Royal Bank PHish from data102.com Colorado Springs USA
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 05 Jan 2024 22:10:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rLywD-000000001No-3cOj
for dave@doctor.nl2k.ab.ca;
Fri, 05 Jan 2024 22:09:37 -0700
Resent-From: The Doctor
Resent-Date: Fri, 5 Jan 2024 22:09:37 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from rehosted.us ([64.111.22.172]:53878 helo=shared.rehosted.us)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rLyEO-000000000CZ-31c8
for games@nl2k.ab.ca;
Fri, 05 Jan 2024 21:24:24 -0700
Received: by shared.rehosted.us (Postfix, from userid 1005)
id 89D107305A; Fri, 5 Jan 2024 21:22:29 -0700 (MST)
To: games@nl2k.ab.ca
Subject: *** VIRUS ***RBC Alert! - Profile status review required
Date: Sat, 6 Jan 2024 04:22:29 +0000
From: RBC Royal Bank
Message-ID: <96d588177358e754b8870121779eb0a0@thebaylors.org>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="b1_96d588177358e754b8870121779eb0a0"
Content-Transfer-Encoding: 8bit
X-Antivirus: AVG (VPS 240105-8, 1/5/2024), Inbound message
X-Antivirus-Status: Infected
X-Attachment: RBC.pdf#552190040 Virus: PDF:PhishingX-gen [Phish] Moved to chest
This is a multi-part message in MIME format.
--b1_96d588177358e754b8870121779eb0a0
Content-Type: text/plain; charset=us-ascii
Dear (RBC Royal Bank) Client,
This email is to inform you about some important changes to your
Royal Bank Account and Services.
In order to help us keep your Royal Bank Account in good standing,
please refer to the attached document for more details.
We thank you for your cooperation.
David I. McKay
President of Royal Bank of Canada
--b1_96d588177358e754b8870121779eb0a0--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 05 Jan 2024 22:10:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rLywD-000000001No-3cOj
for dave@doctor.nl2k.ab.ca;
Fri, 05 Jan 2024 22:09:37 -0700
Resent-From: The Doctor
Resent-Date: Fri, 5 Jan 2024 22:09:37 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from rehosted.us ([64.111.22.172]:53878 helo=shared.rehosted.us)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rLyEO-000000000CZ-31c8
for games@nl2k.ab.ca;
Fri, 05 Jan 2024 21:24:24 -0700
Received: by shared.rehosted.us (Postfix, from userid 1005)
id 89D107305A; Fri, 5 Jan 2024 21:22:29 -0700 (MST)
To: games@nl2k.ab.ca
Subject: *** VIRUS ***RBC Alert! - Profile status review required
Date: Sat, 6 Jan 2024 04:22:29 +0000
From: RBC Royal Bank
Message-ID: <96d588177358e754b8870121779eb0a0@thebaylors.org>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="b1_96d588177358e754b8870121779eb0a0"
Content-Transfer-Encoding: 8bit
X-Antivirus: AVG (VPS 240105-8, 1/5/2024), Inbound message
X-Antivirus-Status: Infected
X-Attachment: RBC.pdf#552190040 Virus: PDF:PhishingX-gen [Phish] Moved to chest
This is a multi-part message in MIME format.
--b1_96d588177358e754b8870121779eb0a0
Content-Type: text/plain; charset=us-ascii
Dear (RBC Royal Bank) Client,
This email is to inform you about some important changes to your
Royal Bank Account and Services.
In order to help us keep your Royal Bank Account in good standing,
please refer to the attached document for more details.
We thank you for your cooperation.
David I. McKay
President of Royal Bank of Canada
--b1_96d588177358e754b8870121779eb0a0--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments