Amazon PHish

From - Sat Sep 30 13:06:01 2017

X-Account-Key: account2

X-UIDL: 000645b6501fb806

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: sales@nk.ca

Delivery-date: Sat, 30 Sep 2017 13:05:30 -0600

Received: from [5.157.83.20] (helo=peijs.nl)

by doctor.nl2k.ab.ca with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)

(Exim 4.89 (FreeBSD))

(envelope-from )

id 1dyN13-000LbB-0U

for sales@nk.ca; Sat, 30 Sep 2017 13:01:38 -0600

Received: from admin by peijs.nl with local (Exim 4.89)

(envelope-from )

id 1dyN0w-0004Ip-1Q

for sales@nk.ca; Sat, 30 Sep 2017 21:01:26 +0200

To: sales@nk.ca

Subject: Amazon Case ID-2020-1090-3090

X-PHP-Originating-Script: 501:class.phpmailer.php

Date: Sat, 30 Sep 2017 19:01:26 +0000

From: Service

Message-ID: <2405c00fd350f846e2c1@fastreal.ddns.net>

X-Mailer: CaZaNoVa163 xMailer v1.3

Organization: fastreal.ddns.net

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

X-Sender: service@eamazon.com

X-AntiAbuse: This is a solicited email for - fastreal.ddns.net mailing list.

X-AntiAbuse: Servername - fastreal.ddns.net

X-AntiAbuse: service@eamazon.com

X-OriginalArrivalTime: 30 Aug 2015 13:39:39.0481 (UTC) FILETIME=[7BF24490:01D0E3F2]

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_976faa26e8302bc2833ac3ac240e7e68"

X-Spam_score: 6.0

X-Spam_score_int: 60

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: New Page 2 Â Customer Support



Content analysis details: (6.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

2.0 MR_BAD_ORGA_1 No description available.

0.0 T_SPF_TEMPERROR SPF: test of record failed (temperror)

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 HTML_MESSAGE BODY: HTML included in message

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool

Subject: {SPAM?} Amazon Case ID-2020-1090-3090

X-Antivirus: AVG (VPS 170928-0, 09/27/2017), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format.



--b1_976faa26e8302bc2833ac3ac240e7e68

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable











New Page 2











=C2=A0























Customer Support













=C2=A0



Dear Customer,

We regularly screen activity in the system.

You received this message due to Invalid information in your Account.

Please update your information promptly so that you can continue to enjoy a=

ll the benefits of your Amazon Account.

If you don't update your information within 24 Hours, Your Account will be =

Iimited.



Case ID-2020-1090-5580

We are sorry for the inconvenience,, But we are working hard to maintain th=

e confidentiality of your information.

Click on the link below and update your information.



Click Here To Update Your Information.



=C2=A0









=C2=A0









We hope to see you again soon.



Amazon.com



























--b1_976faa26e8302bc2833ac3ac240e7e68

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable










252">

New Page 2












=C2=A0
erif; font-size: 12px; font-style: normal; font-variant: normal; font-weigh=

t: normal; letter-spacing: normal; line-height: 16px; orphans: auto; text-a=

lign: start; text-indent: 0px; text-transform: none; white-space: normal; w=

idows: 1; word-spacing: 0px; -webkit-text-stroke-width: 0px; width: 500px; =

color: rgb(51, 51, 51); margin: 0px auto; background-color: rgb(255, 255, 2=

55);">








op; font-size: 13px; line-height: 18px;">






















op; font-size: 13px; line-height: 18px; width: 500px; border-bottom-width: =

1px; border-bottom-style: solid; border-bottom-color: rgb(234, 234, 234); p=

adding: 10px 0px;">


se;">








tical-align: top; font-size: 13px; line-height: 18px;">

3D"Amazon"
class=3D"CToWUd" style=3D"border: 0px; width: 107px; min-height: 31px;">
d>


l, sans-serif; margin: 0px; vertical-align: top; font-size: 13px; line-heig=

ht: 18px;">


font-weight: normal; font-stretch: normal; font-size: 12px; line-height: 16=

px; font-family: Arial, sans-serif;">

Customer Support




op; font-size: 14px; line-height: 18px; width: 500px; padding: 0px;">


font-weight: normal; font-stretch: normal; font-size: 12px; line-height: 16=

px; font-family: Arial, sans-serif;">=C2=A0




>

Dear Customer,


We regularly screen activity in the system.



You received this message due to Invalid information in your Account.
>

Please update your information promptly so that you can continue to enjo=

y all the benefits of your Amazon Account.



If you don't update your information within 24 Hours, Your Account will =

be Iimited.





Case ID-2020-1090-5580



We are sorry for the inconvenience,, But we are working hard to maintain=

the confidentiality of your information.



Click on the link below and update your information.






font-weight: normal; font-stretch: normal; font-size: 12px; line-height: 16=

px; font-family: Arial, sans-serif;">=C2=A0


op; font-size: 13px; line-height: 18px; padding: 10px 0px 0px;">


font-weight: normal; font-stretch: normal; font-size: 18px; line-height: no=

rmal; font-family: Arial, sans-serif; color: rgb(204, 102, 0); border-botto=

m-width: 1px; border-bottom-style: solid; border-bottom-color: rgb(234, 234=

, 234);">

=C2=A0




font-size: 12px; font-style: normal; font-variant: normal; font-weight: nor=

mal; letter-spacing: normal; line-height: 16px; orphans: auto; text-align: =

start; text-indent: 0px; text-transform: none; white-space: normal; widows:=

1; word-spacing: 0px; -webkit-text-stroke-width: 0px; width: 500px; color:=

rgb(51, 51, 51); margin: 0px auto; background-color: rgb(255, 255, 255);">








op; font-size: 13px; line-height: 18px; width: 500px; padding: 10px 20px 10=

px 0px; border-bottom-width: 1px; border-bottom-style: solid; border-bottom=

-color: rgb(234, 234, 234);">


ght: normal; font-stretch: normal; font-size: 14px; line-height: 16px; font=

-family: Arial, sans-serif; padding-bottom: 5px;">

We hope to see you again soon.




Amazon.com



















--b1_976faa26e8302bc2833ac3ac240e7e68--





Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA