Canada post phish from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 04 May 2025 08:44:08 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uBaYq-00000000OlL-1nSo
for dave@doctor.nl2k.ab.ca;
Sun, 04 May 2025 08:43:20 -0600
Resent-From: The Doctor
Resent-Date: Sun, 4 May 2025 08:43:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from it-basket.co.jp ([124.146.216.6]:43117)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1uBZw5-00000000Hwd-2zZU
for root@nk.ca;
Sun, 04 May 2025 08:03:28 -0600
Received: (qmail 434474 invoked by VF by uid 0); 4 May 2025 23:01:16 +0900
X-Vade-Tracker: score=10, verdict=transactional:purchases, state=14
spamcause=gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeekfeelucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecupffvvffrveenuceurghilhhouhhtmecufedttdenucdnrfhurhgthhgrshgvucdluddtmdenucfjughrpegghffvfffutgesrgdttdertddtjeenucfhrhhomhepmjevrghnrggurgcurfhoshhtsdfrohhsthgvshcuvegrnhgruggruceophhoshhtvggtrghnrggurgdqtggrnhgruggrphhoshhtvghssehithdqsggrshhkvghtrdgtohdrjhhpqeenucggtffrrghtthgvrhhnpeffleetvdeuiefgiedtteettedugfegheefueffvdegffettdefgefhgfdtueefueenucffohhmrghinheptggrnhgruggrphhoshhtqdhpohhsthgvshgtrghnrggurgdrtggrpdgrmhgriihonhgrfihsrdgtohhmnecukfhppeehvddrudelhedrvdduvddrudehieenucevlhhushhtvghrufhiiigvpeefnecurfgrrhgrmhepihhnvghtpeehvddrudelhedrvdduvddrudehiedphhgvlhhopefgvedvtefotegkqdfqvdfmiegfjeefpdhmrghilhhfrhhomhepphhoshhtvggtrghnrggurgdqtggrnhgruggrphhoshhtvghssehithdqsggrshhkvghtrdgtohdrjhhppdhnsggprhgtphhtthhopedupdhrtghpthhtoheprhhoohhtsehnkhdrtggrpdhmohguvgepshhmthhpohhuth
Received: from unknown (HELO EC2AMAZ-O2K6U73) (aoki@it-basket.co.jp@52.195.212.156)
by dc8.etius.jp (124.146.216.6) with ESMTPA; 4 May 2025 23:01:16 +0900
MIME-Version: 1.0
From: =?utf-8?Q?=F0=9F=9F=A2Canada_Post=2FPostes_Canada?=
To: root@nk.ca
Date: 4 May 2025 14:01:16 +0000
Subject: =?utf-8?B?U2hpcCBOb3RpZmljYXRpb24gZm9yIEl0ZW0gLyBBdmlzIGTC?=
=?utf-8?B?kmV4cMOpZGl0aW9uIHBvdXIgbMKSYXJ0aWNsZSAvIFJlZiBOb8K6IDog?=
=?utf-8?B?RUI4MzczOTg0MDFDTiA1LzQvMjAyNSAyOjAxOjE2IFBN?=
Content-Type: multipart/alternative;
boundary=--boundary_4448_5ba252c2-d71b-4014-8884-c1045727d2cd
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 04 May 2025 08:44:08 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uBaYq-00000000OlL-1nSo
for dave@doctor.nl2k.ab.ca;
Sun, 04 May 2025 08:43:20 -0600
Resent-From: The Doctor
Resent-Date: Sun, 4 May 2025 08:43:20 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from it-basket.co.jp ([124.146.216.6]:43117)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1uBZw5-00000000Hwd-2zZU
for root@nk.ca;
Sun, 04 May 2025 08:03:28 -0600
Received: (qmail 434474 invoked by VF by uid 0); 4 May 2025 23:01:16 +0900
X-Vade-Tracker: score=10, verdict=transactional:purchases, state=14
spamcause=gggruggvucftvghtrhhoucdtuddrgeefvddrtddtgddvjeekfeelucetufdoteggodetrfdotffvucfrrhhofhhilhgvmecupffvvffrveenuceurghilhhouhhtmecufedttdenucdnrfhurhgthhgrshgvucdluddtmdenucfjughrpegghffvfffutgesrgdttdertddtjeenucfhrhhomhepmjevrghnrggurgcurfhoshhtsdfrohhsthgvshcuvegrnhgruggruceophhoshhtvggtrghnrggurgdqtggrnhgruggrphhoshhtvghssehithdqsggrshhkvghtrdgtohdrjhhpqeenucggtffrrghtthgvrhhnpeffleetvdeuiefgiedtteettedugfegheefueffvdegffettdefgefhgfdtueefueenucffohhmrghinheptggrnhgruggrphhoshhtqdhpohhsthgvshgtrghnrggurgdrtggrpdgrmhgriihonhgrfihsrdgtohhmnecukfhppeehvddrudelhedrvdduvddrudehieenucevlhhushhtvghrufhiiigvpeefnecurfgrrhgrmhepihhnvghtpeehvddrudelhedrvdduvddrudehiedphhgvlhhopefgvedvtefotegkqdfqvdfmiegfjeefpdhmrghilhhfrhhomhepphhoshhtvggtrghnrggurgdqtggrnhgruggrphhoshhtvghssehithdqsggrshhkvghtrdgtohdrjhhppdhnsggprhgtphhtthhopedupdhrtghpthhtoheprhhoohhtsehnkhdrtggrpdhmohguvgepshhmthhpohhuth
Received: from unknown (HELO EC2AMAZ-O2K6U73) (aoki@it-basket.co.jp@52.195.212.156)
by dc8.etius.jp (124.146.216.6) with ESMTPA; 4 May 2025 23:01:16 +0900
MIME-Version: 1.0
From: =?utf-8?Q?=F0=9F=9F=A2Canada_Post=2FPostes_Canada?=
To: root@nk.ca
Date: 4 May 2025 14:01:16 +0000
Subject: =?utf-8?B?U2hpcCBOb3RpZmljYXRpb24gZm9yIEl0ZW0gLyBBdmlzIGTC?=
=?utf-8?B?kmV4cMOpZGl0aW9uIHBvdXIgbMKSYXJ0aWNsZSAvIFJlZiBOb8K6IDog?=
=?utf-8?B?RUI4MzczOTg0MDFDTiA1LzQvMjAyNSAyOjAxOjE2IFBN?=
Content-Type: multipart/alternative;
boundary=--boundary_4448_5ba252c2-d71b-4014-8884-c1045727d2cd
X-Spam_score: 12.5
X-Spam_score_int: 125
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: