Fedex Phish from Rackspace.com
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Apr 2024 07:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rs0YL-000000005bD-3JfT
for dave@doctor.nl2k.ab.ca;
Wed, 03 Apr 2024 07:21:21 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Apr 2024 07:21:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail1.static.mailgun.info ([104.130.122.1]:24033)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rs0KM-000000004MJ-3lpA
for root@nk.ca;
Wed, 03 Apr 2024 07:06:59 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=k-ep.hu; q=dns/txt; s=k1; t=1712149489; x=1712156689;
h=Content-Transfer-Encoding: Content-Type: Message-Id: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=5PvSKKGiyPVo4JLv6XziKnmODFBRFeNUNGZ4q+WFfwU=;
b=plaJroY9lOkrW+qZxvQAh1vajYlA43NG7bvbnhNZzb/WzjOWzX0nX/Y/mntCpEtjtQZUf+1mJf+7F3vhx+uaL+UO2ArzxJYx0pg4LcsvR/EjbBPAPBlOnb3Ii4DcbRYT4/IhNVk81yQSiDhpeit3hnKljJHW4pTLpJTVMjYL9tU=
X-Mailgun-Sending-Ip: 104.130.122.1
X-Mailgun-Sid: WyJjMzRiNCIsInJvb3RAbmsuY2EiLCJlMGQ2NSJd
Received: from
660d53ed07570fdc3e633446; Wed, 03 Apr 2024 13:04:45 GMT
Sender: fed-ex=serviceing.com@k-ep.hu
Date: Wed, 03 Apr 2024 13:04:45 +0000
Mime-Version: 1.0
Subject: Your package is waiting for you!
From: Fedex Delivery
To: root@nk.ca
Message-Id: <20240403130445.ce203f3216babb82@k-ep.hu>
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Antivirus: AVG (VPS 240402-6, 4/2/2024), Inbound message
X-Antivirus-Status: Clean
=3D1.0">
=20
nt-size:48px">Fed
>Ex
1>
adding: 20px;">
10px;">
Your p =
7;ckage is wait=
ing for you!
Your p=
;ackage is wai=
116;ing for deli&=
#118;ery fees to &=
#98;e paid. Once=
32;your payment=
32;is processed&c=
omma; your packag=
01; will be del
=
5;vered to you=
2;in 5 business=
; days or less=
.
Click =
on the follow=
;ing link to c=
heck and pay =
16;he delivery =
102;ees:
plWYWj1_D7NDTQstmX_6dFz4pjskVkTRRIRDSFh9aqBIyKhB9kSBHtmBGRgIE_AvDhpCLQR-lBL=
rRENw_XRhjt-7Z2P9x2PoS-Dq8F1FLnK3tyYZ7_Pon99L9ofJ_3b1WlwtTPP3l_D8HM5Kf8BAAD=
__xpiL1M" style=3D"display: inline-block; padding: 10px 20px; background-co=
lor: #007bff; color: #ffffff; text-decoration: none; border-radius: 5px;">C=
lick here to start
If you have=
32;any question=
115; do not hesi=
116;ate to contac=
;t us.
Kind regards&=
comma; Fed
=3D"color:#e67e23">Ex
wEwF0OgyAMAODTyNtI_yjloYeBgnExmYvZ7u83fcHUkpZjRUJpYi0dvkcoFTWuNlsE46waOLCrW=
Vdt6e0EJCDAyCBSciwC3plQRx_DaBM4X-ubj3-6_b6u3ybwOXP0JwAA__-RUh50">