKantor Taman A9 Unit DJl. DR. Ide Anak Agung Gde Agung Lot 8,9 / A9, Kawasan Mega Kuningan,  Jakarta Selatan 12950Phone: 021 3900 900 | Fax: 021 576 4442 | WhatsApp 0817 017 3900 | Pin BBM : 53E81E8E Email: pusat@gn-ota.or.id |Website : www.gnota.or.id Email ini bebas virus dan malware karena avast! Antivirus proteksi aktif. SpamAssassin Report (spam score: 0.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.45 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 06:51:24Remportez une pochette illiko comportant 50 euros de tickets à gratterhttp://scammed.by/scam.php?id=125340 kit-mail-fdj Si vous ne parvenez pas à lire cet e-mail, visualisez la version en ligne img { border: none; } body { font-family: Arial; } ul { list-style-type: none; padding-left: 0; margin-left: 0; margin-top: 15px; } ul li { list-style-type: none; padding: 0px 0px 0px 20px; } table td { } ul li:first-child { padding-left: 7px; } td { font-size: 12px; } a { text-decoration: none; color: black; } Fandeacute;licitation ! Vous andecirc;tes sandeacute;lectionnandeacute; pour tenter de remporter 1 pochette illiko dandrsquo;une valeur de 50andeuro; Pour participer, merci de valider vos coordonnandeacute;es et bonne chance ! Elodie, Responsable des gagnants jeux concours Vous recevez ce mail car vous êtes abonné(e) à woocom-2.com . Cet email vous est envoyé par woocom-2.com 16 rue du capitaine Ferber 75 020 PARIS -. Pour vous désabonner de notre newsletter : Rendez-vous sur cette page SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: woocom-2.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.50 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 06:03:10Бельо от Schiesser | Рокли By Hellenehttp://scammed.by/scam.php?id=125343 .ielka {font-family: Arial, Helvetica, sans-serif} .s {font-family: Arial, Helvetica, sans-serif; color: rgb(51, 51, 51); } ??? ?? ?????? ???? ?????, ??? ?????? ?????? ???? ??????????? ?????? ????????? -55% By Hellene -80% Marianne Song -80% Lara Ricci -70% Hello Kitty -50% Postquam, Italian Design -90% ??????????? last minute Element Miss Sixty Coccola, Crystal Arte Milano ????? ?? ?? ????????? ???? ?????????? ?????????, ????????? ?? ????????? ????????? ? ?????????? ??????????? ?????? ????????? ????????? ????, ??? ???????? ? ????? ?? ??????????: ????? 1000, ?????? ??????????, ????? ????????, ???. ???? ???????????? ? 10, ??. 3, ? ??? 202706277, ?????? ??? ??????????? ?????????? ? ??? ?????? ?????? ??????? ?? ???????? ?? ?????, ??? ????? ??? ??????? ?? ? ??????? ?? ?? ???????????? ??? ????? goldensales.bg ?????? ?????? contact@goldensales.bg ? ????????? ?? ?????, ?? ?? ????????? ?????? ?????? ?? ?????? ???????????. ?? ????? ?? ????????? ???? ???????? ????? ?? ?? ???????. ??? SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: goldensales.bg] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 06:01:49Sorority is waiting for your responsehttp://scammed.by/scam.php?id=125341 If you can't see this email please click here Hi submit@scammed.by, Sorority invited you to be their friend on Tagged: Sorority Lyfe Invite Sent May 24, 2015 Is Sorority your friend? No Yes Come set up a profile on Tagged! You can make your own great profile that's all about you. Find your friends and meet new people. There is lots to do: chat, flirt, photos, games and more! To Sign up for Tagged, follow the link below: http://www.taggedmail.com/register.html?conn=dgvd1qdg3andect=e05ll1qeandfid=28289ba4d61683bbandal=andtn=aW52aXRlc19yZWdpc3Rlcl9yZWdwYXRoLTEtMTMtOC0xNw==andlinkId=register_link_5 submit@scammed.by was invited to join Tagged by Sorority Lyfe. If you do not wish to receive more mail from Tagged, you can unsubscribe. Tagged Inc., 110 Pacific Mall Box #117, San Francisco, CA. 94111 2015-05-25 06:00:39CONGRATULATION FROM FACEBOOK MANAGEMENT http://scammed.by/scam.php?id=125342 Facebook, Inc., Headquarter Menlo Park, CA, United States of America DEAR LUCK WINNER, This is to inform you that you have being luckily selected as one of our online winner in this year 2015 Facebook online draw in association with Yahoo mail, Hotmail, gmail AOL mail etc . this promo is conducted through electronic ballot System without the winner applying. we congratulate you and wish to inform you that your EMAIL have won you $1,000,000.00, (One Million US Dollars) in our online draw as organized by Facebook management. Send the below details Mr Alberto Grados Pedemonte our claims administrator on this email: facebookdraw@inbox.lv for claim and for more information 1. Full Name: 2. Full Address: 3. State: 4. Occupation: 5. Age: 6. Sex: 7. Country: 8. Winning Email: 9. Mobile Number: thank and regard Alberto Grados Pedemonte (claims direct general) Facebook management -- -- SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.52 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 05:58:10I need your assistancehttp://scammed.by/scam.php?id=125338 Good day I need your assistance to validate your name in our Bank System to enable the Bank transfer the sum of $10.5Million unclaimed fund into your nominated bank account to your account for onward investment ( Hotel industries and Estate building management) or any profitable business in your country and I will give you 40%, for your assistance. My questions are? 1. Can you handle this project? 2. Can I give you this trust? If Yes Then Send Me Your Informations; To commence this transaction, I require you to immediately indicate your interest by a return mail for more details. Yours faithfully, Mr. Hamed billy SpamAssassin Report (spam score: 4.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.0 HK_RANDOM_FROM From username looks random 0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters 0.3 FROM_LOCAL_HEX From: localpart has long hexadecimal sequence 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dbbbbbbbbbbb1[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 05:26:24CONGRATULATIONS: You have received a 1000 gift card from Walmarthttp://scammed.by/scam.php?id=125336 If you cannot click the link above, Copy and Paste this link: http://samystoreonline.com/leyJjIjogODI4NiwgImYiOiAwLCAibSI6IDc2MDcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: samystoreonline.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: samystoreonline.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 05:19:31POSTI PÄIVITYS 2015http://scammed.by/scam.php?id=125335 Hyvä Webmail Käyttäjä, Postilaatikko on ylittänyt varastointi rajan, joka on 20 gigatavua asettamaa järjestelmänvalvoja, käytössäsi on 33,6 Gt, ota uudelleen todentamaan postilaatikkoon napsautuksella tai kopioi linkin alla: http://gd1949.wix.com/paivitys2015 Varoitus: jättäminen uudelleen asettaa postilaatikkoon menettäisi e-aktiiviset tietokannastamme. järjestelmä johto joukkue,© tekijänoikeus 2015 WEB MASTERS 2015-05-25 05:17:32Dear Google Userhttp://scammed.by/scam.php?id=125334 On Monday, May 25, 2015 12:50 AM, Google Incorporation® andlt;carlo.bartocci@uslumbria1.itandgt; wrote: Dear Google User. You have been awarded by the Google Corporation's award team,attached to this email is your anniversary notification for being an active user of Google. Sincerely. Larry Page Co-founder of Google ©2015 Google Corporation® 2015-05-25 04:27:56Felixcramb startling incoming videomail 3:02 nationalizationhttp://scammed.by/scam.php?id=125333 Whats App Messenger WhatsApp incoming videomail. Details Time: May 25 3:02 Length of Call: 06 seconds Autoplay andcopy; 2015 Whats App SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.43 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (crinistarnn[at]excite.de) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2015-05-25 03:22:25[¶ñ°Ý¨÷°e¦n±d]®a¤¤«Ä¤lªº­^»y¾Ç²ßÀô¹Ò¤j½Õ¬dhttp://scammed.by/scam.php?id=125332 No1and#22909;and#24247;and#29579; ( 05/25 ) and#22909;and#24247;and#21839;and#21367;and#35519;and#26597;--and#23560;and#35370;and#29240;and#29240;and#23229;and#23229; and#23478;and#20013;and#30340;and#23401;and#23376;and#33521;and#35486;and#23416;and#32722;and#29872;and#22659;and#22823;and#35519;and#26597; ( and#26412;and#27425;and#28858;and#26377;and#36104;and#21697;and#21839;and#21367;and#35519;and#26597; ) and#24288;and#21830;and#24819;and#20102;and#35299;and#30446;and#21069;and#23478;and#20013;and#26377;8~18and#27506;and#23401;and#23376;and#23478;and#24237;and#30340;and#33521;and#25991;and#23416;and#32722;and#29376;and#27841; and#29305;and#21029;and#33289;and#36774;and#26412;and#27425;and#21839;and#21367;and#22823;and#35519;and#26597;and#20006;and#25552;and#20379;and#36104;and#21697;and#24863;and#35613;and#21443;and#21152;and#30340;and#29240;and#29240;and#23229;and#23229; and#31777;and#21934;and#30340;and#24190;and#20491;and#21839;and#38988;and#26377;and#33288;and#36259;and#30340;and#29240;and#23229;and#21487;and#20197;and#25277;and#31354;and#22635;and#23531;! - --_-.-. and#23478;and#20013;and#23401;and#23376;and#33521;and#35486;and#23416;and#32722;and#29872;and#22659;and#22823;and#35519;and#26597; and#26412;and#35338;and#24687;and#30001;No1and#22909;and#24247;and#29579;and#19981;and#23450;and#26399;and#30332;and#20296;and#36890;and#30693;,No1and#22909;and#24247;and#29579;and#26159;and#23560;and#27880;and#26044;and#25552;and#20379;and#22909;and#24247;and#36039;and#35338;and#30340;and#32178;and#31449;. and#22914;and#26524;and#24744;and#19981;and#24819;and#35201;and#20877;and#27425;and#25910;and#21040;and#20219;and#20309;and#22909;and#24247;and#36890;and#30693;and#35531;and#33267;No1and#22909;and#24247;and#29579;and#32178;and#31449;and#30331;and#35352;and#25298;and#25910; SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.46 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rosenzweigteirtza[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2015-05-25 03:07:42First Orderhttp://scammed.by/scam.php?id=125331 Dear Sir, Kindly see PO below. Please open LC. With regaeds Maged Farouk SpamAssassin Report (spam score: 4.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (woosangengineering[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.177 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP 2015-05-25 02:59:55ROME ITALIAN LUXURY REAL ESTATEhttp://scammed.by/scam.php?id=125329 * { margin-top: 0px; margin-bottom: 0px; padding: 0px; border: none; list-style: none; outline: none; -webkit-text-size-adjust: none !important; -ms-text-size-adjust: none !important; } body { margin-top: 0 !important; margin-bottom: 0 !important; padding-top: 0 !important; padding-bottom: 0 !important; width: 100% !important; -ms-text-size-adjust: 100% !important; -webkit-text-size-adjust: 100% !important; -webkit-font-smoothing: antialiased !important; } td { border-collapse: collapse !important; mso-line-height-rule: exactly !important; } table { border-collapse: collapse !important; mso-table-rspace: 0pt; mso-table-lspace: 0pt; border-bottom-width: 0px !important; } img { border: none !important; outline: none !important; } .ExternalClass { width: 100%; } .ExternalClass, .ExternalClass p, .ExternalClass span, .ExternalClass font, .ExternalClass td, .ExternalClass div { line-height: 100%; } a { color: #3C2415; text-decoration: none; } td .display_mobile { display: none !important; } div .display_mobile { display: none !important; } @media only screen and (max-width: 480px) { table[class=main_table] { width: 100% !important; } table[class=wrapper] { width: 100% !important; } td[class=hide] { display: none !important; } table[class=hide] { display: none !important; } td[class=text] { text-align: center !important; } td[class=block] { padding-bottom: 15px !important; } td[class=up_gap] { padding-top: 15px !important; } td[class=aside] { padding: 0px 5px !important; } img[class=side_img] { display: none !important; } br[class=break] { display: none; } td[class=title] { padding: 7px 7px !important; } td[class=width] { padding: 15px 15px !important; } table[class=package] { width: 204px !important; } td[class=display_mobile] { text-align: center !important; display: block !important; height: 1px !important; } div[class=display_mobile] { display: block !important; width: auto !important; float: none !important; overflow: visible !important; } } @media only screen and (min-width: 481px) and (max-width: 599px) { table[class=main_table] { width: 100% !important; } table[class=wrapper] { width: 100% !important; } td[class=hide] { display: none !important; } table[class=hide] { display: none !important; } td[class=block] { padding-bottom: 15px !important; } td[class=aside] { padding: 0px 5px !important; } img[class=side_img] { display: none !important; } br[class=break] { display: none; } } ROME ITALIAN LUXURY REAL ESTATE Se non visualizzi correttamente la mail clicca qui ROMA PIAZZA NAVONA adjacent FIRST FLOOR APARTMENT ADJACENT EXCELLENT CONDITION WITH coffered ceilings VINTAGE: HALL, DINING ROOM DOUBLE ROOM, KITCHEN, TWO BEDROOMS, TWO BATHS AND WINERY SAN PIETRO OVERLOOKING PENTAHOUSE IN STABLE VINTAGE: ENTRANCE,LARGE KITCHEN, BEDROOM, BATHROOM, TERRACE. ROME adjacent PIAZZA DI SPAGNA SUITE 180 SQM 1ST FLOOR DIVISIBLE, 2 INPUTS, SAL ROOM WITH FIREPLACE, 5 BEDROOMS, 2 BATHROOMS, KITCHEN. ROME adjacent PANTHEON SUITE OF GREAT CHARM 160 sqm + LOFT 80 sq.m. ON 2 LEVELS WITH COURTYARD. italianluxuryrealestate@outlook.com Share on Inoltra servizi pubblicitari on line | | Aggiorna profilo | Disiscriviti | Informativa sulla privacy Questa mail andegrave; stata inviata a sscatcher@yahoo.com usando SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: temts.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (serpuonline[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-25 02:38:40DE LA PART DE Mme ELODIE BOURAShttp://scammed.by/scam.php?id=125327 -- Bien aimé en Christ bonjour, De nos jours, les prières valent du temps ,je me nomme madame: Elodie Bouras je souhaite vous léguer mes fonds d'une valeur de 2 Millions 25000EUR (Deux Millions Vingt Cinq Mille Euros) dont je vais vous en parler dans mon message qui va suivre celui ci si vous me répondez, favorablement , je n'aimerais pas aller plus loin dans mon mail , j'aimerai vous connaitre un peu plus avant que je ne vous donne plus de précision. Veuillez me parler de vous je veux vous connaitre profondément car je suis entrain de subir une condition de vie très difficile parce que je souffre actuellement du cancer de cerveau depuis des années , je vais essayer de rentrer plus dans les détails des que vous vous m'aurez répondu . QUE DIEU VOUS BÉNISSE SpamAssassin Report (spam score: 2.7) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.9 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2015-05-25 02:26:53Father Vito Perniola S J added a comment to your profile on TRANSITION IN ACTION SOCIAL NETWORKhttp://scammed.by/scam.php?id=125328 ---------- Forwarded message ---------- From: TRANSITION IN ACTION SOCIAL NETWORK andlt;mail@transitioninaction.comandgt; Date: 2015-05-23 13:30 GMT-05:00 Subject: Father Vito Perniola S.J. added a comment to your profile on TRANSITION IN ACTION SOCIAL NETWORK To: Ecoaldea en Medellin andlt;ecoaldea2010@gmail.comandgt; Father Vito Perniola S.J. added a comment to your profile on TRANSITION IN ACTION SOCIAL NETWORK ------------ You are blessing my beloved. I know this mail will surprise you, dont be surprise my beloved, it is the lord doing, God almighty has chosen you for me to bless you with the sum of 45,000 Dollars because, you have liberal mind and you obey him. My beloved, I do not have much strength to write much story, let me go by introducing my self to you. I am Rev. Father Vito Perniola S.J. from USA, God almighty the creator of all universe has called me to rest which I do not know when I will leave this life and I asked what do I do with my money he has giving to me? He said I will use it to bless his beloved then through that orphans will be blessed. I ask the lord who is this beloved? He said I should visit transitioninaction.com i will find you there. Therefore, my beloved, this money will be share into three according to the holly spirit direction, One part is for you, Second part is for Motherless baby, Third part is to be invest to a good business that will bear my name and manage by you. Promise you will not fail to do this my beloved and it shall be well with you from generation to generation. My beloved, this is my lawyer contact; Name. Barrister Allen George.  Telephone number: +2206838716 Email: (barrallenchambers@yahoo.com.au) He will educate you more on how you will receive the money, so my beloved feel free to contact him on phone, It is well with you my beloved, you may not have the opportunity to communicate with me again because, I may have gone to rest with my heavenly father the creator of all universe lord God almighty. Good bye my beloved and do keep this to yourself until receive this money, and may the lord who has chosen you empower you to be above your enemy and protect you from the hands of those who are too strong for you and guide and keep you save through Christ our lord Jesus. Amen. Fear not my beloved, it is the lord doing. Father Vito Perniola S.J. ------------ To view the full comment, visit: http://transitioninaction.com/profiles/comment/list?attachedToType=Userandamp;attachedTo=0geybg4o1gdflandamp;commentId=2320371%3AComment%3A135511andamp;xgsi=1andamp;xg_source=msg_com_profile To reply to the comment, visit: http://transitioninaction.com/profile/FatherVitoPerniolaSJ?xgsi=1#com -- To disable email notifications for comments on your profile, go to: http://transitioninaction.com/profile/EcoaldeaenMedellin?xgsi=1andamp;unfollowMyPage=1andamp;xg_source=msg_com_profile To control which emails you receive on TRANSITION IN ACTION SOCIAL NETWORK, go to: http://transitioninaction.com/?xgo=woc6yuW9E8W4txSsmg5hJ8VSXB1Tyd7BYih2El6oxNxEKPVuDrHwygandamp;xg_source=msg_com_profile 2015-05-25 02:22:07Want to come overhttp://scammed.by/scam.php?id=125326 ----- Forwarded Message ----- From: Darsey andlt;ditdyfse@kt.comandgt; To: dburkel1234@yahoo.com Sent: Sunday, 1 February 2015, 15:05 Subject: Want to come over Bonjo?ur mo?viestar !! i n?eed s?3x r?ight n?ow. i'm not pic?ky !interested? s?en?d me a c?ha?t request?. !! My s?c?reenna?me is Darsey87 My profile is he?r?e: Welcome?! 2015-05-25 02:15:49re:http://scammed.by/scam.php?id=125325 Name: Adriana Age: 19 Eye Color: Light Blue / Brown Height: 5"7 Hair Color: Blonde / Dark Brown Submissive: Yes Sexual orientation: Bi-Sexual Star sign: Cancer About me: I love playing with new pink dildo wanna see? :) Send me an sms message to 13109246710 if your real baby I'm feelin real naughty today ;) Or Add me on yahoo messenger, its adriana2110t XOXO Adriana SpamAssassin Report (spam score: 10.2) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [180.215.162.24 listed in zen.spamhaus.org] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [180.215.162.24 listed in bb.barracudacentral.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more2015-05-25 02:05:23Top 10 Best Dating Websites for 2015http://scammed.by/scam.php?id=125324 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/jeyJjIjogODI4MiwgImYiOiAwLCAibSI6IDc2MDMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 01:59:53Important: private message for youhttp://scammed.by/scam.php?id=125323 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI4MCwgImYiOiAwLCAibSI6IDc2MDIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 01:40:01HARDER STRONGER BIGGER LONGERhttp://scammed.by/scam.php?id=125322 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/teyJjIjogODI3OSwgImYiOiAwLCAibSI6IDc2MDEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 8.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 01:15:47Re: Attn: Beneficiaryhttp://scammed.by/scam.php?id=125321 International Settlement Dept. Oceanic Bank Plc. Attn: Beneficiary, Your Contact Email Was Given To This Office In Respect Of Your Totalitarianism/Contract Sum Owed To You Which You Have Failed To Claim Because Of Either Non-Compliance Of Official Processes Or Because Of Your Unbelief Of The Reality Of Your Genuine Payment. We Wish To Bring To You The Solution To This Problem. Right Now We Have Arranged Your Payment Through Our Swift Card Payment Centers, Thatch The Latest Instruction From Economic Community Of West African States (ECOWAS) This Card Center Will Send To You An ATM DEBIT Card Which You Will Use To Withdraw Your Money In Any ATM Machine In Any Part Of The World, So If You Like To Receive Your Fund In This Way Please Contact Us Immediately. Contact Person: Leo Brincat E-mail: ( leo.brincat1917@gmail.com ) Direct Line: +234-7066122497 And Also Send The Following Information As Listed Below. 1. Full Name: 2. Phone And Fax Number: 3. Address To Send The ATM Card To: 4. Your Age And Current Occupation: 5. Attach Copy Of Your Identification: We Have Been Mandated By The ECOWAS Parliament To Issue Out ($2.5M)Payment For This fiscal year 2010. Also For Your Information, You Have To Stop Any Further Communication With Any Other Person (S) Or Office(S) To Avoid Any Hitches In Receiving Your Payment. The only fee you have to pay is ATM card rectification fee. Note That Because Of Impostors, We Hereby Issued You Our Code Of Conduct, Which Is (ATM-822) So You Have To Indicate This Code When Contacting The Card Center By Using It As Your Subject. We Wait For Your Expedite Response. Yours In Service, SpamAssassin Report (spam score: 24.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.175 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 1.4 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FAKE_REPLY_C FAKE_REPLY_C 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.3 MONEY_ATM_CARD Lots of money on an ATM card 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 LOTTO_DEPT Claims Department 1.0 XPRIO Has X-Priority header 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2015-05-25 00:52:59sscatcher@yahoo com Please meet me in Mountain View tonight http://scammed.by/scam.php?id=125320 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI3OCwgImYiOiAwLCAibSI6IDc2MDAsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 00:47:58?O?A???U????Q?v?v?T?z?????http://scammed.by/scam.php?id=125318 SpamAssassin Report (spam score: 13.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.3 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 2.0 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.176 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.8 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP 2015-05-25 00:45:07sscatcher@yahoo com We Have found a great car price for you http://scammed.by/scam.php?id=125316 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI3NywgImYiOiAwLCAibSI6IDc1OTksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [122.12.196.223 listed in list.dnswl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 00:26:02sscatcher@yahoo com Revelations from your Guardian Angelhttp://scammed.by/scam.php?id=125315 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI3NiwgImYiOiAwLCAibSI6IDc1OTgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-25 00:08:59Estimulante dos famosos http://scammed.by/scam.php?id=125314 Estimulante natural para homens e mulheres! Ver no browser Reportar SPAM Esta mensagem foi enviada para soludopublishing@gmail.com. Pode em qualquer momento se descadastrar no link em baixo. Nandatilde;o deve responder a este email diretamente pois a sua solicitaandccedil;andatilde;o poderandaacute; nandatilde;o ser respondida. Neste momento estandaacute; recebendo as melhores ofertas do dia pelo serviandccedil;o Melhor do Dia, um serviandccedil;o completamente gratuito para que o usuario esteja sempre a par das melhores novidades e descontos. Caso queira deixar de receber nossas fantandaacute;stica promoandccedil;andotilde;es. SpamAssassin Report (spam score: 7.7) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.174 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: atitudeemidia.com.br] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP 2015-05-25 00:02:22Confirm Your Shipping Address 1 Free Trial Availablehttp://scammed.by/scam.php?id=125312 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/zeyJjIjogODI3NSwgImYiOiAwLCAibSI6IDc1OTcsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 23:44:29: Ref: 12 5 MILLION: READ AND REPLY IN YOUR BEST INTERESThttp://scammed.by/scam.php?id=125311   Dear beneficiary. It is seen as unfortunate that you have decided to comply with the European Union Directive allowing you this opportunity of receiving your long withheld sum of $12.5 Million from West Africa Here. Read all forwarded email below. Your refusal to send the requested details for opening a new account at Union Bank of Nigeria PLC for you (in your name) has classified your payment claim as andquot;SUSPICIOUSandquot; Yes your name and email address is what is contained here in the Master-Payment file for recovered funds. It will be to your great advantage to read the below forwarded email very well and take your decision. If you finally fail to take this advantage, you may blame yourself whenever we have departed this West Africa for our various countries in Europe. Read the below forwarded email very well and take your final decision. Roderick Buford. ---------- Forwarded message ----------From: Rod Buford andlt;email.data10@gmail.comandgt;Date: Wed, May 20, 2015 at 10:33 AMSubject: : $12.5 MILLION:- READ AND REPLY IN YOUR BEST INTEREST.  Dear beneficiary, I repeat to you here. I and my team flew into West Africa (Nigeria) to harmonize these payments. So many beneficiaries involved and not only you. We have also settled payments for so many within these weeks. Because of the corrupt nature of the people over here, the EU Anti-Fraud Commission did not allow foreign beneficiaries to to deal with these bankers and government officials. We are the intermediary between securing these payments and ensuring that they get into your hand without further hitch. This is what we have done for so many beneficiaries both from USA, Canada, England and Asia and some other countries in Europe. We came in here even with our own attorneys and solicitors. All you need to do is to send us your personal details as I will state below and ONLY $100 (19,600 Nigeria Naira local currency). We will go to the bank by ourselves, pick up the forms, open the new account (secured) for you and authorize immediate transfer of your $12.5 Million into it. We will mandate the bank to process your MasterCard Debit (ATM) which we will send to you immediately to begin withdrawals in your country. With regards to my previous email, it is important here to state categorically that without your timely and maximum co-operation, this imminent account opening (in your name) may not be possible, therefore, the proposed (immediate) transfer of your $12.5 Million from the Government Existing Allocation Account into your new account, controlled by you may not be obtainable. This means that your unreserved/ maximum and timely co-operation is needed right here. As I stated, the only thing required from you is your personal data for the account opening plus your initial account opening deposit of $100 (ONLY). 1. Your names (in full)2. Your mailing address3. Your direct telephone number4. Your date of birth5. Present occupation6. Your Next of Kin7. Your ID Card OR Two (2) Recent Passport photographs8. $100 (Cash Deposit) I will hereby advice you to send this $100 Account Opening Deposit through Money Gram or Western Union directly to the bank cashier as follows: Receiver: Tunde KavelishAddress:  Union Bank Nigeria PLC. Plot 42 Marina, Tinubu Square, Lagos Country:  NigeriaSecrete   Question:  TREATsecrete   Answer:   URGENTAmount:   $100 (USD). Do this today and send the Reference Numbers. Once this is done, the rest is in our hands and must be concluded not later than 48 hours after and your International MasterCard (Debit/ATM) Card will be mailed to your mailing address via UPS/FedEx/DHL or regular post. Once again, for your assurance and record I am attaching my native country international passport. This is just for your assurance only.  Call me on my telephone number for any urgent information or may required urgent clarification +234 814 886 4303.  Roderick Oarell Buford European Union Anti-Fraud InternationalRoma-Italia. (Presently) in West Africa.Tel: +234 814 886 4303 ---------- Forwarded message ----------From: Rod Buford andlt;email.data10@gmail.comandgt;Date: Mon, May 11, 2015 at 13:10 PMSubject: : $12.5 MILLION:- READ AND REPLY IN YOUR BEST INTEREST. Dear beneficiary. It is seen as unfortunate that you have decided not to comply with the European Union Directive allowing you this opportunity of receiving your long withheld sum of $12.5 Million from West Africa Here. Your refusal to send the requested details for opening a new account at Union Bank of Nigeria PLC for you (in your name) has classified your payment claim as andquot;SUSPICIOUSandquot; Yes your name and email address is what is contained here in the Master-Payment file for recovered funds. It will be to your great advantage to read the below forwarded email very well and take your decision. If you finally fail to take this advantage, you may blame yourself whenever we have departed this West Africa for our various countries in Europe. Read the below forwarded email very well and take your final decision. Roderick Buford. SpamAssassin Report (spam score: 1.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.213.195 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (email.data10[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (email.data10[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2015-05-24 23:43:33Send to a friend colleague from inspired resources comhttp://scammed.by/scam.php?id=125310 Here's a link to the Inspired Personal and Entrepreneurial Coaching site: http://www.inspired-resources.com/coaching_process.php It was sent to you from a friend. Attn Beneficiary Good Morning It's possible that this mail can be found in the SPAM folder of your e-mail system also it is Virus and Scam free Your Email Address was selected Among this group emails you are seeing in your mail box The British Government and United States of America is Bringing to you your Awarded Fund. You have been chosen through your e-mail address by United Nations Foundation(UNF) Development Payment Board of trustees 2015 as one of our final recipients of a Cash Grant/Donation of Four Million United State Dollars. with GRANT PIN NUMBER;(41UNF592/9CF12) QUALIFICATION NUMBER(UNF/CF-770-671GZWG-12-80) your winning Result was Release by the British government and American Government This is an International(Charity and Human Developmental Organization) Programmed to enhance and develop the standard of living geared towards poverty eradication as targeted by the year 2020. Please to receive your Fund Reconfirm Your Name Country Age Passport ID Bank Information's To Enable Us Transfer Your Fund Worth US$4,000.000.00 Deposited In U.S Bank of America where your fund will be Transferred to you Contact they Remittance Director on this Email for More Details and payment for the releasing/processing of your funds Signed U.k and American government {capeca4@gmail.com} OR {u.n-phillipadams@lawyer.com} SpamAssassin Report (spam score: 9.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: inspired-resources.com] 3.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (u.n-phillipadams[at]lawyer.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLY From and body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases 2015-05-24 23:24:11? Walk In Tubs Low ? Prices Onlinehttp://scammed.by/scam.php?id=125308 .ihgtuqaxhg{color:#85d300;} .qroqsyaajgyfe{color:#70c495;} Walk In Tubs - Low Prices Online .hecxceylbx{color:#856e50;} SpamAssassin Report (spam score: 7.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.192.43 listed in list.dnswl.org] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: nonputrescencephytoclimatologictt.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: nonputrescencephytoclimatologictt.com] 0.6 LOW_PRICE BODY: Lowest Price 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: nonputrescencephytoclimatologictt.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2015-05-24 23:13:17Hi sscatcher@yahoo com wanna chat now?http://scammed.by/scam.php?id=125307 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/yeyJjIjogODI3MywgImYiOiAwLCAibSI6IDc1OTYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 22:21:58Re: We are ready to finance your project http://scammed.by/scam.php?id=125306 Greetings. We are ready to finance your project. We offer flexible financial packages for various projects by passing the usual and formal procedures. We are willing to provide financing for up to 500 Million USD and above depending on the nature of business. We are currently providing funds. We would like you to provide us with a comprehensive business plan for our team of investment expert review. We take 3% founders fee if you get funded or receive the loan * Business Start-up * Business Acquisition * Business Expansion * Commercial Real Estate purchase * Contract Execution, etc Do reply through my private email: if you have need for our investment facility for further discussion. Best Regards, Mohammed Rahman Dubai United Arab Emirates. This e-mail and any attachments may contain confidential and privileged information. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination or use of this information by a person other than the intended recipient is unauthorized and may be illegal. SpamAssassin Report (spam score: 14.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.177 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.5 DATE_IN_FUTURE_12_24 Date: is 12 to 24 hours after Received: date 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FAKE_REPLY_C FAKE_REPLY_C 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 1.0 XPRIO Has X-Priority header 2015-05-24 22:12:48sscatcher@yahoo com View Photos of Millionaires in Mountain Viewhttp://scammed.by/scam.php?id=125302 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/leyJjIjogODI3MiwgImYiOiAwLCAibSI6IDc1OTUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 22:01:47RE: Client to Attorneyhttp://scammed.by/scam.php?id=125304 andgt; From: in@mail.com andgt; Subject: Client to Attorney andgt; Date: Mon, 25 May 2015 00:32:38 -0700 andgt; andgt; Dear Counsel, andgt; andgt; Can you give me legal representation regarding a breach of Loan agreement I had with a friend of mine. andgt; andgt; I can be reached at csddddb@gmail.com OR andgt; j.h637@yahoo.com.hk andgt; andgt; andgt; Regards, andgt; Stephen Kucer 2015-05-24 21:58:14RE:http://scammed.by/scam.php?id=125303 From: info@jcytournaments.com Date: Sun, 24 May 2015 13:32:02 -0500 Subject: .ExternalClass P { MARGIN-TOP:0px; MARGIN-BOTTOM:0px; } You have a cashier's check of $800,000.00 which awaits Delivery Contact Mr. Eric Thomas for details Email: feddexdelivery101@outlook.com 2015-05-24 21:56:05RE: Mein lieber bleiben gesegnethttp://scammed.by/scam.php?id=125301 andgt; Date: Sun, 24 May 2015 22:25:31 +0300 andgt; Subject: Mein lieber bleiben gesegnet andgt; From: kalitsteph@gmail.com andgt; To: andgt; andgt; Mein lieber bleiben gesegnet, andgt; andgt; Ich bin Mrs. kalite Stephnny., Habe ich einige Fonds I von meinem andgt; verstorbenen Vater geerbt. Dr. Joseph Kalite, die Summe von vier andgt; Millionen USA Dollar ($ 4,000000.00 US-Dollar), die er in einem der andgt; berühmten Bank hier in Frankreich hinterlegt und ich möchte diese andgt; Mittel außerhalb dieses Landes als zu investieren, denn ich bin hier andgt; Flüchtlings Ursache nach den Toten meines Vaters sie auch nach mir, andgt; das war, warum ich war hier für Sicherheit, bitte ich will nur zu andgt; suchen, ist sicher zu sein, wenn ich Ihnen vertrauen kann so für mich, andgt; um sicher sein, dass Sie mir helfen, damit ich investieren kann meine andgt; Vererbung in Ihrem Namen, um Ihr Land, und Sie werden, berechtigen zu andgt; 20% Prozent der Investition sein, schreiben Sie mir bitte zurück, wenn andgt; Sie wirklich wissen, wissen mehr über mich und wie Sie hilfreich sein, andgt; ich werde warten, von hinten zu lesen Sie tut mir so sicher, dass Sie andgt; nicht zu helfen, zu bereuen. andgt; beste Grüsse. andgt; Kalite Stephnny. 2015-05-24 21:55:11sscatcher@yahoo com View Pictures of Christian Singles in Mountain Viewhttp://scammed.by/scam.php?id=125299 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/peyJjIjogODI3MCwgImYiOiAwLCAibSI6IDc1OTMsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 21:26:57: 12 5 MILLION: READ AND REPLY IN YOUR BEST INTEREST http://scammed.by/scam.php?id=125298   Dear beneficiary. It is seen as unfortunate that you have decided to comply with the European Union Directive allowing you this opportunity of receiving your long withheld sum of $12.5 Million from West Africa Here. Your refusal to send the requested details for opening a new account at Union Bank of Nigeria PLC for you (in your name) has classified your payment claim as andquot;SUSPICIOUSandquot; Yes your name and email address is what is contained here in the Master-Payment file for recovered funds. It will be to your great advantage to read the below forwarded email very well and take your decision. If you finally fail to take this advantage, you may blame yourself whenever we have departed this West Africa for our various countries in Europe. Read the below forwarded email very well and take your final decision. Roderic Buford. ---------- Forwarded message ----------From: Roderick Buford andlt;rod.bufford1960@gmail.comandgt;Date: Wed, May 20, 2015 at 5:33 AMSubject: : $12.5 MILION:- READ AND REPLY IN YOUR BEST INTEREST.  Dear, I repeat to you here. I and my team flew into West Africa (Nigeria) to harmonize these payments. So many beneficiaries involved and not only you. We have also settled payments for so many within these weeks. Because of the corrupt nature of the people over here, the EU Anti-Fraud Commission did not allow foreign beneficiaries to to deal with these bankers and government officials. We are the intermediary between securing these payments and ensuring that they get into your hand without further hitch. This is what we have done for so many beneficiaries both from USA, Canada, England and Asia and some other countries in Europe. We came in here even with our own attorneys and solicitors. All you need to do is to send us your personal details as I will state below and ONLY $100 (19,600 Nigeria Naira local currency). We will go to the bank by ourselves, pick up the forms, open the new account (secured) for you and authorize immediate transfer of your $12.5 Million into it. We will mandate the bank to process your MasterCard Debit (ATM) which we will send to you immediately to begin withdrawals in your country. With regards to my previous email, it is important here to state categorically that without your timely and maximum co-operation, this imminent account opening (in your name) may not be possible, therefore, the proposed (immediate) transfer of your $12.5 Million from the Government Existing Allocation Account into your new account, controlled by you may not be obtainable. This means that your unreserved/ maximum and timely co-operation is needed right here. As I stated, the only thing required from you is your personal data for the account opening plus your initial account opening deposit of $100 (ONLY). 1. Your names (in full)2. Your mailing address3. Your direct telephone number4. Your date of birth5. Present occupation6. Your Next of Kin7. Your ID Card OR Two (2) Recent Passport photographs8. $100 (Cash Deposit) I will hereby advice you to send this $100 Account Opening Deposit through Money Gram or Western Union directly to the bank cashier as follows: Receiver: Tunde KavelishAddress:  Union Bank Nigeria PLC. Plot 42 Marina, Tinubu Square, Lagos Country:  NigeriaSecrete   Question:  TREATsecrete   Answer:   URGENTAmount:   $100 (USD). Do this today and send the Reference Numbers. Once this is done, the rest is in our hands and must be concluded not later than 48 hours after and your International MasterCard (Debit/ATM) Card will be mailed to your mailing address via UPS/FedEx/DHL or regular post. Once again, for your assurance and record I am attaching my native country international passport. This is just for your assurance only.  Call me on my telephone number for any urgent information or may required urgent clarification +234 814 886 4303.  Roderick Oarell Buford European Union Anti-Fraud InternationalRoma-Italia. (Presently) in West Africa.Tel: +234 814 886 4303 Dear beneficiary. It is seen as unfortunate that you have decided to comply with the European Union Directive allowing you this opportunity of receiving your long withheld sum of $12.5 Million from West Africa Here. Your refusal to send the requested details for opening a new account at Union Bank of Nigeria PLC for you (in your name) has classified your payment claim as andquot;SUSPICIOUSandquot; Yes your name and email address is what is contained here in the Master-Payment file for recovered funds. It will be to your great advantage to read the below forwarded email very well and take your decision. If you finally fail to take this advantage, you may blame yourself whenever we have departed this West Africa for our various countries in Europe. Read the below forwarded email very well and take your final decision. Roderic Buford. ---------- Forwarded message ----------From: Roderick Buford andlt;rod.bufford1960@gmail.comandgt;Date: Wed, May 20, 2015 at 5:33 AMSubject: : $12.5 MILION:- READ AND REPLY IN YOUR BEST INTEREST.  Dear, I repeat to you here. I and my team flew into West Africa (Nigeria) to harmonize these payments. So many beneficiaries involved and not only you. We have also settled payments for so many within these weeks. Because of the corrupt nature of the people over here, the EU Anti-Fraud Commission did not allow foreign beneficiaries to to deal with these bankers and government officials. We are the intermediary between securing these payments and ensuring that they get into your hand without further hitch. This is what we have done for so many beneficiaries both from USA, Canada, England and Asia and some other countries in Europe. We came in here even with our own attorneys and solicitors. All you need to do is to send us your personal details as I will state below and ONLY $100 (19,600 Nigeria Naira local currency). We will go to the bank by ourselves, pick up the forms, open the new account (secured) for you and authorize immediate transfer of your $12.5 Million into it. We will mandate the bank to process your MasterCard Debit (ATM) which we will send to you immediately to begin withdrawals in your country. With regards to my previous email, it is important here to state categorically that without your timely and maximum co-operation, this imminent account opening (in your name) may not be possible, therefore, the proposed (immediate) transfer of your $12.5 Million from the Government Existing Allocation Account into your new account, controlled by you may not be obtainable. This means that your unreserved/ maximum and timely co-operation is needed right here. As I stated, the only thing required from you is your personal data for the account opening plus your initial account opening deposit of $100 (ONLY). 1. Your names (in full)2. Your mailing address3. Your direct telephone number4. Your date of birth5. Present occupation6. Your Next of Kin7. Your ID Card OR Two (2) Recent Passport photographs8. $100 (Cash Deposit) I will hereby advice you to send this $100 Account Opening Deposit through Money Gram or Western Union directly to the bank cashier as follows: Receiver: Tunde KavelishAddress:  Union Bank Nigeria PLC. Plot 42 Marina, Tinubu Square, Lagos Country:  NigeriaSecrete   Question:  TREATsecrete   Answer:   URGENTAmount:   $100 (USD). Do this today and send the Reference Numbers. Once this is done, the rest is in our hands and must be concluded not later than 48 hours after and your International MasterCard (Debit/ATM) Card will be mailed to your mailing address via UPS/FedEx/DHL or regular post. Once again, for your assurance and record I am attaching my native country international passport. This is just for your assurance only.  Call me on my telephone number for any urgent information or may required urgent clarification +234 814 886 4303.  Roderick Oarell Buford European Union Anti-Fraud InternationalRoma-Italia. (Presently) in West Africa.Tel: +234 814 886 4303 SpamAssassin Report (spam score: 3.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (eumail1011[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [74.125.82.51 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (eumail1011[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2015-05-24 20:53:10Your Account PayPal Has Been Limitedhttp://scammed.by/scam.php?id=125297 Begin forwarded message: From: "PayPal" andlt;intl_p@ypl.comandgt; Date: 24 May 2015 12:15:47 BST Subject: Your Account PayPal Has Been Limited Hello Thanks for use PayPal! We sent you an email sometime ago asking for your help to resolve an issue with your PayPal account. Since we haven't heard back from you and we need you to provide some informations, your account is temporarily limited : - Some informations on your account appears to be missing or incorrect. Please update your account promptly so that you can continue using all the benefits of your PayPal account. 1- Download the attached document and open it in a secure browser. Account 2- Follow the verification process and give us your correct information. Our new verification measures have been put in place in May 2015 to protect our customers. Kind regards 2015-05-24 20:52:27sscatcher@yahoo com Are you being cheated on?http://scammed.by/scam.php?id=125296 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI2OSwgImYiOiAwLCAibSI6IDc1OTIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 20:23:35Un secteur recruteur en pleine expansionhttp://scammed.by/scam.php?id=125295 Un secteur recruteur en pleine expansion .ReadMsgBody { width: 100%; } .ExternalClass { width: 100%; } td {border-collapse: collapse; } Suivez ce lien pour consulter la version en ligne Vous pouvez and#224; tout moment dand#233;cider de ne plus recevoir nos offres ici Travailler pour son emploi Revenu dand#8217;appoint Amand#233;liorer une allocation chand#244;mage ou A.R.E. Augmenter un salaire Compland#233;ter une retraite Pour ne plus finir le mois dans le rouge and#224; la banque et se faire un plaisir sans probland#232;me. Pour avoir une experience profesionnelle compland#233;mentaire sur son C.V. Lorsque que le salaire seul ne suffit pas and#224; tout payer ou a budgeter des vacances. Idand#233;al pour se constituer une and#233;pargne en plus du salaire. Trand#232;s bien pour compenser la baisse des retraires qui dure depuis des annand#233;es. Utile pour garder une activitand#233; sans les inconvenients de la vie profressionnelle. Vous recevez ce message car vous and#234;tes membre de Selection Privee. Vous pouvez exercer votre droit d'accand#232;s et de suppression and#224; tout moment en nous contactant and#224; : info@selection-privee.fr, ou en nous and#233;crivant and#224; Selection Privee - Avenida Diagonal, 440 7a - 08037 Barcelona. Suivez ce lien pour vous dand#233;sabonner. Politique de confidentialitand#233;. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: selection-privee.fr] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.41 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 MIME_NO_TEXT No (properly identified) text body parts 2015-05-24 20:08:23Win a trip to Orlando from Atlantic Luggagehttp://scammed.by/scam.php?id=125292 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/meyJjIjogODI2OCwgImYiOiAwLCAibSI6IDc1OTEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 18:53:30Free Gift Try Proactiv for clear skin http://scammed.by/scam.php?id=125294 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/geyJjIjogODI2NywgImYiOiAwLCAibSI6IDc1OTAsICJsIjogMzAsICJzIjogMSwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 18:37:513 BR 2 BA low monthly rates located in Mountain Viewhttp://scammed.by/scam.php?id=125291 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/veyJjIjogODI2NSwgImYiOiAwLCAibSI6IDc1ODksICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 18:19:03Internet Hidden Cameras let you watch from anywherehttp://scammed.by/scam.php?id=125293 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/peyJjIjogODI2NCwgImYiOiAxLCAibSI6IDc1ODgsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 18:00:39Congrats sscatcher@yahoo com You ve Been Selected For FREE KitchenAid Samples http://scammed.by/scam.php?id=125289 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/seyJjIjogODI2MiwgImYiOiAwLCAibSI6IDc1ODcsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [118.242.210.186 listed in list.dnswl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 17:41:26sscatcher@yahoo com please print your coupons before they expire http://scammed.by/scam.php?id=125290 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/keyJjIjogODI2MSwgImYiOiAwLCAibSI6IDc1ODYsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 17:27:18FW: Надежный поставщик конденсаторов специального назначения SET TOP BOX http://scammed.by/scam.php?id=125288 img{ border:0; } ????????? ???????? ?? ?????????, ?? ???????? ??????????????? ????????? ? ???????????? ? ISO 9001: 2008 and ISO 14001: 2004. ???? ?????????: ???????????? ? MOVs. ?? ?????? ?????????? ????????? ??? ? ?????????????? ??????????, ??? ? ? ?????????? ???????? andquot;??andquot;. ????????? ??????? ??? ?????????? ? ??????? ????? ???????? ???????? ??? ?????????? ?????????? ????, ????????????? ?? ??????? ??????????? ??????????? Certifications: ISO 9001: 2008, Military GJB90018: 2009; RoHS, Reach SVHC 155, Halogen free, Metal conflict free TCK Standard Series, SMD electrolytic capacitors (105and#39;C 2000hours ) E. Cap SMD 47uF 50V +/-20% 6.3x7.7mm 105andrsquo;C 2000h US$0.0225/pc E. Cap SMD 100uF 25V +/-20% 6.3x7.7mm 105andrsquo;C 2000h US$0.0225/pc E. Cap SMD 100uF 50V +/-20% 8x10.5mm 105andrsquo;C 2000h US$0.047/pc E. Cap SMD 220uF 35V +/-20% 8*10.5mm 105andrsquo;C 2000h US$0.064/pc MOQ: 10kpcs each, price will be a little different than above Best wishes Ms. Win Tang --Sales Manager Email: topdiode@outlook.com Skype: topdiode Tel.: +86-(0)769 8252 3211 Topdiode Group andamp; UF Capacitors Factory ISO 9001: 2008, Military Qualification: GJB90018:2009 for tantalum cap; RoHS, Reach, Halogen free, Metal Conflict Free Manufacturer for: Capacitors, MOVs, Diodes, Bridge, Transistors If you donand#39;t wish to receive our Newsletter, please advise us by email, and we apologize. Visit our website please click HERE SpamAssassin Report (spam score: 5.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.182 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (topdiode[at]outlook.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2015-05-24 17:18:57Access Your Background Check Reporthttp://scammed.by/scam.php?id=125286 ----- Forwarded Message ----- From: Record Alert andlt;foredating@newrototsschool.meandgt; To: Sent: Sunday, May 24, 2015 4:43 AM Subject: Access Your Background Check Report Background check is ready: Prepared for [EMAIL] 2015-05-24 17:14:20Checking account available for sscatcher@yahoo comhttp://scammed.by/scam.php?id=125287 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI2MCwgImYiOiAwLCAibSI6IDc1ODUsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 17:05:08RE: CONTACT DR JIM OVIA FOR YOUR CODE PAYMENT http://scammed.by/scam.php?id=125285 United Nations Compensation Unit, In Affiliation with World Bank Our Ref: U.N.O/W.B.O/05/2015/1982/05/9. Congratulations Beneficiary, You may not understand why this mail came to you. We have been having a meeting for quit sometime now and we just came to a logical conclusion few days ago in affiliation with the World Bank president. This email is to few well listed people that have been scammed in any part of the world, the UNITED NATIONS in Affiliation with WORLD BANK have agreed to compensate them with the sum of USD5,000,000.00 Dollars each. These includes every foreign contractors that may have not received their contract sum, and people that have had an unfinished transaction or international businesses that failed due to Government problems etc. We found your email in the list of those who are to benefit from these compensation exercise and that is why we are contacting you, this have been agreed upon and have been signed. You are advised to contact Dr. Jim Ovia of our paying Bank in Africa, as he is our representative in Africa. Contact him immediately for your Cheque/ International Bank Draft of USD5,000,000.00 Dollars.Your payment is in form of a Bank Draft for security purpose, he will send it to you and you can clear it in any bank of your choice. Therefore, you should send him your full Name and telephone number your correct mailing address where you want him to send the Draft to you. Contact Dr. Jim Ovia of ZENITH BANK PLC with your Code Payment: U.N.O/W.B.O/05/2015/1982/05/9 immediately for your Cheque at the given address below: Bank Name: Zenith Bank Plc. Contact Official: Dr. Jim Ovia Email: dr.jimovia.zenithgroup@outlook.com Phone: +2348183400711 I apologize on behalf of the United Nation organization for any delay you might have encountered in receiving your fund in the past. Thanks and God bless you and your family. Hoping to hear from you as soon as you cash your Bank Draft. Making the world a better place. You are required to contact the above person and furnish him with the following of your information that will be required to avoid any mistakes:- 1. Your Full name: 2. Your Country: 3. Contact Address: 4. Telephone Number: 5. Fax Number: 6. Marital Status: 7. Occupation: 8. Sex: 9. Age: Congratulations, and I look forward to hear from you as soon as you confirm your payment making the world a better place. Regards, Ms. Valerie Amos. United Nations Secretary General for Humanitarian Affairs, Emergency Relief Coordinator. http://www.un.org/sg/ SpamAssassin Report (spam score: 8.0) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.218.51 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: un.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 LOTTO_DEPT Claims Department 2.2 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.8 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2015-05-24 16:56:39sscatcher@yahoo com Please select the type of attorney you need in Mountain Viewhttp://scammed.by/scam.php?id=125283 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/peyJjIjogODI1OSwgImYiOiAwLCAibSI6IDc1ODQsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 16:46:15Louisiana Felixcramb Mbuy QualitypMedicamentz Online ushttp://scammed.by/scam.php?id=125282 Wget bDrugs Here http://dar-rhizlane.com/photos/allegation.php Pathway or cultivated land to virtue every triumph that he knows SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: dar-rhizlane.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.173 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 2.0 TO_NO_BRKTS_HTML_ONLY To: misformatted and HTML only 2015-05-24 16:37:21WORLD BANK ASSISTED PROGRAM DIRECTORATE OF INTERNATIONAL PAYMENT AND TRANSFERShttp://scammed.by/scam.php?id=125281 (WORLD BANK ASSISTED PROGRAM) DIRECTORATE OF INTERNATIONAL PAYMENT AND TRANSFERS United Nations Association Dear Beneficiary, Series of meetings have been held over the past 7 months with the secretary general of the United Nations Organization. This ended 3 days ago. It is obvious that you have not received your fund which is to the tune of Eight Million Five Hundred Thousand United State Dollars ($8,500,000.00) due to past corrupt Governmental Officials who almost held the fund to themselves for their selfish reason and some individuals who have taken advantage of your fund all in an attempt to swindle your fund which has led to so many losses from your end and unnecessary delay in the receipt of your fund. The National Central Bureau of Interpol enhanced by the United Nations and Federal Bureau of Investigation have successfully passed a mandate to the current president of African Economic Controller Authorities (ECOWAS) to boost the exercise of clearing all foreign debts owed to you and other individuals and organizations who have been found not to have receive their Contract Sum, Lottery/Gambling, Inheritance and the likes. Now how would you like to receive your payment? Because we have two method of payment which is by Check or by ATM card? ATM Card: We will be issuing you a custom pin based ATM card which you will use to withdraw up to $7,000 per day from any ATM machine that has the Master Card Logo on it and the card have to be renewed in 4 years' time which is 2019. Also with the ATM card you will be able to transfer your funds to your local bank account. The ATM card comes with a handbook or manual to enlighten you about how to use it. Even if you do not have a bank account. Check: To be deposited in your bank for it to be cleared within three working days. Your payment would be sent to you via any of your preferred option and would be mailed to you via DHL. Because we have signed a contract with DHL Courier Service which should expire by 18th of APRIL 2015 you will only need to pay $79 instead of $280 saving you $232 So if you pay before 10th of April 2015 you save $232 Take note that anyone asking you for some kind of money above the usual fee is definitely a fraudsters and you will have to stop communication with every other person if you have been in contact with any. Also remember that all you will ever have to spend is $79.00 nothing more! Nothing less! And we guarantee the receipt of your fund to be successfully delivered to you within the next 79 hours after the receipt of payment has been confirmed. Note: Everything has been taken care of by the African Economic Controller Authorities (ECOWAS), The United Nation and also the FBI and including taxes, custom paper and clearance duty so all you will ever need to pay is $79. DO NOT SEND MONEY TO ANYONE UNTIL YOU READ THIS: The actual fees for shipping your ATM card is $279 but because DHL have temporarily discontinued the C.O.D which gives you the chance to pay when package is delivered for international shipping We had to sign contract with them for bulk shipping which makes the fees reduce from the actual fee of $279 to $79 nothing more and no hidden fees of any sort! To affect the release of your fund valued at $8,500,000.00 you are advised to contact our correspondent in West Africa Benin Du Republic the delivery officer Rev. James Moody Long with the information below, Reconfirm the information as stated below for your delivery: Your full Name... Your Address: Home/Cell Phone: Preferred Payment Method (ATM or Cashier Check) Kindly copy the below details to send the fee and Reply Rev. James Moody Long Receivers Name:Luku Obim Location Address: Cotonou Benin Republic Test Question: When Answer: Today Sender's Name: MTCN Number#: Amount:::$79 Upon receipt of payment the delivery officer will ensure that your package is sent within 79 working hours. Because we are so sure of everything we are giving you a 100% money back guarantee if you do not receive payment/package within the next hours after you have made the payment for shipping. Warmest Regards, Dr.Peter Adams. Payment Officer United Nations (UN) SpamAssassin Report (spam score: 6.0) pts rule name description ---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.138.89.38 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.195 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (agentdavidwilliams844[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit ("united nations \(un\)" ) 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (agentdavidwilliams844[at]gmail.com) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2015-05-24 16:30:37RE: Walter Your Private Info Was Found on Multiple Sites including 7327357012http://scammed.by/scam.php?id=125277 SCAM just check out !!! below http://abcnews.go.com/Technology/mylifecom-people-search-website-sued-scam/story?id=14335481 and http://www.complaintsboard.com/bycompany/mylifecom-a123026.html On Fri, May 22, 2015 at 06:37 PM, MyLife wrote: 05/22/2015 Identity Reputation Summary Review IMPORTANT UPDATES for Walter Heublein YOUR EXPOSED DATA New Your location has been found on FindAnyone Jackson, NJ REMOVE PRIVATE INFO YOUR EXPOSED DATA Your location has been found on USIdentify Seaside Heights, NJ Jackson, NJ REMOVE PRIVATE INFO Has Your Data Been Breached? Check data breaches that have put over 500 million people at risk. It?s easy - enter your email to see if you?ve been a victim walth111@optonline.net CHECK YOUR BREACH STATUS Connect with us To protect your privacy, do not forward this email to anyone not authorized by you to access your profile. Unsubscribe Manage Settings User Agreement Privacy Policy Got a question? Visit our Help pages or call us at (888) 820-9006 These e-mails are sent to registered members of MyLife.com. MyLife.com and the MyLife logos are trademarks of MyLife.com, Inc. Copyright 2015. 914 Westwood Blvd #517, Los Angeles, CA 90024-2905 2015-05-24 16:14:26Miss Rebecca Grosshttp://scammed.by/scam.php?id=125279 Dearest one, Thanks for your attention and I pray that my decision to contact you will be given genuine approval. My name is Miss Rebecca Gross and i humbly write to solicit for your partnership and assistance in the transfer and investment of my inheritance funds $10,500,000.00 from my late father who died mysteriously. My late father was poisoned to death by my wicked uncle during his visit to south Africa where he has his cocoa and coffee company. I am the only child and daughter of my parents and I lost my mother when I was barely a year. After the death of my mother, my father refused to re-marry another wife despite all persuasion by friends and relatives, because he felt solely responsible for my mother's death, as he only concentrated on his business affairs without paying attention to domestic/family affairs. But he ensured that I had everything that I wanted. It was as a result of this that he made me the next of kin t o his fund deposit of $10,500,000.00 he made in a bank so that I should have a direct access to the funds if some thing happens to him. I am presently in a hidding in one of the local hotels here in our country because of my father's relatives. I have had a telephone discussions with the director of the bank where my father deposited the funds in regards to my plans to use the funds for investments. The bank director assured me that the funds will be released to me once I have someone who would be honest and willing to receive the funds on my behalf, they shall commence all proceedings to effect the release and transfer of the funds into the person's designated account. Once you signify your interest to partner with me, I shall be giving you more details such as my photo, address, telephone number, documents relating to the transaction and the bank's contact information before we can continue. In conclusion, I will want us to make an offer of te n percent of the total money to orphans and less previllage ones in your country. Your urgent response will be appreciated. Best Regards Rebecca SpamAssassin Report (spam score: 2.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [183.79.56.154 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rebe123gro[at]outlook.com) 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (rebecca gross ) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2015-05-24 16:07:26Compare burial ? insurance quotes herehttp://scammed.by/scam.php?id=125276 .buiufmknviplkey{color:#19095b;} Compare burial insurance quotes here SpamAssassin Report (spam score: 7.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.174 listed in list.dnswl.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: biggscoachfellowjj.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: biggscoachfellowjj.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: biggscoachfellowjj.com] 0.0 HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist [URIs: biggscoachfellowjj.com] 2015-05-24 16:06:13ÄãºÃ ±¾¹«Ë¾×¨Òµ´úÀí°ì@Ë° µãÊýÓŻݡ£Õæ@Ʊ¡£Ñéºó¸¶¿î¡£¡£»¶Ó­¡°ÐÂÀÏ¿Í»§¡±µç»°£º 139 1849 2262 QQ:2415059500 £»Àî»á¼Æhttp://scammed.by/scam.php?id=125278 ÕÅÈý 2015-5-24 SpamAssassin Report (spam score: 15.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [218.14.89.150 listed in psbl.surriel.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [218.14.89.150 listed in bb.barracudacentral.org] 2.0 TVD_SPACE_ENC_FM_MIME TVD_SPACE_ENC_FM_MIME 1.0 MIME_NO_TEXT No (properly identified) text body parts 2.3 TVD_SPACE_ENCODED TVD_SPACE_ENCODED 1.0 XPRIO Has X-Priority header 2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool 2.7 TVD_SPACE_RATIO_MINFP TVD_SPACE_RATIO_MINFP 2015-05-24 15:56:12sscatcher@yahoo com Your Score Updatedhttp://scammed.by/scam.php?id=125268 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/yeyJjIjogODI1NywgImYiOiAwLCAibSI6IDc1ODIsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 15:40:14Hi {sscatcher}: Your 2015 Credit Score May Have Updatedhttp://scammed.by/scam.php?id=125275 Your 2015 Credit Score May Have Updated SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2015-05-24 15:38:44{sscatcher}: Your Free Trial is Herehttp://scammed.by/scam.php?id=125267 Drop 25 lbs in 4 Weeks With This Secret SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2015-05-24 15:38:15{sscatcher}: US Government wants to help you http://scammed.by/scam.php?id=125270 US Government wants to help you! SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2015-05-24 15:37:19Hi {sscatcher}: Immediate Placementhttp://scammed.by/scam.php?id=125265 first paycheck in 7 days! SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2015-05-24 15:37:18Dear {sscatcher}: You May Qualify for a Scholarshiphttp://scammed.by/scam.php?id=125266 You May Qualify for a Scholarship SpamAssassin Report (spam score: 4.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2015-05-24 15:37:18{sscatcher}: GNC: NEW Testosterone Booster Hits the Shelveshttp://scammed.by/scam.php?id=125272 Men: Boost Testosterone With One Trick SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2015-05-24 15:37:18{sscatcher}: I felt that you needed my helphttp://scammed.by/scam.php?id=125269 I felt that you needed my help SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: puchbox.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable 2015-05-24 15:36:47PAYMENT FROM SHORE BANK USAhttp://scammed.by/scam.php?id=125263 SHORE BANK540 East 105th Street Cleveland, Ohio 44108 330) 961-1671 DEAR CUSTOMER WE WRITE TO INFORM YOU THAT YOUR ATM CARD WHICH WAS RETRIEVED FROM MR JOHNSON LOYD SINCE LAST YEAR BY THE F B I IS STILL IN OUR BANK AND THE PRIMARY BANK THAT SEND THE CARD (HSBC BANK) HAS ASKED US TO WIRE THE FUNDS DIRECT TO YOUR BANK ACCOUNT VIA BANK TO BANK WIRE TRANSFER BASED ON THE NEW METHOD OF THIS FRAUDSTERS TO ACCESS ATM CARD/DRAFTS WHILE ON TRANSIT. FOLLOWING TO THIS NEW DEVELOPMENT, OUR BANK WILL IMMEDIATELY WIRE DIRECTLY YOUR FUNDS TO YOUR ACCOUNT WITHIN 24 BANKING HOURS FROM THE TIME YOUR ACCOUNT DETAILS IS RECEIVED BY OUR BANK.ALSO ADD YOUR PERSONAL CELL PHONE NUMBER FOR CONFIDENTIAL PURPOSES. CONGRATULATIONS MR GARRY MARTI SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [41.190.3.133 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (access_bnk1[at]163.com) 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (access_bnk1[at]163.com) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.7 MALFORMED_FREEMAIL Bad headers on message from free email service 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 2015-05-24 15:30:48sscatcher@yahoo com sscatcher@yahoo com Cash Prize Noticehttp://scammed.by/scam.php?id=125264 If you cannot click the link above, Copy and Paste this link: http://ultramegastores.com/neyJjIjogODI1NiwgImYiOiAwLCAibSI6IDc1ODEsICJsIjogMzAsICJzIjogMCwgInUiOiAxOTM0MTIxMTAsICJ0IjogMSwgInNkIjogMH0= SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ultramegastores.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: ultramegastores.com] 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: ultramegastores.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line length greater than 79 characters 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2015-05-24 15:23:16Easy Proven Smoking Alternative Guaranteed http://scammed.by/scam.php?id=125262 Join the Vape Revolution Risk Free Trial! SpamAssassin Report (spam score: 5.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: connectort.com] 1.0 BANG_GUAR BODY: Something is emphatically guaranteed 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread) [URIs: connectort.com] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 MISSING_MID Missing Message-Id: header 0.3 HTML_SHORT_LINK_IMG_2 HTML is very short with a linked image 0.0 T_REMOTE_IMAGE Message contains an external image 2015-05-24 15:15:48