OAS Phish from Amazon
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 31 Oct 2023 14:24:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from)
id 1qxvH6-000NX2-1h
for dave@doctor.nl2k.ab.ca;
Tue, 31 Oct 2023 14:23:44 -0600
Resent-From: The Doctor
Resent-Date: Tue, 31 Oct 2023 14:23:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a48-175.smtp-out.amazonses.com ([54.240.48.175]:44153)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@amazonses.com>)
id 1qxtde-000JLy-2u
for doctor@nk.ca;
Tue, 31 Oct 2023 12:38:59 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1698777410;
h=Content-Type:MIME-Version:From:Subject:Message-ID:To:Content-Transfer-Encoding:Date:Feedback-ID;
bh=zHCpboMjSsbxicUphf44f1kW6XzzhrCBu+MNRiF3rrU=;
b=VdX48ZRepEos4Hqzzth6lpbJtV0uAYjibtpmW7l5S4lb2N5hi6U+WwMXO3b53mhK
mX/mYyPQt8zN2SBOu9RRFR8JT4Lar+pjSwukaPEGSvXPwDVootWOYElkGFSvNPvqcv9
lmW1Vm7lBGHV7SbT/8OI4kWRmX/cmxkwhTG7pYG4=
Content-Type: multipart/mixed; boundary="===============8014335163118823795=="
MIME-Version: 1.0
From: "memberassistance@oas.ca"
Subject: Your OAS Benefits Update 2023
Importance: high
Message-ID: <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@email.amazonses.com>
To: doctor@nk.ca
X-PHISHTEST: KnowBe4
Content-Transfer-Encoding: base64
Date: Tue, 31 Oct 2023 18:36:50 +0000
Feedback-ID: 1.us-east-1.akDDQhhOyUneCBNoGb8owVGR9BZM3ROxnFS7vS4KThs=:AmazonSES
X-SES-Outgoing: 2023.10.31-54.240.48.175
X-Antivirus: AVG (VPS 231031-10, 10/31/2023), Inbound message
X-Antivirus-Status: Clean
--===============8014335163118823795==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============8014335163118823795==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 31 Oct 2023 14:24:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96.2 (FreeBSD))
(envelope-from
id 1qxvH6-000NX2-1h
for dave@doctor.nl2k.ab.ca;
Tue, 31 Oct 2023 14:23:44 -0600
Resent-From: The Doctor
Resent-Date: Tue, 31 Oct 2023 14:23:44 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from a48-175.smtp-out.amazonses.com ([54.240.48.175]:44153)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
(Exim 4.96.2 (FreeBSD))
(envelope-from <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@amazonses.com>)
id 1qxtde-000JLy-2u
for doctor@nk.ca;
Tue, 31 Oct 2023 12:38:59 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/simple;
s=224i4yxa5dv7c2xz3womw6peuasteono; d=amazonses.com; t=1698777410;
h=Content-Type:MIME-Version:From:Subject:Message-ID:To:Content-Transfer-Encoding:Date:Feedback-ID;
bh=zHCpboMjSsbxicUphf44f1kW6XzzhrCBu+MNRiF3rrU=;
b=VdX48ZRepEos4Hqzzth6lpbJtV0uAYjibtpmW7l5S4lb2N5hi6U+WwMXO3b53mhK
mX/mYyPQt8zN2SBOu9RRFR8JT4Lar+pjSwukaPEGSvXPwDVootWOYElkGFSvNPvqcv9
lmW1Vm7lBGHV7SbT/8OI4kWRmX/cmxkwhTG7pYG4=
Content-Type: multipart/mixed; boundary="===============8014335163118823795=="
MIME-Version: 1.0
From: "memberassistance@oas.ca"
Subject: Your OAS Benefits Update 2023
Importance: high
Message-ID: <0100018b87062a58-07195999-58fd-439b-b00c-d0fe9be75ec8-000000@email.amazonses.com>
To: doctor@nk.ca
X-PHISHTEST: KnowBe4
Content-Transfer-Encoding: base64
Date: Tue, 31 Oct 2023 18:36:50 +0000
Feedback-ID: 1.us-east-1.akDDQhhOyUneCBNoGb8owVGR9BZM3ROxnFS7vS4KThs=:AmazonSES
X-SES-Outgoing: 2023.10.31-54.240.48.175
X-Antivirus: AVG (VPS 231031-10, 10/31/2023), Inbound message
X-Antivirus-Status: Clean
--===============8014335163118823795==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============8014335163118823795==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments