Scammed.by Scam email RSShttp://scammed.byLive feed of scam emailsGérez en toute simplicité les frais de vos salariés http://scammed.by/scam.php?id=198953 #outlook a padding: 0; .ReadMsgBody width: 100%; .ExternalClass width: 100%; .ExternalClass, .ExternalClass p, .ExternalClass span, .ExternalClass font, .ExternalClass td, .ExternalClass div line-height: 100%; body, table, td, a -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; table, td mso-table-lspace: 0pt; mso-table-rspace: 0pt; img -ms-interpolation-mode: bicubic; body height: 100% !important; margin: 0; padding: 0; width: 100% !important; @font-face font-family: andapos;Novel Sans Proandapos;; src: url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Regular.eotandapos;); src: url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Regular.eot?#iefixandapos;) format(andapos;embedded-opentypeandapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Regular.woff2andapos;) format(andapos;woff2andapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Regular.woffandapos;) format(andapos;woffandapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Regular.ttfandapos;) format(andapos;truetypeandapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Regular.svg#NovelSansPro-Regularandapos;) format(andapos;svgandapos;); font-weight: normal; font-style: normal; @font-face font-family: andapos;Novel Sans Proandapos;; src: url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Bold.eotandapos;); src: url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Bold.eot?#iefixandapos;) format(andapos;embedded-opentypeandapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Bold.woff2andapos;) format(andapos;woff2andapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Bold.woffandapos;) format(andapos;woffandapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Bold.ttfandapos;) format(andapos;truetypeandapos;), url(andapos;https://ls.agency/Edenred/fonts/NovelSansPro-Bold.svg#NovelSansPro-Boldandapos;) format(andapos;svgandapos;); font-weight: bold; font-style: normal; img border: 0; height: auto; line-height: 100%; outline: none; text-decoration: none; table border-collapse: collapse !important; @media only screen and (max-width: 640px) table[class="w320"] { width: 100% !important; td[class="w320"] width: 320px !important; table[class="w320m"] width: 90% !important; td[class="w320m"] width: 320px !important; td[class="hide"] display: none !important; img[class="hide"] display: none !important; td[class="bloc"] display: block !important; width: 100% !important; text-align: center !important; img[class="w100%"] width: 100% !important; height: auto !important; } Ticket Travel Pro - Une seule carte pour toutes les dandeacute;penses professionnelles ! Si ce message ne s'affiche pas correctement, cliquez-ici. Une seule carte pour toutes les dandeacute;penses professionnelles ! Pour toute souscription avant la fin du mois ! En savoir plus * Vous vivez, nous veillons. Ce message vous est envoyandeacute; par LeadsLeader. D andeacute; s a b o n n e m e n t de la liste SpamAssassin Report (spam score: 11.9) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: effiliation-hosting.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.45 listed in list.dnswl.org] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: topleeg.com] 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: effimails2.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-09-28 14:22:56You are now a winner of the ATM Card Value is 850 000 00 Eight Hundred and Fifty Thousand dollars Congratulation http://scammed.by/scam.php?id=198952 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.173 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.173 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.7 MONEY_ATM_CARD Lots of money on an ATM card 1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 14:20:12Re:9 28 2016http://scammed.by/scam.php?id=198950 New Page 1 Employment Offer Dear Sir/Madam, Would you like to work online from home and get paid weekly? Yes! You can work online from home and get paid weekly. Dell Small Business Store. is committed to global citizenship by operating in a responsible and sustainable manner around the globe. As part of our Multi Level Marketing scheme, we need capable hands to act as representative/book keeper in the Canada and Other European Country on the company's behalf. Dell Small Business Store. United Kingdom needs a representative in the Canada and Other European Country. We are into supplies of Printers and Ink, PDA, Monitors, Software, and Major exporters' e.t.c. These we supply weekly to our clients all over World. This Job proposal can be taken as a part time job as it has no negative effect to your present job status. Note: The average monthly income is about $27,000, and this job takes only 3-7 hours per week. WHAT YOU NEED TO DO FOR US: The international money transfer tax for legal entities (companies) in United Kingdom is 25%, whereas for the individual it is only 7%. It yields the company lesser profit if we are to work that way, while tax for international money transfer made by a Private individual is 7%.Hence our Multi Level Marketing Scheme! We need agents to receive payment for our supplies in bank wire transfers and Cashier cheque, to resend the money to us via Western Union Money Transfer in UK while the tax shall be 7% instead of 25% which will absolutely favor our company. JOB DESCRIPTION: 1. Deduct 10% which will be your commission on each payment processed. 2. Forward the balance after deducting of 10% commission to offices which shall be provided by you as soon as the fund becomes available. HOW MUCH WILL YOU EARN: 10% from each operation! For instance: you receive $10,000 via wire transfer or Cashier cheque on our behalf. You will cash the money and keep $1,000 (10% from $10,000) for yourself! At the beginning your commission will equal 10%. After creditable performance, your commission may be reviewed for increment. This job is very challenging and you should understand it. We are looking only for the Honest and Open Hearted Individual who satisfies our requirements and glad to offer this job position to you. If our proposals interest you, do get back to us with your under listed detailed information; Names: Address: Age: City: Zip Code: State: Current Occupation: Home Phone: Cell Phone: Gender: I AWAIT YOUR URGENT RESPONSE. Warmest Regards, Mr. David Williams UK Dell Small Business Store. Romily Court, Landridge Road, London SW6 4LL Phone No: +447733135088 Email:dell_agent@mail2world.com SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.173 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.173 listed in list.dnswl.org] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dellrepresentative396[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money 2016-09-28 14:18:23Re:9 28 2016http://scammed.by/scam.php?id=198954 New Page 1 Employment Offer Dear Sir/Madam, Would you like to work online from home and get paid weekly? Yes! You can work online from home and get paid weekly. Dell Small Business Store. is committed to global citizenship by operating in a responsible and sustainable manner around the globe. As part of our Multi Level Marketing scheme, we need capable hands to act as representative/book keeper in the Canada and Other European Country on the company's behalf. Dell Small Business Store. United Kingdom needs a representative in the Canada and Other European Country. We are into supplies of Printers and Ink, PDA, Monitors, Software, and Major exporters' e.t.c. These we supply weekly to our clients all over World. This Job proposal can be taken as a part time job as it has no negative effect to your present job status. Note: The average monthly income is about $27,000, and this job takes only 3-7 hours per week. WHAT YOU NEED TO DO FOR US: The international money transfer tax for legal entities (companies) in United Kingdom is 25%, whereas for the individual it is only 7%. It yields the company lesser profit if we are to work that way, while tax for international money transfer made by a Private individual is 7%.Hence our Multi Level Marketing Scheme! We need agents to receive payment for our supplies in bank wire transfers and Cashier cheque, to resend the money to us via Western Union Money Transfer in UK while the tax shall be 7% instead of 25% which will absolutely favor our company. JOB DESCRIPTION: 1. Deduct 10% which will be your commission on each payment processed. 2. Forward the balance after deducting of 10% commission to offices which shall be provided by you as soon as the fund becomes available. HOW MUCH WILL YOU EARN: 10% from each operation! For instance: you receive $10,000 via wire transfer or Cashier cheque on our behalf. You will cash the money and keep $1,000 (10% from $10,000) for yourself! At the beginning your commission will equal 10%. After creditable performance, your commission may be reviewed for increment. This job is very challenging and you should understand it. We are looking only for the Honest and Open Hearted Individual who satisfies our requirements and glad to offer this job position to you. If our proposals interest you, do get back to us with your under listed detailed information; Names: Address: Age: City: Zip Code: State: Current Occupation: Home Phone: Cell Phone: Gender: I AWAIT YOUR URGENT RESPONSE. Warmest Regards, Mr. David Williams UK Dell Small Business Store. Romily Court, Landridge Road, London SW6 4LL Phone No: +447733135088 Email:dell_agent@mail2world.com SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.44 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.44 listed in dnsbl.sorbs.net] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dellrepresentative396[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money 2016-09-28 14:18:14Re:9 28 2016http://scammed.by/scam.php?id=198949 New Page 1 Employment Offer Dear Sir/Madam, Would you like to work online from home and get paid weekly? Yes! You can work online from home and get paid weekly. Dell Small Business Store. is committed to global citizenship by operating in a responsible and sustainable manner around the globe. As part of our Multi Level Marketing scheme, we need capable hands to act as representative/book keeper in the Canada and Other European Country on the company's behalf. Dell Small Business Store. United Kingdom needs a representative in the Canada and Other European Country. We are into supplies of Printers and Ink, PDA, Monitors, Software, and Major exporters' e.t.c. These we supply weekly to our clients all over World. This Job proposal can be taken as a part time job as it has no negative effect to your present job status. Note: The average monthly income is about $27,000, and this job takes only 3-7 hours per week. WHAT YOU NEED TO DO FOR US: The international money transfer tax for legal entities (companies) in United Kingdom is 25%, whereas for the individual it is only 7%. It yields the company lesser profit if we are to work that way, while tax for international money transfer made by a Private individual is 7%.Hence our Multi Level Marketing Scheme! We need agents to receive payment for our supplies in bank wire transfers and Cashier cheque, to resend the money to us via Western Union Money Transfer in UK while the tax shall be 7% instead of 25% which will absolutely favor our company. JOB DESCRIPTION: 1. Deduct 10% which will be your commission on each payment processed. 2. Forward the balance after deducting of 10% commission to offices which shall be provided by you as soon as the fund becomes available. HOW MUCH WILL YOU EARN: 10% from each operation! For instance: you receive $10,000 via wire transfer or Cashier cheque on our behalf. You will cash the money and keep $1,000 (10% from $10,000) for yourself! At the beginning your commission will equal 10%. After creditable performance, your commission may be reviewed for increment. This job is very challenging and you should understand it. We are looking only for the Honest and Open Hearted Individual who satisfies our requirements and glad to offer this job position to you. If our proposals interest you, do get back to us with your under listed detailed information; Names: Address: Age: City: Zip Code: State: Current Occupation: Home Phone: Cell Phone: Gender: I AWAIT YOUR URGENT RESPONSE. Warmest Regards, Mr. David Williams UK Dell Small Business Store. Romily Court, Landridge Road, London SW6 4LL Phone No: +447733135088 Email:dell_agent@mail2world.com SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.179 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.179 listed in dnsbl.sorbs.net] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (dellrepresentative396[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money 2016-09-28 14:18:12INQUIRY http://scammed.by/scam.php?id=198948 Dear Sir, I write to inquire if you or your organization can supply food to my revolutionary camp in Kivu Congo. We do not have money to pay by cash, but we shall convey natural gold to you, to enable you generate capital for the supply. Please note that your assistance will save lives over here. Regards, Matonge Ngambe. Secretary, Kivu Miners Association. SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.42 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (matongemgambe1[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.42 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-28 14:04:54INQUIRY http://scammed.by/scam.php?id=198955 Dear Sir, I write to inquire if you or your organization can supply food to my revolutionary camp in Kivu Congo. We do not have money to pay by cash, but we shall convey natural gold to you, to enable you generate capital for the supply. Please note that your assistance will save lives over here. Regards, Matonge Ngambe. Secretary, Kivu Miners Association. SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.171 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.171 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (matongemgambe1[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-28 14:04:53You are now a winner of the ATM Card Value is 850 000 00 Eight Hundred and Fifty Thousand dollars Congratulation http://scammed.by/scam.php?id=198947 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.48 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.175 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.7 MONEY_ATM_CARD Lots of money on an ATM card 1.7 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 14:03:00You are now a winner of the ATM Card Value is 850 000 00 Eight Hundred and Fifty Thousand dollars Congratulation http://scammed.by/scam.php?id=198951 SpamAssassin Report (spam score: 5.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.54 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.54 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.8 MONEY_ATM_CARD Lots of money on an ATM card 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 14:02:58Security Alert Act Nowhttp://scammed.by/scam.php?id=198945 - This mail is in HTML. Some elements may be ommited in plain text. - Exclusively for: | soludopublishing@gmail.com Security Alert It?s not too late to update your settings. Your Bank of America Online service has been upgraded. However, because you have not yet updated your settings, you won?t be able to receive emails at this location. Not to worry, you can quickly update the settings on your devices by following our step-by-step guide. Once you?ve updated your settings, you?ll be able to continue enjoying your Bank of America Online service. Kindly follow the secured URL below to begin the upgrade process: Continue to Bank of America Online Banking *If your account information is not updated within 48 hours then your ability to access your account will be restricted.We apologies for any inconvenience and appreciate your understanding. This is a service email from Bank of America. Please note that you may receive service emails in accordance with your Bank of America service agreements, whether or not you elect to receive promotional email. Please don't reply directly to this automatically generated email message. Bank of America Email, NC1-028-09-01, 150 N College St., Charlotte, NC 28255 Bank of America, N.A. Member FDIC. Equal Housing Lender © 2016 Bank of America Corporation. All rights reserved. This email was sent to: soludopublishing@gmail.com AR72768/DD6A66 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.181 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [167.88.14.98 listed in dnsbl.sorbs.net] 2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 13:47:49Security Alert Act Nowhttp://scammed.by/scam.php?id=198946 - This mail is in HTML. Some elements may be ommited in plain text. - Exclusively for: | soludopublishing@gmail.com Security Alert It?s not too late to update your settings. Your Bank of America Online service has been upgraded. However, because you have not yet updated your settings, you won?t be able to receive emails at this location. Not to worry, you can quickly update the settings on your devices by following our step-by-step guide. Once you?ve updated your settings, you?ll be able to continue enjoying your Bank of America Online service. Kindly follow the secured URL below to begin the upgrade process: Continue to Bank of America Online Banking *If your account information is not updated within 48 hours then your ability to access your account will be restricted.We apologies for any inconvenience and appreciate your understanding. This is a service email from Bank of America. Please note that you may receive service emails in accordance with your Bank of America service agreements, whether or not you elect to receive promotional email. Please don't reply directly to this automatically generated email message. Bank of America Email, NC1-028-09-01, 150 N College St., Charlotte, NC 28255 Bank of America, N.A. Member FDIC. Equal Housing Lender © 2016 Bank of America Corporation. All rights reserved. This email was sent to: soludopublishing@gmail.com AR72768/DD6A66 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.46 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.46 listed in list.dnswl.org] 2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 13:46:02Security Alert Act Nowhttp://scammed.by/scam.php?id=198944 - This mail is in HTML. Some elements may be ommited in plain text. - Exclusively for: | felixcramb@gmail.com Security Alert It?s not too late to update your settings. Your Bank of America Online service has been upgraded. However, because you have not yet updated your settings, you won?t be able to receive emails at this location. Not to worry, you can quickly update the settings on your devices by following our step-by-step guide. Once you?ve updated your settings, you?ll be able to continue enjoying your Bank of America Online service. Kindly follow the secured URL below to begin the upgrade process: Continue to Bank of America Online Banking *If your account information is not updated within 48 hours then your ability to access your account will be restricted.We apologies for any inconvenience and appreciate your understanding. This is a service email from Bank of America. Please note that you may receive service emails in accordance with your Bank of America service agreements, whether or not you elect to receive promotional email. Please don't reply directly to this automatically generated email message. Bank of America Email, NC1-028-09-01, 150 N College St., Charlotte, NC 28255 Bank of America, N.A. Member FDIC. Equal Housing Lender © 2016 Bank of America Corporation. All rights reserved. This email was sent to: felixcramb@gmail.com AR72768/DD6A66 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.177 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.177 listed in dnsbl.sorbs.net] 2.4 ACT_NOW_CAPS BODY: Talks about 'acting now' with capitals 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 13:30:27Re Change of Funds Ownership http://scammed.by/scam.php?id=198941 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.42 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.42 listed in list.dnswl.org] 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-28 13:24:51Re Change of Funds Ownership http://scammed.by/scam.php?id=198942 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.180 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.180 listed in list.dnswl.org] 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-28 13:24:51View the attached file and contact Mrs Rebecca Magaorokosho http://scammed.by/scam.php?id=198939 Attachment content - From Mrs. Rebecca Magorokosho.docx: From: Mrs. Rebecca Magorokosho   E-mail:  Rebeccamagorkosho@email.com Dear friend, Please do not think this is one of those junk mails you receive in your mailbox, which I myself receive as well, but I plead for your tolerance and understanding. It is true that we have not known ourselves earlier before now or seen in person, but with due respect trust and humility I write you this proposal for assistance, please do accept my apology if my mail infringes on your personal ethics, you know that anybody in desperate need of help will look for a solution. I am  Mrs. Rebecca  Anashe  Magorokosho, the wife of Mr. Silas  Hungwe  Magorokosho of Zimbabwe,  I found your contact while I was doing a private research for a reliable, trustworthy and capable foreign partner that will assist me and my only son to transfer some fund into your bank account, which I believe would be of great interest to you. The following are the brief details of what happened to my family and the fund I am seeking for your assistance to transfer to your account: - During the current war against farmers in Zimbabwe and from the support of our President Robert Mugabe to claim all the white owned farms in our country, all the white farmers were ordered to surrender their farms to his party members and his followers without any compensation for all what they have labored for many years. My husband who was one of the best farmers in our country and treasurer of the Zimbabwe farmers co-operation did not support his idea because of the way the white farmers were brutally maltreated and killed, so the party members invaded my husband?s farm and burnt everything in the farm, killed my husband and made away with a lot of vital items in his farm. Before the death of my husband, he deposited the sum of US$21,000.000.00 (Twenty One Million United States Dollars only) in a Finance Security Company in the Republic of South Africa as a consignment and valuable item for the family, as if he foreseen the looming danger. This fund was hidden in a big safe metal box and the real contents of the box were not disclosed to the company in the point of deposit for security reason, the company only aware that the consignment worth US$21,000.000.00, so after this incident occurred I and my only son decided to move to the Republic of South Africa where my late husband deposited this money. But because we are asylum seekers here in South Africa and the law does not permit us to operate a bank account or transaction of this magnitude, that is the main reason I contacted you to assist me move this money out of South Africa as well as assisting us invest this fund in a very good business in your country. After your consideration of this business proposal and you are interested to help us move this money to your country, you are strictly advised to reply via my private secured email above, and I will give you 30% of the total sum for your assistance and 70% will be for the family to invest in your country, you do not need to entertain any fear; this transaction is 100% risk free and absolutely confidential. For further proceedings I will like you to furnish me with your personal phone numbers as to enable me call and relate to you more information regard to this transaction, any delay in responding to this mail means that you are not interested and it will give me room to look for another good person for the same purpose. Thanks and God bless you. Dear Friend, Please kindly open the attachment for more details. Remain blessed Mrs. Rebecca Magorokosho SpamAssassin Report (spam score: 8.2) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.179 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.179 listed in dnsbl.sorbs.net] 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 HK_SCAM_S7 BODY: HK_SCAM_S7 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rebeccamagorokosho2[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.7 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.7 RISK_FREE No risk! 0.0 T_MONEY_PERCENT X% of a lot of money for you 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 13:24:07Re: [Ticket AN 3574 239456637] urgent noticehttp://scammed.by/scam.php?id=198940 Important notice for soludopublishing. Dear soludopublishing, check your money balance at http://gclexperts.lin1.e-publish.co.il/www-php/user-autoresponded-usd/systemverified/login-user7.htm. And be sure to check Your Bank Verification Status. - Regards, Hans Schneider Chief Technical Officer Money System Support 28.09.2016 5:12:32 SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.54 listed in dnsbl.sorbs.net] 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: e-publish.co.il] 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.215.54 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-28 13:18:09I NEED YOUR URGENT RESPOND http://scammed.by/scam.php?id=198936 ?FROM Mr.Abbaas Mutali. The Head of File and Auditing Department, BANK OF AFRICA (B.O.A) Ouagadougou Burkina-Faso (West Africa) REMITTANCE OF US$20, 5; MILLION CONFIDENTIAL IS THE CASE. VERY URGENT ATTENTION. This message might meet you in utmost surprise, however, it's just my Urgent need for foreign partner that made me to contact you for this transaction I am a banker by profession from Burkina Faso in West Africa and currently holding the post of director Auditing and accounting unit of the bank. I have the opportunity of transferring the left over Funds ($20.5million) of one of my bank clients who died Along with his entire family in a plane crash. http://newswww.bbc.net.uk/2/hi/uk_news/england/oxfordshire/4537663.stm I will come over to your Country as soon as the transfer is over to receive my own share of the fund for further investments by your advice. Please I want you to understand that a stitch in time saves nine so write back and tell me if you really want to carry out this transaction with me. From my banking experience it will take up to fourteen (14) working days to conclude this transfer. I sincerely need your help because this might be my first and last opportunity of hitting big money. I also would want you to treat this affair as both urgent, top secret and confidential. I want you to also know that this transaction will involve some expenses. This payment will be effected through Swift Telegraphic Transfer. Your Urgent response is needed for immediate transfer of this fund into your receiving bank account. (FILL THIS FORM BELLOW PLEASE AND RESEND IT TO ME). Your name in full.......................... ....... Your country....................... ............... Your age........................................... Your cell phone.................................... Your occupation................. .................. Your sex........................................... Your International................................. Your marital status................................ Your bank name.......................... .......... Best Regards, Mr.Abbaas Mutali. SpamAssassin Report (spam score: 14.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (adempropiedades[at]infovia.com.ar) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.178 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.178 listed in dnsbl.sorbs.net] 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2.2 FILL_THIS_FORM_LOAN Answer loan question(s) 0.0 MONEY_FORM Lots of money if you fill out a form 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s) 0.0 ADVANCE_FEE_5_NEW_FRM_MNY Advance Fee fraud form and lots of money 2016-09-28 12:28:50Hello Dear http://scammed.by/scam.php?id=198937 Hello Dear, I have emailed you earlier on without any response from you. I am Mr. OH SUNGIL a banker, In my first email I mentioned about my deceased customer whose relatives my Bank cannot locate to claim his estate. I got your address from online directory service and decided to write you. I am asking for your consent so that I can present you to my Bank Management as the next of kin to the late customer account proceeds value ($4,000,000)(Four Million United State Dollars) to be transferred into your account for our mutual benefit. At the successful transfer of this fund, our share of the fund will be on a pro rata based percentage [50% - 50%]. I am compelled to do this because I do not want my Bank to take over the ownership of this fund since I can claim it with your cooperation. If you are interested and in agreement with me, get back to me quickly and I will send to you all the information you may need to proceed without coming to the Bank, and be rest assured that it is risk free project. I look forward to your reply. Yours faithfully, Mr. OH SUNGIL SpamAssassin Report (spam score: 16.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.169 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.7 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 3.4 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 2.7 RISK_FREE No risk! 0.0 FROM_MISSPACED From: missing whitespace 0.0 T_MONEY_PERCENT X% of a lot of money for you 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 12:21:19Let me hear from youhttp://scammed.by/scam.php?id=198935 Hello Dear Friend, My name is. Samfo Abudu I have decided to seek a confidential co-operation with you in the execution of the deal described here-under for our both mutual benefit and I hope you will keep it a top secret because of the nature of the transaction, During the course of our bank year auditing, I discovered an unclaimed/abandoned fund, sum total of {US$19.3 Million United State Dollars} in the bank account that belongs to a Saudi Arabia businessman Who unfortunately lost his life and entire family in a Motor Accident. Now our bank has been waiting for any of the relatives to come-up for the claim but nobody has done that. I personally has been unsuccessful in locating any of the relatives, now, I sincerely seek your consent to present you as the next of kin / Will Beneficiary to the deceased so that the proceeds of this account valued at {US$19.3 Million United State Dollars} can be paid to you, which we will share in these percentages ratio, 60% to me and 40% to you. All I request is your utmost sincere co-operation; trust and maximum confidentiality to achieve this project successfully. I have carefully mapped out the moralities for execution of this transaction under a legitimate arrangement to protect you from any breach of the law both in your country and here in Burkina Faso when the fund is being transferred to your bank account. I will have to provide all the relevant document that will be requested to indicate that you are the rightful beneficiary of this legacy and our bank will release the fund to you without any further delay, upon your consideration and acceptance of this offer, please send me the following information as stated below so we can proceed and get this fund transferred to your designated bank account immediately. Your Full Name: Your Contact Address: Your direct Mobile telephone Number: Your Date of Birth: Your occupation: I await your swift response and re-assurance through my Private email address:samozasamfo@gmail.com Samfo Abudu Best regards, so we commence this transaction immediately. SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (abudukenoza[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.52 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.52 listed in dnsbl.sorbs.net] 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 0.0 T_MONEY_PERCENT X% of a lot of money for you 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 12:16:53Réservez tôt Jusqu à 500€ par personne en Club Lookéahttp://scammed.by/scam.php?id=198932 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/vX-FAEBr_IAzD44BnIaR5y/20cbf544 2. http://links.so-reduc.com/u/chN/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/ea8c61a4 Économisez jusqu?à 400? en Club Lookéa cet été ! [1]Logo Look Voyages Infos and réservation 01 45 15 31 70^(1) et dans [2]nos agences de voyages blanc blanc blanc blanc blanc blanc blanc blanc fleche Look Voyages Réservez tôt, payez moins cher jusqu?au 30 septembre 2016 ! blanc blanc blanc blanc [3]Vite, j'en profite - Réservez-tôt, payez moins cher Vous les attendiez, nos tarifs "Réservez-tôt, payez moins cher" sont enfin arrivés ! C'est l'occasion d'économiser jusqu'à 500? sur vos vacances d'hiver en réservant votre séjour en Club Lookéa avant le 30 septembre 2016.* MEILLEUR PRIX INTERNET * Moins cher ailleurs sur internet ? On s'aligne ! Et en plus, nous vous offrons 100? sur un prochain séjour en Club Lookéa. PACK 100% TRANQUILLE * 3 garanties rien que pour vous ! Valeur : 45? OFFERT pour toute réservation hors promotions et offres spéciales. PARTIR SEREIN Pour votre confort et votre sérénité, pensez à souscrire nos assurances voyages NOS AGENCES [4]Trouvez l'agence près de chez vous [5]Trouver l'agence la plus proche de chez vous. (1) Prix d'un appel local. 15? de frais par dossier, en cas de réservation par téléphone. *Les avantages cités ci-dessus sont soumis à [6]conditions [link.php?promoid=141840andprogid=1270andpartid=43794] References 1. http://links.so-reduc.com/c/chN/XKz/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/40e5513b 2. http://links.so-reduc.com/c/chN/XKG/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/19c060b8 3. http://links.so-reduc.com/c/chN/XKO/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/3b1e0283 4. http://links.so-reduc.com/c/chN/XKD/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/c3fa9799 5. http://links.so-reduc.com/c/chN/XKB/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/acfe7f9a 6. http://links.so-reduc.com/c/chN/XK_/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/7ea2c6f5 Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/vX-FAEBr_IAzD44BnIaR5y/I/oMoR/ea8c61a4 SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.181 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.181 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 11:30:22let us save this accounthttp://scammed.by/scam.php?id=198930 Good Day My Friend, It is my pleasure to send you this confidential information via e-mail instead of a Certified / Post-mail. I humbly crave your indulgence to read this e-mail with all seriousness because this project is based on trust in order to have an acceptable meetings of like minds. Meanwhile, I know there is absolutely going to be some little doubts in your heart in respect of this email, coupled with the fact that so many worth individuals have taken possession of the Internet to facilitate their nefarious deeds, thereby making it extremely difficult for genuine and legitimate business class persons to get attention and recognition. There is no way for me to know whether I will be properly understood, but it is my duty to write and reach out to you. Recently my bank was conducting first quarter auditing investigation over some accounts balance with our bank and this investigation involves a client who was very closed to me but there are circumstances surrounding the deposit made by this client with our bank. So far I am constrained to issue out further details pending when I hear a positive response from you.I will appreciate your sincere interest, So get back to me for more details about our deceased client and how we can remit the fund to your bank account. Best Regards, David Moore. SpamAssassin Report (spam score: ) pts rule name undefined2016-09-28 11:07:18let us save this accounthttp://scammed.by/scam.php?id=198931 Good Day My Friend, It is my pleasure to send you this confidential information via e-mail instead of a Certified / Post-mail. I humbly crave your indulgence to read this e-mail with all seriousness because this project is based on trust in order to have an acceptable meetings of like minds. Meanwhile, I know there is absolutely going to be some little doubts in your heart in respect of this email, coupled with the fact that so many worth individuals have taken possession of the Internet to facilitate their nefarious deeds, thereby making it extremely difficult for genuine and legitimate business class persons to get attention and recognition. There is no way for me to know whether I will be properly understood, but it is my duty to write and reach out to you. Recently my bank was conducting first quarter auditing investigation over some accounts balance with our bank and this investigation involves a client who was very closed to me but there are circumstances surrounding the deposit made by this client with our bank. So far I am constrained to issue out further details pending when I hear a positive response from you.I will appreciate your sincere interest, So get back to me for more details about our deceased client and how we can remit the fund to your bank account. Best Regards, David Moore. SpamAssassin Report (spam score: 3.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [202.129.196.12 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.51 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (mrdavidmoore1954[at]hotmail.com ) 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2016-09-28 10:53:19From Mrs Sarah Reynolds http://scammed.by/scam.php?id=198929 Hello Beloved, I am Mrs. Sarah Reynolds, a America citizen with passport number 4612155 and married to a Kuwait national ( late Mr. Sheikh Ahmed Al-Mubarak Al-Sabah), however it's true we do not known each other before, but My spirit lead me to write you this email. I write you with heavy tears in my eyes and great sorrow in my heart because my Doctor informed me that It will take only the will of God for me to survive due to my Complicated health issues (CANCER). Based on this, I wish to share some more details with you, regarding myself, family and fund I wish to offer to charities and also invest in very good business, but I will like to know more about you, to enable me have more trust in you, as my heart wish to have you close to me and believe that you can handle whatever processes I move over to you, so please reply back to me, so that I can provide more details to you, I will be waiting for your reply via my email: reynolds.ss@hotmail.com Warm wishesMrs. Sarah Reynolds. SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [98.138.120.230 listed in dnsbl.sorbs.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sarah.s.s.reynolds[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-09-28 10:46:18Hello http://scammed.by/scam.php?id=198927  Hello, how are you doing there, my name is Linda Juli, I'm an American soldier, but i am currently working in Afghanistan, as an American soldier,  I'm just here to look for a man for serious relationship, please, I'll be glad to know more about you, you can contact me through my private e-mail if you are interested: I will write you more about me and send you my picture, Linda. julilinda1@yahoo.com SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.41 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [98.138.87.7 listed in dnsbl.sorbs.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (mary.mbia[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (linda alena juli ) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-09-28 10:38:0292 pages idees et conseilshttp://scammed.by/scam.php?id=198925 [ ]( http://r.monbongab.fr/3jgfi7aqdm5actsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7aqdmxqctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7aqdnq6ctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7aqdoimctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7aqdpb2ctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7aqdq3ictsbd.html ) Solutions Discrétion   Collection Essentiels   Collection Résidentiels [ ]( http://r.monbongab.fr/3jgfi7aqdqvyctsbd.html )   [ ]( http://r.monbongab.fr/3jgfi7aqdroectsbd.html )   [ ]( http://r.monbongab.fr/3jgfi7aqdsguctsbd.html ) SpamAssassin Report (spam score: 8.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.170 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.170 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: malinet95.fr] 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 10:30:02Vins et Champagnes : Garanti ou Rembourséhttp://scammed.by/scam.php?id=198922 [ ]( http://r.lesflashsinfos.fr/3jgfi7aq0z1actsbd.html ) LE MEILLEUR PRIX SUR VOS VINS ET CHAMPAGNES GARANTI OU REMBOURSÉ ! [ ]( http://r.lesflashsinfos.fr/3jgfi7aq0ztqctsbd.html ) Site noté par ses clients Inscrivez-vous gratuitement et sans engagement vous allez faire de vraies bonnes affaires. À tout de suite ! [ ACCÉDER AUX VENTES PRIVÉES ]( http://r.lesflashsinfos.fr/3jgfi7aq10m6ctsbd.html ) Avantages réservés à nos 450 000 membres Les Meilleurs vins En direct des domaines, pour une qualité irréprochable de vos vins, découvrez les producteurs les plus talentueux plébiscités et notés par les plus grands guides. Les Meilleurs Prix Vous profitez toujours du juste prix sur les vins que vous achetez sur 1jour1vin et si vous trouvez votre vin moins cher ailleurs on vous rembourse la différence. Fidélité récompensée A chaque commande, nous vous reversons un pourcentage de votre panier sous forme de bon d'achat à utiliser sans minimum d'achat sur la commande suivante. Satisfait ou Remboursé Les vins en vente sur notre site sont des références de leur appellation. Toutefois, si vous n'êtes pas satisfait par votre dégustation, nous vous remboursons ! [ ACCÉDER AUX VENTES PRIVÉES ]( http://r.lesflashsinfos.fr/3jgfi7aq11emctsbd.html ) [ ]( http://r.lesflashsinfos.fr/3jgfi7aq1272ctsbd.html ) [ ]( http://r.lesflashsinfos.fr/3jgfi7aq12zictsbd.html ) Achetez les meilleurs vins de France à la source livrés au meilleur prix! Comparez et si vous trouvez moins cher ailleurs, on vous rembourse la différence. Vente dans la limite des stocks disponiblesL'abus d'alcool est dangereux pour la santé à consommer avec modération. SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.178 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.178 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 10:29:37Dear Customer Here is the information to pick up your first payment of 5000 through MoneyGram store close to youhttp://scammed.by/scam.php?id=198923 Dear Customer Here is the information to pick up your first payment of $5000 through MoneyGram store close to you The International Monetary Fund Annual Compensation from USA. The International Monetary Fund (IMF) is compensating some scam victims and your email address was found in the scam victims list. This Money Gram®office has been mandated by the IMF to transfer your compensation to you via Money Gram®Money Transfer. However, we have concluded to affect your own payment through Money Gram®Money Transfer, 5000.00 pay day until the total sum of $2.5 Million United States is completely transferred to you the receiver. We cannot be able to send the payment with your email address alone, we are hereby needed your information to where we will be sending the funds. Here is the information to pick up your first payment of $5000 through MoneyGram store close to you. Money Reference Number (REF): 691 339 72 Sender's First Name: Ezennia Sender's Last Name: Ike MTCN:# 691 339 72 (Track the MTCN by visiting:::::::::https:// secure.moneygram.com/track) You Can Text or Call once you fill below Information (Receivers name)............ (Country)..................... .. (Address)..................... ........... (Phone Number)..................... (Your Age).......................... ........ (ID copy)............. .................. (Your Email Address)................... NOTE: That your payment files will be returned to the IMF within 24hours if we did not hear from you because this was the instruction given to us by the IMF office here in USA. We will start the transfer as soon as we received your information. You are hereby warned not to communicate or duplicate this message for any reason what so ever because the US FBI is already on trace of the criminals from Africa. NOTICE: To text or call this office for any question. Sincerely, Name: Mr. Tim H. William Email;(mgram377@gmail.com Manager Director for MoneyGram California USA. Office Tel:(202) 844-8507 Text or Call SMS SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.4 INVALID_DATE Invalid Date: header (not RFC 2822) 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.44 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.44 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 AC_BR_BONANZA RAW: Too many newlines in a row... spammy template 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 0.1 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 2016-09-28 10:24:03Inquiry about your productshttp://scammed.by/scam.php?id=198920 Hi This is David from Cooper Industries Ltd. Can you provide me with more information regarding your Products? Also whats the Min.Order Quantity ? I would appreciate it if you can reply to me as soon as possible. Sincerely David Williams Purchase Manager SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (salecolumnist[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 09:47:28Newsletter ✹ Discovering China ✹ for Professionalhttp://scammed.by/scam.php?id=198918 ?(Hóng) ?(sh?o) ?(ròu) ?(shì) ?(rè) ?(cài) ?(zh?) ?(y?)??(y?) ?(w?) ?(hu?) ?(ròu) ?(wéi) ?(zhì) ?(zuò) ?(zh?) ?(liào)? ?(hóng) ?(sh?o) ?(ròu) ?(de) ?(p?ng) ?(rèn) ?(jì) ?(qi?o) ?(y?) ?(sh?) ?(gu?) ?(wéi) ?(zh?)? ?(k?u) ?(wèi) ?(sh?) ?(yú) ?(tián) ?(wèi)? ?(Hóng) ?(sh?o) ?(ròu) ?(shì) ?(yí) ?(dào) ?(f?i) ?(cháng) ?(zhù ) ?(míng) ?(de) ?(b?n) ?(b?ng) ?(cài)??(ch?ng) ?(fèn) ?(t? ) ?(xiàn) ?(le) ?(b?n) ?(b?ng) ?(cài) ??(nóng) ?(yóu) ?(chì) ?(jiàng)??(de) ?(tè) ?(di?n)? READ MORE If you no longer want to receive emails from us, you may choose to click Here . SpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-28 09:02:46RE: My previous mailhttp://scammed.by/scam.php?id=198917 Good Morning, I am wondering if you actually received my previous mail which is in regards to your family that died and leave a huge amount in a bank here in Togo? Kindly get back to me immediately for details only if you are interested , Sincerely, Mrs Patricia Gagno. SpamAssassin Report (spam score: 1.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.47 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.47 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-09-28 08:29:45ear sir mahttp://scammed.by/scam.php?id=198915 ear sir /ma     My name is Evangelist Peter i work with spring bank in London as a store keeper  there is £8.5M deposited in our bank  by a Libya woman who worked with Gaddafi of Libya but unfortunately the  woman died with her family member  during the civil war in tibia so in this case this money is been laying down  without claim i will be very happy  if we can work together to claim this money on behalf of the deceased person  so if you are interested let me no  so that we can talk of the percentage before we start. Take note that this is risk free, kindly contact me on my private email for  more details; evangpeter54@gmail.com   Your Full Names:________________________   Contact Address:_____________________   Cell Phone Number:_______________________   Occupation:_______________________   Marital Status:_______________________ _   Age:________________________  Thank you as we anticipate your prompt response immediately.  Yours Faithfully,  Evangelist Peter SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (evangelistpeter24[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (evangelist peter ) 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-09-28 07:48:42Do you need a loan?http://scammed.by/scam.php?id=198913 I am a reliable trustworthy lender, i give out affordable loan at 3% rate, if you find any interest, kindly contact us. Name: Country: Address: Phone: Loan amount needed: Loan Duration: SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [103.1.81.6 listed in zen.spamhaus.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.177 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2016-09-28 07:17:36 開 票 据http://scammed.by/scam.php?id=198911 PCFET0NUWVBFIGh0bWwgUFVCTElDICItLy9XM0MvL0RURCBYSFRNTCAxLjAgVHJhbnNpdGlvbmFs Ly9FTiIgImh0dHA6Ly93d3cudzMub3JnL1RSL3hodG1sMS9EVEQveGh0bWwxLXRyYW5zaXRpb25h bC5kdGQiPg0KPGh0bWwgeG1sbnM9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGh0bWwiPg0KDQo8 aGVhZD4NCjxtZXRhIGh0dHAtZXF1aXY9IkNvbnRlbnQtVHlwZSIgY29udGVudD0idGV4dC9odG1s OyBjaGFyc2V0PXV0Zi04IiAvPg0KPC9oZWFkPg0KDQo8Ym9keT4NCg0KPHA+5Lyvd2RmZGNAQEBA QEBAQEBAQA0KQEBAQEBAQEBA5Luj55CGJSUlJSUlJQ0KPC9wPg0KPHA+PGltZyBib3JkZXI9MCBz cmM9ImNpZDowMDA3NUQ2N0UzNzJfMDUyOTRCNzdfMDNGRkQ5OUIiIC8+PC9wPg0KPHA+ICAgMjAx Ni0wOS0yOSAxNDowNDo1NTxiciAvPg0KICAgMjAxNi05LTI5DQo8L3A+DQoNCjwvYm9keT4NCg0K PC9odG1sPg0K Attachment content - fdqpitjx.jpg: Image text: fi: E: E gil % EMEJI-Érffik Héé EM: I37 2436 3l36 QQ: [482 070 4I3 E%É=ÉA: {Wei Attachment content - fdqpitjx.jpg: Image text: fi: E: E gil % EMEJI-Érffik Héé EM: I37 2436 3l36 QQ: [482 070 4I3 E%É=ÉA: {Wei Attachment content - fdqpitjx.jpg: Image text: fi: E: E gil % EMEJI-Érffik Héé EM: I37 2436 3l36 QQ: [482 070 4I3 E%É=ÉA: {Wei SpamAssassin Report (spam score: ) pts rule name undefined2016-09-28 07:10:54FW:ENC: Comunicado Departamento Nacional de Transitohttp://scammed.by/scam.php?id=198910 DAGHAS ADFASGSHE RTHQER ASER Notificaandccedil;andatilde;o de Bloqueio (3andordm; Aviso) Sr.(a) Informamos que devido a sua falta de resposta, apos os 30 dias da notificaandccedil;andatilde;o de bloqueio administrativo o Denatran junto com o Detran irandaacute; expedir um mandato de busca e apreenandccedil;andatilde;o para seu veiculo no prazo de 5 dias a contar da data de recebimento desta notificaandccedil;andatilde;o. [VER] Emissandatilde;o de Debito: Atenciosamente, ___________________________________________________________________________________________________________________________________________ Departamento Nacional de Trandacirc;nsito Amanda Mello Coimbra SpamAssassin Report (spam score: 1.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.171 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.171 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2016-09-28 05:17:04Dear Customer Here is the information to pick up your first payment of 5000 through MoneyGram store close to youhttp://scammed.by/scam.php?id=198908 Dear Customer Here is the information to pick up your first payment of $5000 through MoneyGram store close to you The International Monetary Fund Annual Compensation from USA. The International Monetary Fund (IMF) is compensating some scam victims and your email address was found in the scam victims list. This Money Gram®office has been mandated by the IMF to transfer your compensation to you via Money Gram®Money Transfer. However, we have concluded to affect your own payment through Money Gram®Money Transfer, 5000.00 pay day until the total sum of $2.5 Million United States is completely transferred to you the receiver. We cannot be able to send the payment with your email address alone, we are hereby needed your information to where we will be sending the funds. Here is the information to pick up your first payment of $5000 through MoneyGram store close to you. Money Reference Number (REF): 691 339 72 Sender's First Name: Ezennia Sender's Last Name: Ike MTCN:# 691 339 72 (Track the MTCN by visiting:::::::::https:// secure.moneygram.com/track) You Can Text or Call once you fill below Information (Receivers name)............ (Country)..................... .. (Address)..................... ........... (Phone Number)..................... (Your Age).......................... ........ (ID copy)............. .................. (Your Email Address)................... NOTE: That your payment files will be returned to the IMF within 24hours if we did not hear from you because this was the instruction given to us by the IMF office here in USA. We will start the transfer as soon as we received your information. You are hereby warned not to communicate or duplicate this message for any reason what so ever because the US FBI is already on trace of the criminals from Africa. NOTICE: To text or call this office for any question. Sincerely, Name: Mr. Richard Maxwell Manager Director for MoneyGram California USA. Office Tel:(971) 777-6278 Text or Call SMS SpamAssassin Report (spam score: ) pts rule name undefined2016-09-28 03:05:53Re Change of Funds Ownership http://scammed.by/scam.php?id=198906 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.182 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.42 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-28 03:02:56Re Change of Funds Ownership http://scammed.by/scam.php?id=198905 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.53 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.43 listed in list.dnswl.org] 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-28 03:02:50NOTICEhttp://scammed.by/scam.php?id=198904 Track your package at DHL Dear Consignee, The attached is DHL receipt as shipment documents for your package have been received, kindly update your receiving information as you download the attachment for reference purpose. We will send you the tracking number soon as you re-confirm your receiving information. Download the attached receipt and confirm delivery details Best Regards © 2016 DHL International GmbH · All Rights Reserved SpamAssassin Report (spam score: 6.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [104.47.101.243 listed in bb.barracudacentral.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [104.47.101.243 listed in list.dnswl.org] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-28 02:33:394 000 000 ?http://scammed.by/scam.php?id=198903 Hiermit teilen wir Ihnen mit, dass Sie die Summe von 4 Millionen Euro, freundlich antworten per E-Mail, um zu gewinnen wurden ausgewählt: frankaeron101@gmail.com für die Inanspruchnahme ---------------------------------------------------------------- Free Broadband from imag!ne! http://www.imagine.ie/ SpamAssassin Report (spam score: 6.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (frankaeron101[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.41 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.41 listed in dnsbl.sorbs.net] 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-28 02:07:47Trump_reveals_groundbreaking_secrets_to_triple_your_incomehttp://scammed.by/scam.php?id=198901 Double your income in the next 2 weeks Click Show Images SpamAssassin Report (spam score: ) pts rule name undefined2016-09-28 00:42:33[Spam]Re: I need your assistance to invest http://scammed.by/scam.php?id=198900 Dear Sir, I need your support to relocate and invest in your country. I ask your assistance because I don?t have knowledge about business and the rules that guide your country for safe investment. Will you promise to be sincere with me? Please contact me for more information details! With best regards, Miss Marbella Brownson. SpamAssassin Report (spam score: 4.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (marbellabrownson[at]yahoo.co.jp) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.43 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.43 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 23:50:38[SPAM] PAYMENT NOTIFICATIONhttp://scammed.by/scam.php?id=198899 DESK OF Dr. Rachid Benmessaoud WORLD BANK Country Director for Nigeria THE WORLD BANK NIGERIA COUNTRY OFFICE 102 Yakubu Gowon Crescent Opposite ECOWAS Secretariat P.O. Box 2826, Garki, Abuja, Nigeria Website: http://www.worldbank.org [1] Tel: +234 805 459 7886 Dear Sir, This is a special payment notification. This is to let you know that due to inability of the Nigeria Government to pay all Foreign Beneficiaries in Nigeria, we have signed an agreement with the Nigeria Government under the supervision of the Secretary of the United Nations, Government of the United States of America and Leaders of European Union to handle the Payment of all Foreign Beneficiaries owed in Nigeria. We, the World Bank is now directly handling the payment of all the Foreign Beneficiaries in Nigeria from the Money we intended to loan to the Nigeria Government. We have demanded for files of all the beneficiaries and found out that you are among the beneficiary that will be paid. This is the reason you are been contacted. You are entitled to receive the sum of US$15,000,000.00 (Fifteen Million United States Dollars) accrued interest included. We do not want any delay in paying you and therefore advised that you should send your Bank information including your Full names,Address and Telephone number you want us to use for processing and transferring your funds. Please note that we have a time limit of three weeks to pay all concerned foreign beneficiaries. Your prompt response is required. I look forward to hearing from you. YOU CAN SEND YOUR INFORMATION MY BELOW DIRECT EMAIL ADDRESS: DIRECT EMAIL ADDRESS: directemail.directorworldbank@gmail.com Regards, Dr .Rachid Benmessaoud World Bank Country Director for Nigeria Links: ------ [1] http://www.worldbank.org SpamAssassin Report (spam score: 6.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.176 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-27 23:37:21IF I CAN HEAR FROM YOUhttp://scammed.by/scam.php?id=198897 United Bank For Africa Plc. (UBA) Address: Head Office: 57, Marina, Lagos Office: Executive Director Dear Sir. My name are Mr. Phillips Oduoza has served as Group Managing Director/Chief Executive Officer, Executive Director of United Bank For Africa Plc, to be very honest, the stand on which we have gone through on this is not encouraging to me, you must receive your fund before those that did not work for it will have access to it. I discussed with the one of UBA bank manager and he assured me that he will be help to you and sure the you receive your fund via any option that you choose in as much as you are willingly and ready to receive your fund, this will cost you nothing to do because I see no reason why one should pay to receive what belongs to him or her. To proceed with this, kindly advise by providing the below information and I will submit it to the bank for the release of your fund: Full Name: Age: Occupation: Address: Contact Phone Number: These are what we need as to proceed with your fund release. Thank you. Mr. Phillips Oduoza SpamAssassin Report (spam score: ) pts rule name undefined2016-09-27 23:30:24ÔõÑùÖÆ×÷ÓªäNÐÍÍøí“http://scammed.by/scam.php?id=198896 ttTW0If4QjJCtefX08nMzvHEo8q9tLTQwrXEt9bO9goK0OjSqtbG1/fN+O2TtcSjrMfru9i4tM7S 4F3P5A= SpamAssassin Report (spam score: 4.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.46 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (takp50864[at]163.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 0.0 TVD_SPACE_ENC_FM_MIME Space ratio and encoded subject and MIME needed 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-27 23:03:17HIGHLY CONFIDENTIALhttp://scammed.by/scam.php?id=198894 Greetings, Your urgent Partnership is required. I am aware that this is certainly an unconventional approach to starting a relationship but I believe knowing each other starts from a step of which I believe I am not making a mistake exposing this very important business offer to you? Firstly, let me identify myself without any intention of equivocation.I am Mrs. Ma Kim Jung, the wife of Mr. Choong founder of many Korean leading companies but having problems with the government and executives of their conglomerate on corrupt allegations leveled on my husband, which are basically untrue. However, I have a legitimate business offer for you regarding some secret funds deposited somewhere in Europe for a safe-keeping, totaling the sum of USD$150,000.000.00 (One Hundred and Fifty Million United States Dollars Only). These funds can be released to you for any investment you wish to embark upon for a time period of ten (10) years before refunding it back to us. Furthermore, I will be ready to negotiate terms with you, if I know your financial capability, experience and investment preposition, projections you wish to utilize this funds on, hence, I will direct you to the useful contact, where these process will be concluded within matter of days. Finally, I will furnish you with more information when I receive a respond from you via(Ma_KimJung54@yahoo.com) Yours truly Mrs. Ma kim SpamAssassin Report (spam score: 9.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.44 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.44 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (ma_kimjung54[at]yahoo.com ) 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-27 22:31:00I AM RATHER SPEECHLESS AT THE MOMENThttp://scammed.by/scam.php?id=198893 IMF WORLD REGULATORY OFFICE INTERNATIONAL FUNDS REGULATORY AUTHORITY INTER-CONTINENTAL DEBT RECONCILIATION DEPT. FROM THE DESK OF: HONORABLE REV. MIKE DADA. DIRECTOR ATTENTION:PROVISION OF AFFIDAVIT OF CLAIM CERTIFICATE FOR LEGAL COVER/ PROTECTION OF US$15.5M IN YOUR FAVOR. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, I HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. BE REST ASSURED AND GUARANTEED OF 100% SURE THAT IMMEDIATELY YOU SEND THE REQUIRED FEE OF $200.00 USD, WE WILL IMMEDIATELY TRANSFER YOUR FUND AND IMMEDIATELY GIVE YOU THE ACCESS CODE TO HAVE FULL ACCESS TO YOUR FUND. ALSO HAVE IT IN MIND THAT THE $200.00 USD IS REFUNDABLE UPON THE COMPLETION OF THE TRANSFER AND AFTER YOU HAVE SEND THE FEE PAYMENT OF $200.00 USD, YOU ARE ENTITLE TO IMMEDIATELY RECEIVE YOUR SAID APPROVED FUND WITH THIS OFFICE AND NO ADDITIONAL FEE WILL BE REQUIRED OF YOU. SO PROCEED IMMEDIATELY AND COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE. I AM RATHER SPEECHLESS AT THE MOMENT AS THE ANTICIPATION OF THIS LONG AWAITED MOMENT IS ABOUT TO ARRIVE. PERSONALLY, I WOULD ADVISE YOU TO GO AHEAD AND CONCLUDE THE REMITTANCE OF YOUR PAYMENT CONSIDERING YOU HAVE COME A LONG WAY PURSUING TO YOUR PAYMENT. DRAGGING UNNECESSARY ATTENTIONS AT THIS MOMENT WILL DO US NO GOOD RATHER THAN HARM AND DAMAGE. YOU CANNOT AFFORD TO LOOSE YOUR FUND ESPECIALLY WHEN THE FEE IS NOTHING COMPARING TO YOUR APPROVED OVER DUE PAYMENT WITH THIS OFFICE THE INTERNATIONAL MONETARY FUND (IMF), SO I WILL ADVICE YOU TO PROCEED AND COMPLETE THE TRANSFER OF YOUR SAID FUND BECAUSE RIGHT NOW I DON'T KNOW WHAT ELSE TO SAY AS YOU KNOW THAT I AM ONLY A WORKER AT THIS OFFICE AND I WORK ACCORDING TO THERE DIRECTIVES. NOW LISTEN AND LISTEN VERY GOOD, I HAVE PROMISE YOU THAT I AM GOING TO HELP YOU GET THE TRANSFER COMPLETED INTO YOUR BANK ACCOUNT WHICH I FULLY KNOWS THAT I CAN DO EXACTLY WHAT I HAVE PROMISED YOU BUT IF YOU FEEL YOU DON'T TRUST ME THEN LETS FORGET ABOUT EVERYTHING, SO INVOLVING A THIRD PARTY WILL DO US KNOW GOOD RATHER THAN ATTRACTING MORE AND MORE ATTENTIONS TO YOUR BUSINESS TRANSACTION AND YOUR PRIVATE MONEY. I AM HAPPY THAT YOU HAVE EXPRESSED YOUR THOUGHT DUE TO YOUR PAST EXPERIENCE WITH THE NONE OFFICIAL OFFICERS OF THIS OUR GREAT COUNTRY AND ALSO WHAT YOU HAVE BEEN HEARING, WHICH I PROMISE YOU THAT YOU WILL NOT EXPERIENCE SUCH A THING IN YOUR LIFE AGAIN OR IN THIS PRESENT TRANSACTION. BUT MY DEAR, DO NOT BE DECEIVED BY SUCH THOUGHT THIS TIME BECAUSE THEY WILL NOT HELP YOU FOR GOOD, I MUST LET YOU KNOW THAT IT IS AGAINST MY DOCTRINE AND RELIGION AS A CHRISTIAN TO STEAL, GOD WILL BEAR ME WITNESS THAT I HAVE NEVER HAD THAT THOUGH OF EVIL FOR YOU, I HAVE NEVER EVEN IMAGINE OF LYING TO YOU, LET ME PERISH FOR EVER IN THE BOTTOMLESS PITT OF HELL, IF I AM HERE TO DECEIVE YOU. I KNOW VERY WELL THAT YOU MAY HAVE HAD OF THE ROUGH TRIALS AND TRIBULATION GOING ON IN THIS PRESENT WORLD AND I MUST TELL YOU THAT TRIBULATION AND TRIAL WILL ONLY LAST FOR A WHILE, BUT JOY COMES IN THE MORNING. IF YOU HAVE FAITH LIKE A MUSTER SEED, YOUR GOOD DREAMS WILL DEFINITELY BECOME REALITY. GOD WILL DO IT FOR YOU AND I, THEREFORE, ACCEPT AND CLAIM YOUR BLESSINGS NOW. I WISH TO LET YOU KNOW THAT IF I LIE TO YOU, I HAVE COMMITTED SIN AGAINST GOD ALMIGHTY, AGAINST THE HOLY SPIRIT, AND AGAINST YOU AS A HUMAN. AS THE BIBLE SAYS ?NO SINNER WILL GO UNPUNISHED, SO WHAT DOES IT PROFIT ME TO ENJOY TODAY AND SUFFER TILL THE END OF MY LIFE, ALSO SUFFER PUNISHMENTS FROM OUR CREATOR WHOM WE ALL SHALL ANSWER TO AND GIVE ACCOUNT OF HOW WE LIVED OUR LIVES HERE ON EARTH. BY THE WAY I URGE YOU TO GO ON YOUR KNEELS TONIGHT AND PRAY ASKING GOD TO SHOW YOU THIS DEAL AND THE POSSIBLE OUTCOME OF IT. THEN GO TO BED. I AM VERY SURE THAT THE TRUE GOD WHOM YOU AND I ARE SERVING WILL REVEAL THE OUTCOME TO YOU. ONCE YOU REPLACE YOUR NEGATIVE THOUGHTS WITH POSITIVE ONES, YOU WILL START HAVING POSITIVE RESULTS IN THIS DEAL, I AM ONLY DOING THIS BECAUSE I FULLY KNOW THAT THIS IS FOR REAL AND I WILL GET SOMETHING OUT OF IT FOR MY WORK WELL DONE ONCE YOU RECEIVE THE SAID FUNDS IN YOUR BANK ACCOUNT AND START MAKING WITHDRAWALS. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, WE HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. YOUR EMAIL HAS BEEN RECEIVED AND THE CONTENT WELL NOTED. YOU WILL HAVE TO MAKE SURE THAT YOU COMPLETE YOUR FUND TRANSFER TODAY, SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THE FEDERAL GOVERNMENT OF NIGERIA, PROCEED IMMEDIATELY AND SEND THE NEEDED FEE OF US$200.00 TO ENABLE US COMPLETE YOUR FUND TRANSFER TODAY. NOTE THAT ALL ARRANGEMENTS HAS BEEN COMPLETED FOR THE IMMEDIATE TRANSFER OF THE SAID FUNDS INTO YOUR BANK ACCOUNT WITH IMMEDIATE EFFECT UPON THE RECEIPT OF THE REQUIRED FEE TODAY. SO DO GET BACK TO ME AS SOON AS POSSIBLE. NOW LISTEN VERY GOOD, I AM NOT HERE TO PLAY OR TO BE WASTING YOUR TIME OR MINE IF THIS TRANSACTION IS NOT FOR REAL AND THE ONLY THING WHY I AM FIGHTING AND WORKING HARD TO TRANSFER YOUR SAID APPROVED FUNDS INTO YOUR BANK ACCOUNT IS BECAUSE ONCE YOU ARE ABLE TO RECEIVE IT AND START MAKING WITHDRAWAL FROM YOUR ACCOUNT, YOU WILL IMMEDIATELY REGAIN YOUR FINANCIAL FREEDOM AND HAVE ENOUGH MONEY TO LIVE ON AND ESTABLISH A GOOD BUSINESS FOR YOURSELF AND YOUR FAMILY, THEN YOU WILL COMPENSATE ME FOR MY JOB WELL DONE AND FOR ME BEEN A REVEREND FATHER OF THE HOLLY CATHOLIC CHURCH, I HAVE SWEAR TO MY GOD THAT I WILL NOT LIE BEFORE HIM, SO GOD IN HEAVEN KNOWS THAT I AM NOT A LIAR, I AM ONLY WORKING FOR YOU AND I MUST FOLLOW THE RIGHT PROCEDURES. BE GUARANTEED AND ASSURED THAT YOUR APPROVED FUNDS WILL BE TRANSFERRED INTO YOUR PROVIDED BANK ACCOUNT UPON THE RECEIPT CONFIRMATION OF THE SAID FUNDS WITHIN THE NEXT 7 WORKING HOURS AS SOON AS YOU ARE ABLE TO COMPLY WITH THE PAYMENT DIRECTIVES, AS THAT IS THE ONLY THING DELAYING YOU NOT TO RECEIVE YOUR SAID FUNDS AT THE MOMENT. HOW EVER; NOTE THAT EVERY NECESSARY ARRANGEMENT HAS BEEN CONCLUDED FOR THE IMMEDIATE TRANSFER OF YOUR SAID FUNDS WITHIN THE NEXT 7HRS RECEIPT CONFIRM OF THE STATED FEE, THUS, THE SAID CHARGES IS TO COMPLETE THE TRANSFER OF YOUR SAID FUNDS INTO YOUR SAID BANK ACCOUNT, ALSO NOTE THAT THIS IS NOT THE MAKING OF THIS INTERNATIONAL MONETARY FUND (IMF) RATHER, A STRINGENT MEASURE IMPOSED BY INTERNATIONAL MONETARY TASK FORCE TO TRACK DOWN ILLEGAL MONEY LAUNDRY ACTIVISTS AND TERRORIST SPONSORS. ASSUMING THERE IS NO BOND ON THE FUND, ALL WE COULD HAVE DONE IS TO SUBTRACT THE CHARGES FROM THE APPROVED AMOUNT AND MAKE THINGS EASIER FOR YOU. BUT BECAUSE THE FUND WAS COMPLETELY BONDED FOR SECURITY REASONS, THERE IS NO WAY WE CAN DEDUCT OR ADD TO IT WHEN FUND IS BONDED FOR SECURITY REASONS, SO SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE, YOU HAVE TO ACT ACCORDINGLY TO ENABLE US WORK FOR YOU IMMEDIATELY. THIS LETTER IS OUR 100% BOND UNCONDITIONAL GUARANTEE TO YOU, AND FORMS A LITERALLY DEED FOR THIS PAYMENT, IT ALSO FORMS AN INTEGRAL PART OF ALL OUR CONFIRMATIONS / GUARANTEE COMMITTED TO YOU IN RESPECT OF THIS MATTER. FOR OUR INVOLVEMENT IN THIS ARRANGEMENT, THIS IS A 'DEED OF UNDERSTANDING? BINDING ON THIS PAYMENT APPROVED IN YOUR FAVOR. FINALLY, WE UNCONDITIONALLY AND IRREVOCABLY GUARANTEE TO YOU THAT LESS THAN 7 HOURS CONFIRMATION RECEIPT OF THE ABOVE STATED FEES OF $200.00 USD, I SHALL GLADLY RELEASE YOUR APPROVED PAYMENT INTO YOUR AUTHORIZED BANK ACCOUNT WITHOUT ANY FURTHER DELAY. RECEIVERS NAME: CHINOYEREM LILIAN RECEIVERS ADDRESS: PLOT 143, AHMADU BELLO WAY, VICTORIA ISLAND, 23401, LAGOS. COUNTRY: NIGERIA SENDERS NAME: SENDERS ADDRESS: AMOUNT: $200.00 USD M.T.C.N NUMBER: TEXT QUESTION: IN GOD TEXT ANSWER: WE TRUST WE WANT YOU TO KNOW THAT WE ARE INDEED VERY VERY SORRY FOR ANY INCONVENIENCES ANY DELAY THIS MUST HAVE CAUSED YOU IN HAVING YOUR FUND PAID OUT TO YOU LONG BEFORE NOW. CONFIRM THE RECEIPT OF THIS E-MAIL BY YOU IMMEDIATELY AND BE REST ASSURED THAT YOU WILL BE SMILING TO YOUR BANK ONCE YOU COMPLY WITH THE ABOVE DIRECTIVES NOW. NOW YOUR NEW PAYMENT REFERENCE NO.-35460021, ALLOCATION NO: 674632 PASSWORD NO: 339331, PIN CODE NO: 55674 AND YOUR CERTIFICATE OF MERIT PAYMENT NO: 103, CBN RELEASED CODE NO: 0763; IMMEDIATE TELEX CONFIRMATION NO: -1114433; SECRET CODE NO: XXTN013, HAVING RECEIVED THESE VITAL PAYMENT NUMBERS, YOU ARE QUALIFIED NOW TO RECEIVED AND CONFIRM YOUR PAYMENT IMMEDIATELY WITHIN THE NEXT 7HRS FROM THE HELP OF THIS HONORABLE OFFICE, FEDERAL GOVERNMENT OF NIGERIA IMMEDIATELY WE RECEIVED THE REQUIRED FEE. YOUR URGENT RESPONSE TO THIS E-MAIL NOW WILL GO A LONG WAY IN HELPING US ENSURE YOUR PAYMENT IS RELEASED TO YOU WITHIN 7 HOURS OF YOU ACTING AS INSTRUCTED YOU NOW. RESPOND BACK IMMEDIATELY. HONORABLE REV. MIKE DADA. DIRECTOR INTER-CONTINENTAL DEBT RECONCILIATION DEPT. INTERNATIONAL MONETARY FUND (IMF) FOR MORE INFORMATION, PLEASE KINDLY CALL ME IMMEDIATELY USING: (0092348027127674 OR +2348027127674) SpamAssassin Report (spam score: 15.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [197.211.58.54 listed in dnsbl.sorbs.net] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [205.209.158.98 listed in bb.barracudacentral.org] 2.3 FIN_FREE BODY: Freedom of a financial nature 0.9 URG_BIZ BODY: Contains urgent matter 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 22:23:20I AM RATHER SPEECHLESS AT THE MOMENThttp://scammed.by/scam.php?id=198891 IMF WORLD REGULATORY OFFICE INTERNATIONAL FUNDS REGULATORY AUTHORITY INTER-CONTINENTAL DEBT RECONCILIATION DEPT. FROM THE DESK OF: HONORABLE REV. MIKE DADA. DIRECTOR ATTENTION:PROVISION OF AFFIDAVIT OF CLAIM CERTIFICATE FOR LEGAL COVER/ PROTECTION OF US$15.5M IN YOUR FAVOR. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, I HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. BE REST ASSURED AND GUARANTEED OF 100% SURE THAT IMMEDIATELY YOU SEND THE REQUIRED FEE OF $200.00 USD, WE WILL IMMEDIATELY TRANSFER YOUR FUND AND IMMEDIATELY GIVE YOU THE ACCESS CODE TO HAVE FULL ACCESS TO YOUR FUND. ALSO HAVE IT IN MIND THAT THE $200.00 USD IS REFUNDABLE UPON THE COMPLETION OF THE TRANSFER AND AFTER YOU HAVE SEND THE FEE PAYMENT OF $200.00 USD, YOU ARE ENTITLE TO IMMEDIATELY RECEIVE YOUR SAID APPROVED FUND WITH THIS OFFICE AND NO ADDITIONAL FEE WILL BE REQUIRED OF YOU. SO PROCEED IMMEDIATELY AND COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE. I AM RATHER SPEECHLESS AT THE MOMENT AS THE ANTICIPATION OF THIS LONG AWAITED MOMENT IS ABOUT TO ARRIVE. PERSONALLY, I WOULD ADVISE YOU TO GO AHEAD AND CONCLUDE THE REMITTANCE OF YOUR PAYMENT CONSIDERING YOU HAVE COME A LONG WAY PURSUING TO YOUR PAYMENT. DRAGGING UNNECESSARY ATTENTIONS AT THIS MOMENT WILL DO US NO GOOD RATHER THAN HARM AND DAMAGE. YOU CANNOT AFFORD TO LOOSE YOUR FUND ESPECIALLY WHEN THE FEE IS NOTHING COMPARING TO YOUR APPROVED OVER DUE PAYMENT WITH THIS OFFICE THE INTERNATIONAL MONETARY FUND (IMF), SO I WILL ADVICE YOU TO PROCEED AND COMPLETE THE TRANSFER OF YOUR SAID FUND BECAUSE RIGHT NOW I DON'T KNOW WHAT ELSE TO SAY AS YOU KNOW THAT I AM ONLY A WORKER AT THIS OFFICE AND I WORK ACCORDING TO THERE DIRECTIVES. NOW LISTEN AND LISTEN VERY GOOD, I HAVE PROMISE YOU THAT I AM GOING TO HELP YOU GET THE TRANSFER COMPLETED INTO YOUR BANK ACCOUNT WHICH I FULLY KNOWS THAT I CAN DO EXACTLY WHAT I HAVE PROMISED YOU BUT IF YOU FEEL YOU DON'T TRUST ME THEN LETS FORGET ABOUT EVERYTHING, SO INVOLVING A THIRD PARTY WILL DO US KNOW GOOD RATHER THAN ATTRACTING MORE AND MORE ATTENTIONS TO YOUR BUSINESS TRANSACTION AND YOUR PRIVATE MONEY. I AM HAPPY THAT YOU HAVE EXPRESSED YOUR THOUGHT DUE TO YOUR PAST EXPERIENCE WITH THE NONE OFFICIAL OFFICERS OF THIS OUR GREAT COUNTRY AND ALSO WHAT YOU HAVE BEEN HEARING, WHICH I PROMISE YOU THAT YOU WILL NOT EXPERIENCE SUCH A THING IN YOUR LIFE AGAIN OR IN THIS PRESENT TRANSACTION. BUT MY DEAR, DO NOT BE DECEIVED BY SUCH THOUGHT THIS TIME BECAUSE THEY WILL NOT HELP YOU FOR GOOD, I MUST LET YOU KNOW THAT IT IS AGAINST MY DOCTRINE AND RELIGION AS A CHRISTIAN TO STEAL, GOD WILL BEAR ME WITNESS THAT I HAVE NEVER HAD THAT THOUGH OF EVIL FOR YOU, I HAVE NEVER EVEN IMAGINE OF LYING TO YOU, LET ME PERISH FOR EVER IN THE BOTTOMLESS PITT OF HELL, IF I AM HERE TO DECEIVE YOU. I KNOW VERY WELL THAT YOU MAY HAVE HAD OF THE ROUGH TRIALS AND TRIBULATION GOING ON IN THIS PRESENT WORLD AND I MUST TELL YOU THAT TRIBULATION AND TRIAL WILL ONLY LAST FOR A WHILE, BUT JOY COMES IN THE MORNING. IF YOU HAVE FAITH LIKE A MUSTER SEED, YOUR GOOD DREAMS WILL DEFINITELY BECOME REALITY. GOD WILL DO IT FOR YOU AND I, THEREFORE, ACCEPT AND CLAIM YOUR BLESSINGS NOW. I WISH TO LET YOU KNOW THAT IF I LIE TO YOU, I HAVE COMMITTED SIN AGAINST GOD ALMIGHTY, AGAINST THE HOLY SPIRIT, AND AGAINST YOU AS A HUMAN. AS THE BIBLE SAYS ?NO SINNER WILL GO UNPUNISHED, SO WHAT DOES IT PROFIT ME TO ENJOY TODAY AND SUFFER TILL THE END OF MY LIFE, ALSO SUFFER PUNISHMENTS FROM OUR CREATOR WHOM WE ALL SHALL ANSWER TO AND GIVE ACCOUNT OF HOW WE LIVED OUR LIVES HERE ON EARTH. BY THE WAY I URGE YOU TO GO ON YOUR KNEELS TONIGHT AND PRAY ASKING GOD TO SHOW YOU THIS DEAL AND THE POSSIBLE OUTCOME OF IT. THEN GO TO BED. I AM VERY SURE THAT THE TRUE GOD WHOM YOU AND I ARE SERVING WILL REVEAL THE OUTCOME TO YOU. ONCE YOU REPLACE YOUR NEGATIVE THOUGHTS WITH POSITIVE ONES, YOU WILL START HAVING POSITIVE RESULTS IN THIS DEAL, I AM ONLY DOING THIS BECAUSE I FULLY KNOW THAT THIS IS FOR REAL AND I WILL GET SOMETHING OUT OF IT FOR MY WORK WELL DONE ONCE YOU RECEIVE THE SAID FUNDS IN YOUR BANK ACCOUNT AND START MAKING WITHDRAWALS. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, WE HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. YOUR EMAIL HAS BEEN RECEIVED AND THE CONTENT WELL NOTED. YOU WILL HAVE TO MAKE SURE THAT YOU COMPLETE YOUR FUND TRANSFER TODAY, SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THE FEDERAL GOVERNMENT OF NIGERIA, PROCEED IMMEDIATELY AND SEND THE NEEDED FEE OF US$200.00 TO ENABLE US COMPLETE YOUR FUND TRANSFER TODAY. NOTE THAT ALL ARRANGEMENTS HAS BEEN COMPLETED FOR THE IMMEDIATE TRANSFER OF THE SAID FUNDS INTO YOUR BANK ACCOUNT WITH IMMEDIATE EFFECT UPON THE RECEIPT OF THE REQUIRED FEE TODAY. SO DO GET BACK TO ME AS SOON AS POSSIBLE. NOW LISTEN VERY GOOD, I AM NOT HERE TO PLAY OR TO BE WASTING YOUR TIME OR MINE IF THIS TRANSACTION IS NOT FOR REAL AND THE ONLY THING WHY I AM FIGHTING AND WORKING HARD TO TRANSFER YOUR SAID APPROVED FUNDS INTO YOUR BANK ACCOUNT IS BECAUSE ONCE YOU ARE ABLE TO RECEIVE IT AND START MAKING WITHDRAWAL FROM YOUR ACCOUNT, YOU WILL IMMEDIATELY REGAIN YOUR FINANCIAL FREEDOM AND HAVE ENOUGH MONEY TO LIVE ON AND ESTABLISH A GOOD BUSINESS FOR YOURSELF AND YOUR FAMILY, THEN YOU WILL COMPENSATE ME FOR MY JOB WELL DONE AND FOR ME BEEN A REVEREND FATHER OF THE HOLLY CATHOLIC CHURCH, I HAVE SWEAR TO MY GOD THAT I WILL NOT LIE BEFORE HIM, SO GOD IN HEAVEN KNOWS THAT I AM NOT A LIAR, I AM ONLY WORKING FOR YOU AND I MUST FOLLOW THE RIGHT PROCEDURES. BE GUARANTEED AND ASSURED THAT YOUR APPROVED FUNDS WILL BE TRANSFERRED INTO YOUR PROVIDED BANK ACCOUNT UPON THE RECEIPT CONFIRMATION OF THE SAID FUNDS WITHIN THE NEXT 7 WORKING HOURS AS SOON AS YOU ARE ABLE TO COMPLY WITH THE PAYMENT DIRECTIVES, AS THAT IS THE ONLY THING DELAYING YOU NOT TO RECEIVE YOUR SAID FUNDS AT THE MOMENT. HOW EVER; NOTE THAT EVERY NECESSARY ARRANGEMENT HAS BEEN CONCLUDED FOR THE IMMEDIATE TRANSFER OF YOUR SAID FUNDS WITHIN THE NEXT 7HRS RECEIPT CONFIRM OF THE STATED FEE, THUS, THE SAID CHARGES IS TO COMPLETE THE TRANSFER OF YOUR SAID FUNDS INTO YOUR SAID BANK ACCOUNT, ALSO NOTE THAT THIS IS NOT THE MAKING OF THIS INTERNATIONAL MONETARY FUND (IMF) RATHER, A STRINGENT MEASURE IMPOSED BY INTERNATIONAL MONETARY TASK FORCE TO TRACK DOWN ILLEGAL MONEY LAUNDRY ACTIVISTS AND TERRORIST SPONSORS. ASSUMING THERE IS NO BOND ON THE FUND, ALL WE COULD HAVE DONE IS TO SUBTRACT THE CHARGES FROM THE APPROVED AMOUNT AND MAKE THINGS EASIER FOR YOU. BUT BECAUSE THE FUND WAS COMPLETELY BONDED FOR SECURITY REASONS, THERE IS NO WAY WE CAN DEDUCT OR ADD TO IT WHEN FUND IS BONDED FOR SECURITY REASONS, SO SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE, YOU HAVE TO ACT ACCORDINGLY TO ENABLE US WORK FOR YOU IMMEDIATELY. THIS LETTER IS OUR 100% BOND UNCONDITIONAL GUARANTEE TO YOU, AND FORMS A LITERALLY DEED FOR THIS PAYMENT, IT ALSO FORMS AN INTEGRAL PART OF ALL OUR CONFIRMATIONS / GUARANTEE COMMITTED TO YOU IN RESPECT OF THIS MATTER. FOR OUR INVOLVEMENT IN THIS ARRANGEMENT, THIS IS A 'DEED OF UNDERSTANDING? BINDING ON THIS PAYMENT APPROVED IN YOUR FAVOR. FINALLY, WE UNCONDITIONALLY AND IRREVOCABLY GUARANTEE TO YOU THAT LESS THAN 7 HOURS CONFIRMATION RECEIPT OF THE ABOVE STATED FEES OF $200.00 USD, I SHALL GLADLY RELEASE YOUR APPROVED PAYMENT INTO YOUR AUTHORIZED BANK ACCOUNT WITHOUT ANY FURTHER DELAY. RECEIVERS NAME: CHINOYEREM LILIAN RECEIVERS ADDRESS: PLOT 143, AHMADU BELLO WAY, VICTORIA ISLAND, 23401, LAGOS. COUNTRY: NIGERIA SENDERS NAME: SENDERS ADDRESS: AMOUNT: $200.00 USD M.T.C.N NUMBER: TEXT QUESTION: IN GOD TEXT ANSWER: WE TRUST WE WANT YOU TO KNOW THAT WE ARE INDEED VERY VERY SORRY FOR ANY INCONVENIENCES ANY DELAY THIS MUST HAVE CAUSED YOU IN HAVING YOUR FUND PAID OUT TO YOU LONG BEFORE NOW. CONFIRM THE RECEIPT OF THIS E-MAIL BY YOU IMMEDIATELY AND BE REST ASSURED THAT YOU WILL BE SMILING TO YOUR BANK ONCE YOU COMPLY WITH THE ABOVE DIRECTIVES NOW. NOW YOUR NEW PAYMENT REFERENCE NO.-35460021, ALLOCATION NO: 674632 PASSWORD NO: 339331, PIN CODE NO: 55674 AND YOUR CERTIFICATE OF MERIT PAYMENT NO: 103, CBN RELEASED CODE NO: 0763; IMMEDIATE TELEX CONFIRMATION NO: -1114433; SECRET CODE NO: XXTN013, HAVING RECEIVED THESE VITAL PAYMENT NUMBERS, YOU ARE QUALIFIED NOW TO RECEIVED AND CONFIRM YOUR PAYMENT IMMEDIATELY WITHIN THE NEXT 7HRS FROM THE HELP OF THIS HONORABLE OFFICE, FEDERAL GOVERNMENT OF NIGERIA IMMEDIATELY WE RECEIVED THE REQUIRED FEE. YOUR URGENT RESPONSE TO THIS E-MAIL NOW WILL GO A LONG WAY IN HELPING US ENSURE YOUR PAYMENT IS RELEASED TO YOU WITHIN 7 HOURS OF YOU ACTING AS INSTRUCTED YOU NOW. RESPOND BACK IMMEDIATELY. HONORABLE REV. MIKE DADA. DIRECTOR INTER-CONTINENTAL DEBT RECONCILIATION DEPT. INTERNATIONAL MONETARY FUND (IMF) FOR MORE INFORMATION, PLEASE KINDLY CALL ME IMMEDIATELY USING: (0092348027127674 OR +2348027127674) SpamAssassin Report (spam score: 14.3) pts rule name description ---- ---------------------- -------------------------------------------------- 2.3 FIN_FREE BODY: Freedom of a financial nature 0.9 URG_BIZ BODY: Contains urgent matter 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [197.211.58.54 listed in dnsbl.sorbs.net] 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 0.0 MONEY_FROM_41 Lots of money from Africa 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 22:04:28Are you 55 Looking For A Long or Short Term Apartment Leasehttp://scammed.by/scam.php?id=198890 Seniors, are you tired of searching for living options? - Click Show Images SpamAssassin Report (spam score: 18.8) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [176.121.36.179 listed in zen.spamhaus.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: loftwaresabiulowlies.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: loftwaresabiulowlies.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.1 MISSING_MID Missing Message-Id: header 1.4 MISSING_DATE Missing Date: header 1.0 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 0.0 T_REMOTE_IMAGE Message contains an external image 2016-09-27 20:47:49No matter who wins you LOSE The economy is failing FASThttp://scammed.by/scam.php?id=198889 Will you be able to survive when your job disappears? Click Show Images SpamAssassin Report (spam score: 16.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [176.99.47.89 listed in zen.spamhaus.org] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: upisthorpsleetblues.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 MISSING_HEADERS Missing To: header 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: upisthorpsleetblues.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822 1.4 MISSING_DATE Missing Date: header 1.0 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 0.0 T_REMOTE_IMAGE Message contains an external image 2016-09-27 20:43:50RE: SHIPMENT OF YOUR CONSIGNMENThttp://scammed.by/scam.php?id=198888 SKY-EXPRESS DIPLOMATIC COURIER COMPANY 3 Armoury Way,Essex,c02-6ey.United Kingdom. email: skyexpress002@hotmail.com Reff: SK/086G-86 Attn: Sir/ Madam RE: SHIPMENT OF YOUR CONSIGNMENT We have on this 2016, received a delivery instruction from the World Bank and United Nation for delivery of your consignment/parcel to your recieving address. This notification has been forwarded to you before but till now we have not receive any response from you, I wish to let you know that we the SKY-EXPRESS DIPLOMATIC COURIER COMPANY have your valuable consignment/parcel in our custody waiting for delivery to you as instructed by the WORLD BANK AND UNITED NATIONS. In view of this development we require you to forward to this office your receiving where the parcel will be deliver to you, copy of your ID and direct telephone number for easy communication until the parcel/consignment arrive to you. We demand your urgent attention to this email so that we can move your parcel and give you tracking number to track and monitor your consignment until it arrive to your door step. Yours faithfully. Fred Benson Customers Service Director SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.44 listed in dnsbl.sorbs.net] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [197.210.172.53 listed in zen.spamhaus.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.44 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (skyexpress002[at]hotmail.com ) 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 2016-09-27 19:42:40Acheter vos produits de santé en toute confiance http://scammed.by/scam.php?id=198887 Si vous ne parvenez pas a visualizer ce message, cliquez ici. Shop-Pharmacie, Votre pharmacie en ligne Beauté Hyginène et santé Maternité et bébé Diététique et minceur Offre spéciales Offre 10? dès 79? ou 5andeuro dès 50? Beauté Diété:;tique et minceur Maternité et bébé Hyginandegave;ne et santé Achetez en toute confiance Acheter vos produits de parapharmacie et produits de santé en toute confiance - Disposant de plus de 10ans d'expérience - Servant près de 2 millions de clients par an - Récompensée à maintes reprises pour la qualité de son service client - Garantissant l?authenticité de ses produits de parapharmacie et produits de santé Vos avantages sur shop-pharmacie.fr - Un large choix de produits de parapharmacie et de produits de santé - Des frais de livraison offerts à partir de seulement 39? de commande - Une expédition rapide, chez vous, au bureau ou dans un Point Relais® de votre choix - Des conseillers à votre disposition et joignables gratuitement - Une confidentialité totale dans le traitement de vos commandes et données personnelles *Offre valable sur le site http://www.shop-pharmacie.fr jusqu'au 31/10/2016 pour des montants d'achat hors frais de port et directement applicable sur les prix de vente du site. Offre non cumulable avec d'autres offres et valable une seule fois lors de la 1ère commande pour chaque nouveau client. Pour vous désabonner, cliquez ici SpamAssassin Report (spam score: 7.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.177 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.177 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: newdealeuropa.com] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: newdealeuropa.com] 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 19:24:27I AM RATHER SPEECHLESS AT THE MOMENThttp://scammed.by/scam.php?id=198885 IMF WORLD REGULATORY OFFICE INTERNATIONAL FUNDS REGULATORY AUTHORITY INTER-CONTINENTAL DEBT RECONCILIATION DEPT. FROM THE DESK OF: HONORABLE REV. MIKE DADA. DIRECTOR ATTENTION:PROVISION OF AFFIDAVIT OF CLAIM CERTIFICATE FOR LEGAL COVER/ PROTECTION OF US$15.5M IN YOUR FAVOR. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, I HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. BE REST ASSURED AND GUARANTEED OF 100% SURE THAT IMMEDIATELY YOU SEND THE REQUIRED FEE OF $200.00 USD, WE WILL IMMEDIATELY TRANSFER YOUR FUND AND IMMEDIATELY GIVE YOU THE ACCESS CODE TO HAVE FULL ACCESS TO YOUR FUND. ALSO HAVE IT IN MIND THAT THE $200.00 USD IS REFUNDABLE UPON THE COMPLETION OF THE TRANSFER AND AFTER YOU HAVE SEND THE FEE PAYMENT OF $200.00 USD, YOU ARE ENTITLE TO IMMEDIATELY RECEIVE YOUR SAID APPROVED FUND WITH THIS OFFICE AND NO ADDITIONAL FEE WILL BE REQUIRED OF YOU. SO PROCEED IMMEDIATELY AND COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE. I AM RATHER SPEECHLESS AT THE MOMENT AS THE ANTICIPATION OF THIS LONG AWAITED MOMENT IS ABOUT TO ARRIVE. PERSONALLY, I WOULD ADVISE YOU TO GO AHEAD AND CONCLUDE THE REMITTANCE OF YOUR PAYMENT CONSIDERING YOU HAVE COME A LONG WAY PURSUING TO YOUR PAYMENT. DRAGGING UNNECESSARY ATTENTIONS AT THIS MOMENT WILL DO US NO GOOD RATHER THAN HARM AND DAMAGE. YOU CANNOT AFFORD TO LOOSE YOUR FUND ESPECIALLY WHEN THE FEE IS NOTHING COMPARING TO YOUR APPROVED OVER DUE PAYMENT WITH THIS OFFICE THE INTERNATIONAL MONETARY FUND (IMF), SO I WILL ADVICE YOU TO PROCEED AND COMPLETE THE TRANSFER OF YOUR SAID FUND BECAUSE RIGHT NOW I DON'T KNOW WHAT ELSE TO SAY AS YOU KNOW THAT I AM ONLY A WORKER AT THIS OFFICE AND I WORK ACCORDING TO THERE DIRECTIVES. NOW LISTEN AND LISTEN VERY GOOD, I HAVE PROMISE YOU THAT I AM GOING TO HELP YOU GET THE TRANSFER COMPLETED INTO YOUR BANK ACCOUNT WHICH I FULLY KNOWS THAT I CAN DO EXACTLY WHAT I HAVE PROMISED YOU BUT IF YOU FEEL YOU DON'T TRUST ME THEN LETS FORGET ABOUT EVERYTHING, SO INVOLVING A THIRD PARTY WILL DO US KNOW GOOD RATHER THAN ATTRACTING MORE AND MORE ATTENTIONS TO YOUR BUSINESS TRANSACTION AND YOUR PRIVATE MONEY. I AM HAPPY THAT YOU HAVE EXPRESSED YOUR THOUGHT DUE TO YOUR PAST EXPERIENCE WITH THE NONE OFFICIAL OFFICERS OF THIS OUR GREAT COUNTRY AND ALSO WHAT YOU HAVE BEEN HEARING, WHICH I PROMISE YOU THAT YOU WILL NOT EXPERIENCE SUCH A THING IN YOUR LIFE AGAIN OR IN THIS PRESENT TRANSACTION. BUT MY DEAR, DO NOT BE DECEIVED BY SUCH THOUGHT THIS TIME BECAUSE THEY WILL NOT HELP YOU FOR GOOD, I MUST LET YOU KNOW THAT IT IS AGAINST MY DOCTRINE AND RELIGION AS A CHRISTIAN TO STEAL, GOD WILL BEAR ME WITNESS THAT I HAVE NEVER HAD THAT THOUGH OF EVIL FOR YOU, I HAVE NEVER EVEN IMAGINE OF LYING TO YOU, LET ME PERISH FOR EVER IN THE BOTTOMLESS PITT OF HELL, IF I AM HERE TO DECEIVE YOU. I KNOW VERY WELL THAT YOU MAY HAVE HAD OF THE ROUGH TRIALS AND TRIBULATION GOING ON IN THIS PRESENT WORLD AND I MUST TELL YOU THAT TRIBULATION AND TRIAL WILL ONLY LAST FOR A WHILE, BUT JOY COMES IN THE MORNING. IF YOU HAVE FAITH LIKE A MUSTER SEED, YOUR GOOD DREAMS WILL DEFINITELY BECOME REALITY. GOD WILL DO IT FOR YOU AND I, THEREFORE, ACCEPT AND CLAIM YOUR BLESSINGS NOW. I WISH TO LET YOU KNOW THAT IF I LIE TO YOU, I HAVE COMMITTED SIN AGAINST GOD ALMIGHTY, AGAINST THE HOLY SPIRIT, AND AGAINST YOU AS A HUMAN. AS THE BIBLE SAYS ?NO SINNER WILL GO UNPUNISHED, SO WHAT DOES IT PROFIT ME TO ENJOY TODAY AND SUFFER TILL THE END OF MY LIFE, ALSO SUFFER PUNISHMENTS FROM OUR CREATOR WHOM WE ALL SHALL ANSWER TO AND GIVE ACCOUNT OF HOW WE LIVED OUR LIVES HERE ON EARTH. BY THE WAY I URGE YOU TO GO ON YOUR KNEELS TONIGHT AND PRAY ASKING GOD TO SHOW YOU THIS DEAL AND THE POSSIBLE OUTCOME OF IT. THEN GO TO BED. I AM VERY SURE THAT THE TRUE GOD WHOM YOU AND I ARE SERVING WILL REVEAL THE OUTCOME TO YOU. ONCE YOU REPLACE YOUR NEGATIVE THOUGHTS WITH POSITIVE ONES, YOU WILL START HAVING POSITIVE RESULTS IN THIS DEAL, I AM ONLY DOING THIS BECAUSE I FULLY KNOW THAT THIS IS FOR REAL AND I WILL GET SOMETHING OUT OF IT FOR MY WORK WELL DONE ONCE YOU RECEIVE THE SAID FUNDS IN YOUR BANK ACCOUNT AND START MAKING WITHDRAWALS. FOLLOWING YOUR EMAIL RESPONSE TO THIS OFFICE, WE HAVE RECEIVED AND ACKNOWLEDGED THE RECEIPT OF YOUR EMAIL AND THE CONTENT HAS BEEN WELL NOTED. YOUR EMAIL HAS BEEN RECEIVED AND THE CONTENT WELL NOTED. YOU WILL HAVE TO MAKE SURE THAT YOU COMPLETE YOUR FUND TRANSFER TODAY, SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THE FEDERAL GOVERNMENT OF NIGERIA, PROCEED IMMEDIATELY AND SEND THE NEEDED FEE OF US$200.00 TO ENABLE US COMPLETE YOUR FUND TRANSFER TODAY. NOTE THAT ALL ARRANGEMENTS HAS BEEN COMPLETED FOR THE IMMEDIATE TRANSFER OF THE SAID FUNDS INTO YOUR BANK ACCOUNT WITH IMMEDIATE EFFECT UPON THE RECEIPT OF THE REQUIRED FEE TODAY. SO DO GET BACK TO ME AS SOON AS POSSIBLE. NOW LISTEN VERY GOOD, I AM NOT HERE TO PLAY OR TO BE WASTING YOUR TIME OR MINE IF THIS TRANSACTION IS NOT FOR REAL AND THE ONLY THING WHY I AM FIGHTING AND WORKING HARD TO TRANSFER YOUR SAID APPROVED FUNDS INTO YOUR BANK ACCOUNT IS BECAUSE ONCE YOU ARE ABLE TO RECEIVE IT AND START MAKING WITHDRAWAL FROM YOUR ACCOUNT, YOU WILL IMMEDIATELY REGAIN YOUR FINANCIAL FREEDOM AND HAVE ENOUGH MONEY TO LIVE ON AND ESTABLISH A GOOD BUSINESS FOR YOURSELF AND YOUR FAMILY, THEN YOU WILL COMPENSATE ME FOR MY JOB WELL DONE AND FOR ME BEEN A REVEREND FATHER OF THE HOLLY CATHOLIC CHURCH, I HAVE SWEAR TO MY GOD THAT I WILL NOT LIE BEFORE HIM, SO GOD IN HEAVEN KNOWS THAT I AM NOT A LIAR, I AM ONLY WORKING FOR YOU AND I MUST FOLLOW THE RIGHT PROCEDURES. BE GUARANTEED AND ASSURED THAT YOUR APPROVED FUNDS WILL BE TRANSFERRED INTO YOUR PROVIDED BANK ACCOUNT UPON THE RECEIPT CONFIRMATION OF THE SAID FUNDS WITHIN THE NEXT 7 WORKING HOURS AS SOON AS YOU ARE ABLE TO COMPLY WITH THE PAYMENT DIRECTIVES, AS THAT IS THE ONLY THING DELAYING YOU NOT TO RECEIVE YOUR SAID FUNDS AT THE MOMENT. HOW EVER; NOTE THAT EVERY NECESSARY ARRANGEMENT HAS BEEN CONCLUDED FOR THE IMMEDIATE TRANSFER OF YOUR SAID FUNDS WITHIN THE NEXT 7HRS RECEIPT CONFIRM OF THE STATED FEE, THUS, THE SAID CHARGES IS TO COMPLETE THE TRANSFER OF YOUR SAID FUNDS INTO YOUR SAID BANK ACCOUNT, ALSO NOTE THAT THIS IS NOT THE MAKING OF THIS INTERNATIONAL MONETARY FUND (IMF) RATHER, A STRINGENT MEASURE IMPOSED BY INTERNATIONAL MONETARY TASK FORCE TO TRACK DOWN ILLEGAL MONEY LAUNDRY ACTIVISTS AND TERRORIST SPONSORS. ASSUMING THERE IS NO BOND ON THE FUND, ALL WE COULD HAVE DONE IS TO SUBTRACT THE CHARGES FROM THE APPROVED AMOUNT AND MAKE THINGS EASIER FOR YOU. BUT BECAUSE THE FUND WAS COMPLETELY BONDED FOR SECURITY REASONS, THERE IS NO WAY WE CAN DEDUCT OR ADD TO IT WHEN FUND IS BONDED FOR SECURITY REASONS, SO SHOULD YOU WISH TO COMPLETE YOUR FUND TRANSFER WITH THIS OFFICE, YOU HAVE TO ACT ACCORDINGLY TO ENABLE US WORK FOR YOU IMMEDIATELY. THIS LETTER IS OUR 100% BOND UNCONDITIONAL GUARANTEE TO YOU, AND FORMS A LITERALLY DEED FOR THIS PAYMENT, IT ALSO FORMS AN INTEGRAL PART OF ALL OUR CONFIRMATIONS / GUARANTEE COMMITTED TO YOU IN RESPECT OF THIS MATTER. FOR OUR INVOLVEMENT IN THIS ARRANGEMENT, THIS IS A 'DEED OF UNDERSTANDING? BINDING ON THIS PAYMENT APPROVED IN YOUR FAVOR. FINALLY, WE UNCONDITIONALLY AND IRREVOCABLY GUARANTEE TO YOU THAT LESS THAN 7 HOURS CONFIRMATION RECEIPT OF THE ABOVE STATED FEES OF $200.00 USD, I SHALL GLADLY RELEASE YOUR APPROVED PAYMENT INTO YOUR AUTHORIZED BANK ACCOUNT WITHOUT ANY FURTHER DELAY. RECEIVERS NAME: CHINOYEREM LILIAN RECEIVERS ADDRESS: PLOT 143, AHMADU BELLO WAY, VICTORIA ISLAND, 23401, LAGOS. COUNTRY: NIGERIA SENDERS NAME: SENDERS ADDRESS: AMOUNT: $200.00 USD M.T.C.N NUMBER: TEXT QUESTION: IN GOD TEXT ANSWER: WE TRUST WE WANT YOU TO KNOW THAT WE ARE INDEED VERY VERY SORRY FOR ANY INCONVENIENCES ANY DELAY THIS MUST HAVE CAUSED YOU IN HAVING YOUR FUND PAID OUT TO YOU LONG BEFORE NOW. CONFIRM THE RECEIPT OF THIS E-MAIL BY YOU IMMEDIATELY AND BE REST ASSURED THAT YOU WILL BE SMILING TO YOUR BANK ONCE YOU COMPLY WITH THE ABOVE DIRECTIVES NOW. NOW YOUR NEW PAYMENT REFERENCE NO.-35460021, ALLOCATION NO: 674632 PASSWORD NO: 339331, PIN CODE NO: 55674 AND YOUR CERTIFICATE OF MERIT PAYMENT NO: 103, CBN RELEASED CODE NO: 0763; IMMEDIATE TELEX CONFIRMATION NO: -1114433; SECRET CODE NO: XXTN013, HAVING RECEIVED THESE VITAL PAYMENT NUMBERS, YOU ARE QUALIFIED NOW TO RECEIVED AND CONFIRM YOUR PAYMENT IMMEDIATELY WITHIN THE NEXT 7HRS FROM THE HELP OF THIS HONORABLE OFFICE, FEDERAL GOVERNMENT OF NIGERIA IMMEDIATELY WE RECEIVED THE REQUIRED FEE. YOUR URGENT RESPONSE TO THIS E-MAIL NOW WILL GO A LONG WAY IN HELPING US ENSURE YOUR PAYMENT IS RELEASED TO YOU WITHIN 7 HOURS OF YOU ACTING AS INSTRUCTED YOU NOW. RESPOND BACK IMMEDIATELY. HONORABLE REV. MIKE DADA. DIRECTOR INTER-CONTINENTAL DEBT RECONCILIATION DEPT. INTERNATIONAL MONETARY FUND (IMF) FOR MORE INFORMATION, PLEASE KINDLY CALL ME IMMEDIATELY USING: (0092348027127674 OR +2348027127674) SpamAssassin Report (spam score: 15.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [197.211.58.54 listed in dnsbl.sorbs.net] 2.3 FIN_FREE BODY: Freedom of a financial nature 0.9 URG_BIZ BODY: Contains urgent matter 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [205.209.158.98 listed in bb.barracudacentral.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.2 UPPERCASE_75_100 message body is 75-100% uppercase 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.0 FROM_MISSP_USER From misspaced, from "User" 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 19:20:14Note and reply soon http://scammed.by/scam.php?id=198884 Dear One, With all sincerity and humility that I write you this mail I am undergoing medical treatment for cancer of the breast. From all indication my conditions is really deteriorating and it is quite obvious that I may not live up to the next four months. I was married to my late husband for twenty years without a child. my husband died in a fatal motor accident. Since his death I decided not to re marry. I have a deposit of Seven Million United States Dollars (US$7,000,000) in a bank which I have decided to give to charities. It is my wish to see that this money is invested.The proceeds of the investment shall be shared between you and any charity cause of your choice I will send you full details as soon as I receive your reply, Mrs. Marilyn Graham SpamAssassin Report (spam score: 25.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [5.189.129.102 listed in bb.barracudacentral.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [112.176.156.253 listed in zen.spamhaus.org] 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 NSL_RCVD_HELO_USER Received from HELO User 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ham_gadd[at]tlen.pl) 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [5.189.129.102 listed in psbl.surriel.com] 0.9 SPF_FAIL SPF: sender does not match SPF record (fail) 1.2 MISSING_HEADERS Missing To: header 0.7 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN) 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 1.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 0.0 FROM_MISSPACED From: missing whitespace 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider 3.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 19:08:32Pending Transfer Case QAE3418http://scammed.by/scam.php?id=198883 -- Good Day, This is to notify you that your due Funds have been Release and Approved for immediate Transfer to you. You are advised as the true beneficiary to respond to this Final Notification Letter. Please do so by contacting me as soon as possible for purpose of Clarification. I remain your Brother in the Lord Almighty. Best regards, Rev. Ryan Jackson. SpamAssassin Report (spam score: 0.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.170 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.170 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-09-27 19:03:43Greetings from the United Nations UN http://scammed.by/scam.php?id=198882 MAILING ADDRESS: United Nations Development Programmed United Nations House Plot 617/618, Diplomatic Zone, Central Area District, P.M.B. 2851, Garki, Abuja, Nigeria. Email. unitednation@mail2robert.com Telephone: +234-64258303 Greetings from the United Nations (UN) Office. Please be informed that during our investigations, we discovered that you were being subjected to strict Bureaucratic Bottlenecks that will make it difficult for you to claim your parcel/Fund. In this way, because we observed that some Courier/Bank keeps this parcel in their office for business agenda and that is why we step in to ensure that you get your fund. We have stopped all illegal arrangement and we will see that your fund is delivered to you in adherence to normal International Delivery Regulations. Most of the requirements from these Courier and Bank are not official and not in compliance with International Delivery Regulations so we will ensure that any process that has to be followed is in compliance with the International Delivery Regulations. We have checked your File NO: BR/227/9005666/00 and everything is completed in your file except that you are yet to secure Clearance from the Financial Action Task Force (FATF) and equally clear off the safe keeping which your Consignment/ Parcel accumulated. This requirement has generated about $3,850 us but because we have interfered into your case the board of trustees has decided to pay 90% of the fees on your behalf, So you are now mandated to pay only 0.1% of the fees which is $100.00 us only. This Clearance is important since you are claiming huge sum of money, it is legally and legitimately required that you secure the Clearance from the (FATF) so that when the fund is delivered to you, it will not be tagged "Money Laundering". Meanwhile In order to secure this clearance, you will need to send the fee with the below details via money gram or western union money transfer. Here is the Payment Information?s: Receivers Name:...........CHINEYE CHUKWU Receivers Location:......Lagos Nigeria Test Question:...............Holy Mary Test Answer:................Pray for us Amount:......................US$100 MTCN:.................... Sender name:............. Sender address:......... Sender phone number:.... Try your possible best to send the money today so that the delivery of your parcel will commence and you will be rest assure to receive your package within 48 hours express delivery as all the modalities regarding the smooth delivery of your parcel has been put in place pending when you will send the money. The report reaching us shows that you have close to $7.5 million United state worth of package with the respective authority. We await your urgent response to this office so that we can move forward. Best Regard Mr EZE EGO. Telephone +234-64258303 United Nations Office for West Africa (UNOWA). Making the world a better place. --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus SpamAssassin Report (spam score: 13.0) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [153.122.52.21 listed in bb.barracudacentral.org] 0.9 URG_BIZ BODY: Contains urgent matter 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 2.6 FROM_NO_USER From: has no local-part before @ sign 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 MISSING_MID Missing Message-Id: header 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.4 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.1 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 2016-09-27 18:33:10Cancelled: Attn: Our Esteem Customer http://scammed.by/scam.php?id=198880 SEP 27 "Attn: Our Esteem Customer," has been cancelled When Tuesday, 27 September 2016 06:00 AM to 07:00 AM (GMT) Greenwich Mean Time - Dublin / Edinburgh / Lisbon / London Message Attn: Our Esteem Customer, We have deposited the check of your fund ($7.50000000USD) through Money Gram department after our final meeting regarding your fund,All you will do is to contact Money Gram director Dr.David Hilliard via E-mail. He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as, Receiverand#39;s Name_______________ Address: ________________ Country: ____________ City:________________ Phone Number: _____________ Though, Mr.Johnston Meinmen has sent $6000 in your name today Senders so contact Dr.David Hilliard or call him +229-99075582 soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to enable you to pick the $6000 Please let us know as soon as you received all your fund, Best Regards Mr. Alex Benjamin This Event invitation was sent from Yahoo Calendar Attachment content - invite.ics: BEGIN:VCALENDAR PRODID://Yahoo//Calendar//EN VERSION:2.0 METHOD:CANCEL BEGIN:VEVENT SUMMARY:Attn: Our Esteem Customer\, DESCRIPTION:Attn: Our Esteem Customer\,\n\nWe have deposited the check of y our fund ($7.500`000`00USD) through Money Gram department after our final meeting regarding your fund\,All you will do is to contact Money Gram dire ctor Dr.David Hilliard via E-mail. He will give you direction on how you w ill be receiving the funds daily.Remember to send him your Full informatio n to avoid wrong transfer such as\,\n\nReceiver's Name_______________\nAdd ress: ________________\nCountry: ____________\nCity:________________\nPhon e Number: _____________\n\nThough\, Mr.Johnston Meinmen has sent $6000 in your name today Senders so contact Dr.David Hilliard or call him +229-9907 5582 soon as you receive this email and tell him to give you the Mtcn\, se nder name and question/answer to enable you to pick the $6000 Please let u s know as soon as you received all your fund\,\n\nBest Regards\nMr. Alex B enjamin CLASS:PUBLIC DTSTART;TZID=Europe/London:20160927T060000Z DTEND;TZID=Europe/London:20160927T070000Z PRIORITY:0 SEQUENCE:281 STATUS:CONFIRMED UID:403b645c-4093-48be-b4b0-36c20f8232d7 DTSTAMP:20160927T172236Z ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:starsinheaven1967@yahoo.ca ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stephen.embree@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stephen@un.org ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sterlingtoys@aol.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:steven.shaw1@virgin.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stevren@aol.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stolen1222@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stredman777@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:strs.smith@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stubbs_e@sbcglobal.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stubrollay@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:suchung@accesscomm.ca ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:suelos@caribe.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sule_ado@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sun.rainbow14@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:susanwitry@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sutris.selamat@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sutton@philips.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sw.premsukh@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:swduns@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sweet_wisc_gal@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sweetie3061@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sweetie4479331@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:swilliamsa@ameriplan.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:swillie66@inbox.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:swoopechicago@aol.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:swwprinting@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:crystal.striker@rocketmail.c om ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:crystal026@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:crystalparham2005@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:cscoop98@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:csfoundation@yahoo.co.uk ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:cspr312@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:ctinabarnes@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:ctrevino1988@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:cuhiteducation@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:cunninghamsherrod@ymail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:cupp_tina@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:curiousvic7@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:curryricharda@yahoo.com ORGANIZER;CN=www.moneygram officefile;SENT-BY="mailto:www.moneygramofficefi le@yahoo.com":mailto:www.moneygramofficefile@yahoo.com X-YAHOO-YID:gsoou2umlqxix6prmoggvmlrhlsndyu5abjafx63 TRANSP:OPAQUE STATUS:CONFIRMED X-YAHOO-USER-STATUS:BUSY X-YAHOO-EVENT-STATUS:BUSY END:VEVENT BEGIN:VTIMEZONE TZID:Europe/London TZURL:http://tzurl.org/zoneinfo/Europe/London X-LIC-LOCATION:Europe/London BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19810329T010000 RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19961027T020000 RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU END:STANDARD BEGIN:STANDARD TZOFFSETFROM:-000115 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:18471201T000000 RDATE:18471201T000000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19160521T020000 RDATE:19160521T020000 RDATE:19170408T020000 RDATE:19180324T020000 RDATE:19190330T020000 RDATE:19200328T020000 RDATE:19210403T020000 RDATE:19220326T020000 RDATE:19230422T020000 RDATE:19240413T020000 RDATE:19250419T020000 RDATE:19260418T020000 RDATE:19270410T020000 RDATE:19280422T020000 RDATE:19290421T020000 RDATE:19300413T020000 RDATE:19310419T020000 RDATE:19320417T020000 RDATE:19330409T020000 RDATE:19340422T020000 RDATE:19350414T020000 RDATE:19360419T020000 RDATE:19370418T020000 RDATE:19380410T020000 RDATE:19390416T020000 RDATE:19400225T020000 RDATE:19460414T020000 RDATE:19470316T020000 RDATE:19480314T020000 RDATE:19490403T020000 RDATE:19500416T020000 RDATE:19510415T020000 RDATE:19520420T020000 RDATE:19530419T020000 RDATE:19540411T020000 RDATE:19550417T020000 RDATE:19560422T020000 RDATE:19570414T020000 RDATE:19580420T020000 RDATE:19590419T020000 RDATE:19600410T020000 RDATE:19610326T020000 RDATE:19620325T020000 RDATE:19630331T020000 RDATE:19640322T020000 RDATE:19650321T020000 RDATE:19660320T020000 RDATE:19670319T020000 RDATE:19680218T020000 RDATE:19720319T020000 RDATE:19730318T020000 RDATE:19740317T020000 RDATE:19750316T020000 RDATE:19760321T020000 RDATE:19770320T020000 RDATE:19780319T020000 RDATE:19790318T020000 RDATE:19800316T020000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19161001T030000 RDATE:19161001T030000 RDATE:19170917T030000 RDATE:19180930T030000 RDATE:19190929T030000 RDATE:19201025T030000 RDATE:19211003T030000 RDATE:19221008T030000 RDATE:19230916T030000 RDATE:19240921T030000 RDATE:19251004T030000 RDATE:19261003T030000 RDATE:19271002T030000 RDATE:19281007T030000 RDATE:19291006T030000 RDATE:19301005T030000 RDATE:19311004T030000 RDATE:19321002T030000 RDATE:19331008T030000 RDATE:19341007T030000 RDATE:19351006T030000 RDATE:19361004T030000 RDATE:19371003T030000 RDATE:19381002T030000 RDATE:19391119T030000 RDATE:19451007T030000 RDATE:19461006T030000 RDATE:19471102T030000 RDATE:19481031T030000 RDATE:19491030T030000 RDATE:19501022T030000 RDATE:19511021T030000 RDATE:19521026T030000 RDATE:19531004T030000 RDATE:19541003T030000 RDATE:19551002T030000 RDATE:19561007T030000 RDATE:19571006T030000 RDATE:19581005T030000 RDATE:19591004T030000 RDATE:19601002T030000 RDATE:19611029T030000 RDATE:19621028T030000 RDATE:19631027T030000 RDATE:19641025T030000 RDATE:19651024T030000 RDATE:19661023T030000 RDATE:19671029T030000 RDATE:19711031T030000 RDATE:19721029T030000 RDATE:19731028T030000 RDATE:19741027T030000 RDATE:19751026T030000 RDATE:19761024T030000 RDATE:19771023T030000 RDATE:19781029T030000 RDATE:19791028T030000 RDATE:19801026T030000 RDATE:19811025T020000 RDATE:19821024T020000 RDATE:19831023T020000 RDATE:19841028T020000 RDATE:19851027T020000 RDATE:19861026T020000 RDATE:19871025T020000 RDATE:19881023T020000 RDATE:19891029T020000 RDATE:19901028T020000 RDATE:19911027T020000 RDATE:19921025T020000 RDATE:19931024T020000 RDATE:19941023T020000 RDATE:19951022T020000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0100 TZOFFSETTO:+0200 TZNAME:BDST DTSTART:19410504T020000 RDATE:19410504T020000 RDATE:19420405T020000 RDATE:19430404T020000 RDATE:19440402T020000 RDATE:19450402T020000 RDATE:19470413T020000 END:DAYLIGHT BEGIN:DAYLIGHT TZOFFSETFROM:+0200 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19410810T030000 RDATE:19410810T030000 RDATE:19420809T030000 RDATE:19430815T030000 RDATE:19440917T030000 RDATE:19450715T030000 RDATE:19470810T030000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19681027T000000 RDATE:19681027T000000 END:STANDARD BEGIN:STANDARD TZOFFSETFROM:+0000 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19960101T000000 RDATE:19960101T000000 END:STANDARD END:VTIMEZONE END:VCALENDAR SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [98.138.121.227 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (www.moneygramofficefile[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 MISSING_MID Missing Message-Id: header 0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 18:22:50Invitation: Attn: Our Esteem Customer http://scammed.by/scam.php?id=198881 SEP 27 "Attn: Our Esteem Customer," When Tuesday, 27 September 2016 06:00 AM to 07:00 AM (GMT) Greenwich Mean Time - Dublin / Edinburgh / Lisbon / London Message Attn: Our Esteem Customer, We have deposited the check of your fund ($7.50000000USD) through Money Gram department after our final meeting regarding your fund,All you will do is to contact Money Gram director Dr.David Hilliard via E-mail. He will give you direction on how you will be receiving the funds daily.Remember to send him your Full information to avoid wrong transfer such as, Receiverand#39;s Name_______________ Address: ________________ Country: ____________ City:________________ Phone Number: _____________ Though, Mr.Johnston Meinmen has sent $6000 in your name today Senders so contact Dr.David Hilliard or call him +229-99075582 soon as you receive this email and tell him to give you the Mtcn, sender name and question/answer to enable you to pick the $6000 Please let us know as soon as you received all your fund, Best Regards Mr. Alex Benjamin Invitees shean.muggler@outlook.com shenson@niobrara.com shepardcareer@yahoo.com sherlock633@yahoo.com shine196342@yahoo.com 35 more... Respond This Event invitation was sent from Yahoo Calendar Attachment content - invite.ics: BEGIN:VCALENDAR PRODID://Yahoo//Calendar//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT SUMMARY:Attn: Our Esteem Customer\, DESCRIPTION:Attn: Our Esteem Customer\,\n\nWe have deposited the check of y our fund ($7.500`000`00USD) through Money Gram department after our final meeting regarding your fund\,All you will do is to contact Money Gram dire ctor Dr.David Hilliard via E-mail. He will give you direction on how you w ill be receiving the funds daily.Remember to send him your Full informatio n to avoid wrong transfer such as\,\n\nReceiver's Name_______________\nAdd ress: ________________\nCountry: ____________\nCity:________________\nPhon e Number: _____________\n\nThough\, Mr.Johnston Meinmen has sent $6000 in your name today Senders so contact Dr.David Hilliard or call him +229-9907 5582 soon as you receive this email and tell him to give you the Mtcn\, se nder name and question/answer to enable you to pick the $6000 Please let u s know as soon as you received all your fund\,\n\nBest Regards\nMr. Alex B enjamin CLASS:PUBLIC DTSTART;TZID=Europe/London:20160927T060000Z DTEND;TZID=Europe/London:20160927T070000Z PRIORITY:0 SEQUENCE:280 STATUS:CONFIRMED UID:403b645c-4093-48be-b4b0-36c20f8232d7 DTSTAMP:20160927T172222Z ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:shean.muggler@outlook.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:shenson@niobrara.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:shepardcareer@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sherlock633@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:shine196342@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:shirley@iw.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:shirley@shirleyshor.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:siler@email.wcu.edu ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:silverbear126195@comcast.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:silvercloud@ntlworld.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:singhmamman@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sirotavicius@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sixfoot3scorpion@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sjefsp@zonnet.nl ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sjllow@aol.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:skacinda@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:skboris@yahoo.fr ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:slamhawg_22@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:smerrida@rocketmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:smf542@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:smith.long@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:smonahan3108@charter.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:snagersnager@yahoo.fi ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sol_402002@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:solomonreata@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sonnyfather@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sp_regmi@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:spacket2003@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:spanetta@student.umass.edu ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sparrowtip@hotmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:speciallady7114@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:speedpeddler@rglobal.net ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sqcbears@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sres.flightservices@gmail.co m ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:srikesh@rpg.in ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:srmd22@gmail.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:sscatcher@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stacytavares@yahoo.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:stannes@roadrunner.com ATTENDEE;ROLE=REQ_PARTICIPANT;RSVP=TRUE:mailto:starkraven8232@aol.com ORGANIZER;CN=www.moneygram officefile;SENT-BY="mailto:www.moneygramofficefi le@yahoo.com":mailto:www.moneygramofficefile@yahoo.com X-YAHOO-YID:gsoou2umlqxix6prmoggvmlrhlsndyu5abjafx63 TRANSP:OPAQUE STATUS:CONFIRMED X-YAHOO-USER-STATUS:BUSY X-YAHOO-EVENT-STATUS:BUSY END:VEVENT BEGIN:VTIMEZONE TZID:Europe/London TZURL:http://tzurl.org/zoneinfo/Europe/London X-LIC-LOCATION:Europe/London BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19810329T010000 RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19961027T020000 RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU END:STANDARD BEGIN:STANDARD TZOFFSETFROM:-000115 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:18471201T000000 RDATE:18471201T000000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0000 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19160521T020000 RDATE:19160521T020000 RDATE:19170408T020000 RDATE:19180324T020000 RDATE:19190330T020000 RDATE:19200328T020000 RDATE:19210403T020000 RDATE:19220326T020000 RDATE:19230422T020000 RDATE:19240413T020000 RDATE:19250419T020000 RDATE:19260418T020000 RDATE:19270410T020000 RDATE:19280422T020000 RDATE:19290421T020000 RDATE:19300413T020000 RDATE:19310419T020000 RDATE:19320417T020000 RDATE:19330409T020000 RDATE:19340422T020000 RDATE:19350414T020000 RDATE:19360419T020000 RDATE:19370418T020000 RDATE:19380410T020000 RDATE:19390416T020000 RDATE:19400225T020000 RDATE:19460414T020000 RDATE:19470316T020000 RDATE:19480314T020000 RDATE:19490403T020000 RDATE:19500416T020000 RDATE:19510415T020000 RDATE:19520420T020000 RDATE:19530419T020000 RDATE:19540411T020000 RDATE:19550417T020000 RDATE:19560422T020000 RDATE:19570414T020000 RDATE:19580420T020000 RDATE:19590419T020000 RDATE:19600410T020000 RDATE:19610326T020000 RDATE:19620325T020000 RDATE:19630331T020000 RDATE:19640322T020000 RDATE:19650321T020000 RDATE:19660320T020000 RDATE:19670319T020000 RDATE:19680218T020000 RDATE:19720319T020000 RDATE:19730318T020000 RDATE:19740317T020000 RDATE:19750316T020000 RDATE:19760321T020000 RDATE:19770320T020000 RDATE:19780319T020000 RDATE:19790318T020000 RDATE:19800316T020000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19161001T030000 RDATE:19161001T030000 RDATE:19170917T030000 RDATE:19180930T030000 RDATE:19190929T030000 RDATE:19201025T030000 RDATE:19211003T030000 RDATE:19221008T030000 RDATE:19230916T030000 RDATE:19240921T030000 RDATE:19251004T030000 RDATE:19261003T030000 RDATE:19271002T030000 RDATE:19281007T030000 RDATE:19291006T030000 RDATE:19301005T030000 RDATE:19311004T030000 RDATE:19321002T030000 RDATE:19331008T030000 RDATE:19341007T030000 RDATE:19351006T030000 RDATE:19361004T030000 RDATE:19371003T030000 RDATE:19381002T030000 RDATE:19391119T030000 RDATE:19451007T030000 RDATE:19461006T030000 RDATE:19471102T030000 RDATE:19481031T030000 RDATE:19491030T030000 RDATE:19501022T030000 RDATE:19511021T030000 RDATE:19521026T030000 RDATE:19531004T030000 RDATE:19541003T030000 RDATE:19551002T030000 RDATE:19561007T030000 RDATE:19571006T030000 RDATE:19581005T030000 RDATE:19591004T030000 RDATE:19601002T030000 RDATE:19611029T030000 RDATE:19621028T030000 RDATE:19631027T030000 RDATE:19641025T030000 RDATE:19651024T030000 RDATE:19661023T030000 RDATE:19671029T030000 RDATE:19711031T030000 RDATE:19721029T030000 RDATE:19731028T030000 RDATE:19741027T030000 RDATE:19751026T030000 RDATE:19761024T030000 RDATE:19771023T030000 RDATE:19781029T030000 RDATE:19791028T030000 RDATE:19801026T030000 RDATE:19811025T020000 RDATE:19821024T020000 RDATE:19831023T020000 RDATE:19841028T020000 RDATE:19851027T020000 RDATE:19861026T020000 RDATE:19871025T020000 RDATE:19881023T020000 RDATE:19891029T020000 RDATE:19901028T020000 RDATE:19911027T020000 RDATE:19921025T020000 RDATE:19931024T020000 RDATE:19941023T020000 RDATE:19951022T020000 END:STANDARD BEGIN:DAYLIGHT TZOFFSETFROM:+0100 TZOFFSETTO:+0200 TZNAME:BDST DTSTART:19410504T020000 RDATE:19410504T020000 RDATE:19420405T020000 RDATE:19430404T020000 RDATE:19440402T020000 RDATE:19450402T020000 RDATE:19470413T020000 END:DAYLIGHT BEGIN:DAYLIGHT TZOFFSETFROM:+0200 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19410810T030000 RDATE:19410810T030000 RDATE:19420809T030000 RDATE:19430815T030000 RDATE:19440917T030000 RDATE:19450715T030000 RDATE:19470810T030000 END:DAYLIGHT BEGIN:STANDARD TZOFFSETFROM:+0100 TZOFFSETTO:+0100 TZNAME:BST DTSTART:19681027T000000 RDATE:19681027T000000 END:STANDARD BEGIN:STANDARD TZOFFSETFROM:+0000 TZOFFSETTO:+0000 TZNAME:GMT DTSTART:19960101T000000 RDATE:19960101T000000 END:STANDARD END:VTIMEZONE END:VCALENDAR SpamAssassin Report (spam score: 4.3) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [98.138.121.168 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (www.moneygramofficefile[at]yahoo.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 1.0 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received' headers 0.0 MISSING_MIME_HB_SEP BODY: Missing blank line between MIME header and body 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.1 MISSING_MID Missing Message-Id: header 0.5 REPTO_QUOTE_YAHOO Yahoo! doesn't do quoting like this 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 18:22:29RE: Good Newshttp://scammed.by/scam.php?id=198879 From: Metz Bijman Sent: Tuesday, September 27, 2016 8:05 AM To: Metz Bijman Subject: Good News Good day, I Represent Ivan Weng Textiles a reputable company here in the Asia. We produce and distribute clothing materials such as batiks, assorted fabrics and traditional costume worldwide. Would you like to work online from home and get paid on each transaction? Wing Wan textiles needs a Book-Keeper in the United States, Canada, South America, Asia, Mexico, Australia and parts of Europe. You could work from home and getting paid for the services being rendered without leaving or Affecting your present job.Ivan Weng Textiles is recruiting individuals to work for the company as Representatives in the countries listed above. You will earn 5% commission of each payment you receive from our customers.If you interested get back to us with your. FIRST NAME: LAST NAME: ADDRESS (NOT P O BOX): CITY: STATE: ZIP CODE: COUNTRY: PHONE NUMBER (S): GENDER: AGE: NATIONALITY: Regard Mr. Ivan Weng *****DISCLAIMER***** De informatie verzonden met dit e-mailbericht (en bijlagen) is uitsluitend bestemd voor de geadresseerde(n) en zij die van de geadresseerde(n) toestemming kregen dit bericht te lezen. Gebruik door anderen dan geadresseerde(n) is verboden. De informatie in dit e-mailbericht (en bijlagen) kan vertrouwelijk van aard zijn en kan binnen het bereik vallen van een geheimhoudingsplicht en een verschonings- recht. Externe e-mail wordt door Veiligheidsregio Kennemerland niet gebruikt voor het aangaan van verplichtingen. Aan de inhoud van dit bericht kunnen geen rechten worden ontleend. SpamAssassin Report (spam score: 0.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.46 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.46 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2016-09-27 18:18:59No subjecthttp://scammed.by/scam.php?id=198878 I am in the military unit here in Afghanistan,we have some amount of funds that we want to move out of the country.My partners and I need a good partner someone we can trust. It is risk free and legal. Reply to this email majordennishornbeck11@gmail.com Regards, Major Dennis Hornbeck. SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.43 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.43 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (poonsm[at]singnet.com.sg) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.7 RISK_FREE No risk! 2016-09-27 17:58:05No subjecthttp://scammed.by/scam.php?id=198877 I am in the military unit here in Afghanistan,we have some amount of funds that we want to move out of the country.My partners and I need a good partner someone we can trust. It is risk free and legal. Reply to this email majordennishornbeck11@gmail.com Regards, Major Dennis Hornbeck. SpamAssassin Report (spam score: 7.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.176 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.176 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (poonsm[at]singnet.com.sg) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.7 RISK_FREE No risk! 2016-09-27 17:58:04DELIVERY OF YOUR DIPLOMATIC LUGGAGE 122http://scammed.by/scam.php?id=198874 Attention On behalf of the board and management of International Monetary Financial Committee. I Christine Lagarde, the Operations Manager wishes to inform you that your consignment/fund tagged diplomatic luggage 122 with Ref: No1226/X42/206 which was deposited in our vault for safe keeping is due for Immediate collection. Be informed that we have concluded all arrangements to deliver your consignment at your doorstep through diplomatic means. In line with the binding diplomatic consignment delivery policies, kindly furnish us with the following as set forth. A copy of your international passport or any other means of identification as the true consignee. The address where the above cargo/funds should be delivered to and your phone number. List the nearest international airport to your address location. Meanwhile, we urge you to treat the above requirement with utmost urgency to enable us dispense our duties and obligation accordingly thereby allowing us to serve you in a timely fashion. Upon satisfactory receipt of all the above mentioned, you will be further acquainted with the detailed delivery itinerary including information of the diplomat who will accompany your consignment. We pledge our best service at all times. Yours Faithfully, Ms.Christine Lagarde Foreign Operations Manager SpamAssassin Report (spam score: 5.5) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 TO_MALFORMED To: has a malformed address 2.6 FROM_NO_USER From: has no local-part before @ sign 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 2016-09-27 16:46:10SALUThttp://scammed.by/scam.php?id=198873 Bonjour.j'ai eu votre courriel dans le grand répertoire des e mails sur le net. Je suis très ravis et très contente de t'envoyer ce message pour demander de tes nouvelles et tisser une relation d'amitiés sincère et durable avec toi débouchant sur la franchise, le respect mutuel, le respect de l'autre et pas du tout l'hypocrisie et le mensonge surtout d'avoir la crainte de Dieu et de savoir qu'il a un Dieu qui existe et qui nous inspire de très bonne foi.En effet ,je m'appelle OLIVIA KEN STONE, je suis canadienne, célibataire, âgée de 29 ans.Je veux correspondre avec toi.Réponds moi dans mon email: oliviaguezo@yahoo.ca SpamAssassin Report (spam score: 5.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.45 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (cervaroclaudio[at]tin.it) 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.172 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2016-09-27 16:46:02Chega de brincadeiras http://scammed.by/scam.php?id=198871 Você não receberá outro e-mail meu sobre esse assunto! Então, por favor, leia com atenção! Eu me chamo Hítalo Dias, trabalho no ramo de mineração. A mais de uma década não sei o que é ter problemas financeiros! Quero te convidar a ganhar dinheiro comigo sem enrolação! A escolha é sua. Clique no que você quer para sua vida abaixo! Powered by empreenderja SpamAssassin Report (spam score: 5.4) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.8 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-27 15:56:11Talcum Powder Linked to Cancer Family Of Victim Awarded 72 Millionhttp://scammed.by/scam.php?id=198870 Free Ovarian Cancer Case Review Click Show Images SpamAssassin Report (spam score: 16.6) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [46.173.254.108 listed in zen.spamhaus.org] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: guideoakumhabithomes.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: guideoakumhabithomes.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.2 MISSING_HEADERS Missing To: header 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822 1.4 MISSING_DATE Missing Date: header 1.0 BODY_URI_ONLY Message body is only a URI in one line of text or for an image 0.0 T_REMOTE_IMAGE Message contains an external image 2016-09-27 15:38:48Exonération de charges sociales et fiscaleshttp://scammed.by/scam.php?id=198869 Ticket Kadéos® #outlook a padding: 0; body width: 100% !important; -webkit-text-size-adjust: 100%; -ms-text-size-adjust: 100%; margin: 0; padding: 0; @media only screen and (max-width:610px) .tropgros img { width:80% !important; } @media only screen and (max-width:405px) .tropgros img { width:60% !important; } Si ce message ne s'affiche pas correctement, cliquez ici Ce message vous est envoyandeacute; par LeadsLeader. D andeacute; s a b o n n e m e n t de la liste SpamAssassin Report (spam score: 13.2) pts rule name description ---- ---------------------- -------------------------------------------------- 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: topleeg.com] 2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist [URIs: effiliation-hosting.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [217.12.123.25 listed in bl.score.senderscore.com] -0.0 SPF_PASS SPF: sender matches SPF record 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: topleeg.com] 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-09-27 15:11:56Nice to meet you http://scammed.by/scam.php?id=198868 Nice to meet you, i am Miss Lisa, i am a single female from United State, but currently in Yemen for Peace keeping mission, i work for US Army/Nasa, I would love to know you more better and that is only if you do not mind to write me to my email (sgtlisa8@gmail.com) am an easy going lady that will do anything for the person i love, can you tell me something about yourself in your mail to me so that i will do the same, waiting for your sweet response. Lisa SpamAssassin Report (spam score: -0.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.51 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.51 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-09-27 15:02:30TO YOUR ATTENTIONhttp://scammed.by/scam.php?id=198866 Dearest one, Each day that passes by, I am afraid to die, but life gives me no choice, but to answer the call; my prayer each day is to have a place in Heaven. I have suffered a lot as a result of this incurable sickness! With due respect, I must apologize for this unsolicited message, I am aware that this is certainly not a conventional way of approaching an unknown person for establishment of project, But I respectfully insist you read this message carefully before you either take a decision of proceeding or deleting my message as I am optimistic it will be successful for unimaginable financial benefit for both of us and our families. I am Vanessa Garlton. A widow. Actually, I managed to get your contact details online in my desperate search for a trustworthy person to assist me in this transaction.I am a dying 64 year old woman from Scotland and financially blessed. Recently, the doctors told me i might not live longer than 3 months after they diagnosed me of chronic/acute lymphonic or myeloid[leukemia]. Leukemia is a blood cancer in both the bone marrow and in blood itself, leukemia cells crowd out normal blood cells leading to serious bleeding and infection. I have been undergoing blood transfusion and it has drained My purse and I belong to the high, but feed like a leper, as a result of sickness. My health will not permit me to carry out some of the things my heart long to achieve with the money that i have and this is the reason i am contacting you through this medium. I really need someone i can trust even if he/she is not from a christian background but someone with a pure heart and believes in honesty that can help me to distribute my fund to people through charity. My soul will rest better if they are given out to people i know will really need them rather than allow my husbands family members to lavish what i and my husband suffered for years to acquire . This will be willed to you when you agree to carry out the instructions contained in this arrangement.  In the area whereby you are not interested in this transaction please kindly delete this message immediately from your email. If you are interested, kindly provide me with your full names, country of origin and residence and direct private phone numbers Regards in sincerity, Mrs Vanessa Garlton SpamAssassin Report (spam score: 6.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP 2016-09-27 14:21:09Re Change of Funds Ownership http://scammed.by/scam.php?id=198864 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 7.8) pts rule name description ---- ---------------------- -------------------------------------------------- -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.215.41 listed in list.dnswl.org] 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.41 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-27 13:15:17Re Change of Funds Ownership http://scammed.by/scam.php?id=198863 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.48 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-27 13:15:15Re Change of Funds Ownership http://scammed.by/scam.php?id=198862 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.48 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-27 12:26:41Re Change of Funds Ownership http://scammed.by/scam.php?id=198861 Attention: Beneficiary. Re - Change of Funds Ownership. This is to bring to your notice that the President of Republic of Nigeria,President Muhammadu Buhari has constituted a 10 man investigative Panel and foreign Debts reconciliation committee, which I am the Chairman of the presidential committee saddled with the responsibility to investigate all the banks here in Nigeria, who has trapped and held beneficiaries Compensation/inheritance/NNPC contract Fund claims unpaid. To settle all the Foreign debt after his recent visit and meeting with the American President Barack Obama of United States and other officials of the United Nation to enable him give a zero tolerance to corruption in his regime.I am solely in charge of all foreign payments. At the commencement of my official responsibility geared towards payment to foreign beneficiaries. I received a letter that your unclaimed approved payment by the Central Bank of Nigeria which has been overdue for payment should now be paid to Lawrence R. Larson of 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. In the said letter titled change of beneficiary/ownership. Its clearly stated that you are dead and that he is your next of kin, it went further to say you signed a deed and an agreement with Lawrence R. Larson to become your beneficiary before your untimely death. Officially arrangement had been concluded for the approved funds transfer into the account below. Name of Bank: TEXAS CHAMPION BANK Bank Address: 6124 S. Staples, Corpus Christi, Texas 78413 U.S.A. Routing Number: 114914723 Account Number: 909009245 Account Name: Lawrence R. Larson Account Address: 7251 Grove Road, Apt. 160, Brooksville, Florida 34613 U.S.A. But because of the elaborate global scam, I decided to contact you firstfor confirmation before transferring the funds and if after seven working days, no response is received from you, it will be assumed that you are dead and as such authorization and approval will be granted on behalf of Lawrence R. Larson to claim/receive your fund. But if you are well and alive then confirm this letter and reconfirm your Information and how you want your said fund to be paid to you without further delay. Send your responses to me immediately by email. Below is the information you are expected to re-confirm. Full Name: Address: Nationality: Sex: Age: Date of Birth: Occupation: Home Phone No:................. Office Phone No.................... Cell Phone.................. Driver's license or any copy of Your Identity: Please feel free to contact me here only for further clarifications regarding this matter. Sincerely, Yours faithfully, Dr. Okwu Joseph Nnanna Deputy Governor, Financial System Stability Central Bank of Nigeria Tinubu square, Lagos- Nigeria SpamAssassin Report (spam score: 8.5) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.177 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.177 listed in dnsbl.sorbs.net] 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [142.0.42.58 listed in dnsbl.sorbs.net] 0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.0 T_HK_NAME_DR T_HK_NAME_DR 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.0 FILL_THIS_FORM Fill in a form with personal information 2.0 FILL_THIS_FORM_LONG Fill in a form with personal information 2016-09-27 12:26:39Ventes flash Apple profitez en vite http://scammed.by/scam.php?id=198860 Si vous ne visualisez pas ce message correctement [1]cliquez-ici Pour vous désabonner [2]cliquez-ici References 1. http://links.so-reduc.com/v/chN/nSY7HOD8JDgzZs8aMZXoaQ/d9834b47 2. http://links.so-reduc.com/u/chN/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/68494399 [1]ebay : Découvrez nos meilleurs deals smartphone [2]Ebay [3]Offre exceptionnelles jusqu'à -60and037; [4]descubre ebay [5]Iphone sétion iphone [6]hell owork [7]apple iphone 6S [8]Apple Iphone 6S Plus [9]Apple IPAD AIR 2 [10]Apple Iphone 6S [11]Apple iphone 7 [12]Apple watch [13]câble chargeur iphone [14]apple TV [15]découvrir toutes nos promotions [imp?type(inv)g(23535268)a(2789210)] [4?mpt=[CACHEBUSTER]andsiteid=71andadtype=0andsize=1x1andipn=admain2andplacement =450038andmpvc=] References 1. http://links.so-reduc.com/c/chN/X-l/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/51d7740d 2. http://links.so-reduc.com/c/chN/X-A/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/4d4e81f8 3. http://links.so-reduc.com/c/chN/X-R/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/d2c8b2af 4. http://links.so-reduc.com/c/chN/X-Q/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/08f2458e 5. http://links.so-reduc.com/c/chN/X-p/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/ca62607d 6. http://links.so-reduc.com/c/chN/X-P/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/411be891 7. http://links.so-reduc.com/c/chN/X-C/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/de9ddbc6 8. http://links.so-reduc.com/c/chN/X-h/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/ad00c630 9. http://links.so-reduc.com/c/chN/X-T/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/bdcc5aac 10. http://links.so-reduc.com/c/chN/X-J/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/b5aa14e2 11. http://links.so-reduc.com/c/chN/X-U/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/f425f7b3 12. http://links.so-reduc.com/c/chN/X-M/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/934751fe 13. http://links.so-reduc.com/c/chN/X--/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/d5bcce8b 14. http://links.so-reduc.com/c/chN/X-K/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/fc43b9fd 15. http://links.so-reduc.com/c/chN/X-1/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/4e09dafb Vous recevez ce mail car vous êtes abonné à la base de Mademoiselle Deal. La base est déclarée à la CNIL sous le numéro 1835785 Conformément à la loi Informatique et Liberté du 06 Janvier 1978, vous disposez d'un droit d'accès, de rectification et d'opposition aux données vous concernant. Pour vous désabonner [1]cliquez-ici. References 1. http://links.so-reduc.com/u/chN/nSY7HOD8JDgzZs8aMZXoaQ/I/oMoR/68494399 SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.172 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.172 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 11:16:17Newsletter ❤ Discovering China ❤ for Experthttp://scammed.by/scam.php?id=198858 e-Putonghua.com envisions to be the number 1 online Mandarin Chinese language teaching entity. Our tutors are certified and have professional working experience in teaching Chinese as a foreign language to overseas learners by using a mix of Chinese and your local language. Through our proprietary ePu Tutor Learning Platform, we ensure that learners gain personal attention from tutors as all classes are conducted one-on-one online. READ MORE CHINESE CUISINE ?(G?n?) ?(b?o) ?(j?) ?(d?n?) ?(Zài) ?(zh?n?) ?(?uó) ??(??n?) ?(b?o) ?(j?) ?(d?n?) ?(shì) ?(yí) ?(dào) ?(f?i) ?(chán?) ?(shòu) ?(hu?n) ?(yín?) ?(de) ?(cài) ? ?(?u?n) ?(yú) ?(zhè) ?(dào) ?(cài) ? ?(liú) ?(chuán) ?(zhe) LEARN MORE CHINESE BUSINESS CULTURE Chinese people often like to do business over a meal. Typically held in a private room at a restaurant, a business meal can be a dicey proposition for a newbie. The following points should be kept in mind when dining formally with the Chinese: Quick Free Booking BOOK NOW BASIC CONVERSATION LEARN MORE BASIC CONVERSATION If you no longer want to receive emails from us, you may choose to click Here . SpamAssassin Report (spam score: 2.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.42 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 11:09:53PLEASE ACKNOWLEDGE THE RECEIPT OF THIS EMAILhttp://scammed.by/scam.php?id=198859 DESK OF MRS. MARIE N. FRANCOISE WORLD BANK COUNTRY SUPERVISOR FOR NIGERIA THE WORLD BANK NIGERIA COUNTRY OFFICE 102 Yakubu Gowon Crescent Opposite ECOWAS Secretariat P.O. Box 2826, Garki, Abuja, Nigeria Website: http://www.worldbank.org Direct Tel: +234 905 229 8402 Dear Sir, This is a special payment notification. This is to let you know that due to inability of the Nigeria Government to pay all Foreign Beneficiaries in Nigeria, we have signed an agreement with the Nigeria Government under the supervision of the Secretary of the United Nations, Government of the United States of America and Leaders of European Union to handle the Payment of all Foreign Beneficiaries owed in Nigeria. We, the World Bank is now directly handling the payment of all the Foreign Beneficiaries in Nigeria from the Money we intended to loan to the Nigeria Government. We have demanded for files of all the beneficiaries and found out that you are among the beneficiary that will be paid. This is the reason you are been contacted. You are entitled to receive the sum of US$15,000,000.00 (Fifteen Million United States Dollars) accrued interest included. We do not want any delay in paying you and therefore advised that you should send your Bank information including your Full names,Address and Telephone number you want us to use for processing and transferring your funds. Please note that we have a time limit of three weeks to pay all concerned foreign beneficiaries. Your prompt response is required. I look forward to hearing from you. YOU CAN SEND YOUR INFORMATION MY BELOW DIRECT EMAIL ADDRESS: DIRECT EMAIL ADDRESS: directemail.directorworldbank@gmail.com Yours Faithfully, MRS. MARIE N. FRANCOISE WORLD BANK COUNTRY SUPERVISOR FOR NIGERIA SpamAssassin Report (spam score: 4.9) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.43 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (wb.maririefrancoise[at]gmail.com) 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 11:06:59Une solution unique en France pour dynamiser votre activité TPE PME Commerce Artisan GMS etc http://scammed.by/scam.php?id=198857 @-moz-document url-prefix() table,tbody,tr,td { display:block; box-sizing: padding-box;} 150andeuro; offerts pour lancer votre premiandegrave;re opandeacute;ration commerciale ! Offre limitandeacute;e aux 100 premiers contacts andrarr; Je profite de l'offre Une solution unique en France pour animer vos opandeacute;rations commerciales et vos temps forts Plus de 150 opandeacute;rations commerciales prandecirc;tes andagrave; l'emploi 1 Saisissez votre secteur d'activitandeacute; ou votre mandeacute;tier. 2 Choisissez une opandeacute;ration commerciale prandeacute;te andagrave; l'emploi. Exemple : Destockage, vente flash, promotions etc. 3 Choisissez votre cible puis programmez votre envoi. Pas de base de donnandeacute;es ? Accandeacute;dez andagrave; plus de 22 millions de contacts en location ! Grandacirc;ce andagrave; une opandeacute;ration promotionnelle envoyandeacute;e par SMS andagrave; 800 contacts, j'ai obtenu 53 retours en magasin. J'ai gandeacute;nandeacute;randeacute; un chiffre d'affaires de 742andeuro;. - Pascal Jaunault - La Cave Gourmande de Pascal andrarr; Je profite de l'offre L'email ne s'affiche pas correctement ? 2016-09-27 11:05:25About your proposal of a business dealhttp://scammed.by/scam.php?id=198853 Dear Sir, Thank you for your email, which drew my attention. Since I'm a busy businessman here in London, UK, can you give me your further instructions to proceed with this deal ? Have a nice day ! Yours sincerely, Darren Jangou SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (djangou007[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.53 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.53 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 11:01:33Tout ce qu’il faut pour une jolie maisonhttp://scammed.by/scam.php?id=198854 Si vous ne parvenez pas a visualizer ce message, cliquez ici. INSPIREZ VOUS ! COUVERTS ET VAISSELLE LITERIE . Pour vous désabonner, cliquez ici SpamAssassin Report (spam score: 3.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.45 listed in dnsbl.sorbs.net] 1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist [URIs: newdealeuropa.com] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.45 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 10:51:49From Rossey Brownhttp://scammed.by/scam.php?id=198850 From Rossey Brown Dearest One, For sure this mail would definitely come to you as a surprise, but do take your good time to go through it, My name is Rossey Brown . I lost my father years and couple of months ago. My father was a serving director of the Agro-exporting board until his death. He was assassinated by the rebels during the political uprising in my Country. Before his death, he made a deposit of US$8.5 Million Dollars here in Cote d'ivoire which was for the purchase of cocoa processing machine and development of another factory before his untimely death. Being that this part of the world experiences political and crises time without number, there is no guarantee of lives and properties. I cannot invest this money here any long, despite the fact it had been my late fathers industrial plans. I want you to do me a favor to receive this funds into your country or any safer place as the beneficiary, I have plans to invest this money in continuation with the investment vision of my late father, but not in this place again rather in your country. I have the vision of going into real estate and industrial production or any profitable business venture. I am compensating you with 15% of the total Amount, now all my hope is banked on you and I really wants to invest this money in your country, where there is stability of Government, political and economic welfare. I will be waiting for your urgent response as to give you more details. Thanks and remain blessed Regards Rossey Brown SpamAssassin Report (spam score: 7.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.180 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.180 listed in dnsbl.sorbs.net] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rosseybrown24[at]hotmail.com) -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit (miss rossey brown ) 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 10:47:45HELLO MY DEAR BELOVED http://scammed.by/scam.php?id=198849 KINDLY OPEN THE ATTACHED FILE AND GET BACK TO ME THANKS Attachment content - FROM MRS. RITA K. MADINE.pdf SpamAssassin Report (spam score: 8.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ritamadine09[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [98.136.216.141 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit (ritamadine09[at]gmail.com) 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_HK_NAME_FM_FROM T_HK_NAME_FM_FROM 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2016-09-27 10:41:19From Rossey Brownhttp://scammed.by/scam.php?id=198852 From Rossey Brown PLOT 124 RUE 19 COCODY 01. ABIDJAN COTE D'IVOIRE. Dearest One, For sure this mail would definitely come to you as a surprise, but do take your good time to go through it, My name is Rossey Brown . I lost my father a year and couple of months ago. My father was a serving director of the Agro-exporting board until his death. He was assassinated by the rebels during the political uprising in my Country. Before his death, he made a deposit of US$8.5 Million Dollars here in Cote d'ivoire which was for the purchase of cocoa processing machine and development of another factory before his untimely death. Being that this part of the world experiences political and crises time without number, there is no guarantee of lives and properties. I cannot invest this money here any long, despite the fact it had been my late fathers industrial plans. I want you to do me a favor to receive this funds into your country or any safer place as the beneficiary, I have plans to invest this money in continuation with the investment vision of my late father, but not in this place again rather in your country. I have the vision of going into real estate and industrial production or any profitable business venture. I am compensating you with 15% of the total Amount, now all my hope is banked on you and I really wants to invest this money in your country, where there is stability of Government, political and economic welfare. I will be waiting for your urgent response as to give you more details. Thanks and remain blessed Rossey Brown SpamAssassin Report (spam score: 6.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [74.125.82.48 listed in dnsbl.sorbs.net] 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (rosseybrown24[at]hotmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 FORGED_HOTMAIL_RCVD2 hotmail.com 'From' address, but no 'Received:' 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 0.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 10:37:2620 euros de remise immediate ppar tranche de 100 euros d achat sur tout le meublehttp://scammed.by/scam.php?id=198847 [ ]( http://r.monbongab.fr/3jgfi7an4odactsbd.html ) JUSQU'AU 4 OCTOBRE 2016 [ ]( http://r.monbongab.fr/3jgfi7an4p5qctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7an4py6ctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7an4qqmctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7an4rj2ctsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7an4sbictsbd.html ) [ ]( http://r.monbongab.fr/3jgfi7an4t3yctsbd.html ) Jusqu'au 4 octobre 2016, 20? de remise immédiate par tranche de 100? d'achats. Hors prix barrés, produits remboursés et 1er prix. Voir conditions en magasin et sur [ Notre site ]( http://r.monbongab.fr/3jgfi7an4twectsbd.html ). SpamAssassin Report (spam score: 8.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.169 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.223.169 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level above 50% [cf: 100] 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% [cf: 100] 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist [URIs: malinet95.fr] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 10:25:39TENDER OPPORTUNITYhttp://scammed.by/scam.php?id=198846 >Dear Sir/Madam, > My name is SAMBATH VICHHAY, a business/tender agent in Kingdom of Cambodia. I would like to know if you can supply your products on contract basis to the Cambodia government through a competitive tender. Please confirm and forward your catalog and prices list for my review. > > I will give you more information about the tender as soon as I read positively from you. > > Thank you, > SAMBATH VICHHAY > +855962406017. > (Managing Director/CEO) > sambathvichhay and Co. > Consulting and Marketer Representative. > 93, Rukhak Vithei Daun penh, Phnom Penh, Cambodia. SpamAssassin Report (spam score: 7.4) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sambathvichhayandco[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [74.125.82.44 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-27 09:49:02Nice to meet you http://scammed.by/scam.php?id=198844 Nice to meet you, i am Miss Lisa, i am a single female from United State, but currently in Yemen for Peace keeping mission, i work for US Army/Nasa, I would love to know you more better and that is only if you do not mind to write me to my email (sgtlisa8@gmail.com) am an easy going lady that will do anything for the person i love, can you tell me something about yourself in your mail to me so that i will do the same, waiting for your sweet response. Lisa SpamAssassin Report (spam score: -0.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.215.54 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.54 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2016-09-27 09:25:29FRESH SPAMMING TOOLShttp://scammed.by/scam.php?id=198842 FRESH SPAMMING TOOLS. (NEVER REGRET DEALING.) UNLIMITED SMTP GOOD (99%),SPAMMING cPanel GOOD (50%) Rdp FOR SPAMMING GOOD (99%),UNLIMITED WEBMAIL GOOD (99%),(PRO Tourbo mailer software sending message UNLIMITED without smtp INBOX SMS Bulk login, Bank logins/ Mystery Shoppers Resume Box. CHAT WITH ME ON MY SKYPE ID oraluca95 SpamAssassin Report (spam score: 2.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.215.50 listed in list.dnswl.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.50 listed in dnsbl.sorbs.net] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.8 UPPERCASE_50_75 message body is 50-75% uppercase 2016-09-27 09:12:47About that 15 million we are dealing about http://scammed.by/scam.php?id=198841 NNA GI NA ARA MKPURU AMU YOU MUMU PASS YOURSELF. ODE BURUKU,OLOSHE,OLORIBU,IYALAYAEH,AMU NNAGI,IGBU NNEGI, NNEGI WU AKWUNA NNAGI WU ONYE OHI FOOL LIKE YOU. Guy ur mama toto no go work again *Otele Nnegi, inula and otu mamagi as you can use magic Jack inula. no koroja for you this year oooooooooooooo * +233545108804 SpamAssassin Report (spam score: 3.3) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (younesazzzizzz[at]gmail.com) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.215.44 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 08:55:44Offer Giler Hari ini dan esok jehttp://scammed.by/scam.php?id=198839 Anda Berminat untuk tingkatkan SALES bukan.. kami tidak tahu nak tolong macamana.tapi jika anda tak rebut hari ini.. anda akan rugi. Jimat ratusan ringgit untuk dapatkan semua dibawah: Hanya RM45 RM400 Semuanya dengan syarat melabur hari ini.. kami tahu bila anda klik link dibawah . Tiga produk POWER Marketing Online 1- Promosi ke 15 Juta Orang Malaysia Tanpa kos TV (Klik sini) 2- Cara Promosi Melalui ke Puluhan ribu Emails Flyers + senarai email dengan sekali klik.. (value database =RM180) 3- Home Kit Video Marketing and Business Online (Klik Sini ) Hanya RM45 untuk 3 Produk.. Buat Pelaburan Hanya 27/9 hingga 28/9 Maaf Kami tidak melayan jika anda melabur selepas tarikh ini Jika anda berbuat demikian juga anda perlu menambah Lagi RM150 untuk mendapatkan produk semua diatas atau kami akan berikan satu produk yang pertama sahaja.. Tak perlu pikir untuk pelaburan ilmu..pastinya akan memberikan pulangan kepada anda Harga Tersebut sempena Hari jadi Admin. Isi Borang Disini This message was sent by: Kiara Carnegie No 49, ss15/6f, subang jaya, STATE, 47500, MY. Click below to CANCEL or EDIT your subscription: http://thru.my/system/ar/r.php?s?6745andaR0andkH3b1cccc99c c79ceaf955904db72dae SpamAssassin Report (spam score: 3.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (carlbeckwith93718[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.220.172 listed in list.dnswl.org] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED -0.0 SPF_PASS SPF: sender matches SPF record 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.220.172 listed in dnsbl.sorbs.net] 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 07:36:10Urgent response neededhttp://scammed.by/scam.php?id=198837 PGRpdiBkaXI9J3J0bCc+PGRpdj5IZWxsbywgPGJyIC8+PGJyIC8+TXkgbmFtZSBpcyBNci4gRnJh bmsgQW5kcmV3cywgU3BlY2lhbCBBZHZpc2VyLCBDb25zdWx0YW50IGFuZCBTb2xpY2l0b3IgYXQg QW5kcmV3cyAmYW1wOyBLdXJ0aCBMTFAgbGF3IGZpcm0gVW5pdGVkIEtpbmdkb20uPGJyIC8+PGJy IC8+UGxlYXNlIHlvdXIgYXR0ZW50aW9uIHRvIHRoaXMgbWF0dGVyIHdpbGwgYmUgYXBwcmVjaWF0 ZWQuIFRoZSBkZWNlYXNlZCBjdXN0b21lciBieSBOYW1lIE1yLiBNaWNoYWVsIHdobyBsaXZlZCBh dCAxNyBLZW5zaW5ndG9uIFBhbGFjZSBHYXJkZW5zLCBMb25kb24sIHRoZSBXOCA0MDAsIGRpZWQg YWxvbmcgd2l0aCBoaXMgd2lmZSBhbmQgb25seSBzb24gaW4gYSBjYXIgYWNjaWRlbnQgaW4gMjAw OSwgaGUgbGVmdCBoaXMgcHJvcGVydGllcywgaW5jbHVkaW5nIGhpcyBob3VzZSBpbiBZb3Jrc2hp cmUuIEhlIHdhcyBpbnRvIG1pbmluZywgb2lsIGFuZCBnYXMgaW5kdXN0cnksIGhlIHdhcyBhIHN1 Y2Nlc3NmdWwgYnVzaW5lc3NtYW4gYmVmb3JlIGhlIGRpZWQsIGxhdGUgTXIuIE1pY2hhZWwgaXMg bXkgY2xpZW50IHdobyBpIGNvbmZpcm0gaXMgcmVsYXRlZCB0byB5b3UgYmVjYXVzZSBoZSBoYXMg dGhlIHNhbWUgc3VybmFtZSB3aXRoIHlvdSBhbmQgYWxzbyBmcm9tIHlvdXIgY291bnRyeSwgU28g aSB3YW50IHlvdSB0byBnZXQgYmFjayB0byBtZSB0aHJvdWdoIG15IGVtYWlsIGFkZHJlc3MgKGZy YW5rLmFuZHJld3MxOTU4QGdtYWlsLmNvbSkgYXMgc29vbiBhcyB5b3UgcmVjZWl2ZSB0aGlzIG1h aWwgdG8gZW5hYmxlIG1lIGZvcndhcmQgdG8geW91IGFsbCB0aGUgaW5mb3JtYXRpb24geW91IG5l ZWQgdG8ga25vdyBhYm91dCBteSBsYXRlIGNsaWVudCB5b3VyIHJlbGF0aXZlIHNvIHRoYXQgeW91 IHdpbGwgdW5kZXJzdGFuZCBtb3JlIGJldHRlciBhcyB3ZSBwcm9jZWVkLiA8YnIgLz48YnIgLz5J IGF3YWl0IHlvdXIgdXJnZW50IHJlc3BvbnNlLjxiciAvPjxiciAvPlNpbmNlcmVseS48YnIgLz5N ci4gRnJhbmsgQW5kcmV3czxiciAvPjxiciAvPihTcGVjaWFsIEFkdmlzZXIpPGJyIC8+S3VydCBB bmRyZXdzPGJyIC8+VG9vIExldmVsIDE2LCBDaXR5PGJyIC8+VG93ZXIgNDAgQmFzaW5naGFsbDxi ciAvPlN0cmVldCBMb25kb24gRUMyVjVERSw8YnIgLz5FbmdsYW5kLjwvZGl2PjwvZGl2Pg= SpamAssassin Report (spam score: 7.2) pts rule name description ---- ---------------------- -------------------------------------------------- 0.9 URG_BIZ BODY: Contains urgent matter 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (frankandrews[at]walla.co.il) 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.223.173 listed in dnsbl.sorbs.net] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.223.173 listed in list.dnswl.org] 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2.0 MIME_NO_TEXT No (properly identified) text body parts 2.5 TVD_SPACE_RATIO_MINFP Space ratio 2016-09-27 07:33:16BMW LOTTERY DEPARTMENThttp://scammed.by/scam.php?id=198836 BMW LOTTERY DEPARTMENT 5070 WILSHIRE BLVD LOS ANGELES. CA 90036 NEIGHORHOOD: MID WILSHIRE UNITED STATES OF AMERICA. EMAIL:ronaldarceo13@gmail.com Dear Winner, This is to inform you that you have been selected for a prize of a brand new 2016 Model BMW 7x Series Car and a Check of $1.5,000,000.00 United States Dollars from international programs held on the 1st section 2016 in the UNITED STATES OF AMERICA. The selection process was carried out through random selection in our computerized email selection system (ESS) from a database of over 250,000 email addresses drawn from all the continents of the world which you were selected. The BMW Lottery is approved by the British Gaming Board and also Licensed by the International Association of Gaming Regulators (IAGR). To begin the processing of your prize you are to contact our fiduciary claims department for more information as regards procedures to claim your prize. Officer In Charge: _______________ Name : Mr. Ronald Arceo Email: ronaldarceo13@gmail.com Contact him by providing him with your secret pin code Number BMW:2551256003/23. You are also advised to provide him with the under listed information as soon as possible: 1. Name in full. 2. Address. 3. Nationality. 4. Age. 5. Occupation. 6. Phone/Fax. 7. Present Country. 8. Email address. 9. pin code Number BMW:2551256003/23 Best Regards, Mrs.Becky Williams THE DIRECTOR PROMOTIONS BMW LOTTERY DEPARTMENT UNITED STATES OF AMERICA SpamAssassin Report (spam score: 12.6) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.215.51 listed in list.dnswl.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [81.45.36.250 listed in zen.spamhaus.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.51 listed in dnsbl.sorbs.net] 3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner" 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 HK_LOTTO HK_LOTTO 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 LOTTO_DEPT Claims Department 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 2016-09-27 06:36:48BMW LOTTERY DEPARTMENThttp://scammed.by/scam.php?id=198835 BMW LOTTERY DEPARTMENT 5070 WILSHIRE BLVD LOS ANGELES. CA 90036 NEIGHORHOOD: MID WILSHIRE UNITED STATES OF AMERICA. EMAIL:ronaldarceo13@gmail.com Dear Winner, This is to inform you that you have been selected for a prize of a brand new 2016 Model BMW 7x Series Car and a Check of $1.5,000,000.00 United States Dollars from international programs held on the 1st section 2016 in the UNITED STATES OF AMERICA. The selection process was carried out through random selection in our computerized email selection system (ESS) from a database of over 250,000 email addresses drawn from all the continents of the world which you were selected. The BMW Lottery is approved by the British Gaming Board and also Licensed by the International Association of Gaming Regulators (IAGR). To begin the processing of your prize you are to contact our fiduciary claims department for more information as regards procedures to claim your prize. Officer In Charge: _______________ Name : Mr. Ronald Arceo Email: ronaldarceo13@gmail.com Contact him by providing him with your secret pin code Number BMW:2551256003/23. You are also advised to provide him with the under listed information as soon as possible: 1. Name in full. 2. Address. 3. Nationality. 4. Age. 5. Occupation. 6. Phone/Fax. 7. Present Country. 8. Email address. 9. pin code Number BMW:2551256003/23 Best Regards, Mrs.Becky Williams THE DIRECTOR PROMOTIONS BMW LOTTERY DEPARTMENT UNITED STATES OF AMERICA SpamAssassin Report (spam score: 11.9) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.42 listed in dnsbl.sorbs.net] 3.1 DEAR_WINNER BODY: Spam with generic salutation of "dear winner" 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 NSL_RCVD_FROM_USER Received from User 0.0 TVD_RCVD_IP Message was received from an IP address -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.50 listed in list.dnswl.org] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [81.45.36.250 listed in zen.spamhaus.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 HK_LOTTO HK_LOTTO 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 AXB_XMAILER_MIMEOLE_OL_1ECD5 Yet another X header trait 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 LOTTO_DEPT Claims Department 0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money 0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases 2016-09-27 06:36:46Attention dear Beneficiaryhttp://scammed.by/scam.php?id=198833 Attention. We have finally succeeded in getting your package worthy of $15.5Million out of delivery your consignment with the help of Dr David Don Attorney General of Federal High Court of Justice Benin which act as your foreign Attorney representative here in Benin. So every necessary arrangement has been made successfully with Mr Jack Angelove the Agent of your package and every Documents guiding your delivery is well updated so, you are advice to re-confirm your full delivery information to the Agent right now as he is currently at Dulles International Airport in USA with your consignment box, As he called me this morning to inform me that he misplaced your delivery address which he has. So you are advice to reconfirm your full delivery information to the diplomat and call, text or email him with this +1(864) 372-6581 or email him(jackangelove12@gmail) so as to have easy conversation with him and to enable you give him full direction to get your package delivered to you and hand you over your package safe and sound, Furthermore you are advice to be very fast as the Agent Mr Jack Angelove has no time to waste due to his flight ticket. So the Information you are required to re-confirm to the Agent is as Follow. (1)Your Full Name:.................. (2)Mobile Phone Number:............... (3)Current Home Address:............... (4)Fax Number:.............. (5)Country:............ (6)City:..................... (7)Nearest Airport:............... As he is at Dulles International Airport in USA right now because of the Searching and Scanning of the consignment box which made him to misplace your address (8) A Copy of Your I D For attached Identification. So contact him to deliver your package first thing tomorrow morning possibly today, get back to us immediately you contact the Agent to make sure that your fund has getting to you without any hitch. Please try to make sure that you contact him with this text massage Name- Agent: Mr Jack Angelove Email or SMS : +1(864) 372-6581 Email: (jackangelove12@gmail) So contact him to deliver your Consignment box first thing tomorrow morning possibly today, get back to us immediately you contact the Agent to make sure that your fund has getting to you without any hitch, Regards Rev. BEN David Mobile: (+229) 98520744 Quick Reply To: "Mr. Jack Angelove via email (jackangelove12@gmail) SpamAssassin Report (spam score: 6.5) pts rule name description ---- ---------------------- -------------------------------------------------- 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [200.66.66.170 listed in zen.spamhaus.org] 0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary: 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [200.66.66.170 listed in bb.barracudacentral.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 TVD_SPACE_RATIO TVD_SPACE_RATIO 2016-09-27 05:25:33Dear friendhttp://scammed.by/scam.php?id=198832 DEAR FRIEND I am a banker in IDB BANK.I have a Business proposal of US$5.5Million for you. The fund belong to our deceased customer who died with his next of kin leaving nobody for the claim. I want to present you as his next of kin to my bank so that the fund will be transfer to your bank account. Your share will be 40% percent while 60% will be for me. No risk involved in this transaction. If you are interested, Contact me for full details. Thanks mr awali peter Bill and Exchange Manager. IDB BANK SpamAssassin Report (spam score: 10.6) pts rule name description ---- ---------------------- -----2016-09-27 04:30:01GRANT PAYMENT CENTER GPC GLOBAL BANK HEADQUATER NEW YORK U S A http://scammed.by/scam.php?id=198831 -- GRANT PAYMENT CENTER(GPC) GLOBAL BANK HEADQUATER NEW YORK U.S.A. We have been notice that you have not been paid for long over due grant payment by the UN. This is due to so corrupt hoodlums and some corrupts government officials who try to divert your money into their private pocket. We have arrange your payment through international ATM CARD. Payment center this is some of the instruction passed by the united nation in respect to all over delayed payment center department will send you your ATMCARD VALUED SUM OF ($8M) Which you are to use in any where in the world. And the maximum withdrawal is $15,000. So kindly contact the payment center on (grant.payment.center@gmail.com) with the bellow information current residential address direct phone number. Arrangement has been made to procced the delivery through our liable courier agent. Best read bell lorris +1 706 503 2156 +229 986 638 26 SpamAssassin Report (spam score: 13.6) pts rule name description ---- ---------------------- -------------------------------------------------- 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.66 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ofamerica.bank[at]writeme.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [200.40.119.43 listed in list.dnswl.org] 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.9 SPF_FAIL SPF: sender does not match SPF record (fail) 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 2.7 MONEY_ATM_CARD Lots of money on an ATM card 0.0 LOTTO_DEPT Claims Department 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.8 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 2016-09-27 04:17:20 5 MILLION IN YOUR NAMEhttp://scammed.by/scam.php?id=198830 Alice Walton humanitarian skin has $34.3 Million To Share with you. Contact her for more details on how to claim your donation: alwaltons1801@gmail.com SpamAssassin Report (spam score: 4.1) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.52 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.215.45 listed in list.dnswl.org] 1.6 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.0 LOTS_OF_MONEY Huge... sums of money 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 03:23:22Upgrade Your Mailbox Nowhttp://scammed.by/scam.php?id=198828 New Page 1 Dear soludopublishing@gmail.com,     You are required to upgrade your email storage capacity or your incoming mails will be place on hold and to enjoy the benefits of  webmail features. Upgrade to make the most of your inbox!     SpamAssassin Report (spam score: 2.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.214.45 listed in dnsbl.sorbs.net] -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.214.45 listed in list.dnswl.org] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 2016-09-27 02:03:59Upgrade Your Mailbox Nowhttp://scammed.by/scam.php?id=198827 New Page 1 Dear soludopublishing@gmail.com,     You are required to upgrade your email storage capacity or your incoming mails will be place on hold and to enjoy the benefits of  webmail features. Upgrade to make the most of your inbox!     SpamAssassin Report (spam score: 3.5) pts rule name description ---- ---------------------- --------------------------2016-09-27 02:03:51Re: Confirmation of your Payment worth 5 5 million dollarshttp://scammed.by/scam.php?id=198826 Payment Notification, This message is to remind you again to contact Mrs. Janet L. Yellen in Federal Reserve Bank of Washington Dc to receive your $5.5 million Dollars payment. The Federal Reserve Bank in United State will complete you $5.5 million dollars payment without any obligation. The Bank will not be blame for not releasing this payment to you if you fail to contact them and follow their instruction after this message. Upon your receipt of this message, contact Mrs. Janet L. Yellen in Federal Reserve Bank with below information and request them to Release your $5.5 million dollars payment as I instructed you Contact Person: Janet L. Yellen, Chair Board of Governor Federal Reserve Bank Email; federalreservebannkwashington@gmail.com Once you contact them with above information, they will process and Release your $5.5 million dollars to you. Get back to us once you contacted them Thanks for your understanding Mr. Jacob J. Lew Secretary of the Treasury SpamAssassin Report (spam score: 11.1) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS [106.185.31.106 listed in zen.spamhaus.org] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.214.52 listed in list.dnswl.org] 2.6 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL [153.149.230.22 listed in zen.spamhaus.org] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [106.185.31.106 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 LOTS_OF_MONEY Huge... sums of money 1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC 2016-09-27 01:30:33our urgent respond immediatelyhttp://scammed.by/scam.php?id=198824 Hi Friend I am a banker in UBA BANK .I want to transfer an abandoned sum of 10.5 millions USD to your account.50% will be for you. No risk involved. Contact me for more details. Kindly reply me back to my alternative two email address ( samiramohamed5050@gmail.com and samiramohamed5050@yahoo.com) mrs samira mohamed SpamAssassin Report (spam score: 3.8) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [204.29.186.17 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (samira_mohamed5[at]aol.fr) -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.215.45 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 2.0 MIME_NO_TEXT No (properly identified) text body parts 2016-09-27 01:15:30 SPAM My Last Wish http://scammed.by/scam.php?id=198822 Dear Beloved, My Name is Mrs. Amanda Banks, am contacting you in regards to my charity foundation that I want you to manage. I will only give further details if you are interested because this transaction is Highly Confidential.If you are interested, please write back today. Regards, Amanda Banks. SpamAssassin Report (spam score: 2.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [202.141.229.85 listed in dnsbl.sorbs.net] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (ambanks19600[at]aol.co.uk) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [209.85.215.48 listed in list.dnswl.org] -0.0 SPF_PASS SPF: sender matches SPF record 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) 2016-09-27 00:48:43purchase enquiryhttp://scammed.by/scam.php?id=198820 Dear Sir, I am Ali Hossan from ALMUFTAH GROUP CO.,QATAR. I want to make inquiry for the offer of your products and I would like to know if your company is in position to supply your products constantly based on the quality with competitive prices. Here is our website for your perusal and reference; http://www.almuftah.com Is your price list affected by the current exchange rates? Do you have a good forwarder or shipper for this shipment? Please send us any of the following if possible; MOQ, catalogs, price list, payment terms and delivery time. Note; this order is needed urgent. before october first week Kindly reply to our overseas purchase manager: Ibrahim Hassan , We are going to work together in this contract. We will be very glad to cooperate well for this business as you send us feedback as early for further proceedings. B.R Ali Hossan Sales Dept. Almuftah Group Doha, State of Qatar website: http://www.almuftah.com Business Hrs : 7.30-12.00/3.00-6.30 SpamAssassin Report (spam score: 4.6) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.215.42 listed in dnsbl.sorbs.net] 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.215.42 listed in list.dnswl.org] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (sales20_almuftah[at]outlook.com) -0.0 SPF_PASS SPF: sender matches SPF record 1.2 MISSING_HEADERS Missing To: header 0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 1.0 FREEMAIL_REPLY From and body contain different freemails 2016-09-26 23:22:29GRANT PAYMENT CENTER GPC GLOBAL BANK HEADQUATER NEW YORK U S A http://scammed.by/scam.php?id=198818 -- GRANT PAYMENT CENTER(GPC) GLOBAL BANK HEADQUATER NEW YORK U.S.A. We have been notice that you have not been paid for long over due grant payment by the UN. This is due to so corrupt hoodlums and some corrupts government officials who try to divert your money into their private pocket. We have arrange your payment through international ATM CARD. Payment center this is some of the instruction passed by the united nation in respect to all over delayed payment center department will send you your ATMCARD VALUED SUM OF ($8M) Which you are to use in any where in the world. And the maximum withdrawal is $15,000. So kindly contact the payment center on (grant.payment.center@gmail.com) with the bellow information current residential address direct phone number. Arrangement has been made to procced the delivery through our liable courier agent. Best read bell lorris +1 706 503 2156 +229 986 638 26 SpamAssassin Report (spam score: 14.9) pts rule name description ---- ---------------------- -------------------------------------------------- 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see ] 0.0 TVD_RCVD_IP4 Message was received from an IPv4 address 0.0 TVD_RCVD_IP Message was received from an IP address 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider (internationallatmcard[at]gmail.com) -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low trust [200.40.119.42 listed in list.dnswl.org] 3.5 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server [197.234.219.66 listed in dnsbl.sorbs.net] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 1.6 SUBJ_ALL_CAPS Subject is all capitals 0.0 LOTS_OF_MONEY Huge... sums of money 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.7 MONEY_ATM_CARD Lots of money on an ATM card 0.0 LOTTO_DEPT Claims Department 2.5 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.8 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money 2016-09-26 22:43:28