CRA Phish from Mailchimp Atlanta Georgia USA
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 11 Feb 2024 20:52:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rZNM8-00000000DLZ-2x2B
for dave@doctor.nl2k.ab.ca;
Sun, 11 Feb 2024 20:51:44 -0700
Resent-From: The Doctor
Resent-Date: Sun, 11 Feb 2024 20:51:44 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail179-17.suw41.mandrillapp.com ([198.2.179.17]:28412)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rZNKt-00000000D7n-1Y2B
for sales@nk.ca;
Sun, 11 Feb 2024 20:50:32 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandrillapp.com;
s=mte1; t=1707709706; x=1707970206;
bh=kN5u7Tw2E10QIH+noSEdLx6r+tEP2UoPr88Tqtx8ZRw=;
h=From:Subject:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:Date:Subject:From;
b=vycodbR7KQY7p3Hq7UYmkFJmplcSMHUF1KkrHKZ6/lN6N0Igph6bBdxSx0clG9PJ0
AQ1uw5/+FAWkD8pnIJ/cF/NVTkpR5khB7dJVowztLf01EA5r5Bf7Z6ZbWO+/presnf
JptnEpq1EbvLNq/3ZqnWQMNaZ5bKyBr9ME4ILaWYv1Tij/rK9svT7T6o0JfHxOJhQU
FozVPp+kDHI2VEzoYk/SgnHORmgjbzDSJKX8v0HuqMdvR0Ta5ON0YJN/1yR9Qp6EUN
TnQ5vA2YZCkyOD59H0LsRifLrvzOGcmvQDhrY4AtCLYj/5w4qQhhR1VfP2ijR1/SiI
d0ECEWM5ob9ow==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=main-lin.com;
s=mte1; t=1707709706; x=1707970206; i=beth@main-lin.com;
bh=kN5u7Tw2E10QIH+noSEdLx6r+tEP2UoPr88Tqtx8ZRw=;
h=From:Subject:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:Date:Subject:From;
b=jaIvAc5ijhbOqK2/oybLmNSCUuEF6fCUOF6SzfBsS9XG2btjUgk5plHaH+ZWXNbBt
+G/e6rD++blQQ/81cmRwG5qpR42W1rK41BlY1ebBXq6hC6z9g6wpK+VwHZfL1v9vSb
WUdhKJMEFjlFbrTvwdxP83SUdFuAUw27whT0qB28LvRnNDgyUaFFGnSczd9jomyQ3f
KPzCnUSFCvEZua9MwoYWG73vFU9BdiROwn/Gd1ASWXdDZZB6jJAsY/wKnr0FPSt+Gq
MXafXxHT9ST+0S1QQCwVfk/hI0hb/2GpRH86xYwwdy0cuJAMGA2OZhI8k2/7XbJDxO
4iNGs06aL08VQ==
Received: from pmta12.mandrill.prod.suw01.rsglab.com (localhost [127.0.0.1])
by mail179-17.suw41.mandrillapp.com (Mailchimp) with ESMTP id 4TY9RG4Sp5zRKLm3J
for; Mon, 12 Feb 2024 03:48:26 +0000 (GMT)
From: Canada Revenue Agency
Subject: =?utf-8?Q?Canada=20Revenue=20Agency=20(CRA)=20sent=20you=20new=20mail?=
Received: from [184.146.91.76] by mandrillapp.com id 452e5866afd14a499f7702d542fe0d22; Mon, 12 Feb 2024 03:48:26 +0000
To: sales@nk.ca
X-Native-Encoded: 1
X-Report-Abuse: =?UTF-8?Q?Please=20forward=20a=20copy=20of=20this=20message,=20including=20all=20headers,=20to=20abuse@mandrill.com.=20You=20can=20also=20report=20abuse=20here:=20https://mandrillapp.com/contact/abuse=3Fid=3D31501955.452e5866afd14a499f7702d542fe0d22?=
X-Mandrill-User: md_31501955
Feedback-ID: 31501955:31501955.20240212:md
Message-Id: <31501955.20240212034826.65c9950a8c6729.61838966@mail179-17.suw41.mandrillapp.com>
Date: Mon, 12 Feb 2024 03:48:26 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="_av-Glpla-bdhMzLrjLDuuBk4w"
--_av-Glpla-bdhMzLrjLDuuBk4w
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
English version ** La version fran=C3=A7aise suit **
The Canada Revenue Agency (CRA) sent you new mail online called:
OTB notice
This mail may require your attention.
If you have My Account, sign-in and click on "Mail" to read your mail.
View Document Here
If you signed up to receive mail online but don't have My Account, go to
the CRA web page to register.
This is an automated email message. Please do not reply.
Version fran=C3=A7aise ** The English version precedes **
L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du nouveau courrier =
en
ligne intitul=C3=A9 :
Avis de la PTO
Ce courrier peut n=C3=A9cessiter votre attention.
Si vous =C3=AAtes inscrit =C3=A0 Mon dossier, ouvrez une session et clique=
z sur =C2=AB
Courrier =C2=BB pour lire votre courrier.
View Document Here
Si vous vous =C3=AAtes inscrit pour recevoir votre courrier en ligne, mais
n'=C3=AAtes pas inscrit =C3=A0 Mon dossier, allez =C3=A0 la page Web de l'A=
RC pour vous
y inscrire.
Ceci est un message =C3=A9lectronique automatis=C3=A9. Veuillez ne pas y
r=C3=A9pondre.
--_av-Glpla-bdhMzLrjLDuuBk4w
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
--_av-Glpla-bdhMzLrjLDuuBk4w--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 11 Feb 2024 20:52:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rZNM8-00000000DLZ-2x2B
for dave@doctor.nl2k.ab.ca;
Sun, 11 Feb 2024 20:51:44 -0700
Resent-From: The Doctor
Resent-Date: Sun, 11 Feb 2024 20:51:44 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail179-17.suw41.mandrillapp.com ([198.2.179.17]:28412)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rZNKt-00000000D7n-1Y2B
for sales@nk.ca;
Sun, 11 Feb 2024 20:50:32 -0700
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mandrillapp.com;
s=mte1; t=1707709706; x=1707970206;
bh=kN5u7Tw2E10QIH+noSEdLx6r+tEP2UoPr88Tqtx8ZRw=;
h=From:Subject:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:Date:Subject:From;
b=vycodbR7KQY7p3Hq7UYmkFJmplcSMHUF1KkrHKZ6/lN6N0Igph6bBdxSx0clG9PJ0
AQ1uw5/+FAWkD8pnIJ/cF/NVTkpR5khB7dJVowztLf01EA5r5Bf7Z6ZbWO+/presnf
JptnEpq1EbvLNq/3ZqnWQMNaZ5bKyBr9ME4ILaWYv1Tij/rK9svT7T6o0JfHxOJhQU
FozVPp+kDHI2VEzoYk/SgnHORmgjbzDSJKX8v0HuqMdvR0Ta5ON0YJN/1yR9Qp6EUN
TnQ5vA2YZCkyOD59H0LsRifLrvzOGcmvQDhrY4AtCLYj/5w4qQhhR1VfP2ijR1/SiI
d0ECEWM5ob9ow==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=main-lin.com;
s=mte1; t=1707709706; x=1707970206; i=beth@main-lin.com;
bh=kN5u7Tw2E10QIH+noSEdLx6r+tEP2UoPr88Tqtx8ZRw=;
h=From:Subject:To:Feedback-ID:Message-Id:Date:MIME-Version:
Content-Type:CC:Date:Subject:From;
b=jaIvAc5ijhbOqK2/oybLmNSCUuEF6fCUOF6SzfBsS9XG2btjUgk5plHaH+ZWXNbBt
+G/e6rD++blQQ/81cmRwG5qpR42W1rK41BlY1ebBXq6hC6z9g6wpK+VwHZfL1v9vSb
WUdhKJMEFjlFbrTvwdxP83SUdFuAUw27whT0qB28LvRnNDgyUaFFGnSczd9jomyQ3f
KPzCnUSFCvEZua9MwoYWG73vFU9BdiROwn/Gd1ASWXdDZZB6jJAsY/wKnr0FPSt+Gq
MXafXxHT9ST+0S1QQCwVfk/hI0hb/2GpRH86xYwwdy0cuJAMGA2OZhI8k2/7XbJDxO
4iNGs06aL08VQ==
Received: from pmta12.mandrill.prod.suw01.rsglab.com (localhost [127.0.0.1])
by mail179-17.suw41.mandrillapp.com (Mailchimp) with ESMTP id 4TY9RG4Sp5zRKLm3J
for
From: Canada Revenue Agency
Subject: =?utf-8?Q?Canada=20Revenue=20Agency=20(CRA)=20sent=20you=20new=20mail?=
Received: from [184.146.91.76] by mandrillapp.com id 452e5866afd14a499f7702d542fe0d22; Mon, 12 Feb 2024 03:48:26 +0000
To: sales@nk.ca
X-Native-Encoded: 1
X-Report-Abuse: =?UTF-8?Q?Please=20forward=20a=20copy=20of=20this=20message,=20including=20all=20headers,=20to=20abuse@mandrill.com.=20You=20can=20also=20report=20abuse=20here:=20https://mandrillapp.com/contact/abuse=3Fid=3D31501955.452e5866afd14a499f7702d542fe0d22?=
X-Mandrill-User: md_31501955
Feedback-ID: 31501955:31501955.20240212:md
Message-Id: <31501955.20240212034826.65c9950a8c6729.61838966@mail179-17.suw41.mandrillapp.com>
Date: Mon, 12 Feb 2024 03:48:26 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="_av-Glpla-bdhMzLrjLDuuBk4w"
--_av-Glpla-bdhMzLrjLDuuBk4w
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
English version ** La version fran=C3=A7aise suit **
The Canada Revenue Agency (CRA) sent you new mail online called:
OTB notice
This mail may require your attention.
If you have My Account, sign-in and click on "Mail" to read your mail.
View Document Here
If you signed up to receive mail online but don't have My Account, go to
the CRA web page to register.
This is an automated email message. Please do not reply.
Version fran=C3=A7aise ** The English version precedes **
L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du nouveau courrier =
en
ligne intitul=C3=A9 :
Avis de la PTO
Ce courrier peut n=C3=A9cessiter votre attention.
Si vous =C3=AAtes inscrit =C3=A0 Mon dossier, ouvrez une session et clique=
z sur =C2=AB
Courrier =C2=BB pour lire votre courrier.
View Document Here
Si vous vous =C3=AAtes inscrit pour recevoir votre courrier en ligne, mais
n'=C3=AAtes pas inscrit =C3=A0 Mon dossier, allez =C3=A0 la page Web de l'A=
RC pour vous
y inscrire.
Ceci est un message =C3=A9lectronique automatis=C3=A9. Veuillez ne pas y
r=C3=A9pondre.
--_av-Glpla-bdhMzLrjLDuuBk4w
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
English version ** La version française suit ***
The Canada Revenue Agency (CRA) sent you new mail online called:
OTB notice
This mail may require your attention.
If you have My Account, sign-in and click on "Mail" to read your mail.
If you signed up to receive mail online but don't have My Account, go to the CRA web page to register.
This is an automated email message. Please do not reply.
Version française ** The English version precedes ***
L'Agence du revenu du Canada (ARC) vous a envoyé du nouveau courrier en ligne intitulé :
Avis de la PTO
Ce courrier peut nécessiter votre attention.
Si vous êtes inscrit à Mon dossier, ouvrez une session et cliquez sur « Courrier » pour lire votre courrier.
Si vous vous êtes inscrit pour recevoir votre courrier en ligne, mais n'êtes pas inscrit à Mon dossier, allez à la page Web de l'ARC pour vous y inscrire.
Ceci est un message électronique automatisé. Veuillez ne pas y répondre.
--_av-Glpla-bdhMzLrjLDuuBk4w--