Canada Post phish cominf from inmotionhosting.com
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 23 Jun 2022 14:16:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o4TEg-000D19-Vq
for dave@doctor.nl2k.ab.ca;
Thu, 23 Jun 2022 14:15:30 -0600
Resent-From: The Doctor
Resent-Date: Thu, 23 Jun 2022 14:15:30 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps80192.inmotionhosting.com ([213.165.237.240]:59382)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o4RvU-00077u-HC
for root@doctor.nl2k.ab.ca;
Thu, 23 Jun 2022 12:52:40 -0600
Received: by vps80192.inmotionhosting.com (Postfix, from userid 33)
id EE0E8142CE6; Thu, 23 Jun 2022 14:50:30 -0400 (EDT)
Date: Thu, 23 Jun 2022 14:50:01 -0400
To: root@doctor.nl2k.ab.ca
From: Canada Post <>
Subject: shipment No. 9049519861990491584
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="173e7ea005615f00a145766230bb8b13d"
Content-Transfer-Encoding: 8bit
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, As a reminder: your shipment No. 9049519861990491589 is
still awaiting your instruction. Please confirm the payment of the shipping
costs (4.99 CAD) and the delivery address of the package by clicking on the
link below:
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
2.6 FROM_NO_USER From: has no local-part before @ sign
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[213.165.237.240 listed in ix.dnsbl.manitu.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822
Subject: {SPAM?} shipment No. 9049519861990491584
This is a multi-part message in MIME format.
--173e7ea005615f00a145766230bb8b13d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Hi,
As a reminder: your shipment No. 9049519861990491589 is still awaiting your instruction.
Please confirm the payment of the shipping costs (4.99 CAD) and the delivery address of the package by clicking on the link below:
Send my package
NB a confirmation by SMS will be requested. to guarantee your identity
You have 48 hours to enter your delivery information before your package is returned to sender.
Thank you for choosing Canada Post.
© Canada Post Corporation
--173e7ea005615f00a145766230bb8b13d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=09
(West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "H=
elvetica Neue", sans-serif; font-size: 15px; background-color: rgb(255, 255=
, 255);">![](3D"data:image/pn=<br)
g;base64,iVBORw0KGgoAAAANSUhEUgAAAHcAAAAcCAMAAABs1NAhAAAAyVBMVEUbRY/tGS0WQo=
5KZJ8AO4sNP4x2hrGdqcb///8AOYoAN4nsAAAANYgAR5QAMYfwGCrzFiYAKoT29/ru8PUAIIH85=
ufh5O1CX5zT2OUALYXByNqtt9DsAB0AJoP2FSNpO3qMNm4qTZOBkLe4wNZedKcAAHpYPoCMmr0x=
Q4rJ0OD0BBr6z9H1naA2VZd9OHOSNWtzOnfQIkTWIUBVbKMADHwAGH+7KlTxanL3qKvvLTr4ubu=
eMWTvO0fwW2LzhIr1jpPxeYCtLVvFJ0wWauM6AAAEE0lEQVRIidWWa3faOBCGhdDYkhGyIhP51k=
B8AeMQ2lI2TTZtt23+/4/akR0I9OyyS3pO9+x8kLCw5vErjWZEyP/Nxs5+PXQ5u353PVv+WvT4/=
WY61VpP9eb9z4ApSEYIBIWkhDAoKKGUAbauIeAGDqnLD9Nw0Fs4/bDckQMogLj5ziOj1PXQPQHI=
wL3B2BGWNSZqGGyNjWIKnrFb5lluGxZzmwXdwAF4PNM7akfWsx4c+JEtgShTBQQ8vq4TSaDmNZC=
giiIcxN5cHHH9PDYqjby7xqqgzedAYM4lo7GZSxIk/hwOsIvp4NimCwdGhFI40UsMEFZG2Ra5ss=
1a15YTFEaESTw44hrjM8ULiHlKhxGqJhccFwv1+ux5YG/hIHwTHpP7RWsVdiqp24axskpK5Ar+G=
ydUZk3qVwKarLbqiFulgqioRL347ryqhONSpxcXJphnOLCT+1GH9w+/jw7R+uO40xukjBbc2iiF=
MhuaROIGWlSEeq9MA8payw9DBddZOHVRFK0p8yOD25maotPbBiyPzHD/9hJX+eaRX94eoqdL/Ef=
6Jiqln0+uzJCV2V3SSmm3V7WVAvc3l+j/blL5h6HVxxlVUrl47lriGpqqYD/Qy/2kkTNacY7ozz=
u0/uR2mCmJOyu6qSCIC2EcAEmIUMoJwzUWxxH9r2286UijS84P0OHm7FPMzjTdH57QcL5HY6Sd6=
4b4Z9rN86n9fLkzfnkf3pzrhnhn2o775Y+vtw8Pj4+rFV+9Gdyc6wZT2HnWB1I4+nrr7OH2kq9G=
OHCum9fFlb53C9xvscO+Iq56A+kqAmZ291uQ7nugS+VCCtrHX89150gPvtzff3MLverV6nfIpbK=
f3rsSrtIEUoq/BvYWeIld46FrMWFAmace5neoM5wp8rZaozvhNz0Y84b+xvfWYbu8QYu29RiRjW=
3RlcxtA4DZuToBxhQ3XBeYzA0mcZHz2uUvlRhM4qmpG5fbwJhnwd/1QI/21oWZ/u7krvmax8wzR=
ckF1rA0xjzb+jH9e26Q+W5tUhtjUhY5fmouaBFtbYrceJKUwHw/a56DYfBDUcBnN4xc/EJ0FVyZ=
Lax5pzprTq2zqKorrNMxb7nPRN5USS6wRiV8TVOznqDuiwhzetoLXugfuLqrg44bg3N1wbGKX/i=
RQkHNqbyIU6o8llVe1DwVlU94LhTfFliGUpPZJIDakII/F//xIjyq+2GHdU4m1LV50io6rFosg6=
j+ZD7GS0ZZQF1QVmMRitk2pkUNtNhSuq1j6cYAhrutGi83B/ecp/09p+4uOKSssRIUHsYYocNT2=
+vMnRz3iuvc7ap76jp3w+p/vbgYz550d68LnxYvJ5e+uNq19B+w5xpeXxdvr98uyKtvk/T1Nv6J=
uWT439if0Atjfks2+ecAAAAASUVORK5CYII=3D" style=3D"margin: 0px; padding: 0px;=
border: 0px; font: inherit; vertical-align: baseline; color: inherit;" wid=
th=3D"170" />
e UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacS=
ystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; backgroun=
d-color: rgb(255, 255, 255);">
e UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacS=
ystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; backgroun=
d-color: rgb(255, 255, 255);">Hi,
--173e7ea005615f00a145766230bb8b13d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 23 Jun 2022 14:16:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o4TEg-000D19-Vq
for dave@doctor.nl2k.ab.ca;
Thu, 23 Jun 2022 14:15:30 -0600
Resent-From: The Doctor
Resent-Date: Thu, 23 Jun 2022 14:15:30 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps80192.inmotionhosting.com ([213.165.237.240]:59382)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o4RvU-00077u-HC
for root@doctor.nl2k.ab.ca;
Thu, 23 Jun 2022 12:52:40 -0600
Received: by vps80192.inmotionhosting.com (Postfix, from userid 33)
id EE0E8142CE6; Thu, 23 Jun 2022 14:50:30 -0400 (EDT)
Date: Thu, 23 Jun 2022 14:50:01 -0400
To: root@doctor.nl2k.ab.ca
From: Canada Post <>
Subject: shipment No. 9049519861990491584
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="173e7ea005615f00a145766230bb8b13d"
Content-Transfer-Encoding: 8bit
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, As a reminder: your shipment No. 9049519861990491589 is
still awaiting your instruction. Please confirm the payment of the shipping
costs (4.99 CAD) and the delivery address of the package by clicking on the
link below:
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.4 NO_DNS_FOR_FROM DNS: Envelope sender has no MX or A DNS records
2.6 FROM_NO_USER From: has no local-part before @ sign
1.5 NIX_SPAM RBL: Listed in NIX_SPAM DNSBL (thanks to heise.de)
[213.165.237.240 listed in ix.dnsbl.manitu.net]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.2 INVALID_MSGID Message-Id is not valid, according to RFC 2822
Subject: {SPAM?} shipment No. 9049519861990491584
This is a multi-part message in MIME format.
--173e7ea005615f00a145766230bb8b13d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Hi,
As a reminder: your shipment No. 9049519861990491589 is still awaiting your instruction.
Please confirm the payment of the shipping costs (4.99 CAD) and the delivery address of the package by clicking on the link below:
Send my package
NB a confirmation by SMS will be requested. to guarantee your identity
You have 48 hours to enter your delivery information before your package is returned to sender.
Thank you for choosing Canada Post.
© Canada Post Corporation
--173e7ea005615f00a145766230bb8b13d
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
=09
(West European)", "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "H=
elvetica Neue", sans-serif; font-size: 15px; background-color: rgb(255, 255=
, 255);">
g;base64,iVBORw0KGgoAAAANSUhEUgAAAHcAAAAcCAMAAABs1NAhAAAAyVBMVEUbRY/tGS0WQo=
5KZJ8AO4sNP4x2hrGdqcb///8AOYoAN4nsAAAANYgAR5QAMYfwGCrzFiYAKoT29/ru8PUAIIH85=
ufh5O1CX5zT2OUALYXByNqtt9DsAB0AJoP2FSNpO3qMNm4qTZOBkLe4wNZedKcAAHpYPoCMmr0x=
Q4rJ0OD0BBr6z9H1naA2VZd9OHOSNWtzOnfQIkTWIUBVbKMADHwAGH+7KlTxanL3qKvvLTr4ubu=
eMWTvO0fwW2LzhIr1jpPxeYCtLVvFJ0wWauM6AAAEE0lEQVRIidWWa3faOBCGhdDYkhGyIhP51k=
B8AeMQ2lI2TTZtt23+/4/akR0I9OyyS3pO9+x8kLCw5vErjWZEyP/Nxs5+PXQ5u353PVv+WvT4/=
WY61VpP9eb9z4ApSEYIBIWkhDAoKKGUAbauIeAGDqnLD9Nw0Fs4/bDckQMogLj5ziOj1PXQPQHI=
wL3B2BGWNSZqGGyNjWIKnrFb5lluGxZzmwXdwAF4PNM7akfWsx4c+JEtgShTBQQ8vq4TSaDmNZC=
giiIcxN5cHHH9PDYqjby7xqqgzedAYM4lo7GZSxIk/hwOsIvp4NimCwdGhFI40UsMEFZG2Ra5ss=
1a15YTFEaESTw44hrjM8ULiHlKhxGqJhccFwv1+ux5YG/hIHwTHpP7RWsVdiqp24axskpK5Ar+G=
ydUZk3qVwKarLbqiFulgqioRL347ryqhONSpxcXJphnOLCT+1GH9w+/jw7R+uO40xukjBbc2iiF=
MhuaROIGWlSEeq9MA8payw9DBddZOHVRFK0p8yOD25maotPbBiyPzHD/9hJX+eaRX94eoqdL/Ef=
6Jiqln0+uzJCV2V3SSmm3V7WVAvc3l+j/blL5h6HVxxlVUrl47lriGpqqYD/Qy/2kkTNacY7ozz=
u0/uR2mCmJOyu6qSCIC2EcAEmIUMoJwzUWxxH9r2286UijS84P0OHm7FPMzjTdH57QcL5HY6Sd6=
4b4Z9rN86n9fLkzfnkf3pzrhnhn2o775Y+vtw8Pj4+rFV+9Gdyc6wZT2HnWB1I4+nrr7OH2kq9G=
OHCum9fFlb53C9xvscO+Iq56A+kqAmZ291uQ7nugS+VCCtrHX89150gPvtzff3MLverV6nfIpbK=
f3rsSrtIEUoq/BvYWeIld46FrMWFAmace5neoM5wp8rZaozvhNz0Y84b+xvfWYbu8QYu29RiRjW=
3RlcxtA4DZuToBxhQ3XBeYzA0mcZHz2uUvlRhM4qmpG5fbwJhnwd/1QI/21oWZ/u7krvmax8wzR=
ckF1rA0xjzb+jH9e26Q+W5tUhtjUhY5fmouaBFtbYrceJKUwHw/a56DYfBDUcBnN4xc/EJ0FVyZ=
Lax5pzprTq2zqKorrNMxb7nPRN5USS6wRiV8TVOznqDuiwhzetoLXugfuLqrg44bg3N1wbGKX/i=
RQkHNqbyIU6o8llVe1DwVlU94LhTfFliGUpPZJIDakII/F//xIjyq+2GHdU4m1LV50io6rFosg6=
j+ZD7GS0ZZQF1QVmMRitk2pkUNtNhSuq1j6cYAhrutGi83B/ecp/09p+4uOKSssRIUHsYYocNT2=
+vMnRz3iuvc7ap76jp3w+p/vbgYz550d68LnxYvJ5e+uNq19B+w5xpeXxdvr98uyKtvk/T1Nv6J=
uWT439if0Atjfks2+ecAAAAASUVORK5CYII=3D" style=3D"margin: 0px; padding: 0px;=
border: 0px; font: inherit; vertical-align: baseline; color: inherit;" wid=
th=3D"170" />
e UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacS=
ystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; backgroun=
d-color: rgb(255, 255, 255);">
e UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, BlinkMacS=
ystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 15px; backgroun=
d-color: rgb(255, 255, 255);">Hi,
As a reminder: your shipment No. 9049519861990491589
ong> is still awaiting your instruction.
Please confirm the payment of the shipping costs (4.99 CAD)
u> and the delivery address of the package by clicking on the link=
below:
000webhostapp.com/caa.html">=
Send my package
NB a confirmation by SMS will be requested. to guarantee your identity
p>
You have 48 hours to enter your delivery information before your package=
is returned to sender.
Thank you for choosing Canada Post.
=C2=A9 Canada Post Corporation
--173e7ea005615f00a145766230bb8b13d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments