Costco Phish

Posted by Dave Yadallee on Friday, May 10. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 May 2024 07:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s5QQz-00000000GMf-278P

for dave@doctor.nl2k.ab.ca;

Fri, 10 May 2024 07:37:13 -0600

Resent-From: The Doctor

Resent-Date: Fri, 10 May 2024 07:37:13 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from server.scrachtech.shop ([69.48.183.151]:49187 helo=ammsdqsd.sdmm.Smtpauth.sddsq.sdzm)

by doctor.nl2k.ab.ca with esmtp (Exim 4.97.1 (FreeBSD))

id 1s5Kag-00000000Mx9-1P5d

for root@nk.ca;

Fri, 10 May 2024 01:22:57 -0600

Authentication-Results: gmx.net; dkim=pass header.i=@kashflow.com

Received: from o7.mail.kashflow.com ([167.89.31.18]) by mx-ha.gmx.net

(mxgmx109 [212.227.17.5]) with ESMTPS (Nemesis) id 1MGOf7-1roTPo1PzR-00FosH

for ; Thu, 09 May 2024 23:30:18 +0200

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kashflow.com;

h=content-transfer-encoding:content-type:from:mime-version:subject:

reply-to:to:cc:content-type:from:subject:to;

s=s1; bh=bMGte5OeznE0nK4o/G6ZnFJrgjIX/EYx8sJNcTtVIok=;

b=EA0mxwLfkvPp51ZqIWOSZM4vKsxj4YH2KSd6ZbKGsy16Ge4htNBIZJVpTjVjJLt9h1FL

rohjD4DVcjzP42kQv5mqsxQh5lw7P6FRWrkCwt8U18KjaP9aMjk1fsEiLIgcl+vDldy9mF

+4SJkLgTNgmHH4CU1ZlAHUjrS6iZbPOPMolenShdQT6e7r842mMRQL/tJlRegWDaZjz/Y8

HY9tS+Wsbcw4Tq0ulNu5DJUTvrLczteF1kVTErlZ/ueZ4cSFDTsDDGCjbnxH3f09GJcWRs

VAlYKzBDkxg7xmF05tIQwHkL9mQEWF8VHctdBZXOi5YMX6TTAlVbDjH7cRCGEpGg==

Received: by filterdrecv-canary-6977b856d4-b85bl with SMTP id filterdrecv-canary-6977b856d4-b85bl-1-663D4067-E9

2024-05-09 21:30:15.833052274 +0000 UTC m=+860798.750953213

Received: from MjI5NDY5MQ_899005_ (unknown)

by geopod-ismtpd-9 (SG) with HTTP

id pbDxy-wjRVOcQ_tllhshwg

Thu, 09 May 2024 21:30:15.476 +0000 (UTC)

Content-Transfer-Encoding: quoted-printable

Content-Type: text/html; charset=us-ascii

Date: Fri, 10 May 2024 07:20:45 +0000

From: Message from Costco

Mime-Version: 1.0

Message-ID:

Subject: We are looking for new customers, let us reward you!

Reply-To: Message from Costco

X-SG-EID:

=?us-ascii?Q?u001=2E2dU4z=2FWtPTn3IAI+T2Wk4rvV3ZRgQiRb6uQtLjAeBz8I+62Z7902wcH7S?=

=?us-ascii?Q?8fD6XRA2e97MRDccekaCDMOwcl73OFS2iufs6FE?=

=?us-ascii?Q?7jfchMMOrfdCrE7BnR8Qq7+2xwX1NyOiVPRLv6L?=

=?us-ascii?Q?Xnmlk7XXasppPp4YkDnjGabcoe0Wrj80rgPW2Bp?=

=?us-ascii?Q?MtvtDgkTHTSihhU94N6RAJpaeVPOP5502QqctA3?=

=?us-ascii?Q?V5QdR=2Ful1WLCF6RMX9PtQB9nzPu1ROCk+MgJICW?=

=?us-ascii?Q?+kyC0ikUMEOfLUygZWsYxeX6wg=3D=3D?=

To: gutispukuin82@gmx.net

X-Entity-ID: u001.PG5NHUku19G2mCTQK1EQEw==

X-GMX-Antispam: 0 (Mail was not recognized as spam); Detail=V3;

X-Spam-Flag: NO

UI-InboundReport: notjunk:1;M01:P0:xlmsrkMBebE=;j38lXzfifD7JZe3xIa+DO4G8xxV8

r7scYjgj5CyVsZXoDmDquvhihs5LryoNREbwBO6Ojv5+vH84t4KhNoyzCxYaZvx4K6wRwbII7

M5xZCHMVB8yXU1y89bH6DKbZR34JUuPxPbxzUF8AIDtjcqsd6suN1lSwwZC+wFPyUphtokB1X

xYDFFVna4SBCZlJuoUZ4/1RyFYJ/UfcALP6U02qx3wacD4RHmdZ6y99un2WiL+eqo7aVm9UzD

kUW5hCXM3NPgxBvhfKmOEdM3yJpSPtRC4Kups3qZZKr3fT0an+lo/DQEwjxw/0N4EDXQSLydF

zZMVi+6e8zqp+mPKOfI1Hkbzi1gfNgwq+GPFr//FIR7MbU9gNiu5DPXGmsiq9h3iQSdSu3YOm

AzNb1Cl1H3Syb5Mwdiuh0qVwg/EpONXqGM2K8golm8Nuf06342ycHsKgR0KqY1+2Koww2qDyM

1Bsf0vTfdSYjs1OarXBTJB7xSjzaOy1SkTOfSxVKcTDz4jmXcv1T24vE3i2mzfSljBjsq41x+

PVpWgZxa8RFhH2Rh6bkKo91P1+f/PfzwAQd0ZykWjtvsfq6gZ1vMwfC/Wf+3yGRPsbkiPGi40

nlphgRYWvZRfaKqFAbB3hhsDzZ38O23wPqoKiBLUCkKk8WkHeyI5nKr9wT97bJh/Ba9Zs192l

QxuLYAEIk0kjdidqQnGTfhP+Lb5WypIoHTpvkKLJJBBJxNyM8d5MqzD442YNyoJ5RhuVJ7/UU

Dy1Q8l/tA4PkEPAa85p3tTljAVQJX8biUb6b9xKtmL7WRusXdqgPa+UxxRG8kuzN77HnopLrU

kvsm37CVnQK4vtjV5ZUG9k4g7KUL6e969op+eQeJ3eb+ZUzjMG8YGVYYBILrV2ARttNbIa+rE

l+mfOkf4mLCVUicb0r5SYUskxClSP8noRHHp/+y/Rr0n/N80bn9ppk7FkxhfDSslPQ/idqIPX

n8zwMj5vi8z7dzwFpzj4wr6kcBoV6M6WGO+Xmf2vcBM407VhWmq7xbFhIo9coro0seD0ZgAhq

qWMFwn5VHB2jux3UCNFvbuYREygE0bgGAjFazoxo9g7EzDHCl5FwuA5QozCfk1UfKS9BErr7v

of/aCk0Oni91RED5vbEnR0adTG/NMy34aPtKHWoyEKMKeNjHSvtRVUoK+32seZJJZx/cXGOdi

BQAeJewBDEGvybUuoGX6n7SA6+cY+Yc77Pv4TtfuOW7fafuSjBcxMzX/zZ08aVoZ5giNNue+B

7lcYOGW/obOagelCDI++ZycKBJCbFXO4DSUonf9QLW4EbdEzQUOyApa2h2GRGgd12MfoCWjz9

ul07dDxnxFzSFyMQl22D2qe9nUsOzrhA/+JP3bahKGee+s+7JI2Zm6CZEvd8vaDJ5iFGjWO37

XKzoYhEBLgUAXP8/VYOr36lGZB3e3Dg0OvEb52hqCdV6ogvNr0yqw2j3fjW4LyTDlT2fWAimd

SGdpBmR0QgyU/0qjYxkLYEF2SaNs3HmLBdSHtKrCwryMAc0W5+AHl/qx31/5r8udFl/3D6fow

2/4fODtoTYqWVZjCT60C1cCg7G0bK1Pe9Nm67Umy6eh6iVnRhHFTPDvWVxoDfHjczNZU66aYV

kZ4GNCfi5FkC9b0S04EgVXlJobBu9NJbT3rWx6m53sDKfuOFpKXjJI++ZCjUMQKXoTWlxHYy7

Ik6b+BjrYLMRbvHsL7FjpR6UiqF+8PV12B6uK1Om7hi3/rGQ8VnVBcqcm4ZTyqtCthSoGuEYD

O+9YeVE9A0KI0IC3EHNdMirQQV8xm9J6lyJGfnUDtY9ZazoR8OR4MggfHEFnmZWMzkKPtAYhm

WWTn1TdSuQl3ZEEoHfo7lKNi8FyvmlsiKFCJZRUsyL5nudeI3ewT0RxzR0jNvZy9EQhRmwOoE

K13Vx1m4uG8lY2pYbNsa0PyON+YcC0pV4tObQoGSqxbjg/Lj1VmPHyUW4DE0RJariXYeuaXFN

SM8BXAt/JAt0nl0HWoYXrzedBdN1k/BT5fn4DRBTKX+5GhfBq7+X+joNYQuCxIbVujoCDyrmc

y/QN+Xs9jJiZEv3cYN/SqbuK06zaLjSSauoQvhsWUa6LresX3tI6nNIADCLdrh0ZQ8FHrL5sa

O7ETZI7HffNu3i06yBfOwE/i3ek3INPXCuVmLLuDprgVoL0QbsQBvdtTeFC8rZt0Ejjtl+hkS

YibmNkmyXB3f2dYF4FYdtev2dGOu9/2ENdQGYjIIggFVJdsBkS2s3X6G79x3Cl6f/vjGdItXY

EilZbYMavls52ILP6m9kJzD//ri7k0yqX7ZwtPlLwDGsO7Dwmxt6BWqRLqbnHn8x6E1etL8+b

ZmC+M2wPVqF8Xnm/HZVZxG/rc6FYchpwvik1x5rE+dDQyCJzgeIC6Sq60PQti4ORQTYvoTLHG

YLklmJmJRVubPf3e6CUnimql1DMmkZLg4RIuDxozLns+qwMOzaA43qPwedMsQ5g4lWo9hH26q

iJkY5GB7lHXLAOuDJN2hOW/AueGfmHswgrYtm+kPCkOCr4507DSu5LgaBGVhtcN8ElXbNx+6D

XqhDds1DcAEptqljOiGmNrsnMgT1kc0h7a5zL6J3MvG+2TDk5DMqDWq31PTHP9mrz5kMwzR74

nDWe+Dh+18pO5gSzu8zsgD8pDTEu6p9yBgZ0GbfhFniqQ9j1R9pu96m154AmBUcg+kQF3wrfe

c69WAECu5N7EzLEZsH926YE84pzawlyi650S0axNKb3UwFc4uoHZaofAldfre89i1Mu9ns1jV

n15xcwUGEmv67g8lDxlL+X9LjK2oK3SSXgZ3uP+wenudfWcyERzdoWxW+VL4ifUnSWGXdk2/p

Pt4d6YHz5cqSuUnUsOnZBdMAV9g76RaQlXQPqo7aZLbjEnoxJzr+chfGxleA4GaSCFmPpFlFD

FnfHEhNx3h1fkkJgWB28AR1dUf6lxnktjDFid67Y5SQeW5r9H+tbZ+O3zzVpEmhFraaCw0sYt

KhAZkbp/TIEvcksRLnOV58ZrKki2J9S3zXRJgMYnTrg3TIoUUkLVJIi+neCPjil8v8YHD8x9C

BzPE/fHRHMU80RsWeM94D6wuNy9yJ6kNg/OVRCoVyOfO/UyblfSIhzNWas87N9gRRdV5bjiq0

BX2A3GWUWrWdL3Cyt8zyzFoCdYrmEYZCOadH3U9R9Vo3WuTSyJtOGXWOnPBXzJYPp2v95Sn+r

pvyoCXz9zHpzD6eDUK8YFOEyPmKduff5IU9sjgs1vlLwjyGBw3HFOw2hBdPFMVEWr7DW5VIRz

t8l+JdMqGgZlwRsGPTx4M0/Jw7/i3RTP1ijKIZRWe0sV/Zr/1dRgay0wWu6wKmCCeeclM6iUc

aGjFJ663hs+q5fPoZHlV81PuRZ2ex+HXroDy+TtDQMN8TGy7gVzQrkAQPTZ6zn0Pt+boa+Vpp

hXrshxlA9usK5wtFJWUHDAoAVtq2dUeW7arkg3Id7ia7ScMDllCQKA/1+v47ZCUutdyY3TgDy

E6lPXVRJTeCO5/0T4Fy9Bk3KDeARJjk5BWQrtPFql4qqLDNHUFpF1tSiJYnGRWbBIPCTsSWej

7p1Er80bByuaFd46LrzcsagAQ7sAaOHrTSSo+x6pY1pRfqYcJgFT2vaLTkJzlqRhSNJ/4gj65

vB3K7ZeElTZaUS534fFd8Pz1LTOza/Xaa72qq6Wm7+a73SOhBfwl2ggs2JDfANXLlCpZ5Jifm

JfMMBwJ1mnzw8ker/+c4upuCkC/LZupMxLFGhO0xNEUkwjbTiXvZGjESIsYYeYNv0VoiJ9pT0

o3ZlgqwkS7fDI7vjmdjnjwPCGDlkV7Pnmjikhxmg9R30pyDpW461eSPM/WUY1cuypsj1wxTKW

Lkq/2KxqwgfX7a4caNvHiPPg+hzoqxM/OgO7yMK2sJY5zoriULRXKm2agoRW2eZFYEcbE/Hm5

Rcf/Wc4/J9APYjPgTBBKZ2v2SI25dpoED8jHZQSN16Z/ckO5ehXs6I9hzaleBufGVs30raTeS

XmsbfzLpRcu1blSgPY550JWRG0H7Tf/wilCu6n7BYUegnJwVZfyENEDJ561nNDrGvlcZzbw8P

EgRpNspkrLbwt8LPxPGd72qDBsnjp6ydacKKDVzhFTyd3CI2E6UHdzSolQiE5hc6rk6rMZICA

rqCXwg9BrLltgFYWCB3pvOoSTJNUEi7AwGr/obupqNIgkBtPqTYW0S82IUg2Gadhwpwvf3HVW

vlw/lqeVWJbLOyijZMkBkgyz6KTTYgsf9Zu++kkN2cqNL2utGGNXI/8bHbI5RhI2kF+7qnL84

AliADpQlmQCn0rEcLacJzI/kcgxPssuMyL27T0ZOqRrnG/d6SQ8/ICjqWXtt2qqYWoxth2/Hp

UOPw+AjoQ6+bM+LDZ8urCnkm1Ikst4gALOLq6irCpgfMa3UL1HyA+IH5lP7/G3z8qKAS+W4Pt

5WYUFfOLZM3B/2WR1Q9g5rzNTDc9FKFgtGczFDXVnObnQwBlFDq6QVy+KgFt/SYbEX9hvZXUS

v4KvP3oguvtyz39RYwrp333zyQdcUn+mgwAFXm6HwM6id2ZxdBAVd3uWTzkJ4dr+XReRxfiI1

fFFJM2IjA/I7cooLT9gxFOX6JnG2TXCOxTeCJlPaspqW//aYMHQApDTjGGOcwCEo7oyG+kWOW

3C2wYBcOsR4bpt1G9mXDHtPKf2kyQujo6CNd7SMogc9Bark5tRIRMgZ5uxbhvOp9dWLif52WW

VZkYdrGfxgI0n9FDJUXDwZIUZpkbUVDiiJtBd0DDSgWa2cvEH7wegsa/6hjcKSOzly/7OlEaL

1vB//HTMO61ZM/jQtySZ/EGj5/Cw4tKhOGnVGZ1urVHUEiA25oU0GTMZZ8L+JxPBrEYPrKzv6

p9wCp+RupHmrwjpaWVDSUwe2iBFbhheXOx8Vt1cyN2NFmvcBQSTnutmJCmP0BFqDh8XiYgKIm

eo2IN/Bhax3uDFv6U7P4ddEV8EOBY9y1i4S1wQAHhYYh4P732GCY1CRbPaXtIeP5UQhsDATIq

rIOd9Dq8xIl2NN2qksdiCKzrxj26g+qN5RYYN+MmiRg1dWENttj594uWz15u7XjGSdSW1fqtR

gv23fJ2stjqDrHtGlnzMpEAB1SajRm334olhJFKjB5ClH2ihhj31wtuHhtrKZ/Zp1KQA==

X-Antivirus: Avast (VPS 240509-4, 9/5/2024), Inbound message

X-Antivirus-Status: Clean

X-Spam_score: 9.7

X-Spam_score_int: 97

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: We have a surprise for Costco customers.

Content analysis details: (9.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[167.89.31.18 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

[69.48.183.151 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[167.89.31.18 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[69.48.183.151 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

[167.89.31.18 listed in will-spam-for-food.eu.org]

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 URI_TRUNCATED BODY: Message contained a URI which was truncated

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag

0.0 NO_RDNS2 Sending MTA has no reverse DNS

3.0 GOOG_STO_NOIMG_HTML Apparently using google content hosting to avoid

URIBL

Subject: {SPAM?} We are looking for new customers, let us reward you!

We have a surprise for Costco customers.

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Name

Homepage

In reply to

Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.

Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.

Enter the string from the spam-prevention image above: