Canada post phish from Italy

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 06 Sep 2023 14:39:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdzCx-0005kC-1L

for dave@doctor.nl2k.ab.ca;

Wed, 06 Sep 2023 14:33:03 -0600

Resent-From: The Doctor

Resent-Date: Wed, 6 Sep 2023 14:33:03 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [89.40.142.214] (port=42776 helo=mta.girlbosseshustle.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1qdxmc-000H7s-15

for root@nk.ca;

Wed, 06 Sep 2023 13:01:52 -0600

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1693683623.girlbosseshustle;

d=girlbosseshustle.com;

h=Date:To:From:Subject:Message-ID:MIME-Version:Content-Type:

Content-Transfer-Encoding; i=office@girlbosseshustle.com;

bh=tBVvQLMnTOiPLQxrCByGWstMXoQoQO56hgqtCJFkKz8=;

b=kZKCGzKiNMviZHyKgADXdv0giYlBkBpYqqkgAMvEgvxaH0xmuOfLeM428tvxnLm8vuwyf+bRWzCg

1ooRLCdaCEYN1eGp7T0RopUniBwUrLnZxfIdSyeNV8Qk14bYwgqca7Spfe4lz77MHOymJ+uzX4Kn

cz5MIs9gRNm0KzMixO0=

Date: Wed, 6 Sep 2023 20:39:21 +0200

To: root@nk.ca

From: Canada Post

Subject: You have a parcel awaiting payment and delivery.

Message-ID: <673a1385968a08575152c228e11105b3@girlbosseshustle.com>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="113a399d5d6b3759078b7351de86615c1"

Content-Transfer-Encoding: 8bit



This is a multi-part message in MIME format.



--113a399d5d6b3759078b7351de86615c1

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: 8bit

























Dear Costumer,



Your package number CA772980724289Â is in transit.

Â

This package is declared in customs, we invite you to pay the 0.99 CADÂ in duties and taxes by connecting us via the link below as soon as possible.



Receive the package



Once your payment is made, you will receive a confirmation of payment and your package will be delivered as soon as possible.

Finally, you can follow the progress of your package or get information about our products and services on our website.





*Arrived at Canada Post Office Origin Facility: 2023.09.04 08:15:31 AM















--113a399d5d6b3759078b7351de86615c1

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 8bit

























Dear Costumer,





Your package number CA772980724289Â is in transit.


Â


This package is declared in customs, we invite you to pay the 0.99 CADÂ in duties and taxes by connecting us via the link below as soon as possible.





Receive the package





Once your payment is made, you will receive a confirmation of payment and your package will be delivered as soon as possible.


Finally, you can follow the progress of your package or get information about our products and services on our website.







*Arrived at Canada Post Office Origin Facility: 2023.09.04 08:15:31 AM





















--113a399d5d6b3759078b7351de86615c1--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA