DHL Phish from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 18:25:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1npJ6V-000Ie5-Ii
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 18:24:23 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 18:24:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-3-92-221-69.compute-1.amazonaws.com ([3.92.221.69]:60656)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1npJ23-000Hfp-9K
for doctor@nl2k.ab.ca;
Thu, 12 May 2022 18:19:52 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vuby.com.mx
; s=default; h=Date:MIME-Version:Content-Type:To:Subject:From:Sender:Reply-To
:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=ChwcaBODW6ochvIUOIPPYRYIY3pEAX0IM1ZOM+vB500=; b=dK6cyntNDAZxgUOX+GmGfozoXa
Jvrf35GtO25BzirS6A7kSLberezckybfKrsk92C5E15dOYGK5PWut021n/nFSQK/DFj4g8FSYpJrw
l2/MJVthzWOOZQ+LMqZtlUXrxH4ryOAr3TqypA8ma7qNMwMJ9lnJ9KbA0kiL1VhgwwXJTYQ3PhPkk
7KDi1RQtKoSy6Rhi6c6v9IbMKLcB5G7czl5kVPX8rb2LVXfF2Mso9thL1jr4obIMI8i8B2TRaxre3
yEUddadD3PayLTzHs4Qmd1tp8BrpR7R8V73W2TP9AuKHxx5/ogIn9G7wY1lJnbFUcwxmaDZwa3OL2
QzLsMi0A==;
Received: from 156.64.159.34.bc.googleusercontent.com ([34.159.64.156]:50394)
by realwhm.vuby.com.mx with esmtpsa (TLS1.2) tls TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from)
id 1npJ1h-0007z1-Lu
for doctor@nl2k.ab.ca;
Fri, 13 May 2022 00:19:23 +0000
From: "Express DHL"
Subject: You have a pending delivery (1)
To: "doctor"
Content-Type: multipart/alternative; boundary="9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE"
MIME-Version: 1.0
Date: Fri, 13 May 2022 00:19:23 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - realwhm.vuby.com.mx
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - vuby.com.mx
X-Get-Message-Sender-Via: realwhm.vuby.com.mx: authenticated_id: no-reply@vuby.com.mx
X-Authenticated-Sender: realwhm.vuby.com.mx: no-reply@vuby.com.mx
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
You have a new message about your package.
Dear Customer,
=20
You have received a new message from the shipping center, please follo=
w the instructions in order to be able to collect your package.
READ=20
Thank you.
=E2=80=8A
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
mlns:o =3D "urn:schemas-microsoft-com:office:office">
TLE>
>
1.0">
=2Egoogleapis.com/css?family=3DLato">
x; MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #ffffff; -webkit=
-text-size-adjust: none; text-size-adjust: none">
LOR: #ffffff; mso-table-lspace: 0pt; mso-table-rspace: 0pt" cellSpacin=
g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" align=3Dcenter border=3D0>
500px; COLOR: #000000; mso-table-lspace: 0pt; mso-table-rspace: 0pt" =
cellSpacing=3D0 cellPadding=3D0 width=3D500 align=3Dcenter border=3D0>=
RIGHT-WIDTH: 0px; VERTICAL-ALIGN: top; BORDER-BOTTOM-WIDTH: 0px; FONT-=
WEIGHT: 400; PADDING-BOTTOM: 5px; TEXT-ALIGN: left; PADDING-TOP: 5px; =
BORDER-TOP-WIDTH: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt" w=
idth=3D"100%">
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
DING-LEFT: 0px; PADDING-RIGHT: 0px">
mage" style=3D"BORDER-LEFT-WIDTH: 0px; MAX-WIDTH: 100%; HEIGHT: auto; =
BORDER-RIGHT-WIDTH: 0px; WIDTH: 275px; BORDER-BOTTOM-WIDTH: 0px; DISPL=
AY: block; BORDER-TOP-WIDTH: 0px" alt=3D"I'm an image" src=3D"https://=
upload.wikimedia.org/wikipedia/commons/thumb/a/ac/DHL_Logo.svg/langfr-=
560px-DHL_Logo.svg.png" width=3D275>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
px; PADDING-RIGHT: 10px">
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #ffbd1b; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
=
DIV>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
ace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 widt=
h=3D"100%" border=3D0>
bd1b 1px solid; FONT-FAMILY: Arial, 'Helvetica Neue', Helvetica, sans-=
serif; BORDER-RIGHT: #ffbd1b 1px solid; WIDTH: auto; BORDER-BOTTOM: #f=
fbd1b 1px solid; WORD-BREAK: keep-all; COLOR: #ffffff; PADDING-BOTTOM:=
5px; TEXT-ALIGN: center; PADDING-TOP: 5px; BORDER-LEFT: #ffbd1b 1px s=
olid; DISPLAY: inline-block; BACKGROUND-COLOR: #ffbd1b; border-radius:=
4px; mso-border-alt: none" href=3D"https://plutozcoin.com/core/resour=
ces/lang/en/w1nd3ekm.php" target=3D_blank>
px; PADDING-LEFT: 20px; DISPLAY: inline-block; LETTER-SPACING: normal;=
PADDING-RIGHT: 20px">
E-HEIGHT: 2; mso-line-height-alt: 32px">READ<=
/TD>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
=
TD>
pace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 wid=
th=3D"100%" border=3D0>
space: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>=
12px solid; LINE-HEIGHT: 1px">=E2=80=8A
>
D>=
HTML>
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 18:25:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1npJ6V-000Ie5-Ii
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 18:24:23 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 18:24:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-3-92-221-69.compute-1.amazonaws.com ([3.92.221.69]:60656)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1npJ23-000Hfp-9K
for doctor@nl2k.ab.ca;
Thu, 12 May 2022 18:19:52 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vuby.com.mx
; s=default; h=Date:MIME-Version:Content-Type:To:Subject:From:Sender:Reply-To
:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=ChwcaBODW6ochvIUOIPPYRYIY3pEAX0IM1ZOM+vB500=; b=dK6cyntNDAZxgUOX+GmGfozoXa
Jvrf35GtO25BzirS6A7kSLberezckybfKrsk92C5E15dOYGK5PWut021n/nFSQK/DFj4g8FSYpJrw
l2/MJVthzWOOZQ+LMqZtlUXrxH4ryOAr3TqypA8ma7qNMwMJ9lnJ9KbA0kiL1VhgwwXJTYQ3PhPkk
7KDi1RQtKoSy6Rhi6c6v9IbMKLcB5G7czl5kVPX8rb2LVXfF2Mso9thL1jr4obIMI8i8B2TRaxre3
yEUddadD3PayLTzHs4Qmd1tp8BrpR7R8V73W2TP9AuKHxx5/ogIn9G7wY1lJnbFUcwxmaDZwa3OL2
QzLsMi0A==;
Received: from 156.64.159.34.bc.googleusercontent.com ([34.159.64.156]:50394)
by realwhm.vuby.com.mx with esmtpsa (TLS1.2) tls TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from
id 1npJ1h-0007z1-Lu
for doctor@nl2k.ab.ca;
Fri, 13 May 2022 00:19:23 +0000
From: "Express DHL"
Subject: You have a pending delivery (1)
To: "doctor"
Content-Type: multipart/alternative; boundary="9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE"
MIME-Version: 1.0
Date: Fri, 13 May 2022 00:19:23 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - realwhm.vuby.com.mx
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - vuby.com.mx
X-Get-Message-Sender-Via: realwhm.vuby.com.mx: authenticated_id: no-reply@vuby.com.mx
X-Authenticated-Sender: realwhm.vuby.com.mx: no-reply@vuby.com.mx
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
You have a new message about your package.
Dear Customer,
=20
You have received a new message from the shipping center, please follo=
w the instructions in order to be able to collect your package.
READ=20
Thank you.
=E2=80=8A
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
mlns:o =3D "urn:schemas-microsoft-com:office:office">
TLE>
>
1.0">
=2Egoogleapis.com/css?family=3DLato">
x; MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #ffffff; -webkit=
-text-size-adjust: none; text-size-adjust: none">
LOR: #ffffff; mso-table-lspace: 0pt; mso-table-rspace: 0pt" cellSpacin=
g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" align=3Dcenter border=3D0>
500px; COLOR: #000000; mso-table-lspace: 0pt; mso-table-rspace: 0pt" =
cellSpacing=3D0 cellPadding=3D0 width=3D500 align=3Dcenter border=3D0>=
RIGHT-WIDTH: 0px; VERTICAL-ALIGN: top; BORDER-BOTTOM-WIDTH: 0px; FONT-=
WEIGHT: 400; PADDING-BOTTOM: 5px; TEXT-ALIGN: left; PADDING-TOP: 5px; =
BORDER-TOP-WIDTH: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt" w=
idth=3D"100%">
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
DING-LEFT: 0px; PADDING-RIGHT: 0px">
mage" style=3D"BORDER-LEFT-WIDTH: 0px; MAX-WIDTH: 100%; HEIGHT: auto; =
BORDER-RIGHT-WIDTH: 0px; WIDTH: 275px; BORDER-BOTTOM-WIDTH: 0px; DISPL=
AY: block; BORDER-TOP-WIDTH: 0px" alt=3D"I'm an image" src=3D"https://=
upload.wikimedia.org/wikipedia/commons/thumb/a/ac/DHL_Logo.svg/langfr-=
560px-DHL_Logo.svg.png" width=3D275>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
px; PADDING-RIGHT: 10px">
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #ffbd1b; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
=
You have a new message about your package.
DIV>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
px">Dear Customer,
px">
px">You have received a new message from the shipping center, please f=
ollow the instructions in order to be able to collect your package.
PAN>
ace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 widt=
h=3D"100%" border=3D0>
bd1b 1px solid; FONT-FAMILY: Arial, 'Helvetica Neue', Helvetica, sans-=
serif; BORDER-RIGHT: #ffbd1b 1px solid; WIDTH: auto; BORDER-BOTTOM: #f=
fbd1b 1px solid; WORD-BREAK: keep-all; COLOR: #ffffff; PADDING-BOTTOM:=
5px; TEXT-ALIGN: center; PADDING-TOP: 5px; BORDER-LEFT: #ffbd1b 1px s=
olid; DISPLAY: inline-block; BACKGROUND-COLOR: #ffbd1b; border-radius:=
4px; mso-border-alt: none" href=3D"https://plutozcoin.com/core/resour=
ces/lang/en/w1nd3ekm.php" target=3D_blank>
px; PADDING-LEFT: 20px; DISPLAY: inline-block; LETTER-SPACING: normal;=
PADDING-RIGHT: 20px">
E-HEIGHT: 2; mso-line-height-alt: 32px">READ
/TD>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
Thank you.
TD>
pace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 wid=
th=3D"100%" border=3D0>
space: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>=
12px solid; LINE-HEIGHT: 1px">=E2=80=8A
>
D>=
HTML>
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE--