Canada Post Phish from Burlington SC
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 08 Sep 2022 22:32:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWOrb-0009Ei-Gv
for dave@doctor.nl2k.ab.ca;
Thu, 08 Sep 2022 15:15:07 -0600
Resent-From: The Doctor
Resent-Date: Thu, 8 Sep 2022 15:15:07 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from us2-ob1-1.mailhostbox.com ([162.210.70.52]:59690)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oWMrJ-000NH7-U0
for root@nk.ca;
Thu, 08 Sep 2022 13:06:46 -0600
Received: from web.com (unknown [41.92.26.200])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
(Authenticated sender: canadanoreply8@massoanoms.com)
by us2.outbound.mailhostbox.com (Postfix) with ESMTPSA id 01A666416F9
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=massoanoms.com;
s=20220908; t=1662663971;
bh=S9sRlK92SzC7NsoPibBGIUa4WpIbsYkobuozKnzs+3Q=;
h=From:Subject:To:Date;
b=ZYU8uo7ASluUS94JO75PK5xH+Y0HGtTVtlBFsciIrMvoZFCq0D3PM6MJwFi7pFnVO
rQMX5U2Aef5ADBK7B97XvXsr/eWEU+yMHIfcJQ8++eNRrH50lvdxmeIgwv4AOeOoam
KVaIBDIu4H0dq+jhbMeyP7PZs6wyvN9cML0wlJdA=
From: "Canada Post"
Subject: Please complete the following amount: $3,00
To: "root"
Content-Type: multipart/alternative; boundary="VTLzGQbWm7ZJkl4dNmdD9=_SqDXzsTHflT"
MIME-Version: 1.0
Date: Thu, 8 Sep 2022 20:06:11 +0100
X-CMAE-Score: 0
X-CMAE-Analysis: v=2.4 cv=GKRrrsBK c=1 sm=1 tr=0 ts=631a3d23
a=z2ULFmcqJmm7e/IDwW11ew==:117 a=z2ULFmcqJmm7e/IDwW11ew==:17
a=HpEJnUlJZJkA:10 a=O76VCmqbo-wA:10 a=6_qlcSO2gc0A:10
a=9DvhAHx2yrWFMPxQWpQA:9 a=T4WxwxEh5E4Wj09Pp0oA:9 a=QEXdDO2ut3YA:10
a=yOS_buZdAAAA:8 a=dkK2LDYjWSprGnC7plwA:9 a=mIybN1PLxF3OaWhF:21
a=_W_S_7VecoQA:10 a=1AR97LVbfK0BiuWaTdQJ:22 a=HH7FIXwXL_sUf1zzYxQd:22
a=dlveAf3AI_eBADUXvQKd:22
This is a multi-part message in MIME format
--VTLzGQbWm7ZJkl4dNmdD9=_SqDXzsTHflT
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear Customer,
WeIregretItoIannounceIthatItheIdeliveryIofIyourIpackageIisIpending,Ian=
dIthisIisIdueItoIsomeIadditionalIcosts.
PleaseIcompleteItheIfollowingIamount:I$3,00
Otherwise,IweIwillIproceedIwithIaIreturnIshipment.
YourIestimatedIdeliveryIdateIisIFridayI09ISeptemberI2022
AdditionalIcosts:IChargesIimposedIbyIcustoms.
CompleteIyourIorderI>
ThankIyouIforIusing CanadaIPost Service!
--VTLzGQbWm7ZJkl4dNmdD9=_SqDXzsTHflT
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Dear Cust=
omer,
We
ffffff">IregretIto
"#ffffff">IannounceIthat
lor=3D"#ffffff">ItheIdelivery
nt color=3D"#ffffff">IofIyour
nt color=3D"#ffffff">IpackageIis=
Ipending,I
t>andIthisI
nt>isIdueI
t>toIsomeI
t>additionalIcosts.
face=3D"Tahoma" size=3D"2">PleaseI
nt>completeIthe=
IfollowingIamount:
"#ffffff">I$3,00
ze=3D"2">Otherwise,Iwe
fffff">IwillIproceed
"#ffffff">IwithIa
#ffffff">IreturnIshipment.
>
Your
fffff">IestimatedIdelivery
color=3D"#ffffff">IdateIis
color=3D"#ffffff">IFridayI09
t color=3D"#ffffff">ISeptemberI2=
022
Additional<=
font color=3D"#ffffff">Icosts:IC=
hargesIimposedI=
byIcustoms.
ace=3D"Tahoma" size=3D"2">
canada.thruhere.net/">CompleteIyour
t color=3D"#ffffff">IorderI><=
/a>
Thank
color=3D"#ffffff">IyouIfor
color=3D"#ffffff">Iusing CanadaI
font>Post Service!
--VTLzGQbWm7ZJkl4dNmdD9=_SqDXzsTHflT--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments