fedex phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 21 Jan 2023 15:33:55 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1pJMQ5-0002F3-0t
for dave@doctor.nl2k.ab.ca;
Sat, 21 Jan 2023 15:33:05 -0700
Resent-From: The Doctor
Resent-Date: Sat, 21 Jan 2023 15:33:05 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps.hostcreator.com.br ([162.241.50.55]:59288)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from)
id 1pJJA9-0008i8-07
for www@nl2k.ab.ca;
Sat, 21 Jan 2023 12:04:28 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=boxcreator.com.br; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=OdcKiA75gLvi1Yogm9DcRrjKpDo6QTBe/BxpHEzSEc8=; b=ML7xhD0RVkKRhRg6NoglJY7NzJ
C1UxnqN95yktJPHi34BO4md7GseuKMdLljiiX3NG+Q6yl9yFI1mqgsNQFshsG9CBEHdhtIJKYkfTx
T6ysztjNz2+AEZ7MYV0aG45yFPwDhvEgewp6QKP4g04VCjBQFp5vO4+BXRJ5aeh/q2fxLwPpnm9iI
lGSIDfeUoTmG5M1WZn6+EQ7OLYnYl1jy6fpc7iZ6JorzdlxPCDahkv551W02ZAkM3BL6ui/T4TQED
J4kiJTKICDiJU+cqVnH7vIjnxD4zfF9pybUwBX7Utaw5AmlOQLI8QE0Y+0FfqMFLrtKPLemFQ4S0D
N0wRZWhA==;
Received: from boxcreator by box.hostcreator.com.br with local (Exim 4.95)
(envelope-from)
id 1pJJ7h-00038M-9T
for www@nl2k.ab.ca;
Sat, 21 Jan 2023 19:01:53 +0000
To: www@nl2k.ab.ca
Subject: Action Required: Outstanding Import Duty and Customs Clearance Service Charges on Waybill Number 772980724289
X-PHP-Script: boxcreator.com.br/wp-content/GRrgMcnKmNo.php for 67.68.160.117
X-PHP-Originating-Script: 1016:GRrgMcnKmNo.php
Date: Sat, 21 Jan 2023 19:01:53 +0000
From: =?UTF-8?Q?FedEx=C2=AE_Customer_Service?=
Message-ID: <7757934a1f28927115da69767bb021de@boxcreator.com.br>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_7757934a1f28927115da69767bb021de"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - box.hostcreator.com.br
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [1016 990] / [47 12]
X-AntiAbuse: Sender Address Domain - boxcreator.com.br
X-Get-Message-Sender-Via: box.hostcreator.com.br: authenticated_id: boxcreator/from_h
X-Authenticated-Sender: box.hostcreator.com.br: www@boxcreator.com.br
X-Source:
X-Source-Args: php-fpm: pool boxcreator_com_br
X-Source-Dir: boxcreator.com.br:/public_html/wp-content
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Import Duty and/or Tax and Customs Clearance Service
Charges are still outstanding on your shipment with waybill number 772980724289.
Your urgent attention is required to avoid any further impa [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: abre.ai]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.4 PHP_SCRIPT Sent by PHP script
Subject: {SPAM?} Action Required: Outstanding Import Duty and Customs Clearance Service Charges on Waybill Number 772980724289
This is a multi-part message in MIME format.
--b1_7757934a1f28927115da69767bb021de
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Hello, Import Duty and/or Tax and Customs Clearance Service Charges are still outstanding on your shipment with waybill number 772980724289. Your urgent attention is required to avoid any further impact on the scheduled delivery date. To pay, view the calculation and download the relevant documents: TRACK PACKAGE  Please note that these charges must be settled before the shipment can be released by Customs. We kindly ask that you take the necessary steps to clear the charges as soon as possible.   2023 © FedEx®. All rights reserved.
--b1_7757934a1f28927115da69767bb021de
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
" cellspacing=3D"0" role=3D"presentation" style=3D"font-size: 0px;">
style=3D"box-sizing: border-box;">
align=3D"center" style=3D"box-sizing: border-box; border-collapse: collaps=
e; border-radius: 22px; color: rgb(255, 102, 0); cursor: auto; text-align: =
center; letter-spacing: 2px; background: rgb(77, 20, 140);" valign=3D"middl=
e">
resizable=3Dno,status=3Dno,location=3Dno,toolbar=3Dno,menubar=3Dno,fullscre=
en=3Dno,scrollbars=3Dno,dependent=3Dno'); return false;" role=3D"button" st=
yle=3D"box-sizing: border-box; color: rgb(255, 102, 0); text-decoration-lin=
e: none; display: block; font-family: Arial, Helvetica, sans-serif; font-si=
ze: 16px; font-weight: 700; line-height: 16px; text-transform: uppercase; m=
argin: 0px; padding: 14px 69px; border: 3px solid rgb(255, 102, 0); border-=
radius: 22px;">=C2=A0TRACK PACKAGE=C2=A0
sizing: border-box; margin: 0px; margin-block: 0px;">=C2=A0
box-sizing: border-box; margin: 0px; margin-block: 0px;">=C2=A0
=3D"box-sizing: border-box; margin: 0px; margin-block: 0px;">=C2=A0
tyle=3D"box-sizing: border-box; margin: 0px; margin-block: 0px; text-align:=
right;">
erif; font-size: 18px; font-weight: 700;">2023 =C2=A9 FedEx=C2=AE. All righ=
ts reserved.
--b1_7757934a1f28927115da69767bb021de--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 21 Jan 2023 15:33:55 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pJMQ5-0002F3-0t
for dave@doctor.nl2k.ab.ca;
Sat, 21 Jan 2023 15:33:05 -0700
Resent-From: The Doctor
Resent-Date: Sat, 21 Jan 2023 15:33:05 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps.hostcreator.com.br ([162.241.50.55]:59288)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from
id 1pJJA9-0008i8-07
for www@nl2k.ab.ca;
Sat, 21 Jan 2023 12:04:28 -0700
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=boxcreator.com.br; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:From:Date:Subject:To:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=OdcKiA75gLvi1Yogm9DcRrjKpDo6QTBe/BxpHEzSEc8=; b=ML7xhD0RVkKRhRg6NoglJY7NzJ
C1UxnqN95yktJPHi34BO4md7GseuKMdLljiiX3NG+Q6yl9yFI1mqgsNQFshsG9CBEHdhtIJKYkfTx
T6ysztjNz2+AEZ7MYV0aG45yFPwDhvEgewp6QKP4g04VCjBQFp5vO4+BXRJ5aeh/q2fxLwPpnm9iI
lGSIDfeUoTmG5M1WZn6+EQ7OLYnYl1jy6fpc7iZ6JorzdlxPCDahkv551W02ZAkM3BL6ui/T4TQED
J4kiJTKICDiJU+cqVnH7vIjnxD4zfF9pybUwBX7Utaw5AmlOQLI8QE0Y+0FfqMFLrtKPLemFQ4S0D
N0wRZWhA==;
Received: from boxcreator by box.hostcreator.com.br with local (Exim 4.95)
(envelope-from
id 1pJJ7h-00038M-9T
for www@nl2k.ab.ca;
Sat, 21 Jan 2023 19:01:53 +0000
To: www@nl2k.ab.ca
Subject: Action Required: Outstanding Import Duty and Customs Clearance Service Charges on Waybill Number 772980724289
X-PHP-Script: boxcreator.com.br/wp-content/GRrgMcnKmNo.php for 67.68.160.117
X-PHP-Originating-Script: 1016:GRrgMcnKmNo.php
Date: Sat, 21 Jan 2023 19:01:53 +0000
From: =?UTF-8?Q?FedEx=C2=AE_Customer_Service?=
Message-ID: <7757934a1f28927115da69767bb021de@boxcreator.com.br>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_7757934a1f28927115da69767bb021de"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - box.hostcreator.com.br
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [1016 990] / [47 12]
X-AntiAbuse: Sender Address Domain - boxcreator.com.br
X-Get-Message-Sender-Via: box.hostcreator.com.br: authenticated_id: boxcreator/from_h
X-Authenticated-Sender: box.hostcreator.com.br: www@boxcreator.com.br
X-Source:
X-Source-Args: php-fpm: pool boxcreator_com_br
X-Source-Dir: boxcreator.com.br:/public_html/wp-content
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hello, Import Duty and/or Tax and Customs Clearance Service
Charges are still outstanding on your shipment with waybill number 772980724289.
Your urgent attention is required to avoid any further impa [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_SPAM Contains a spam URL listed in the DBL blocklist
[URI: abre.ai]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
2.4 PHP_SCRIPT Sent by PHP script
Subject: {SPAM?} Action Required: Outstanding Import Duty and Customs Clearance Service Charges on Waybill Number 772980724289
This is a multi-part message in MIME format.
--b1_7757934a1f28927115da69767bb021de
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Hello, Import Duty and/or Tax and Customs Clearance Service Charges are still outstanding on your shipment with waybill number 772980724289. Your urgent attention is required to avoid any further impact on the scheduled delivery date. To pay, view the calculation and download the relevant documents: TRACK PACKAGE  Please note that these charges must be settled before the shipment can be released by Customs. We kindly ask that you take the necessary steps to clear the charges as soon as possible.   2023 © FedEx®. All rights reserved.
--b1_7757934a1f28927115da69767bb021de
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
ith-fedex-fedex-logo.png" style=3D"width: 96px;" />
nt-family: Arial, Helvetica, sans-serif; font-size: 19px;">Hello,=C2=A0
an>
ze: 19px;">Import Duty and/or Tax and Customs Clearance Service Charges are=
still outstanding on your shipment with waybill=C2=A0number=C2=A0
tyle=3D"box-sizing: border-box;">772980724289.=C2=A0
=
>Your=C2=A0urgent=C2=A0attention i=
s required to avoid any further impact on the scheduled=C2=A0delivery date.=
=C2=A0
f; font-size: 19px;">To pay, view the calculation and download the relevant=
documents:
" cellspacing=3D"0" role=3D"presentation" style=3D"font-size: 0px;">
style=3D"box-sizing: border-box;">
align=3D"center" style=3D"box-sizing: border-box; border-collapse: collaps=
e; border-radius: 22px; color: rgb(255, 102, 0); cursor: auto; text-align: =
center; letter-spacing: 2px; background: rgb(77, 20, 140);" valign=3D"middl=
e">
resizable=3Dno,status=3Dno,location=3Dno,toolbar=3Dno,menubar=3Dno,fullscre=
en=3Dno,scrollbars=3Dno,dependent=3Dno'); return false;" role=3D"button" st=
yle=3D"box-sizing: border-box; color: rgb(255, 102, 0); text-decoration-lin=
e: none; display: block; font-family: Arial, Helvetica, sans-serif; font-si=
ze: 16px; font-weight: 700; line-height: 16px; text-transform: uppercase; m=
argin: 0px; padding: 14px 69px; border: 3px solid rgb(255, 102, 0); border-=
radius: 22px;">=C2=A0TRACK PACKAGE=C2=A0
=
=C2=A0
-size: 19px;">Please note that these charges must be settled before the shi=
pment can be released by Customs. We kindly ask that you take the necessary=
steps to clear the charges as soon as possible.
sizing: border-box; margin: 0px; margin-block: 0px;">=C2=A0
box-sizing: border-box; margin: 0px; margin-block: 0px;">=C2=A0
=3D"box-sizing: border-box; margin: 0px; margin-block: 0px;">=C2=A0
tyle=3D"box-sizing: border-box; margin: 0px; margin-block: 0px; text-align:=
right;">
erif; font-size: 18px; font-weight: 700;">2023 =C2=A9 FedEx=C2=AE. All righ=
ts reserved.
--b1_7757934a1f28927115da69767bb021de--