fedex phish

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 21 Jan 2023 15:32:43 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pJM5k-0000kE-2R

for dave@doctor.nl2k.ab.ca;

Sat, 21 Jan 2023 15:12:04 -0700

Resent-From: The Doctor

Resent-Date: Sat, 21 Jan 2023 15:12:04 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from vps-216716.fycdigital.com ([162.214.116.106]:34772)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.96)

(envelope-from )

id 1pJFSc-000KnK-0D

for www@nl2k.ab.ca;

Sat, 21 Jan 2023 08:07:22 -0700

DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ney.com.mx;

s=default; h=Content-Type:MIME-Version:Message-ID:From:Date:Subject:To:Sender

:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:

Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:

In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:

List-Post:List-Owner:List-Archive;

bh=6+vsCTVqumsAqLer/9P8gE0rvx8j/cVeqgYhYVk5XSY=; b=FEP2EGpWCHsbOs+I5bVKg1PPjg

k7TeDuC2Yx+j10N7/p8h2eUjPsNMgTW5uMBDfBRysN2730CKFhS2NEO+grOkwmVUlMkMynla/satI

kNRUWp7dL4clT1rkbpo4Ge6QXoNIaBnzXm7txUmoAj3BEsg+7BPr8Q8giawxjN5uBJ2M8nsCZ2Lc5

hMWoGF/50y+/j4uTIUzwecPE7JrVoSuD16fZlXfWccIJdn7xw8ojaJRMReMu82lrF3uxNI+np58aH

oV7jiLEHkOhn4M9l8kTwI8O1DWxurTrIY1P08kwTCJcUQ1/J2b3vLZ+vN38NkQk2dV6b4vqmDcnRk

hu8Un8Nw==;

Received: from neycom by vps-216716.fycdigital.com with local (Exim 4.95)

(envelope-from )

id 1pJFQB-0000H8-Pp

for www@nl2k.ab.ca;

Sat, 21 Jan 2023 09:04:43 -0600

To: www@nl2k.ab.ca

Subject: Action Required: Your package is on hold

X-PHP-Script: ney.com.mx/wp-content/2Tjd7t53LFi.php for 67.68.160.117

X-PHP-Originating-Script: 1054:2Tjd7t53LFi.php

Date: Sat, 21 Jan 2023 15:04:43 +0000

From: =?UTF-8?Q?FedEx_Express=C2=AE?=

Message-ID:

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="b1_a2d2a4fef180f9190bdea1a5db0c710b"

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - vps-216716.fycdigital.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [1054 991] / [47 12]

X-AntiAbuse: Sender Address Domain - ney.com.mx

X-Get-Message-Sender-Via: vps-216716.fycdigital.com: authenticated_id: neycom/from_h

X-Authenticated-Sender: vps-216716.fycdigital.com: www@ney.com.mx

X-Source:

X-Source-Args: php-fpm: pool ney_com_mx

X-Source-Dir: ney.com.mx:/public_html/wp-content



This is a multi-part message in MIME format.



--b1_a2d2a4fef180f9190bdea1a5db0c710b

Content-Type: text/plain; charset=UTF-8

Content-Transfer-Encoding: base64



RGVhciBWYWx1ZWQgQ3VzdG9tZXIsV2UgaG9wZSB0aGlzIGVtYWlsIGZpbmRzIHlvdSB3ZWxsLiBX

ZSB3YW50ZWQgdG8gaW5mb3JtIHlvdSB0aGF0IHlvdXIgcGVuZGluZyBzaGlwbWVudCB3aXRoIHRy

YWNraW5nIG51bWJlciA3NzI5OE83MjQyODkgaGFzIG91dHN0YW5kaW5nIGNoYXJnZXMgZHVlIGlu

Y2x1ZGluZyBEdXR5ICYgVGF4LldlIGFwb2xvZ2l6ZSBmb3IgYW55IGluY29udmVuaWVuY2UgdGhp

cyBtYXkgY2F1c2UuIFBsZWFzZSBiZSBhZHZpc2VkIHRoYXQgdGhlc2UgY2hhcmdlcyBtdXN0IGJl

IHBhaWQgYmVmb3JlIHRoZSBzaGlwbWVudCBjYW4gYmUgcmVsZWFzZWQgYW5kIGRlbGl2ZXJlZCB0

byB5b3UuVG8gcGF5LCB2aWV3IHRoZSBjYWxjdWxhdGlvbiBhbmQgZG93bmxvYWQgdGhlIHJlbGV2

YW50IGRvY3VtZW50czpUUkFDSyBQQUNLQUdFwqBUaGFuayB5b3UgZm9yIHlvdXIgY29udGludWVk

IGJ1c2luZXNzLkJlc3QgcmVnYXJkcyxDdXN0b21lciBTZXJ2aWNlIFRlYW0=





--b1_a2d2a4fef180f9190bdea1a5db0c710b

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: base64



PHRhYmxlIGFsaWduPSJjZW50ZXIiIGJvcmRlcj0iMCIgY2VsbHBhZGRpbmc9IjAiIGNlbGxzcGFj

aW5nPSIwIiByb2xlPSJwcmVzZW50YXRpb24iIHN0eWxlPSJib3JkZXItY29sbGFwc2U6IGNvbGxh

cHNlOyBmb250LWZhbWlseTogVGltZXM7IGJhY2tncm91bmQtaW1hZ2U6IGluaXRpYWw7IGJhY2tn

cm91bmQtcG9zaXRpb246IGluaXRpYWw7IGJhY2tncm91bmQtc2l6ZTogaW5pdGlhbDsgYmFja2dy

b3VuZC1yZXBlYXQ6IGluaXRpYWw7IGJhY2tncm91bmQtYXR0YWNobWVudDogaW5pdGlhbDsgYmFj

a2dyb3VuZC1vcmlnaW46IGluaXRpYWw7IGJhY2tncm91bmQtY2xpcDogaW5pdGlhbDsgZm9udC1z

aXplOiAwcHg7IHdpZHRoOiA2MDBweDsiPjx0Ym9keSBzdHlsZT0iYm94LXNpemluZzogYm9yZGVy

LWJveDsiPjx0ciBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsiPjx0ZCBzdHlsZT0iYm94

LXNpemluZzogYm9yZGVyLWJveDsgYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBzZTsgdGV4dC1hbGln

bjogY2VudGVyOyB2ZXJ0aWNhbC1hbGlnbjogdG9wOyBib3JkZXI6IDBweCBzb2xpZCByZ2IoMjMz

LCAyMzMsIDIzMyk7IGRpcmVjdGlvbjogbHRyOyBwYWRkaW5nOiAwcHg7Ij48ZGl2IHN0eWxlPSJi

b3gtc2l6aW5nOiBib3JkZXItYm94OyBtYXJnaW46IDBweDsiPjxkaXYgY2xhc3M9ImZkLXRleHQi

IHN0eWxlPSJib3gtc2l6aW5nOiBib3JkZXItYm94OyBtYXJnaW46IDBweCBhdXRvOyBtYXgtd2lk

dGg6IDYwMHB4OyBvdmVyZmxvdzogaGlkZGVuOyBiYWNrZ3JvdW5kOiB0cmFuc3BhcmVudDsiPjx0

YWJsZSBhbGlnbj0iY2VudGVyIiBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2lu

Zz0iMCIgcm9sZT0icHJlc2VudGF0aW9uIiBzdHlsZT0iYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBz

ZTsgd2lkdGg6IDYwMHB4OyBiYWNrZ3JvdW5kOiB0cmFuc3BhcmVudDsiPjx0Ym9keSBzdHlsZT0i

Ym94LXNpemluZzogYm9yZGVyLWJveDsiPjx0ciBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJv

eDsiPjx0ZCBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgYm9yZGVyLWNvbGxhcHNlOiBj

b2xsYXBzZTsgdmVydGljYWwtYWxpZ246IHRvcDsgZGlyZWN0aW9uOiBsdHI7IHBhZGRpbmc6IDBw

eDsiPjxkaXYgc3R5bGU9ImJveC1zaXppbmc6IGJvcmRlci1ib3g7IG1hcmdpbjogMHB4OyI+PGRp

diBjbGFzcz0ibWotY29sdW1uIG1qLWNvbHVtbi1wZXItMTAwIG91dGxvb2stZ3JvdXAtZml4IiBz

dHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgd2lkdGg6IDYwMHB4OyB2ZXJ0aWNhbC1hbGln

bjogdG9wOyBkaXNwbGF5OiBpbmxpbmUtYmxvY2s7IGRpcmVjdGlvbjogbHRyOyBmb250LXNpemU6

IDEzcHg7IHRleHQtYWxpZ246IGxlZnQ7Ij48ZGl2IGNsYXNzPSJtai1jb2x1bW4tcGFkZGluZyBt

ai1jb2x1bW4tcGFkZGluZy0tdG9wLTAgbWotY29sdW1uLXBhZGRpbmctLWJvdHRvbS0wIG1qLWNv

bHVtbi1wYWRkaW5nLS1sZWZ0LTAgbWotY29sdW1uLXBhZGRpbmctLXJpZ2h0LTAiIHN0eWxlPSJi

b3gtc2l6aW5nOiBib3JkZXItYm94OyBwYWRkaW5nOiAwcHg7Ij48ZGl2IHN0eWxlPSJib3gtc2l6

aW5nOiBib3JkZXItYm94OyBvdmVyZmxvdzogaGlkZGVuOyI+PHRhYmxlIGJvcmRlcj0iMCIgY2Vs

bHBhZGRpbmc9IjAiIHJvbGU9InByZXNlbnRhdGlvbiIgc3R5bGU9ImJvcmRlci1jb2xsYXBzZTog

Y29sbGFwc2U7IHZlcnRpY2FsLWFsaWduOiB0b3A7IHRhYmxlLWxheW91dDogZml4ZWQ7IG1heC13

aWR0aDogMTAwJTsgd2lkdGg6IDYwMHB4OyI+PHRib2R5IHN0eWxlPSJib3gtc2l6aW5nOiBib3Jk

ZXItYm94OyI+PHRyIHN0eWxlPSJib3gtc2l6aW5nOiBib3JkZXItYm94OyI+PHRkIGFsaWduPSJs

ZWZ0IiBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsgYm9yZGVyLWNvbGxhcHNlOiBjb2xs

YXBzZTsgb3ZlcmZsb3ctd3JhcDogYnJlYWstd29yZDsgZm9udC1zaXplOiAwcHg7IHBhZGRpbmc6

IDEwcHggNTBweDsiPjxkaXYgc3R5bGU9ImJveC1zaXppbmc6IGJvcmRlci1ib3g7IGN1cnNvcjog

YXV0bzsgZm9udC1mYW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6

ZTogMTZweDsgbGluZS1oZWlnaHQ6IDEuOTsgbGV0dGVyLXNwYWNpbmc6IDBweDsiPjxkaXYgZGF0

YS1wYXJhZ3JhcGg9InRydWUiIHN0eWxlPSJib3gtc2l6aW5nOiBib3JkZXItYm94OyI+PHA+PGlt

ZyBhbHQ9IiAiIHNyYz0iaHR0cHM6Ly9pLmliYi5jby9QVExzTE5IL2RlemZkZS5wbmciIHN0eWxl

PSJvcGFjaXR5OiAwLjk7IGZvbnQtZmFtaWx5OiBUaW1lczsgdGV4dC1hbGlnbjogY2VudGVyOyBi

b3gtc2l6aW5nOiBib3JkZXItYm94OyBib3JkZXI6IG5vbmU7IGhlaWdodDogYXV0bzsgbGluZS1o

ZWlnaHQ6IDEzcHg7IG91dGxpbmU6IG5vbmU7IGJvcmRlci1yYWRpdXM6IDBweDsgZGlzcGxheTog

YmxvY2s7IHdpZHRoOiAxMDBweDsgbWF4LXdpZHRoOiAxMDAlOyIgLz48YnIgLz5EZWFyIFZhbHVl

ZCBDdXN0b21lciw8L3A+PHA+V2UgaG9wZSB0aGlzIGVtYWlsIGZpbmRzIHlvdSB3ZWxsLiBXZSB3

YW50ZWQgdG8gaW5mb3JtIHlvdSB0aGF0IHlvdXIgcGVuZGluZyBzaGlwbWVudCB3aXRoIHRyYWNr

aW5nIG51bWJlciA8c3Ryb25nPjc3Mjk4TzcyNDI4OTwvc3Ryb25nPiBoYXMgb3V0c3RhbmRpbmcg

Y2hhcmdlcyBkdWUgaW5jbHVkaW5nIER1dHkgJiBUYXguPC9wPjxwPldlIGFwb2xvZ2l6ZSBmb3Ig

YW55IGluY29udmVuaWVuY2UgdGhpcyBtYXkgY2F1c2UuIFBsZWFzZSBiZSBhZHZpc2VkIHRoYXQg

dGhlc2UgY2hhcmdlcyBtdXN0IGJlIHBhaWQgYmVmb3JlIHRoZSBzaGlwbWVudCBjYW4gYmUgcmVs

ZWFzZWQgYW5kIGRlbGl2ZXJlZCB0byB5b3UuPC9wPjxwPlRvIHBheSwgdmlldyB0aGUgY2FsY3Vs

YXRpb24gYW5kIGRvd25sb2FkIHRoZSByZWxldmFudCBkb2N1bWVudHM6PC9wPjx0YWJsZSBhbGln

bj0iY2VudGVyIiBib3JkZXI9IjAiIGNlbGxwYWRkaW5nPSIwIiBjZWxsc3BhY2luZz0iMCIgcm9s

ZT0icHJlc2VudGF0aW9uIiBzdHlsZT0iZm9udC1mYW1pbHk6IFRpbWVzOyBmb250LXNpemU6IDBw

eDsiPjx0Ym9keSBzdHlsZT0iYm94LXNpemluZzogYm9yZGVyLWJveDsiPjx0ciBzdHlsZT0iYm94

LXNpemluZzogYm9yZGVyLWJveDsiPjx0ZCBhbGlnbj0iY2VudGVyIiBzdHlsZT0iYm94LXNpemlu

ZzogYm9yZGVyLWJveDsgYm9yZGVyLWNvbGxhcHNlOiBjb2xsYXBzZTsgYm9yZGVyLXJhZGl1czog

MjJweDsgY29sb3I6IHJnYigyNTUsIDEwMiwgMCk7IGN1cnNvcjogYXV0bzsgdGV4dC1hbGlnbjog

Y2VudGVyOyBsZXR0ZXItc3BhY2luZzogMnB4OyBiYWNrZ3JvdW5kOiByZ2IoNzcsIDIwLCAxNDAp

OyIgdmFsaWduPSJtaWRkbGUiPjxhIGhyZWY9Imh0dHBzOi8venByLmlvL2hma1NTOEtpNHlaTCIg

cm9sZT0iYnV0dG9uIiBzdHlsZT0iY29sb3I6IHJnYigyNTUsIDEwMiwgMCk7IGJveC1zaXppbmc6

IGJvcmRlci1ib3g7IHRleHQtZGVjb3JhdGlvbi1saW5lOiBub25lOyBkaXNwbGF5OiBibG9jazsg

Zm9udC1mYW1pbHk6IEFyaWFsLCBIZWx2ZXRpY2EsIHNhbnMtc2VyaWY7IGZvbnQtc2l6ZTogMTZw

eDsgZm9udC13ZWlnaHQ6IDcwMDsgbGluZS1oZWlnaHQ6IDE2cHg7IHRleHQtdHJhbnNmb3JtOiB1

cHBlcmNhc2U7IG1hcmdpbjogMHB4OyBwYWRkaW5nOiAxNHB4IDY5cHg7IGJvcmRlcjogM3B4IHNv

bGlkIHJnYigyNTUsIDEwMiwgMCk7IGJvcmRlci1yYWRpdXM6IDIycHg7IiB0YXJnZXQ9Il9ibGFu

ayI+VFJBQ0sgUEFDS0FHRTwvYT48L3RkPjwvdHI+PC90Ym9keT48L3RhYmxlPjxwPsKgPC9wPjxw

PlRoYW5rIHlvdSBmb3IgeW91ciBjb250aW51ZWQgYnVzaW5lc3MuPC9wPjxwPjxzcGFuIHN0eWxl

PSJsZXR0ZXItc3BhY2luZzogMHB4OyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVudDsiPkJl

c3QgcmVnYXJkcyw8L3NwYW4+PC9wPjxwPjxzcGFuIHN0eWxlPSJsZXR0ZXItc3BhY2luZzogMHB4

OyBiYWNrZ3JvdW5kLWNvbG9yOiB0cmFuc3BhcmVudDsiPkN1c3RvbWVyIFNlcnZpY2UgVGVhbTwv

c3Bhbj48L3A+PC9kaXY+PC9kaXY+PC90ZD48L3RyPjwvdGJvZHk+PC90YWJsZT48L2Rpdj48L2Rp

dj48L2Rpdj48L2Rpdj48L3RkPjwvdHI+PC90Ym9keT48L3RhYmxlPjwvZGl2PjwvZGl2PjwvdGQ+

PC90cj48L3Rib2R5PjwvdGFibGU+







--b1_a2d2a4fef180f9190bdea1a5db0c710b--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA