Fedex Phish from Rackspace.com
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Apr 2024 07:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rs0YL-000000005bD-3JfT
for dave@doctor.nl2k.ab.ca;
Wed, 03 Apr 2024 07:21:21 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Apr 2024 07:21:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail1.static.mailgun.info ([104.130.122.1]:24033)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rs0KM-000000004MJ-3lpA
for root@nk.ca;
Wed, 03 Apr 2024 07:06:59 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=k-ep.hu; q=dns/txt; s=k1; t=1712149489; x=1712156689;
h=Content-Transfer-Encoding: Content-Type: Message-Id: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=5PvSKKGiyPVo4JLv6XziKnmODFBRFeNUNGZ4q+WFfwU=;
b=plaJroY9lOkrW+qZxvQAh1vajYlA43NG7bvbnhNZzb/WzjOWzX0nX/Y/mntCpEtjtQZUf+1mJf+7F3vhx+uaL+UO2ArzxJYx0pg4LcsvR/EjbBPAPBlOnb3Ii4DcbRYT4/IhNVk81yQSiDhpeit3hnKljJHW4pTLpJTVMjYL9tU=
X-Mailgun-Sending-Ip: 104.130.122.1
X-Mailgun-Sid: WyJjMzRiNCIsInJvb3RAbmsuY2EiLCJlMGQ2NSJd
Received: from ( []) by 035cfbdc42bd with HTTP id
660d53ed07570fdc3e633446; Wed, 03 Apr 2024 13:04:45 GMT
Sender: fed-ex=serviceing.com@k-ep.hu
Date: Wed, 03 Apr 2024 13:04:45 +0000
Mime-Version: 1.0
Subject: Your package is waiting for you!
From: Fedex Delivery
To: root@nk.ca
Message-Id: <20240403130445.ce203f3216babb82@k-ep.hu>
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Antivirus: AVG (VPS 240402-6, 4/2/2024), Inbound message
X-Antivirus-Status: Clean
=3D1.0">
=20
adding: 20px;">
10px;">
Your p =
plWYWj1_D7NDTQstmX_6dFz4pjskVkTRRIRDSFh9aqBIyKhB9kSBHtmBGRgIE_AvDhpCLQR-lBL=
rRENw_XRhjt-7Z2P9x2PoS-Dq8F1FLnK3tyYZ7_Pon99L9ofJ_3b1WlwtTPP3l_D8HM5Kf8BAAD=
__xpiL1M" style=3D"display: inline-block; padding: 10px 20px; background-co=
lor: #007bff; color: #ffffff; text-decoration: none; border-radius: 5px;">C=
lick here to start
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Apr 2024 07:22:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rs0YL-000000005bD-3JfT
for dave@doctor.nl2k.ab.ca;
Wed, 03 Apr 2024 07:21:21 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Apr 2024 07:21:21 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail1.static.mailgun.info ([104.130.122.1]:24033)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rs0KM-000000004MJ-3lpA
for root@nk.ca;
Wed, 03 Apr 2024 07:06:59 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=k-ep.hu; q=dns/txt; s=k1; t=1712149489; x=1712156689;
h=Content-Transfer-Encoding: Content-Type: Message-Id: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=5PvSKKGiyPVo4JLv6XziKnmODFBRFeNUNGZ4q+WFfwU=;
b=plaJroY9lOkrW+qZxvQAh1vajYlA43NG7bvbnhNZzb/WzjOWzX0nX/Y/mntCpEtjtQZUf+1mJf+7F3vhx+uaL+UO2ArzxJYx0pg4LcsvR/EjbBPAPBlOnb3Ii4DcbRYT4/IhNVk81yQSiDhpeit3hnKljJHW4pTLpJTVMjYL9tU=
X-Mailgun-Sending-Ip: 104.130.122.1
X-Mailgun-Sid: WyJjMzRiNCIsInJvb3RAbmsuY2EiLCJlMGQ2NSJd
Received: from
660d53ed07570fdc3e633446; Wed, 03 Apr 2024 13:04:45 GMT
Sender: fed-ex=serviceing.com@k-ep.hu
Date: Wed, 03 Apr 2024 13:04:45 +0000
Mime-Version: 1.0
Subject: Your package is waiting for you!
From: Fedex Delivery
To: root@nk.ca
Message-Id: <20240403130445.ce203f3216babb82@k-ep.hu>
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Antivirus: AVG (VPS 240402-6, 4/2/2024), Inbound message
X-Antivirus-Status: Clean
=3D1.0">
=20
nt-size:48px">Fed
>Ex
1>
adding: 20px;">
10px;">
Your p =
7;ckage is wait=
ing for you!
Your p=
;ackage is wai&#=
116;ing for deli&=
#118;ery fees to &=
#98;e paid. Once&#=
32;your payment&#=
32;is processed&c=
omma; your packag=
01; will be del
=
5;vered to you=
2;in 5 business=
; days or less=
.
Click =
on the follow=
;ing link to c=
heck and pay =
16;he delivery &#=
102;ees:
plWYWj1_D7NDTQstmX_6dFz4pjskVkTRRIRDSFh9aqBIyKhB9kSBHtmBGRgIE_AvDhpCLQR-lBL=
rRENw_XRhjt-7Z2P9x2PoS-Dq8F1FLnK3tyYZ7_Pon99L9ofJ_3b1WlwtTPP3l_D8HM5Kf8BAAD=
__xpiL1M" style=3D"display: inline-block; padding: 10px 20px; background-co=
lor: #007bff; color: #ffffff; text-decoration: none; border-radius: 5px;">C=
lick here to start
If you have&#=
32;any question&#=
115; do not hesi&#=
116;ate to contac=
;t us.
Kind regards&=
comma; Fed
=3D"color:#e67e23">Ex
wEwF0OgyAMAODTyNtI_yjloYeBgnExmYvZ7u83fcHUkpZjRUJpYi0dvkcoFTWuNlsE46waOLCrW=
Vdt6e0EJCDAyCBSciwC3plQRx_DaBM4X-ubj3-6_b6u3ybwOXP0JwAA__-RUh50">
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments