PURCHASE ORDER ENQUIRY..PLEASE CONFIRM
[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
VERY IMPORTANT INFORMATION, READ THIS FIRST: The example and associated information published on this page are subject to the SHPAMEE Terms Of Use. Please familiarise yourself with these terms before viewing or using any information on this page.
Header:
From - Sat Jan 25 00:11:51 2014
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.182.125.99 with SMTP id mp3csp122552obb;
Fri, 24 Jan 2014 14:06:30 -0800 (PST)
X-Received: by 10.205.20.66 with SMTP id qn2mr3964661bkb.82.1390601189056;
Fri, 24 Jan 2014 14:06:29 -0800 (PST)
Return-Path: <captainfabri1@gmail.com>
Received: from mail-we0-x244.google.com (mail-we0-x244.google.com [2a00:1450:400c:c03::244])
by mx.google.com with ESMTPS id re6si4541476bkb.75.2014.01.24.14.06.28
for <x>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Fri, 24 Jan 2014 14:06:28 -0800 (PST)
Received-SPF: pass (google.com: domain of captainfabri1@gmail.com designates 2a00:1450:400c:c03::244 as permitted
sender) client-ip=2a00:1450:400c:c03::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of captainfabri1@gmail.com designates 2a00:1450:400c:c03::244 as permitted sender)
smtp.mail=captainfabri1@gmail.com;
dkim=pass header.i=@gmail.com;
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-we0-f196.google.com with SMTP id q58so1028442wes.7
for <x>; Fri, 24 Jan 2014 14:06:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=bGW3sl5QCd3pcanD5BYd+/EjVuZcGQSsRED9vTRsKbY=;
b=ziiOzV6Osv+cwd12wgi4B7/eEKjxMbOhQVX0B3jokpH85Hy2sYx4EGWj8khXRX0aM5
yt9hd3LtaNVHQSfhTbFWRZH1M4dghlLbXQL5iutRrZZFXsZc6TjKUrpk0wzK8ti9XrTh
c0iF9VgLLVKVmfEmNPF3iLAvlme98/0/RSM5a5oljNgUSy9Qy5CyNYGph3w7B8knyYGd
th5cDlDrLZIbclbP6UFuBDj1HIiVdmslvke38Mgz+z4/bBmzX1xsXVhELZaj2ngnpqwJ
y2XnGeBDXX8YeCQEGvX8AxC1pSlwDcIN0AFxNamemxWmwzbaRl9St+zHniHHOZgQagOl
Oi4w==
MIME-Version: 1.0
X-Received: by 10.180.91.164 with SMTP id cf4mr4718612wib.2.1390601185375;
Fri, 24 Jan 2014 14:06:25 -0800 (PST)
Received: by 10.194.51.134 with HTTP; Fri, 24 Jan 2014 14:06:25 -0800 (PST)
Date: Fri, 24 Jan 2014 14:06:25 -0800
Message-ID: <x@mail.gmail.com>
Subject: PURCHASE ORDER ENQUIRY..PLEASE CONFIRM
From: captain fabri <captainfabri1@gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain;
Bcc: x
X-Account-Key: account6
X-UIDL: x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Delivered-To: x
Received: by 10.182.125.99 with SMTP id mp3csp122552obb;
Fri, 24 Jan 2014 14:06:30 -0800 (PST)
X-Received: by 10.205.20.66 with SMTP id qn2mr3964661bkb.82.1390601189056;
Fri, 24 Jan 2014 14:06:29 -0800 (PST)
Return-Path: <captainfabri1@gmail.com>
Received: from mail-we0-x244.google.com (mail-we0-x244.google.com [2a00:1450:400c:c03::244])
by mx.google.com with ESMTPS id re6si4541476bkb.75.2014.01.24.14.06.28
for <x>
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Fri, 24 Jan 2014 14:06:28 -0800 (PST)
Received-SPF: pass (google.com: domain of captainfabri1@gmail.com designates 2a00:1450:400c:c03::244 as permitted
sender) client-ip=2a00:1450:400c:c03::244;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of captainfabri1@gmail.com designates 2a00:1450:400c:c03::244 as permitted sender)
smtp.mail=captainfabri1@gmail.com;
dkim=pass header.i=@gmail.com;
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-we0-f196.google.com with SMTP id q58so1028442wes.7
for <x>; Fri, 24 Jan 2014 14:06:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:date:message-id:subject:from:to:content-type;
bh=bGW3sl5QCd3pcanD5BYd+/EjVuZcGQSsRED9vTRsKbY=;
b=ziiOzV6Osv+cwd12wgi4B7/eEKjxMbOhQVX0B3jokpH85Hy2sYx4EGWj8khXRX0aM5
yt9hd3LtaNVHQSfhTbFWRZH1M4dghlLbXQL5iutRrZZFXsZc6TjKUrpk0wzK8ti9XrTh
c0iF9VgLLVKVmfEmNPF3iLAvlme98/0/RSM5a5oljNgUSy9Qy5CyNYGph3w7B8knyYGd
th5cDlDrLZIbclbP6UFuBDj1HIiVdmslvke38Mgz+z4/bBmzX1xsXVhELZaj2ngnpqwJ
y2XnGeBDXX8YeCQEGvX8AxC1pSlwDcIN0AFxNamemxWmwzbaRl9St+zHniHHOZgQagOl
Oi4w==
MIME-Version: 1.0
X-Received: by 10.180.91.164 with SMTP id cf4mr4718612wib.2.1390601185375;
Fri, 24 Jan 2014 14:06:25 -0800 (PST)
Received: by 10.194.51.134 with HTTP; Fri, 24 Jan 2014 14:06:25 -0800 (PST)
Date: Fri, 24 Jan 2014 14:06:25 -0800
Message-ID: <x@mail.gmail.com>
Subject: PURCHASE ORDER ENQUIRY..PLEASE CONFIRM
From: captain fabri <captainfabri1@gmail.com>
To: undisclosed-recipients:;
Content-Type: text/plain;
Bcc: x
Body:
Dear Sir/Madam
Attached is our order,
Please kindly confirm to us your payment terms,
delivery method condition and mode of shipment.
We are waiting for your confirmation as soon as you open and see the
attached order so that we complete the purchase agreement.
use this password to open the attached order: 1234
Thanks
Attached is our order,
Please kindly confirm to us your payment terms,
delivery method condition and mode of shipment.
We are waiting for your confirmation as soon as you open and see the
attached order so that we complete the purchase agreement.
use this password to open the attached order: 1234
Thanks
Comments:
Related Cyber Criminal Profiles:
No related profiles found.Similar Spam Examples:
General Malware Spam - Re: Fwd: Wire Transfer (13192NI97)Useless Afrikaans Loan Offer Scam
SEO (Search Engine Optimization) Spam - Organic SEO for Cybertopcops.com
Flipora Spam - iyaloo27@gmail.com is waiting for your reply. Respond?
Bank Draft Scam - TREAT AS URGENT
Related Malware Samples:
INVOICE.scr - Decompression.Bomb[Previous Example] [Share This Page] [Back To The Main SHPAMEE Index] [Next Example]
A compressed file called "PO ORDER.RAR" was attached to this e-mail. It contained a file called "INVOICE.scr" infected with the Trojan.horse.Ransomer.CXI virus.