CRedit link phish from Amazon

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 18 Aug 2022 14:10:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oOlpU-000BEb-IX

for dave@doctor.nl2k.ab.ca;

Thu, 18 Aug 2022 14:09:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 18 Aug 2022 14:09:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from b224-14.smtp-out.eu-central-1.amazonses.com ([69.169.224.14]:45981)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from <01070182b16f64ac-c3b6d33d-8595-4be4-a04d-07e45e9ace04-000000@mailout-ses.dreimann.net>)

id 1oOgrY-000JbX-HO

for root@nk.ca;

Thu, 18 Aug 2022 08:51:16 -0600

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=hduf2vvbwixozlk4qcqaet765lv6bsqi; d=dreimann.net; t=1660834243;

h=To:Date:From:Subject:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:List-ID;

bh=We4AKjip1+N50Oy+IFJxmaV2ZerpePU+sojPEnOOYJM=;

b=O6IVj4abWIxtgO34uJpVU30Q1HfmO0WHqS8pbZiWbxGxl9HBNgnz80uhQdx922v6

OlHGgwwh0CVzedfa0+0BGzdyS5OmdGiJcx59fPUfBdkH1L/Hk8BCWzHU0Ir43k0p4Jg

2VY6OSeAOq/llN8D2rfi8Uyhk3z7zEYxGgpMgjPrPs3e687+CVPnCZi9lJN6GBunsVt

dgoUb+CXs1v+dL1Buv+9olorCUXR18VkDv506Y+JtRol4WdK6ptdOtuviRzJ+OjVZim

HsxI4Hw+9e5oB+3RpZvdY7X25slnXgkSvaqZ+YvtDxGK4i5zrOznpjFNy0g8kanCf2r

cts0TG4ChA==

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;

s=54ecsf3zk7z4mwxwwox7z7bg6e5gwjsz; d=amazonses.com; t=1660834243;

h=To:Date:From:Subject:Message-ID:MIME-Version:Content-Transfer-Encoding:Content-Type:List-ID:Feedback-ID;

bh=We4AKjip1+N50Oy+IFJxmaV2ZerpePU+sojPEnOOYJM=;

b=AhMyYyQjhTG8qsi9s/Kd72f0F8HQeIRw9lBcgO8mZ3iXCHKQb2qkha8zMWoHSXBx

L9Wg5sbzapga6QjP7pmcA7X/+aVDg2Yjt7rSd3S0T6+ULZS1ttNg4OMnpZ061laI+mV

q3dUVFkHWUPzyNvZyTJ41wCV+GG3YuSMhGSlLqQc=

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=dreimann.net;

s=mail2016021301; t=1660834241;

h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

to:to:cc:mime-version:mime-version:content-type:content-type:

content-transfer-encoding:content-transfer-encoding:list-id;

bh=We4AKjip1+N50Oy+IFJxmaV2ZerpePU+sojPEnOOYJM=;

b=ABIsT/RnpswI9lghnqUG57coJyJwEO4WUvUqd0HFvu4Ba6ExaeZItWVo2OMXQg6ps4GP3X

be2jrl41j3ELOQNXdtpgDfR2IIdls9D93y06EiaSefltE3b4qSs3/ZTTKn/v2t5AqQ/Kty

U9xvFVwyOajYMIjWnyDqvm26ej8qug9dLtRyp46Gbfl3sO89lVgpbp2S8uJH3Ah5Ux3cZh

MfA/8j3mnjLd2piWF0WAFyhPMYpHSwDzC4P4LiBrn3DS41oYLpcPOjYP3a8TOLD5uWPejc

Udx7Htge/0e+GeZyD/8fBasK0zjJcAJEIhKXGLrP6FSmE5x4lSKnEFyG9Z2cfuoWsteeiD

hNOGRKCqtbKdVoqVeeQqdmZAahFL1nWqCGkcTrMpTuc+m9LQ8E08vcsoD8UDw++kHQqAB5

CbhBo5lENqEfbCVqR5mNf30zLPGAIuAJcIQXQUI8TqICkeB2NeeCxLaGcsg5UBkcAX9SDE

F4fJMmdNyv44w3vUrF+rjU4TyEDI9dxaEnmFHUIZk7lDJe/qu0hgcjol2WwQPvk/xdnHWo

pMnZfkH3nsDTrIFh2fxgazQw/NQyJJC/uvIUqD18t34Wnn7tGL6aJ37V8FKN/vxCpOnUq5

JJcvXa9+swymO8SipcvpXJ6qGyV9umuIokB/+KuBnBq2sVv15v7lg=

To:

Date: Thu, 18 Aug 2022 14:50:43 +0000

From: "Credit Manager"

Subject: Copy of the contract.

Message-ID: <01070182b16f64ac-c3b6d33d-8595-4be4-a04d-07e45e9ace04-000000@eu-central-1.amazonses.com>

MIME-Version: 1.0

Content-Transfer-Encoding: base64

Content-Type: text/plain; charset=UTF-8

X-rpcampaign: 07730-(93662120

List-Issue: NO

List-ID: x_78759351:x_04909:personal:dreimann.net

Feedback-ID: 1.eu-central-1.ivh71NtaoJZZ1GljfwUMZ7/BYavLah20QgFqzcrMPjs=:AmazonSES

X-SES-Outgoing: 2022.08.18-69.169.224.14



QmVsb3cgdGhlIHNpZ25lZCBjcmVkaXQgZG9jdW1lbnRzLgpQbGVhc2UgY2hlY2sgeW91ciBkb2N1

bWVudCwgYWxsIGlzIHdlbGwKCmh0dHA6Ly9zaGFyZWRmaWxlLWlkMzM5NDI0OS40NzM4OTU4NzQ4

LWlkLmNsdWIvP2NhMTg9MTYzNmUyYjZlNjA0NDdmNmY2Mjc=