Looyd's bank phish
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 13:18:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtuUp-00000000GzQ-1ezX
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 13:17:35 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 13:17:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps25954.inmotionhosting.com ([104.247.77.47]:46342)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rts5B-00000000KcD-1FTy
for root@nk.ca;
Mon, 08 Apr 2024 10:43:00 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=deepacollege.com; s=default; h=Reply-To:Date:From:To:Subject:MIME-Version:
Content-Type:Sender:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=/2I3LwtbsKmwX6jAZzKYXt4eo5NRbj8vznbf3jZh3A4=; b=DNd1lCd6aFVOV2aJQxi8dShvMO
Pum9GT1JPI0nC0EDX6ONwVKdOTJabur4mnOxdjNTpSCLyHSz/2G2oZj2vcxUJU2ay6qIfH/JdrGHL
iz1SQv8FclTnVVS5adI88ZBysrkG5vhnwK/ClKWvkQiRkd49YevgSmujVJ0fM0m1Jj11YOS3TbPJc
kTWqQSnRAX9+HoL6NeVA5z692jlSgiyfLB8d8fRqpHBs2KUf0DWws0zgTIa7Uo+mi40MewVx6Rm8e
HfLS3GGIrWykbquxV++Hp6Wdq62JikQpc6j7+qI8Uhwuk5oZN3xhxQlj4JiyHDd06uz2SEHySMipT
g/hMAG2Q==;
Received: from [157.254.236.49] (port=59181)
by vps25954.inmotionhosting.com with esmtpa (Exim 4.96.2)
(envelope-from)
id 1rts3B-0006Vt-05;
Mon, 08 Apr 2024 12:40:53 -0400
Content-Type: multipart/alternative; boundary="===============0325503744=="
MIME-Version: 1.0
Subject: 2% Low Interest Rate
To: Recipients
From: "Lloyds Loan & Financial Firm"
Date: Mon, 08 Apr 2024 09:40:42 -0700
Reply-To: info@lyodbk.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps25954.inmotionhosting.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - deepacollege.com
X-Get-Message-Sender-Via: vps25954.inmotionhosting.com: authenticated_id: backup@deepacollege.com
X-Authenticated-Sender: vps25954.inmotionhosting.com: backup@deepacollege.com
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
You will not see this in a MIME-aware mail reader.
--===============0325503744==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Lloyds Loan Firm Affordable loan at 2% low interest rate.. Apply within 24h=
rs to get it processed.
--===============0325503744==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Diso-8859-1"/>Lloyds Loan Firm Affordable loan at 2% low interest =
rate.. Apply within 24hrs to get it processed.
--===============0325503744==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 13:18:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtuUp-00000000GzQ-1ezX
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 13:17:35 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 13:17:35 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from vps25954.inmotionhosting.com ([104.247.77.47]:46342)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rts5B-00000000KcD-1FTy
for root@nk.ca;
Mon, 08 Apr 2024 10:43:00 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=deepacollege.com; s=default; h=Reply-To:Date:From:To:Subject:MIME-Version:
Content-Type:Sender:Message-ID:Cc:Content-Transfer-Encoding:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=/2I3LwtbsKmwX6jAZzKYXt4eo5NRbj8vznbf3jZh3A4=; b=DNd1lCd6aFVOV2aJQxi8dShvMO
Pum9GT1JPI0nC0EDX6ONwVKdOTJabur4mnOxdjNTpSCLyHSz/2G2oZj2vcxUJU2ay6qIfH/JdrGHL
iz1SQv8FclTnVVS5adI88ZBysrkG5vhnwK/ClKWvkQiRkd49YevgSmujVJ0fM0m1Jj11YOS3TbPJc
kTWqQSnRAX9+HoL6NeVA5z692jlSgiyfLB8d8fRqpHBs2KUf0DWws0zgTIa7Uo+mi40MewVx6Rm8e
HfLS3GGIrWykbquxV++Hp6Wdq62JikQpc6j7+qI8Uhwuk5oZN3xhxQlj4JiyHDd06uz2SEHySMipT
g/hMAG2Q==;
Received: from [157.254.236.49] (port=59181)
by vps25954.inmotionhosting.com with esmtpa (Exim 4.96.2)
(envelope-from
id 1rts3B-0006Vt-05;
Mon, 08 Apr 2024 12:40:53 -0400
Content-Type: multipart/alternative; boundary="===============0325503744=="
MIME-Version: 1.0
Subject: 2% Low Interest Rate
To: Recipients
From: "Lloyds Loan & Financial Firm"
Date: Mon, 08 Apr 2024 09:40:42 -0700
Reply-To: info@lyodbk.com
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps25954.inmotionhosting.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - deepacollege.com
X-Get-Message-Sender-Via: vps25954.inmotionhosting.com: authenticated_id: backup@deepacollege.com
X-Authenticated-Sender: vps25954.inmotionhosting.com: backup@deepacollege.com
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
You will not see this in a MIME-aware mail reader.
--===============0325503744==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Lloyds Loan Firm Affordable loan at 2% low interest rate.. Apply within 24h=
rs to get it processed.
--===============0325503744==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Diso-8859-1"/>Lloyds Loan Firm Affordable loan at 2% low interest =
rate.. Apply within 24hrs to get it processed.
--===============0325503744==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments