Amazon phish from Mexico
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 10 Mar 2023 13:58:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pajnk-000MGP-2Z
for dave@doctor.nl2k.ab.ca;
Fri, 10 Mar 2023 13:57:20 -0700
Resent-From: The Doctor
Resent-Date: Fri, 10 Mar 2023 13:57:20 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mailgate2.uadec.mx ([148.212.19.22]:62056)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96)
(envelope-from
id 1pajXU-000JZf-2c
for root@nl2k.ab.ca;
Fri, 10 Mar 2023 13:40:41 -0700
Received: from server.cgi.uadec.mx (server.cgi.uadec.mx [148.212.19.100])
by mailgate2.uadec.mx (8.14.5/8.14.5) with ESMTP id 32AKbpJ2001576
for
Received: from localhost (localhost [127.0.0.1])
by server.cgi.uadec.mx (Postfix) with ESMTP id 3BF1696003
for
X-Virus-Scanned: amavisd-new at server.cgi.uadec.mx
Received: from server.cgi.uadec.mx ([127.0.0.1])
by localhost (server.cgi.uadec.mx [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id w7Vg2oB89Msc for
Fri, 10 Mar 2023 14:38:24 -0600 (CST)
Received: from 20.211.85.228 (vps-36a1cdd0.vps.ovh.ca [15.235.198.5])
by server.cgi.uadec.mx (Postfix) with ESMTPSA id 1609796001
for
From: "Amazon"
Subject:
=?utf-8?B?TmV3IE1lbWJlcnNoaXAgU3RhdGVtZW50IDogUmVuZXdhbCBQ4oCM4oCMcmnigIzigIxt4oCM4oCM4oCM4oCMZeKAjOKAjOKAjOKAjOKAjOKAjOKAjCBNZW1iZXJzaGlwIHN0YXRlbWVudCB3YXMgZW5kZWQu?=
To: "root"
Content-Type: multipart/alternative; boundary="ncX3ai8FiiCif=_VU4jwQ4NzCoe7LFBPrf"
MIME-Version: 1.0
Date: Fri, 10 Mar 2023 21:38:21 +0100
Message-Id: <20230310203824.1609796001@server.cgi.uadec.mx>
X-Greylist: Sender IP whitelisted, not delayed by milter-greylist-4.2.7 (mailgate2.uadec.mx [148.212.19.22]); Fri, 10 Mar 2023 14:37:54 -0600 (CST)
This is a multi-part message in MIME format
--ncX3ai8FiiCif=_VU4jwQ4NzCoe7LFBPrf
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BFHello root@nl2k.ab.ca,
Your A=CD=8F=CD=8Fm=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=8F=
n=CD=8F=CD=8F P=CD=8F=CD=8Fr=CD=8F=CD=8Fi=CD=8F=CD=8Fm=CD=8Fe=CD=8F is=
set to renew on 10 March 2023 However, we've noticed that the c=CD=8F=
a=CD=8Fr=CD=8Fd=CD=8F associated with your P=CD=8F=CD=8Fr=CD=8F=CD=8Fi=
=CD=8F=CD=8Fm=CD=8Fe=CD=8F membership is no longer valid. To update th=
e default c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8F or choose a new one for your me=
mbership, please use this link or click on the button below and follow=
the on-screen instructions.
To prevent interruption of your benefits, we will try charging other a=
ctive c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8Fs associated with your A=CD=8F=CD=8F=
m=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=8Fn=CD=8F=CD=8F acco=
unt if we can't charge your default c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8F. If w=
e can't process the charge for your membership fee, your A=CD=8F=CD=8F=
m=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=8Fn=CD=8F=CD=8F P=CD=
=8F=CD=8Fr=CD=8F=CD=8Fi=CD=8F=CD=8Fm=CD=8Fe=CD=8F benefits will be sus=
pended.
Sincerely,
T=CD=8Fh=CD=8Fe=CD=8F A=CD=8F=CD=8Fm=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=
=8Fo=CD=8F=CD=8Fn=CD=8F=CD=8F P=CD=8F=CD=8Fr=CD=8F=CD=8Fi=CD=8F=CD=8Fm=
=CD=8Fe=CD=8F T=CD=8Fe=CD=8Fa=CD=8Fm=CD=8F
Update Payment I=E2=80=8Dn=E2=80=8Df=E2=80=8Do=E2=80=8Dr=E2=80=8Dm=E2=
=80=8Da=E2=80=8Dt=E2=80=8Di=E2=80=8Do=E2=80=8Dn =20
Please note: this email was sent from a notification-only address that=
can't accept incoming emails. Please do not reply to this message. If=
you have any questions and wish to contact us, click here.
--ncX3ai8FiiCif=_VU4jwQ4NzCoe7LFBPrf
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=EF=BB=BF
>
Hello root@nl2k.ab.ca,
Your A=CD=8F=CD=8Fm=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=
=8Fn=CD=8F=CD=8F P=CD=8F=CD=8Fr=CD=8F=CD=8Fi=CD=8F=CD=8Fm=CD=8Fe=CD=8F=
is set to renew on 10 March 2023 However, we've noticed tha=
t the c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8F associated with your P=CD=8F=CD=8Fr=
=CD=8F=CD=8Fi=CD=8F=CD=8Fm=CD=8Fe=CD=8F membership is no longer valid.=
To update the default c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8F or choose a new on=
e for your membership, please use
xid=3DZa2xp89D" rel=3D"noopener noreferrer" target=3D_blank data-auth=3D=
"NotApplicable">this link or click on the button below and follow =
the on-screen instructions.
To prevent interruption of your benefits, we will try charging othe=
r active c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8Fs associated with your A=CD=8F=CD=
=8Fm=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=8Fn=CD=8F=CD=8F a=
ccount if we can't charge your default c=CD=8Fa=CD=8Fr=CD=8Fd=CD=8F. I=
f we can't process the charge for your membership fee, your A=CD=8F=CD=
=8Fm=CD=8F=CD=8Fa=CD=8F=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=8Fn=CD=8F=CD=8F P=
=CD=8F=CD=8Fr=CD=8F=CD=8Fi=CD=8F=CD=8Fm=CD=8Fe=CD=8F benefits will be =
suspended.
Sincerely,
T=CD=8Fh=CD=8Fe=CD=8F A=CD=8F=CD=8Fm=CD=8F=CD=8Fa=CD=8F=
=CD=8Fz=CD=8F=CD=8Fo=CD=8F=CD=8Fn=CD=8F=CD=8F P=CD=8F=CD=8Fr=CD=8F=CD=8F=
i=CD=8F=CD=8Fm=CD=8Fe=CD=8F T=CD=8Fe=CD=8Fa=CD=8Fm=CD=8F
"TEXT-DECORATION: none; BORDER-TOP: #fc7318 1px solid; BORDER-RIGHT: #=
fc7318 1px solid; WIDTH: auto; BORDER-BOTTOM: #fc7318 1px solid; COLOR=
: #000000; PADDING-BOTTOM: 10px; TEXT-ALIGN: center; PADDING-TOP: 10px=
; BORDER-LEFT: #fc7318 1px solid; DISPLAY: inline-block; BACKGROUND-CO=
LOR: #ffc435; border-radius: 5px" href=3D"https://qrs.ly/cyem5qo?trxid=
=3DZa2xp89D" rel=3D"noopener noreferrer" target=3D_blank data-auth=3D"=
NotApplicable" data-linkindex=3D"2"> Update Payment I=E2=80=
=8Dn=E2=80=8Df=E2=80=8Do=E2=80=8Dr=E2=80=8Dm=E2=80=8Da=E2=80=8Dt=E2=80=
=8Di=E2=80=8Do=E2=80=8Dn
Please note: this email was sent from a notification-only address t=
hat can't accept incoming emails. Please do not reply to this message.=
If you have any questions and wish to contact us,
qrs.ly/cyem5qo?trxid=3DZa2xp89D" rel=3D"noopener noreferrer" target=3D=
_blank data-auth=3D"NotApplicable">click here.
--ncX3ai8FiiCif=_VU4jwQ4NzCoe7LFBPrf--