#422024 by buried under 419s
Sat Jan 02, 2021 10:46 pm
Return-Path: <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>
Delivered-To:
Received: from
by with LMTP
id 0jHVD5on8V9tKwAAibB4EA
(envelope-from <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>)
for <>; Sun, 03 Jan 2021 02:10:34 +0000
Return-path: <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>
Envelope-to:
Delivery-date: Sun, 03 Jan 2021 02:10:34 +0000
Received: from mail-qk1-f197.google.com ([209.85.222.197]:42097)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>)
id 1kvsqm-0002ru-TG
for ; Sun, 03 Jan 2021 02:10:34 +0000
Received: by mail-qk1-f197.google.com with SMTP id p185so19707018qkc.9
for <>; Sat, 02 Jan 2021 18:10:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id:date:subject:from:to;
bh=CqgHDLZn98lepMk6psZNT9uSTugyY+pralNU+eAPLL0=;
b=ZcwO9vyiLjChMOqidTR+WVZ5iz3Wi2lLrXXIcKV8ZhPDpv2EvmMc8xqqU29oDnY8IC
SmbWRwRx4wI3k3ZAQQGOmk62JmH6gqg9oMzkUTsVvv4Ccjpc3T1Am92SUF2RBwejiJSs
iBmkSiPyrremRRGys6fnfSKlWl1n1Z6kuDAo/CAVpMRKPYF+WvmJZNVklczKcWwkU6CU
8xTzG6vedHaUMsc4pHQ/wCLqG9erNlzNCCGIVwZTaS/cHcTX64V2Ik2JQOjUjWMlLvIi
redHSdm5i5Aor1biYkawWgusX6JZ8w9MeO6SCoNFxZgbLZ+M+d10u82jMpuWhYl7WCNg
Vz2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id:date:subject
:from:to;
bh=CqgHDLZn98lepMk6psZNT9uSTugyY+pralNU+eAPLL0=;
b=PKP4y3ReMgEnWBrGpYEvZ2lZHPhwQKTE8uirdxnxB20iyQVsZRomOMaNjOkyJbnqxP
HGqWeEvaRsTtUiYrpdM0V31toU4HrBnAuhYLqlNS7ZoPuD53+xIbWDs8xnuG0ByyqiTT
KUSAyLLEL62KfqcUS8y5pj89Rpfq1f6+aL3LZokasI+KmUpg4651KabpNlA6HqgsjoOJ
Qp1RnpC3SeDWQX8uLRnBa+IVdukPlQJp+22jwwo5FZE5m/0mwy3CeJAByMWu0E5QXwi7
gfypHCTGLpRBhdUsE5O4LQtsSqLyoZzI8/MQQOELOY+7fEs375xY0ZYj6ee0VHH189oH
KnEw==
X-Gm-Message-State: AOAM532W3s0Z3flCYHz3FqYdtCa9xAnLrY95F9SrCvGl1vjpM43oPI9y
It/u4A4whKVmzGhHJ6E7xJk8kHLj1oqevdFejlyO
MIME-Version: 1.0
X-Received: by 2002:a0c:c583:: with SMTP id a3mt70270739qvj.15.1609639791069;
Sat, 02 Jan 2021 18:09:51 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Sun, 03 Jan 2021 02:09:51 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="00000000000003e4a705b7f578dd"
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (18.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ssa127114[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ssa127114[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
5.0 KAM_FAKE_DELIVER Fake delivery notifications
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
1.0 ENVFROM_GOOG_TRIX From suspicious Google subdomain
0.6 URG_BIZ Contains urgent matter
0.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.0 GOOGLE_DOC_SUSP Suspicious use of Google Docs
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT DELIVERY NOTIFICATION.
Attention Please!
Attn: Dear Beneficiary, Happy New Year.
We are in respect to your Long over-due fund that was deposited in our office for delivery to your door step, your compensation funds.
I just receive a call that the package sent to you was sent back, due to wrong address, Please Can you tell us what is going on regarding the payment to enable us to proceed with your delivery as well promised that within 48 hours your package will be at your door step.
Note that this compensation exercise is also extended to victims of Hurricane, Scam, Covid19,earthquake,War displaced and Aged. and You are among those that will benefit from.
Your urgent response is highly needed on what is going on why the payment of the insurance is not be sent by you for long now and you keep silence,
My warm regard to you and your entire family as i wait your positive reply.
Kindly re-confirm your delivery details to us for verification and to avoid any atom of mistake during delivery process of your CONSIGNMENT , so as to facilitate the immediate delivery of your CONSIGNMENT, immediately as soon as you comply with the requirement.
(1) Your Full Name
(2) Full Residential Address.
(3) Direct and Current Phone .
(4) Nationality ....
(5) Present Country ..
(6) Nearest Airport....
(7) A COPY OF ID CARD
Forward your information to below email: [email protected]
As soon as your details are submitted with the instructed fee, you shall be updated accordingly by the delivery immediately.
This compensation exercise is well authorized.
We are well known special delivery company and we deliver peace of mind , hope to saver you with the best of our services.
Yours In Service
Mr. Wright, Managing Director.
Delivered-To:
Received: from
by with LMTP
id 0jHVD5on8V9tKwAAibB4EA
(envelope-from <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>)
for <>; Sun, 03 Jan 2021 02:10:34 +0000
Return-path: <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>
Envelope-to:
Delivery-date: Sun, 03 Jan 2021 02:10:34 +0000
Received: from mail-qk1-f197.google.com ([209.85.222.197]:42097)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <3byfxXwkJCog44mDEJDDGsymux.o0ymnmzzu45q34t08n0m5uu.o0y@trix.bounces.google.com>)
id 1kvsqm-0002ru-TG
for ; Sun, 03 Jan 2021 02:10:34 +0000
Received: by mail-qk1-f197.google.com with SMTP id p185so19707018qkc.9
for <>; Sat, 02 Jan 2021 18:10:12 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:message-id:date:subject:from:to;
bh=CqgHDLZn98lepMk6psZNT9uSTugyY+pralNU+eAPLL0=;
b=ZcwO9vyiLjChMOqidTR+WVZ5iz3Wi2lLrXXIcKV8ZhPDpv2EvmMc8xqqU29oDnY8IC
SmbWRwRx4wI3k3ZAQQGOmk62JmH6gqg9oMzkUTsVvv4Ccjpc3T1Am92SUF2RBwejiJSs
iBmkSiPyrremRRGys6fnfSKlWl1n1Z6kuDAo/CAVpMRKPYF+WvmJZNVklczKcWwkU6CU
8xTzG6vedHaUMsc4pHQ/wCLqG9erNlzNCCGIVwZTaS/cHcTX64V2Ik2JQOjUjWMlLvIi
redHSdm5i5Aor1biYkawWgusX6JZ8w9MeO6SCoNFxZgbLZ+M+d10u82jMpuWhYl7WCNg
Vz2g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:message-id:date:subject
:from:to;
bh=CqgHDLZn98lepMk6psZNT9uSTugyY+pralNU+eAPLL0=;
b=PKP4y3ReMgEnWBrGpYEvZ2lZHPhwQKTE8uirdxnxB20iyQVsZRomOMaNjOkyJbnqxP
HGqWeEvaRsTtUiYrpdM0V31toU4HrBnAuhYLqlNS7ZoPuD53+xIbWDs8xnuG0ByyqiTT
KUSAyLLEL62KfqcUS8y5pj89Rpfq1f6+aL3LZokasI+KmUpg4651KabpNlA6HqgsjoOJ
Qp1RnpC3SeDWQX8uLRnBa+IVdukPlQJp+22jwwo5FZE5m/0mwy3CeJAByMWu0E5QXwi7
gfypHCTGLpRBhdUsE5O4LQtsSqLyoZzI8/MQQOELOY+7fEs375xY0ZYj6ee0VHH189oH
KnEw==
X-Gm-Message-State: AOAM532W3s0Z3flCYHz3FqYdtCa9xAnLrY95F9SrCvGl1vjpM43oPI9y
It/u4A4whKVmzGhHJ6E7xJk8kHLj1oqevdFejlyO
MIME-Version: 1.0
X-Received: by 2002:a0c:c583:: with SMTP id a3mt70270739qvj.15.1609639791069;
Sat, 02 Jan 2021 18:09:51 -0800 (PST)
Reply-To: [email protected]
X-No-Auto-Attachment: 1
Message-ID: <[email protected]>
Date: Sun, 03 Jan 2021 02:09:51 +0000
From: [email protected]
To:
Content-Type: multipart/alternative; boundary="00000000000003e4a705b7f578dd"
X-Spam-Status: Yes, score=18.7
X-Spam-Score: 187
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: I've invited you to fill out the following form: Untitled
form To fill it out, visit: https://docs.google.com/forms/d/e/1FAIp ... _form_link
Content analysis details: (18.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received'
headers
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ssa127114[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[ssa127114[at]gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
5.0 KAM_FAKE_DELIVER Fake delivery notifications
0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and
EnvelopeFrom freemail headers are
different
1.0 ENVFROM_GOOG_TRIX From suspicious Google subdomain
0.6 URG_BIZ Contains urgent matter
0.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
0.0 FILL_THIS_FORM Fill in a form with personal information
3.0 GOOGLE_DOC_SUSP Suspicious use of Google Docs
X-Spam-Flag: YES
Subject: ***SPAM*** URGENT DELIVERY NOTIFICATION.
Attention Please!
Attn: Dear Beneficiary, Happy New Year.
We are in respect to your Long over-due fund that was deposited in our office for delivery to your door step, your compensation funds.
I just receive a call that the package sent to you was sent back, due to wrong address, Please Can you tell us what is going on regarding the payment to enable us to proceed with your delivery as well promised that within 48 hours your package will be at your door step.
Note that this compensation exercise is also extended to victims of Hurricane, Scam, Covid19,earthquake,War displaced and Aged. and You are among those that will benefit from.
Your urgent response is highly needed on what is going on why the payment of the insurance is not be sent by you for long now and you keep silence,
My warm regard to you and your entire family as i wait your positive reply.
Kindly re-confirm your delivery details to us for verification and to avoid any atom of mistake during delivery process of your CONSIGNMENT , so as to facilitate the immediate delivery of your CONSIGNMENT, immediately as soon as you comply with the requirement.
(1) Your Full Name
(2) Full Residential Address.
(3) Direct and Current Phone .
(4) Nationality ....
(5) Present Country ..
(6) Nearest Airport....
(7) A COPY OF ID CARD
Forward your information to below email: [email protected]
As soon as your details are submitted with the instructed fee, you shall be updated accordingly by the delivery immediately.
This compensation exercise is well authorized.
We are well known special delivery company and we deliver peace of mind , hope to saver you with the best of our services.
Yours In Service
Mr. Wright, Managing Director.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces