Nigerian Phish from Turkey

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 29 Jan 2024 06:39:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rURpp-000000007jH-2xtj

for dave@doctor.nl2k.ab.ca;

Mon, 29 Jan 2024 06:38:01 -0700

Resent-From: The Doctor

Resent-Date: Mon, 29 Jan 2024 06:38:01 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [94.138.208.242] (port=59971 helo=mail.teratek.tv)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rUPWQ-00000000P54-1Ku8

for doctor@nl2k.ab.ca;

Mon, 29 Jan 2024 04:09:54 -0700

Received: from localhost (localhost.localdomain [127.0.0.1])

by mail.teratek.tv (Postfix) with ESMTP id 0908C86142;

Sun, 14 Jan 2024 13:15:16 +0200 (EET)

X-Virus-Scanned: amavisd-new at mail.teratek.tv

Received: from mail.teratek.tv ([127.0.0.1])

by localhost (mail.teratek.tv [127.0.0.1]) (amavisd-new, port 10026)

with ESMTP id d3pmsHC1nE3f; Sun, 14 Jan 2024 13:15:11 +0200 (EET)

Received: from [46.29.255.44] (unknown [46.29.255.44])

by mail.teratek.tv (Postfix) with ESMTPA id D784789ED8;

Fri, 1 May 2015 22:26:23 +0300 (EEST)

Content-Type: text/plain; charset="utf-8"

MIME-Version: 1.0

Content-Transfer-Encoding: quoted-printable

Content-Description: Mail message body

Subject: Re: Your Package For Delivery!!!!

To: Recipients

From: "Mr. Williams Emad"

Date: Fri, 01 May 2015 12:24:41 -0700

Reply-To: mrwilliamsemad1000@gmail.com

Message-Id: <20150501192623.D784789ED8@mail.teratek.tv>

X-Spam_score: 10.3

X-Spam_score_int: 103

X-Spam_bar: ++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Assistant Inspection Director Honolulu International Airport

300 Rodgers Boulevard, Honolulu, HI 96819, USA 1-530-425-5384 Hello Beneficiary

Re: Your Package For Delivery



Content analysis details: (10.3 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

[94.138.208.242 listed in bl.score.senderscore.com]

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[94.138.208.242 listed in bl.score.senderscore.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[mrwilliamsemad1000(at)gmail.com]

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 HK_NAME_MR_MRS No description available.

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From

2.7 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419)

0.0 FORM_FRAUD_5 Fill a form and many fraud phrases

Subject: {SPAM?} Re: Your Package For Delivery!!!!



Assistant Inspection Director

Honolulu International Airport

300 Rodgers Boulevard,

Honolulu, HI 96819, USA

1-530-425-5384





Hello Beneficiary



Re: Your Package For Delivery



I am Mr.Williams G. Emad, head of luggage/baggage storage facilities here=

at the Honolulu International Airport,Honolulu, HI 96819 USA. During my re=

cent withheld package routine check at the Airport Storage Vault, I discove=

red an abandoned shipment from a Diplomat from London and when scanned it r=

evealed an undisclosed sum of money in a metal trunk box. The consignment w=

as abandoned because the Contents of the consignment was not properly decla=

red by the consignee as =E2=80=9CMONEY=E2=80=9D rather it was declared as p=

ersonal effect to avoid interrogation and also the inability of the diploma=

t to pay for the United States Non Inspection Charges which is $3,700USD. O=

n my assumption the consignment is still left in our Storage House here at =

the Honolulu International Airport Honolulu till date. The details of the c=

onsignment including your name, your email address in and the official docu=

ments from the United Nations office in Geneva are tagged on the Trunk box.



However, to enable me confirm if you are the actual recipient of this cons=

ignment as the assistant director of the Inspection Unit, I will advise you=

provide your current Phone Number and Full Address, to enable me cross che=

ck if it corresponds with the address on the official documents including t=

he name of nearest Airport around your city. Please note that this consignm=

ent is supposed to have been returned to the United States Treasury Departm=

ent as unclaimed delivery due to the delays in concluding the clearance pro=

cesses so as a result of this, I will not be able to receive your details o=

n my official email account. So in order words to enable me cross check you=

r details, I will advise you send the required details to my private email =

address for quick processing and response. Once I confirm you as the actual=

recipient of the trunk box, I can get everything concluded within 48hours =

upon your acceptance and proceed to your address for delivery.



Lastly, be informed that the reason I have taken it upon myself to contact=

you personally about this abandoned consignment is because I want us to tr=

ansact this business and share the money 70% for you and 30% for me since t=

he consignment has not yet been returned to the United States Treasury Depa=

rtment after being abandoned by the diplomat so immediately the confirmatio=

n is made, I will go ahead and pay for the United States Non Inspection Fee=

of $3,700 dollars and arrange for the box to be delivered to your doorstep=

Or I can bring it by myself to avoid any more trouble but you have to assu=

re me of my 30% share.



I wait to hear from you urgently if you are still alive and I will appreci=

ate if we can keep this deal confidential. Please get back to me via my pri=

vate Email:(mrwilliamsemadprivate1@gmail.com) for further directives: You c=

an call me on my telephone number or drop a message.





Thank you.



Williams G. Emad

Assistant Inspection Director

Honolulu International Airport

300 Rodgers Boulevard,

Honolulu, HI 96819, USA

McAfee Phish from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 08 Feb 2024 10:09:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rY7tI-00000000Fn0-0wXP

for dave@doctor.nl2k.ab.ca;

Thu, 08 Feb 2024 10:08:48 -0700

Resent-From: The Doctor

Resent-Date: Thu, 8 Feb 2024 10:08:48 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-mw2nam04hn2214.outbound.protection.outlook.com ([52.100.162.214]:31402 helo=NAM04-MW2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rY5sw-00000000CC2-0LBH

for sales@nk.ca;

Thu, 08 Feb 2024 08:00:22 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=ERxaXztkkrCEPCv40KFoidZnyy3JjpUwwKNWNCf0jCWK94tSTQZY7ktQz4InjT/jwRJIp+x+5MDRAJrKCVM3gYiahS+4MwZ4b8lsG99IXBnsWRB+GfiH51wSavKSkNgHucYkUs3600Y9BpsNeuP7YyBF2GWK/4rlxKdAuR0MIsp5px261t+xm9yh8R2je32VQJ3tUMtfECI/k3QS0tIy+Q4y2EylSQMdXVSXTueK/iiNHh51QeglFhGfuf3Nrtc40B+PJq7WAMc9HfaeGciEnRiqSIUDR0oTbn9Cse4zYKJiK8rYcm8PRMBNIVcJSRZYVNgQFD7sxQfcJLVv9Dhlsw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jiW7+dCwEI/dur1EP0nlq6U+m5Bv/TaBMeXmVU8i4OQ=;

b=Emo0oPWNM2ANARzpD8XK4JYJ7+jgezbuG5zxvoEl36Mk6CG/dV39FmmU8JxuTYCdp4lshkO9rZYz4/pIGzviZ7pmEFJzbcezJA07Uere73ugfS42qqYEtQomcqTvwDjAMC4dnSuxWq12u6QruU80rfQjJOIJJbjVhBQLmslj628VeqpKDjtpoBIgf3a1sqhAOGOgxBccpzirys6/5cVlmsr/C6GBC/yFPPumvAqXR2ZCHKsxX1YXVKPGLt6EJbyXqR/jOqBrW729QzRYfP4BkScYwjuXsUB6OOGKgSACT02LdxPrI9wNJnxK8pNWcs4I8xcxNiGAqufgzBjQM72wZA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=fail (sender ip is

45.141.202.150) smtp.rcpttodomain=nk.ca

smtp.mailfrom=xea5i23.onmicrosoft.com; dmarc=none action=none

header.from=xea5i23.onmicrosoft.com; dkim=none (message not signed); arc=none

(0)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 45.141.202.150)

smtp.mailfrom=xea5i23.onmicrosoft.com; dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=xea5i23.onmicrosoft.com;

Date: Thu, 08 Feb 2024 14:58:12 +0000

To: sales@nk.ca

MIME-Version: 1.0

From: Partner

Content-Type: text/html; charset="UTF-8"

Subject: Web Security Information

CC: sales@nk.ca

Content-Transfer-Encoding: 8bit

Message-ID:



X-EOPAttributedMessage: 0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: CY4PEPF0000EE35:EE_|PH0PR04MB7463:EE_

X-MS-Office365-Filtering-Correlation-Id: 387e6f08-a37d-4769-6134-08dc28b66007

X-MS-Exchange-SenderADCheck: 1

X-MS-Exchange-AntiSpam-Relay: 0

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

=?utf-8?B?UXNzcTErSzM0K3I2bU9aM1k4cmt4aFovMXZ6ekRGZkdaQWpWQlowU21hNSsz?=

=?utf-8?B?WUE4T2hoODAzTnE0bzYxbkphQmRkTDNmV01mcTBJdWp5L3hDTVYxR1BxU2M0?=

=?utf-8?B?TWhjb25nUWswajJlMzhTS0FqZkFLVmcvTkJzL1JoL2xmb2VldWZCNkFvTkl1?=

=?utf-8?B?Z2hBZUp0aDV0SldvY2VRdlFvdjB5YjN6TEdpendjOWJDY0hyM3RSNjBRa2pY?=

=?utf-8?B?VU0wb2VsNEtabGxFUlk4WVJzQjdCeTVJQXVvNFdIV0FySG50cFp5Qm1VaEpN?=

=?utf-8?B?Sll6YzcxdkovYWdpMHRlb2xjSnllN05HUDBvUlNGVEpvQ01McHM5dWxJdXVO?=

=?utf-8?B?OHBESFVQM2pvMU5yMUFWWFhBcjNvSGMzTko0S3BRLzdzTWdlU3hhbjBuemw1?=

=?utf-8?B?QlpZbzN6T08zSEQ1OVlLVzdDWFJURFFXbWN3WGk1T1l3YWlGQmExb01nVld0?=

=?utf-8?B?a3RwTkFIQnBIZ1RUc1VXOG9GVVBBNTdwQ0RvSDM0d3VMMWtMZ0wzeEF3bDRT?=

=?utf-8?B?SWRDNncwOFFpRThCdHlSUjRHMllzcDB5eHk5b250OXdOR2ptY1JkRnJQc0dM?=

=?utf-8?B?dEozczZqS3c2cTVNSHpkQ3YwQktaMWhzYWVWR08xUi9hVExMbnJ3ckhBbVl6?=

=?utf-8?B?aFFYQ00yb2ZRcUhPWXNoVnBMV2UzU1VZQXBaSE8vZHg2dERVTzNQaXlrOG1r?=

=?utf-8?B?VEVCUnFnNklueHdtWFNKMVd3VWlRRCtNVjhlN1FOWkFhWUgzMWg4RFRySDRX?=

=?utf-8?B?QW80TjdhcGQ3SHhaYzlGNFNFZ3lZaGg2THRsM3FvdWlPaWRaTWRhMFJJUERx?=

=?utf-8?B?M2pKWTF3cHRxL0FNMkZtSGFocmFIYWlZWXBkUHNyNXlOWlNvQ2tGMVEvd3hH?=

=?utf-8?B?aS9mbnRPRGRGYWxuMGxCTk9ISXZaNC9pMFdkUitGUlU5KzJyMGJUVHhtbXRj?=

=?utf-8?B?MzRCL0VWVmZMNnZvNExFSHJTQzhVVXE3cW9lMWtkZ29VZ2s4V0g0cWZkRUxq?=

=?utf-8?B?NWZBaFBWeGNNVGR5eC8vZXJCU2JCcmx6QlRLSkNoVzg5T2dzampaczE3NlBt?=

=?utf-8?B?L2d3U0tyU3JLcTFCRk53QVJ6ZFFIYzdQNFhnUElzZHJ5Qk5YZ3NYQTV2blVT?=

=?utf-8?B?Qm9XM213MnRFVUhQK1N4V0lFL0x5SGl3ZCtSMnR3dlhqYnpCSSs1UVRrbXNS?=

=?utf-8?B?Q2FhTkVxUXA1ZzVEd3VzWmZ0VFcyM0NkeUlUQzZ0ZkdEZ3VHNVpCeVA5WVhk?=

=?utf-8?B?RDR2b1lLYnE1RUNLQ0d3NUN4RFJxb2kveUJGQjVnT3pkQ1BEUT09?=

X-Forefront-Antispam-Report:

CIP:45.141.202.150;CTRY:NL;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:xea5i23.onmicrosoft.com;PTR:abstractsonline.cfd;CAT:OSPM;SFS:(13230031)(376002)(39850400004)(136003)(346002)(396003)(230922051799003)(7200799017)(1690799017)(451199024)(186009)(82310400011)(64100799003)(1800799012)(40470700004)(46966006)(36840700001)(336012)(82740400003)(26005)(81166007)(166002)(2906002)(5660300002)(3480700007)(8936002)(508600001)(4326008)(9686003)(7116003)(67280400001)(8676002)(786003)(316002)(6916009)(42186006)(70586007)(70206006)(31696002)(66899024)(558084003)(41300700001)(41320700001);DIR:OUT;SFP:1501;

X-OriginatorOrg: xea5i23.onmicrosoft.com

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Feb 2024 14:58:13.7054

(UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: 387e6f08-a37d-4769-6134-08dc28b66007

X-MS-Exchange-CrossTenant-Id: 17573237-9f8a-4313-b3c6-968d64e87d83

X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=17573237-9f8a-4313-b3c6-968d64e87d83;Ip=[45.141.202.150];Helo=[xea5i23.onmicrosoft.com]

X-MS-Exchange-CrossTenant-AuthSource:

CY4PEPF0000EE35.namprd05.prod.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR04MB7463

X-Spam_score: 6.1

X-Spam_score_int: 61

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: (1) Notifications



Content analysis details: (6.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.100.162.214 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.100.162.214 listed in wl.mailspike.net]

1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist

[URI: schoolarea.de]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.0 SPF_PASS SPF: sender matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.0 AXB_X_FF_SEZ_S Forefront sez this is spam

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[infos_nczemugl(at)xea5i23.onmicrosoft.com]

0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 TVD_SPACE_RATIO No description available.

2.8 SCC_BODY_URI_ONLY Very short body with something maybe clickable

0.0 T_REMOTE_IMAGE Message contains an external image

Subject: {SPAM?} Web Security Information









(1) Notifications










































































































AliExpress Phish from Amazon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 15:16:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXqCc-00000000AWm-2ahN

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 15:15:34 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 15:15:34 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a27-38.smtp-out.us-west-2.amazonses.com ([54.240.27.38]:48315)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0101018d8588cd92-102561df-ded0-4232-ab78-334c57981c1f-000000@us-west-2.amazonses.com>)

id 1rXplq-000000009Px-1E86

for root@nk.ca;

Wed, 07 Feb 2024 14:47:58 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1707342351;

h=From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID:Feedback-ID;

bh=Oy0E5pXXgxm1N4w+izksLha8/mfor+XoHuq08u/e+ww=;

b=XaSTR+PlATMuiIpwgOz77+tFVLdcBdgtGqspMWIH1E44cADUwFn80EYevsXGzoOA

W2/l+CuPboiWPl1Jxageg5X9ZtIzSK7i6CsrLFOy4FfHensYabSAliBYONpHKPyAo7Y

HooB6FC8B6+O78NH/acZzMTPK1KjuUHVjg/O+0ew=

From: Aliexpress

To: root@nk.ca

Subject: You have (1) tracking notification

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Content-Transfer-Encoding: 7bit

Date: Wed, 7 Feb 2024 21:45:51 +0000

Unsubscribe:726f6f74406e6b2e6361

Message-ID: <0101018d8588cd92-102561df-ded0-4232-ab78-334c57981c1f-000000@us-west-2.amazonses.com>

Feedback-ID: 1.us-west-2.88g0X5J6GO/xYvXIFvnwuqoxgwluru49cn3Ggfd7YD0=:AmazonSES

X-SES-Outgoing: 2024.02.07-54.240.27.38







--_----------=_MCPart_512623887

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




rpPnGzCw>=0A
2IOxeh2PLRLojmEPn2qY>=0A
MxU1>=0A
hS84K1I8vHwG8VCK>=0A
>=0A
JyDyDiQKnlwN>=0A
m1GRSvInla7xNApCgp43CsRi>
WjlUy>=0A
aamKyjjDnMtQGVBkX>=0A
0>=0A
I3q1ebBSwxVbx>=0A
YBiks1rj93PTvFtKIqgB3xzoj>=0A
p5fOnIyav>



--_----------=_MCPart_512623887

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit



























ALIEXPRESS

























DELIVERY OF YOUR PACKAGE











You have (1) package waiting for delivery. Use your code to track it and receive it



Schedule your delivery and subscribe to our push notifications to avoid this from

happening again!








Your tracking code



#AL17735012








































style="font-size: 0px;padding: 0px;padding-top: 9px;padding-right: 18px;padding-bottom: 9px;padding-left: 18px;word-break: break-word;">


style="font-family: 'Helvetica Neue',Arial;font-size: 12px;font-style: normal;font-weight: 400;letter-spacing: 0px;line-height: 1.3;text-align: center;color: #727272;">

We hope you enjoy receiving this message. However, if you prefer not to receive future emails. Please unsubscribe. please click


style="color: #000;font-style: normal;font-weight: normal;text-decoration: underline;">here
.



















--_----------=_MCPart_512623887--

AliExpress Phish from Amazon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 15:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXqBT-00000000AUY-4At1

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 15:14:23 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 15:14:23 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a27-116.smtp-out.us-west-2.amazonses.com ([54.240.27.116]:45553)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0101018d8530b63b-49fa84e8-62b8-4a30-ba5f-faa48d87aabd-000000@us-west-2.amazonses.com>)

id 1rXoGg-000000006vj-3HK7

for doctor@nk.ca;

Wed, 07 Feb 2024 13:11:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1707336578;

h=From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID:Feedback-ID;

bh=s+S97am88N3cKlJvROc+M8zRszgwh95hu2/A84ga/JM=;

b=HKlGaxMArVbvYq/Moy8XeNErC2Yr7kc4qRznXWeL3bnTKTwFxU+oDEwMrnJze6Sd

lCLVXcN1s4fkZ+W8LCMuzYmQ1iv8qXa90ffpY/XIjBgwGDeOdrF4vZMqgb/761vlZeR

M8MArDlcMwp0Lpzlq4z7z0SJfXJZ+yw+qSCI3318=

From: Aliexpress

To: doctor@nk.ca

Subject: You have (1) tracking notification

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Content-Transfer-Encoding: 7bit

Date: Wed, 7 Feb 2024 20:09:38 +0000

Unsubscribe:646f63746f72406e6b2e6361

Message-ID: <0101018d8530b63b-49fa84e8-62b8-4a30-ba5f-faa48d87aabd-000000@us-west-2.amazonses.com>

Feedback-ID: 1.us-west-2.88g0X5J6GO/xYvXIFvnwuqoxgwluru49cn3Ggfd7YD0=:AmazonSES

X-SES-Outgoing: 2024.02.07-54.240.27.116







--_----------=_MCPart_512623887

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




e0fS2ocw>=0A
Xad0Q6SzxYBLXSrDoNd0>=0A
yjJi>=0A
DLTtdzGHYTjhXX39>=0A
>=0A
iJQ6fRCL2pqf>=0A
eT1U7GPrc70mamzh1Mxbk9O8>
V1M5a>=0A
hynLPgjAFC6J5mxNu>=0A
o>=0A
n7IfDehtpgwjW>=0A
ccffoAEJIliWWl2Zs9dxb9j6T>=0A
wyrRNEZdJ>



--_----------=_MCPart_512623887

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit



























ALIEXPRESS

























DELIVERY OF YOUR PACKAGE











You have (1) package waiting for delivery. Use your code to track it and receive it



Schedule your delivery and subscribe to our push notifications to avoid this from

happening again!








Your tracking code



#AL17735012








































style="font-size: 0px;padding: 0px;padding-top: 9px;padding-right: 18px;padding-bottom: 9px;padding-left: 18px;word-break: break-word;">


style="font-family: 'Helvetica Neue',Arial;font-size: 12px;font-style: normal;font-weight: 400;letter-spacing: 0px;line-height: 1.3;text-align: center;color: #727272;">

We hope you enjoy receiving this message. However, if you prefer not to receive future emails. Please unsubscribe. please click


style="color: #000;font-style: normal;font-weight: normal;text-decoration: underline;">here
.



















--_----------=_MCPart_512623887--

AliExpress Phish from Amazon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 15:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXqBM-00000000AUH-17He

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 15:14:16 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 15:14:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a27-38.smtp-out.us-west-2.amazonses.com ([54.240.27.38]:36507)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0101018d8530aeae-0c4060d2-c47a-4218-b230-03ea638393fb-000000@us-west-2.amazonses.com>)

id 1rXoGg-000000006vi-1wgm

for doctor@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 13:11:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1707336576;

h=From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID:Feedback-ID;

bh=ndilKtR+mzagqGCqgq1BDY9JxoJT8/PofkKPoJKef00=;

b=mO+0QP2LKc6cWhe2jYCtLKhhFu6B8hTHpXM7L6z1kdPw94uWiuezpieF8w3WQAXK

DesWDOnXf3g8WSNenTryPX8psWidf0e2shHPwsFxT+5Ruxvmb78u0UKwLCqO//q4OUg

l1PauHwTRHZ2UuMFnUio6aZDEKST4CH126kl4Nlo=

From: Aliexpress

To: doctor@doctor.nl2k.ab.ca

Subject: You have (1) tracking notification

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Content-Transfer-Encoding: 7bit

Date: Wed, 7 Feb 2024 20:09:36 +0000

Unsubscribe:646f63746f7240646f63746f722e6e6c326b2e61622e6361

Message-ID: <0101018d8530aeae-0c4060d2-c47a-4218-b230-03ea638393fb-000000@us-west-2.amazonses.com>

Feedback-ID: 1.us-west-2.88g0X5J6GO/xYvXIFvnwuqoxgwluru49cn3Ggfd7YD0=:AmazonSES

X-SES-Outgoing: 2024.02.07-54.240.27.38







--_----------=_MCPart_512623887

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




JJn5sGKa>=0A
SnZCgHiVREvf3E0Z0Q0I>=0A
jwPP>=0A
XiMMyxr7K4WmYurd>=0A
>=0A
KhapHk27JBzF>=0A
v3YHxWiwrdhCIthCWBUujjmN>
5IpvB>=0A
be29K5cKJxc80Wu9D>=0A
2>=0A
guOvrRLJmjNcQ>=0A
uwbLHhFT3CK1ok7gDAqNkhWS0>=0A
2RFAmdo2J>



--_----------=_MCPart_512623887

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit



























ALIEXPRESS

























DELIVERY OF YOUR PACKAGE











You have (1) package waiting for delivery. Use your code to track it and receive it



Schedule your delivery and subscribe to our push notifications to avoid this from

happening again!








Your tracking code



#AL17735012








































style="font-size: 0px;padding: 0px;padding-top: 9px;padding-right: 18px;padding-bottom: 9px;padding-left: 18px;word-break: break-word;">


style="font-family: 'Helvetica Neue',Arial;font-size: 12px;font-style: normal;font-weight: 400;letter-spacing: 0px;line-height: 1.3;text-align: center;color: #727272;">

We hope you enjoy receiving this message. However, if you prefer not to receive future emails. Please unsubscribe. please click


style="color: #000;font-style: normal;font-weight: normal;text-decoration: underline;">here
.



















--_----------=_MCPart_512623887--

AliExpress Phish from Amazon

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 07 Feb 2024 15:15:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rXqBQ-00000000AUO-27Ek

for dave@doctor.nl2k.ab.ca;

Wed, 07 Feb 2024 15:14:20 -0700

Resent-From: The Doctor

Resent-Date: Wed, 7 Feb 2024 15:14:20 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a27-115.smtp-out.us-west-2.amazonses.com ([54.240.27.115]:48507)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from <0101018d8530ad7e-cb84e0cd-eebc-44f9-b3f1-7e0eb928bec5-000000@us-west-2.amazonses.com>)

id 1rXoGe-000000006vh-3O3u

for doctor@nl2k.ab.ca;

Wed, 07 Feb 2024 13:11:40 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1707336576;

h=From:To:Subject:MIME-Version:Content-Type:Content-Transfer-Encoding:Date:Message-ID:Feedback-ID;

bh=IvHLTY5g1TNTSY9i0rSwmpcRNUm1+Oe2u6o8an3KJ4A=;

b=AqdiNVcnhOpI89jVUlC8i4O4Y0oITg0Ar+d1Dop1kRXcMVF49die6yw1sK77psYF

nQgxdINCjGistg3TM75X94XFIChE65yvZufNCW8Zr45b+zn+u29ZVeZEyPN2qkjDgh7

MhivXSHMVoWhUH3P4h1rIqui4NFXS8H09LssSJzA=

From: Aliexpress

To: doctor@nl2k.ab.ca

Subject: You have (1) tracking notification

MIME-Version: 1.0

Content-Type: multipart/alternative; boundary="_----------=_MCPart_512623887"

Content-Transfer-Encoding: 7bit

Date: Wed, 7 Feb 2024 20:09:36 +0000

Unsubscribe:646f63746f72406e6c326b2e61622e6361

Message-ID: <0101018d8530ad7e-cb84e0cd-eebc-44f9-b3f1-7e0eb928bec5-000000@us-west-2.amazonses.com>

Feedback-ID: 1.us-west-2.88g0X5J6GO/xYvXIFvnwuqoxgwluru49cn3Ggfd7YD0=:AmazonSES

X-SES-Outgoing: 2024.02.07-54.240.27.115







--_----------=_MCPart_512623887

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




72fH8njQ>=0A
wHVlP3btJhKkBkYZMAlZ>=0A
CqRg>=0A
b6zxoslBCiIyJqPM>=0A
>=0A
TSzUSRGkwRip>=0A
7rtJqLvFvOSxH8TzXvtlUe58>
GBQWJ>=0A
8su63zGn7SJCr4zfJ>=0A
R>=0A
Ia41Ge4W3chst>=0A
dYGDxxapIYXVVNlWNsTNyaYoV>=0A
gEz6N2JBI>



--_----------=_MCPart_512623887

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit



























ALIEXPRESS

























DELIVERY OF YOUR PACKAGE











You have (1) package waiting for delivery. Use your code to track it and receive it



Schedule your delivery and subscribe to our push notifications to avoid this from

happening again!








Your tracking code



#AL17735012








































style="font-size: 0px;padding: 0px;padding-top: 9px;padding-right: 18px;padding-bottom: 9px;padding-left: 18px;word-break: break-word;">


style="font-family: 'Helvetica Neue',Arial;font-size: 12px;font-style: normal;font-weight: 400;letter-spacing: 0px;line-height: 1.3;text-align: center;color: #727272;">

We hope you enjoy receiving this message. However, if you prefer not to receive future emails. Please unsubscribe. please click


style="color: #000;font-style: normal;font-weight: normal;text-decoration: underline;">here
.



















--_----------=_MCPart_512623887--