DHL Phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 23 Oct 2023 07:18:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1quuo5-0003l1-23
for dave@doctor.nl2k.ab.ca;
Mon, 23 Oct 2023 07:17:21 -0600
Resent-From: The Doctor
Resent-Date: Mon, 23 Oct 2023 07:17:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from rs228.mailgun.us ([209.61.151.228]:46078)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qurC1-000OAq-2z
for root@nk.ca;
Mon, 23 Oct 2023 03:25:56 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed;
d=mg.elegantthreadsembroidery.com; q=dns/txt; s=mx; t=1698053019;
x=1698060219; h=Content-Type: Content-Transfer-Encoding: Message-Id: To: To:
From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=7wn8fHaD3K+mDmAXpa8h8QLfPKNLFpEHA840f/EQ4U8=;
b=V3HtJd19jMnGQ47H/z9Hhe1Pr248HnBC0LhIJBUetOBovUPMrceylNvFW7NuxYLi38JiiYDKrdQv8Gya7+r9bAIV83i/ek8p4dMPvxKzK0vO6mKFNDTh1daMnWuk4MGkYa6IkwulN4OGpK6MVfe7QYHMdzg2hOJG9fEJVMEEPmI=
X-Mailgun-Sending-Ip: 209.61.151.228
X-Mailgun-Sid: WyJlMDRmYSIsInJvb3RAbmsuY2EiLCJhNzE5ZWIiXQ==
Received: from ( []) by 3f5d0cb28bef with HTTP id
65363b9b4a69a73afc76b7dc; Mon, 23 Oct 2023 09:23:39 GMT
Sender: noreply=dhl-ae.com@mg.elegantthreadsembroidery.com
Date: Mon, 23 Oct 2023 09:23:39 +0000
Mime-Version: 1.0
Subject: Import Duty/Tax Payment Alert
From: DHL Express
To: root@nk.ca
Message-Id: <20231023092339.c916a682f967030c@mg.elegantthreadsembroidery.com>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: English | العربية Payment Request - Import duties
and charges IMPORT DUTY/TAX PAYMENT IS REQUIRED
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.61.151.228 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.61.151.228 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible malware
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
Subject: {SPAM?} Import Duty/Tax Payment Alert
X-Antivirus: AVG (VPS 231023-2, 10/23/2023), Inbound message
X-Antivirus-Status: Clean
ent-Type" content=3D"text/html; charset=3Dutf-8">
=3D"600" border=3D"0" align=3D"center" cellpadding=3D"3" cellspacing=3D"3">=
serif;">English | =D8=A7=D9=
=84=D8=B9=D8=B1=D8=A8=D9=8A=D8=A9
nglish" id=3D"English">Payment Request - Import duties and charg=<br /><br />
es
scale=3D1.0">
=3D"100%">
=3D"background: #ffffff; border: thin solid #ebebeb; width: 600px; font-fam=
ily: Arial, Helvetica, sans-serif; font-size: 12px; text-align: center;" al=
ign=3D"center" bgcolor=3D"#ffffff" cellpadding=3D"0" cellspacing=3D"0" widt=
h=3D"600">
cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
=3D"https://del.dhl.com/img/email_assets/images/header.jpg" alt=3D"DHL Logo=
" height=3D"114" width=3D"600">
" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
=3D"28">
"0" width=3D"100%">
al, Helvetica, sans-serif; font-size: 20px; margin: 0px; text-transform: up=
percase; font-weight: bold;" align=3D"left" valign=3D"top">
bedby=3D"cke_93" title=3D"Rich Text Editor, MAIN_HEADING" aria-label=3D"Ric=
h Text Editor, MAIN_HEADING" role=3D"textbox" style=3D"position: relative;"=
spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inl=
ine cke_contents_ltr cke_show_borders" id=3D"MAIN_HEADING">IMPORT DUTY/TAX =
PAYMENT IS REQUIRED&n=
bsp;
cing=3D"0" width=3D"100%">
=3D"left" valign=3D"top">
=3D"0" width=3D"100%">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
>
llspacing=3D"0" width=3D"100%">
Helvetica, sans-serif; font-size: 14px;" align=3D"left" valign=3D"top">
aria-describedby=3D"cke_126" title=3D"Rich Text Editor, GREETING" aria-lab=
el=3D"Rich Text Editor, GREETING" role=3D"textbox" style=3D"position: relat=
ive;" spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editabl=
e_inline cke_contents_ltr cke_show_borders" id=3D"GREETING">Dear valued cus=
tomer,
Arial, Helvetica, sans-serif; font-size: 12px;" align=3D"left" valign=3D"t=
op">
-label=3D"Rich Text Editor, BODY" role=3D"textbox" style=3D"position: relat=
ive;" spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editabl=
e_inline cke_contents_ltr cke_show_borders" id=3D"BODY">Your DHL Express sh=
ipment with waybill number 5304121491 from SWEETCARE is arriving in the cou=
ntry. There is import duty/tax due on your shipment. The amount is =
AED 21.00.
We will pay your import duty/tax to the authorit=
ies on your behalf to speed regulatory clearance. To avoid any delivery del=
ay, please pay us this amount securely online now. Click
href=3D"https://del.dhl.com/AE/bspkKeS0i536?locale=3Den-AE" href=3D"https:/=
/emea01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdel.dhl.com%2=
FAE%2FbspkKeS0i536%3Flocale%3Den-AE&data=3D05%7C01%7C%7C8312333f50ca41d=
ac71308dbbbd343d6%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288271=
222164%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6=
Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=3DKOLO5G0eASSRFPeP%2B26Tbe=
j%2B%2FP%2FrkUj%2BfBcy1waveOI%3D&reserved=3D0" originalsrc=3D"https://d=
el.dhl.com/AE/bspkKeS0i536?locale=3Den-AE" shash=3D"rp9fy5xQxY53oqBLbOWzebO=
iRok4+L8QUJz69hHJzm0N2lwWlUsjzUSPz2QUPuzo0R84a6kwXq8UMJpxttSKal/33miOyYnuy5=
YYuns1oiDgX4PEl1vxymGoKILkDHKkfz2VBoHkvp0IJ3034nibMEN/eWcl7eEU0BPB+96apLo=
=3D">here to pay, view the duty/tax calculation and download the releva=
nt documents.
You may track your shipment
https://ducadelcosma.ae/wp-includes/block-patterns/3/" href=3D"https://duca=
delcosma.ae/wp-includes/block-patterns/3/" originalsrc=3D"https://ducadelco=
sma.ae/wp-includes/block-patterns/3/" shash=3D"UdJzXimqNobZRED2RcshweZJTBp3=
c74LihM57d8IxTqfhZWeyfwciDAxfKqJPFIrzCpZU5CJhxmg0V4DvyRHv/F47tIbrXbO7uTRwXJ=
bZXPz1MZwx5D11b02vyZ4zCX1zCW9MsSMH/3dt+lnL73c3BQj2SXnO+hBxea34KuLTvk=3D">he=
re.
" cellspacing=3D"0" width=3D"100%">
>
align=3D"left" valign=3D"top" width=3D"130">
=3D"0" cellspacing=3D"0" width=3D"100%">
_of_prevonblurhandler=3D"null" _of_prevonfocushandler=3D"null" data-cke-sav=
ed-href=3D"https://del.dhl.com/AE/bspkKeS0i536?locale=3Den-AE" href=3D"http=
s://emea01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdel.dhl.co=
m%2FAE%2FbspkKeS0i536%3Flocale%3Den-AE&data=3D05%7C01%7C%7C8312333f50ca=
41dac71308dbbbd343d6%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288=
271382709%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBT=
iI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=3DkcBbpwbQ0Xn7dN3qliKRK=
pQ2rmp%2BnKQM73FJx2XUmkM%3D&reserved=3D0" originalsrc=3D"https://del.dh=
l.com/AE/bspkKeS0i536?locale=3Den-AE" shash=3D"YKwLgf5j2GS7/WEOFF7pScjHIzgG=
pb3W7sLj6QUNF7Z+V4yP89L9xcjwIcDyQ/SPlRF3GWObrKD7fnebdxJ0nQ21AaKOxpF7SCCd1eM=
M3z/Vq28vj8P1UonrESkaOuATatpaa+2VacxfCyUcPFZ2xH2gTqHHxAf4JCovR6Jnb1U=3D">
mg src=3D"https://del.dhl.com/img/email_assets/images/logo_pay_online.png" =
alt=3D"pay online" height=3D"74" width=3D"74">
=3D"title" style=3D"font-weight: bold; font-family: Arial, Helvetica, sans=
-serif; color: #D60000; font-size: 14px;" align=3D"center">
bedby=3D"cke_489" title=3D"Rich Text Editor, LOGO_TITLE" aria-label=3D"Rich=
Text Editor, LOGO_TITLE" role=3D"textbox" style=3D"position: relative;" sp=
ellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inline=
cke_contents_ltr cke_show_borders" id=3D"LOGO_TITLE">Duty/Tax Payment
>
llpadding=3D"0" cellspacing=3D"0" width=3D"100%"> =
" width=3D"100%">
, Helvetica, sans-serif; font-size: 14px; margin-bottom: 0px; margin-top: 5=
px; text-transform: uppercase; font-weight: bold;">
"cke_225" title=3D"Rich Text Editor,SHPDTL_HEADING" aria-label=3D"Rich Text=
Editor, SHPDTL_HEADING" role=3D"textbox" style=3D"position: relative;" spe=
llcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inline =
cke_contents_ltr cke_show_borders" id=3D"SHPDTL_HEADING">SHIPMENT Informati=
on
nt-family: Arial, Helvetica, sans-serif; font-size: 12px; width: 100%" bord=
er=3D"0" cellpadding=3D"5" cellspacing=3D"3" width=3D"100%">
class=3D"bold" style=3D"font-weight: bold" align=3D"left" bgcolor=3D"#F5F5F=
5" valign=3D"top" width=3D"150">
Rich Text Editor, HWB_LABEL" aria-label=3D"Rich Text Editor, HWB_LABEL" rol=
e=3D"textbox" style=3D"position: relative;" spellcheck=3D"false" tabindex=
=3D"0" class=3D"cke_editable cke_editable_inline cke_contents_ltr cke_show_=
borders" id=3D"HWB_LABEL">Waybill No.
=3D"#F5F5F5" valign=3D"top">5304121491
e=3D"font-weight: bold" align=3D"left" bgcolor=3D"#F5F5F5" valign=3D"top"><=
div aria-describedby=3D"cke_291" title=3D"Rich Text Editor, CUSTADDRESS_LAB=
EL" aria-label=3D"Rich Text Editor, CUSTADDRESS_LABEL" role=3D"textbox" sty=
le=3D"position: relative;" spellcheck=3D"false" tabindex=3D"0" class=3D"cke=
_editable cke_editable_inline cke_contents_ltr cke_show_borders" id=3D"CUST=
ADDRESS_LABEL">Address
ign=3D"top">**** tower 14**DUBAI DUBAI
der=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
>
g=3D"0" width=3D"100%">
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
r>
width: 100%">
ditor, SIGNATURE_LINE2" aria-label=3D"Rich Text Editor, SIGNATURE_LINE2" ro=
le=3D"textbox" style=3D"position: relative; font-family: Arial, Helvetica, =
sans-serif; color: rgb(214, 4, 17); background-color: rgb(255, 255, 255);" =
spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inli=
ne cke_contents_ltr cke_show_borders" id=3D"SIGNATURE_LINE2">DHL Express - =
Excellence. Simply delivered.
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
r>
cellspacing=3D"0" width=3D"100%">&nb=
sp;
rif; font-size: 10px; text-align: right" align=3D"right">
dby=3D"cke_522" title=3D"Rich Text Editor, FOOTER_TEXT" aria-label=3D"Rich =
Text Editor, FOOTER_TEXT" role=3D"textbox" style=3D"position: relative;" sp=
ellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inline=
cke_contents_ltr cke_show_borders" id=3D"FOOTER_TEXT">
ef=3D"http://www.dhl.ae/en/express.html" href=3D"https://emea01.safelinks.p=
rotection.outlook.com/?url=3Dhttp%3A%2F%2Fwww.dhl.ae%2Fen%2Fexpress.html&am=
p;data=3D05%7C01%7C%7C8312333f50ca41dac71308dbbbd343d6%7C84df9e7fe9f640afb4=
35aaaaaaaaaaaa%7C1%7C0%7C638310288271382709%7CUnknown%7CTWFpbGZsb3d8eyJWIjo=
iMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=
&sdata=3DwJqFxCZyeL7Rj%2FuEIU%2FDynvrvzmH0YSi5vfYaX1NyPM%3D&reserve=
d=3D0" originalsrc=3D"http://www.dhl.ae/en/express.html" shash=3D"ddHF7FV/2=
he2dbq5lcT2ogp0EG099xKT4otgDgiWqitAIr4YQ7mgoEv8BIO42mwcLf8Rgi5kGeldXTh0Mc7M=
6sqUr75OKONO16wW5qullYS2WSsxQXQpItTU0L/S4HEryJMhOrI+nkqGSsuYlVrveXpq/777mqO=
FMIUOW1ADI3g=3D">DHL Express |
=2Eae/en/contact_center/contact_expres=
s.html" href=3D"https://emea01.safelink=
s.protection.outlook.com/?url=3Dhttp%3A%2F%2Fwww.dhl.ae%2Fen%2Fcontact_cent=
er%2Fcontact_express.html&data=3D05%7C01%7C%7C8312333f50ca41dac71308dbb=
bd343d6%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288271382709%7CU=
nknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLC=
JXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=3DKhlazds3luTuPqtpg%2B33rV5bw24cj6PQ=
zzJgzBiAcmw%3D&reserved=3D0" originalsrc=3D"http://www.dhl.ae/en/contac=
t_center/contact_express.html" shash=3D"eIxQxI9tk+MfD5NKTXJrylRnJRMHwQO+o0f=
UwJpgoLMVorztCiEEwICcMeYKMRawtLRCaUAMMAugjHkERElV1bmEbCxC3CP5+mij1whuKzHL1l=
Rf5cPu/9U8gPHOWeeUY0hHp7UbeBoMvvi07NS5vOhtOQ5TsoNdw4297Vl0jpo=3D">Contact D=
HL |
ter/privacy-notice.html" href=3D"https://emea01.safelinks.protection.outloo=
k.com/?url=3Dhttps%3A%2F%2Fwww.logistics.dhl%2Fae-en%2Fhome%2Ffooter%2Fpriv=
acy-notice.html&data=3D05%7C01%7C%7C8312333f50ca41dac71308dbbbd343d6%7C=
84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288271382709%7CUnknown%7CT=
WFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%=
3D%7C3000%7C%7C%7C&sdata=3DG48Ctj2bHBgK2HMT4WctuWzsbPVMAcvOa9QBfYeLBJE%=
3D&reserved=3D0" originalsrc=3D"https://www.logistics.dhl/ae-en/home/fo=
oter/privacy-notice.html" shash=3D"PVLu7pm/eEqh8UIfk9+ceelVKNq+E2wvIn4Aqff4=
yEAau9s43W/jvMIwgGAM2XRZ43sWY7ew9rfTPX1qlWXLzTfS9ih61fEMiBoWfMykxqZqjIq/IOF=
v9YiKTPtK1CbX1Xn5ZANzuDLqKjU8MzNzoA5Imjy9n3GZuvt1QjBbGCc=3D">Privacy Notice=
2023 =C2=A9 DHL International GmbH. All rights reserved.=
" width=3D"100%">
dth=3D"26"> <=
/tr>
padding=3D"3" cellspacing=3D"3">
e>
spacing=3D"3">
ic">
ale=3D1, maximum-scale=3D1">
scale=3D1.0; maximum-scale=3D1.0; user-scalable=3Dyes;" name=3D"viewport"><=
title>DHL DO RTL
dth=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" id=3D"backgro=
undTable" dir=3D"rtl">
border=3D"0" align=3D"center" cellpadding=3D"3" cellspacing=3D"3">
r>
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 23 Oct 2023 07:18:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1quuo5-0003l1-23
for dave@doctor.nl2k.ab.ca;
Mon, 23 Oct 2023 07:17:21 -0600
Resent-From: The Doctor
Resent-Date: Mon, 23 Oct 2023 07:17:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from rs228.mailgun.us ([209.61.151.228]:46078)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qurC1-000OAq-2z
for root@nk.ca;
Mon, 23 Oct 2023 03:25:56 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed;
d=mg.elegantthreadsembroidery.com; q=dns/txt; s=mx; t=1698053019;
x=1698060219; h=Content-Type: Content-Transfer-Encoding: Message-Id: To: To:
From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=7wn8fHaD3K+mDmAXpa8h8QLfPKNLFpEHA840f/EQ4U8=;
b=V3HtJd19jMnGQ47H/z9Hhe1Pr248HnBC0LhIJBUetOBovUPMrceylNvFW7NuxYLi38JiiYDKrdQv8Gya7+r9bAIV83i/ek8p4dMPvxKzK0vO6mKFNDTh1daMnWuk4MGkYa6IkwulN4OGpK6MVfe7QYHMdzg2hOJG9fEJVMEEPmI=
X-Mailgun-Sending-Ip: 209.61.151.228
X-Mailgun-Sid: WyJlMDRmYSIsInJvb3RAbmsuY2EiLCJhNzE5ZWIiXQ==
Received: from
65363b9b4a69a73afc76b7dc; Mon, 23 Oct 2023 09:23:39 GMT
Sender: noreply=dhl-ae.com@mg.elegantthreadsembroidery.com
Date: Mon, 23 Oct 2023 09:23:39 +0000
Mime-Version: 1.0
Subject: Import Duty/Tax Payment Alert
From: DHL Express
To: root@nk.ca
Message-Id: <20231023092339.c916a682f967030c@mg.elegantthreadsembroidery.com>
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: English | العربية Payment Request - Import duties
and charges IMPORT DUTY/TAX PAYMENT IS REQUIRED
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.61.151.228 listed in list.dnswl.org]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.61.151.228 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.8 DKIM_ADSP_NXDOMAIN No valid author signature and domain not in DNS
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
3.0 URI_WP_DIRINDEX URI for compromised WordPress site, possible malware
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
2.0 URI_WP_HACKED_2 URI for compromised WordPress site, possible malware
Subject: {SPAM?} Import Duty/Tax Payment Alert
X-Antivirus: AVG (VPS 231023-2, 10/23/2023), Inbound message
X-Antivirus-Status: Clean
ent-Type" content=3D"text/html; charset=3Dutf-8">
=3D"600" border=3D"0" align=3D"center" cellpadding=3D"3" cellspacing=3D"3">=
serif;">English | =D8=A7=D9=
=84=D8=B9=D8=B1=D8=A8=D9=8A=D8=A9
nglish" id=3D"English">
scale=3D1.0">
=3D"100%">
=3D"background: #ffffff; border: thin solid #ebebeb; width: 600px; font-fam=
ily: Arial, Helvetica, sans-serif; font-size: 12px; text-align: center;" al=
ign=3D"center" bgcolor=3D"#ffffff" cellpadding=3D"0" cellspacing=3D"0" widt=
h=3D"600">
cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
=3D"https://del.dhl.com/img/email_assets/images/header.jpg" alt=3D"DHL Logo=
" height=3D"114" width=3D"600">
" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
=3D"28">
"0" width=3D"100%">
al, Helvetica, sans-serif; font-size: 20px; margin: 0px; text-transform: up=
percase; font-weight: bold;" align=3D"left" valign=3D"top">
bedby=3D"cke_93" title=3D"Rich Text Editor, MAIN_HEADING" aria-label=3D"Ric=
h Text Editor, MAIN_HEADING" role=3D"textbox" style=3D"position: relative;"=
spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inl=
ine cke_contents_ltr cke_show_borders" id=3D"MAIN_HEADING">IMPORT DUTY/TAX =
PAYMENT IS REQUIRED
bsp;
cing=3D"0" width=3D"100%">
=3D"left" valign=3D"top">
=3D"0" width=3D"100%">
border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
>
llspacing=3D"0" width=3D"100%">
Helvetica, sans-serif; font-size: 14px;" align=3D"left" valign=3D"top">
aria-describedby=3D"cke_126" title=3D"Rich Text Editor, GREETING" aria-lab=
el=3D"Rich Text Editor, GREETING" role=3D"textbox" style=3D"position: relat=
ive;" spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editabl=
e_inline cke_contents_ltr cke_show_borders" id=3D"GREETING">Dear valued cus=
tomer,
Arial, Helvetica, sans-serif; font-size: 12px;" align=3D"left" valign=3D"t=
op">
-label=3D"Rich Text Editor, BODY" role=3D"textbox" style=3D"position: relat=
ive;" spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editabl=
e_inline cke_contents_ltr cke_show_borders" id=3D"BODY">Your DHL Express sh=
ipment with waybill number 5304121491 from SWEETCARE is arriving in the cou=
ntry. There is import duty/tax due on your shipment. The amount is =
AED 21.00.
We will pay your import duty/tax to the authorit=
ies on your behalf to speed regulatory clearance. To avoid any delivery del=
ay, please pay us this amount securely online now. Click
href=3D"https://del.dhl.com/AE/bspkKeS0i536?locale=3Den-AE" href=3D"https:/=
/emea01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdel.dhl.com%2=
FAE%2FbspkKeS0i536%3Flocale%3Den-AE&data=3D05%7C01%7C%7C8312333f50ca41d=
ac71308dbbbd343d6%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288271=
222164%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6=
Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=3DKOLO5G0eASSRFPeP%2B26Tbe=
j%2B%2FP%2FrkUj%2BfBcy1waveOI%3D&reserved=3D0" originalsrc=3D"https://d=
el.dhl.com/AE/bspkKeS0i536?locale=3Den-AE" shash=3D"rp9fy5xQxY53oqBLbOWzebO=
iRok4+L8QUJz69hHJzm0N2lwWlUsjzUSPz2QUPuzo0R84a6kwXq8UMJpxttSKal/33miOyYnuy5=
YYuns1oiDgX4PEl1vxymGoKILkDHKkfz2VBoHkvp0IJ3034nibMEN/eWcl7eEU0BPB+96apLo=
=3D">here to pay, view the duty/tax calculation and download the releva=
nt documents.
You may track your shipment
https://ducadelcosma.ae/wp-includes/block-patterns/3/" href=3D"https://duca=
delcosma.ae/wp-includes/block-patterns/3/" originalsrc=3D"https://ducadelco=
sma.ae/wp-includes/block-patterns/3/" shash=3D"UdJzXimqNobZRED2RcshweZJTBp3=
c74LihM57d8IxTqfhZWeyfwciDAxfKqJPFIrzCpZU5CJhxmg0V4DvyRHv/F47tIbrXbO7uTRwXJ=
bZXPz1MZwx5D11b02vyZ4zCX1zCW9MsSMH/3dt+lnL73c3BQj2SXnO+hBxea34KuLTvk=3D">he=
re.
" cellspacing=3D"0" width=3D"100%">
>
align=3D"left" valign=3D"top" width=3D"130">
=3D"0" cellspacing=3D"0" width=3D"100%">
_of_prevonblurhandler=3D"null" _of_prevonfocushandler=3D"null" data-cke-sav=
ed-href=3D"https://del.dhl.com/AE/bspkKeS0i536?locale=3Den-AE" href=3D"http=
s://emea01.safelinks.protection.outlook.com/?url=3Dhttps%3A%2F%2Fdel.dhl.co=
m%2FAE%2FbspkKeS0i536%3Flocale%3Den-AE&data=3D05%7C01%7C%7C8312333f50ca=
41dac71308dbbbd343d6%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288=
271382709%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBT=
iI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=3DkcBbpwbQ0Xn7dN3qliKRK=
pQ2rmp%2BnKQM73FJx2XUmkM%3D&reserved=3D0" originalsrc=3D"https://del.dh=
l.com/AE/bspkKeS0i536?locale=3Den-AE" shash=3D"YKwLgf5j2GS7/WEOFF7pScjHIzgG=
pb3W7sLj6QUNF7Z+V4yP89L9xcjwIcDyQ/SPlRF3GWObrKD7fnebdxJ0nQ21AaKOxpF7SCCd1eM=
M3z/Vq28vj8P1UonrESkaOuATatpaa+2VacxfCyUcPFZ2xH2gTqHHxAf4JCovR6Jnb1U=3D">
mg src=3D"https://del.dhl.com/img/email_assets/images/logo_pay_online.png" =
alt=3D"pay online" height=3D"74" width=3D"74">
=3D"title" style=3D"font-weight: bold; font-family: Arial, Helvetica, sans=
-serif; color: #D60000; font-size: 14px;" align=3D"center">
bedby=3D"cke_489" title=3D"Rich Text Editor, LOGO_TITLE" aria-label=3D"Rich=
Text Editor, LOGO_TITLE" role=3D"textbox" style=3D"position: relative;" sp=
ellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inline=
cke_contents_ltr cke_show_borders" id=3D"LOGO_TITLE">Duty/Tax Payment
>
llpadding=3D"0" cellspacing=3D"0" width=3D"100%">
" width=3D"100%">
, Helvetica, sans-serif; font-size: 14px; margin-bottom: 0px; margin-top: 5=
px; text-transform: uppercase; font-weight: bold;">
"cke_225" title=3D"Rich Text Editor,SHPDTL_HEADING" aria-label=3D"Rich Text=
Editor, SHPDTL_HEADING" role=3D"textbox" style=3D"position: relative;" spe=
llcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inline =
cke_contents_ltr cke_show_borders" id=3D"SHPDTL_HEADING">SHIPMENT Informati=
on
nt-family: Arial, Helvetica, sans-serif; font-size: 12px; width: 100%" bord=
er=3D"0" cellpadding=3D"5" cellspacing=3D"3" width=3D"100%">
class=3D"bold" style=3D"font-weight: bold" align=3D"left" bgcolor=3D"#F5F5F=
5" valign=3D"top" width=3D"150">
Rich Text Editor, HWB_LABEL" aria-label=3D"Rich Text Editor, HWB_LABEL" rol=
e=3D"textbox" style=3D"position: relative;" spellcheck=3D"false" tabindex=
=3D"0" class=3D"cke_editable cke_editable_inline cke_contents_ltr cke_show_=
borders" id=3D"HWB_LABEL">Waybill No.
=3D"#F5F5F5" valign=3D"top">5304121491
e=3D"font-weight: bold" align=3D"left" bgcolor=3D"#F5F5F5" valign=3D"top"><=
div aria-describedby=3D"cke_291" title=3D"Rich Text Editor, CUSTADDRESS_LAB=
EL" aria-label=3D"Rich Text Editor, CUSTADDRESS_LABEL" role=3D"textbox" sty=
le=3D"position: relative;" spellcheck=3D"false" tabindex=3D"0" class=3D"cke=
_editable cke_editable_inline cke_contents_ltr cke_show_borders" id=3D"CUST=
ADDRESS_LABEL">Address
ign=3D"top">**** tower 14**DUBAI DUBAI
der=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
>
g=3D"0" width=3D"100%">
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
r>
width: 100%">
ditor, SIGNATURE_LINE2" aria-label=3D"Rich Text Editor, SIGNATURE_LINE2" ro=
le=3D"textbox" style=3D"position: relative; font-family: Arial, Helvetica, =
sans-serif; color: rgb(214, 4, 17); background-color: rgb(255, 255, 255);" =
spellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inli=
ne cke_contents_ltr cke_show_borders" id=3D"SIGNATURE_LINE2">DHL Express - =
Excellence. Simply delivered.
e border=3D"0" cellpadding=3D"0" cellspacing=3D"0" width=3D"100%">
r>
cellspacing=3D"0" width=3D"100%">
sp;
rif; font-size: 10px; text-align: right" align=3D"right">
dby=3D"cke_522" title=3D"Rich Text Editor, FOOTER_TEXT" aria-label=3D"Rich =
Text Editor, FOOTER_TEXT" role=3D"textbox" style=3D"position: relative;" sp=
ellcheck=3D"false" tabindex=3D"0" class=3D"cke_editable cke_editable_inline=
cke_contents_ltr cke_show_borders" id=3D"FOOTER_TEXT">
ef=3D"http://www.dhl.ae/en/express.html" href=3D"https://emea01.safelinks.p=
rotection.outlook.com/?url=3Dhttp%3A%2F%2Fwww.dhl.ae%2Fen%2Fexpress.html&am=
p;data=3D05%7C01%7C%7C8312333f50ca41dac71308dbbbd343d6%7C84df9e7fe9f640afb4=
35aaaaaaaaaaaa%7C1%7C0%7C638310288271382709%7CUnknown%7CTWFpbGZsb3d8eyJWIjo=
iMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C=
&sdata=3DwJqFxCZyeL7Rj%2FuEIU%2FDynvrvzmH0YSi5vfYaX1NyPM%3D&reserve=
d=3D0" originalsrc=3D"http://www.dhl.ae/en/express.html" shash=3D"ddHF7FV/2=
he2dbq5lcT2ogp0EG099xKT4otgDgiWqitAIr4YQ7mgoEv8BIO42mwcLf8Rgi5kGeldXTh0Mc7M=
6sqUr75OKONO16wW5qullYS2WSsxQXQpItTU0L/S4HEryJMhOrI+nkqGSsuYlVrveXpq/777mqO=
FMIUOW1ADI3g=3D">DHL Express |
=2Eae/en/contact_center/contact_expres=
s.html" href=3D"https://emea01.safelink=
s.protection.outlook.com/?url=3Dhttp%3A%2F%2Fwww.dhl.ae%2Fen%2Fcontact_cent=
er%2Fcontact_express.html&data=3D05%7C01%7C%7C8312333f50ca41dac71308dbb=
bd343d6%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288271382709%7CU=
nknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLC=
JXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=3DKhlazds3luTuPqtpg%2B33rV5bw24cj6PQ=
zzJgzBiAcmw%3D&reserved=3D0" originalsrc=3D"http://www.dhl.ae/en/contac=
t_center/contact_express.html" shash=3D"eIxQxI9tk+MfD5NKTXJrylRnJRMHwQO+o0f=
UwJpgoLMVorztCiEEwICcMeYKMRawtLRCaUAMMAugjHkERElV1bmEbCxC3CP5+mij1whuKzHL1l=
Rf5cPu/9U8gPHOWeeUY0hHp7UbeBoMvvi07NS5vOhtOQ5TsoNdw4297Vl0jpo=3D">Contact D=
HL |
ter/privacy-notice.html" href=3D"https://emea01.safelinks.protection.outloo=
k.com/?url=3Dhttps%3A%2F%2Fwww.logistics.dhl%2Fae-en%2Fhome%2Ffooter%2Fpriv=
acy-notice.html&data=3D05%7C01%7C%7C8312333f50ca41dac71308dbbbd343d6%7C=
84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C638310288271382709%7CUnknown%7CT=
WFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%=
3D%7C3000%7C%7C%7C&sdata=3DG48Ctj2bHBgK2HMT4WctuWzsbPVMAcvOa9QBfYeLBJE%=
3D&reserved=3D0" originalsrc=3D"https://www.logistics.dhl/ae-en/home/fo=
oter/privacy-notice.html" shash=3D"PVLu7pm/eEqh8UIfk9+ceelVKNq+E2wvIn4Aqff4=
yEAau9s43W/jvMIwgGAM2XRZ43sWY7ew9rfTPX1qlWXLzTfS9ih61fEMiBoWfMykxqZqjIq/IOF=
v9YiKTPtK1CbX1Xn5ZANzuDLqKjU8MzNzoA5Imjy9n3GZuvt1QjBbGCc=3D">Privacy Notice=
2023 =C2=A9 DHL International GmbH. All rights reserved.=
" width=3D"100%">
dth=3D"26"> <=
/tr>
padding=3D"3" cellspacing=3D"3">
e>
spacing=3D"3">
ic">
ale=3D1, maximum-scale=3D1">
scale=3D1.0; maximum-scale=3D1.0; user-scalable=3Dyes;" name=3D"viewport"><=
title>DHL DO RTL
dth=3D"100%" cellpadding=3D"0" cellspacing=3D"0" border=3D"0" id=3D"backgro=
undTable" dir=3D"rtl">
border=3D"0" align=3D"center" cellpadding=3D"3" cellspacing=3D"3">
r>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments