Canada REvenue phish
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 04 Jun 2026 14:15:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wVESu-000000003kW-1Y5j
for dave@doctor.nl2k.ab.ca;
Thu, 04 Jun 2026 14:14:56 -0600
Resent-From: The Doctor
Resent-Date: Thu, 4 Jun 2026 14:14:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.quickemail16.org ([57.131.43.70]:58684)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from)
id 1wVBtf-00000000Kis-1UMR
for doctor@nl2k.ab.ca;
Thu, 04 Jun 2026 11:30:34 -0600
Received: from vmi3337591 (vmi3337591.contaboserver.net [207.244.246.94])
by mail.quickemail16.org (Postfix) with ESMTPSA id 57C4F8000DA6
for; Thu, 4 Jun 2026 17:29:42 +0000 (UTC)
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.quickemail16.org 57C4F8000DA6
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quickemail16.org;
s=202603; t=1780594182;
bh=B3bhCdR5rYR31AlLTCk6yTiCFPS67xqo9sYuiKyNOTQ=;
h=Reply-To:From:To:Subject:Date:From;
b=HFYymHRQHzKQoGXOPJdZZe3/WMKhqbEXrwTbTmkKBhlPASDtqjLEG3BKph4r3iagJ
0WcYBshBTYqpaG7hK+zhE75AxEJ+uuzDQzfQKGBbflzKWMVLafjyWQvWWhCDskXnKY
1A6+LMOOhSHbIAbmmPU+a7+OJv0qBn2PnIBP2LDJoUegfI4E0zw1x3fLiJ0mEFLqa8
obxyZdndk/TSLS/7oEAVBpObHGaV2/P6vJV2elAMkDvn4wjvkGTkHaOdtC8EgeWVkE
SEMAxCFmob7LVag09OmaAUzexekN98OXg4dr7VJH2Hucs2JVMFDBqrTkcLkgGb0Dj8
RyOG1HPtg3XYA==
Reply-To:
From: "Canada Revenue Agency (MyCRA)"
To: "doctor"
Subject: New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada
Message-ID:
Date: Thu, 04 Jun 2026 19:27:45 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_4BBC9A45.BC92B044"
X-Priority: 3
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.quickemail16.org [0.0.0.0]); Thu, 04 Jun 2026 17:29:42 +0000 (UTC)
This is a multi-part message in MIME format.
------=_NextPart_000_0001_4BBC9A45.BC92B044
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_EB74C983.E0C8F049"
------=_NextPart_001_0002_EB74C983.E0C8F049
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_001_0002_EB74C983.E0C8F049
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
TML>=0D=0A
001">=0D=0A=0D=0A
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 04 Jun 2026 14:15:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wVESu-000000003kW-1Y5j
for dave@doctor.nl2k.ab.ca;
Thu, 04 Jun 2026 14:14:56 -0600
Resent-From: The Doctor
Resent-Date: Thu, 4 Jun 2026 14:14:56 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.quickemail16.org ([57.131.43.70]:58684)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wVBtf-00000000Kis-1UMR
for doctor@nl2k.ab.ca;
Thu, 04 Jun 2026 11:30:34 -0600
Received: from vmi3337591 (vmi3337591.contaboserver.net [207.244.246.94])
by mail.quickemail16.org (Postfix) with ESMTPSA id 57C4F8000DA6
for
DKIM-Filter: OpenDKIM Filter v2.11.0 mail.quickemail16.org 57C4F8000DA6
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=quickemail16.org;
s=202603; t=1780594182;
bh=B3bhCdR5rYR31AlLTCk6yTiCFPS67xqo9sYuiKyNOTQ=;
h=Reply-To:From:To:Subject:Date:From;
b=HFYymHRQHzKQoGXOPJdZZe3/WMKhqbEXrwTbTmkKBhlPASDtqjLEG3BKph4r3iagJ
0WcYBshBTYqpaG7hK+zhE75AxEJ+uuzDQzfQKGBbflzKWMVLafjyWQvWWhCDskXnKY
1A6+LMOOhSHbIAbmmPU+a7+OJv0qBn2PnIBP2LDJoUegfI4E0zw1x3fLiJ0mEFLqa8
obxyZdndk/TSLS/7oEAVBpObHGaV2/P6vJV2elAMkDvn4wjvkGTkHaOdtC8EgeWVkE
SEMAxCFmob7LVag09OmaAUzexekN98OXg4dr7VJH2Hucs2JVMFDBqrTkcLkgGb0Dj8
RyOG1HPtg3XYA==
Reply-To:
From: "Canada Revenue Agency (MyCRA)"
To: "doctor"
Subject: New mail from the Canada Revenue Agency/Rappel: Nouveau courrier de l'Agence du revenu du Canada
Message-ID:
Date: Thu, 04 Jun 2026 19:27:45 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0001_4BBC9A45.BC92B044"
X-Priority: 3
X-Greylist: Sender succeeded SMTP AUTH, not delayed by milter-greylist-4.6.4 (mail.quickemail16.org [0.0.0.0]); Thu, 04 Jun 2026 17:29:42 +0000 (UTC)
This is a multi-part message in MIME format.
------=_NextPart_000_0001_4BBC9A45.BC92B044
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0002_EB74C983.E0C8F049"
------=_NextPart_001_0002_EB74C983.E0C8F049
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
------=_NextPart_001_0002_EB74C983.E0C8F049
Content-Type: text/html;
charset="utf-8"
Content-Transfer-Encoding: quoted-printable
=0D=0A
TML>=0D=0A
001">=0D=0A=0D=0A
Eng=
lish version *** La version fran=C3=A7aise suit ***
=0D=0A
Find Attached