Canada post phish from telenet.be

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Feb 2023 18:57:57 -0700

Received: from andre.telenet-ops.be ([195.130.132.53]:48522)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVjoH-000ANa-28

for dave@doctor.nl2k.ab.ca;

Fri, 24 Feb 2023 18:57:18 -0700

Received: from telenet.be ([84.196.56.170])

by andre.telenet-ops.be with bizsmtp

id RDvA290193gMWpw01DvBbg; Sat, 25 Feb 2023 02:55:12 +0100

MIME-Version: 1.0

From: "Canada-Post"

Reply-To: uimkumtanisha@hotmail.com

To: dave@doctor.nl2k.ab.ca

Subject: Parcel delivery failed!

Content-Type: text/plain

Content-Transfer-Encoding: quoted-printable

X-Mailer: Smart_Send_4_4_2

Date: Sat, 25 Feb 2023 01:55:10 -0800

Message-ID: <27204204043201879721100@WIN-4K804V6ADVQ>

X-Priority: 1

X-MSMail-Priority: High

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: The status of your package has changed. Exception Reason:

A transportation accident has delayed delivery. Execption Resolution: We've

missed the scheduled transfer time. This may cause a delay.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low

trust

[195.130.132.53 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[gustav(at)telenet.be]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[195.130.132.53 listed in wl.mailspike.net]

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

1.8 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

Subject: {SPAM?} Parcel delivery failed!



The status of your package has changed.



Exception Reason: A transportation accident has delayed delivery.



Execption Resolution: We've missed the scheduled transfer time. This may ca=

use a delay.



Reschedule new delivery :



http://www.messagecanadapost.com



Date: 02/25/2023

McAfee Phish from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 24 Feb 2023 13:04:16 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pVeHQ-000Ku5-2t

for dave@doctor.nl2k.ab.ca;

Fri, 24 Feb 2023 13:02:56 -0700

Resent-From: The Doctor

Resent-Date: Fri, 24 Feb 2023 13:02:56 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ot1-f44.google.com ([209.85.210.44]:43688)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pVdAl-000HAl-05

for support@nl2k.ab.ca;

Fri, 24 Feb 2023 11:52:04 -0700

Received: by mail-ot1-f44.google.com with SMTP id v17-20020a0568301bd100b0068dc615ee44so147422ota.10

for ; Fri, 24 Feb 2023 10:50:00 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id:from:to

:cc:subject:date:message-id:reply-to;

bh=X892sw6wjpd2RRfQ32xnymkcKRWzP7Ce1NBLqytXcqk=;

b=NuOSsukvN6kr8FijlhjGA5ZgRlxGsYgXekdphqhs0xGbeVfADJG17/Rpr9Meicp050

sOZ2SzdubGcodAkohftzO8/zEflj7xCVCufylqbHIha/TUHi6YKESNXzie9+zJglTCy9

jnMJfnHmvUlASGgFEXbp5Key25FR7AaIJwhjUT4Z7Ck0OSOjZdoHj9+F+zAdcqEQZAAa

QuJHku61Bra5iM2Zszz7yArFvGNLVxrJ7+6Ya0oyEhqGrnuaj/+CM22BP0oaCSwsqYyA

1N6GfMfahyAMr+zKY0Pb7g33s5qDqYjIuHIXeTYyJyiVrlWmNAmEKj5J+3ZwlJzQoFtR

9ANw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:organization:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=X892sw6wjpd2RRfQ32xnymkcKRWzP7Ce1NBLqytXcqk=;

b=gT5HhwThPJuuHcsUo3VtLDaJ4KvcefkMnZlD4enSMnITtWCkRHPoaYJ8fLAq9T1Euq

vE1m108+4AL0CuzYRZr0/WWT0b4kkMc64g8uDiN6egKsnmWF/UzD/v8LUHnHXoMFK1wr

Oz9/a8gTOePejpzfXyYEWiHuv7eomk0Qr2i+VSfl+2uJCyitdbReUWAJqW0HxZ0yeQ6a

oyTKU0BB18FqDgrjm7sJfRu617U3Du6QpYEEjKlSKBp4m8Ym3xdPTSexipeGwBeKRVGv

m/IQvnAztQvYq1w03WcOzE4FXvMy8NfoOG6rnBhDCODTQ3d8O7OFPMdslK7XJIpGuxaE

kL7A==

X-Gm-Message-State: AO0yUKXRwmECq9DK3Pa/SF4WtsacC8M2GNP0VGJaoFkbleZX3vuhhIBs

8uUPpq/YgwCDexEe4JqaJ9V+BTbZ7oYqmQ==

X-Google-Smtp-Source: AK7set88C7c2dDGl1w5utlYX6H0JeBqB0F4sj2YesWBG1g6O5IFc3SUttk6z9nb9BsJZC953gB6j0Q==

X-Received: by 2002:a05:6830:575:b0:68b:da6c:3ec6 with SMTP id f21-20020a056830057500b0068bda6c3ec6mr7967956otc.25.1677264594296;

Fri, 24 Feb 2023 10:49:54 -0800 (PST)

Received: from 64.44.87.244 ([64.44.87.244])

by smtp.gmail.com with ESMTPSA id d15-20020a9d72cf000000b0068bcb290a38sm3670504otk.55.2023.02.24.10.49.52

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 24 Feb 2023 10:49:54 -0800 (PST)

Message-ID: <63f906d2.9d0a0220.8a312.3470@mx.google.com>

From: "Allyson Toughill"

Subject: Transaction Alert__39229

To: "support"

Content-Type: multipart/alternative; boundary="DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0"

MIME-Version: 1.0

Organization: Online McAfee Services

Date: Sat, 25 Feb 2023 00:19:53 +0530



This is a multi-part message in MIME format



--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Date: 24 February, 2023



Order/Ref ID: DXY-#7013662061963



Regarding Your Annual PC Plan





Dear Client! support@nl2k.ab.ca



You were purchased a McAfee Total Protection Plan last year, as indica=

ted in this email.



You shouldn't experience any problems because today, (February 24, 202=

3), is the last day of its validity period.=20



The year of validity of your plan is therefore being rented once more.=

As soon as your plan is ready, we'll go to work on it.



We'll also deduct the same amount from your account over the next 24 h=

ours as we did for this sum last year.



Total Amount Charge : ($379.99)





Call us at +1 (888) 470 - 8105, our toll-free number, for further deta=

ils.





Sincerely,



Allyson Toughill=09

Online McAfee Services

Call us : +1 (888) 470 - 8105. Toll-free.





--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




"font-size: 14px;">Date: 24 February, 2023

Order/Ref ID: DXY-#7=

013662036449

=

Regarding Your Annual PC Plan






Dear C=

lient! support@nl2k.ab.ca



You we=

re purchased a McAfee =

Total Protection Plan last year, as indicated in this email.

>

You sh=

ouldn't experience any problems because today, (February 24, 2023), is=

the last day of its validity period. 

The year of validit=

y of your plan is therefore being rented once more. As soon as your pl=

an is ready, we'll go to work on it.



We'll also deduct the same amount from =

your account over the next 24 hours as we did for this sum last year.<=

/p>


font-size: 15px;">Total Amount Charge : ($379.99)
pan>



Call u=

s at +1 (888) 470 - =

8105
, our toll-free number, for further details.
>






Faithf=

ully,




style=3D"color: rgb(41, 105, 176);">Carmelita Evans

Online =

McAfee Services
Call us : 

5px;">+1 (888) 470 - 8105. T=

oll-free.







--DaPxKn3GYNuui8=_l1aWjEe8ietiakueB0--