Amazon PHish
Posted by Dave Yadallee onX-Account-Key: account2
X-UIDL: 000645b6501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: sales@nk.ca
Delivery-date: Sat, 30 Sep 2017 13:05:30 -0600
Received: from [5.157.83.20] (helo=peijs.nl)
by doctor.nl2k.ab.ca with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89 (FreeBSD))
(envelope-from
id 1dyN13-000LbB-0U
for sales@nk.ca; Sat, 30 Sep 2017 13:01:38 -0600
Received: from admin by peijs.nl with local (Exim 4.89)
(envelope-from
id 1dyN0w-0004Ip-1Q
for sales@nk.ca; Sat, 30 Sep 2017 21:01:26 +0200
To: sales@nk.ca
Subject: Amazon Case ID-2020-1090-3090
X-PHP-Originating-Script: 501:class.phpmailer.php
Date: Sat, 30 Sep 2017 19:01:26 +0000
From: Service
Message-ID: <2405c00fd350f846e2c1@fastreal.ddns.net>
X-Mailer: CaZaNoVa163 xMailer v1.3
Organization: fastreal.ddns.net
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441
X-Sender: service@eamazon.com
X-AntiAbuse: This is a solicited email for - fastreal.ddns.net mailing list.
X-AntiAbuse: Servername - fastreal.ddns.net
X-AntiAbuse: service@eamazon.com
X-OriginalArrivalTime: 30 Aug 2015 13:39:39.0481 (UTC) FILETIME=[7BF24490:01D0E3F2]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_976faa26e8302bc2833ac3ac240e7e68"
X-Spam_score: 6.0
X-Spam_score_int: 60
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: New Page 2 Â Customer Support
Content analysis details: (6.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
2.0 MR_BAD_ORGA_1 No description available.
0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)
0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
Subject: {SPAM?} Amazon Case ID-2020-1090-3090
X-Antivirus: AVG (VPS 170928-0, 09/27/2017), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format.
--b1_976faa26e8302bc2833ac3ac240e7e68
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
New Page 2
=C2=A0
Customer Support
=C2=A0
Dear Customer,
We regularly screen activity in the system.
You received this message due to Invalid information in your Account.
Please update your information promptly so that you can continue to enjoy a=
ll the benefits of your Amazon Account.
If you don't update your information within 24 Hours, Your Account will be =
Iimited.
Case ID-2020-1090-5580
We are sorry for the inconvenience,, But we are working hard to maintain th=
e confidentiality of your information.
Click on the link below and update your information.
Click Here To Update Your Information.
=C2=A0
=C2=A0
We hope to see you again soon.
Amazon.com
--b1_976faa26e8302bc2833ac3ac240e7e68
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
252">
=C2=A0
erif; font-size: 12px; font-style: normal; font-variant: normal; font-weigh=
t: normal; letter-spacing: normal; line-height: 16px; orphans: auto; text-a=
lign: start; text-indent: 0px; text-transform: none; white-space: normal; w=
idows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; width: 500px; =
color: rgb(51, 51, 51); margin: 0px auto; background-color: rgb(255, 255, 2=
55);">
op; font-size: 13px; line-height: 18px;">
se;">
tical-align: top; font-size: 13px; line-height: 18px;">
class=3D"CToWUd" style=3D"border: 0px; width: 107px; min-height: 31px;">
d>
l, sans-serif; margin: 0px; vertical-align: top; font-size: 13px; line-heig=
ht: 18px;">
font-weight: normal; font-stretch: normal; font-size: 12px; line-height: 16=
px; font-family: Arial, sans-serif;">
Customer Support
op; font-size: 14px; line-height: 18px; width: 500px; padding: 0px;">
font-weight: normal; font-stretch: normal; font-size: 12px; line-height: 16=
px; font-family: Arial, sans-serif;">=C2=A0
>
Dear Customer,
We regularly screen activity in the system.
You received this message due to Invalid information in your Account.
>
Please update your information promptly so that you can continue to enjo=
y all the benefits of your Amazon Account.
If you don't update your information within 24 Hours, Your Account will =
be Iimited.
Case ID-2020-1090-5580
We are sorry for the inconvenience,, But we are working hard to maintain=
the confidentiality of your information.
Click on the link below and update your information.
font-weight: normal; font-stretch: normal; font-size: 12px; line-height: 16=
px; font-family: Arial, sans-serif;">=C2=A0
op; font-size: 13px; line-height: 18px; padding: 10px 0px 0px;">
font-weight: normal; font-stretch: normal; font-size: 18px; line-height: no=
rmal; font-family: Arial, sans-serif; color: rgb(204, 102, 0); border-botto=
m-width: 1px; border-bottom-style: solid; border-bottom-color: rgb(234, 234=
, 234);">
=C2=A0
font-size: 12px; font-style: normal; font-variant: normal; font-weight: nor=
mal; letter-spacing: normal; line-height: 16px; orphans: auto; text-align: =
start; text-indent: 0px; text-transform: none; white-space: normal; widows:=
1; word-spacing: 0px; -webkit-text-stroke-width: 0px; width: 500px; color:=
rgb(51, 51, 51); margin: 0px auto; background-color: rgb(255, 255, 255);">
op; font-size: 13px; line-height: 18px; width: 500px; padding: 10px 20px 10=
px 0px; border-bottom-width: 1px; border-bottom-style: solid; border-bottom=
-color: rgb(234, 234, 234);">
ght: normal; font-stretch: normal; font-size: 14px; line-height: 16px; font=
-family: Arial, sans-serif; padding-bottom: 5px;">
We hope to see you again soon.
Amazon.com
--b1_976faa26e8302bc2833ac3ac240e7e68--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments