Canadian Tire Phish from amazon

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Dec 2023 07:11:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rEVN9-00000000H3Q-2Lbv

for dave@doctor.nl2k.ab.ca;

Sat, 16 Dec 2023 07:10:31 -0700

Resent-From: The Doctor

Resent-Date: Sat, 16 Dec 2023 07:10:31 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from c180-26.smtp-out.ap-south-1.amazonses.com ([76.223.180.26]:41551)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from <0109018c72d13a66-d8027395-e73c-49d5-a62c-b23a8d8ddc91-000000@ap-south-1.amazonses.com>)

id 1rEUsO-00000000FxI-02Vv

for root@nk.ca;

Sat, 16 Dec 2023 06:38:49 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=dtpoibi7sq2fs2i4s56hguds2lndhj4n; d=brainobrainfms.com;

t=1702733363;

h=Subject:From:Reply-To:To:Date:Message-ID:List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;

bh=KiMVg5eA1I6WJabu23PAfTSFG/GxmK+0jSrgEj/SgKQ=;

b=DAFvmsbG7ngHR4HMtF3GP+6mF73asfDTU1vqEHDU7t46e4pN6+vLzGbsiCJYuW5k

38z7de+kXOdzG8u7StGC81Cb444vFmVdRVZgj3Yj79dIxdWg84HfbW5cEJ7Bq2OuRjr

sdJG6At3KraOZ/pfCicDunnbKB41KpBVAWIWN5qk=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=rlntogby6xsxlfnvyxwnvvhttakdsqto; d=amazonses.com; t=1702733363;

h=Subject:From:Reply-To:To:Date:Message-ID:Feedback-ID:List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type;

bh=KiMVg5eA1I6WJabu23PAfTSFG/GxmK+0jSrgEj/SgKQ=;

b=CNJUK79m4zZ1lbQQiVHFlR1lp7xwvAyOXr6WA0EQBu97wtKcniU9p+WxwepLpkC2

WYcZvEqroqZ2nqAwOFa2Bn+dAF0bi2YRfjr2TcN3Pkd0WNkxMX3QRbY7XujcbYkjCt2

NaMBz+ARbIRK4kgagET4Ypmm8XCGUZVnEZTOK2HI=

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=macpacclub.co.nz;

s=k2; t=1702370545; x=1702631045; i=club@macpacclub.co.nz;

bh=MG33lH+CY79L0833Fn7WMiVOuPH1bWfCxhCKRsRyhGI=;

h=Subject:Exclusive Product Awaits You: Complete Our Survey

List-ID:List-Unsubscribe:List-Unsubscribe-Post:Content-Type:

MIME-Version:CC:Date:Sat, 16 Dec 2023 08:27:57 -0500

b=WgP1KUJeaUgrOkiymoZOvwBMLYFEY2v8RAr8j2IQ54ZwEEY68klLN38mqqFQ0Po7R

4lpTtv7jGI7oLtTwBQTFh1aOuHpA/mIxeOVnasPt3kQ5CeohPOn5q3lLnYZPeLCOHR

TmDYIm8juN9fgqzJ9Sc0LL37b1eSaq/p9rftmUlfLgGVCZx0fC3a2+MguUiyHr9Ov6

jVs0dxoY0x13SLlLAYqI9nPjUFcXlGqQ/lv6Hhl2Q+HNHSUTG4bP/GPGdlDvr3OybD

oxDTSGb7ri7v99U5IW3+jh8hvBZANBM7hJH5BNKQUWrv1Bpq4NgINQz0FeMOOJ6M0S

lSo9lNHMvJRxg==

Subject:Exclusive Product Awaits You: Complete Our Survey

From: Canadian Tire Department

Reply-To: root@nk.ca

To: root@nk.ca

Date: Sat, 16 Dec 2023 13:29:23 +0000

Message-ID: <0109018c72d13a66-d8027395-e73c-49d5-a62c-b23a8d8ddc91-000000@ap-south-1.amazonses.com>

X-Mailer: Mailchimp Mailer - **CID7497ea0e6aed9fb56518**

X-Campaign: mailchimpe6a11f6e800e39b4814219c1e.7497ea0e6a

X-campaignid: mailchimpe6a11f6e800e39b4814219c1e.7497ea0e6a

X-Report-Abuse: Please report abuse for this campaign here: https://mailchimp.com/contact/abuse/?u=e6a11f6e800e39b4814219c1e&id=7497ea0e6a&e=ed9fb56518

X-MC-User: e6a11f6e800e39b4814219c1e

Feedback-ID: 1.ap-south-1.xghr3DOx0zk+DeTEIpL/QsXny3FOR/wNtuILwueGHM4=:AmazonSES

List-ID: e6a11f6e800e39b4814219c1emc list

X-Accounttype: pr

List-Unsubscribe: ,

List-Unsubscribe-Post: List-Unsubscribe=One-Click

Content-Type: multipart/alternative; boundary="_----------=_MCPart_1888620651"

X-SES-Outgoing: 2023.12.16-76.223.180.26

X-Antivirus: AVG (VPS 231215-8, 12/15/2023), Inbound message

X-Antivirus-Status: Clean







--_----------=_MCPart_1888620651

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable




5ZbN>=0A
2jMEAEx0d1fM>=0A
UxgnMVbzTIDQmggtWw27>=0A
70 kEJFB4lqobgwiYDJBDK9iILOh>=0A
CNRYE3HD4T wzlYo31RS4ml6MtfzO3bhGT5b>=0A
UoaO1SwTv6sQAdn0Be pIWfkTOSR0TjK7jpZ2LIoI058>=0A
lJWkE5a0imC3mjZ6EDwQ07DlR wujfmvP9Gj4GacTD65NV1iooY>=0A
JxfctbPf XthMzt5QmUuASd1cCr2bMoK9t tvtyohSwUhQQX3AhtillkNCcP>=0A
kuEHfMnVzglHAuTL xeHcjYsnzlLwyxGT2eYEsJ4yV ZflBKIFiKP733xfFTE3qnVucq>=0A
kbxN0DYsdxYl8Dj1xG62pAVG H0QXDs8FPLviANmXCyV5HNsdJ t97ZNEPusjMrOs3aAtONggb2=

c>=0A
gSbqdrEPh>=0A
a03UFu3LNMyibm0n2>



--_----------=_MCPart_1888620651

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit













Canadian Tire

























































image PROMO REWARD





Have a Moment?

You have been chosen to participate in our Loyalty Program for FREE! It will take you only a minute to receive this fantastic prize.







product image





Claim a



Brand New



Dewalt EXTREME Drill!





GET STARTED Click here to Begin!



Mind sharing your honest feedback??
Just answer a few questions



It's FREE


Â




If you no longer wish to receive these emails, you may unsubscribe by clicking here



Â




































--_----------=_MCPart_1888620651--

Possible PHish from Amazaon from Koho

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 09 Dec 2023 19:11:07 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97 (FreeBSD))

(envelope-from )

id 1rC9HN-000000008MK-1WXE

for dave@doctor.nl2k.ab.ca;

Sat, 09 Dec 2023 19:10:49 -0700

Resent-From: The Doctor

Resent-Date: Sat, 9 Dec 2023 19:10:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from a60-61.smtp-out.us-west-2.amazonses.com ([54.240.60.61]:37543)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.97 (FreeBSD))

(envelope-from <0101018c51370887-b6afdf1f-8fdd-4971-a628-37b4cebdb605-000000@amazonses.koho.ca>)

id 1rC86Z-00000000G01-2pmJ

for root@nk.ca;

Sat, 09 Dec 2023 17:55:42 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=wu7uojg62rbkitbenyb2cmqnwwvjldnq; d=koho.ca; t=1702169610;

h=To:From:Subject:MIME-version:Content-Type:Message-ID:Date;

bh=StNNVQrCyhu10NqTKDMxuut80Qn4CfvXTGVBQckSaoA=;

b=JVvTOvoCHdIqzMmXuB439ECybY84Tq+AfXMwsVXwr7SYq9VgC+itWUsYl4Ww6PPt

paOHq3joaKZda4Zc3NtbvX7NGJieNQzT267Xh4V1rCxt2Xc/Z+OxOOrUcOPPZSVBRrd

7JEA08956CW673GLGzVQPTO2u7Z1CjNVb+/0d4U8=

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hsbnp7p3ensaochzwyq5wwmceodymuwv; d=amazonses.com; t=1702169610;

h=To:From:Subject:MIME-version:Content-Type:Message-ID:Date:Feedback-ID;

bh=StNNVQrCyhu10NqTKDMxuut80Qn4CfvXTGVBQckSaoA=;

b=m3UCx5gYwQqHOa+C/PFpJBKY2ONehqWX7WRxQw2BO+O2vQa7GH9MlqNDlctgDwyk

MOeul+WFDmFPKtjqGLUvAqrhWhrhOYOS5EoKrOt5+rm5PTRZW6Cga5o0kaXySRXMy9b

PLY6XB3a+e116A6sFBas4zxxlmZluENJaFEZspgQ=

To: Dave

From: KOHO

Subject: New device on your KOHO account

MIME-version: 1.0;

Content-Type: text/html; charset="UTF-8";

Message-ID: <0101018c51370887-b6afdf1f-8fdd-4971-a628-37b4cebdb605-000000@us-west-2.amazonses.com>

Date: Sun, 10 Dec 2023 00:53:30 +0000

Feedback-ID: 1.us-west-2.ZLAvZ9c9B6ejGbciF8FLiCeZ8Uh8I2wyAaZiVvfy7og=:AmazonSES

X-SES-Outgoing: 2023.12.10-54.240.60.61

X-Antivirus: AVG (VPS 231209-4, 12/9/2023), Inbound message

X-Antivirus-Status: Clean




















































style="font-family: Roboto, Helvetica, Arial; font-size: 12px; font-weight: 300; line-height: 1.33; letter-spacing: 0.5px; color: rgba(0, 0, 0, 0.54);"

>







KOHO






Hey Dave!



We noticed a login from a new device or location.



Device: ios ,



Verify This Device





If this wasn't you, please contact us immediately via our secure in-app chat. You can also instantly lock your KOHO card in the app.





Team KOHO










KOHO Financial Inc.


#200 - 67 Mowat Ave, Toronto


ON M6K 3E3


support@koho.ca