UPS phish from Latvia

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 24 Nov 2022 15:02:56 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oyKIG-000JZ2-DJ

for dave@doctor.nl2k.ab.ca;

Thu, 24 Nov 2022 15:02:04 -0700

Resent-From: The Doctor

Resent-Date: Thu, 24 Nov 2022 15:02:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mx.itap.lv ([185.47.11.3]:42464)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oyJx8-000HJM-95

for www@nl2k.ab.ca;

Thu, 24 Nov 2022 14:40:18 -0700

Received: from mx.itap.lv (localhost.localdomain [127.0.0.1])

by mx.itap.lv (Proxmox) with ESMTP id 14592F28F7

for ; Thu, 24 Nov 2022 23:28:29 +0200 (EET)

To: www@nl2k.ab.ca

Subject: Action Required: UPS Exception Notification 24/11/2022

Date: Thu, 24 Nov 2022 23:22:39 +0200

From: =?UTF-8?B?VVBTwq4=?=

Message-ID: <90047e9d3b828d95bf6e041c45e8a2f8@pilsriepas.lv>

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_90047e9d3b828d95bf6e041c45e8a2f8"



This is a multi-part message in MIME format.



--b1_90047e9d3b828d95bf6e041c45e8a2f8

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



SGVsbG8sDQpJbXBvcnQgRHV0eSBhbmQvb3IgVGF4IGFuZCBDdXN0b21zIENsZWFyYW5jZSBTZXJ2

aWNlIENoYXJnZXMgYXJlIHN0aWxsIG91dHN0YW5kaW5nIG9uIHlvdXIgVVBTIEV4cHJlc3Mgc2hp

cG1lbnQgd2l0aCBwYWNrYWdlIG51bWJlciAxWjZSMThWMTk2OTQ4OTkyNDE0Lg0KWW91ciB1cmdl

bnQgYXR0ZW50aW9uIGlzIHJlcXVpcmVkIHRvIGF2b2lkIGFueSBmdXJ0aGVyIGltcGFjdCBvbiBk

ZWxpdmVyeS4NClRvIHBheSwgdmlldyB0aGUgY2FsY3VsYXRpb24gYW5kIGRvd25sb2FkIHRoZSBy

ZWxldmFudCBkb2N1bWVudHM6DQogVFJBQ0sgUEFDS0FHRSANCjIwMjIgwqkgVVBTLiBBbGwgcmln

aHRzIHJlc2VydmVkLg==





--b1_90047e9d3b828d95bf6e041c45e8a2f8

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHA+SGVsbG8sPC9wPg0KPHA+SW1wb3J0IER1dHkgYW5kL29yIFRheCBhbmQgQ3VzdG9tcyBDbGVh

cmFuY2UgU2VydmljZSBDaGFyZ2VzIGFyZSBzdGlsbCBvdXRzdGFuZGluZyBvbiB5b3VyIFVQUyBF

eHByZXNzIHNoaXBtZW50IHdpdGggcGFja2FnZSBudW1iZXIgMVo2UjE4VjE5Njk0ODk5MjQxNC48

L3A+DQo8cD5Zb3VyIHVyZ2VudCBhdHRlbnRpb24gaXMgcmVxdWlyZWQgdG8gYXZvaWQgYW55IGZ1

cnRoZXIgaW1wYWN0IG9uIGRlbGl2ZXJ5LjwvcD4NCjxwPlRvIHBheSwgdmlldyB0aGUgY2FsY3Vs

YXRpb24gYW5kIGRvd25sb2FkIHRoZSByZWxldmFudCBkb2N1bWVudHM6PC9wPg0KPHA+PGEgaHJl

Zj0iaHR0cHM6Ly96cHIuaW8vakhtQ1NlYmZrYXZpIj48c3Ryb25nPiBUUkFDSyBQQUNLQUdFIDwv

c3Ryb25nPjwvYT48L3A+DQo8cCBzdHlsZT0idGV4dC1hbGlnbjogcmlnaHQ7Ij4yMDIyIMKpIFVQ

Uy4gQWxsIHJpZ2h0cyByZXNlcnZlZC48L3A+







--b1_90047e9d3b828d95bf6e041c45e8a2f8--





Spanish Phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 23 Nov 2022 14:31:00 -0700

Received: from [45.141.79.186] (port=41380 helo=gotqklynzb)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oxxJr-0008en-23

for dave@doctor.nl2k.ab.ca;

Wed, 23 Nov 2022 14:30:18 -0700

Received: by gotqklynzb (Postfix, from userid 0)

id EFE0897566; Wed, 23 Nov 2022 21:18:00 +0000 (UTC)

content-type: text/html

Subject: Estimado Cliente dave@doctor.nl2k.ab.ca

Suspender el Servicio Electrico : 166012 21:03:57

From: CFE Comision Federal de Electricidad - 48743

To: dave@doctor.nl2k.ab.ca

Message-Id: <20221123211800.EFE0897566@gotqklynzb>

Date: Wed, 23 Nov 2022 21:18:00 +0000 (UTC)





































































cuenta































































































































































































































































CLIENTE : dave@doctor.nl2k.ab.ca

 





























Como



parte del servicio de CFEMail, al que estás suscrito, te



enviamos el acceso donde encontrarás el estado de cuenta en



formato Factura PDF y XML.(Retraso 3 dias)












































































































































































































































































































































Número de Servicio Periodo Facturado Corte a Partir 
NO. MEDIDOR 0943350101 20 OUT 22 -  20 NOV 22 30 NOV 22
TOTAL A PAGAR: Factura (Retraso VER) LIMITE DE PAGO 24 NOV 22









































































Te invitamos a realizar tu pago en nuestros medios de pago