Mcafee phish from sendgrid
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 28 Apr 2023 10:19:40 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1psQnD-0007tc-DR
for dave@doctor.nl2k.ab.ca;
Fri, 28 Apr 2023 10:17:55 -0600
Resent-From: The Doctor
Resent-Date: Fri, 28 Apr 2023 10:17:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from xtrwhxbr.outbound-mail.sendgrid.net ([167.89.10.181]:43298)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1psQVd-000O5s-OT
for doctor@nk.ca;
Fri, 28 Apr 2023 10:00:06 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=whatscamaleon.com;
h=from:subject:list-id:to:content-type:content-transfer-encoding:cc:
content-type:from:subject:to;
s=s1; bh=rhkuToRPInE/qBSNB+jDFWsBBjFU2as7PEQ49GQWgy4=;
b=KbJyswTt5KyhkfULCr7lDt7SdwAub1Wp1V/l2CP9W9fAxadfvFTwcWiIsqSlm66KN4WG
Ye8Rp9KDQ7NGzpeNgc7MKuisldmQUGyjNrsPKvpJ2eq0dvW/eBMXfRhczOeQCGA5uJEGzj
SQyhSheQSDPzWRjmSsNERA+bOcdRa6ZLXD+NH7ta6nkswPIrt+2OhuiVq6Mhhod2Npef65
3vmOJgMhXDKz5LhIkqq7IE8fDBKlTM0xWPnGJslrm1EnXULzdvFOZdUTyYyu+t9j+j+Ek9
ylj73CU6nAk72fi1CepvJquEu2HYUpoDp9W3hjSqKE5esIfrdCiiATyKKi2sFkig==
Received: by filterdrecv-849fc8479d-z5m2l with SMTP id filterdrecv-849fc8479d-z5m2l-1-644BECF3-C2
2023-04-28 15:57:40.002690233 +0000 UTC m=+5675009.439933933
Received: from 8227f904-2ae7-4172-8723-8c3af7086583.pub.instances.scw.cloud (unknown)
by geopod-ismtpd-0 (SG) with ESMTP id VlCg49csQCyiuvAE1n8Yrg
for; Fri, 28 Apr 2023 15:57:39.864 +0000 (UTC)
Message-ID: <0819608472_4138805123_8141174944@rMoLVrC2p9.johormous.com>
From: "Mcafee-Anti-Virus."
Subject: Reminder Your McFee Protection Expred Today d8ez
Date: Fri, 28 Apr 2023 15:57:40 +0000 (UTC)
List-Id: doctor.virginmedia.com (http://doctor.virginmedia.com/)
X-Mailer: 7pXcWIb23JuZvYV7WvFGe1zbeUhb1YHZdv2033TW
X-Unsubscribe:
X-SG-EID:
=?us-ascii?Q?vasJryaBgzKftuMacv0hJ0pC1fkzoA2RJE4RNpRlUjUW7sGUVQ1Py05IiFrGW2?=
=?us-ascii?Q?PJp+4I5CNNvghv6ablypTRSiEjlBzeLldXVlxjV?=
=?us-ascii?Q?c2d4IfvEuzCRSFTsz6lvnXRtPn=2FzjC5m=2FYoBhGB?=
=?us-ascii?Q?rNzeQgj0cQTYQP61cIiB=2FBGJUGvcOJoyKavfhT9?=
=?us-ascii?Q?PI74xOS32HMuySAMxVSkXik4et+CJayCZa1fsGH?=
=?us-ascii?Q?DRFu8N9RC3+x5TncuRO9cCgSvKi8bwGYVf48LV?=
To: doctor@nk.ca
X-Entity-ID: jUmwKISBrVEvupYj2WBvVQ==
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your Protection From Viruses Has Ended {91EBD84A-3C00-41E8-AFC8-03759CD6678B}
{908CC59F-6D9A-45BC-8D24-B17B9837E5C7} {B7D3AFAF-24F8-4AF5-B8F0-69FF75EF5934}
{44D53895-FDFF-430F-9E77-E767E79D9026} {FDD56A38-6F2A-4494-A7EE-DD2CAC339568}
{C294 [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[167.89.10.181 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Reminder Your McFee Protection Expred Today d8ez
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 28 Apr 2023 10:19:40 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1psQnD-0007tc-DR
for dave@doctor.nl2k.ab.ca;
Fri, 28 Apr 2023 10:17:55 -0600
Resent-From: The Doctor
Resent-Date: Fri, 28 Apr 2023 10:17:55 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from xtrwhxbr.outbound-mail.sendgrid.net ([167.89.10.181]:43298)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1psQVd-000O5s-OT
for doctor@nk.ca;
Fri, 28 Apr 2023 10:00:06 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=whatscamaleon.com;
h=from:subject:list-id:to:content-type:content-transfer-encoding:cc:
content-type:from:subject:to;
s=s1; bh=rhkuToRPInE/qBSNB+jDFWsBBjFU2as7PEQ49GQWgy4=;
b=KbJyswTt5KyhkfULCr7lDt7SdwAub1Wp1V/l2CP9W9fAxadfvFTwcWiIsqSlm66KN4WG
Ye8Rp9KDQ7NGzpeNgc7MKuisldmQUGyjNrsPKvpJ2eq0dvW/eBMXfRhczOeQCGA5uJEGzj
SQyhSheQSDPzWRjmSsNERA+bOcdRa6ZLXD+NH7ta6nkswPIrt+2OhuiVq6Mhhod2Npef65
3vmOJgMhXDKz5LhIkqq7IE8fDBKlTM0xWPnGJslrm1EnXULzdvFOZdUTyYyu+t9j+j+Ek9
ylj73CU6nAk72fi1CepvJquEu2HYUpoDp9W3hjSqKE5esIfrdCiiATyKKi2sFkig==
Received: by filterdrecv-849fc8479d-z5m2l with SMTP id filterdrecv-849fc8479d-z5m2l-1-644BECF3-C2
2023-04-28 15:57:40.002690233 +0000 UTC m=+5675009.439933933
Received: from 8227f904-2ae7-4172-8723-8c3af7086583.pub.instances.scw.cloud (unknown)
by geopod-ismtpd-0 (SG) with ESMTP id VlCg49csQCyiuvAE1n8Yrg
for
Message-ID: <0819608472_4138805123_8141174944@rMoLVrC2p9.johormous.com>
From: "Mcafee-Anti-Virus."
Subject: Reminder Your McFee Protection Expred Today d8ez
Date: Fri, 28 Apr 2023 15:57:40 +0000 (UTC)
List-Id: doctor.virginmedia.com (http://doctor.virginmedia.com/)
X-Mailer: 7pXcWIb23JuZvYV7WvFGe1zbeUhb1YHZdv2033TW
X-Unsubscribe:
X-SG-EID:
=?us-ascii?Q?vasJryaBgzKftuMacv0hJ0pC1fkzoA2RJE4RNpRlUjUW7sGUVQ1Py05IiFrGW2?=
=?us-ascii?Q?PJp+4I5CNNvghv6ablypTRSiEjlBzeLldXVlxjV?=
=?us-ascii?Q?c2d4IfvEuzCRSFTsz6lvnXRtPn=2FzjC5m=2FYoBhGB?=
=?us-ascii?Q?rNzeQgj0cQTYQP61cIiB=2FBGJUGvcOJoyKavfhT9?=
=?us-ascii?Q?PI74xOS32HMuySAMxVSkXik4et+CJayCZa1fsGH?=
=?us-ascii?Q?DRFu8N9RC3+x5TncuRO9cCgSvKi8bwGYVf48LV?=
To: doctor@nk.ca
X-Entity-ID: jUmwKISBrVEvupYj2WBvVQ==
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Your Protection From Viruses Has Ended {91EBD84A-3C00-41E8-AFC8-03759CD6678B}
{908CC59F-6D9A-45BC-8D24-B17B9837E5C7} {B7D3AFAF-24F8-4AF5-B8F0-69FF75EF5934}
{44D53895-FDFF-430F-9E77-E767E79D9026} {FDD56A38-6F2A-4494-A7EE-DD2CAC339568}
{C294 [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[167.89.10.181 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe
Subject: {SPAM?} Reminder Your McFee Protection Expred Today d8ez
Western Union phish from NaviSite Maryland USA
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 27 Apr 2023 23:09:40 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1psGKH-0005tu-Kj
for dave@doctor.nl2k.ab.ca;
Thu, 27 Apr 2023 23:07:21 -0600
Resent-From: The Doctor
Resent-Date: Thu, 27 Apr 2023 23:07:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from minoml002.navisite.net ([216.251.225.208]:58152)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1psEHf-000Pcx-Il
for root@nk.ca;
Thu, 27 Apr 2023 20:56:35 -0600
Received: from User (unknown [216.251.225.236])
by minoml002.navisite.net (Postfix) with SMTP id F32C9C2E4014;
Thu, 27 Apr 2023 19:54:40 -0400 (EDT)
Reply-To:
From: "Miss. Brenda Smith"
Subject: ?OFFICE OF THE MONEY GRAM MONEY TRANSFER.
Date: Fri, 28 Apr 2023 02:54:46 +0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 22.5
X-Spam_score_int: 225
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ?OFFICE OF THE MONEY GRAM MONEY TRANSFER. COTONOU BENIN REPUBLIC/ADDRESS
358 AGBOKOU,ANKPA ROAD OPPOSITE TUNDE MOTORS COTONOU. WE WISH TO ACKNOWLEDGE
THE RECEIPT OF YOUR EMAIL IN THIS MONEY GRAM OFFICE AND THE CONTENT IS WELL
NOTED.
Content analysis details: (22.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[216.251.225.208 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[216.251.225.208 listed in bl.score.senderscore.com]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mmoneygram458(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[216.251.225.208 listed in wl.mailspike.net]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 HK_NAME_MR_MRS No description available.
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
2.9 YOU_INHERIT Discussing your inheritance
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 TVD_PH_BODY_META No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FROM_MISSPACED From: missing whitespace
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
Subject: {SPAM?} ?OFFICE OF THE MONEY GRAM MONEY TRANSFER.
?OFFICE OF THE MONEY GRAM MONEY TRANSFER.
COTONOU BENIN REPUBLIC/ADDRESS 358 AGBOKOU,ANKPA ROAD
OPPOSITE TUNDE MOTORS COTONOU.
WE WISH TO ACKNOWLEDGE THE RECEIPT OF YOUR EMAIL IN THIS MONEY GRAM OFFICE AND
THE CONTENT IS WELL NOTED.
I really don't know why you should waste this time in sending the $45 USD. This is not a fluke, I have told you this , if some agent has failed and disappointed you in the past, we will not disappoint you because it bonus payment, this payment is legal and that is why I persistently sent you this notification since you have been short listed to benefit from this payment programmed.
We know that you have been maimed in the past and had your fingers burnt by people you have sincerely trusted and that is why we persistently sent you this notification because we have discovered that you are now finding it very difficult to believe and trust people, but I want you to trust me, believe and have faith in us, we will pay your fund, we have the government mandate and their gazette has already recommended you to benefit from this payment programmed , the government has given express order to pay your inheritance fund and to reconcile this debt for genuine economic development of this country, and for foreign investors to have faith in doing business here.
I want you to send the money by western union money transfer or moneygram today as a lot of time has been wasted on this payment programmed already waiting on you to send the Renew file fee of $45 USD. Send the money to our Bursar today with information
Sender's First name = Bahaeddin
Sender's Last name = Aghazadeh
MTCN = 7194622586
Amount= 5000.00, USD
Test Question= To Who?
Test Answer= To Friend
(BUT IS ON-HOLD UNTIL THE FEE IS BEEN PAID WE WILL RELEASE IT TO YOU)
FOR YOUR INFORMATION DO NOT EXPECT THE RELEASING OF YOUR PAYMENT WITHOUT SENDING THE MONEY REQUIRED AND REMEMBER THAT YOU ARE GIVEN ONLY 48HOURS TO COMPLY OR YOUR TRANSFER WILL BE CANCEL IMMEDIATELY SINCE YOU ARE TOLD TO SEND ANY AMOUNT OF MONEY YOU HAVE IN ORDER TO HELP YOU.BELOW IS OUR ACCOUNT OFFICER NAME WHICH YOU WILL USE TO SEND WHATEVER YOU HAVE TO ENABLE US RELEASE YOUR FIRST PAYMENT IMMEDIATELY.
1.RECEIVER NAME:. . . Milo Buddy
2.COUNTRY:. . . . . . . BENIN REPUBLIC .
3.CITY :. . . . . . . . COTONOU .
4. TEST QUESTION:. . .HOW LONG?
5.TEST ANSWER:. . . TODAY.
6.AMOUNT . . . . . .45 usd
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL RELEASE YOUR FIRST PAYMENT $5000TODAY AND NOT TOMORROW
Miss. Brenda Smith
GENERAL OPRATION MANAGER.
VITAL FINANCE
WESTERN UNION DEPARTMENT
Western UnionA®
Send Money Worldwide
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 27 Apr 2023 23:09:40 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1psGKH-0005tu-Kj
for dave@doctor.nl2k.ab.ca;
Thu, 27 Apr 2023 23:07:21 -0600
Resent-From: The Doctor
Resent-Date: Thu, 27 Apr 2023 23:07:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from minoml002.navisite.net ([216.251.225.208]:58152)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1psEHf-000Pcx-Il
for root@nk.ca;
Thu, 27 Apr 2023 20:56:35 -0600
Received: from User (unknown [216.251.225.236])
by minoml002.navisite.net (Postfix) with SMTP id F32C9C2E4014;
Thu, 27 Apr 2023 19:54:40 -0400 (EDT)
Reply-To:
From: "Miss. Brenda Smith"
Subject: ?OFFICE OF THE MONEY GRAM MONEY TRANSFER.
Date: Fri, 28 Apr 2023 02:54:46 +0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 22.5
X-Spam_score_int: 225
X-Spam_bar: ++++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: ?OFFICE OF THE MONEY GRAM MONEY TRANSFER. COTONOU BENIN REPUBLIC/ADDRESS
358 AGBOKOU,ANKPA ROAD OPPOSITE TUNDE MOTORS COTONOU. WE WISH TO ACKNOWLEDGE
THE RECEIPT OF YOUR EMAIL IN THIS MONEY GRAM OFFICE AND THE CONTENT IS WELL
NOTED.
Content analysis details: (22.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.1 MISSING_MID Missing Message-Id: header
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[216.251.225.208 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
[216.251.225.208 listed in bl.score.senderscore.com]
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 SUBJ_ALL_CAPS Subject is all capitals
1.2 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
[mmoneygram458(at)gmail.com]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[216.251.225.208 listed in wl.mailspike.net]
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
0.0 FROM_MISSP_USER From misspaced, from "User"
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 HK_NAME_MR_MRS No description available.
0.0 CTE_8BIT_MISMATCH Header says 7bits but body disagrees
2.9 YOU_INHERIT Discussing your inheritance
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
2.0 TVD_PH_BODY_META No description available.
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 FROM_MISSPACED From: missing whitespace
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
1.0 ADVANCE_FEE_4_NEW_FORM Advance Fee fraud and a form
Subject: {SPAM?} ?OFFICE OF THE MONEY GRAM MONEY TRANSFER.
?OFFICE OF THE MONEY GRAM MONEY TRANSFER.
COTONOU BENIN REPUBLIC/ADDRESS 358 AGBOKOU,ANKPA ROAD
OPPOSITE TUNDE MOTORS COTONOU.
WE WISH TO ACKNOWLEDGE THE RECEIPT OF YOUR EMAIL IN THIS MONEY GRAM OFFICE AND
THE CONTENT IS WELL NOTED.
I really don't know why you should waste this time in sending the $45 USD. This is not a fluke, I have told you this , if some agent has failed and disappointed you in the past, we will not disappoint you because it bonus payment, this payment is legal and that is why I persistently sent you this notification since you have been short listed to benefit from this payment programmed.
We know that you have been maimed in the past and had your fingers burnt by people you have sincerely trusted and that is why we persistently sent you this notification because we have discovered that you are now finding it very difficult to believe and trust people, but I want you to trust me, believe and have faith in us, we will pay your fund, we have the government mandate and their gazette has already recommended you to benefit from this payment programmed , the government has given express order to pay your inheritance fund and to reconcile this debt for genuine economic development of this country, and for foreign investors to have faith in doing business here.
I want you to send the money by western union money transfer or moneygram today as a lot of time has been wasted on this payment programmed already waiting on you to send the Renew file fee of $45 USD. Send the money to our Bursar today with information
Sender's First name = Bahaeddin
Sender's Last name = Aghazadeh
MTCN = 7194622586
Amount= 5000.00, USD
Test Question= To Who?
Test Answer= To Friend
(BUT IS ON-HOLD UNTIL THE FEE IS BEEN PAID WE WILL RELEASE IT TO YOU)
FOR YOUR INFORMATION DO NOT EXPECT THE RELEASING OF YOUR PAYMENT WITHOUT SENDING THE MONEY REQUIRED AND REMEMBER THAT YOU ARE GIVEN ONLY 48HOURS TO COMPLY OR YOUR TRANSFER WILL BE CANCEL IMMEDIATELY SINCE YOU ARE TOLD TO SEND ANY AMOUNT OF MONEY YOU HAVE IN ORDER TO HELP YOU.BELOW IS OUR ACCOUNT OFFICER NAME WHICH YOU WILL USE TO SEND WHATEVER YOU HAVE TO ENABLE US RELEASE YOUR FIRST PAYMENT IMMEDIATELY.
1.RECEIVER NAME:. . . Milo Buddy
2.COUNTRY:. . . . . . . BENIN REPUBLIC .
3.CITY :. . . . . . . . COTONOU .
4. TEST QUESTION:. . .HOW LONG?
5.TEST ANSWER:. . . TODAY.
6.AMOUNT . . . . . .45 usd
SEND US THE MTCN NUMBER IMMEDIATELY YOU SEND THE MONEY AND IMMEDIATELY WE CONFIRM THE TRANSFER FEE WE WILL RELEASE YOUR FIRST PAYMENT $5000TODAY AND NOT TOMORROW
Miss. Brenda Smith
GENERAL OPRATION MANAGER.
VITAL FINANCE
WESTERN UNION DEPARTMENT
Western UnionA®
Send Money Worldwide
Fedex Phish from Ukraine
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 27 Apr 2023 16:41:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1psAH5-000IRK-Fu
for dave@doctor.nl2k.ab.ca;
Thu, 27 Apr 2023 16:39:39 -0600
Resent-From: The Doctor
Resent-Date: Thu, 27 Apr 2023 16:39:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-43095.vps-default-host.net ([185.65.247.219]:52364 helo=mta.trickydeals.in)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ps958-0007N9-NW
for root@nl2k.ab.ca;
Thu, 27 Apr 2023 15:23:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1682321458.trickydeals;
d=trickydeals.in;
h=Date:To:From:Subject:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=no-rpl@trickydeals.in;
bh=0uvQr2zovI0LmlD1JhjEredPO89cn7C8uq0DR1g17cs=;
b=YrqwabU/ZIhBRXq/qaslHdGGDfDn0APD0RkWc+baHMK5Rkt0svrbcJ9HUsbDafIDfM8kPr70ZxiG
JwrPL7TFFSymh+xw8pf7SKoduNePzYDP1vi255uQ1GVZs6ATJzdyarFDEmk6wgYVYgSkpwL1oZdW
Wpe5LbnNAFd0Y52KrD4=
Date: Thu, 27 Apr 2023 21:15:07 +0000
To: root@nl2k.ab.ca
From: Mein Paket
Subject: Customs payment is pending for your shipment.
Message-ID: <4ee16c3a472284e2fd580496a5e7b455@trickydeals.in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="17829bf51ca5167b2a1294f3f181cad9a"
Content-Transfer-Encoding: 8bit
This is a multi-part message in MIME format.
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
/ CONFIG STYLES Please do not delete and edit CSS styles below /
/ IMPORTANT THIS STYLES MUST BE ON FINAL EMAIL /
#outlook a {
padding: 0;
}
.es-button {
mso-style-priority: 100 !important;
text-decoration: none !important;
}
a[x-apple-data-detectors] {
color: inherit !important;
text-decoration: none !important;
font-size: inherit !important;
font-family: inherit !important;
font-weight: inherit !important;
line-height: inherit !important;
}
.es-desk-hidden {
display: none;
float: left;
overflow: hidden;
width: 0;
max-height: 0;
line-height: 0;
mso-hide: all;
}
/
END OF IMPORTANT
/
body {
width: 100%;
font-family: Imprima, Arial, sans-serif;
-webkit-text-size-adjust: 100%;
-ms-text-size-adjust: 100%;
}
table {
mso-table-lspace: 0pt;
mso-table-rspace: 0pt;
border-collapse: collapse;
border-spacing: 0px;
}
table td,
body,
.es-wrapper {
padding: 0;
Margin: 0;
}
.es-content,
.es-header,
.es-footer {
table-layout: fixed !important;
width: 100%;
}
img {
display: block;
border: 0;
outline: none;
text-decoration: none;
-ms-interpolation-mode: bicubic;
}
p,
hr {
Margin: 0;
}
h1,
h2,
h3,
h4,
h5 {
Margin: 0;
line-height: 120%;
mso-line-height-rule: exactly;
font-family: Imprima, Arial, sans-serif;
}
p,
ul li,
ol li,
a {
-webkit-text-size-adjust: none;
-ms-text-size-adjust: none;
mso-line-height-rule: exactly;
}
.es-left {
float: left;
}
.es-right {
float: right;
}
.es-p5 {
padding: 5px;
}
.es-p5t {
padding-top: 5px;
}
.es-p5b {
padding-bottom: 5px;
}
.es-p5l {
padding-left: 5px;
}
.es-p5r {
padding-right: 5px;
}
.es-p10 {
padding: 10px;
}
.es-p10t {
padding-top: 10px;
}
.es-p10b {
padding-bottom: 10px;
}
.es-p10l {
padding-left: 10px;
}
.es-p10r {
padding-right: 10px;
}
.es-p15 {
padding: 15px;
}
.es-p15t {
padding-top: 15px;
}
.es-p15b {
padding-bottom: 15px;
}
.es-p15l {
padding-left: 15px;
}
.es-p15r {
padding-right: 15px;
}
.es-p20 {
padding: 20px;
}
.es-p20t {
padding-top: 20px;
}
.es-p20b {
padding-bottom: 20px;
}
.es-p20l {
padding-left: 20px;
}
.es-p20r {
padding-right: 20px;
}
.es-p25 {
padding: 25px;
}
.es-p25t {
padding-top: 25px;
}
.es-p25b {
padding-bottom: 25px;
}
.es-p25l {
padding-left: 25px;
}
.es-p25r {
padding-right: 25px;
}
.es-p30 {
padding: 30px;
}
.es-p30t {
padding-top: 30px;
}
.es-p30b {
padding-bottom: 30px;
}
.es-p30l {
padding-left: 30px;
}
.es-p30r {
padding-right: 30px;
}
.es-p35 {
padding: 35px;
}
.es-p35t {
padding-top: 35px;
}
.es-p35b {
padding-bottom: 35px;
}
.es-p35l {
padding-left: 35px;
}
.es-p35r {
padding-right: 35px;
}
.es-p40 {
padding: 40px;
}
.es-p40t {
padding-top: 40px;
}
.es-p40b {
padding-bottom: 40px;
}
.es-p40l {
padding-left: 40px;
}
.es-p40r {
padding-right: 40px;
}
.es-menu td {
border: 0;
}
.es-menu td a img {
display: inline-block !important;
vertical-align: middle;
}
/
END CONFIG STYLES
/
s {
text-decoration: line-through;
}
p,
ul li,
ol li {
font-family: Imprima, Arial, sans-serif;
line-height: 150%;
}
ul li,
ol li {
Margin-bottom: 15px;
margin-left: 0;
}
a {
text-decoration: underline;
}
.es-menu td a {
text-decoration: none;
display: block;
font-family: Imprima, Arial, sans-serif;
}
.es-wrapper {
width: 100%;
height: 100%;
background-repeat: repeat;
background-position: center top;
}
.es-wrapper-color,
.es-wrapper {
background-color: #ffffff;
}
.es-header {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-header-body {
background-color: #efefef;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-header-body a {
color: #2d3142;
font-size: 14px;
}
.es-content-body {
background-color: #efefef;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li {
color: #2d3142;
font-size: 18px;
}
.es-content-body a {
color: #2d3142;
font-size: 18px;
}
.es-footer {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-footer-body {
background-color: #ffffff;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-footer-body a {
color: #2d3142;
font-size: 14px;
}
.es-infoblock,
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li {
line-height: 120%;
font-size: 12px;
color: #cccccc;
}
.es-infoblock a {
font-size: 12px;
color: #cccccc;
}
h1 {
font-size: 48px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h2 {
font-size: 36px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h3 {
font-size: 28px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 48px;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 36px;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 28px;
}
a.es-button,
button.es-button {
padding: 15px 20px 15px 20px;
display: inline-block;
background: #4114F7;
border-radius: 30px;
font-size: 22px;
font-family: Imprima, Arial, sans-serif;
font-weight: bold;
font-style: normal;
line-height: 120%;
color: #ffffff;
text-decoration: none;
width: auto;
text-align: center;
}
.es-button-border {
border-style: solid solid solid solid;
border-color: #2cb543 #2cb543 #2cb543 #2cb543;
background: #4114F7;
border-width: 0px 0px 0px 0px;
display: inline-block;
border-radius: 30px;
width: auto;
mso-border-alt: 10px;
}
.msohide {
mso-hide: all;
}
/ RESPONSIVE STYLES Please do not delete and edit CSS styles below. If you don't need responsive layout, please delete this section. /
@media only screen and (max-width: 600px) {
p,
ul li,
ol li,
a {
line-height: 150% !important;
}
h1,
h2,
h3,
h1 a,
h2 a,
h3 a {
line-height: 120%;
}
h1 {
font-size: 30px !important;
text-align: left;
}
h2 {
font-size: 24px !important;
text-align: left;
}
h3 {
font-size: 20px !important;
text-align: left;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 30px !important;
text-align: left;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 24px !important;
text-align: left;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 20px !important;
text-align: left;
}
.es-menu td a {
font-size: 14px !important;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li,
.es-header-body a {
font-size: 14px !important;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li,
.es-content-body a {
font-size: 14px !important;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li,
.es-footer-body a {
font-size: 14px !important;
}
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li,
.es-infoblock a {
font-size: 12px !important;
}
[class="gmail-fix"] {
display: none !important;
}
.es-m-txt-c,
.es-m-txt-c h1,
.es-m-txt-c h2,
.es-m-txt-c h3 {
text-align: center !important;
}
.es-m-txt-r,
.es-m-txt-r h1,
.es-m-txt-r h2,
.es-m-txt-r h3 {
text-align: right !important;
}
.es-m-txt-l,
.es-m-txt-l h1,
.es-m-txt-l h2,
.es-m-txt-l h3 {
text-align: left !important;
}
.es-m-txt-r img,
.es-m-txt-c img,
.es-m-txt-l img {
display: inline !important;
}
.es-button-border {
display: block !important;
}
a.es-button,
button.es-button {
font-size: 18px !important;
display: block !important;
border-right-width: 0px !important;
border-left-width: 0px !important;
border-top-width: 15px !important;
border-bottom-width: 15px !important;
}
.es-adaptive table,
.es-left,
.es-right {
width: 100% !important;
}
.es-content table,
.es-header table,
.es-footer table,
.es-content,
.es-footer,
.es-header {
width: 100% !important;
max-width: 600px !important;
}
.es-adapt-td {
display: block !important;
width: 100% !important;
}
.adapt-img {
width: 100% !important;
height: auto !important;
}
.es-m-p0 {
padding: 0px !important;
}
.es-m-p0r {
padding-right: 0px !important;
}
.es-m-p0l {
padding-left: 0px !important;
}
.es-m-p0t {
padding-top: 0px !important;
}
.es-m-p0b {
padding-bottom: 0 !important;
}
.es-m-p20b {
padding-bottom: 20px !important;
}
.es-mobile-hidden,
.es-hidden {
display: none !important;
}
tr.es-desk-hidden,
td.es-desk-hidden,
table.es-desk-hidden {
width: auto !important;
overflow: visible !important;
float: none !important;
max-height: inherit !important;
line-height: inherit !important;
}
tr.es-desk-hidden {
display: table-row !important;
}
table.es-desk-hidden {
display: table !important;
}
td.es-desk-menu-hidden {
display: table-cell !important;
}
.es-menu td {
width: 1% !important;
}
table.es-table-not-adapt,
.esd-block-html table {
width: auto !important;
}
table.es-social {
display: inline-block !important;
}
table.es-social td {
display: inline-block !important;
}
.es-desk-hidden {
display: table-row !important;
width: auto !important;
overflow: visible !important;
max-height: inherit !important;
}
}
/ END RESPONSIVE STYLES /
html,
body {
font-family: arial, 'helvetica neue', helvetica, sans-serif;
}
.es-p-default {
padding-top: 20px;
padding-right: 40px;
padding-bottom: 0px;
padding-left: 40px;
}
.es-p-all-default {
padding: 0px;
}
Dear Client ,
We hope this email finds you well. We are writing to inform you that your shipment is awaiting instructions.
We are waiting for your confirmation to proceed with the next steps. Please click the button below to provide us with the necessary instructions.
If you have any questions or concerns, please do not hesitate to contact us.
Provide Instructions
Thank you for choosing Fedex as your shipping partner. We appreciate your business and look forward to serving you again.
Best regards,Fedex Team
This link expire in 24 hours. If you have questions, we're here to help
Privacy Policy • Unsubscribe
Copyright © 2023 Fedex
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
--17829bf51ca5167b2a1294f3f181cad9a--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 27 Apr 2023 16:41:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1psAH5-000IRK-Fu
for dave@doctor.nl2k.ab.ca;
Thu, 27 Apr 2023 16:39:39 -0600
Resent-From: The Doctor
Resent-Date: Thu, 27 Apr 2023 16:39:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-43095.vps-default-host.net ([185.65.247.219]:52364 helo=mta.trickydeals.in)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ps958-0007N9-NW
for root@nl2k.ab.ca;
Thu, 27 Apr 2023 15:23:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1682321458.trickydeals;
d=trickydeals.in;
h=Date:To:From:Subject:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=no-rpl@trickydeals.in;
bh=0uvQr2zovI0LmlD1JhjEredPO89cn7C8uq0DR1g17cs=;
b=YrqwabU/ZIhBRXq/qaslHdGGDfDn0APD0RkWc+baHMK5Rkt0svrbcJ9HUsbDafIDfM8kPr70ZxiG
JwrPL7TFFSymh+xw8pf7SKoduNePzYDP1vi255uQ1GVZs6ATJzdyarFDEmk6wgYVYgSkpwL1oZdW
Wpe5LbnNAFd0Y52KrD4=
Date: Thu, 27 Apr 2023 21:15:07 +0000
To: root@nl2k.ab.ca
From: Mein Paket
Subject: Customs payment is pending for your shipment.
Message-ID: <4ee16c3a472284e2fd580496a5e7b455@trickydeals.in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="17829bf51ca5167b2a1294f3f181cad9a"
Content-Transfer-Encoding: 8bit
This is a multi-part message in MIME format.
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
/ CONFIG STYLES Please do not delete and edit CSS styles below /
/ IMPORTANT THIS STYLES MUST BE ON FINAL EMAIL /
#outlook a {
padding: 0;
}
.es-button {
mso-style-priority: 100 !important;
text-decoration: none !important;
}
a[x-apple-data-detectors] {
color: inherit !important;
text-decoration: none !important;
font-size: inherit !important;
font-family: inherit !important;
font-weight: inherit !important;
line-height: inherit !important;
}
.es-desk-hidden {
display: none;
float: left;
overflow: hidden;
width: 0;
max-height: 0;
line-height: 0;
mso-hide: all;
}
/
END OF IMPORTANT
/
body {
width: 100%;
font-family: Imprima, Arial, sans-serif;
-webkit-text-size-adjust: 100%;
-ms-text-size-adjust: 100%;
}
table {
mso-table-lspace: 0pt;
mso-table-rspace: 0pt;
border-collapse: collapse;
border-spacing: 0px;
}
table td,
body,
.es-wrapper {
padding: 0;
Margin: 0;
}
.es-content,
.es-header,
.es-footer {
table-layout: fixed !important;
width: 100%;
}
img {
display: block;
border: 0;
outline: none;
text-decoration: none;
-ms-interpolation-mode: bicubic;
}
p,
hr {
Margin: 0;
}
h1,
h2,
h3,
h4,
h5 {
Margin: 0;
line-height: 120%;
mso-line-height-rule: exactly;
font-family: Imprima, Arial, sans-serif;
}
p,
ul li,
ol li,
a {
-webkit-text-size-adjust: none;
-ms-text-size-adjust: none;
mso-line-height-rule: exactly;
}
.es-left {
float: left;
}
.es-right {
float: right;
}
.es-p5 {
padding: 5px;
}
.es-p5t {
padding-top: 5px;
}
.es-p5b {
padding-bottom: 5px;
}
.es-p5l {
padding-left: 5px;
}
.es-p5r {
padding-right: 5px;
}
.es-p10 {
padding: 10px;
}
.es-p10t {
padding-top: 10px;
}
.es-p10b {
padding-bottom: 10px;
}
.es-p10l {
padding-left: 10px;
}
.es-p10r {
padding-right: 10px;
}
.es-p15 {
padding: 15px;
}
.es-p15t {
padding-top: 15px;
}
.es-p15b {
padding-bottom: 15px;
}
.es-p15l {
padding-left: 15px;
}
.es-p15r {
padding-right: 15px;
}
.es-p20 {
padding: 20px;
}
.es-p20t {
padding-top: 20px;
}
.es-p20b {
padding-bottom: 20px;
}
.es-p20l {
padding-left: 20px;
}
.es-p20r {
padding-right: 20px;
}
.es-p25 {
padding: 25px;
}
.es-p25t {
padding-top: 25px;
}
.es-p25b {
padding-bottom: 25px;
}
.es-p25l {
padding-left: 25px;
}
.es-p25r {
padding-right: 25px;
}
.es-p30 {
padding: 30px;
}
.es-p30t {
padding-top: 30px;
}
.es-p30b {
padding-bottom: 30px;
}
.es-p30l {
padding-left: 30px;
}
.es-p30r {
padding-right: 30px;
}
.es-p35 {
padding: 35px;
}
.es-p35t {
padding-top: 35px;
}
.es-p35b {
padding-bottom: 35px;
}
.es-p35l {
padding-left: 35px;
}
.es-p35r {
padding-right: 35px;
}
.es-p40 {
padding: 40px;
}
.es-p40t {
padding-top: 40px;
}
.es-p40b {
padding-bottom: 40px;
}
.es-p40l {
padding-left: 40px;
}
.es-p40r {
padding-right: 40px;
}
.es-menu td {
border: 0;
}
.es-menu td a img {
display: inline-block !important;
vertical-align: middle;
}
/
END CONFIG STYLES
/
s {
text-decoration: line-through;
}
p,
ul li,
ol li {
font-family: Imprima, Arial, sans-serif;
line-height: 150%;
}
ul li,
ol li {
Margin-bottom: 15px;
margin-left: 0;
}
a {
text-decoration: underline;
}
.es-menu td a {
text-decoration: none;
display: block;
font-family: Imprima, Arial, sans-serif;
}
.es-wrapper {
width: 100%;
height: 100%;
background-repeat: repeat;
background-position: center top;
}
.es-wrapper-color,
.es-wrapper {
background-color: #ffffff;
}
.es-header {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-header-body {
background-color: #efefef;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-header-body a {
color: #2d3142;
font-size: 14px;
}
.es-content-body {
background-color: #efefef;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li {
color: #2d3142;
font-size: 18px;
}
.es-content-body a {
color: #2d3142;
font-size: 18px;
}
.es-footer {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-footer-body {
background-color: #ffffff;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-footer-body a {
color: #2d3142;
font-size: 14px;
}
.es-infoblock,
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li {
line-height: 120%;
font-size: 12px;
color: #cccccc;
}
.es-infoblock a {
font-size: 12px;
color: #cccccc;
}
h1 {
font-size: 48px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h2 {
font-size: 36px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h3 {
font-size: 28px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 48px;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 36px;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 28px;
}
a.es-button,
button.es-button {
padding: 15px 20px 15px 20px;
display: inline-block;
background: #4114F7;
border-radius: 30px;
font-size: 22px;
font-family: Imprima, Arial, sans-serif;
font-weight: bold;
font-style: normal;
line-height: 120%;
color: #ffffff;
text-decoration: none;
width: auto;
text-align: center;
}
.es-button-border {
border-style: solid solid solid solid;
border-color: #2cb543 #2cb543 #2cb543 #2cb543;
background: #4114F7;
border-width: 0px 0px 0px 0px;
display: inline-block;
border-radius: 30px;
width: auto;
mso-border-alt: 10px;
}
.msohide {
mso-hide: all;
}
/ RESPONSIVE STYLES Please do not delete and edit CSS styles below. If you don't need responsive layout, please delete this section. /
@media only screen and (max-width: 600px) {
p,
ul li,
ol li,
a {
line-height: 150% !important;
}
h1,
h2,
h3,
h1 a,
h2 a,
h3 a {
line-height: 120%;
}
h1 {
font-size: 30px !important;
text-align: left;
}
h2 {
font-size: 24px !important;
text-align: left;
}
h3 {
font-size: 20px !important;
text-align: left;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 30px !important;
text-align: left;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 24px !important;
text-align: left;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 20px !important;
text-align: left;
}
.es-menu td a {
font-size: 14px !important;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li,
.es-header-body a {
font-size: 14px !important;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li,
.es-content-body a {
font-size: 14px !important;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li,
.es-footer-body a {
font-size: 14px !important;
}
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li,
.es-infoblock a {
font-size: 12px !important;
}
[class="gmail-fix"] {
display: none !important;
}
.es-m-txt-c,
.es-m-txt-c h1,
.es-m-txt-c h2,
.es-m-txt-c h3 {
text-align: center !important;
}
.es-m-txt-r,
.es-m-txt-r h1,
.es-m-txt-r h2,
.es-m-txt-r h3 {
text-align: right !important;
}
.es-m-txt-l,
.es-m-txt-l h1,
.es-m-txt-l h2,
.es-m-txt-l h3 {
text-align: left !important;
}
.es-m-txt-r img,
.es-m-txt-c img,
.es-m-txt-l img {
display: inline !important;
}
.es-button-border {
display: block !important;
}
a.es-button,
button.es-button {
font-size: 18px !important;
display: block !important;
border-right-width: 0px !important;
border-left-width: 0px !important;
border-top-width: 15px !important;
border-bottom-width: 15px !important;
}
.es-adaptive table,
.es-left,
.es-right {
width: 100% !important;
}
.es-content table,
.es-header table,
.es-footer table,
.es-content,
.es-footer,
.es-header {
width: 100% !important;
max-width: 600px !important;
}
.es-adapt-td {
display: block !important;
width: 100% !important;
}
.adapt-img {
width: 100% !important;
height: auto !important;
}
.es-m-p0 {
padding: 0px !important;
}
.es-m-p0r {
padding-right: 0px !important;
}
.es-m-p0l {
padding-left: 0px !important;
}
.es-m-p0t {
padding-top: 0px !important;
}
.es-m-p0b {
padding-bottom: 0 !important;
}
.es-m-p20b {
padding-bottom: 20px !important;
}
.es-mobile-hidden,
.es-hidden {
display: none !important;
}
tr.es-desk-hidden,
td.es-desk-hidden,
table.es-desk-hidden {
width: auto !important;
overflow: visible !important;
float: none !important;
max-height: inherit !important;
line-height: inherit !important;
}
tr.es-desk-hidden {
display: table-row !important;
}
table.es-desk-hidden {
display: table !important;
}
td.es-desk-menu-hidden {
display: table-cell !important;
}
.es-menu td {
width: 1% !important;
}
table.es-table-not-adapt,
.esd-block-html table {
width: auto !important;
}
table.es-social {
display: inline-block !important;
}
table.es-social td {
display: inline-block !important;
}
.es-desk-hidden {
display: table-row !important;
width: auto !important;
overflow: visible !important;
max-height: inherit !important;
}
}
/ END RESPONSIVE STYLES /
html,
body {
font-family: arial, 'helvetica neue', helvetica, sans-serif;
}
.es-p-default {
padding-top: 20px;
padding-right: 40px;
padding-bottom: 0px;
padding-left: 40px;
}
.es-p-all-default {
padding: 0px;
}
Dear Client ,
We hope this email finds you well. We are writing to inform you that your shipment is awaiting instructions.
We are waiting for your confirmation to proceed with the next steps. Please click the button below to provide us with the necessary instructions.
If you have any questions or concerns, please do not hesitate to contact us.
Provide Instructions
Thank you for choosing Fedex as your shipping partner. We appreciate your business and look forward to serving you again.
Best regards,Fedex Team
This link expire in 24 hours. If you have questions, we're here to help
Privacy Policy • Unsubscribe
Copyright © 2023 Fedex
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
|
--17829bf51ca5167b2a1294f3f181cad9a--
Fedex Phish from Ukraine
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 27 Apr 2023 16:41:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1psAH5-000IRK-Fu
for dave@doctor.nl2k.ab.ca;
Thu, 27 Apr 2023 16:39:39 -0600
Resent-From: The Doctor
Resent-Date: Thu, 27 Apr 2023 16:39:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-43095.vps-default-host.net ([185.65.247.219]:52364 helo=mta.trickydeals.in)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1ps958-0007N9-NW
for root@nl2k.ab.ca;
Thu, 27 Apr 2023 15:23:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1682321458.trickydeals;
d=trickydeals.in;
h=Date:To:From:Subject:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=no-rpl@trickydeals.in;
bh=0uvQr2zovI0LmlD1JhjEredPO89cn7C8uq0DR1g17cs=;
b=YrqwabU/ZIhBRXq/qaslHdGGDfDn0APD0RkWc+baHMK5Rkt0svrbcJ9HUsbDafIDfM8kPr70ZxiG
JwrPL7TFFSymh+xw8pf7SKoduNePzYDP1vi255uQ1GVZs6ATJzdyarFDEmk6wgYVYgSkpwL1oZdW
Wpe5LbnNAFd0Y52KrD4=
Date: Thu, 27 Apr 2023 21:15:07 +0000
To: root@nl2k.ab.ca
From: Mein Paket
Subject: Customs payment is pending for your shipment.
Message-ID: <4ee16c3a472284e2fd580496a5e7b455@trickydeals.in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="17829bf51ca5167b2a1294f3f181cad9a"
Content-Transfer-Encoding: 8bit
This is a multi-part message in MIME format.
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
/ CONFIG STYLES Please do not delete and edit CSS styles below /
/ IMPORTANT THIS STYLES MUST BE ON FINAL EMAIL /
#outlook a {
padding: 0;
}
.es-button {
mso-style-priority: 100 !important;
text-decoration: none !important;
}
a[x-apple-data-detectors] {
color: inherit !important;
text-decoration: none !important;
font-size: inherit !important;
font-family: inherit !important;
font-weight: inherit !important;
line-height: inherit !important;
}
.es-desk-hidden {
display: none;
float: left;
overflow: hidden;
width: 0;
max-height: 0;
line-height: 0;
mso-hide: all;
}
/
END OF IMPORTANT
/
body {
width: 100%;
font-family: Imprima, Arial, sans-serif;
-webkit-text-size-adjust: 100%;
-ms-text-size-adjust: 100%;
}
table {
mso-table-lspace: 0pt;
mso-table-rspace: 0pt;
border-collapse: collapse;
border-spacing: 0px;
}
table td,
body,
.es-wrapper {
padding: 0;
Margin: 0;
}
.es-content,
.es-header,
.es-footer {
table-layout: fixed !important;
width: 100%;
}
img {
display: block;
border: 0;
outline: none;
text-decoration: none;
-ms-interpolation-mode: bicubic;
}
p,
hr {
Margin: 0;
}
h1,
h2,
h3,
h4,
h5 {
Margin: 0;
line-height: 120%;
mso-line-height-rule: exactly;
font-family: Imprima, Arial, sans-serif;
}
p,
ul li,
ol li,
a {
-webkit-text-size-adjust: none;
-ms-text-size-adjust: none;
mso-line-height-rule: exactly;
}
.es-left {
float: left;
}
.es-right {
float: right;
}
.es-p5 {
padding: 5px;
}
.es-p5t {
padding-top: 5px;
}
.es-p5b {
padding-bottom: 5px;
}
.es-p5l {
padding-left: 5px;
}
.es-p5r {
padding-right: 5px;
}
.es-p10 {
padding: 10px;
}
.es-p10t {
padding-top: 10px;
}
.es-p10b {
padding-bottom: 10px;
}
.es-p10l {
padding-left: 10px;
}
.es-p10r {
padding-right: 10px;
}
.es-p15 {
padding: 15px;
}
.es-p15t {
padding-top: 15px;
}
.es-p15b {
padding-bottom: 15px;
}
.es-p15l {
padding-left: 15px;
}
.es-p15r {
padding-right: 15px;
}
.es-p20 {
padding: 20px;
}
.es-p20t {
padding-top: 20px;
}
.es-p20b {
padding-bottom: 20px;
}
.es-p20l {
padding-left: 20px;
}
.es-p20r {
padding-right: 20px;
}
.es-p25 {
padding: 25px;
}
.es-p25t {
padding-top: 25px;
}
.es-p25b {
padding-bottom: 25px;
}
.es-p25l {
padding-left: 25px;
}
.es-p25r {
padding-right: 25px;
}
.es-p30 {
padding: 30px;
}
.es-p30t {
padding-top: 30px;
}
.es-p30b {
padding-bottom: 30px;
}
.es-p30l {
padding-left: 30px;
}
.es-p30r {
padding-right: 30px;
}
.es-p35 {
padding: 35px;
}
.es-p35t {
padding-top: 35px;
}
.es-p35b {
padding-bottom: 35px;
}
.es-p35l {
padding-left: 35px;
}
.es-p35r {
padding-right: 35px;
}
.es-p40 {
padding: 40px;
}
.es-p40t {
padding-top: 40px;
}
.es-p40b {
padding-bottom: 40px;
}
.es-p40l {
padding-left: 40px;
}
.es-p40r {
padding-right: 40px;
}
.es-menu td {
border: 0;
}
.es-menu td a img {
display: inline-block !important;
vertical-align: middle;
}
/
END CONFIG STYLES
/
s {
text-decoration: line-through;
}
p,
ul li,
ol li {
font-family: Imprima, Arial, sans-serif;
line-height: 150%;
}
ul li,
ol li {
Margin-bottom: 15px;
margin-left: 0;
}
a {
text-decoration: underline;
}
.es-menu td a {
text-decoration: none;
display: block;
font-family: Imprima, Arial, sans-serif;
}
.es-wrapper {
width: 100%;
height: 100%;
background-repeat: repeat;
background-position: center top;
}
.es-wrapper-color,
.es-wrapper {
background-color: #ffffff;
}
.es-header {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-header-body {
background-color: #efefef;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-header-body a {
color: #2d3142;
font-size: 14px;
}
.es-content-body {
background-color: #efefef;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li {
color: #2d3142;
font-size: 18px;
}
.es-content-body a {
color: #2d3142;
font-size: 18px;
}
.es-footer {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-footer-body {
background-color: #ffffff;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-footer-body a {
color: #2d3142;
font-size: 14px;
}
.es-infoblock,
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li {
line-height: 120%;
font-size: 12px;
color: #cccccc;
}
.es-infoblock a {
font-size: 12px;
color: #cccccc;
}
h1 {
font-size: 48px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h2 {
font-size: 36px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h3 {
font-size: 28px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 48px;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 36px;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 28px;
}
a.es-button,
button.es-button {
padding: 15px 20px 15px 20px;
display: inline-block;
background: #4114F7;
border-radius: 30px;
font-size: 22px;
font-family: Imprima, Arial, sans-serif;
font-weight: bold;
font-style: normal;
line-height: 120%;
color: #ffffff;
text-decoration: none;
width: auto;
text-align: center;
}
.es-button-border {
border-style: solid solid solid solid;
border-color: #2cb543 #2cb543 #2cb543 #2cb543;
background: #4114F7;
border-width: 0px 0px 0px 0px;
display: inline-block;
border-radius: 30px;
width: auto;
mso-border-alt: 10px;
}
.msohide {
mso-hide: all;
}
/ RESPONSIVE STYLES Please do not delete and edit CSS styles below. If you don't need responsive layout, please delete this section. /
@media only screen and (max-width: 600px) {
p,
ul li,
ol li,
a {
line-height: 150% !important;
}
h1,
h2,
h3,
h1 a,
h2 a,
h3 a {
line-height: 120%;
}
h1 {
font-size: 30px !important;
text-align: left;
}
h2 {
font-size: 24px !important;
text-align: left;
}
h3 {
font-size: 20px !important;
text-align: left;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 30px !important;
text-align: left;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 24px !important;
text-align: left;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 20px !important;
text-align: left;
}
.es-menu td a {
font-size: 14px !important;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li,
.es-header-body a {
font-size: 14px !important;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li,
.es-content-body a {
font-size: 14px !important;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li,
.es-footer-body a {
font-size: 14px !important;
}
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li,
.es-infoblock a {
font-size: 12px !important;
}
[class="gmail-fix"] {
display: none !important;
}
.es-m-txt-c,
.es-m-txt-c h1,
.es-m-txt-c h2,
.es-m-txt-c h3 {
text-align: center !important;
}
.es-m-txt-r,
.es-m-txt-r h1,
.es-m-txt-r h2,
.es-m-txt-r h3 {
text-align: right !important;
}
.es-m-txt-l,
.es-m-txt-l h1,
.es-m-txt-l h2,
.es-m-txt-l h3 {
text-align: left !important;
}
.es-m-txt-r img,
.es-m-txt-c img,
.es-m-txt-l img {
display: inline !important;
}
.es-button-border {
display: block !important;
}
a.es-button,
button.es-button {
font-size: 18px !important;
display: block !important;
border-right-width: 0px !important;
border-left-width: 0px !important;
border-top-width: 15px !important;
border-bottom-width: 15px !important;
}
.es-adaptive table,
.es-left,
.es-right {
width: 100% !important;
}
.es-content table,
.es-header table,
.es-footer table,
.es-content,
.es-footer,
.es-header {
width: 100% !important;
max-width: 600px !important;
}
.es-adapt-td {
display: block !important;
width: 100% !important;
}
.adapt-img {
width: 100% !important;
height: auto !important;
}
.es-m-p0 {
padding: 0px !important;
}
.es-m-p0r {
padding-right: 0px !important;
}
.es-m-p0l {
padding-left: 0px !important;
}
.es-m-p0t {
padding-top: 0px !important;
}
.es-m-p0b {
padding-bottom: 0 !important;
}
.es-m-p20b {
padding-bottom: 20px !important;
}
.es-mobile-hidden,
.es-hidden {
display: none !important;
}
tr.es-desk-hidden,
td.es-desk-hidden,
table.es-desk-hidden {
width: auto !important;
overflow: visible !important;
float: none !important;
max-height: inherit !important;
line-height: inherit !important;
}
tr.es-desk-hidden {
display: table-row !important;
}
table.es-desk-hidden {
display: table !important;
}
td.es-desk-menu-hidden {
display: table-cell !important;
}
.es-menu td {
width: 1% !important;
}
table.es-table-not-adapt,
.esd-block-html table {
width: auto !important;
}
table.es-social {
display: inline-block !important;
}
table.es-social td {
display: inline-block !important;
}
.es-desk-hidden {
display: table-row !important;
width: auto !important;
overflow: visible !important;
max-height: inherit !important;
}
}
/ END RESPONSIVE STYLES /
html,
body {
font-family: arial, 'helvetica neue', helvetica, sans-serif;
}
.es-p-default {
padding-top: 20px;
padding-right: 40px;
padding-bottom: 0px;
padding-left: 40px;
}
.es-p-all-default {
padding: 0px;
}
Dear Client ,
We hope this email finds you well. We are writing to inform you that your shipment is awaiting instructions.
We are waiting for your confirmation to proceed with the next steps. Please click the button below to provide us with the necessary instructions.
If you have any questions or concerns, please do not hesitate to contact us.
Provide Instructions
Thank you for choosing Fedex as your shipping partner. We appreciate your business and look forward to serving you again.
Best regards,Fedex Team
This link expire in 24 hours. If you have questions, we're here to help
Privacy Policy • Unsubscribe
Copyright © 2023 Fedex
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
--17829bf51ca5167b2a1294f3f181cad9a--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 27 Apr 2023 16:41:48 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1psAH5-000IRK-Fu
for dave@doctor.nl2k.ab.ca;
Thu, 27 Apr 2023 16:39:39 -0600
Resent-From: The Doctor
Resent-Date: Thu, 27 Apr 2023 16:39:39 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps-43095.vps-default-host.net ([185.65.247.219]:52364 helo=mta.trickydeals.in)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ps958-0007N9-NW
for root@nl2k.ab.ca;
Thu, 27 Apr 2023 15:23:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=1682321458.trickydeals;
d=trickydeals.in;
h=Date:To:From:Subject:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=no-rpl@trickydeals.in;
bh=0uvQr2zovI0LmlD1JhjEredPO89cn7C8uq0DR1g17cs=;
b=YrqwabU/ZIhBRXq/qaslHdGGDfDn0APD0RkWc+baHMK5Rkt0svrbcJ9HUsbDafIDfM8kPr70ZxiG
JwrPL7TFFSymh+xw8pf7SKoduNePzYDP1vi255uQ1GVZs6ATJzdyarFDEmk6wgYVYgSkpwL1oZdW
Wpe5LbnNAFd0Y52KrD4=
Date: Thu, 27 Apr 2023 21:15:07 +0000
To: root@nl2k.ab.ca
From: Mein Paket
Subject: Customs payment is pending for your shipment.
Message-ID: <4ee16c3a472284e2fd580496a5e7b455@trickydeals.in>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="17829bf51ca5167b2a1294f3f181cad9a"
Content-Transfer-Encoding: 8bit
This is a multi-part message in MIME format.
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
/ CONFIG STYLES Please do not delete and edit CSS styles below /
/ IMPORTANT THIS STYLES MUST BE ON FINAL EMAIL /
#outlook a {
padding: 0;
}
.es-button {
mso-style-priority: 100 !important;
text-decoration: none !important;
}
a[x-apple-data-detectors] {
color: inherit !important;
text-decoration: none !important;
font-size: inherit !important;
font-family: inherit !important;
font-weight: inherit !important;
line-height: inherit !important;
}
.es-desk-hidden {
display: none;
float: left;
overflow: hidden;
width: 0;
max-height: 0;
line-height: 0;
mso-hide: all;
}
/
END OF IMPORTANT
/
body {
width: 100%;
font-family: Imprima, Arial, sans-serif;
-webkit-text-size-adjust: 100%;
-ms-text-size-adjust: 100%;
}
table {
mso-table-lspace: 0pt;
mso-table-rspace: 0pt;
border-collapse: collapse;
border-spacing: 0px;
}
table td,
body,
.es-wrapper {
padding: 0;
Margin: 0;
}
.es-content,
.es-header,
.es-footer {
table-layout: fixed !important;
width: 100%;
}
img {
display: block;
border: 0;
outline: none;
text-decoration: none;
-ms-interpolation-mode: bicubic;
}
p,
hr {
Margin: 0;
}
h1,
h2,
h3,
h4,
h5 {
Margin: 0;
line-height: 120%;
mso-line-height-rule: exactly;
font-family: Imprima, Arial, sans-serif;
}
p,
ul li,
ol li,
a {
-webkit-text-size-adjust: none;
-ms-text-size-adjust: none;
mso-line-height-rule: exactly;
}
.es-left {
float: left;
}
.es-right {
float: right;
}
.es-p5 {
padding: 5px;
}
.es-p5t {
padding-top: 5px;
}
.es-p5b {
padding-bottom: 5px;
}
.es-p5l {
padding-left: 5px;
}
.es-p5r {
padding-right: 5px;
}
.es-p10 {
padding: 10px;
}
.es-p10t {
padding-top: 10px;
}
.es-p10b {
padding-bottom: 10px;
}
.es-p10l {
padding-left: 10px;
}
.es-p10r {
padding-right: 10px;
}
.es-p15 {
padding: 15px;
}
.es-p15t {
padding-top: 15px;
}
.es-p15b {
padding-bottom: 15px;
}
.es-p15l {
padding-left: 15px;
}
.es-p15r {
padding-right: 15px;
}
.es-p20 {
padding: 20px;
}
.es-p20t {
padding-top: 20px;
}
.es-p20b {
padding-bottom: 20px;
}
.es-p20l {
padding-left: 20px;
}
.es-p20r {
padding-right: 20px;
}
.es-p25 {
padding: 25px;
}
.es-p25t {
padding-top: 25px;
}
.es-p25b {
padding-bottom: 25px;
}
.es-p25l {
padding-left: 25px;
}
.es-p25r {
padding-right: 25px;
}
.es-p30 {
padding: 30px;
}
.es-p30t {
padding-top: 30px;
}
.es-p30b {
padding-bottom: 30px;
}
.es-p30l {
padding-left: 30px;
}
.es-p30r {
padding-right: 30px;
}
.es-p35 {
padding: 35px;
}
.es-p35t {
padding-top: 35px;
}
.es-p35b {
padding-bottom: 35px;
}
.es-p35l {
padding-left: 35px;
}
.es-p35r {
padding-right: 35px;
}
.es-p40 {
padding: 40px;
}
.es-p40t {
padding-top: 40px;
}
.es-p40b {
padding-bottom: 40px;
}
.es-p40l {
padding-left: 40px;
}
.es-p40r {
padding-right: 40px;
}
.es-menu td {
border: 0;
}
.es-menu td a img {
display: inline-block !important;
vertical-align: middle;
}
/
END CONFIG STYLES
/
s {
text-decoration: line-through;
}
p,
ul li,
ol li {
font-family: Imprima, Arial, sans-serif;
line-height: 150%;
}
ul li,
ol li {
Margin-bottom: 15px;
margin-left: 0;
}
a {
text-decoration: underline;
}
.es-menu td a {
text-decoration: none;
display: block;
font-family: Imprima, Arial, sans-serif;
}
.es-wrapper {
width: 100%;
height: 100%;
background-repeat: repeat;
background-position: center top;
}
.es-wrapper-color,
.es-wrapper {
background-color: #ffffff;
}
.es-header {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-header-body {
background-color: #efefef;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-header-body a {
color: #2d3142;
font-size: 14px;
}
.es-content-body {
background-color: #efefef;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li {
color: #2d3142;
font-size: 18px;
}
.es-content-body a {
color: #2d3142;
font-size: 18px;
}
.es-footer {
background-color: transparent;
background-repeat: repeat;
background-position: center top;
}
.es-footer-body {
background-color: #ffffff;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li {
color: #2d3142;
font-size: 14px;
}
.es-footer-body a {
color: #2d3142;
font-size: 14px;
}
.es-infoblock,
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li {
line-height: 120%;
font-size: 12px;
color: #cccccc;
}
.es-infoblock a {
font-size: 12px;
color: #cccccc;
}
h1 {
font-size: 48px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h2 {
font-size: 36px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
h3 {
font-size: 28px;
font-style: normal;
font-weight: bold;
color: #2d3142;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 48px;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 36px;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 28px;
}
a.es-button,
button.es-button {
padding: 15px 20px 15px 20px;
display: inline-block;
background: #4114F7;
border-radius: 30px;
font-size: 22px;
font-family: Imprima, Arial, sans-serif;
font-weight: bold;
font-style: normal;
line-height: 120%;
color: #ffffff;
text-decoration: none;
width: auto;
text-align: center;
}
.es-button-border {
border-style: solid solid solid solid;
border-color: #2cb543 #2cb543 #2cb543 #2cb543;
background: #4114F7;
border-width: 0px 0px 0px 0px;
display: inline-block;
border-radius: 30px;
width: auto;
mso-border-alt: 10px;
}
.msohide {
mso-hide: all;
}
/ RESPONSIVE STYLES Please do not delete and edit CSS styles below. If you don't need responsive layout, please delete this section. /
@media only screen and (max-width: 600px) {
p,
ul li,
ol li,
a {
line-height: 150% !important;
}
h1,
h2,
h3,
h1 a,
h2 a,
h3 a {
line-height: 120%;
}
h1 {
font-size: 30px !important;
text-align: left;
}
h2 {
font-size: 24px !important;
text-align: left;
}
h3 {
font-size: 20px !important;
text-align: left;
}
.es-header-body h1 a,
.es-content-body h1 a,
.es-footer-body h1 a {
font-size: 30px !important;
text-align: left;
}
.es-header-body h2 a,
.es-content-body h2 a,
.es-footer-body h2 a {
font-size: 24px !important;
text-align: left;
}
.es-header-body h3 a,
.es-content-body h3 a,
.es-footer-body h3 a {
font-size: 20px !important;
text-align: left;
}
.es-menu td a {
font-size: 14px !important;
}
.es-header-body p,
.es-header-body ul li,
.es-header-body ol li,
.es-header-body a {
font-size: 14px !important;
}
.es-content-body p,
.es-content-body ul li,
.es-content-body ol li,
.es-content-body a {
font-size: 14px !important;
}
.es-footer-body p,
.es-footer-body ul li,
.es-footer-body ol li,
.es-footer-body a {
font-size: 14px !important;
}
.es-infoblock p,
.es-infoblock ul li,
.es-infoblock ol li,
.es-infoblock a {
font-size: 12px !important;
}
[class="gmail-fix"] {
display: none !important;
}
.es-m-txt-c,
.es-m-txt-c h1,
.es-m-txt-c h2,
.es-m-txt-c h3 {
text-align: center !important;
}
.es-m-txt-r,
.es-m-txt-r h1,
.es-m-txt-r h2,
.es-m-txt-r h3 {
text-align: right !important;
}
.es-m-txt-l,
.es-m-txt-l h1,
.es-m-txt-l h2,
.es-m-txt-l h3 {
text-align: left !important;
}
.es-m-txt-r img,
.es-m-txt-c img,
.es-m-txt-l img {
display: inline !important;
}
.es-button-border {
display: block !important;
}
a.es-button,
button.es-button {
font-size: 18px !important;
display: block !important;
border-right-width: 0px !important;
border-left-width: 0px !important;
border-top-width: 15px !important;
border-bottom-width: 15px !important;
}
.es-adaptive table,
.es-left,
.es-right {
width: 100% !important;
}
.es-content table,
.es-header table,
.es-footer table,
.es-content,
.es-footer,
.es-header {
width: 100% !important;
max-width: 600px !important;
}
.es-adapt-td {
display: block !important;
width: 100% !important;
}
.adapt-img {
width: 100% !important;
height: auto !important;
}
.es-m-p0 {
padding: 0px !important;
}
.es-m-p0r {
padding-right: 0px !important;
}
.es-m-p0l {
padding-left: 0px !important;
}
.es-m-p0t {
padding-top: 0px !important;
}
.es-m-p0b {
padding-bottom: 0 !important;
}
.es-m-p20b {
padding-bottom: 20px !important;
}
.es-mobile-hidden,
.es-hidden {
display: none !important;
}
tr.es-desk-hidden,
td.es-desk-hidden,
table.es-desk-hidden {
width: auto !important;
overflow: visible !important;
float: none !important;
max-height: inherit !important;
line-height: inherit !important;
}
tr.es-desk-hidden {
display: table-row !important;
}
table.es-desk-hidden {
display: table !important;
}
td.es-desk-menu-hidden {
display: table-cell !important;
}
.es-menu td {
width: 1% !important;
}
table.es-table-not-adapt,
.esd-block-html table {
width: auto !important;
}
table.es-social {
display: inline-block !important;
}
table.es-social td {
display: inline-block !important;
}
.es-desk-hidden {
display: table-row !important;
width: auto !important;
overflow: visible !important;
max-height: inherit !important;
}
}
/ END RESPONSIVE STYLES /
html,
body {
font-family: arial, 'helvetica neue', helvetica, sans-serif;
}
.es-p-default {
padding-top: 20px;
padding-right: 40px;
padding-bottom: 0px;
padding-left: 40px;
}
.es-p-all-default {
padding: 0px;
}
Dear Client ,
We hope this email finds you well. We are writing to inform you that your shipment is awaiting instructions.
We are waiting for your confirmation to proceed with the next steps. Please click the button below to provide us with the necessary instructions.
If you have any questions or concerns, please do not hesitate to contact us.
Provide Instructions
Thank you for choosing Fedex as your shipping partner. We appreciate your business and look forward to serving you again.
Best regards,Fedex Team
This link expire in 24 hours. If you have questions, we're here to help
Privacy Policy • Unsubscribe
Copyright © 2023 Fedex
--17829bf51ca5167b2a1294f3f181cad9a
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 8bit
|
--17829bf51ca5167b2a1294f3f181cad9a--