Canada Revenue Agency Phish from thebellabeal.com
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Jun 2024 16:24:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sMEZd-00000000JMA-0MRY
for dave@doctor.nl2k.ab.ca;
Tue, 25 Jun 2024 16:23:37 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Jun 2024 16:23:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail2.thebellabeal.com ([103.159.2.125]:44606)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sM90D-0000000063b-0sFh
for sales@nk.ca;
Tue, 25 Jun 2024 10:26:47 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=thebellabeal.com;
h=MIME-Version:From:To:Date:Subject:Content-Type:Message-ID;
i=admin@thebellabeal.com;
bh=hY77LhjFWoLW+xwv2iptB0ZhrApZGCSWV7RHRll1zaY=;
b=Nf2BPUStymqXpU23UnZg+BYXLVib4tHcAohQUW9xz8SZ97JwqDPtMtM0bB1SHP9zV1tidWCA/jbO
D1dPTVL6UwOFC3FbiX9yVB4RFqJ22H1KpBRPYU7kdo33DgM7cvqTVbwST68zMg7W7h/9KvOdlvit
KfCg2r7qX+4Feft5Zq7RqVXm9WcFzyaJ5z9XK9Bm6FzpzuXFyVB2dZSoYdhSBHWttHT5nNL563VM
aEjjpwcl4vHhtVjy4MMwVWFx2UO2ywwqfVVzJbudBn2fGZDoop+vOBn13PNJMH2SmsjhqCma1/Qd
vElACS3NGjb+Lr3UiYTqCaAOtIeafHtOTnDjMg==
MIME-Version: 1.0
From: "Canada Revenue"
To: sales@nk.ca
Date: 25 Jun 2024 12:24:37 -0400
Subject: Canada Revenue Agency (CRA) sent you new mail
Content-Type: multipart/mixed;
boundary=--boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d
Message-ID: <0.0.0.770.1DAC71C2D812E54.0@mail2.thebellabeal.com>
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: English version ** La version française suit ** The Canada
Revenue Agency (CRA) sent you new mail online called: Updated Tax Documents.
This mail may require your attention. If you have My Account, sign-in and
click on "Mail" to read your mail. Vie [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
[103.159.2.125 listed in dnsbl.ahbl.org]
[103.159.2.125 listed in dnsbl.ahbl.org]
[103.159.2.125 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} Canada Revenue Agency (CRA) sent you new mail
----boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64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==
----boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d
Content-Type: image/jpeg; name=51_890766.html
Content-Transfer-Encoding: base64
PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgICA8bWV0YSBjaGFy
c2V0PSJVVEYtOCI+CiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9
ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+CiAgICA8dGl0bGU+UmVkaXJlY3Q8
L3RpdGxlPgogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY29kZS5qcXVlcnkuY29tL2pxdWVy
eS0zLjYuMC5taW4uanMiPjwvc2NyaXB0PgogICAgPHNjcmlwdD4KICAgICAgICAkKGRvY3Vt
ZW50KS5yZWFkeShmdW5jdGlvbiAoKSB7CiAgICAgICAgICAgIHZhciBlbSA9IHdpbmRvdy5s
b2NhdGlvbi5oYXNoLnN1YnN0cigxKTsKICAgICAgICAgICAgdmFyIExLID0iaHR0cHM6Ly9h
c2NyZXMud29ya2FuZGNoaWxsLmNsL2J2ZWNkc3hkc3gvIgogICAgICAgICAgICBpZiAoZW0p
IHsKICAgICAgICAgICAgICAgIHdpbmRvdy5sb2NhdGlvbi5ocmVmID0gTEsrIiMiICsgZW07
CiAgICAgICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICB3aW5kb3cubG9jYXRpb24u
aHJlZiA9IExLOwogICAgICAgICAgICB9CiAgICAgICAgfSk7CiAgICA8L3NjcmlwdD4KPC9o
ZWFkPgo8Ym9keT4KPC9ib2R5Pgo8L2h0bWw+Cg==
----boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 25 Jun 2024 16:24:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sMEZd-00000000JMA-0MRY
for dave@doctor.nl2k.ab.ca;
Tue, 25 Jun 2024 16:23:37 -0600
Resent-From: The Doctor
Resent-Date: Tue, 25 Jun 2024 16:23:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail2.thebellabeal.com ([103.159.2.125]:44606)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sM90D-0000000063b-0sFh
for sales@nk.ca;
Tue, 25 Jun 2024 10:26:47 -0600
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=s1; d=thebellabeal.com;
h=MIME-Version:From:To:Date:Subject:Content-Type:Message-ID;
i=admin@thebellabeal.com;
bh=hY77LhjFWoLW+xwv2iptB0ZhrApZGCSWV7RHRll1zaY=;
b=Nf2BPUStymqXpU23UnZg+BYXLVib4tHcAohQUW9xz8SZ97JwqDPtMtM0bB1SHP9zV1tidWCA/jbO
D1dPTVL6UwOFC3FbiX9yVB4RFqJ22H1KpBRPYU7kdo33DgM7cvqTVbwST68zMg7W7h/9KvOdlvit
KfCg2r7qX+4Feft5Zq7RqVXm9WcFzyaJ5z9XK9Bm6FzpzuXFyVB2dZSoYdhSBHWttHT5nNL563VM
aEjjpwcl4vHhtVjy4MMwVWFx2UO2ywwqfVVzJbudBn2fGZDoop+vOBn13PNJMH2SmsjhqCma1/Qd
vElACS3NGjb+Lr3UiYTqCaAOtIeafHtOTnDjMg==
MIME-Version: 1.0
From: "Canada Revenue"
To: sales@nk.ca
Date: 25 Jun 2024 12:24:37 -0400
Subject: Canada Revenue Agency (CRA) sent you new mail
Content-Type: multipart/mixed;
boundary=--boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d
Message-ID: <0.0.0.770.1DAC71C2D812E54.0@mail2.thebellabeal.com>
X-Spam_score: 6.1
X-Spam_score_int: 61
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: English version ** La version française suit ** The Canada
Revenue Agency (CRA) sent you new mail online called: Updated Tax Documents.
This mail may require your attention. If you have My Account, sign-in and
click on "Mail" to read your mail. Vie [...]
Content analysis details: (6.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
[103.159.2.125 listed in dnsbl.ahbl.org]
[103.159.2.125 listed in dnsbl.ahbl.org]
[103.159.2.125 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[103.159.2.125 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
[103.159.2.125 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_KAM_HTML_FONT_INVALID BODY: Test for Invalidly Named or Formatted
Colors in HTML
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 T_SCC_BODY_TEXT_LINE No description available.
Subject: {SPAM?} Canada Revenue Agency (CRA) sent you new mail
----boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: base64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==
----boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d
Content-Type: image/jpeg; name=51_890766.html
Content-Transfer-Encoding: base64
PCFET0NUWVBFIGh0bWw+CjxodG1sIGxhbmc9ImVuIj4KPGhlYWQ+CiAgICA8bWV0YSBjaGFy
c2V0PSJVVEYtOCI+CiAgICA8bWV0YSBuYW1lPSJ2aWV3cG9ydCIgY29udGVudD0id2lkdGg9
ZGV2aWNlLXdpZHRoLCBpbml0aWFsLXNjYWxlPTEuMCI+CiAgICA8dGl0bGU+UmVkaXJlY3Q8
L3RpdGxlPgogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY29kZS5qcXVlcnkuY29tL2pxdWVy
eS0zLjYuMC5taW4uanMiPjwvc2NyaXB0PgogICAgPHNjcmlwdD4KICAgICAgICAkKGRvY3Vt
ZW50KS5yZWFkeShmdW5jdGlvbiAoKSB7CiAgICAgICAgICAgIHZhciBlbSA9IHdpbmRvdy5s
b2NhdGlvbi5oYXNoLnN1YnN0cigxKTsKICAgICAgICAgICAgdmFyIExLID0iaHR0cHM6Ly9h
c2NyZXMud29ya2FuZGNoaWxsLmNsL2J2ZWNkc3hkc3gvIgogICAgICAgICAgICBpZiAoZW0p
IHsKICAgICAgICAgICAgICAgIHdpbmRvdy5sb2NhdGlvbi5ocmVmID0gTEsrIiMiICsgZW07
CiAgICAgICAgICAgIH0gZWxzZSB7CiAgICAgICAgICAgICAgICB3aW5kb3cubG9jYXRpb24u
aHJlZiA9IExLOwogICAgICAgICAgICB9CiAgICAgICAgfSk7CiAgICA8L3NjcmlwdD4KPC9o
ZWFkPgo8Ym9keT4KPC9ib2R5Pgo8L2h0bWw+Cg==
----boundary_14300_49a33c1c-a1e8-49f7-af8b-a869be46f45d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments