OAS Phish from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 31 Oct 2023 14:24:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qxvH6-000NX2-1h
for dave@doctor.nl2k.ab.ca;
Tue, 31 Oct 2023 14:23:44 -0600
Resent-From: The Doctor
Resent-Date: Tue, 31 Oct 2023 14:23:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a48-175.smtp-out.amazonses.com ([54.240.48.175]:44153)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@amazonses.com>)
id 1qxtde-000JLy-2u
for doctor@nk.ca;
Tue, 31 Oct 2023 12:38:59 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1698777410;
h=Content-Type:MIME-Version:From:Subject:Message-ID:To:Content-Transfer-Encoding:Date:Feedback-ID;
bh=zHCpboMjSsbxicUphf44f1kW6XzzhrCBu+MNRiF3rrU=;
b=VdX48ZRepEos4Hqzzth6lpbJtV0uAYjibtpmW7l5S4lb2N5hi6U+WwMXO3b53mhK
mX/mYyPQt8zN2SBOu9RRFR8JT4Lar+pjSwukaPEGSvXPwDVootWOYElkGFSvNPvqcv9
lmW1Vm7lBGHV7SbT/8OI4kWRmX/cmxkwhTG7pYG4=
Content-Type: multipart/mixed; boundary="===============8014335163118823795=="
MIME-Version: 1.0
From: "memberassistance@oas.ca"
Subject: Your OAS Benefits Update 2023
Importance: high
Message-ID: <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@email.amazonses.com>
To: doctor@nk.ca
X-PHISHTEST: KnowBe4
Content-Transfer-Encoding: base64
Date: Tue, 31 Oct 2023 18:36:50 +0000
Feedback-ID: 1.us-east-1.akDDQhhOyUneCBNoGb8owVGR9BZM3ROxnFS7vS4KThs=:AmazonSES
X-SES-Outgoing: 2023.10.31-54.240.48.175
X-Antivirus: AVG (VPS 231031-10, 10/31/2023), Inbound message
X-Antivirus-Status: Clean
--===============8014335163118823795==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============8014335163118823795==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 31 Oct 2023 14:24:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qxvH6-000NX2-1h
for dave@doctor.nl2k.ab.ca;
Tue, 31 Oct 2023 14:23:44 -0600
Resent-From: The Doctor
Resent-Date: Tue, 31 Oct 2023 14:23:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a48-175.smtp-out.amazonses.com ([54.240.48.175]:44153)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@amazonses.com>)
id 1qxtde-000JLy-2u
for doctor@nk.ca;
Tue, 31 Oct 2023 12:38:59 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1698777410;
h=Content-Type:MIME-Version:From:Subject:Message-ID:To:Content-Transfer-Encoding:Date:Feedback-ID;
bh=zHCpboMjSsbxicUphf44f1kW6XzzhrCBu+MNRiF3rrU=;
b=VdX48ZRepEos4Hqzzth6lpbJtV0uAYjibtpmW7l5S4lb2N5hi6U+WwMXO3b53mhK
mX/mYyPQt8zN2SBOu9RRFR8JT4Lar+pjSwukaPEGSvXPwDVootWOYElkGFSvNPvqcv9
lmW1Vm7lBGHV7SbT/8OI4kWRmX/cmxkwhTG7pYG4=
Content-Type: multipart/mixed; boundary="===============8014335163118823795=="
MIME-Version: 1.0
From: "memberassistance@oas.ca"
Subject: Your OAS Benefits Update 2023
Importance: high
Message-ID: <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@email.amazonses.com>
To: doctor@nk.ca
X-PHISHTEST: KnowBe4
Content-Transfer-Encoding: base64
Date: Tue, 31 Oct 2023 18:36:50 +0000
Feedback-ID: 1.us-east-1.akDDQhhOyUneCBNoGb8owVGR9BZM3ROxnFS7vS4KThs=:AmazonSES
X-SES-Outgoing: 2023.10.31-54.240.48.175
X-Antivirus: AVG (VPS 231031-10, 10/31/2023), Inbound message
X-Antivirus-Status: Clean
--===============8014335163118823795==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============8014335163118823795==--