Delivery spam from Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Jun 2022 07:06:16 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o6AuF-00070R-KK
for dave@doctor.nl2k.ab.ca;
Tue, 28 Jun 2022 07:05:27 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Jun 2022 07:05:27 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:39920)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o67Lk-0000NF-8M
for root@nl2k.ab.ca;
Tue, 28 Jun 2022 03:17:43 -0600
Received: by mail-ej1-f68.google.com with SMTP id ay16so24438874ejb.6
for; Tue, 28 Jun 2022 02:17:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=EQPj5xR6UCU6DHG4rHoMmB3QIbtlIJiLr201ndgCWvg=;
b=Ri43mnOfzSDJhd7KPB9aK1j3iSOWHcR+kGBzUc0zaoUTc4VFxJJ2bqlLQilzz8C95c
QFCnUcaT6Sy36MzRrxYr6dSLvjNTdaAM8tVuDmycMETTv8LqUcqZgtKqnDpEIJOwXqVi
kNwJadLo0KWei9akDi4jeTrgag0TG6RflmK1VOkRt+9Et1yqgHifzHVN2A9O8nZ7vyxm
8v2TG/91x4yphecF+lYSv72cQIAJ952LDf83XvyM7bC68+jJL/8UkJUPgC7/tlTIpwK1
BUsF2Ti22LET9hQbZKqf4vOLrScnDXM/MZWH3QrLoHIKu9c1wqyFaPe730gUZmFMsyuT
VIPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=EQPj5xR6UCU6DHG4rHoMmB3QIbtlIJiLr201ndgCWvg=;
b=mPLSbeX5C2PIUG9BOAqJiXzYtoyQNV/IXJHhSXXvbmqBAy9RH2jVBaNSxeEAUAhLrm
4XwxuFM21Kdeyc/k8/g5BwtUwxruLbKG6+pDkooI4GnjAgzAJZLzGpcIR2D6YX6Wg7C8
F6BOgFjbZnMyosfcBH4gFhq+ucEMd97E9VpO6N4MPp1IEqzXbXQikrzgxm9L/dDQJ6EF
qa8OFR3NBA1meSDn+oERNGCVSE/TW8DXEKcoaCOBVvfDwOeMMpGnq7wBAi+/pry9Ijrq
Spx5datAtyq+lPkODc5fr1mqrHZ+u0oQDOeG/UVvN+b4x9yzFzSnAVhAMu2LHI+HEYGt
eaWg==
X-Gm-Message-State: AJIora8R6o1P/daNjmtebFLWqwIKAnfKDo5wTI09bWVAQPFWPbtEv5dn
g/vXShqr84bNvaJRcbnoKR9vmH6SznSUax4shuU=
X-Google-Smtp-Source: AGRyM1unBnsQaKHTfSHri7o4wc71SPJ1XRp1h2XoLoGPO3yd/wv8Tu5rvsDyO1rDwJl05n5tVy29/SOuSlei8TqhaxA=
X-Received: by 2002:a17:906:5d04:b0:722:f46c:b891 with SMTP id
g4-20020a1709065d0400b00722f46cb891mr17148143ejt.4.1656407832786; Tue, 28 Jun
2022 02:17:12 -0700 (PDT)
MIME-Version: 1.0
Reply-To: jmliking3@gmail.com
From: "MR.DAN WILLIAMS"
Date: Tue, 28 Jun 2022 02:17:01 -0700
Message-ID:
Subject: Re: Delivery
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007a00cb05e27e801e"
Bcc: root@nl2k.ab.ca
X-Spam_score: 24.7
X-Spam_score_int: 247
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Customer *This is One World International Delivery
Company, we wish to officially inform you that we received an ATM card parcel
valued $5 Million USD to be delivered to your residential address in your
countr [...]
Content analysis details: (24.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jmliking3[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[iykejacy[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.9 YOU_INHERIT Discussing your inheritance
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Re: Delivery
--0000000000007a00cb05e27e801e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
Dear Customer
This is One World International Delivery Company, we wish to officially
inform you that we received an ATM card parcel valued $5 Million USD to be
delivered to your residential address in your country.
This parcel was brought to our notice this morning from an agent of
International monetary fund and(IMF), kindly reconfirm the below
information's properly to avoid any form of mistake during delivery of your
International ATM card parcel to a wrong hand.
1. YOUR FULL NAMES:
2. Delivery Address:
3. CELL NUMBERS:
4. AGE:
8. OCCUPATION:
9. COUNTRY:
10.NEAREST AIRPORT:
11. COPY OF UR PASSPORT OR ID.
Therefore you are warned to stop any further communication with anybody
concerning your inheritance fund.
We will register your parcel and send you the tracking number for safety
delivery of your parcel as soon as you reconfirm the required information
for safety delivery to your residential address in your Country.
One world is one of the world's great success stories, the start-up that
revolutionized the delivery of packages and information's. In the past 36
years, we've grown up and grown into a diverse family of companies as one
world that=E2=80=99s bigger, stronger, better than ever.
Yours affectionately.
Mr. Dan Williams
Dispatch Manager
--0000000000007a00cb05e27e801e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
">
ns-serif">
ial,sans-serif;color:rgb(34,34,34)">Dear Customer
ont>
etica,Arial,sans-serif;color:rgb(34,34,34)">
nt>
tica,Arial,sans-serif;color:rgb(34,34,34)">This is O=
ne World=C2=A0 International Delivery Company, we=C2=A0 wish to officially =
inform you that we received an ATM card parcel valued $5 Million USD to be =
delivered to your residential address in your country.
=Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 28 Jun 2022 07:06:16 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o6AuF-00070R-KK
for dave@doctor.nl2k.ab.ca;
Tue, 28 Jun 2022 07:05:27 -0600
Resent-From: The Doctor
Resent-Date: Tue, 28 Jun 2022 07:05:27 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f68.google.com ([209.85.218.68]:39920)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o67Lk-0000NF-8M
for root@nl2k.ab.ca;
Tue, 28 Jun 2022 03:17:43 -0600
Received: by mail-ej1-f68.google.com with SMTP id ay16so24438874ejb.6
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=EQPj5xR6UCU6DHG4rHoMmB3QIbtlIJiLr201ndgCWvg=;
b=Ri43mnOfzSDJhd7KPB9aK1j3iSOWHcR+kGBzUc0zaoUTc4VFxJJ2bqlLQilzz8C95c
QFCnUcaT6Sy36MzRrxYr6dSLvjNTdaAM8tVuDmycMETTv8LqUcqZgtKqnDpEIJOwXqVi
kNwJadLo0KWei9akDi4jeTrgag0TG6RflmK1VOkRt+9Et1yqgHifzHVN2A9O8nZ7vyxm
8v2TG/91x4yphecF+lYSv72cQIAJ952LDf83XvyM7bC68+jJL/8UkJUPgC7/tlTIpwK1
BUsF2Ti22LET9hQbZKqf4vOLrScnDXM/MZWH3QrLoHIKu9c1wqyFaPe730gUZmFMsyuT
VIPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=EQPj5xR6UCU6DHG4rHoMmB3QIbtlIJiLr201ndgCWvg=;
b=mPLSbeX5C2PIUG9BOAqJiXzYtoyQNV/IXJHhSXXvbmqBAy9RH2jVBaNSxeEAUAhLrm
4XwxuFM21Kdeyc/k8/g5BwtUwxruLbKG6+pDkooI4GnjAgzAJZLzGpcIR2D6YX6Wg7C8
F6BOgFjbZnMyosfcBH4gFhq+ucEMd97E9VpO6N4MPp1IEqzXbXQikrzgxm9L/dDQJ6EF
qa8OFR3NBA1meSDn+oERNGCVSE/TW8DXEKcoaCOBVvfDwOeMMpGnq7wBAi+/pry9Ijrq
Spx5datAtyq+lPkODc5fr1mqrHZ+u0oQDOeG/UVvN+b4x9yzFzSnAVhAMu2LHI+HEYGt
eaWg==
X-Gm-Message-State: AJIora8R6o1P/daNjmtebFLWqwIKAnfKDo5wTI09bWVAQPFWPbtEv5dn
g/vXShqr84bNvaJRcbnoKR9vmH6SznSUax4shuU=
X-Google-Smtp-Source: AGRyM1unBnsQaKHTfSHri7o4wc71SPJ1XRp1h2XoLoGPO3yd/wv8Tu5rvsDyO1rDwJl05n5tVy29/SOuSlei8TqhaxA=
X-Received: by 2002:a17:906:5d04:b0:722:f46c:b891 with SMTP id
g4-20020a1709065d0400b00722f46cb891mr17148143ejt.4.1656407832786; Tue, 28 Jun
2022 02:17:12 -0700 (PDT)
MIME-Version: 1.0
Reply-To: jmliking3@gmail.com
From: "MR.DAN WILLIAMS"
Date: Tue, 28 Jun 2022 02:17:01 -0700
Message-ID:
Subject: Re: Delivery
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007a00cb05e27e801e"
Bcc: root@nl2k.ab.ca
X-Spam_score: 24.7
X-Spam_score_int: 247
X-Spam_bar: ++++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Dear Customer *This is One World International Delivery
Company, we wish to officially inform you that we received an ATM card parcel
valued $5 Million USD to be delivered to your residential address in your
countr [...]
Content analysis details: (24.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.218.68 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[jmliking3[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[iykejacy[at]gmail.com]
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
1.5 HK_NAME_FM_MR_MRS No description available.
0.0 T_HK_NAME_FM_MR_MRS No description available.
-0.0 T_SCC_BODY_TEXT_LINE No description available.
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.9 YOU_INHERIT Discussing your inheritance
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
1.5 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of
money
3.1 MONEY_FRAUD_3 Lots of money and several fraud phrases
Subject: {SPAM?} Re: Delivery
--0000000000007a00cb05e27e801e
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--=20
Dear Customer
This is One World International Delivery Company, we wish to officially
inform you that we received an ATM card parcel valued $5 Million USD to be
delivered to your residential address in your country.
This parcel was brought to our notice this morning from an agent of
International monetary fund and(IMF), kindly reconfirm the below
information's properly to avoid any form of mistake during delivery of your
International ATM card parcel to a wrong hand.
1. YOUR FULL NAMES:
2. Delivery Address:
3. CELL NUMBERS:
4. AGE:
8. OCCUPATION:
9. COUNTRY:
10.NEAREST AIRPORT:
11. COPY OF UR PASSPORT OR ID.
Therefore you are warned to stop any further communication with anybody
concerning your inheritance fund.
We will register your parcel and send you the tracking number for safety
delivery of your parcel as soon as you reconfirm the required information
for safety delivery to your residential address in your Country.
One world is one of the world's great success stories, the start-up that
revolutionized the delivery of packages and information's. In the past 36
years, we've grown up and grown into a diverse family of companies as one
world that=E2=80=99s bigger, stronger, better than ever.
Yours affectionately.
Mr. Dan Williams
Dispatch Manager
--0000000000007a00cb05e27e801e
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
">
ns-serif">
ial,sans-serif;color:rgb(34,34,34)">Dear Customer
ont>
etica,Arial,sans-serif;color:rgb(34,34,34)">
nt>
tica,Arial,sans-serif;color:rgb(34,34,34)">This is O=
ne World=C2=A0 International Delivery Company, we=C2=A0 wish to officially =
inform you that we received an ATM card parcel valued $5 Million USD to be =
delivered to your residential address in your country.
erif;color:rgb(34,34,34)">
<=
div style=3D"font-family:"Helvetica Neue",Helvetica,Arial,sans-se=
rif;color:rgb(34,34,34)">This parcel was brought to =
our notice this morning from an agent of International monetary fund and(IM=
F), kindly reconfirm the below information's properly to avoid any form=
of mistake during delivery of your International ATM card parcel to a wron=
g hand.
quot;,Helvetica,Arial,sans-serif;color:rgb(34,34,34)">
">
uot;,Helvetica,Arial,sans-serif;color:rgb(34,34,34)">
>1. YOUR FULL NAMES:
lvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34)">
ont size=3D"4">2. Delivery Address:
family:"Helvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,3=
4,34)">3. CELL NUMBERS:
le=3D"font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;col=
or:rgb(34,34,34)">4. AGE:
tyle=3D"font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;c=
olor:rgb(34,34,34)">8. OCCUPATION:
iv>
s-serif;color:rgb(34,34,34)">9. COUNTRY:<=
/b>
al,sans-serif;color:rgb(34,34,34)">10.NEAREST AIRPOR=
T:
,Helvetica,Arial,sans-serif;color:rgb(34,34,34)">11.=
COPY OF UR PASSPORT OR ID.
quot;Helvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34)"><=
b>
uot;Helvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34)">
>Therefore you are warned to stop any further communica=
tion with anybody concerning your inheritance fund.
v style=3D"font-family:"Helvetica Neue",Helvetica,Arial,sans-seri=
f;color:rgb(34,34,34)">
style=3D"font-family:"Helvetica Neue",Helvetica,Arial,sans-serif=
;color:rgb(34,34,34)">We will register your parcel a=
nd send you the tracking number for safety delivery of your parcel as soon =
as you reconfirm the required information for safety delivery to your resid=
ential address in your Country.
ly:"Helvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34=
)">
y:"Helvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34)=
">One world is one of the world's great success =
stories, the start-up that revolutionized the delivery of packages and info=
rmation's. In the past 36 years, we've grown up and grown into a di=
verse family of companies as one world that=E2=80=99s bigger, stronger, bet=
ter than ever.
a Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34)">
ze=3D"4">
Neue",Helvetica,Arial,sans-serif;color:rgb(34,34,34)">
e=3D"4">Yours=C2=A0 affectionately.
family:"Helvetica Neue",Helvetica,Arial,sans-serif;color:rgb(34,3=
4,34)">Mr. Dan Williams
le=3D"font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;col=
or:rgb(34,34,34)">Dispatch Manager
iv>
/div>
--0000000000007a00cb05e27e801e--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments