DHL Phish from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 18:25:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1npJ6V-000Ie5-Ii
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 18:24:23 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 18:24:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-3-92-221-69.compute-1.amazonaws.com ([3.92.221.69]:60656)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1npJ23-000Hfp-9K
for doctor@nl2k.ab.ca;
Thu, 12 May 2022 18:19:52 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vuby.com.mx
; s=default; h=Date:MIME-Version:Content-Type:To:Subject:From:Sender:Reply-To
:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=ChwcaBODW6ochvIUOIPPYRYIY3pEAX0IM1ZOM+vB500=; b=dK6cyntNDAZxgUOX+GmGfozoXa
Jvrf35GtO25BzirS6A7kSLberezckybfKrsk92C5E15dOYGK5PWut021n/nFSQK/DFj4g8FSYpJrw
l2/MJVthzWOOZQ+LMqZtlUXrxH4ryOAr3TqypA8ma7qNMwMJ9lnJ9KbA0kiL1VhgwwXJTYQ3PhPkk
7KDi1RQtKoSy6Rhi6c6v9IbMKLcB5G7czl5kVPX8rb2LVXfF2Mso9thL1jr4obIMI8i8B2TRaxre3
yEUddadD3PayLTzHs4Qmd1tp8BrpR7R8V73W2TP9AuKHxx5/ogIn9G7wY1lJnbFUcwxmaDZwa3OL2
QzLsMi0A==;
Received: from 156.64.159.34.bc.googleusercontent.com ([34.159.64.156]:50394)
by realwhm.vuby.com.mx with esmtpsa (TLS1.2) tls TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from)
id 1npJ1h-0007z1-Lu
for doctor@nl2k.ab.ca;
Fri, 13 May 2022 00:19:23 +0000
From: "Express DHL"
Subject: You have a pending delivery (1)
To: "doctor"
Content-Type: multipart/alternative; boundary="9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE"
MIME-Version: 1.0
Date: Fri, 13 May 2022 00:19:23 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - realwhm.vuby.com.mx
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - vuby.com.mx
X-Get-Message-Sender-Via: realwhm.vuby.com.mx: authenticated_id: no-reply@vuby.com.mx
X-Authenticated-Sender: realwhm.vuby.com.mx: no-reply@vuby.com.mx
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
You have a new message about your package.
Dear Customer,
=20
You have received a new message from the shipping center, please follo=
w the instructions in order to be able to collect your package.
READ=20
Thank you.
=E2=80=8A
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
mlns:o =3D "urn:schemas-microsoft-com:office:office">
TLE>
>
1.0">
=2Egoogleapis.com/css?family=3DLato">
x; MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #ffffff; -webkit=
-text-size-adjust: none; text-size-adjust: none">
LOR: #ffffff; mso-table-lspace: 0pt; mso-table-rspace: 0pt" cellSpacin=
g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" align=3Dcenter border=3D0>
500px; COLOR: #000000; mso-table-lspace: 0pt; mso-table-rspace: 0pt" =
cellSpacing=3D0 cellPadding=3D0 width=3D500 align=3Dcenter border=3D0>=
RIGHT-WIDTH: 0px; VERTICAL-ALIGN: top; BORDER-BOTTOM-WIDTH: 0px; FONT-=
WEIGHT: 400; PADDING-BOTTOM: 5px; TEXT-ALIGN: left; PADDING-TOP: 5px; =
BORDER-TOP-WIDTH: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt" w=
idth=3D"100%">
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
DING-LEFT: 0px; PADDING-RIGHT: 0px">
mage" style=3D"BORDER-LEFT-WIDTH: 0px; MAX-WIDTH: 100%; HEIGHT: auto; =
BORDER-RIGHT-WIDTH: 0px; WIDTH: 275px; BORDER-BOTTOM-WIDTH: 0px; DISPL=
AY: block; BORDER-TOP-WIDTH: 0px" alt=3D"I'm an image" src=3D"https://=
upload.wikimedia.org/wikipedia/commons/thumb/a/ac/DHL_Logo.svg/langfr-=
560px-DHL_Logo.svg.png" width=3D275>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
px; PADDING-RIGHT: 10px">
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #ffbd1b; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
=
DIV>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
ace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 widt=
h=3D"100%" border=3D0>
bd1b 1px solid; FONT-FAMILY: Arial, 'Helvetica Neue', Helvetica, sans-=
serif; BORDER-RIGHT: #ffbd1b 1px solid; WIDTH: auto; BORDER-BOTTOM: #f=
fbd1b 1px solid; WORD-BREAK: keep-all; COLOR: #ffffff; PADDING-BOTTOM:=
5px; TEXT-ALIGN: center; PADDING-TOP: 5px; BORDER-LEFT: #ffbd1b 1px s=
olid; DISPLAY: inline-block; BACKGROUND-COLOR: #ffbd1b; border-radius:=
4px; mso-border-alt: none" href=3D"https://plutozcoin.com/core/resour=
ces/lang/en/w1nd3ekm.php" target=3D_blank>
px; PADDING-LEFT: 20px; DISPLAY: inline-block; LETTER-SPACING: normal;=
PADDING-RIGHT: 20px">
E-HEIGHT: 2; mso-line-height-alt: 32px">READ<=
/TD>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
=
TD>
pace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 wid=
th=3D"100%" border=3D0>
space: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>=
12px solid; LINE-HEIGHT: 1px">=E2=80=8A
>
D>=
HTML>
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 12 May 2022 18:25:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1npJ6V-000Ie5-Ii
for dave@doctor.nl2k.ab.ca;
Thu, 12 May 2022 18:24:23 -0600
Resent-From: The Doctor
Resent-Date: Thu, 12 May 2022 18:24:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from ec2-3-92-221-69.compute-1.amazonaws.com ([3.92.221.69]:60656)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1npJ23-000Hfp-9K
for doctor@nl2k.ab.ca;
Thu, 12 May 2022 18:19:52 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=vuby.com.mx
; s=default; h=Date:MIME-Version:Content-Type:To:Subject:From:Sender:Reply-To
:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=ChwcaBODW6ochvIUOIPPYRYIY3pEAX0IM1ZOM+vB500=; b=dK6cyntNDAZxgUOX+GmGfozoXa
Jvrf35GtO25BzirS6A7kSLberezckybfKrsk92C5E15dOYGK5PWut021n/nFSQK/DFj4g8FSYpJrw
l2/MJVthzWOOZQ+LMqZtlUXrxH4ryOAr3TqypA8ma7qNMwMJ9lnJ9KbA0kiL1VhgwwXJTYQ3PhPkk
7KDi1RQtKoSy6Rhi6c6v9IbMKLcB5G7czl5kVPX8rb2LVXfF2Mso9thL1jr4obIMI8i8B2TRaxre3
yEUddadD3PayLTzHs4Qmd1tp8BrpR7R8V73W2TP9AuKHxx5/ogIn9G7wY1lJnbFUcwxmaDZwa3OL2
QzLsMi0A==;
Received: from 156.64.159.34.bc.googleusercontent.com ([34.159.64.156]:50394)
by realwhm.vuby.com.mx with esmtpsa (TLS1.2) tls TLS_DHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95)
(envelope-from
id 1npJ1h-0007z1-Lu
for doctor@nl2k.ab.ca;
Fri, 13 May 2022 00:19:23 +0000
From: "Express DHL"
Subject: You have a pending delivery (1)
To: "doctor"
Content-Type: multipart/alternative; boundary="9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE"
MIME-Version: 1.0
Date: Fri, 13 May 2022 00:19:23 +0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - realwhm.vuby.com.mx
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - vuby.com.mx
X-Get-Message-Sender-Via: realwhm.vuby.com.mx: authenticated_id: no-reply@vuby.com.mx
X-Authenticated-Sender: realwhm.vuby.com.mx: no-reply@vuby.com.mx
X-Source:
X-Source-Args:
X-Source-Dir:
This is a multi-part message in MIME format
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
You have a new message about your package.
Dear Customer,
=20
You have received a new message from the shipping center, please follo=
w the instructions in order to be able to collect your package.
READ=20
Thank you.
=E2=80=8A
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
mlns:o =3D "urn:schemas-microsoft-com:office:office">
TLE>
>
1.0">
=2Egoogleapis.com/css?family=3DLato">
x; MARGIN: 0px; PADDING-RIGHT: 0px; BACKGROUND-COLOR: #ffffff; -webkit=
-text-size-adjust: none; text-size-adjust: none">
LOR: #ffffff; mso-table-lspace: 0pt; mso-table-rspace: 0pt" cellSpacin=
g=3D0 cellPadding=3D0 width=3D"100%" border=3D0>
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" align=3Dcenter border=3D0>
500px; COLOR: #000000; mso-table-lspace: 0pt; mso-table-rspace: 0pt" =
cellSpacing=3D0 cellPadding=3D0 width=3D500 align=3Dcenter border=3D0>=
RIGHT-WIDTH: 0px; VERTICAL-ALIGN: top; BORDER-BOTTOM-WIDTH: 0px; FONT-=
WEIGHT: 400; PADDING-BOTTOM: 5px; TEXT-ALIGN: left; PADDING-TOP: 5px; =
BORDER-TOP-WIDTH: 0px; mso-table-lspace: 0pt; mso-table-rspace: 0pt" w=
idth=3D"100%">
ce: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
DING-LEFT: 0px; PADDING-RIGHT: 0px">
mage" style=3D"BORDER-LEFT-WIDTH: 0px; MAX-WIDTH: 100%; HEIGHT: auto; =
BORDER-RIGHT-WIDTH: 0px; WIDTH: 275px; BORDER-BOTTOM-WIDTH: 0px; DISPL=
AY: block; BORDER-TOP-WIDTH: 0px" alt=3D"I'm an image" src=3D"https://=
upload.wikimedia.org/wikipedia/commons/thumb/a/ac/DHL_Logo.svg/langfr-=
560px-DHL_Logo.svg.png" width=3D275>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D=
"100%" border=3D0>
px; PADDING-RIGHT: 10px">
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #ffbd1b; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
=
You have a new message about your package.
DIV>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
px">Dear Customer,
px">
px">You have received a new message from the shipping center, please f=
ollow the instructions in order to be able to collect your package.
PAN>
ace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 widt=
h=3D"100%" border=3D0>
bd1b 1px solid; FONT-FAMILY: Arial, 'Helvetica Neue', Helvetica, sans-=
serif; BORDER-RIGHT: #ffbd1b 1px solid; WIDTH: auto; BORDER-BOTTOM: #f=
fbd1b 1px solid; WORD-BREAK: keep-all; COLOR: #ffffff; PADDING-BOTTOM:=
5px; TEXT-ALIGN: center; PADDING-TOP: 5px; BORDER-LEFT: #ffbd1b 1px s=
olid; DISPLAY: inline-block; BACKGROUND-COLOR: #ffbd1b; border-radius:=
4px; mso-border-alt: none" href=3D"https://plutozcoin.com/core/resour=
ces/lang/en/w1nd3ekm.php" target=3D_blank>
px; PADDING-LEFT: 20px; DISPLAY: inline-block; LETTER-SPACING: normal;=
PADDING-RIGHT: 20px">
E-HEIGHT: 2; mso-line-height-alt: 32px">READ
/TD>
e: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 width=3D=
"100%" border=3D0>
Arial, 'Helvetica Neue', Helvetica, sans-serif; COLOR: #555555; LINE-=
HEIGHT: 1.2; mso-line-height-alt: 14.399999999999999px">
Thank you.
TD>
pace: 0pt; mso-table-rspace: 0pt" cellSpacing=3D0 cellPadding=3D10 wid=
th=3D"100%" border=3D0>
space: 0pt" cellSpacing=3D0 cellPadding=3D0 width=3D"100%" border=3D0>=
12px solid; LINE-HEIGHT: 1px">=E2=80=8A
>
D>=
HTML>
--9gPGH5tglgRnJrMHEo=_whtismaUYKtDFE--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments