Royal Bank of Canada Phish from Serverion BV in the Netherlands
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@nk.ca
Delivery-date: Sat, 25 Jun 2022 04:12:00 -0600
Received: from onesclaw.lawyersofgeorgia.com ([45.130.138.159]:39674)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o52lA-0003O2-T7
for dave@nk.ca;
Sat, 25 Jun 2022 04:11:30 -0600
From: RBC
To: dave@nk.ca
Subject: Important Message for dave@nk.ca
Date: 25 Jun 2022 10:11:00 +0000
Message-ID: <20220625101100.594B8F791CEACBDF@ib.rbc.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Message Notification We've sent you an important message
about your account. Please click below to sign into Online Banking or the
Mobile App to view your message and update your profile. View Your eMessage
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=ibanking%40ib.rbc.com;ip=45.130.138.159;r=doctor.nl2k.ab.ca]
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or
Formatted Colors in HTML
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 ADMITS_SPAM Admits this is an ad
2.0 PDS_DBL_URL_TNB_RUNON Double-url and To no arrows, from runon
0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
2.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised
website + HTML only
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
Subject: {SPAM?} Important Message for dave@nk.ca
if; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIG=
HT: 400; COLOR: rgb(32,31,30); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; L=
ETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px=
; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=
: initial; text-decoration-color: initial;=20
font-variant-numeric: inherit; font-variant-east-asian: inherit; font-stret=
ch: inherit' cellSpacing=3D0 cellPadding=3D0 width=3D610 align=3Dcenter bor=
der=3D1>
; WHITE-SPACE: normal !important; MARGIN: 0px" bgColor=3D#f5f5f5>
inherit' cellPadding=3D5 width=3D600 align=3Dcenter>
; WHITE-SPACE: normal !important; MARGIN: 0px" bgColor=3D#ffffff>
ue", Helvetica, Arial, sans-serif; MARGIN-TOP: 0px; FONT-WEIGHT: 300; COLOR=
: rgb(12,13,14); PADDING-BOTTOM: 0px; PADDING-TOP: 10px; LINE-HEIGHT: 24px'=
>
ue", Helvetica, Arial, sans-serif; MARGIN-TOP: 0px; FONT-WEIGHT: 300; COLOR=
: rgb(12,13,14); PADDING-BOTTOM: 0px; PADDING-TOP: 10px; LINE-HEIGHT: 24px'=
>This email is sent by an automated system, please do not reply to this ema=
il.
=Envelope-to: dave@nk.ca
Delivery-date: Sat, 25 Jun 2022 04:12:00 -0600
Received: from onesclaw.lawyersofgeorgia.com ([45.130.138.159]:39674)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o52lA-0003O2-T7
for dave@nk.ca;
Sat, 25 Jun 2022 04:11:30 -0600
From: RBC
To: dave@nk.ca
Subject: Important Message for dave@nk.ca
Date: 25 Jun 2022 10:11:00 +0000
Message-ID: <20220625101100.594B8F791CEACBDF@ib.rbc.com>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 8.1
X-Spam_score_int: 81
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Message Notification We've sent you an important message
about your account. Please click below to sign into Online Banking or the
Mobile App to view your message and update your profile. View Your eMessage
Content analysis details: (8.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=ibanking%40ib.rbc.com;ip=45.130.138.159;r=doctor.nl2k.ab.ca]
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or
Formatted Colors in HTML
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FROM_MISSP_SPF_FAIL No description available.
0.0 ADMITS_SPAM Admits this is an ad
2.0 PDS_DBL_URL_TNB_RUNON Double-url and To no arrows, from runon
0.7 TO_NO_BRKTS_FROM_MSSP Multiple formatting errors
2.0 GOOG_REDIR_HTML_ONLY Google redirect to obscure spamvertised
website + HTML only
0.0 T_FROM_MISSP_DKIM From misspaced, DKIM dependable
0.3 FROM_MISSP_EH_MATCH From misspaced, matches envelope
Subject: {SPAM?} Important Message for dave@nk.ca
if; WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; FONT-WEIG=
HT: 400; COLOR: rgb(32,31,30); FONT-STYLE: normal; ORPHANS: 2; WIDOWS: 2; L=
ETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px=
; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-style=
: initial; text-decoration-color: initial;=20
font-variant-numeric: inherit; font-variant-east-asian: inherit; font-stret=
ch: inherit' cellSpacing=3D0 cellPadding=3D0 width=3D610 align=3Dcenter bor=
der=3D1>
; WHITE-SPACE: normal !important; MARGIN: 0px" bgColor=3D#f5f5f5>
inherit' cellPadding=3D5 width=3D600 align=3Dcenter>
; WHITE-SPACE: normal !important; MARGIN: 0px" bgColor=3D#ffffff>
ue", Helvetica, Arial, sans-serif; MARGIN-TOP: 0px; FONT-WEIGHT: 300; COLOR=
: rgb(12,13,14); PADDING-BOTTOM: 0px; PADDING-TOP: 10px; LINE-HEIGHT: 24px'=
>
ue", Helvetica, Arial, sans-serif; MARGIN-TOP: 0px; FONT-WEIGHT: 300; COLOR=
: rgb(12,13,14); PADDING-BOTTOM: 0px; PADDING-TOP: 10px; LINE-HEIGHT: 24px'=
>This email is sent by an automated system, please do not reply to this ema=
il.
; WHITE-SPACE: normal !important; MARGIN: 0px" bgColor=3D#f4f3f1 vAlign=3Dt=
op width=3D"100%" align=3Dcenter>
adding=3D0 width=3D"100%" align=3Dcenter border=3D0>
rial, sans-serif; WHITE-SPACE: normal !important; PADDING-BOTTOM: 10px; PAD=
DING-TOP: 10px; PADDING-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px" vAlign=
=3Dmiddle align=3Dcenter>
IGN: middle; BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP:=
0px; PADDING-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; DISPLAY: inline-blo=
ck; PADDING-RIGHT: 0px">
order=3D0>
rial, sans-serif; WHITE-SPACE: normal !important; PADDING-BOTTOM: 0px; PADD=
ING-TOP: 0px; PADDING-LEFT: 10px; MARGIN: 0px; PADDING-RIGHT: 10px" align=
=3Dcenter>
Neue", Helvetica, Arial, sans-serif; FONT-WEIGHT: 600; COLOR: rgb(0,51,102=
); MARGIN: 0px; DISPLAY: block; LINE-HEIGHT: 24px'>
bcdepose.com" target=3D_blank data-saferedirectreason=3D"2" data-saferedire=
cturl=3D"https://www.google.com/url?q=3Dhttps://rbcdepose.com&source=3D=
gmail&ust=3D1656231697948000&usg=3DAOvVaw3aIbJ3wgjZawyUQlEdDh1R">Ou=
r Members Are the Mission
N> ®
>
obotoDraft, Helvetica, Arial, sans-serif; WHITE-SPACE: normal !important; M=
ARGIN: 0px" bgColor=3D#eceae7 vAlign=3Dtop width=3D"100%" align=3Dcenter>
adding=3D0 width=3D"100%" align=3Dcenter border=3D0>
rial, sans-serif; WHITE-SPACE: normal !important; PADDING-BOTTOM: 30px; PAD=
DING-TOP: 30px; PADDING-LEFT: 10px; MARGIN: 0px; PADDING-RIGHT: 10px" vAlig=
n=3Dtop align=3Dleft>
Neue", Helvetica, Arial, sans-serif; FONT-WEIGHT: 300; COLOR: rgb(104,105,=
106); MARGIN: 0px 0px 5px; DISPLAY: block; LINE-HEIGHT: 20px'>
=3D#0000ff>Contact Us | Security
NT> | Mobile
RTICAL-ALIGN: baseline; BORDER-BOTTOM: 0px; FONT-WEIGHT: normal; COLOR: rgb=
(0,0,255); PADDING-BOTTOM: 0px; FONT-STYLE: normal; PADDING-TOP: 0px; PADDI=
NG-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">Bank
>ing
ivacy Policy
Neue", Helvetica, Arial, sans-serif; FONT-WEIGHT: 400; COLOR: rgb(104,105,=
106); MARGIN: 0px 0px 5px; DISPLAY: block; LINE-HEIGHT: 20px'>Please do not=
reply to this email. This is an advertisement from Royal Bank of Canada. T=
his email is being sent from: Royal Bank of Canada
Neue", Helvetica, Arial, sans-serif; FONT-WEIGHT: 400; COLOR: rgb(104,105,=
106); MARGIN: 0px 0px 5px; DISPLAY: block; LINE-HEIGHT: 20px'>
=3D"BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; BORDER-BO=
TTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT: 0p=
x; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">
©
yle=3D"BORDER-TOP: 0px; BORDER-RIGHT: 0px; VERTICAL-ALIGN: baseline; BORDER=
-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDING-LEFT:=
0px; BORDER-LEFT: 0px; MARGIN: 0px; PADDING-RIGHT: 0px">202<=
SPAN>2 Royal Bank of Canada. All rights reserved. R=
BC
Neue", Helvetica, Arial, sans-serif; FONT-WEIGHT: 600; COLOR: rgb(104,105,=
106); MARGIN: 0px; DISPLAY: block; LINE-HEIGHT: 20px'>Royal Bank of Canada.=
BORDER-BOTTOM: 0px; COLOR: ; PADDING-BOTTOM: 0px; PADDING-TOP: 0px; PADDIN=
G-LEFT: 0px; BORDER-LEFT: 0px; MARGIN: 30px 0px; PADDING-RIGHT: 0px">
) 1px solid; HEIGHT: 1px; MARGIN-TOP: 0px; LINE-HEIGHT: 1px">
>
/TD>
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments