Courier spam frpm Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 May 2022 16:42:11 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nnpaS-0008wd-DX
for dave@doctor.nl2k.ab.ca;
Sun, 08 May 2022 16:41:12 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 May 2022 16:41:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f54.google.com ([209.85.221.54]:46063)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nnhX8-000Psu-NA
for doctor@netknow.ca;
Sun, 08 May 2022 08:05:18 -0600
Received: by mail-wr1-f54.google.com with SMTP id w4so16109381wrg.12
for; Sun, 08 May 2022 07:04:57 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Eupk76/ceZz7B7ANLBzO4RrYWkZR53QcYQW4O97XujA=;
b=ny8BR5QV76p/fnvIGbCFD9wsqgb0hgCU1HfwdbxwVtkp6jnv1PwU8kAG9PhSXUAlVu
ibmZDFEiR70+4PwG65YqgDnqtph6LQqPOodz7OSqX7cNrHukBUPLp8UWrZYg6yWRTPdD
2NNFVwBnbdCCmt2ahsy5/+HNlE5p4z3uAJDkB25ZaSZ90XNtSlU1HMktvNvHycGS+DaR
ULK58jI30kykFGgSm8woZVvdpxUK1MNAzOJFqpl8eEl7MZbWkQjjWC1B9TV0DMUmbeVI
WX/7wzxvpi5T6Qs5cZzvaXUaXXgZRSLuPBmJ2zPfHcxDIOq4rcI3Cf6k3J7DkHaSjeDd
T3dQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Eupk76/ceZz7B7ANLBzO4RrYWkZR53QcYQW4O97XujA=;
b=ItUSbduSC3bwtsB74cTATVmbe+7WGCZPx3mv9bK7HtgAjf8W6rmrb4RHM9ae4elWIa
qBinUm5iMKVD3ltp0+Av6BcoMZ832d0T0lDH2jrEzStGdA5maY9845wYrNU6aZS4lrtt
BPzfHdkClW1hWYtxWQFE4brjt+Lj+ubqJOVefhV+mUs3oBrNy00sUloPpWhmcScdtB0C
EjkcrzLLXaUNq0iDDG7+PKuOOeYsHqB17BLzrLjO/rFA2naEn/KZnjtVPPYdvqVR1fmw
i/p5qpsBIVTxn0OYxQENW3V1BDZNYnzVxIRWac4wl9gaY+v0PwM6vCjUuM3m5/poqXy6
bdTw==
X-Gm-Message-State: AOAM530bOODorhFZhX84cdoPlQN5zQx+vAv9sdFES77LwsMDKe0kH38F
Wle/1O4BfGKOLeDlxH60FCoLPa5Wn9K6sPKasgY=
X-Google-Smtp-Source: ABdhPJylWDhFMrlBkA3MWVKPB+Q+0I8mV7URz79RCH/Q1XXFk8UhU0XehnoqQQErbDhmn7IeLB61SBjaiKctwCNm5J4=
X-Received: by 2002:a5d:47af:0:b0:20c:6701:50be with SMTP id
15-20020a5d47af000000b0020c670150bemr9968839wrb.148.1652018690912; Sun, 08
May 2022 07:04:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:adf:9cc7:0:0:0:0:0 with HTTP; Sun, 8 May 2022 07:04:50 -0700 (PDT)
Reply-To: officefile1v@gmail.com
From: EXCEL Express courier Delivery
Date: Sun, 8 May 2022 15:04:50 +0100
Message-ID:
Subject: EXCEL Express courier Delivery Company,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@netknow.ca
X-Spam_score: 15.8
X-Spam_score_int: 158
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This is EXCEL Express courier Delivery Company, the management
of this company, wishes to inform you that, we received a parcel containing
an ATM VISA Card valued $3.5 Million USD with the vital PIN o [...]
Content analysis details: (15.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.54 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[maxwellcarry789[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[maxwellcarry789[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} EXCEL Express courier Delivery Company,
This is EXCEL Express courier Delivery Company, the management of this
company, wishes to inform you that, we received a parcel containing an
ATM VISA Card valued $3.5 Million USD with the vital PIN on it, for
safety delivery to your residential address in your country.
This parcel was brought to us this morning by the ATM Card payment
office Benin Republic, please reconfirm the below information, to
avoid delivery of your ATM VISA Card to wrong hand.
1) Your Full Name:
2) Address, City, State And Country:
3) Personal Cell Phone, Fax And Mobile:
4) Company Name (If Any) Position And Address:
5) Occupation, Age And Marital Status:
6) Copy Of Your Int'l Passport/Drivers Licence
Send your require information via Email
Address(officefile1v@gmail.com) We will register your package and send
you the tracking numbers before we proceed for safety delivery of your
package as soon as you reconfirm the required information for safety
delivery.Send your require information via Email
Address(officefile1v@gmail.com) EXCEL Express is one of the world's
great success stories, the start-up that revolutionized the delivery
of packages and information. In the past 33years, we've grown up and
grown into a diverse family of companies as EXCEL Express that's
bigger, stronger, better than ever.
Yours affectionately.
Pastor David Johnson.
Dispatch Manager EXCEL Courier Cotonuo Branch Manager.
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 08 May 2022 16:42:11 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nnpaS-0008wd-DX
for dave@doctor.nl2k.ab.ca;
Sun, 08 May 2022 16:41:12 -0600
Resent-From: The Doctor
Resent-Date: Sun, 8 May 2022 16:41:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-wr1-f54.google.com ([209.85.221.54]:46063)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nnhX8-000Psu-NA
for doctor@netknow.ca;
Sun, 08 May 2022 08:05:18 -0600
Received: by mail-wr1-f54.google.com with SMTP id w4so16109381wrg.12
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=Eupk76/ceZz7B7ANLBzO4RrYWkZR53QcYQW4O97XujA=;
b=ny8BR5QV76p/fnvIGbCFD9wsqgb0hgCU1HfwdbxwVtkp6jnv1PwU8kAG9PhSXUAlVu
ibmZDFEiR70+4PwG65YqgDnqtph6LQqPOodz7OSqX7cNrHukBUPLp8UWrZYg6yWRTPdD
2NNFVwBnbdCCmt2ahsy5/+HNlE5p4z3uAJDkB25ZaSZ90XNtSlU1HMktvNvHycGS+DaR
ULK58jI30kykFGgSm8woZVvdpxUK1MNAzOJFqpl8eEl7MZbWkQjjWC1B9TV0DMUmbeVI
WX/7wzxvpi5T6Qs5cZzvaXUaXXgZRSLuPBmJ2zPfHcxDIOq4rcI3Cf6k3J7DkHaSjeDd
T3dQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=Eupk76/ceZz7B7ANLBzO4RrYWkZR53QcYQW4O97XujA=;
b=ItUSbduSC3bwtsB74cTATVmbe+7WGCZPx3mv9bK7HtgAjf8W6rmrb4RHM9ae4elWIa
qBinUm5iMKVD3ltp0+Av6BcoMZ832d0T0lDH2jrEzStGdA5maY9845wYrNU6aZS4lrtt
BPzfHdkClW1hWYtxWQFE4brjt+Lj+ubqJOVefhV+mUs3oBrNy00sUloPpWhmcScdtB0C
EjkcrzLLXaUNq0iDDG7+PKuOOeYsHqB17BLzrLjO/rFA2naEn/KZnjtVPPYdvqVR1fmw
i/p5qpsBIVTxn0OYxQENW3V1BDZNYnzVxIRWac4wl9gaY+v0PwM6vCjUuM3m5/poqXy6
bdTw==
X-Gm-Message-State: AOAM530bOODorhFZhX84cdoPlQN5zQx+vAv9sdFES77LwsMDKe0kH38F
Wle/1O4BfGKOLeDlxH60FCoLPa5Wn9K6sPKasgY=
X-Google-Smtp-Source: ABdhPJylWDhFMrlBkA3MWVKPB+Q+0I8mV7URz79RCH/Q1XXFk8UhU0XehnoqQQErbDhmn7IeLB61SBjaiKctwCNm5J4=
X-Received: by 2002:a5d:47af:0:b0:20c:6701:50be with SMTP id
15-20020a5d47af000000b0020c670150bemr9968839wrb.148.1652018690912; Sun, 08
May 2022 07:04:50 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:adf:9cc7:0:0:0:0:0 with HTTP; Sun, 8 May 2022 07:04:50 -0700 (PDT)
Reply-To: officefile1v@gmail.com
From: EXCEL Express courier Delivery
Date: Sun, 8 May 2022 15:04:50 +0100
Message-ID:
Subject: EXCEL Express courier Delivery Company,
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: doctor@netknow.ca
X-Spam_score: 15.8
X-Spam_score_int: 158
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: This is EXCEL Express courier Delivery Company, the management
of this company, wishes to inform you that, we received a parcel containing
an ATM VISA Card valued $3.5 Million USD with the vital PIN o [...]
Content analysis details: (15.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.221.54 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[maxwellcarry789[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[maxwellcarry789[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
3.5 UNDISC_FREEM Undisclosed recipients + freemail reply-to
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
1.9 UNDISC_MONEY Undisclosed recipients + money/fraud signs
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} EXCEL Express courier Delivery Company,
This is EXCEL Express courier Delivery Company, the management of this
company, wishes to inform you that, we received a parcel containing an
ATM VISA Card valued $3.5 Million USD with the vital PIN on it, for
safety delivery to your residential address in your country.
This parcel was brought to us this morning by the ATM Card payment
office Benin Republic, please reconfirm the below information, to
avoid delivery of your ATM VISA Card to wrong hand.
1) Your Full Name:
2) Address, City, State And Country:
3) Personal Cell Phone, Fax And Mobile:
4) Company Name (If Any) Position And Address:
5) Occupation, Age And Marital Status:
6) Copy Of Your Int'l Passport/Drivers Licence
Send your require information via Email
Address(officefile1v@gmail.com) We will register your package and send
you the tracking numbers before we proceed for safety delivery of your
package as soon as you reconfirm the required information for safety
delivery.Send your require information via Email
Address(officefile1v@gmail.com) EXCEL Express is one of the world's
great success stories, the start-up that revolutionized the delivery
of packages and information. In the past 33years, we've grown up and
grown into a diverse family of companies as EXCEL Express that's
bigger, stronger, better than ever.
Yours affectionately.
Pastor David Johnson.
Dispatch Manager EXCEL Courier Cotonuo Branch Manager.
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments