home depot phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 08 May 2023 08:23:36 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pw1jJ-000JHP-OU

for dave@doctor.nl2k.ab.ca;

Mon, 08 May 2023 08:20:45 -0600

Resent-From: The Doctor

Resent-Date: Mon, 8 May 2023 08:20:45 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [45.10.244.244] (port=35447 helo=AmosHamilton.org)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pvyaf-0001AZ-Ir

for root@nk.ca;

Mon, 08 May 2023 04:59:55 -0600

MIME-Version: 1.0

Message-Id:

From: HOME DEPOT

Subject:Today you have been chosen to receive a brand new Dyson V11

Content-Transfer-Encoding: 7bit

Content-Type: text/html; charset=UTF-8

Date: Mon, 08 May 2023 12:57:23 +0200

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Home Depot Survey



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[45.10.244.244 listed in zen.spamhaus.org]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=smkh5158671695%40shop.clair-voyance.me;ip=45.10.244.244;r=doctor.nl2k.ab.ca]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

1.2 MISSING_HEADERS Missing To: header

0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.3 HTML_SHORT_LINK_IMG_3 HTML is very short with a linked image

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.7 HDRS_MISSP Misspaced headers

0.7 BODY_URI_ONLY Message body is only a URI in one line of text or for

an image

1.4 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} Today you have been chosen to receive a brand new Dyson V11









Home Depot Survey





















































Home Depot Survey
































Canada post parcel phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 07 May 2023 23:00:03 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1pvsyN-000Gll-Mg

for dave@doctor.nl2k.ab.ca;

Sun, 07 May 2023 22:59:43 -0600

Resent-From: The Doctor

Resent-Date: Sun, 7 May 2023 22:59:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from cloudhost-693910.us-midwest-1.nxcli.net ([209.87.159.245]:32223)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1pvpE1-000J2T-Mh

for doctor@doctor.nl2k.ab.ca;

Sun, 07 May 2023 18:59:41 -0600

Received: (qmail 4589 invoked by uid 10058); 8 May 2023 00:57:33 +0000

To: doctor@doctor.nl2k.ab.ca

Subject: Reminder

X-PHP-Originating-Script: 10058:utchiha505_m.php

Date: Mon, 8 May 2023 00:57:33 +0000

From: Parcel Delivery

Reply-To: postmaster@cloudhost-693910.us-midwest-1.nxcli.net

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_a824e4eeb9896ad5feec292a7d9fff69"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--b1_a824e4eeb9896ad5feec292a7d9fff69

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

























The message

is not displayed correctly?

























































































































































































Delivery





attempt

failed:

5/6/2023,

09:15





Reason:





Incomplete

delivery

address.

Tracking





Number: CA9514901185421







In





order to

cancel

rerouting

process we

kindly ask you

to pay the

shipping fees

(2.99$ USD).



Click

Here









A

question ?

Our





team is here

to help you.













At

your service!



































































































This e-mail is sent

automatically. It is therefore not possible to respond to

them in return.

Stop receiving an

Automatic Follow-Up Message

This message is sent

to you by USPS and is intended to inform you of the status

of the delivery of your package. Your contact details have

been transmitted to us, for the exclusive needs of the

delivery, by the sender of your package. They will be kept

for 6 months then archived for a maximum period of 3

years. They will not be used for commercial prospecting

purposes. In accordance with the regulations applicable to

personal data, you have the right to access, rectify and

oppose your personal data for legitimate reasons which you

can exercise via the form on www.usps.com

exercise-of-rights-on-personal-data or by mail to the

following address: USPS SAS - Contact Informatique et

Libertés - 300 N New York Ave, Winter Park, FL 32789s,

indicating your name, first name, postal address and

attaching a copy of both sides of your identity document.

Any request relating to the performance of the transport

service must be addressed to Customer Service., "Green

delivery" zones 100% of last mile deliveries in electric

vehicles, natural gas or cargo bikes





















--b1_a824e4eeb9896ad5feec292a7d9fff69

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit























cellpadding="0" border="0" bgcolor="#ffffff" align="center">






































align="center">
class="JLqJ4b ChMk0b">The message

is not displayed correctly?



width="100%" cellspacing="0" cellpadding="0" border="0">














width="100%" cellspacing="0" cellpadding="0"

border="0">














style="width: 280px; -ms-text-size-adjust:

100%; -webkit-text-size-adjust: 100%;

mso-table-lspace: 0pt; mso-table-rspace:

0pt;">
src="http://imgemailing.cpam59.fr/template/header-left.gif"

alt="" class="fr-fic fr-dii">


cellpadding="0" border="0">














moz-do-not-send="true"

src="https://findvectorlogo.com/wp-content/uploads/2020/03/canada-post-corporation-vector-logo.png"

alt="" width="130" height="98">


width="100%" cellspacing="0"

cellpadding="0" border="0">




















width="100%"

cellspacing="0"

cellpadding="0" border="0">








class="btn-account"

height="39">











width="49"

height="39">
style="line-height:

0;

text-decoration:

none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt=""

class="fr-fic

fr-dii">
width="24"

height="39">
style="line-height:

0;

text-decoration:

none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt=""

class="fr-fic

fr-dii">



style="width: 100%

!important;

-ms-text-size-adjust: 100%;

-webkit-text-size-adjust:

100%; mso-table-lspace: 0pt;

mso-table-rspace: 0pt;">
style="line-height: 0;

text-decoration: none;"

src="http://imgemailing.cpam59.fr/template/header-bottom-right.gif"

alt="" class="fr-fic

fr-dii">











width="100%" cellspacing="0" cellpadding="0" border="0"

bgcolor="#f2f3f7">
















src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic fr-dii" width="24">


width="440" height="415" cellspacing="0"

cellpadding="0" border="0">


















cellpadding="0" border="0">


















style="height: auto; line-height:

0; text-decoration: none;

background-color: rgb(242, 243,

247);"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic fr-dii"

height="20">



width="100%" cellspacing="0"

cellpadding="0" border="0"

bgcolor="#ffffff">
























height="20">
style="line-height: 0;

text-decoration: none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic

fr-dii" height="20">



width="100%"

cellspacing="0"

cellpadding="0" border="0">
















style="line-height:

0;

text-decoration:

none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt=""

class="fr-fic

fr-dii" width="15">


height="340"

cellspacing="0"

cellpadding="0"

border="0">
























class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">





class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">
class="JLqJ4b">
class="Q4iAWc">


class="JLqJ4b

ChMk0b">
class="Q4iAWc">Delivery





attempt

failed:

5/6/2023,

09:15



class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">





class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">
class="JLqJ4b">
class="Q4iAWc">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">Reason:





Incomplete

delivery

address.



class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">Tracking





Number: CA9514901185421



class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">





class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">
class="JLqJ4b">
class="Q4iAWc">


class="JLqJ4b

ChMk0b">
class="Q4iAWc">In





order to

cancel

rerouting

process we

kindly ask you

to pay the

shipping fees

(2.99$ USD).
class="JLqJ4b

ChMk0b">
class="Q4iAWc">




moz-do-not-send="true"

href="http://uzmansurucukursu.com.tr/profiles/standard/index.php">Click

Here





A

question ?



class="VIiyi"

lang="en">
class="JLqJ4b

ChMk0b">
class="Q4iAWc">Our





team is here

to help you.
At

your service!



style="line-height:

0;

text-decoration:

none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt=""

class="fr-fic

fr-dii" width="15">



height="20">
style="line-height: 0;

text-decoration: none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic

fr-dii" height="20">





style="-ms-text-size-adjust: 100%;

background-color: #ffffff;

-webkit-text-size-adjust: 100%;

mso-table-lspace: 0pt; mso-table-rspace:

0pt;" width="21" valign="top">


cellpadding="0" border="0">


















height="20">
src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic fr-dii"

height="20">

style="height: auto; line-height:

0; text-decoration: none;"

src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic fr-dii">



style="-ms-text-size-adjust: 100%;

background-color: #ffffff;

-webkit-text-size-adjust: 100%;

mso-table-lspace: 0pt; mso-table-rspace:

0pt;" valign="top">



src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic fr-dii" width="24">



src="http://imgemailing.cpam59.fr/template/spacer.gif"

alt="" class="fr-fic fr-dii" height="21">


This e-mail is sent

automatically. It is therefore not possible to respond to

them in return.



Stop receiving an

Automatic Follow-Up Message



This message is sent

to you by USPS and is intended to inform you of the status

of the delivery of your package. Your contact details have

been transmitted to us, for the exclusive needs of the

delivery, by the sender of your package. They will be kept

for 6 months then archived for a maximum period of 3

years. They will not be used for commercial prospecting

purposes. In accordance with the regulations applicable to

personal data, you have the right to access, rectify and

oppose your personal data for legitimate reasons which you

can exercise via the form on www.usps.com

exercise-of-rights-on-personal-data or by mail to the

following address: USPS SAS - Contact Informatique et

Libertés - 300 N New York Ave, Winter Park, FL 32789s,

indicating your name, first name, postal address and

attaching a copy of both sides of your identity document.

Any request relating to the performance of the transport

service must be addressed to Customer Service., "Green

delivery" zones 100% of last mile deliveries in electric

vehicles, natural gas or cargo bikes


















--b1_a824e4eeb9896ad5feec292a7d9fff69--