ALiexpress phish from Amazon

Posted by Dave Yadallee on
Return-path: <0101018d852a9390-cfe1eb25-eae1-433b-ba9b-cb40d9beb925-000000@us-west-2.amazonses.com>

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 13:06:00 -0700

Received: from a27-123.smtp-out.us-west-2.amazonses.com ([54.240.27.123]:56017)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0101018d852a9390-cfe1eb25-eae1-433b-ba9b-cb40d9beb925-000000@us-west-2.amazonses.com>)

id 1rXoAD-000000006m5-1uCt

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 13:05:01 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1707336176;

h=From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID:Feedback-ID;

bh=wlCKEMzGly0kaWMzXOmDKpyssGdmteeDiIReUk8/gSs=;

b=HRraI6GSVaqPzDvMf1wm/payQkNw118oK8WAbmysCzoISc9gpxmPOhIbOt1dh/6B

jzfvRD1r0sUgEcQkrm7iL/tIWBdudgCrxn7t2B9ohui+PwT+VlKLs4MKQRkRZPNlvjv

Ns3ixPMNGz0HnUYIOrwVr9YUgY/uhXoWAeqIkwYg=

From: Aliexpress

To: dave@doctor.nl2k.ab.ca

Subject: You have (1) tracking notification

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Content-Transfer-Encoding: 7bit

Date: Wed, 7 Feb 2024 20:02:56 +0000

Unsubscribe:6461766540646f63746f722e6e6c326b2e61622e6361

Message-ID: <0101018d852a9390-cfe1eb25-eae1-433b-ba9b-cb40d9beb925-000000@us-west-2.amazonses.com>

Feedback-ID: 1.us-west-2.88g0X5J6GO/xYvXIFvnwuqoxgwluru49cn3Ggfd7YD0=:AmazonSES

X-SES-Outgoing: 2024.02.07-54.240.27.123

X-Antivirus: AVG (VPS 240207-6, 2/7/2024), Inbound message

X-Antivirus-Status: Clean







--_----------=_MCPart_512623887

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




30KaUYAp>=0A
UkOWKh6fV7npXQ6YYOVL>=0A
tx67>=0A
OAOVdIJ5hoTvnaGr>=0A
>=0A
v6wrc03nWX2d>=0A
nqSy7iBSTEduBxATuHOdrFB2>
sfZv8>=0A
WtqZLfv2BddSEshom>=0A
m>=0A
DGCalVB78uJrO>=0A
jsShOpPsBF4DYWkNg6GzMoBTo>=0A
I923dqd4Y>



--_----------=_MCPart_512623887

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit



























ALIEXPRESS

























DELIVERY OF YOUR PACKAGE


You have (1) package waiting for delivery. Use your code to track it and receive it



Schedule your delivery and subscribe to our push notifications to avoid this from

happening again!




Your tracking code



#AL17735012






Schedule your delivery




































style="font-size: 0px;padding: 0px;padding-top: 9px;padding-right: 18px;padding-bottom: 9px;padding-left: 18px;word-break: break-word;">


style="font-family: 'Helvetica Neue',Arial;font-size: 12px;font-style: normal;font-weight: 400;letter-spacing: 0px;line-height: 1.3;text-align: center;color: #727272;">

We hope you enjoy receiving this message. However, if you prefer not to receive future emails. Please unsubscribe. please click


style="color: #000;font-style: normal;font-weight: normal;text-decoration: underline;">here.














--_----------=_MCPart_512623887--

Norton Security phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXluB-000000007Hi-2jM4

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 10:40:15 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 10:40:15 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhst.outbound-mail.sendgrid.net ([159.183.224.103]:5278)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXlE1-00000000EsM-2Cfp

for sales@nk.ca;

Wed, 07 Feb 2024 09:56:46 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmib.info;

h=list-unsubscribe:from:subject:reply-to:to:content-type:cc:

content-type:from:subject:to;

s=s1; bh=pXQTK0KOb8wDqnEgKvahzI/z3q0keSllPMsTRNWH4ZI=;

b=s/3vRcQVMOqwd4kPoqYUC2awyH04mj9CJSXpIDoa66U1mxJ1V8sV9p1z1dPQO847hYoO

i4gT151reoF3xQP/bQ5mSz1Os8+i+BuqdJmy+6csvvoghcaBWylIUixmrXVf9DmOMsmYcg

kRpmfS7k/DcO8JRq4Zmb6Rqv7CqaBwTwXGJJj/CAO5bKwczB5DStyH61Zp0hsoYiKFH7dw

Ub4vxlW2nJu/H2KLVs0wYBQDk13EaZchRTSaLuDRYTs38d4v7tdFLpMEE2SAILEC1rlaQe

ZaRP3CYyzSiu85pSKvGy6reiZqBcyOKtWf4Valjci0bLgYK0r7HsbJm8ZfTD0srQ==

Received: by filterdrecv-54568dd86-cjkrf with SMTP id filterdrecv-54568dd86-cjkrf-1-65C3B5CF-3B

2024-02-07 16:54:39.560360335 +0000 UTC m=+9756771.420746968

Received: from amazon.com (unknown)

by geopod-ismtpd-8 (SG) with ESMTP

id -Q9wwh8TRCih6LhOPvuqPQ

for ;

Wed, 07 Feb 2024 16:54:39.414 +0000 (UTC)

X-Sender: "Nissan"

X-Receiver: sales@nk.ca

List-Unsubscribe:

Message-ID:

Precedence: bulk

From: "Security-Warning._82"

Date: Wed, 07 Feb 2024 16:54:39 +0000 (UTC)

Subject: UrgentAIert-Your-Subscription-Closed-Today 95742

Reply-To: sales@nk.ca

X-SG-EID:

=?us-ascii?Q?e5rZ8ZlkXXMpMXDTYdqi+4P5KOoK66BKx9+PAK2KfGZBe4=2FBUPAQgn=2FW9rJOHs?=

=?us-ascii?Q?H4uaaKc=2FAZxwKPczrd3JPpGZD5KOZwfCTmCdxBP?=

=?us-ascii?Q?Xlrz74r9rSq5Z+=2FzxhJClmLGdthAFYumffGd5xB?=

=?us-ascii?Q?3neY4TQrLl0rIF5QBNTjMVlx+pjF2rFxWiFcDpJ?=

=?us-ascii?Q?nw9Hm8jd4aZaKmQUU7RLvXz6JKjQLHj0n+kr6Qt?=

=?us-ascii?Q?YLglsLztZLLNN9j7NjmAQj=2Fe8sqGNS48Vpktio?=

To: sales@nk.ca

X-Entity-ID: at9SvRkkWFClDcekfLb/3w==

Content-Type: multipart/alternative;boundary=--boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit







Your privacy is important to us. If you no longer wish to receive these emails, click here.



Alternatively, you may send a written request to the address below.





https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3DvGXR_xu5RDHlEaGQfNLU5cwDJxjcM45rAuLozIRjDcP-2FsqR2T6ZC0BxhLHQX0p1tH0EXx7eS9zLNuFl-2FVy0DFsVqvRplftfIFNXP94DpGT-2BwJUrT7wActovaaQBG-2F2F1tYbneNlxSjKqBaMUQijaJHs57PuB6qKAxnpkXnoEN-2FQzHEj-2FDX8eeRNlxEpYIPKqm2B0UDrv5Ogsb0sLrER8UqEr2Ag-3D-3D | (631) 207-8670



730 Medford Ave | Patchogue, NY 11772

----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit







24545_Nissan112_eblast_GroundHog










Alternatively, you may send a written request to the address below.



http://nissan112.com | (631) 207-8670
730 Medford Ave | Patchogue, NY 11772






----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d--

Norton Security phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXlu3-000000007HV-3bc1

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 10:40:07 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 10:40:07 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvtvpz.outbound-mail.sendgrid.net ([149.72.120.62]:4194)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXlCY-00000000ErI-3JuD

for root@nk.ca;

Wed, 07 Feb 2024 09:55:16 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmib.info;

h=list-unsubscribe:from:subject:reply-to:to:content-type:cc:

content-type:from:subject:to;

s=s1; bh=rT+Ny0Mwd5O7YRdOS+zn5W2033VXaYst2H8JaC75IWg=;

b=tNvUuNkKXY5w7gLApQ3G5DFi0c1XtPQcpgTBFWttjnfQE1ORzYhMU92H69NsE5051c3+

YifiCHJ/u1mu66aDs2tZo/EcZUGXo612bAznGXrP9vihb+uHVQBku1OT78msgbxn2yWruQ

8XwZZqccBnKMUpc4OHL61+t+3C3x1qhAS5392f9u+ASa75TYQ0BUClNjEhttelYEHnf4CV

50WnMZ62wTthhkI+4KAd2q+IFjQqznaSltHWD+LOkn6ddM+ex7dma5iDGPFrt+ZlCtrpqe

iHSEQR+Gg4tkWjDT7EpLIbi7c7fWhoo2zwapMSMYzpwL4d4N5fnWUF98ueUlmu5Q==

Received: by filterdrecv-74bdf4d586-hp8bh with SMTP id filterdrecv-74bdf4d586-hp8bh-1-65C3B576-7A

2024-02-07 16:53:10.478085803 +0000 UTC m=+9756669.019769651

Received: from amazon.com (unknown)

by geopod-ismtpd-6 (SG) with ESMTP

id LFaFTFF_Sa6CUVARazucYA

for ;

Wed, 07 Feb 2024 16:53:10.328 +0000 (UTC)

X-Sender: "Nissan"

X-Receiver: root@nk.ca

List-Unsubscribe:

Message-ID:

Precedence: bulk

From: "Security-Warning._33"

Date: Wed, 07 Feb 2024 16:53:10 +0000 (UTC)

Subject: UrgentAIert-Your-Subscription-Closed-Today 22152

Reply-To: root@nk.ca

X-SG-EID:

=?us-ascii?Q?e5rZ8ZlkXXMpMXDTYdqi+2Nyq0bJXGh6H7ou1deroiXJWj1pWA3lp=2FfJUzZVSe?=

=?us-ascii?Q?eplV+qoWiBnt2Rcc1+C7RAsoaftpiFzqOF5xUvY?=

=?us-ascii?Q?G=2F51FCm+nUcLZdoWbJbceh1VRoOMzf3HkcJkQXb?=

=?us-ascii?Q?b6Jf9UxjIdYG0kKG9EHvNfUCQr2v9Uq14CV84bh?=

=?us-ascii?Q?Hx7O4+SwyR6cFHQlj64DxwKODXKPTtiMb1tDWyh?=

=?us-ascii?Q?nlfidsYOR9xneM2rISgCQf1X7pjrxdsKhvRDbF?=

To: root@nk.ca

X-Entity-ID: at9SvRkkWFClDcekfLb/3w==

Content-Type: multipart/alternative;boundary=--boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit







Your privacy is important to us. If you no longer wish to receive these emails, click here.



Alternatively, you may send a written request to the address below.





https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3DlCyh_au8KhoARU0pHZsVFxriXkGAimsH8nTsjUJ9n6AWHJngmUxkKak9ZgUjmnjBr1LkK7sOpovbPl4jqPDsRjZHv25yl6XEOHqNwjfwrjrLQfDYACQusAzCrJTEBQNfUvknGHAaBw9c-2FwiF77Nl9TZabiFutSD09qcD5LFPBGWgoNbagYEyCqGE0HLc-2FQccRVhvn0as99QuwErYmMyAvXcRGvw-3D-3D | (631) 207-8670



730 Medford Ave | Patchogue, NY 11772

----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit







24545_Nissan112_eblast_GroundHog










Alternatively, you may send a written request to the address below.



http://nissan112.com | (631) 207-8670
730 Medford Ave | Patchogue, NY 11772






----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d--

DHL Phish from IONOS Philadelphia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 10:41:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXltx-000000007HK-40mg

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 10:40:01 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 10:40:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps.popmt.com ([74.208.104.169]:39563)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXlCL-00000000Eqv-15SA

for root@nl2k.ab.ca;

Wed, 07 Feb 2024 09:55:01 -0700

Received: by vps.popmt.com (Postfix, from userid 10001)

id E15992A85F303; Wed, 7 Feb 2024 10:51:36 -0600 (CST)

To: root@nl2k.ab.ca

Subject: Track your shipment N: 3229964113.

Date: Wed, 7 Feb 2024 16:50:54 +0000

From: Support

Message-ID: <9a2e4ea66518c24f08afbdf39d195b79@inovate.com.mx>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="16ca7547fa525f443966353b5a2dde5e8"

Content-Transfer-Encoding: 8bit

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--16ca7547fa525f443966353b5a2dde5e8

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









DHL Express



Â



YOUR SHIPMENT IS ON ITS WAY



Hello



Your DHL Express shipment with waybill is on its way. The

current estimated delivery is 07 february 2024.



To view your delivery options, make a change or track your shipment.Click here.



ENABLE NOW



Thank you for using On Demand Delivery.



DHL Express - Excellence. Simply delivered.













--16ca7547fa525f443966353b5a2dde5e8

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




rgb(255, 255, 255); width: 650px; font-family: helvetica, arial, sans-serif=

;">




px; border-radius: 8px; margin-top: 20px; box-shadow: rgba(0, 0, 0, 0.1) 0p=

x 4px 8px; font-family: Helvetica, sans-serif; font-size: 13.3px;">


ing: border-box; font-family: Helvetica, sans-serif; font-size: 13.3px; dis=

play: flex; justify-content: space-between;">
cc0000;">DHL Express=






ing: border-box; font-family: Helvetica, sans-serif; font-size: 13.3px; dis=

play: flex; justify-content: space-between;">=C2=A0





, arial, sans-serif;">
: rgb(204, 0, 0);">YOUR SHIPMENT IS ON ITS WAY
n>






; margin-bottom: 1rem;">
ica, arial, sans-serif;">Hello






pan style=3D"color: rgb(44, 54, 58); font-family: helvetica, arial, sans-se=

rif; font-size: 16px;">Your
ial, sans-serif; font-size: 16px;">=C2=A0
pan>
rial, sans-serif; font-size: 16px;">DHL=C2=A0E<=

/span>
-size: 16px;">xpress
n>=C2=A0
>
l, sans-serif; font-size: 16px;">shipment
helvetica, arial, sans-serif; font-size: 16px;">=

=C2=A0
vetica, arial, sans-serif; font-size: 16px;">with
-family: helvetica, arial, sans-serif; font-size: 16px;">
ffff">=C2=A0
y: helvetica, arial, sans-serif; font-size: 16px;">waybill
e=3D"font-family: helvetica, arial, sans-serif; font-size: 16px;">
or=3D"#ffffff">=C2=A0
ont-family: helvetica, arial, sans-serif; font-size: 16px;">is
style=3D"font-family: helvetica, arial, sans-serif; font-size: 16px;">
color=3D"#ffffff">=C2=A0
); font-family: helvetica, arial, sans-serif; font-size: 16px;">on
pan style=3D"font-family: helvetica, arial, sans-serif; font-size: 16px;"><=

font color=3D"#ffffff">=C2=A0
, 58); font-family: helvetica, arial, sans-serif; font-size: 16px;">its
an>
x;">=C2=A0
4, 54, 58); font-family: helvetica, arial, sans-serif; font-size: 16px;">wa=

y.
e: 16px;">=C2=A0
rgb(44, 54, 58); font-family: helvetica, arial, sans-serif; font-size: 16p=

x;">The

size: 16px;" />


serif; font-size: 16px;">current estimated delivery is=C2=A0
yle=3D"font-family: arial, helvetica, sans-serif; font-size: 14px;">07 febr=

uary 2024
ca, arial, sans-serif; font-size: 16px;">.






; margin-bottom: 1rem;">
serif; font-size: 14px;">To view your delivery options, make a change or tr=

ack your shipment.
font-family: arial, helvetica, sans-serif; font-size: 14px;">Click here.
>






; margin-bottom: 1rem;">
ing: border-box; color: rgb(44, 54, 58); font-family: Helvetica, sans-serif=

; font-size: 13.3px;">
4ER6EGRE6RZR64" rel=3D"noreferrer" style=3D"box-sizing: border-box; color: =

rgb(255, 255, 255); text-decoration-line: none; background-color: rgb(184, =

15, 15); padding: 10px 20px; border-radius: 5px; display: inline-block;">EN=

ABLE NOW






; margin-bottom: 1rem;">
serif; font-size: 14px;">Thank you for using On Demand Delivery.






; margin-bottom: 1rem;">
s-serif; font-size: 14px;">DHL Express
helvetica, arial, sans-serif; font-size: 14px;">=C2=A0- Excellence. Simply =

delivered.

















--16ca7547fa525f443966353b5a2dde5e8--



Norton Security phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXlto-000000007GR-11Ky

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 10:39:52 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 10:39:52 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvtvkv.outbound-mail.sendgrid.net ([149.72.120.24]:12112)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXkxt-00000000EaK-479o

for doctor@nk.ca;

Wed, 07 Feb 2024 09:40:06 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmib.info;

h=list-unsubscribe:from:subject:reply-to:to:content-type:cc:

content-type:from:subject:to;

s=s1; bh=dTouRSEPu3lETjFyTqUW3LQJsVT1MwI42Mn9j5MCXCY=;

b=UFLbO14xPGTnVhGfN+8KT4BSbwrvs70wT13LMULRdX/h2IPvJedudnA/x/oRLUq6ZVAS

O9SWx2ZH8JzDDBM1YgZFNLnoLXuOeSlVVoIUw6jLvcZH2tgL4XAqxTszrk4nZ4ip6ldnrh

s5Y8/6WXk3COIYorTqEs8rKFq0mtDz3hEILqgEq/McBLhmvqkHOZXrB3YLfbo3+wN4rxJ1

zwSDjdk+UZ7gIi4Oy2w61l/R3FpTEvNWoQ850Ej3TSBefOiF01OIwvCV0xboUdlVjoqS33

g3Ix4QOMQ6ksRtF7S1Ow71Wv9DI3DWpI5FmBdDkD5FNTS/LAY4yp6tC9DLBD0vMw==

Received: by filterdrecv-canary-74f8595d4b-rnwks with SMTP id filterdrecv-canary-74f8595d4b-rnwks-1-65C3B1E8-76

2024-02-07 16:38:00.884729009 +0000 UTC m=+9755806.697556629

Received: from amazon.com (unknown)

by geopod-ismtpd-1 (SG) with ESMTP

id wHRycZZuRE-aW2TcsEb2NA

for ;

Wed, 07 Feb 2024 16:38:00.621 +0000 (UTC)

X-Sender: "Nissan"

X-Receiver: doctor@nk.ca

List-Unsubscribe:

Message-ID:

Precedence: bulk

From: "Security-Warning._76"

Date: Wed, 07 Feb 2024 16:38:00 +0000 (UTC)

Subject: UrgentAIert-Your-Subscription-Closed-Today 78114

Reply-To: doctor@nk.ca

X-SG-EID:

=?us-ascii?Q?e5rZ8ZlkXXMpMXDTYdqi+7FOIbdJhpDAkAxsgvptRe89h1=2FghPQ6dV3BQRbQs0?=

=?us-ascii?Q?IgRxo+LTiwoLI5cTVLQI8FvWzoE0eyQQ7WRAMk8?=

=?us-ascii?Q?OE9hc=2FnHUxIQ0Qhg3w+vKEf46cTuq5=2FRVpKN7z=2F?=

=?us-ascii?Q?VyrjWOYv0hK87KaU+IW4tR7b37kOM27tOl4ASmY?=

=?us-ascii?Q?k2wrq6glYt1j5i7reA5jwET7iRVReASWe6qGhWD?=

=?us-ascii?Q?G+o29T3pHsaGYEj1Dyesud3OEOnsWXOT1zcjuoR?=

=?us-ascii?Q?HekCp17tl5pAdkijUVyKA=3D=3D?=

To: doctor@nk.ca

X-Entity-ID: at9SvRkkWFClDcekfLb/3w==

Content-Type: multipart/alternative;boundary=--boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit







Your privacy is important to us. If you no longer wish to receive these emails, click here.



Alternatively, you may send a written request to the address below.





https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3DGcaM_EjU-2BRb4-2FGPO3PNlJPYwJDCb8V4vdGlFGvaE8lHZkv9WKb1-2BlvTIe5gSYUy2WQLQ8HsiXr0jdb6X9enLgTiKm-2BEBuvCeBUyydL2fPkmV7X-2FaoYOAvmRTImTdI9YysSxkba3DzYRW0zp6R9dPsljpjULPvX9RPduiwJgLezVu-2BDeK61kBIKudPyiqI-2B3saOEhGnTEWJ-2F4aYOxxp3FWzR6VKA-3D-3D | (631) 207-8670



730 Medford Ave | Patchogue, NY 11772

----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit







24545_Nissan112_eblast_GroundHog










Alternatively, you may send a written request to the address below.



http://nissan112.com | (631) 207-8670
730 Medford Ave | Patchogue, NY 11772






----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d--

Norton Security phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXltk-000000007GL-0yuN

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 10:39:48 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 10:39:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wfbtzhsx.outbound-mail.sendgrid.net ([159.183.224.106]:17532)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXkxu-00000000EaI-0biY

for doctor@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 09:40:08 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmib.info;

h=list-unsubscribe:from:subject:reply-to:to:content-type:cc:

content-type:from:subject:to;

s=s1; bh=ww0P6KrUDlDTDFAKBKwQa4dbwY6utBilnp6FSXLEYA8=;

b=ebhvyAjLq358O6RT6Lml91+OKiQo0zkTWAs8G3b2OjoMLH+CFL6DClEP+uLDD7rYKORd

MJi1UcX4dh9gOFFrf7H3dqCHc9MR+Tg5Ogp5JyLRXOkHgRlwNMLOtJdj1VQihGn/BKGN1i

j9NLBMZGU0szLhevaqUzcKLFDxI9dVycSxvfe/4QByAuHdcuylwPzq/EMonorzxEmoMENn

dtEVTfKi5/3GUgcIGXsRtA1mSXzyjsHgcYJO0Y11Qc3YszwKZkk2hKsaJihJSxnFeXEmcE

TSX5lYlfff7mKuFTDNvc1s/o+HHDl7dMOETdkgeyDh3im7JOPP6Snuf/Rzf3DFqQ==

Received: by filterdrecv-987c56d66-t9p5x with SMTP id filterdrecv-987c56d66-t9p5x-1-65C3B1E8-3C

2024-02-07 16:38:00.501112358 +0000 UTC m=+9755807.491456576

Received: from amazon.com (unknown)

by geopod-ismtpd-5 (SG) with ESMTP

id 7LvkF2lDQ02uq4_kwsm0Sg

for ;

Wed, 07 Feb 2024 16:38:00.428 +0000 (UTC)

X-Sender: "Nissan"

X-Receiver: doctor@doctor.nl2k.ab.ca

List-Unsubscribe:

Message-ID:

Precedence: bulk

From: "Security-Warning._54"

Date: Wed, 07 Feb 2024 16:38:00 +0000 (UTC)

Subject: UrgentAIert-Your-Subscription-Closed-Today 05013

Reply-To: doctor@doctor.nl2k.ab.ca

X-SG-EID:

=?us-ascii?Q?e5rZ8ZlkXXMpMXDTYdqi++rm5F9zNia+qdwMbUpe0wkHu7fzN1bW9ZU1G8s=2FD+?=

=?us-ascii?Q?1odiRM7pqrRrJ1TvEjTJJKzwpnIvt8iDABK4Wki?=

=?us-ascii?Q?C077Nove7T3CGJ3zTc9R=2FI+3sDA5qyfAoo0F4Uw?=

=?us-ascii?Q?DrzLgK1QoghVCk6oRCggUL0yQuJO87+Uv9QtxDs?=

=?us-ascii?Q?rIBti2PZOjzIuz4GbYg9Zn2mX39AtLOvEo++6dK?=

=?us-ascii?Q?rlucHfsrAE7NYycNj+XuncPYwe43FmWzX6+cNnm?=

=?us-ascii?Q?hPQ2SpQfKMcp5CyLyO7ow=3D=3D?=

To: doctor@doctor.nl2k.ab.ca

X-Entity-ID: at9SvRkkWFClDcekfLb/3w==

Content-Type: multipart/alternative;boundary=--boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit







Your privacy is important to us. If you no longer wish to receive these emails, click here.



Alternatively, you may send a written request to the address below.





https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3DLtI5_EjU-2BRb4-2FGPO3PNlJPYwJDDvz531td-2FAxM7rgFSaQjIfQRh57KUQ3KIyqTKHdVurwyehW-2BOk50zOZpGX6l9vI-2FM7UQcfq0y8Z42uakuPgdbC9NG62wjQMo9SRLL-2B189ZygWqHGAkgtd5N9sW7HBvZTlTERH4VW6YqWxPrJQupDTum-2FqyhUMX-2FE4GgNMgOSSIm5DiV8zq2bmuf9uuLSq-2BPM4i2kyG4zNi8P-2FIf6LduHMg-3D | (631) 207-8670



730 Medford Ave | Patchogue, NY 11772

----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit







24545_Nissan112_eblast_GroundHog










Alternatively, you may send a written request to the address below.



http://nissan112.com | (631) 207-8670
730 Medford Ave | Patchogue, NY 11772






----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d--

Norton Security phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 10:40:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXltr-000000007GY-3sOF

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 10:39:55 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 10:39:55 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from s.wrqvtvpz.outbound-mail.sendgrid.net ([149.72.120.62]:49744)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXkxs-00000000EaJ-3TJW

for doctor@nl2k.ab.ca;

Wed, 07 Feb 2024 09:40:06 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmib.info;

h=list-unsubscribe:from:subject:reply-to:to:content-type:cc:

content-type:from:subject:to;

s=s1; bh=kbSclbhSULuOXptG7MsEd+VpVv3VjzTFW0U5+zh//Ak=;

b=l/LqC58rFAUVKE4rpShJlM1tTUpx1KVjQ+Zs09NQB0ZJw2tJXDW5j3Nsc2RPf1RDo/yL

rABosmw8b/Tz3Lu50C6AgrojY268LBw0A7V5ILWr8qtLDUnI6w3aUCUhuKepeFkYy7XYoQ

MuKQD8hpmrVSSRMhbIDPa+uXWOTTX/dDo54F61p/obqyGv4PUUQDPGpDdOxBhu+HU4Di5t

CYv7RG3b1V5WxyZ73ZK1QWX7P0b/XvoQlEqPxJCFNFmbRhArtc7P5HCj7Tz55RdzPJUr62

aKvyw7yIUbfXdBV9iwYCMxN7Qpt6hsHJdpcCDzo+0aBvEN8iX3dT0s2k2T+ddOmg==

Received: by filterdrecv-86b8f958d7-h48qp with SMTP id filterdrecv-86b8f958d7-h48qp-1-65C3B1E8-4D

2024-02-07 16:38:00.686636745 +0000 UTC m=+9755781.347214483

Received: from amazon.com (unknown)

by geopod-ismtpd-4 (SG) with ESMTP

id U_gY_paFQP-ANaENhwC2Kg

for ;

Wed, 07 Feb 2024 16:38:00.450 +0000 (UTC)

X-Sender: "Nissan"

X-Receiver: doctor@nl2k.ab.ca

List-Unsubscribe:

Message-ID:

Precedence: bulk

From: "Security-Warning._01"

Date: Wed, 07 Feb 2024 16:38:00 +0000 (UTC)

Subject: UrgentAIert-Your-Subscription-Closed-Today 83258

Reply-To: doctor@nl2k.ab.ca

X-SG-EID:

=?us-ascii?Q?e5rZ8ZlkXXMpMXDTYdqi+0FV3SU8Cu2kXaoqLo8eI+fSwDoZDeUbCyLIRwAaMt?=

=?us-ascii?Q?HkARRFQX=2F0R9vjQ2tHhOkLVLR1haNilQkbhS8Xo?=

=?us-ascii?Q?53zdJ96gR+jOxyhf8uhUnGlc2al9tkAdZo6Vkxg?=

=?us-ascii?Q?NjgzBa0K8rnKoRCioGMawUGAy7JOBOljZ4jjfjd?=

=?us-ascii?Q?8vKFV3l5GQ2tpmsiL=2FYwZLy9KNWcuClw=2FLaB2Q6?=

=?us-ascii?Q?h=2Fh89Uvsejpd8QWWStteoaQfmvIvKR9GSIgTKY3?=

=?us-ascii?Q?0yZ+QIBbu1z7YNUbPVbCg=3D=3D?=

To: doctor@nl2k.ab.ca

X-Entity-ID: at9SvRkkWFClDcekfLb/3w==

Content-Type: multipart/alternative;boundary=--boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your privacy is important to us. If you no longer wish to

receive these emails, click here. Alternatively, you may send a written request

to the address below. https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3D6oaC_EjU-2BRb4-2FGPO3PNlJPYwJDPSd-2B7f67Z08UhqyTDJUXjecuEiKF6GLjBgpOB3tPFoNk7nfUb110vsRitT270-2FGIdAz799c1

[...]



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[149.72.120.62 listed in wl.mailspike.net]

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[149.72.120.62 listed in psbl.surriel.com]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

0.0 SENDGRID_REDIR Redirect URI via Sendgrid

Subject: {SPAM?} UrgentAIert-Your-Subscription-Closed-Today 83258

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit







Your privacy is important to us. If you no longer wish to receive these emails, click here.



Alternatively, you may send a written request to the address below.





https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3D6oaC_EjU-2BRb4-2FGPO3PNlJPYwJDPSd-2B7f67Z08UhqyTDJUXjecuEiKF6GLjBgpOB3tPFoNk7nfUb110vsRitT270-2FGIdAz799c1PPBC8HYpyxhj-2BAcPGlPtFWyMgkfdbl6PleKLgIlCHZvEXKP-2F1Ag49MI-2F6jFSZBcQbyFH-2FE2ax1xLjt47n-2F4Iac7XUeY0iLZyZRLDwvaDMXKdpU8MR924-2FTy2g-3D-3D | (631) 207-8670



730 Medford Ave | Patchogue, NY 11772

----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit







24545_Nissan112_eblast_GroundHog










Alternatively, you may send a written request to the address below.



http://nissan112.com | (631) 207-8670
730 Medford Ave | Patchogue, NY 11772






----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d--

Norton Security phish from Sendgrid

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 09:40:00 -0700

Received: from s.wrqvtvpz.outbound-mail.sendgrid.net ([149.72.120.62]:27682)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXkww-00000000EYf-0sQV

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 09:39:07 -0700

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=pmib.info;

h=list-unsubscribe:from:subject:reply-to:to:content-type:cc:

content-type:from:subject:to;

s=s1; bh=dn04s1U+H5CMwfPkONw8qOmSOax45tY9l/Z2ozMuaBA=;

b=x2eGCsCLqvfR18dCuh6+GIUwyq20EwfJBb6g9Eq7pDjosWcGhVNJM+bAlBeztZZ5vELa

DUG3gsT1xj/7xURiV0E3Hx8RjPjHZ4aCXh3uh+Zvhf5DkMMmd0Mwmc0gp4N9d/rUlxrPGc

OJQd1JhLQkryd6fl/tn356ZHmJ9TvFQGZLdg4P7dbF+oaZXQse3FBXSIeUB3CvPVl1ct46

1+y/LwP+Uu1YFtrPLJeuLU7xNL3Yz5q99ViTCXu8vxNH5881teXnIdHYm8A4BXCnz9WWdg

fcrlpeSXfw6csWiSzAIIF2ADXSZBvFRJa4MiUGI80U8d+5Gs6gHJcPaYWudg4OLQ==

Received: by filterdrecv-canary-5b59595454-r889n with SMTP id filterdrecv-canary-5b59595454-r889n-1-65C3B1AC-45

2024-02-07 16:37:00.696716962 +0000 UTC m=+9755736.950613119

Received: from amazon.com (unknown)

by geopod-ismtpd-canary-0 (SG)

with ESMTP id J1MIMVAgRkmEtYsQx4HhAg

for ;

Wed, 07 Feb 2024 16:37:00.452 +0000 (UTC)

X-Sender: "Nissan"

X-Receiver: dave@doctor.nl2k.ab.ca

List-Unsubscribe:

Message-ID:

Precedence: bulk

From: "Security-Warning._76"

Date: Wed, 07 Feb 2024 16:37:00 +0000 (UTC)

Subject: UrgentAIert-Your-Subscription-Closed-Today 17439

Reply-To: dave@doctor.nl2k.ab.ca

X-SG-EID:

=?us-ascii?Q?e5rZ8ZlkXXMpMXDTYdqi+7FOIbdJhpDAkAxsgvptRe89h1=2FghPQ6dV3BQRbQs0?=

=?us-ascii?Q?IgRxo+LTiwoLI5cTVLQI8FvWzoE0eyQQ7WRAMk8?=

=?us-ascii?Q?OE9hc+d5wNYg6wa1HTDTJIOfKPJs=2FIzOLVvy+ol?=

=?us-ascii?Q?QRw2B3dp4VIPKbRfUgP6w9OXgoAb9Mbe66nzcVS?=

=?us-ascii?Q?BcGQsnKroI1uSoxAJ9qOA5mhPSQnFeNVXCm7Ckt?=

=?us-ascii?Q?QqeyYoKZhar92byYUh3r+Wmz6vaFrKQG94MLMet?=

=?us-ascii?Q?D2w0zHzuRO3GdvN8lhSvkNSpIDzcTzh0lrbvHu1?= =?us-ascii?Q?p3Q=3D?=

To: dave@doctor.nl2k.ab.ca

X-Entity-ID: at9SvRkkWFClDcekfLb/3w==

Content-Type: multipart/alternative;boundary=--boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

X-Spam_score: 5.7

X-Spam_score_int: 57

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Your privacy is important to us. If you no longer wish to

receive these emails, click here. Alternatively, you may send a written request

to the address below. https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3DxSoe_BfvFY8HVlI0CjVMN4yem2KtKOJaXo851eMLV-2FtZDCR52S6da3OKMs47HTt-2FmaPAMKYBWeuKl-2FcqQWv-2FS4TTxlD6WN6dEL

[...]



Content analysis details: (5.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL

[149.72.120.62 listed in psbl.surriel.com]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[149.72.120.62 listed in wl.mailspike.net]

1.1 URIBL_GREY Contains an URL listed in the URIBL greylist

[URI: sendgrid.net]

-0.0 SPF_PASS SPF: sender matches SPF record

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

0.0 HTML_MESSAGE BODY: HTML included in message

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 SENDGRID_REDIR Redirect URI via Sendgrid

Subject: {SPAM?} UrgentAIert-Your-Subscription-Closed-Today 17439

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/plain; charset=us-ascii

Content-Transfer-Encoding: 7bit







Your privacy is important to us. If you no longer wish to receive these emails, click here.



Alternatively, you may send a written request to the address below.





https://u9958409.ct.sendgrid.net/ls/click?upn=w-2FI67F6d6klr8T7S4DsNBShpUDWendTuxDnmkCr4Dvk-3DxSoe_BfvFY8HVlI0CjVMN4yem2KtKOJaXo851eMLV-2FtZDCR52S6da3OKMs47HTt-2FmaPAMKYBWeuKl-2FcqQWv-2FS4TTxlD6WN6dELgloxv54vMv-2Fb5PamSMUU0Sbj6NP8TrpRypPPM7nXuL7Bcqf8dRoRjIkZExkDSUDaGOE6RZT5ealXaNAi7AO0GDoZQHlAPrtgFNovS3zn-2FHeNyMyazIjQaQNc6YkiqgIWU54MEMsx7dus0g-3D | (631) 207-8670



730 Medford Ave | Patchogue, NY 11772

----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: 7bit







24545_Nissan112_eblast_GroundHog










Alternatively, you may send a written request to the address below.



http://nissan112.com | (631) 207-8670
730 Medford Ave | Patchogue, NY 11772






----boundary_1486565_0f0231a2-589c-494f-99d6-7fc32316a76d--

DHL Phish from IONOS Philadelphia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 08:34:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXjvT-00000000Ce6-0mhD

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 08:33:27 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 08:33:27 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps.popmt.com ([74.208.104.169]:38631)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXjrN-00000000CWL-2n63

for doctor@nl2k.ab.ca;

Wed, 07 Feb 2024 08:29:17 -0700

Received: by vps.popmt.com (Postfix, from userid 10001)

id A61E02A834565; Wed, 7 Feb 2024 09:27:02 -0600 (CST)

To: doctor@nl2k.ab.ca

Subject: Track your shipment N: 3229964113

Date: Wed, 7 Feb 2024 15:25:50 +0000

From: mydhl express

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="185c2f5ac0c4f5963277b05c9c2e6762a"

Content-Transfer-Encoding: 8bit

X-Spam_score: 5.8

X-Spam_score_int: 58

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: DHL Express YOUR SHIPMENT IS ON ITS WAY fghfnjfgnkjgybkftj

tjy rtbyj rbtjr btjy rbtyjr tbyu rbyubtyuyune byuetyuenyu netyub euety



Content analysis details: (5.8 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.1 TW_BJ BODY: Odd Letter Triples with BJ

0.1 TW_YJ BODY: Odd Letter Triples with YJ

0.1 TW_FG BODY: Odd Letter Triples with FG

0.1 TW_JS BODY: Odd Letter Triples with JS

0.1 TW_GV BODY: Odd Letter Triples with GV

0.1 TW_TJ BODY: Odd Letter Triples with TJ

0.1 TW_TB BODY: Odd Letter Triples with TB

0.1 TW_HV BODY: Odd Letter Triples with HV

0.1 TW_DG BODY: Odd Letter Triples with DG

0.1 TW_VS BODY: Odd Letter Triples with VS

0.1 TW_GJ BODY: Odd Letter Triples with GJ

0.1 TW_HB BODY: Odd Letter Triples with HB

0.1 TW_SV BODY: Odd Letter Triples with SV

0.1 TW_SF BODY: Odd Letter Triples with SF

0.1 TW_GD BODY: Odd Letter Triples with GD

0.1 TW_SG BODY: Odd Letter Triples with SG

0.1 TW_FD BODY: Odd Letter Triples with FD

0.1 TW_BT BODY: Odd Letter Triples with BT

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

1.2 HTML_OBFUSCATE_10_20 BODY: Message is 10% to 20% HTML obfuscation

-0.0 T_SCC_BODY_TEXT_LINE No description available.

2.3 LONGLN_LOW_CONTRAST Excessively long line + hidden text

Subject: {SPAM?} Track your shipment N: 3229964113

X-Antivirus: AVG (VPS 240207-4, 2/7/2024), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--185c2f5ac0c4f5963277b05c9c2e6762a

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit









DHL Express



Â



YOUR SHIPMENT IS ON ITS WAY



fghfnjfgnkjgybkftj tjy rtbyj rbtjr btjy rbtyjr tbyu rbyubtyuyune byuetyuenyu netyub euety



Hello



YourfDHL8expresssshipmentdwithlwaybill isponpitsuway.iThe

current estimated delivery is 07-02-2024.



To view your delivery options, make a change or track your shipment,



fbfjnfgjbgjt ftbj fbjf hbjf bjf bj fbh jb jh tbjtujtujrtyjrtyjlbojbebrybery veyuerybey



ENABLE NOW



dhdfghdfgjdsfgjsfdgjsfg jsfgj sfgj sdgj sdgj sgdj sgj sfgj sfgjh sfg



Thank you for using On Demand Delivery.

DHL Express - Excellence. Simply delivered.



x dfds dssd vsgvsdvss shvshsvh vshgvhs



Med venlig hilsen













--185c2f5ac0c4f5963277b05c9c2e6762a

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable




rgb(255, 255, 255); width: 650px; font-family: helvetica, arial, sans-serif=

;">




px; border-radius: 8px; margin-top: 20px; box-shadow: rgba(0, 0, 0, 0.1) 0p=

x 4px 8px; font-family: Helvetica, sans-serif; font-size: 13.3px;">


ing: border-box; font-family: Helvetica, sans-serif; font-size: 13.3px; dis=

play: flex; justify-content: space-between;">
cc0000;">DHL Express=






ing: border-box; font-family: Helvetica, sans-serif; font-size: 13.3px; dis=

play: flex; justify-content: space-between;">=C2=A0





, arial, sans-serif;">
: rgb(204, 0, 0);">YOUR SHIPMENT IS ON ITS WAY
n>






; margin-bottom: 1rem;">fghfnjfgnkjgybkftj t=

jy rtbyj rbtjr btjy rbtyjr tbyu rbyubtyuyune byuetyuenyu netyub euety
>






, arial, sans-serif;">Hello






pan style=3D"color: rgb(44, 54, 58); font-family: helvetica, arial, sans-se=

rif; font-size: 16px;">Your
font-family: helvetica, arial, sans-serif; font-size: 16px;">f
style=3D"color: rgb(204, 0, 0); font-family: helvetica, arial, sans-serif;=

font-size: 16px;">DHL
">
;">8
nt-family: helvetica, arial, sans-serif; font-size: 16px;">e
g>
l, sans-serif; font-size: 16px;">xpress
=3D"color: rgb(255, 255, 255); font-family: helvetica, arial, sans-serif; f=

ont-size: 16px;">s
58); font-family: helvetica, arial, sans-serif; font-size: 16px;">shipment=


ial, sans-serif; font-size: 16px;">d
, 58); font-family: helvetica, arial, sans-serif; font-size: 16px;">with
pan>
, sans-serif; font-size: 16px;">l
8); font-family: helvetica, arial, sans-serif; font-size: 16px;">waybill
pan>
px;">=C2=A0
44, 54, 58); font-family: helvetica, arial, sans-serif; font-size: 16px;">i=

s
rial, sans-serif; font-size: 16px;">p
4, 58); font-family: helvetica, arial, sans-serif; font-size: 16px;">on
an>
sans-serif; font-size: 16px;">p
); font-family: helvetica, arial, sans-serif; font-size: 16px;">its<=

span style=3D"color: rgb(255, 255, 255); font-family: helvetica, arial, san=

s-serif; font-size: 16px;">u
ont-family: helvetica, arial, sans-serif; font-size: 16px;">way.
n style=3D"color: rgb(255, 255, 255); font-family: helvetica, arial, sans-s=

erif; font-size: 16px;">i
-family: helvetica, arial, sans-serif; font-size: 16px;">The

e=3D"font-family: helvetica, arial, sans-serif; font-size: 16px;" />


serif; font-size: 16px;">current estimated delivery is=C2=A0
yle=3D"color: rgb(204, 0, 0); font-family: helvetica, arial, sans-serif; fo=

nt-size: 16px;">07-02-2024
(44, 54, 58); font-family: helvetica, arial, sans-serif; font-size: 16px;">=

.






; margin-bottom: 1rem;">
serif; font-size: 14px;">To view your delivery options, make a change or tr=

ack your shipment,






; margin-bottom: 1rem;">fbfjnfgjbgjt ftbj fb=

jf hbjf bjf bj fbh jb jh tbjtujtujrtyjrtyjlbojbebrybery veyuerybey
p>




; margin-bottom: 1rem;">
ing: border-box; color: rgb(44, 54, 58); font-family: Helvetica, sans-serif=

; font-size: 13.3px;">
4ER6EGRE6RZR64" rel=3D"noreferrer" style=3D"box-sizing: border-box; color: =

rgb(255, 255, 255); text-decoration-line: none; background-color: rgb(184, =

15, 15); padding: 10px 20px; border-radius: 5px; display: inline-block;">EN=

ABLE NOW






; margin-bottom: 1rem;">dhdfghdfgjdsfgjsfdgj=

sfg jsfgj sfgj sdgj sdgj sgdj sgj sfgj sfgjh sfg






; margin-bottom: 1rem;">
serif; font-size: 14px;">Thank you for using On Demand Delivery.

style=3D"font-family: helvetica, arial, sans-serif; font-size: 14px;" />


;">DHL Express
erif; font-size: 14px;">=C2=A0- Excellence. Simply delivered.






; margin-bottom: 1rem;">
izing: border-box; font-size: 14px;">x dfds dssd vsgvsdvss shvshsvh vshgvhs=







Med venlig hilsen

















--185c2f5ac0c4f5963277b05c9c2e6762a--