Royal Bank PHish from data102.com Colorado Springs USA

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 05 Jan 2024 22:10:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rLywD-000000001No-3cOj

for dave@doctor.nl2k.ab.ca;

Fri, 05 Jan 2024 22:09:37 -0700

Resent-From: The Doctor

Resent-Date: Fri, 5 Jan 2024 22:09:37 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from rehosted.us ([64.111.22.172]:53878 helo=shared.rehosted.us)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1rLyEO-000000000CZ-31c8

for games@nl2k.ab.ca;

Fri, 05 Jan 2024 21:24:24 -0700

Received: by shared.rehosted.us (Postfix, from userid 1005)

id 89D107305A; Fri, 5 Jan 2024 21:22:29 -0700 (MST)

To: games@nl2k.ab.ca

Subject: *** VIRUS ***RBC Alert! - Profile status review required

Date: Sat, 6 Jan 2024 04:22:29 +0000

From: RBC Royal Bank

Message-ID: <96d588177358e754b8870121779eb0a0@thebaylors.org>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="b1_96d588177358e754b8870121779eb0a0"

Content-Transfer-Encoding: 8bit

X-Antivirus: AVG (VPS 240105-8, 1/5/2024), Inbound message

X-Antivirus-Status: Infected

X-Attachment: RBC.pdf#552190040 Virus: PDF:PhishingX-gen [Phish] Moved to chest



This is a multi-part message in MIME format.



--b1_96d588177358e754b8870121779eb0a0

Content-Type: text/plain; charset=us-ascii



Dear (RBC Royal Bank) Client,



This email is to inform you about some important changes to your

Royal Bank Account and Services.



In order to help us keep your Royal Bank Account in good standing,

please refer to the attached document for more details.





We thank you for your cooperation.



David I. McKay

President of Royal Bank of Canada





--b1_96d588177358e754b8870121779eb0a0--