Canada Revenue Agency Phish

From - Mon Mar 17 09:15:17 2014

X-Account-Key: account2

X-UIDL: 000572ce501fb806

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-path:

Envelope-to: aboo@doctor.nl2k.ab.ca

Delivery-date: Mon, 17 Mar 2014 09:15:14 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)

(envelope-from )

id 1WPYRw-0004TS-Py

for aboo@doctor.nl2k.ab.ca; Mon, 17 Mar 2014 08:23:33 -0600

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Mon, 17 Mar 2014 08:23:32 -0600

Resent-Message-ID: <20140317142332.GE12542@doctor.nl2k.ab.ca>

Resent-To: See root

Received: from [198.87.129.12] (helo=www.miselu.com)

by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)

(Exim 4.82)

(envelope-from )

id 1WPXzS-0002XC-E0

for root@doctor.nl2k.ab.ca; Mon, 17 Mar 2014 07:54:39 -0600

Received: from www.miselu.com (www.miselu.com [127.0.0.1])

by www.miselu.com (8.13.8/8.13.8-) with ESMTP id s2HCxuMm024175

for ; Mon, 17 Mar 2014 05:59:56 -0700

Received: (from root@localhost)

by www.miselu.com (8.13.8/8.13.8/Submit) id s2HCxu7c024172;

Mon, 17 Mar 2014 05:59:56 -0700

Date: Mon, 17 Mar 2014 05:59:56 -0700

Message-Id: <201403171259.s2HCxu7c024172@www.miselu.com>

To: root@doctor.nl2k.ab.ca

Subject: Your tax refund online

From: Canada Revenue Agency

Content-Type: text/html

X-Spam_score: 7.0

X-Spam_score_int: 70

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Claim Your Tax Refund Online We identified an error in the

calculation of your tax from the last payment, amounting to a 733,17$. In

order for us to return the excess payment, you need to create a Tax Gateway

account after which the funds will be credited to your specified bank account.

[...]



Content analysis details: (7.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 TVD_PH_BODY_ACCOUNTS_PRE BODY: TVD_PH_BODY_ACCOUNTS_PRE

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME

headers

1.1 TO_NO_BRKTS_NORDNS_HTML To: misformatted and no rDNS and HTML only

Subject: {SPAM?} Your tax refund online
































cellPadding="10"

width="575" summary="layout" borderColorLight="#307D7E" border="1">












color="#307D7E">


Claim Your Tax Refund Online





We identified an error in the calculation of your tax from the

last payment, amounting
to a 733,17$. In order for us to return the

excess payment, you need to create a Tax Gateway account after which the

funds will be credited to your specified bank account.

Please

click "Get Started" below to claim your refund:




size="2" color="#307D7E">





Get

Started





We are here to ensure

the correct tax is paid at the right time, whether this relates to

payment of taxes received by the department or entitlement to benefits

paid.

























Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA