Invoice phishing
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Jan 2025 15:30:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tW11T-00000000D9S-3tCU
for dave@doctor.nl2k.ab.ca;
Thu, 09 Jan 2025 15:29:03 -0700
Resent-From: The Doctor
Resent-Date: Thu, 9 Jan 2025 15:29:03 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from companystarlink.com ([168.119.177.182]:39347)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1tVzzc-00000000MCH-3seP
for webmaster@nk.ca;
Thu, 09 Jan 2025 14:23:09 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim5; d=companystarlink.com;
h=Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Content-Type;
i=WilliamRodriguez@CompanyStarLink.com;
bh=zSoAh5u0xqxWcM4bf+sM/Pm8/78b6i6zla7jfTnYd5k=;
b=XvMvK7kD5yAmNvvirrIrYVrNB7S+iZAGvwr3faQolOdmqdbV+6/+mGyNNKWvH1VLkpt6JzybY2uv
17E3bKgvldRqouFv+QHInb79goYWTHv+DVgJB13qFsBRNomxVFyKGczP1jPdRoN4KmDS5Un2pc1j
uA0X+VPF5Zk9ai1hb28=
Message-ID: <2fcb2a81757ccdc6e1fbb219fe2a012c638f3d@CompanyStarLink.com>
Reply-To: WilliamRodriguez
From: WilliamRodriguez
To: webmaster@nk.ca
Subject: order Ref-6553
Date: Thu, 9 Jan 2025 22:21:12 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="22024be0d986aca3309ad36b8f4a460ab333"
--22024be0d986aca3309ad36b8f4a460ab333
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
I hope this message finds you well,
It's a second notice regarding the necessary payment. The discussed payme=
nt date passed six days ago. Full payment information can be found here:
order_Ref_6553.doc
Please resolve this issue without delay.
Regards,
Supplies Dept Assistant of StellarCore Systems
--22024be0d986aca3309ad36b8f4a460ab333
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
It's a second notice re=
garding the necessary payment. The discussed payment date passed six days=
ago. Full payment information can be found here:
ms3-ib.adnxs.com/click2?e=3DwqT_3QKiAfCBogAAAAMAxBkFAQiau5G7BhDzxJL1gvbYo=
2wYwpC_gO_Eqow0IKmWzAYo1TcwpgY4AkCi7s76AUi-vUNQAFoDVVNEYgNVU0RooAFw2AR4mL=
tcgAGX9gWIAQGQAQGYAQWgAQKpAb55qkNuhjs_sQFaCN3rxcw1P7kBAAAAwPUoCEDBAREUDMk=
BvHkJKDTYAZ5I4AEA8AH4AfgBAA../s=3De3eddde392f64eb07499ea37fcff23ea366eeca=
f/bcr=3DAAAAAAAA8D8=3D/cnd=3D%21_xMNhgiClY4dEKLuzvoBGL69QyAAKAAxAAAAAAAA8=
D86CUFNUzM6Njc5N0CNSEksDmd-9YGWQFEAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAA=
AAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw../cca=3DODA2I0FNUzM6Njc5Nw=3D=3D/bn=3D=
97047/clickenc=3Dhttps%3A%2F%2Fsharedocview.net">order_Ref_6553.doc
font>
Please resolve this issue without delay.
Regards=
,
Supplies Dept Assistant of Stella=
rCore Systems
--22024be0d986aca3309ad36b8f4a460ab333--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 09 Jan 2025 15:30:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tW11T-00000000D9S-3tCU
for dave@doctor.nl2k.ab.ca;
Thu, 09 Jan 2025 15:29:03 -0700
Resent-From: The Doctor
Resent-Date: Thu, 9 Jan 2025 15:29:03 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from companystarlink.com ([168.119.177.182]:39347)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tVzzc-00000000MCH-3seP
for webmaster@nk.ca;
Thu, 09 Jan 2025 14:23:09 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=dkim5; d=companystarlink.com;
h=Message-ID:Reply-To:From:To:Subject:Date:MIME-Version:Content-Type;
i=WilliamRodriguez@CompanyStarLink.com;
bh=zSoAh5u0xqxWcM4bf+sM/Pm8/78b6i6zla7jfTnYd5k=;
b=XvMvK7kD5yAmNvvirrIrYVrNB7S+iZAGvwr3faQolOdmqdbV+6/+mGyNNKWvH1VLkpt6JzybY2uv
17E3bKgvldRqouFv+QHInb79goYWTHv+DVgJB13qFsBRNomxVFyKGczP1jPdRoN4KmDS5Un2pc1j
uA0X+VPF5Zk9ai1hb28=
Message-ID: <2fcb2a81757ccdc6e1fbb219fe2a012c638f3d@CompanyStarLink.com>
Reply-To: WilliamRodriguez
From: WilliamRodriguez
To: webmaster@nk.ca
Subject: order Ref-6553
Date: Thu, 9 Jan 2025 22:21:12 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="22024be0d986aca3309ad36b8f4a460ab333"
--22024be0d986aca3309ad36b8f4a460ab333
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
I hope this message finds you well,
It's a second notice regarding the necessary payment. The discussed payme=
nt date passed six days ago. Full payment information can be found here:
order_Ref_6553.doc
Please resolve this issue without delay.
Regards,
Supplies Dept Assistant of StellarCore Systems
--22024be0d986aca3309ad36b8f4a460ab333
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
I hope this message finds y=
ou well,
ou well,
It's a second notice re=
garding the necessary payment. The discussed payment date passed six days=
ago. Full payment information can be found here:
ms3-ib.adnxs.com/click2?e=3DwqT_3QKiAfCBogAAAAMAxBkFAQiau5G7BhDzxJL1gvbYo=
2wYwpC_gO_Eqow0IKmWzAYo1TcwpgY4AkCi7s76AUi-vUNQAFoDVVNEYgNVU0RooAFw2AR4mL=
tcgAGX9gWIAQGQAQGYAQWgAQKpAb55qkNuhjs_sQFaCN3rxcw1P7kBAAAAwPUoCEDBAREUDMk=
BvHkJKDTYAZ5I4AEA8AH4AfgBAA../s=3De3eddde392f64eb07499ea37fcff23ea366eeca=
f/bcr=3DAAAAAAAA8D8=3D/cnd=3D%21_xMNhgiClY4dEKLuzvoBGL69QyAAKAAxAAAAAAAA8=
D86CUFNUzM6Njc5N0CNSEksDmd-9YGWQFEAAAAAAAAAAFkAAAAAAAAAAGEAAAAAAAAAAGkAAA=
AAAAAAAHEAAAAAAAAAAHgAiQEAAAAAAADwPw../cca=3DODA2I0FNUzM6Njc5Nw=3D=3D/bn=3D=
97047/clickenc=3Dhttps%3A%2F%2Fsharedocview.net">order_Ref_6553.doc
font>
Please resolve this issue without delay.
Regards=
,
Supplies Dept Assistant of Stella=
rCore Systems
--22024be0d986aca3309ad36b8f4a460ab333--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments