Fedex Phish from France
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 Dec 2024 08:16:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tSHTy-00000000OhY-2ULY
for dave@doctor.nl2k.ab.ca;
Mon, 30 Dec 2024 08:15:02 -0700
Resent-From: The Doctor
Resent-Date: Mon, 30 Dec 2024 08:15:02 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:45180)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tSFoh-00000000F1R-3P1H;
Mon, 30 Dec 2024 06:28:25 -0700
Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])
by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id 7A97768B82;
Mon, 30 Dec 2024 16:25:25 +0300 (EAT)
Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])
by mta2.ac-mayotte.fr (Postfix) with ESMTP id 5DDC2738C8;
Mon, 30 Dec 2024 16:25:25 +0300 (EAT)
DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr 5DDC2738C8
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;
s=default; t=1735565125;
bh=TZ2kzVg2FxaFAaOLZfQveIXY1ZQTEUWyA1NTBtfUlOU=;
h=From:Date:Subject:Message-ID:To:From;
b=f2ew7IuK6qrUGlJdPH2XMzr6G5mOzS0J8yZcEI8GbbtW5vag76pio6UqU9eh0NvGO
S/sEgX3LKc/k2Oa4TZKRsjJCJBukaCf2qSs51UZylNoRhpV9BKLMdtIQH43v17EB5Z
F4p7ICzFBY5yLC0aEo15NgXB/j5/z/MmVCEHsLUU=
Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])
by IMSVA (Postfix) with ESMTP id AD6152A06B;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0
Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])
by IMSVA (Postfix) with ESMTP id 90F3C2A065;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])
by imsva2.ac-mayotte.fr (Postfix) with ESMTP;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])
by mta.ac-mayotte.fr (Postfix) with ESMTP id 827C0C2A;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
Received: from localhost (localhost [127.0.0.1])
by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id 704F6206CC;
Mon, 30 Dec 2024 16:24:44 +0300 (EAT)
From: "Allaoui Kamaria"
User-Agent: SOGoMail 5.5.1
MIME-Version: 1.0
Date: Mon, 30 Dec 2024 16:24:43 +0300
Subject: -NOTIF-FILE 30-12-2024
Message-ID: <7bda-67729f00-3-6008d480@220874380>
X-Forward: 62.210.173.105, 193.55.5.88
Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1------"
To: undisclosed-recipients:;
X-TM-AS-GCONF: 00
X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1006-28890.007
X-TM-AS-User-Blocked-Sender: No
X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1006-28890.007
X-TMASE-Result: 10--0.625900-10.000000
X-TMASE-MatchedRID: zRq+SEqfCYr2qfT+71kiavX6NvbM4Yrsj3dZSyALReJgqio6XKAlv288
cz20R5K+s/ej5mUo2Gq8coKUcaOOvdOlVr0KbHX3ERmYupvjVnVq6WMLKmPhEnyN+DsyP9AM+Bb
1Wo7XcLacWLAltQLYBklABXpquwdlrLALtod6A6awkrs/m+KUObtZbhh+YHXtRvSiBEZrGW9QE4
PHFrpn08jZGpIBeHfeMKPrF7dK57NULRRq00o2mbQfSLTfZUi8d10MtwXECa0JOoetF07Mex6oe
4m6Hwih5I0gJ75cTVHmYG5eDtyqNw2y5A4HtQVbRuW84rvZ5t97iRk0zCz0ItQrP2WSWM6Sx8Yu
cb/WoYiR9GF2J2xqMxRFJJyf5BJenCGS1WQEGtB4UhBPLRlvhsdwGuKIm8sZbubaJZOnLfoG2ff
S+bPofjXdu3G7CI8My7m9UJeISlw9OomrT2m5Jiq2rl3dzGQ1DBbGvtcMofxooi8pnTFPuvHXt6
iyuKpvusqfGe25EM2LOzWaJ4ko70myMLrEYcR7
X-IMSS-DKIM-White-List: No
X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FedEx Dear Customer, We would like to inform you that your
package arrived at the FedEx office on November 28. Unfortunately, our delivery
attempt failed due to an incorrect address. To enable us to deliver [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[193.55.5.84 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} -NOTIF-FILE 30-12-2024
------=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1------
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 469
FedEx
=C2=A0
Dear Customer,
We would like to inform you that your package arrived at the FedEx offi=
ce on November 28. Unfortunately, our delivery attempt failed due to an=
incorrect address.
To enable us to deliver your package, please confirm or correct your ad=
dress by following the link below:
=C2=A0
Update my delivery address
=C2=A0
Thank you for your cooperation, and do not hesitate to contact us if yo=
u have any questions.
Best regards,=C2=A0
=C2=A0
------=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1------
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 982
p>Thank you for your cooperation, and do not hesitate to contact us if =
you have any questions.
p>
------=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1--------
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 Dec 2024 08:16:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tSHTy-00000000OhY-2ULY
for dave@doctor.nl2k.ab.ca;
Mon, 30 Dec 2024 08:15:02 -0700
Resent-From: The Doctor
Resent-Date: Mon, 30 Dec 2024 08:15:02 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mtaout2.ac-mayotte.fr ([193.55.5.84]:45180)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from
id 1tSFoh-00000000F1R-3P1H;
Mon, 30 Dec 2024 06:28:25 -0700
Received: from mta2.ac-mayotte.fr (mta2.ac-mayotte.fr [193.55.5.85])
by mtaout2.ac-mayotte.fr (Postfix) with ESMTP id 7A97768B82;
Mon, 30 Dec 2024 16:25:25 +0300 (EAT)
Received: from imsva2.ac-mayotte.fr (imsva2.ac-mayotte.fr [193.55.5.86])
by mta2.ac-mayotte.fr (Postfix) with ESMTP id 5DDC2738C8;
Mon, 30 Dec 2024 16:25:25 +0300 (EAT)
DKIM-Filter: OpenDKIM Filter v2.11.0 mta2.ac-mayotte.fr 5DDC2738C8
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ac-mayotte.fr;
s=default; t=1735565125;
bh=TZ2kzVg2FxaFAaOLZfQveIXY1ZQTEUWyA1NTBtfUlOU=;
h=From:Date:Subject:Message-ID:To:From;
b=f2ew7IuK6qrUGlJdPH2XMzr6G5mOzS0J8yZcEI8GbbtW5vag76pio6UqU9eh0NvGO
S/sEgX3LKc/k2Oa4TZKRsjJCJBukaCf2qSs51UZylNoRhpV9BKLMdtIQH43v17EB5Z
F4p7ICzFBY5yLC0aEo15NgXB/j5/z/MmVCEHsLUU=
Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])
by IMSVA (Postfix) with ESMTP id AD6152A06B;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
X-IMSS-DKIM-Authentication-Result: imsva2.ac-mayotte.fr; sigcount=0
Received: from imsva2.ac-mayotte.fr (unknown [127.0.0.1])
by IMSVA (Postfix) with ESMTP id 90F3C2A065;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
Received: from mta.ac-mayotte.fr (unknown [193.55.5.53])
by imsva2.ac-mayotte.fr (Postfix) with ESMTP;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
Received: from goodies.in.ac-mayotte.fr (unknown [192.168.205.176])
by mta.ac-mayotte.fr (Postfix) with ESMTP id 827C0C2A;
Mon, 30 Dec 2024 16:25:24 +0300 (EAT)
Received: from localhost (localhost [127.0.0.1])
by goodies.in.ac-mayotte.fr (Postfix) with ESMTP id 704F6206CC;
Mon, 30 Dec 2024 16:24:44 +0300 (EAT)
From: "Allaoui Kamaria"
User-Agent: SOGoMail 5.5.1
MIME-Version: 1.0
Date: Mon, 30 Dec 2024 16:24:43 +0300
Subject: -NOTIF-FILE 30-12-2024
Message-ID: <7bda-67729f00-3-6008d480@220874380>
X-Forward: 62.210.173.105, 193.55.5.88
Content-Type: multipart/alternative; boundary="----=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1------"
To: undisclosed-recipients:;
X-TM-AS-GCONF: 00
X-TM-AS-Product-Ver: IMSVA-9.1.0.2090-9.0.0.1006-28890.007
X-TM-AS-User-Blocked-Sender: No
X-TMASE-Version: IMSVA-9.1.0.2090-9.0.1006-28890.007
X-TMASE-Result: 10--0.625900-10.000000
X-TMASE-MatchedRID: zRq+SEqfCYr2qfT+71kiavX6NvbM4Yrsj3dZSyALReJgqio6XKAlv288
cz20R5K+s/ej5mUo2Gq8coKUcaOOvdOlVr0KbHX3ERmYupvjVnVq6WMLKmPhEnyN+DsyP9AM+Bb
1Wo7XcLacWLAltQLYBklABXpquwdlrLALtod6A6awkrs/m+KUObtZbhh+YHXtRvSiBEZrGW9QE4
PHFrpn08jZGpIBeHfeMKPrF7dK57NULRRq00o2mbQfSLTfZUi8d10MtwXECa0JOoetF07Mex6oe
4m6Hwih5I0gJ75cTVHmYG5eDtyqNw2y5A4HtQVbRuW84rvZ5t97iRk0zCz0ItQrP2WSWM6Sx8Yu
cb/WoYiR9GF2J2xqMxRFJJyf5BJenCGS1WQEGtB4UhBPLRlvhsdwGuKIm8sZbubaJZOnLfoG2ff
S+bPofjXdu3G7CI8My7m9UJeISlw9OomrT2m5Jiq2rl3dzGQ1DBbGvtcMofxooi8pnTFPuvHXt6
iyuKpvusqfGe25EM2LOzWaJ4ko70myMLrEYcR7
X-IMSS-DKIM-White-List: No
X-TMASE-SNAP-Result: 1.821001.0001-0-1-22:0,33:0,34:1,35:0,36:0,37:0,40:0-0
X-Spam_score: 10.7
X-Spam_score_int: 107
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FedEx Dear Customer, We would like to inform you that your
package arrived at the FedEx office on November 28. Unfortunately, our delivery
attempt failed due to an incorrect address. To enable us to deliver [...]
Content analysis details: (10.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.84 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.53 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.86 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
[193.55.5.85 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[193.55.5.84 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.53 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.86 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.85 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
[193.55.5.84 listed in will-spam-for-food.eu.org]
-2.3 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, medium
trust
[193.55.5.84 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
0.5 NO_RDNS Sending MTA has no reverse DNS (Postfix variant)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
Subject: {SPAM?} -NOTIF-FILE 30-12-2024
------=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1------
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 469
FedEx
=C2=A0
Dear Customer,
We would like to inform you that your package arrived at the FedEx offi=
ce on November 28. Unfortunately, our delivery attempt failed due to an=
incorrect address.
To enable us to deliver your package, please confirm or correct your ad=
dress by following the link below:
=C2=A0
Update my delivery address
=C2=A0
Thank you for your cooperation, and do not hesitate to contact us if yo=
u have any questions.
Best regards,=C2=A0
=C2=A0
------=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1------
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Content-Length: 982
<=
strong>Fed
"#ea381a">Ex
lor=3D"#ff0000">Dear Customer,
We would like to i=
nform you that your package arrived at the FedEx offic=
e on November 28. Unfortunately, our delivery attempt =
failed due to an incorrect address.
To enable us to deliver your =
package, please confirm or correct your address by following the link b=
elow:
equid.mx/ssgvgvsvgvgsvgsgvvgvg.html">Update my=
delivery address
<=
p>Thank you for your cooperation, and do not hesitate to contact us if =
you have any questions.
Best regards,
<=p>
------=_=-_OpenGroupware_org_NGMime-31706-1735565083.872988-1--------
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments