Canada post phish from cloudinnovation
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 Sep 2024 15:48:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1svOEa-00000000Dhx-3UbJ
for dave@doctor.nl2k.ab.ca;
Mon, 30 Sep 2024 15:47:12 -0600
Resent-From: The Doctor
Resent-Date: Mon, 30 Sep 2024 15:47:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [156.238.254.131] (port=54648 helo=ser776446461600.local)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from)
id 1svLAK-00000000N8K-20lj
for doctor@nk.ca;
Mon, 30 Sep 2024 12:30:41 -0600
Received: by ser776446461600.local (Postfix, from userid 1000)
id 794761B5AC8A; Tue, 1 Oct 2024 02:23:52 +0800 (CST)
To: doctor@nk.ca
Subject: Action Required: Update Your Delivery Address for Canada Post Package. doctor@nk.ca
Date: Tue, 1 Oct 2024 02:23:52 +0800
From: Canada Post Customer Service
Message-ID: <7702b5f5733c592facaacc4794999176@156.238.254.131>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_7702b5f5733c592facaacc4794999176"
Content-Transfer-Encoding: 8bit
X-Spam_score: 16.0
X-Spam_score_int: 160
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Canada Post Delivery Notice body { font-family: 'Arial',
sans-serif; line-height: 1.6; background-color: #f9f9f9; margin: 0; padding:
0; } .container { max-width: 600px; margin: 20px auto; padding: 20px; border:
1px solid #ddd; [...]
Content analysis details: (16.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
[156.238.254.131 listed in dnsbl.ahbl.org]
[156.238.254.131 listed in dnsbl.ahbl.org]
[156.238.254.131 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: canada-post-postescanada.one]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: update-address.canada-post-postescanada.one]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: canada-post-postescanada.one]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no-reply%40canadapost.ca;ip=156.238.254.131;r=doctor.nl2k.ab.ca]
-0.1 MD5_CONTENT BODY: Contains MD5 hash.
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Action Required: Update Your Delivery Address for Canada Post Package. doctor@nk.ca
This is a multi-part message in MIME format.
--b1_7702b5f5733c592facaacc4794999176
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Canada Post Delivery Notice
body {
font-family: 'Arial', sans-serif;
line-height: 1.6;
background-color: #f9f9f9;
margin: 0;
padding: 0;
}
.container {
max-width: 600px;
margin: 20px auto;
padding: 20px;
border: 1px solid #ddd;
border-radius: 8px;
background-color: #fff;
box-shadow: 0 4px 8px rgba(0,0,0,0.1);
}
.header {
text-align: center;
margin-bottom: 20px;
}
.header img {
max-width: 100px; / 增大LOGO宽度 /
height: auto;
margin: 0 auto;
}
.title {
font-size: 1.5em;
font-weight: bold;
color: #004080;
text-align: center;
margin-bottom: 20px;
}
.content {
text-align: left;
margin-bottom: 20px;
}
.content p {
margin: 10px 0;
font-size: 14px;
color: #333;
}
.button {
display: inline-block;
padding: 12px 24px; / å¢žå¤§æŒ‰é’®å†…è¾¹è· /
background-color: #d52b1e;
color: #fff;
text-decoration: none;
border-radius: 4px;
font-size: 16px;
font-weight: bold;
margin: 20px 0;
}
.highlight {
background-color: #f4f4f4;
padding: 20px; / å¢žå¤§å†…è¾¹è· /
border-radius: 4px;
border: 1px solid #ddd;
margin: 20px 0;
font-size: 14px;
color: #333;
}
.small-text {
font-size: 12px;
margin-top: 20px;
color: #666;
}
.footer {
border-top: 1px solid #ddd; / 顶部边框 /
padding-top: 20px;
margin-top: 20px;
text-align: center;
}
.footer p {
margin: 5px 0;
}
.footer a {
color: #0073bb;
text-decoration: none;
}
Canada Post Delivery Notice
Dear Customer,
We attempted to deliver your package, but it was unsuccessful due to an incorrect address.
Action Required: Update Your Delivery Address
Please update your delivery address to ensure successful delivery of your package.
To update your address, click the button below:
Update Address
For security reasons, make sure to use the official Canada Post link.
Thank you for choosing Canada Post.
https://www.canadapost.ca
Message ID: 775ec6d5aa3e6d0b39e168079c86b1de
© 2024 Canada Post Corporation
If you no longer wish to receive such notifications, please unsubscribe here.
Contact us at support@canadapost.ca or call 1-800-267-1177.
--b1_7702b5f5733c592facaacc4794999176
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
Canada Post Delivery Notice
--b1_7702b5f5733c592facaacc4794999176--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 30 Sep 2024 15:48:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1svOEa-00000000Dhx-3UbJ
for dave@doctor.nl2k.ab.ca;
Mon, 30 Sep 2024 15:47:12 -0600
Resent-From: The Doctor
Resent-Date: Mon, 30 Sep 2024 15:47:12 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [156.238.254.131] (port=54648 helo=ser776446461600.local)
by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))
(envelope-from
id 1svLAK-00000000N8K-20lj
for doctor@nk.ca;
Mon, 30 Sep 2024 12:30:41 -0600
Received: by ser776446461600.local (Postfix, from userid 1000)
id 794761B5AC8A; Tue, 1 Oct 2024 02:23:52 +0800 (CST)
To: doctor@nk.ca
Subject: Action Required: Update Your Delivery Address for Canada Post Package. doctor@nk.ca
Date: Tue, 1 Oct 2024 02:23:52 +0800
From: Canada Post Customer Service
Message-ID: <7702b5f5733c592facaacc4794999176@156.238.254.131>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_7702b5f5733c592facaacc4794999176"
Content-Transfer-Encoding: 8bit
X-Spam_score: 16.0
X-Spam_score_int: 160
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Canada Post Delivery Notice body { font-family: 'Arial',
sans-serif; line-height: 1.6; background-color: #f9f9f9; margin: 0; padding:
0; } .container { max-width: 600px; margin: 20px auto; padding: 20px; border:
1px solid #ddd; [...]
Content analysis details: (16.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
[156.238.254.131 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
[156.238.254.131 listed in dnsbl.ahbl.org]
[156.238.254.131 listed in dnsbl.ahbl.org]
[156.238.254.131 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[156.238.254.131 listed in dnsbl.ahbl.org]
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: canada-post-postescanada.one]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: update-address.canada-post-postescanada.one]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URI: canada-post-postescanada.one]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=no-reply%40canadapost.ca;ip=156.238.254.131;r=doctor.nl2k.ab.ca]
-0.1 MD5_CONTENT BODY: Contains MD5 hash.
1.5 MR_STRANGE_QUESTION URI: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 SARE_FROM_SPAM_WORD4 From address suggests this may be spam
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Action Required: Update Your Delivery Address for Canada Post Package. doctor@nk.ca
This is a multi-part message in MIME format.
--b1_7702b5f5733c592facaacc4794999176
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Canada Post Delivery Notice
body {
font-family: 'Arial', sans-serif;
line-height: 1.6;
background-color: #f9f9f9;
margin: 0;
padding: 0;
}
.container {
max-width: 600px;
margin: 20px auto;
padding: 20px;
border: 1px solid #ddd;
border-radius: 8px;
background-color: #fff;
box-shadow: 0 4px 8px rgba(0,0,0,0.1);
}
.header {
text-align: center;
margin-bottom: 20px;
}
.header img {
max-width: 100px; / 增大LOGO宽度 /
height: auto;
margin: 0 auto;
}
.title {
font-size: 1.5em;
font-weight: bold;
color: #004080;
text-align: center;
margin-bottom: 20px;
}
.content {
text-align: left;
margin-bottom: 20px;
}
.content p {
margin: 10px 0;
font-size: 14px;
color: #333;
}
.button {
display: inline-block;
padding: 12px 24px; / å¢žå¤§æŒ‰é’®å†…è¾¹è· /
background-color: #d52b1e;
color: #fff;
text-decoration: none;
border-radius: 4px;
font-size: 16px;
font-weight: bold;
margin: 20px 0;
}
.highlight {
background-color: #f4f4f4;
padding: 20px; / å¢žå¤§å†…è¾¹è· /
border-radius: 4px;
border: 1px solid #ddd;
margin: 20px 0;
font-size: 14px;
color: #333;
}
.small-text {
font-size: 12px;
margin-top: 20px;
color: #666;
}
.footer {
border-top: 1px solid #ddd; / 顶部边框 /
padding-top: 20px;
margin-top: 20px;
text-align: center;
}
.footer p {
margin: 5px 0;
}
.footer a {
color: #0073bb;
text-decoration: none;
}
Canada Post Delivery Notice
Dear Customer,
We attempted to deliver your package, but it was unsuccessful due to an incorrect address.
Action Required: Update Your Delivery Address
Please update your delivery address to ensure successful delivery of your package.
To update your address, click the button below:
Update Address
For security reasons, make sure to use the official Canada Post link.
Thank you for choosing Canada Post.
https://www.canadapost.ca
Message ID: 775ec6d5aa3e6d0b39e168079c86b1de
© 2024 Canada Post Corporation
If you no longer wish to receive such notifications, please unsubscribe here.
Contact us at support@canadapost.ca or call 1-800-267-1177.
--b1_7702b5f5733c592facaacc4794999176
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
Canada Post Delivery Notice
Dear Customer,
We attempted to deliver your package, but it was unsuccessful due to an incorrect address.
Action Required: Update Your Delivery Address
Please update your delivery address to ensure successful delivery of your package.
To update your address, click the button below:
For security reasons, make sure to use the official Canada Post link.
--b1_7702b5f5733c592facaacc4794999176--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments