RBC PHish from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 28 Nov 2024 13:58:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1tGlZm-00000000EaW-2d2X
for dave@doctor.nl2k.ab.ca;
Thu, 28 Nov 2024 13:57:26 -0700
Resent-From: The Doctor
Resent-Date: Thu, 28 Nov 2024 13:57:26 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f48.google.com ([209.85.218.48]:53393)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1tGiiD-00000000Nhv-134D
for root@nl2k.ab.ca;
Thu, 28 Nov 2024 10:54:01 -0700
Received: by mail-ej1-f48.google.com with SMTP id a640c23a62f3a-aa532dcb470so61649866b.2
for; Thu, 28 Nov 2024 09:52:10 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1732816322; x=1733421122; darn=nl2k.ab.ca;
h=date:to:from:subject:mime-version:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=HEf44/l6PiFzRURH3Fp3+O+bIFugP/f77rgIjBnVuPI=;
b=KpYNHh8sxL9Y4ET1SIDnRZWUMyc+lj8sQf6DDxfcDbRJrdrjb8COYRg7DB3UoHH/Eo
uHsO//3uZNtvFUvq718/7yaCt+X+CSbeK5iKa6/yePgefMF4SGw6HhyNZG4pC6PPMDTN
SU5sbsoW7q74IACYErk3jZSllZUR+9a1cg6+/KiLxSb2nB9ChHx5EIu8luhTRuaD9rMc
J1DVEOPsHx0x7qozN18NIUhaQZu5BhLiGj+s6UMseTy4wXPx3qMksyJFaTGn9LhAl+Og
M9oJgxnV8yorcoPh8DbZ/5zBdCydtknM+4CT+lyXKTL+WY5EM1NqKEmhxJCUVUmeOW5M
braw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1732816322; x=1733421122;
h=date:to:from:subject:mime-version:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=HEf44/l6PiFzRURH3Fp3+O+bIFugP/f77rgIjBnVuPI=;
b=FeAd7uOpgZAeyIMQH6C6XYkcbOE+ZJWfcRlCa6MMz/NQLCvJbMMm3xIl+XLf3Zyfid
f08wWSJDnCRYoftjFlUAF4F43sajhP73n3zuOk1/gm5v/Xxa7PLdIT8AeJbMnjpFAbTm
4Y6nQ0yMgTNtlUQ7kZsAq2PNbV26hG42oMbSqWrcpitYKjJClKekR5lsnsWnMkuhloMi
+klaITLzkZBayLAF+ZdUpsOF9WLFPjAtfhA4a46wz3TZ9gU8EzZITA7+LXSgHJEggMHC
Z4LrVtTUkbTkVKYoszBw2zh5OntMKzvhtoIFIYNP5C9rmyuo7BM1n5STl3QQu4SWwbCR
pe3w==
X-Gm-Message-State: AOJu0YwOQP3pGbsBjzz5M5V5lktF91F7IwOQamC/f0PpV99hDnKcapX/
Z0Fk0mX4oWMJ52KiUW/NGknvE6VsV+Zoy0WGgTq+nuWEb0DiIoQCTWZXEw==
X-Gm-Gg: ASbGnctet45gT8oQIK03gxUDFAWV4DLFl17vG13hh9+6Jf/tCCObZuLxYUiekYaGXeI
s1R+JbzJ3v5Kf0l1GWD09I+ybUhvV84inWbv9ZHcIj0eFb0DvXLj1t+TM0zlqc+gxKdwoIWHqm8
BTOjVqdAZVRGr6fKVH8lmXoAAAHvLGN1KF2+qp1Yu6KnLePu5c7S14Vs8e/TTK5GMz8A9X1JxqV
LL8Tcn/O65rrynoAEU1BKYZx3Aurjohqse6T/UoUcSGBVB38is=
X-Google-Smtp-Source: AGHT+IHoIufc/ESdi0KrMs9ZwjYjQm4IQTliI6C+4MB3yoHM4a3eJ0FS1YUboPoxjeOQY2aCLJLekQ==
X-Received: by 2002:a05:6402:402a:b0:5d0:9054:b119 with SMTP id 4fb4d7f45d1cf-5d09054b1d4mr6902738a12.21.1732816322438;
Thu, 28 Nov 2024 09:52:02 -0800 (PST)
Received: from rbc-pc ([2a03:94e3:231b:4b15:876a:f240:e65a:d254])
by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-5d097dd690dsm970935a12.46.2024.11.28.09.52.01
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 28 Nov 2024 09:52:02 -0800 (PST)
Message-ID: <6748adc2.500a0220.e739c.4396@mx.google.com>
Content-Type: multipart/mixed; boundary="===============6015699579118558816=="
MIME-Version: 1.0
Subject: Time to verify your email address
From: RBC Royal Bank
To: root@nl2k.ab.ca
Date: Thu, 28 Nov 2024 09:52:00 -0800
X-Spam_score: 7.7
X-Spam_score_int: 77
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear RBC Bank Client, The following RBC Bank e-Alert(s) is(are)
available: Confirm your email address to finalize your verification
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
[209.85.218.48 listed in dnsbl.ahbl.org]
[209.85.218.48 listed in dnsbl.ahbl.org]
[209.85.218.48 listed in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.48 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dahiruyauba5(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[dahiruyauba5(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
Subject: {SPAM?} Time to verify your email address
--===============6015699579118558816==
Content-Type: multipart/related; boundary="===============4290740746946701581=="
MIME-Version: 1.0
--===============4290740746946701581==
Content-Type: multipart/alternative; boundary="===============2630340500869453248=="
MIME-Version: 1.0
--===============2630340500869453248==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============2630340500869453248==--
--===============4290740746946701581==--
--===============6015699579118558816==--
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 28 Nov 2024 13:58:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1tGlZm-00000000EaW-2d2X
for dave@doctor.nl2k.ab.ca;
Thu, 28 Nov 2024 13:57:26 -0700
Resent-From: The Doctor
Resent-Date: Thu, 28 Nov 2024 13:57:26 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-ej1-f48.google.com ([209.85.218.48]:53393)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1tGiiD-00000000Nhv-134D
for root@nl2k.ab.ca;
Thu, 28 Nov 2024 10:54:01 -0700
Received: by mail-ej1-f48.google.com with SMTP id a640c23a62f3a-aa532dcb470so61649866b.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1732816322; x=1733421122; darn=nl2k.ab.ca;
h=date:to:from:subject:mime-version:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=HEf44/l6PiFzRURH3Fp3+O+bIFugP/f77rgIjBnVuPI=;
b=KpYNHh8sxL9Y4ET1SIDnRZWUMyc+lj8sQf6DDxfcDbRJrdrjb8COYRg7DB3UoHH/Eo
uHsO//3uZNtvFUvq718/7yaCt+X+CSbeK5iKa6/yePgefMF4SGw6HhyNZG4pC6PPMDTN
SU5sbsoW7q74IACYErk3jZSllZUR+9a1cg6+/KiLxSb2nB9ChHx5EIu8luhTRuaD9rMc
J1DVEOPsHx0x7qozN18NIUhaQZu5BhLiGj+s6UMseTy4wXPx3qMksyJFaTGn9LhAl+Og
M9oJgxnV8yorcoPh8DbZ/5zBdCydtknM+4CT+lyXKTL+WY5EM1NqKEmhxJCUVUmeOW5M
braw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1732816322; x=1733421122;
h=date:to:from:subject:mime-version:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=HEf44/l6PiFzRURH3Fp3+O+bIFugP/f77rgIjBnVuPI=;
b=FeAd7uOpgZAeyIMQH6C6XYkcbOE+ZJWfcRlCa6MMz/NQLCvJbMMm3xIl+XLf3Zyfid
f08wWSJDnCRYoftjFlUAF4F43sajhP73n3zuOk1/gm5v/Xxa7PLdIT8AeJbMnjpFAbTm
4Y6nQ0yMgTNtlUQ7kZsAq2PNbV26hG42oMbSqWrcpitYKjJClKekR5lsnsWnMkuhloMi
+klaITLzkZBayLAF+ZdUpsOF9WLFPjAtfhA4a46wz3TZ9gU8EzZITA7+LXSgHJEggMHC
Z4LrVtTUkbTkVKYoszBw2zh5OntMKzvhtoIFIYNP5C9rmyuo7BM1n5STl3QQu4SWwbCR
pe3w==
X-Gm-Message-State: AOJu0YwOQP3pGbsBjzz5M5V5lktF91F7IwOQamC/f0PpV99hDnKcapX/
Z0Fk0mX4oWMJ52KiUW/NGknvE6VsV+Zoy0WGgTq+nuWEb0DiIoQCTWZXEw==
X-Gm-Gg: ASbGnctet45gT8oQIK03gxUDFAWV4DLFl17vG13hh9+6Jf/tCCObZuLxYUiekYaGXeI
s1R+JbzJ3v5Kf0l1GWD09I+ybUhvV84inWbv9ZHcIj0eFb0DvXLj1t+TM0zlqc+gxKdwoIWHqm8
BTOjVqdAZVRGr6fKVH8lmXoAAAHvLGN1KF2+qp1Yu6KnLePu5c7S14Vs8e/TTK5GMz8A9X1JxqV
LL8Tcn/O65rrynoAEU1BKYZx3Aurjohqse6T/UoUcSGBVB38is=
X-Google-Smtp-Source: AGHT+IHoIufc/ESdi0KrMs9ZwjYjQm4IQTliI6C+4MB3yoHM4a3eJ0FS1YUboPoxjeOQY2aCLJLekQ==
X-Received: by 2002:a05:6402:402a:b0:5d0:9054:b119 with SMTP id 4fb4d7f45d1cf-5d09054b1d4mr6902738a12.21.1732816322438;
Thu, 28 Nov 2024 09:52:02 -0800 (PST)
Received: from rbc-pc ([2a03:94e3:231b:4b15:876a:f240:e65a:d254])
by smtp.gmail.com with ESMTPSA id 4fb4d7f45d1cf-5d097dd690dsm970935a12.46.2024.11.28.09.52.01
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 28 Nov 2024 09:52:02 -0800 (PST)
Message-ID: <6748adc2.500a0220.e739c.4396@mx.google.com>
Content-Type: multipart/mixed; boundary="===============6015699579118558816=="
MIME-Version: 1.0
Subject: Time to verify your email address
From: RBC Royal Bank
To: root@nl2k.ab.ca
Date: Thu, 28 Nov 2024 09:52:00 -0800
X-Spam_score: 7.7
X-Spam_score_int: 77
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear RBC Bank Client, The following RBC Bank e-Alert(s) is(are)
available: Confirm your email address to finalize your verification
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
[209.85.218.48 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
[209.85.218.48 listed in dnsbl.ahbl.org]
[209.85.218.48 listed in dnsbl.ahbl.org]
[209.85.218.48 listed in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
[2a03:94e3:231b:4b15:876a:f240:e65a:d254 listed]
[in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.218.48 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.218.48 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.218.48 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[dahiruyauba5(at)gmail.com]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[dahiruyauba5(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 MPART_ALT_DIFF BODY: HTML and text parts are different
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.0 VOWEL_URI_5 URI hostname with 5 consecutive vowels
Subject: {SPAM?} Time to verify your email address
--===============6015699579118558816==
Content-Type: multipart/related; boundary="===============4290740746946701581=="
MIME-Version: 1.0
--===============4290740746946701581==
Content-Type: multipart/alternative; boundary="===============2630340500869453248=="
MIME-Version: 1.0
--===============2630340500869453248==
Content-Type: text/html; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64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--===============2630340500869453248==--
--===============4290740746946701581==--
--===============6015699579118558816==--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments