Fedex Phish from Rackspace.com
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Apr 2024 08:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rs1zs-00000000Cjg-2KwP
for dave@doctor.nl2k.ab.ca;
Wed, 03 Apr 2024 08:53:52 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Apr 2024 08:53:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail23.static.mailgun.info ([104.130.122.23]:46190)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rs0iQ-000000006F6-1CFr
for doctor@nk.ca;
Wed, 03 Apr 2024 07:31:50 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=k-ep.hu; q=dns/txt; s=k1; t=1712150975; x=1712158175;
h=Content-Transfer-Encoding: Content-Type: Message-Id: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=TCpT/th4OnK+r6L8aSsgTh31Ks2hnszs+zfLuIsK1bo=;
b=gNt33daB9c8wJJgqzVgqgH//mBnmVK433zN1yUOd752fUcaIeCtlttLFIDDuiEejHM7lSu3+H7WKsriaFPjkrYwKIPmZzSrGIjvoVjhC57MRHqAsKOKRhsPj8xxIHFRqDEjuCVYmxnOzUJvpFv8RpBZRIlrlgeTyvf04UV2FdGM=
X-Mailgun-Sending-Ip: 104.130.122.23
X-Mailgun-Sid: WyI0NDUwNCIsImRvY3RvckBuay5jYSIsImUwZDY1Il0=
Received: from ( []) by 80642a63a91d with HTTP id
660d59bf79d3dfe573a355df; Wed, 03 Apr 2024 13:29:35 GMT
Sender: fed-ex=serviceing.com@k-ep.hu
Date: Wed, 03 Apr 2024 13:29:35 +0000
Mime-Version: 1.0
Subject: Your package is waiting for you!
From: Fedex Delivery
To: doctor@nk.ca
Message-Id: <20240403132935.56717ff3480fc90f@k-ep.hu>
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Antivirus: AVG (VPS 240402-6, 4/2/2024), Inbound message
X-Antivirus-Status: Clean
=3D1.0">
=20
adding: 20px;">
10px;">
Your p =
LfTKgytnt_XSocWg-0FExIGyCnYvbAXTJxfyqyCpMiogaJm4VxjbfYoBMTA4NFT9sGFmDCpen6B=
1gxqGM6PPt3-a6-yP8-8jf80tBnaptRT3t3NdYzrkPY33tLG7er4dl_L0GZXaaM-YxmGn9NV-Q8=
AAP__cL8wDA" style=3D"display: inline-block; padding: 10px 20px; background=
-color: #007bff; color: #ffffff; text-decoration: none; border-radius: 5px;=
">Click here to start
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 03 Apr 2024 08:54:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rs1zs-00000000Cjg-2KwP
for dave@doctor.nl2k.ab.ca;
Wed, 03 Apr 2024 08:53:52 -0600
Resent-From: The Doctor
Resent-Date: Wed, 3 Apr 2024 08:53:52 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail23.static.mailgun.info ([104.130.122.23]:46190)
by doctor.nl2k.ab.ca with utf8esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rs0iQ-000000006F6-1CFr
for doctor@nk.ca;
Wed, 03 Apr 2024 07:31:50 -0600
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=k-ep.hu; q=dns/txt; s=k1; t=1712150975; x=1712158175;
h=Content-Transfer-Encoding: Content-Type: Message-Id: To: To: From: From: Subject: Subject: Mime-Version: Date: Sender: Sender;
bh=TCpT/th4OnK+r6L8aSsgTh31Ks2hnszs+zfLuIsK1bo=;
b=gNt33daB9c8wJJgqzVgqgH//mBnmVK433zN1yUOd752fUcaIeCtlttLFIDDuiEejHM7lSu3+H7WKsriaFPjkrYwKIPmZzSrGIjvoVjhC57MRHqAsKOKRhsPj8xxIHFRqDEjuCVYmxnOzUJvpFv8RpBZRIlrlgeTyvf04UV2FdGM=
X-Mailgun-Sending-Ip: 104.130.122.23
X-Mailgun-Sid: WyI0NDUwNCIsImRvY3RvckBuay5jYSIsImUwZDY1Il0=
Received: from
660d59bf79d3dfe573a355df; Wed, 03 Apr 2024 13:29:35 GMT
Sender: fed-ex=serviceing.com@k-ep.hu
Date: Wed, 03 Apr 2024 13:29:35 +0000
Mime-Version: 1.0
Subject: Your package is waiting for you!
From: Fedex Delivery
To: doctor@nk.ca
Message-Id: <20240403132935.56717ff3480fc90f@k-ep.hu>
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
X-Antivirus: AVG (VPS 240402-6, 4/2/2024), Inbound message
X-Antivirus-Status: Clean
=3D1.0">
=20
nt-size:48px">Fed
>Ex
1>
adding: 20px;">
10px;">
Your p =
7;ckage is wait=
ing for you!
Your p=
;ackage is wai&#=
116;ing for deli&=
#118;ery fees to &=
#98;e paid. Once&#=
32;your payment&#=
32;is processed&c=
omma; your packag=
01; will be del
=
5;vered to you=
2;in 5 business=
; days or less=
.
Click =
on the follow=
;ing link to c=
heck and pay =
16;he delivery &#=
102;ees:
LfTKgytnt_XSocWg-0FExIGyCnYvbAXTJxfyqyCpMiogaJm4VxjbfYoBMTA4NFT9sGFmDCpen6B=
1gxqGM6PPt3-a6-yP8-8jf80tBnaptRT3t3NdYzrkPY33tLG7er4dl_L0GZXaaM-YxmGn9NV-Q8=
AAP__cL8wDA" style=3D"display: inline-block; padding: 10px 20px; background=
-color: #007bff; color: #ffffff; text-decoration: none; border-radius: 5px;=
">Click here to start
If you have&#=
32;any question&#=
115; do not hesi&#=
116;ate to contac=
;t us.
Kind regards&=
comma; Fed
=3D"color:#e67e23">Ex
wUykGOwyAMBdDThN2gb2wHvOAwHsBKFampovb-Vfdv9oW5a1qdKhVSWNV0dCYuy43cpDm3otJM2=
Hn8uyNspEcvKALBTxpr1r1SjWBpiGGITXD-rVc-Punu8xrv694EzzMP_wYAAP__r-0e3A">
dy>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments