Phish | Entries from Saturday, October 28. 2023

UPS Phish from hinet.net China

Posted by Dave Yadallee on Saturday, October 28. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Oct 2023 17:46:36 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qwWSZ-000Fjj-1O

for dave@doctor.nl2k.ab.ca;

Fri, 27 Oct 2023 17:41:47 -0600

Resent-From: The Doctor

Resent-Date: Fri, 27 Oct 2023 17:41:47 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from 211-23-73-196.hinet-ip.hinet.net ([211.23.73.196]:45800 helo=localhost)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qwVbg-0002JX-2K

for doctor@nl2k.ab.ca;

Fri, 27 Oct 2023 16:47:12 -0600

Received: by localhost (Postfix, from userid 33)

id BD3A8CD0A0EC; Fri, 27 Oct 2023 22:16:58 +0000 (UTC)

To: doctor@nl2k.ab.ca

Subject: Votre colis en attente de confirmation de votre adresse!

Date: Fri, 27 Oct 2023 22:16:58 +0000

From: UPS CANADA

Message-ID: <0af555b73cf098dc416b7fca6d635dfe@_>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_0af555b73cf098dc416b7fca6d635dfe"

Content-Transfer-Encoding: 8bit

X-Antivirus: AVG (VPS 231027-8, 10/27/2023), Inbound message

X-Antivirus-Status: Clean

This is a multi-part message in MIME format.

--b1_0af555b73cf098dc416b7fca6d635dfe

Content-Type: text/plain; charset=us-ascii

Le colis est en attente de confirmation !

Cher client,

Une tentative de livraison a été effectuée le 2023-10-27. La livraison a échoué car personne n'était présent à l'adresse du destinataire.

Vous pouvez organiser un retour en cliquant sur le lien ci-dessous et en confirmant vos informations de facturation.

Si aucune autre livraison n'est effectuée dans les 48 heures, le colis sera renvoyé à l'expéditeur.

IMPORTANT : Vous devez désormais payer les frais de port pour retourner votre colis via notre système de paiement afin que nous puissions vous envoyer le colis le plus rapidement possible.

1ZY8KT105425855763

© 2023 United Parcel Service of America, Inc. UPS, la marque UPS et la couleur marron sont des marques commerciales de United Parcel Service of America, Inc. Tous droits réservés.

--b1_0af555b73cf098dc416b7fca6d635dfe

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

=09

id=3D"m_2580926556178544880WrapperTable" role=3D"presentation" style=3D"co=

lor: rgb(34, 34, 34); font-family: Arial, Helvetica, sans-serif; font-size:=

small; background-color: rgb(255, 255, 255); border-spacing: 0px; border-c=

ollapse: collapse; margin: 20px auto; padding-bottom: 20px;" width=3D"600">

=09

=09=09

=09=09=09

=09=09

=09=09
9355b4cd">

=09=09=09

=09=09

=09=09
297aef18">

=09=09=09

=09=09

=09=09
2f">

=09=09=09

=09=09

=09=09
9-f1fa19f5cbea">

=09=09=09

=09=09

=09=09
5e1">

=09=09=09

=09=09

=09=09
012ea74d">

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09=09

=09=09=09

=09=09

=09

ding-top: 0px; padding-bottom: 0px;">

=09=09=09
esentation" style=3D"max-width: 600px;" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

valign=3D"top">
ttps://go.ups.com/OTM1LUtLRS0yNDAAAAGNqNl7_XoMmECEyIB-G7Rp6PKdGarGsZ4RcZHgO=

zjXtOllP_y40vLJil6Rlo_Q3Fr2IvS3mBk=3D&source=3Dgmail&ust=3D16984535=

14298000&usg=3DAOvVaw2n4W6cjdYf8Dbx0E69SaL6" href=3D"https://go.ups.com=

/OTM1LUtLRS0yNDAAAAGNqNl7_XoMmECEyIB-G7Rp6PKdGarGsZ4RcZHgOzjXtOllP_y40vLJil=

6Rlo_Q3Fr2IvS3mBk=3D" style=3D"color: rgb(17, 85, 204);" target=3D"_blank">=

3D"UPS"

eusercontent.com/proxy/82Dy3ju4niuWLbi51WG1t8vnQIU11n-bQ8fS3691WAaGYkQYZ5Ud=

uW9oug5g43XXexaW-KrO4ftKQYIQ4Fuk3MtQPu89Ux0ApAEou3szS_j9Sy01LuiKQJt8vxcCL43=

XVHWLwA=3Ds0-d-e1-ft#https://solutions.ups.com/rs/935-KKE-240/images/ups-lo=

go-on-transparent-72x72.png" style=3D"display: block; color: rgb(38, 110, 1=

56); font-size: 16px; font-family: Roboto, Tahoma, Arial, Helvetica, sans-s=

erif !important; border-width: 0px; border-style: solid; width: 72px; heigh=

t: 72px;" />

=09=09=09

p: 0px; padding-bottom: 0px;">

0px 20px 0px; font-family: Roboto, Tahoma, Arial, Helvetica, sans-serif;">

=09=09=09
esentation" style=3D"max-width: 500px;" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

x; color: rgb(18, 18, 18); font-weight: bold; line-height: normal;">

=09=09=09=09=09=09

-945b-724399e97f1c">
gb(30, 30, 30); font-family: PostNordSans, Arial;">Le colis est en attente =

de confirmation !

=09=09=09=09=09=09

=09=09=09

p: 0px; padding-bottom: 0px;">

=09=09=09
esentation" style=3D"max-width: 500px;" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

ine-height: 24px; font-size: 16px; font-family: Roboto, Tahoma, Arial, Helv=

etica, sans-serif; color: rgb(18, 18, 18);">

=09=09=09=09=09=09

52-36c4c72995f2">

=09=09=09=09=09=09

Sans, Arial;">Cher client,<=

/p>

=09=09=09=09=09=09

Sans, Arial;">
cal-align: inherit;">
=3D"vertical-align: inherit;">
t style=3D"vertical-align: inherit;">Une tentative de livraison a ét=

é effectuée le 2023-10-27. <=

/font>
n: inherit;">
al-align: inherit;">La livraison a=

échoué car personne n'était présent &agrav=

e; l'adresse du destinataire.=

=09=09=09=09=09=09

Sans, Arial;">Vous pouvez organise=

r un retour en cliquant sur le lien ci-dessous et en confirmant vos informa=

tions de facturation.

=09=09=09=09=09=09

Sans, Arial;">Si aucune autre livr=

aison n'est effectuée dans les 48 heures, le colis sera renvoy&e=

acute; à l'expéditeur.

=09=09=09=09=09=09

Sans, Arial;">IMPORTANT :
trong> Vou=

s devez désormais payer les frais de port pour retourner votre colis=

via notre système de paiement afin que nous puissions vous envoyer =

le colis le plus rapidement possible.

=09=09=09=09=09=09

=09=09=09

ding-top: 0px; padding-bottom: 0px;" width=3D"100%">

=09=09=09
esentation" style=3D"max-width: 500px;" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

font-size: 16px; font-family: Roboto, Tahoma, Arial, Helvetica, sans-serif;=

font-weight: bold; color: rgb(0, 0, 0); line-height: normal; padding: 0px =

0px 20px; border-radius: 0px 0px 12px 12px;" valign=3D"top">

=09=09=09=09=09=09
ole=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09
g=3D"0" role=3D"presentation" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

px; padding-top: 10px; padding-bottom: 5px;">

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" role=3D"presentation" width=3D"240">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=3D"#ffc400" style=3D"margin: 0px; border-radius: 50px; padding: 0px; max-w=

idth: 240px; min-width: 240px;">

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

80CTA_Text_Pill61586b69-010c-4d49-968c-19e30ce9df5b" style=3D"margin: 0px a=

uto; padding: 5px 0px; border: 1px solid rgb(255, 196, 0); border-radius: 5=

0px;">
ups.com/OTM1LUtLRS0yNDAAAAGNqNl7_ZQx7tAHwHpgO5ss5SD73rWODlTOxe_htA81Z9tCYPA=

5DRh3-TTQZY_2H2iM8Rlx64w=3D&source=3Dgmail&ust=3D1698453514299000&a=

mp;usg=3DAOvVaw1RQFtS4oRch24E_6IukAgz" href=3D"https://pzo.pdu.mybluehost.m=

e/wp-admin/linkaddcomfr.php" style=3D"display: block; text-decoration-line:=

none; padding: 5px 0px; color: rgb(51, 0, 0) !important;" target=3D"_blank=

">1ZY8KT105425855763
iv>

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09

p: 0px; padding-bottom: 0px;">

=09=09=09
esentation" style=3D"border-spacing: 0px; max-width: 500px;" width=3D"100%"=

>

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

valign=3D"top">

=09=09=09=09=09=09

11px solid rgb(255, 190, 0); font-size: 0px; line-height: 0;">

=09=09=09=09=09=09

=09=09=09

0px 20px 0px; font-family: Roboto, Tahoma, Arial, Helvetica, sans-serif;">&=

nbsp;

t-family: Roboto, Arial, Helvetica, sans-serif; font-size: 16px; line-heigh=

t: 15px; color: rgb(112, 112, 112); padding-top: 0px; padding-bottom: 0px;"=

valign=3D"top" width=3D"100%">

=09=09=09

20px; padding-bottom: 20px;">

=09=09=09
=3D"0" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

=09=09=09=09=09=09
tyle=3D"max-width: 200px;" width=3D"100%">

=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09
g=3D"0" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09
ellspacing=3D"0" width=3D"100%">

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09=09=09=09

margin: 0px;">
ps://go.ups.com/OTM1LUtLRS0yNDAAAAGNqNl7_kXtPzD2RAMXnxFT6uNAoYGNHvoJMM8Z1VL=

-Tt_HoDIUi36kUxLffWJL4KrrtkDa_xw=3D&source=3Dgmail&ust=3D1698453514=

299000&usg=3DAOvVaw3PO0oa2yp4560-5rYF9Cvc" href=3D"https://go.ups.com/O=

TM1LUtLRS0yNDAAAAGNqNl7_kXtPzD2RAMXnxFT6uNAoYGNHvoJMM8Z1VL-Tt_HoDIUi36kUxLf=

fWJL4KrrtkDa_xw=3D" style=3D"color: rgb(17, 85, 204);" target=3D"_blank" ti=

tle=3D"LinkedIn">

ight=3D"25" src=3D"https://ci6.googleusercontent.com/proxy/YceitjEzAspvMToR=

W4LJV_SPXhZF7qFz57X0H9GUYdClOyvIzXBdhQeNfMIWj-rHNMvinBLGf1BMvRUefkAXo4mQytz=

S64Qt7Oxfd3MMPkNcZxWKK3gOCAaBvGKWHek=3Ds0-d-e1-ft#https://solutions.ups.com=

/rs/935-KKE-240/images/icon-linkedin-gray-26x26.png" style=3D"border: 0px n=

one;" width=3D"25" />

margin: 0px;">
ps://go.ups.com/OTM1LUtLRS0yNDAAAAGNqNl7_mYsJt81Z1GFIKTur4UuYJGgkohuyONXMoe=

CprqDrEHjQSLVN79NhoFYctonip54r-o=3D&source=3Dgmail&ust=3D1698453514=

299000&usg=3DAOvVaw1fXXjxbTsX4H1joCetuFcw" href=3D"https://go.ups.com/O=

TM1LUtLRS0yNDAAAAGNqNl7_mYsJt81Z1GFIKTur4UuYJGgkohuyONXMoeCprqDrEHjQSLVN79N=

hoFYctonip54r-o=3D" style=3D"color: rgb(17, 85, 204);" target=3D"_blank" ti=

tle=3D"Instagram">

height=3D"25" src=3D"https://ci6.googleusercontent.com/proxy/z5HAkSu5A4ToE9=

VFyZlKfscfBnDCyXvvVLO6uasOKzcqpqTC7GTQ8ki6CMW2w8W7KN5aywFEqWJcdIpN7j8Vw3O5L=

CcLaODHJA7AS_TV67AFvLZ3aqsKGTi7Qe8Dj1ac=3Ds0-d-e1-ft#https://solutions.ups.=

com/rs/935-KKE-240/images/icon-instagram-gray-26x26.png" style=3D"border: 0=

px none;" width=3D"25" />

margin: 0px;">
ps://go.ups.com/OTM1LUtLRS0yNDAAAAGNqNl7_iwAD7CQfF-cW0FHPsSQxRIgQI7g1heKN8I=

0xdXr8iKutZqI_fFkTPGsqwWtxaclEbk=3D&source=3Dgmail&ust=3D1698453514=

299000&usg=3DAOvVaw1mvNKSViiPgv2w5BSi4lOw" href=3D"https://go.ups.com/O=

TM1LUtLRS0yNDAAAAGNqNl7_iwAD7CQfF-cW0FHPsSQxRIgQI7g1heKN8I0xdXr8iKutZqI_fFk=

TPGsqwWtxaclEbk=3D" style=3D"color: rgb(17, 85, 204);" target=3D"_blank" ti=

tle=3D"Twitter">

ht=3D"25" src=3D"https://ci6.googleusercontent.com/proxy/GOfJFYPoKxfQQtV3ND=

w2K4llCjDlnD4TZ4PJQyo1To6Fvv0pVZX0kl4NZh6hhTk2JbzwMr16WQFW5Q_KCYnSR2sK5zwbP=

5MG9xgDFPdNA2RRui9LjkVPcf67fTKo4g=3Ds0-d-e1-ft#https://solutions.ups.com/rs=

/935-KKE-240/images/icon-twitter-gray-26x26.png" style=3D"border: 0px none;=

" width=3D"25" />

margin: 0px;">
ps://go.ups.com/OTM1LUtLRS0yNDAAAAGNqNl7_mAvv0GiCWL53G8WviT8uphTkX2KQYR1iCA=

C5ZH3J8StD2NM-sHt26rkY-pBL0mlTRU=3D&source=3Dgmail&ust=3D1698453514=

299000&usg=3DAOvVaw2GRlCgbUuoqFiwmxFvqxg4" href=3D"https://go.ups.com/O=

TM1LUtLRS0yNDAAAAGNqNl7_mAvv0GiCWL53G8WviT8uphTkX2KQYR1iCAC5ZH3J8StD2NM-sHt=

26rkY-pBL0mlTRU=3D" style=3D"color: rgb(17, 85, 204);" target=3D"_blank" ti=

tle=3D"Facebook">

ight=3D"25" src=3D"https://ci3.googleusercontent.com/proxy/Pu_BR8sGLefMN_hz=

chfUAcR-rvAIiUFsWuDGS3WG_8wYUfKqkXXYMQ56KfJH5XlroZFXDopmJjVCGUky6j4DkMPXG6B=

Qu_rPqz4hbIJKCZLR3pPV0TIAhYPn39x1jTc=3Ds0-d-e1-ft#https://solutions.ups.com=

/rs/935-KKE-240/images/icon-facebook-gray-26x26.png" style=3D"border: 0px n=

one;" width=3D"25" />

=09=09=09=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09

ding-top: 10px; padding-bottom: 10px;">

t-family: Roboto, Arial, Helvetica, sans-serif; font-size: 16px; line-heigh=

t: 15px; max-width: 500px; padding-top: 0px; padding-bottom: 0px;" valign=

=3D"top" width=3D"100%">

=09=09=09

=09=09=09
ng=3D"0" cellspacing=3D"0" style=3D"max-width: 500px;" width=3D"100%">

=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09=09=09

=09=09=09=09=09

=09=09=09=09

=09=09=09

x; line-height: 16px; color: rgb(54, 54, 54); font-family: UPSBerlingskeSan=

s, Arial, Helvetica, sans-serif !important;" valign=3D"top" width=3D"100%">

=09=09=09=09=09=09

ght: 16px;">© 2023 United Par=

cel Service of America, Inc. UPS, la marque UPS et la couleur marron sont d=

es marques commerciales de United Parcel Service of America, Inc. Tous droi=

ts réservés.

=09=09=09=09=09=09

0px; font-size: 10px; line-height: 16px; color: rgb(54, 54, 54); font-famil=

y: UPSBerlingskeSans, Arial, Helvetica, sans-serif !important;" valign=3D"t=

op" width=3D"100%">

=09=09=09=09=09=09

ght: 16px;">

=09=09=09=09=09=09

=09=09=09

--b1_0af555b73cf098dc416b7fca6d635dfe--

DHL Phish from inmotionhosting.com Los Angeles California

Posted by Dave Yadallee on Saturday, October 28. 2023

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 27 Oct 2023 16:40:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qwVJL-0006Do-01

for dave@doctor.nl2k.ab.ca;

Fri, 27 Oct 2023 16:28:11 -0600

Resent-From: The Doctor

Resent-Date: Fri, 27 Oct 2023 16:28:10 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps96008.inmotionhosting.com ([104.152.111.49]:36008)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96.2 (FreeBSD))

(envelope-from )

id 1qwPBE-0000Kp-0z

for doctor@doctor.nl2k.ab.ca;

Fri, 27 Oct 2023 09:55:28 -0600

Received: from vps96008.inmotionhosting.com (localhost [127.0.0.1])

by vps96008.inmotionhosting.com (8.14.7/8.14.7) with ESMTP id 39RFrINa012997

for ; Fri, 27 Oct 2023 08:53:18 -0700

Received: (from wordpress@localhost)

by vps96008.inmotionhosting.com (8.14.7/8.14.7/Submit) id 39RFrHXA012995;

Fri, 27 Oct 2023 08:53:17 -0700

X-Authentication-Warning: vps96008.inmotionhosting.com: wordpress set sender to www-data@vps96008.inmotionhosting.com using -f

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?Q?=F0=9F=93=A6_Notification_of_shipment_#1_-_Standar?= =?UTF-8?Q?d=F0=9F=93=A6?=

Date: Fri, 27 Oct 2023 15:53:17 +0000

From: DHL Express

Message-ID:

X-Mailer: PHPMailer 6.0.7

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

X-Antivirus: AVG (VPS 231026-6, 10/26/2023), Inbound message

X-Antivirus-Status: Clean

Dear customer,

Your parcel number #7140012563 is on its way.

As this parcel has been declared to customs, we invite you to pay the taxes and duties of 2.65 USDÂ by contacting us via the secure link below as soon as possible.

Pay for my delivery

*Tax to be paid: 2.65 USD

*Date: 27/10/2023

This e-mail is automatically created.

If you are in doubt about the authenticity of this message, please visit the following website:https://www.dhl.com/ca-fr/home.html

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	October '23					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30	31