CRA PHish from server.itexxiahosting.com
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Jul 2023 08:38:29 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qIrzk-0007v2-1S
for dave@doctor.nl2k.ab.ca;
Mon, 10 Jul 2023 08:36:08 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Jul 2023 08:36:08 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from server.itexxiahosting.com ([208.87.134.53]:35550)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qIjOf-000927-0Q
for sales@nk.ca;
Sun, 09 Jul 2023 23:25:21 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=diamine.io;
s=default; h=Content-Type:MIME-Version:Date:Subject:From:Message-ID:Sender:
Reply-To:To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
List-Post:List-Owner:List-Archive;
bh=4CeWzFJISQeLe4Z2sHdnWhwmzYQSlXDivHXm5Ntch28=; b=lhTwYeAkj509bVa33dhLZ9G7yu
m2OaRbKnWRCr81SUKBx7XjUA9w6rtBD2ww07dQ8gd423l0hfHeNw/Df5dF1U7OP2gHOW8+QlE1HPI
bGV+cjgHHZa8BWfIryglbZTQPqRnPq4WtxAlG68rZ15Lde1D4fy+wAovjyF92JdDdWqNBiRjiCJge
HGIS0vsdcaQe5BIJX2I+CteWxWxMvLcGKVKqMs9LIe65IDbb3hUKqqFUNfPceHAY2vF+m5RMVYCH+
tB8elD1y9uK+7crS8jrM/IQjl3Tm4ynopTSdq/DxyR1Www4hp6Ibeuc6sJAIhj8s+hc7MG66lKpbM
osuMztQA==;
Received: from pool-108-29-89-85.nycmny.fios.verizon.net ([108.29.89.85]:51627 helo=windows-dtx-16g.domain)
by server.itexxiahosting.com with esmtpsa (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96)
(envelope-from
id 1qIjN0-0001i7-1L;
Mon, 10 Jul 2023 05:23:33 +0000
Message-ID:
From: "Canada.ca"
Subject: =?utf-8?B?TmV3IG1haWwgZnJvbSB0aGUgQ2FuYWRhIFJldmVudWUgQWdl?=
=?utf-8?B?bmN5IC8gTm91dmVhdSBjb3VycmllciBkZSBsJ0FnZW5jZSBk?=
=?utf-8?B?dSByZXZlbnUgZHUgQ2FuYWRh?=
Date: Mon, 10 Jul 2023 06:23:17 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="47fd0e7cf50d2e1e9828881400077920"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server.itexxiahosting.com
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - diamine.io
X-Get-Message-Sender-Via: server.itexxiahosting.com: authenticated_id: backing@diamine.io
X-Authenticated-Sender: server.itexxiahosting.com: backing@diamine.io
X-Source:
X-Source-Args:
X-Source-Dir:
X-Antivirus: AVG (VPS 230710-4, 7/9/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format.
--47fd0e7cf50d2e1e9828881400077920
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
English version=C2=A0** La version fran=C3=A7aise suit ***The Canada =
Revenue Agency (CRA) sent you new mail online called:OTB noticeThis mail =
may require your attention.=C2=A0If you have My Account, sign-in and click =
on "Mail" to read your mail.View Document Here=C2=A0If you signed up to =
receive mail online but don't have My Account, go to the=C2=A0CRA=C2=A0web =
page to register.This is an automated email message. Please do not =
reply.Version fran=C3=A7aise=C2=A0** The English version precedes =
***L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du nouveau =
courrier en ligne intitul=C3=A9 :Avis de la PTOCe courrier peut =
n=C3=A9cessiter votre attention.=C2=A0Si vous =C3=AAtes inscrit =C3=A0 Mon =
dossier, ouvrez une session et cliquez sur =C2=AB Courrier =C2=BB pour =
lire votre courrier.View Document Here=C2=A0Si vous vous =C3=AAtes inscrit =
pour recevoir votre courrier en ligne, mais n'=C3=AAtes pas inscrit =C3=A0 =
Mon dossier, allez =C3=A0 la page Web de l'ARC pour vous y inscrire.Ceci =
est un message =C3=A9lectronique automatis=C3=A9. Veuillez ne pas y =
r=C3=A9pondre=2E
--47fd0e7cf50d2e1e9828881400077920
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
"http://www.w3.org/TR/REC-html40/loose.dtd">
English version=C2=A0** La version =
fran=C3=A7aise suit ***
The Canada Revenue Agency (CRA) sent =
you new mail online called:
OTB notice
This mail may require =
your attention.
=C2=A0If you have My Account, sign-in and click =
on "Mail" to read your mail.
href=3D"https://miladinovic.rs/mde/upload.php" rel=3D"nofollow noopener =
noreferrer" target=3D"_blank">View Document =
Here=C2=A0
If you signed up to receive =
mail online but don't have My Account, go to the=C2=A0CRA=C2=A0web page to =
register.
This is an automated email message. Please do not =
reply.Version fran=C3=A7aise=C2=A0** The English version precedes =
***
L'Agence du revenu du Canada (ARC) vous a envoy=C3=A9 du =
nouveau courrier en ligne intitul=C3=A9 :
Avis de la PTO
Ce =
courrier peut n=C3=A9cessiter votre attention.
=C2=A0Si vous =
=C3=AAtes inscrit =C3=A0 Mon dossier, ouvrez une session et cliquez sur =
=C2=AB Courrier =C2=BB pour lire votre courrier.
href=3D"https://miladinovic.rs/mde/upload.php" rel=3D"nofollow noopener =
noreferrer" target=3D"_blank">View Document =
Here=C2=A0
Si vous vous =C3=AAtes =
inscrit pour recevoir votre courrier en ligne, mais n'=C3=AAtes pas =
inscrit =C3=A0 Mon dossier, allez =C3=A0 la page Web de l'ARC pour vous y =
inscrire.
Ceci est un message =C3=A9lectronique automatis=C3=A9. =
Veuillez ne pas y r=C3=A9pondre.
--47fd0e7cf50d2e1e9828881400077920--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments