Phish targeting Belfius customers
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 03 Feb 2023 08:10:14 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1pNxgy-0002gS-3A
for dave@doctor.nl2k.ab.ca;
Fri, 03 Feb 2023 08:09:32 -0700
Resent-From: The Doctor
Resent-Date: Fri, 3 Feb 2023 08:09:32 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [161.35.207.21] (port=39646 helo=florajet.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.96)
(envelope-from
id 1pNv8x-000Jvz-06
for doctor@doctor.nl2k.ab.ca;
Fri, 03 Feb 2023 05:26:21 -0700
Received: by florajet.com (Postfix, from userid 33)
id 01F713F9D9; Fri, 3 Feb 2023 12:23:49 +0000 (UTC)
To: doctor@doctor.nl2k.ab.ca
Subject: =?UTF-8?Q?Votre_conseiller_vous_a_adress=C3=A9_un_message.?=
X-PHP-Originating-Script: 0:c.php
Date: Fri, 3 Feb 2023 12:23:33 +0000
From: Belfius
Message-ID:
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="10d20bff6f7039bd77f1b39931bcd3a0c"
Content-Transfer-Encoding: 8bit
X-Spam_score: 5.8
X-Spam_score_int: 58
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Chèr(e) client(e), Votre conseiller vous a adressé un nouveau
message important concernant la mise à jour de sécurité , pour le consulter
veuillez cliquer sur le lien çi-dessous: Espace client
Content analysis details: (5.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: plesk.page]
1.9 URIBL_ABUSE_SURBL Contains an URL listed in the ABUSE SURBL blocklist
[URI: belgium-mobilebelfiusbe.23-26-193-71.plesk.page]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=noreply%40florajet.com;ip=161.35.207.21;r=doctor.nl2k.ab.ca]
0.0 SPF_HELO_FAIL SPF: HELO does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=helo;id=florajet.com;ip=161.35.207.21;r=doctor.nl2k.ab.ca]
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
domains are different
0.0 HTML_MESSAGE BODY: HTML included in message
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} =?UTF-8?Q?Votre_conseiller_vous_a_adress=C3=A9_un_message.?=
This is a multi-part message in MIME format.
--10d20bff6f7039bd77f1b39931bcd3a0c
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
Chèr(e) client(e),
Votre conseiller vous a adressé un nouveau message important concernant la mise à jour de sécurité ,
pour le consulter veuillez cliquer sur le lien çi-dessous:
Espace client
Cordialement.
Â
--10d20bff6f7039bd77f1b39931bcd3a0c
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
AAoCAYAAABJoOC5AAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAA=
AOpgAAA6mAAAF3CculE8AAAABmJLR0QA/wD/AP+gvaeTAAAAB3RJTUUH5wENDSMByemkUwAAEbB=
JREFUeNrtnX2UlNV9xz93ZnhflIAVQQUVTAFZGo01CoOKGGUhevBUTVohSdMaPabHatq0MU0b29=
TUnibtaZO22uTY9CVoRE+0VlaCGgK7tTWoObsQCWIEswryKsrKy87s7R/f+8w8c+fOzDOzwy7k5=
HvOnp15nvvcl9/93d/ze7t3zMNMJwYDzALmATOAk4BUhT/j/vA+R7DuL/rcH/jLA+8CPwU6gU3u=
OgA3spVaaM22RR9TwIeALDDB62O8b1G/8sB+4DXX7lbgSJwU3R2rarbfbMTGMxy4BrgC2AusADY=
DdHe0J3keYApwI3AtcB4wzo37LeB/gf8A2oE+AGMKZJoJLEPz/wywCjgK0LV+8GnSDGRin88A7g=
CuB0737h1r5IE3gUeBvwNeB3iY6bWZ3RAtp+uArwOnUb7oKsGiCdwN/Agx0yrgPbC0ZtuqMtUxx=
nJHi7Hu+0LgNyPahBBj8jRwA/DHQKv7HiGF5vp64Crgn4Ava8zg7n0TCTuATwB/BNw3VIRoBlLu=
/zS0uv8AmMrgMjloIs5EC+07wPsTPykmHw78NjCJ5EyOKzsCTe51wH8C3wZ+NbrpScjBwijgJop=
MDjAX+HClBzwmvwP4FvABSpncx0nAHyKpH+FqikyO68NyoGUoCNEspNwAvgJcPtSdccgCf+X6ha=
daVcIYYHIT2h6BJOEK4AOR3nXe3I8MNg2GU8rkEU6r9IAtflwK3O1okgQZYBFFoXduoMxJwMjBJ=
kIzkUL62zVD3REPH0Gv1XrGka6jfC1cgNSg0wFSqfxQ0yNC8G3VemlbdGMCktD1St/YOmFE4H4f=
Ui9PWGSQ3jdqqDviITLEvkfpJNSLg8jQzRPX5rUwRiDGmEh4kWSBO5F+2j/jwqVs3vDYUNMlrJY=
VzHeyaJH6OAQ8jYzZU4GLkHqYRs6Ax2O19ASe30VRhz8hkQE+ONSdqIDZ6JV5YAB1fBfZHZZSRj=
du7OMRc9yKJt/HcuBB4IVhI4/UbGwQUMv+uBgJCR/fAP4UOGLBGKl5lyLb7EVgTazsGmTwTvGuH=
RcEaBQZJNWOR4xDeuZAGP2tGs/vBV5BE/l1pN/GcSoy1F4YamI4mBr3pgSuvw78C45RjRb7G2gB=
lyFvbFfamluA30WCoAN4YKgHPlBkGHwPS1KkGbjeXRhbyE0Y81T0IBVlFuUenyvRhO8baoLUQKS=
O+XgJ2A6AsXSvf4rZ8xbrq7FaORa6OtuZM38xaWsAnkKqTgbs4Wh9dXc8NdRjLGD2/DY3pOhlXT=
2+cLwyebNQVb/v7miPM/srwGOI4eM4BzibKozeiAsygX++qpoSaDMP9AaKvoELCGGNe65IFhtrq=
Wv9qni9OfdXKG9t0RhozbaBsWDLu1lrbLOzizAVhxcO1JWN1xbLB8sY6F5f7EemFkFPcNQ0ZD1m=
fwkZZalYkRbkfSlTX+Zk2/wGhiP33BzgLOSSOwhsAzYCr+IijK3ZNoyxdK2vS0qa6NkYTnZ9PMm=
16eNcFOU+6tGlD9gDHPbrNONHY/e9NxE5KXZGZWbPu4qNnd+nNdtGfx5SaQNyg05EKuLuqK5qzB=
5j8ox7FqRm5sAyZ97VdHWuRm22YUo5dBR668524z3Z9W8rCvptAfLY0n7UI9HfQFLvPcrD+/H/h=
QmhPAQ/CknIqUkndZBxhPLFkSLglWotZfIMsAC4GRl5v0LpYskjz0Un0nefBvqsk7ABpkgy9jQK=
09+KbImRhP3sC4Bn0QKOj+0o8sLcC6yP12v3vXcrcBti4udQhHWbMUVNMqWPF6EYzCzE5PfmjX0=
wbSt3P7agJiB//2L3/RngS8AOa1J+WdwcXAt8ErjQPe+nduxAKQ3/iIRWgb5JJfp/u8G+5iYtIC=
lN7FpwpMZNzunAnwO/laDdgTJ7qs7yUyi3C3LIBVdAa3ZxnASnAF8AfgdJ1RDSKGp7PQrO/DsKu=
+9UfQ2lGsxFKQLvq1Eu49oO4RzEMEuQYQ7w665vUb1nAm+ST99JusSVPhox6kL3fRLwlbQ1G5BA=
rIXlwO95fekB/gLgvEuujpc9A7gH+ChhOwTEK5PdPFzlxvCvQK4125aIEXqBvwV+gvyxR9Frz/9=
zOp3NVbh/1D2/FfhqjLBDipjUGEk4xH6AsvySApNPQh6NO6nM5D5akLT8FprARnEhtZk8CaZTGl=
X+UKDei0nn/UjtqUh9iOMMpCbVQprSNIMIc9w9UukCa56K8mw+TmUm93Em8PfItZyBZKpLL3olA=
MkyCithJdNwdv5u4B2OvWuzIIJas0vcp8hK7/fL3oQyBX1sQjq2q6ewMMYAf41yZBrBEvf8LcDB=
hFI9/ibd0yQaHaY0GBRasKOBYd61DOVvvyh3qBYyhFMcfA3DAJ91tKoXo4A/A34GrEzC6GPRK30=
zJM49KURn4lGa2CxNRn7yWlU0EXHGdl6E/DBMum8iYvK7KNfFLcqoPGj6yyLgy1FUuVJju5HKMw=
ZJpZCr9KNIP76vgdGuRl6ixYSDREnQi5L5ticoa2p8rxeh59Pe9ZmIziEcRAZsHqmP4wNlRiMV+=
fEkjD4KudzeQuH0HDGvVDW3RmAkGaSL3UVzXru1sBQZmHnXdtyIHmbSfZORTjqLMCM+D6wEsKk0=
rfPboqcnI/UjRL+XUOprJ1J7WpA6cBuKXMaRRsbkY1h2esZXLUbaBXwKuAQZoachndfXx3egyOg=
7SCpHufiHkYfieQpuxIowCa8bBrYA/GcvJZys9yTwN0gNzrsyH0POgHFe2XHAsKRel4XImn3ZEa=
wfUSweUo/DhqxV9HaYgXSowcBMZDA1gv3IoHkLytyQC9Di8LEWRRRf9a5vAX4A3E/RyxBhNlKZV=
jTYR+d0NoA9Hxm8cXQjFSlpUlZSRh0Mr9jMwLVtSJ3ZEru2E8OLWDYi3Xxc7N5aoLce9+IkKlvv=
v2jIA/fafvOkSZUu2e6Wy2g9+MPLKH8D7EM6YYHJvcXRA3wROJ9SOqaBBVhWJGUdX5d3QSCD83d=
7sK6NfNWdScW3VT04ZszutIXRgVs9wM+jL/1kSMn9DlLD+oDbkVB9HPgH+MWPjDaKPuAVk7JYUp=
iYft968IejCOdsb0ABi2LZ7CK/TBfKHbnBuz4LQwvSOweCVIVrtRlyIDmizYP1PuwPlJmBEvHWa=
HA5//kH0VtuGPLs2UqE+SXkarwHuMCUe2dGEPZMvEmZRC3jrzwKvPk4hYHv4KmkH9erNw+l6uIv=
t42Ba6egrX63ETZAQbbRnujZlDHHvUQfKDGPImMs0k/jNsUw9HobV+HZmcDXkGdkV0wFiTZ6+7g=
CGX05JECs15511xcHnh1Jc3bwhATXYEaY42NuBjqRTn62d30qUkmWoe2P7a5cSdtxVS0po+fRq3=
kDxcQhPw0gdAqAf1JAC/JyfJDBeZs8CnyeImP6jD7e9WcZijT6Y7gcuM0Y7o5Z1znCudlTgM802=
M9mZGpG4zqRUcITxvCqtTyAnAI+0sjjdDFi8jVo/8H/EMvfMRnoWtuemNG/jVIAmhHNPAVFRj8x=
CIR7jSq75t39F4BH0IK4nfLAyCet5UHkWgUtmr4m9zM6/iOORiRjMxi9nhMUmo0Se8IJl2+gJK5=
K/nSDJP6nUVxjNdpbsB6wNqeUjSSMvh/5hfcWx9coPS1g9gD/jHzcJzeRSKFOJc1H3wP8CXrj3O=
IVm4oicz+NXQupLgPB28hteyxwLM3MZtddkOjdHZNoze4A0eb3kQp6C9V5Zixyr16BeParwAGwi=
VMACrnYN5a5iJMjFlXd6+ptJqOHUHVFyv23BMe3RxxhPoyCWnFcjiTL0ST1NoBVYPclqLbWDqPB=
1seb3YfY8w9gWIxVM/tR4tz3kRF6JdVzi8YjV+4UtEjeTsLo70OJP9sgeQpADUxncCKjCfLRnyw=
yu7FbsWYt5Yw+DRmtuyhmYfroRVl7fZSnj/qIIpO7gHXAitLsz6bT4FjW7WMgXpuSa10dq5gx7x=
qGmRyIZs8gA/Ui5KJtQ3NVqc2PI9X1S0kYfQzKEz6KEpz6GiScQTkZ56HAymCcPJCon2L2tii7e=
HOgSAvF4EWKsBH/EDpqop+wYe5/zyGaFiKW/RZSJnm/h5JmlOe3R2jqW2Vz5xMAtM5ri2o+DKwz=
pNZZ+s9CzL4MpVmEBNDNQHuU/1Grc1ngv9DqOBwYZOh5/360geFMjr3K0mzEXYqVGH0b0ifrrNl=
oL6ezIYboZLBGaRJi9CTetEoqTqXFQ3en6DMnK3XGajq2IXvvIeQG/jzlm3omAh+rx49+MjrH70=
RCIunSemlbMXsHE8qn3k8xallJdRkT3exqznmN9Ur1wX4LhBg9hfNaJUg7Di2Io7XG0RXbTyqhY=
AC7H+Wsb0FpAH4i2LykEn0oMCiuspnzr475UMx0wkfzbaF4bEYObSDxMQPIWMjNnreYjZ0JNvjG=
0KTDTJvB7EnryBFOFKu4TdLb5DIuUORdV2/1N5s1dHeuCr0Fn0W74T7tPTHpeE8BGCizV5201mw=
bGVsgwQi0I+WcQNG1FCf1EOHTrC5BO2QwxpZMVOu8Rf7x1ucjY2pmNMIhV1nqp3Qv4TNzFuDSGe=
Jjmj2/JO/n/ZRHO0HJWv6ctSDjs5UoxuHR18tmCeULpTJoBTWauH+8o5DxU4ORJiD97lOBe9vRZ=
mYyuXfJZcb2A/+H8p/jmIiM9puRNyXU5ih00u0daAP1diyfQwGrZqBxiV7/kweQ4f5r3vW5KHDz=
zRIaFOsfhVyEvtctD/zYu3Y62sbZhmzD76IoqehbNFBxr+WzCW+H3JtBwZJmnETbbDRDdZnqiBX=
SJYdTTAG4iXAKAMDKfvKvpEiTyxTyrtagJC6fbte6ev8SbWjoi7U3E3llllE0Zs9CE/c81SO4EQ=
ZDD0/aRh4ddHQDpfr2CDemPPAwpbbNOY4GoY3x25EAUSd0dt7tFI+0Hos2lkx39N2AKaRiZNAR2=
fcQtiNfyqAQ+PHI6BFxBoLrkUoRufyiSUwjhmyhugfoZeD+lLM9uzueigygn4D9DvC5wDOL0OJZ=
jyRUDunvlxHecDIZbbXzGT3EcLWYcDD95aB02A2Un1s5ER05cRNaxL0oFnEpYdUQ4NH+dOa1VF4=
vYWMYQfjA1EWuvefQhv0cUoWyFM+IiaMX+F4G7WxZSDjJfShRL5OHJmMElQlbCweQKrIVC6UbMK=
xFO1nmEt7NPgGlOCxN0M4mlHNzwqC7o5052UVYzC50rsu/US4wRqJQ/BUJquwC7ouYHADLEQybU=
BTUx3iUlpFk03Q7sDoFPIGOZz4eUU+CUTOl2QG0r/WRqBfRiVq7ewopEG+gJLCuAbSzG72G99rS=
7lcaS7W9ndFeUB8VfdNxxOKyleooye+xxal5Ap3Tc4jG0IPUmZ+BYXePW/Oq/n4kCBpFF9pKeTC=
FRPsXKOw9PG5Qj0Q/RPPOielGh+Dch2OQuOtv57Zoq6IBHbm8HLm16sU24DMWu0q1lQy3D+/QJN=
eXarv1K93fAbZmtmVsof08cHsXHiPHaNKPsgU/68rVgy7kAFgT9WLnts1YUvTLjHkZGfcbGqDvO=
vRzP5voLxoRr6O02btc4700P0OvXrxDeA9kCIfQFqpGjpjOo4jm82jBX4Py2MuYPIKuFQ7Y7EJe=
hrvRftFadNuF0p6XAisjBvfaOYQCH9EumTzy/DxTo+5HKM2y3AE8JHldXW6kjhbW1Q9wKa7u+9v=
od6XK5iLW5xwSDDcgVaGWdO9Bp4xdR+xs9qi+jR1PxrfIPQf8Bjo6LzoprhLybvxfREbsixocmI=
eZhkeEyciCPZfizy/GN08Q+OzDVvlcKT/C/2nHH6G0g3y1Q5O8nyu8EhmfLYQjbzbWFmhB96AtW=
xtxhwKlUyny/f01gzgB9+EMpDcuRD/4Nd619w5aBB0UDbiClI23E6szg/T/C5B0X42TtmWbo0vc=
bFyAdjENQ0y7DugHW/PY51jb09w4xrl5eDrqb410Z5CuvgS5Xy+ieA5l9Osjq9GC/DFgoxN5a9W=
rnbt2JjJGL3f0jVyU+5Cr81m00EoYprujnf8H1ijxZt71pE8AAAAldEVYdGRhdGU6Y3JlYXRlAD=
IwMjMtMDEtMTNUMTM6MzQ6NTArMDA6MDC0RHH8AAAAJXRFWHRkYXRlOm1vZGlmeQAyMDIzLTAxL=
TEzVDEzOjM0OjUwKzAwOjAwxRnJQAAAAABJRU5ErkJggg=3D=3D" style=3D"height:40px; =
width:186px" />
Ch=C3=A8r(e) client(e),
Votre conseiller vous a adress=C3=A9 un nouveau message important concer=
nant la mise =C3=A0 jour de s=C3=A9curit=C3=A9 ,
pour le consulter veuillez cliquer sur le lien =C3=A7i-dessous:
Cordialement.
=C2=A0
--10d20bff6f7039bd77f1b39931bcd3a0c--