Canada Post phish from Africa
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 26 Nov 2024 22:22:03 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tG9SL-000000006P3-0iwj
for dave@doctor.nl2k.ab.ca;
Tue, 26 Nov 2024 21:15:13 -0700
Resent-From: The Doctor
Resent-Date: Tue, 26 Nov 2024 21:15:13 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [102.218.215.219] (port=36336 helo=ixm.ca)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tG7hp-00000000HOY-2ZVp
for doctor@mail.nl2k.ab.ca;
Tue, 26 Nov 2024 19:23:11 -0700
Received: by ixm.ca (Postfix, from userid 33)
id B2B6D43BC6A; Wed, 27 Nov 2024 02:11:16 +0200 (SAST)
Date: Wed, 27 Nov 2024 02:10:19 +0200
To: doctor@mail.nl2k.ab.ca
From: Canada Post | Postes Canada
Reply-To: no_reply@canadapost-postescanada.ca
Subject: =?UTF-8?Q?New_package_awaiting__delivery_during_strike_at_Canada_Post_/_N?=
=?UTF-8?Q?ouveau_colis_en_attente_de_livraison_pendant_la_gr=C3=A8ve_?=
=?UTF-8?Q?=C3=A0_Postes_Canada?=
Message-ID:
List-Unsubscribe: mailto:bounce401-Xx5kCkSQHbKaURt@canadapost-postescanada.ca?subject=list-unsubscribe
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="1853b9fafcf3ccdc56a5a67c2e071db96"
Content-Transfer-Encoding: 8bit
X-Spam_score: 14.1
X-Spam_score_int: 141
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Canada Post | Postes Canada Dear customer,
Content analysis details: (14.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
[102.218.215.219 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[102.218.215.219 listed in dnsbl.ahbl.org]
[102.218.215.219 listed in dnsbl.ahbl.org]
[102.218.215.219 listed in dnsbl.ahbl.org]
[102.218.215.219 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[102.218.215.219 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[102.218.215.219 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[102.218.215.219 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[102.218.215.219 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_SBL_XBL RBL: Received via a relay in Spamhaus SBL+XBL
[102.218.215.219 listed in sbl-xbl.spamhaus.org]
3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
[102.218.215.219 listed in zen.spamhaus.org]
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
1.3 URI_HEX URI: URI hostname has long hexadecimal sequence
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
1.2 GOOG_REDIR_NORDNS Google redirect to obscure spamvertised website +
no rDNS
Subject: {SPAM?} =?UTF-8?Q?New_package_awaiting__delivery_during_strike_at_Canada_Post_/_N?=
=?UTF-8?Q?ouveau_colis_en_attente_de_livraison_pendant_la_gr=C3=A8ve_?=
=?UTF-8?Q?=C3=A0_Postes_Canada?=
This is a multi-part message in MIME format.
--1853b9fafcf3ccdc56a5a67c2e071db96
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Canada Post | Postes Canada
Â
Dear customer,
Since November 15, 2024, postal services across Canada have been interrupted due to a labour dispute at Canada Post. During this labour disruption, some services may be delayed or not delivered at all.
We regret to inform you that we were unable to deliver an express parcel belonging to you due to the non-payment of customs fees and taxes in the amount of 1.86 CAD.
To ensure that your parcel is delivered on the next working day, and to avoid it being sealed and returned to sender, please click on the button below:
Plan my delivery
This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.
Best regards.
© 2024 © Canada Post Corporation. All rights reserved.
Â
Cher(e) client(e),
Depuis le 15 novembre 2024, les services postaux à travers le Canada sont interrompus en raison d'un conflit de travail à Postes Canada. Pendant cette interruption de travail, certains services peuvent être retardés ou ne pas être livrés du tout.
Nous avons le regret de vous informer que nous n'avons pas pu livrer un colis express vous appartenant en raison du non-paiement de frais de douane et de taxes d'un montant de 1.86 CAD.
Pour que votre colis soit livré le jour ouvrable suivant, et pour éviter qu'il ne soit scellé et renvoyé à l'expéditeur, veuillez cliquer sur le bouton ci-dessous :
Planifier ma livraison
Ce message est destiné uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisée de ce message est strictement interdite. Si vous avez reçu ce message par erreur, veuillez nous en informer immédiatement et supprimer le message original.
© 2024 © Postes Canada Corporation. Tous droits réservés.
--1853b9fafcf3ccdc56a5a67c2e071db96
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
Dear customer,
Since November 15, 2024, postal services across Canada have been interrupted due to a labour dispute at Canada Post. During this labour disruption, some services may be delayed or not delivered at all.
We regret to inform you that we were unable to deliver an express parcel belonging to you due to the non-payment of customs fees and taxes in the amount of 1.86 CAD.
To ensure that your parcel is delivered on the next working day, and to avoid it being sealed and returned to sender, please click on the button below:
This message is intended for the addressee only. It may contain proprietary or confidential information. Any unauthorized dissemination, distribution or copying of this message is strictly prohibited. If you have received this message in error, please inform us immediately and delete the original message.
Best regards.
© 2024 © Canada Post Corporation. All rights reserved.
Cher(e) client(e),
Depuis le 15 novembre 2024, les services postaux à travers le Canada sont interrompus en raison d'un conflit de travail à Postes Canada. Pendant cette interruption de travail, certains services peuvent être retardés ou ne pas être livrés du tout.
Nous avons le regret de vous informer que nous n'avons pas pu livrer un colis express vous appartenant en raison du non-paiement de frais de douane et de taxes d'un montant de 1.86 CAD.
Pour que votre colis soit livré le jour ouvrable suivant, et pour éviter qu'il ne soit scellé et renvoyé à l'expéditeur, veuillez cliquer sur le bouton ci-dessous :
Ce message est destiné uniquement au destinataire. Il peut contenir des informations exclusives ou confidentielles. Toute diffusion, distribution ou copie non autorisée de ce message est strictement interdite. Si vous avez reçu ce message par erreur, veuillez nous en informer immédiatement et supprimer le message original.
© 2024 © Postes Canada Corporation. Tous droits réservés.
--1853b9fafcf3ccdc56a5a67c2e071db96--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments