NetKnow Internet Knowledge Company blog

More Royal Bank of Canada Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:28:58 -0600

From - Fri May 17 16:20:41 2013
X-Account-Key: account1
X-UIDL: 00001a064f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_UCE_PFSM_1 autolearn=no version=3.3.2
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from gallifrey.nk.ca (gallifrey.nk.ca [204.209.81.3])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id B489512CFA82
for ; Thu, 16 May 2013 05:41:16 -0600 (MDT)
Received: from root by gallifrey.nk.ca with local (Exim 4.80.1)
(envelope-from )
id 1UcwY5-0006cB-Rp
for dave@nk.ca; Thu, 16 May 2013 05:40:41 -0600
Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"
Resent-Date: Thu, 16 May 2013 05:40:41 -0600
Resent-Message-ID: <20130516114041.GA24028@gallifrey.nk.ca>
Resent-To: dave@nk.ca
Received: from toroondcbmts08.bellnexxia.net ([207.236.237.42] helo=toroondcbmts08-srv.bellnexxia.net)
by gallifrey.nk.ca with esmtp (Exim 4.80.1)
(envelope-from )
id 1Ucv3E-00056j-G8
for doctor@gallifrey.nk.ca; Thu, 16 May 2013 04:04:52 -0600
Received: from toip54-bus.srvr.bell.ca ([67.69.240.140])
by toroondcbmts08-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20130516100443.RPOJ23610.toroondcbmts08-srv.bellnexxia.net@toip54-bus.srvr.bell.ca>
for ; Thu, 16 May 2013 06:04:43 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av9/ADajlFFMRh8H/2dsb2JhbAA+BwYBDwEWgi4DPzcSIoppeZ9ggz12A4oNhm0EARRpFnSCBQEBAS83EwsvAQEBCRQKAgchQ4ZFFgWBSgQImTABQgKCWjxPAoh5hQsFg3YQhHsCAUQNh1uNVBIdCWMcJAyCXmEDgSWHQjKOGoZBin6DE4FlAgcXSCcs
X-IronPort-AV: E=Sophos;i="4.87,683,1363147200";
d="scan'208,217";a="329842712"
Received: from unknown (HELO thatcherandwands.com) ([76.70.31.7])
by toip54-bus.srvr.bell.ca with ESMTP; 16 May 2013 06:04:42 -0400
Received: from advisor.webssl.com ([78.100.135.194]) by thatcherandwands.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 16 May 2013 06:04:41 -0400
From: RBC Royal Bank
To: doctor@gallifrey.nk.ca
Subject: {Spam?} Message Center: 1 New Alert Message!
Date: 16 May 2013 13:04:36 +0300
Message-ID: <20130516130436.E5394176518131A7@advisor.webssl.com>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-OriginalArrivalTime: 16 May 2013 10:04:42.0468 (UTC) FILETIME=[C8F98240:01CE521C]
X-NetKnow-OutGoing-4-84-5-3-MailScanner: Found to be clean, Found to be clean
X-NetKnow-OutGoing-4-84-5-3-MailScanner-SpamCheck: spam, SORBS-SPAM,
SpamAssassin (not cached, score=6.293, required 1, BAYES_99 3.50,
HTML_IMAGE_ONLY_12 2.06, HTML_MESSAGE 0.00, MIME_HTML_ONLY 0.72,
T_REMOTE_IMAGE 0.01)
X-NetKnow-OutGoing-4-84-5-3-MailScanner-SpamScore: ssssss
X-NetKnow-OutGoing-4-84-5-3-MailScanner-Information: Please contact the ISP for more information
X-NetKnow-OutGoing-4-84-5-3-MailScanner-ID: 1UcwY5-0006cB-Rp
X-NetKnow-OutGoing-4-84-5-3-MailScanner-IP-Protocol: IPv4
X-NetKnow-OutGoing-4-84-5-3-MailScanner-From: root@gallifrey.nk.ca
X-NetKnow-OutGoing-4-84-5-3-MailScanner-Watermark: 1369136443.42603@XEozBveYEQaU/UkhItE2fQ
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID4DB3604-3B044A68
X-Brightmail-Tracker: AAAAAh3FBaodxQZB
X-Brightmail-Tracker: AAAAAA==

RBC Royal Bank / Message Center: 1 New Alert Message!
yalbank_en.gif">

old.gif"> 1 New Alert Message!

ng=3D"0" width=3D"100%">

cellpadding=3D"3" cellspacing=3D"0" width=3D"100%">

Customer Service: Your account has b=
een limited! u044-011.ym.edu.tw/icons/ssl/rbaccess/encrypted-session/F6=3D1&F7=3DIB&F21=
=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH">Click to Resol=
ve

Thank you for using Royal Bank of Canada.

--

This message has been scanned for viruses and

dangerous content by
MailScanner, and is

believed to be clean.

--

This message has been scanned for viruses and

dangerous content by
MailScanner, and is

believed to be clean.

=3D"left" color=3D"#000000">No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

t" color=3D"#000000">No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

More Paypal Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:24:23 -0600

From - Fri May 17 16:20:26 2013
X-Account-Key: account1
X-UIDL: 000019ff4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable
version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from mailer.inditex.com (mailer.inditex.com [194.224.179.117])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 68F5B12CFA87
for ; Thu, 16 May 2013 00:21:19 -0600 (MDT)
Received: from zainetweb2.central.inditex.grp (unknown [10.71.0.8])
by mailer.inditex.com (Postfix) with ESMTP id 7774A13BEE
for ; Thu, 16 May 2013 08:21:18 +0200 (CEST)
Received: by zainetweb2.central.inditex.grp (Postfix, from userid 99)
id 6DABCB0656; Thu, 16 May 2013 08:20:58 +0200 (CEST)
To: dave@doctor.nl2k.ab.ca
Subject: Paypal.com
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
From: dave@doctor.nl2k.ab.ca
Message-Id: <20130516062118.6DABCB0656@zainetweb2.central.inditex.grp>
Date: Thu, 16 May 2013 08:20:58 +0200 (CEST)
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID6EAC9341-5F432CF4
X-Brightmail-Tracker: AAAAAR3FB20=
X-Brightmail-Tracker: AAAAAA==

http-equiv="content-type">
paypal

src="http://i.imgur.com/PpFLu.png">

Your paypal
account is blocked !

You are not logged in updating our system.

Perform your upgrade now and continue using our online services.

Make
your update.

Access
your email
through internet explorer 7, 8 style="font-family: Arial; font-weight: bold;"> or 9 style="font-family: Arial; font-weight: bold;"> and update your paypal
account.

Other browsers are not compatible to upgrade.

style="font-family: Arial; font-weight: bold;">Paypal Update 2013

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

More Toronto Dominion Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:23:39 -0600

From - Fri May 17 16:20:12 2013
X-Account-Key: account1
X-UIDL: 000019f74f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable
version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 3671312CFA8F; Wed, 15 May 2013 13:54:05 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 15 May 2013 13:54:04 -0600
Resent-Message-ID: <20130515195404.GA19435@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: games@nl2k.ab.ca
Delivered-To: games@nl2k.ab.ca
Received: from upiexc.upi.local (mail.upitrans.com.tr [83.66.108.37])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 49E7612CFA82
for ; Wed, 15 May 2013 12:13:09 -0600 (MDT)
Received: from USER ([192.168.1.7]) by upiexc.upi.local with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 May 2013 21:09:44 +0300
Content-Type: text/html
Subject: [Norton AntiSpam]Online Security Alert
FROM: TD@doctor.nl2k.ab.ca, Canada@doctor.nl2k.ab.ca,
Trust@doctor.nl2k.ab.ca
Message-ID:
X-OriginalArrivalTime: 15 May 2013 18:09:45.0000 (UTC) FILETIME=[6105BA80:01CE5197]
Date: 15 May 2013 21:09:45 +0300
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID46BA558D-2B78B7B
X-Brightmail-Tracker: AAAABR3FA0AdxQdEHcUCoh3FBzMdxQcv

Untitled Document

You are seeing this message because TD Security has detected suspicious activity on your account and has temporarily suspended it as a security precaution.

This may be because your TD Canada Trust account was accessed from an unfamiliar computer or you have made changes in your account information.

You will be able to regain access to your account once you complete the automated security verification process.

How can i regain access to my account ?

To regain access to your account, you must confirm your identity by completing our automated security verification process.

You can do that by simply clicking here.

You will then be taken through a series of steps to help verify your identity and, if necessary, scan your computer for viruses.

The security verification process is automated and is not designed to be time-intensive.

In most situations, you should be able to confirm your identity and restore your account in a few minutes.

------------------------------------------------------------------------------------------------------------------------------------

Recipient: %recipient_email%

Sender: TD Canada Trust Account Security Department.

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368641608"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Rewrote HTML tag: >>html xmlns="http://www.w3.org/1999/xhtml"<<

                as: >>html DEFANGED_xmlns="http://www.w3.org/1999/xhtml"<<

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style type="text/css"<<

                as: >>DEFANGED_style type="text/css"<<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Total modifications so far: 3

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368641608"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Rewrote HTML tag: >>html xmlns="http://www.w3.org/1999/xhtml"<<

                as: >>html DEFANGED_xmlns="http://www.w3.org/1999/xhtml"<<

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style type="text/css"<<

                as: >>DEFANGED_style type="text/css"<<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Total modifications so far: 3

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368641608"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Rewrote HTML tag: >>html xmlns="http://www.w3.org/1999/xhtml"<<

                as: >>html DEFANGED_xmlns="http://www.w3.org/1999/xhtml"<<

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style type="text/css"<<

                as: >>DEFANGED_style type="text/css"<<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Total modifications so far: 3

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

More Royal Bank of Canada Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:22:42 -0600

From - Wed May 15 05:57:35 2013
X-Account-Key: account1
X-UIDL: 000019dd4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 14 May 2013 13:37:23 -0600
From: RBC Royal Bank
To: dave@nk.ca
Subject: [Norton AntiSpam]*SPAM* =?utf-8?Q?Spam?=
1 New Alert Message!
Date: 14 May 2013 21:33:20 +0200
Message-Id: <20130514213320.174FD9982150A321@advisor.webssl.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *****************
X-Spam-Status: Yes, score=17.0 required=5.0 tests=RCVD_IN_JMF_BR,RCVD_IN_PSBL,
RCVD_IN_UCE_PFSM_1,URIBL_PH_SURBL autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_51929273.25FD4672"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5825]
X-AVG-ID: ID1265A289-7CB86490
X-Brightmail-Tracker: AAAAAx15GvIdeRrpHXkz6A==

This is a multi-part message in MIME format.

------------=_51929273.25FD4672
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: RBC Royal Bank / Message Center: 1 New Alert Message! 1 New
Alert Message! Customer Service: Your account has been limited! Click to
Resolve Thank you for using Royal Bank of Canada. [...]

Content analysis details: (17.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_UCE_PFSM_1 RBL: Received via a relay in UCE_PFSM_1
[82.177.154.4 listed in dnsbl-1.uceprotect.net]
11 RCVD_IN_JMF_BR RBL: Sender listed in JMF-BROWN
[212.35.71.73 listed in dnsbl-1.uceprotect.net]
[212.35.71.73 listed in hostkarma.junkemailfilter.com]
2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: 81.15.144.2]
2.0 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.177.154.4 listed in psbl.surriel.com]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_51929273.25FD4672
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from smtp2.batelco.jo (smtp2.batelco.jo [212.35.71.73])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id A382A12CFA84
for ; Tue, 14 May 2013 13:37:08 -0600 (MDT)
Received: from prime-jau.Jau.com (mail.jau.edu.jo [212.118.19.52])
by smtp2.batelco.jo (Postfix) with ESMTP id 3F2E510A72E
for ; Tue, 14 May 2013 21:34:56 +0300 (EEST)
Received: from advisor.webssl.com ([82.177.154.4]) by prime-jau.Jau.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 14 May 2013 22:31:36 +0300
From: RBC Royal Bank
To: dave@nk.ca
Subject: =?utf-8?Q?Spam?=
1 New Alert Message!
Date: 14 May 2013 21:33:20 +0200
Message-ID: <20130514213320.174FD9982150A321@advisor.webssl.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-SpamInfo: FortiGuard - AntiSpam ip, connection black ip 82.177.154.4
X-OriginalArrivalTime: 14 May 2013 19:31:36.0671 (UTC) FILETIME=[A6317EF0:01CE50D9]
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean

RBC Royal Bank / Message Center: 1 New Alert Message!
albank_en.gif">

ld.gif"> 1 New Alert Message!

=20

g=3D"0" width=3D"100%">

ellpadding=3D"3" cellspacing=3D"0" width=3D"100%">

Customer Service: Your account has be=
en limited! 5.144.2/icons/ssl/encrypted-session/F6=3D1&F7=3DIB&F21=3DIB&F22=3DIB&REQUEST=
=3DClientSignin&LANGUAGE=3DENGLISH/index.html">Click to Resolve

=20
Thank you for using Royal Bank of Canada.

------------=_51929273.25FD4672
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-2450F706======="

--=======AVGMAIL-2450F706=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5825 - Release Date: 05/15/13=

--=======AVGMAIL-2450F706=======--

------------=_51929273.25FD4672
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-5AB4F267======="

--=======AVGMAIL-5AB4F267=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5825 - Release Date: 05/15/13=

--=======AVGMAIL-5AB4F267=======--

------------=_51929273.25FD4672--

More Bank of Montreal Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:20:53 -0600

From - Wed May 15 05:57:29 2013
X-Account-Key: account1
X-UIDL: 000019d44f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 14 May 2013 07:36:47 -0600
From: "BMO"
To: "bmo"
Subject: [Norton AntiSpam]*SPAM* [BMO] Alert message
Date: Mon, 13 May 2013 12:06:22 +0100
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *********************************************
X-Spam-Status: Yes, score=45.0 required=5.0 tests=SARE_UNSUB38D
autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_51923DEF.0A5AC7ED"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5825]
X-AVG-ID: ID4F36CE0-27EF6021
X-Brightmail-Tracker: AAAABR15GvIdeRrpHXk0QR15NOYdeUD7

This is a multi-part message in MIME format.

------------=_51923DEF.0A5AC7ED
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see the administrator of
that system for details. [...]

Content analysis details: (45.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
45 SARE_UNSUB38D RAW: SARE_UNSUB38D

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_51923DEF.0A5AC7ED
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 468DD12CFAB6; Tue, 14 May 2013 07:36:33 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Tue, 14 May 2013 07:36:33 -0600
Resent-Message-ID: <20130514133633.GA8387@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 14 May 2013 03:03:42 -0600
From: "BMO"
To: "bmo"
Subject: SPAM [BMO] Alert message
Date: Mon, 13 May 2013 12:06:22 +0100
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *********************************************
X-Spam-Status: Yes, score=45.0 required=5.0 tests=SARE_UNSUB38D
autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5191FDEE.060732DA"
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean

This is a multi-part message in MIME format.

------------=_5191FDEE.060732DA
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see the administrator of
that system for details. [...]

Content analysis details: (45.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
45 SARE_UNSUB38D RAW: SARE_UNSUB38D

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_5191FDEE.060732DA
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 14 May 2013 03:03:34 -0600
From: "BMO"
To: "bmo"
Subject: SPAM [BMO] Alert message
Date: Mon, 13 May 2013 12:06:22 +0100
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *********************************************
X-Spam-Status: Yes, score=45.0 required=5.0 tests=SARE_UNSUB38D
autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5191FDE6.A87ECC90"
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This is a multi-part message in MIME format.

------------=_5191FDE6.A87ECC90
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: This is a security alert from BMO Online Fraud Prevention.
We identified activity on your account that may be fraudulent and ask you
confirm your identity. We have not fully restricted your account but you
must confirm your identity in order to avoid any suspension. Please Click
Here to confirm your identity. [...]

Content analysis details: (45.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
45 SARE_UNSUB38D RAW: SARE_UNSUB38D

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_5191FDE6.A87ECC90
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: doctor@nl2k.ab.ca
Delivered-To: doctor@nl2k.ab.ca
Received: from host.saysonconsulting.com (server.saysonconsulting.com [70.38.67.205])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 4BDA312CFA8C
for ; Tue, 14 May 2013 03:03:27 -0600 (MDT)
Received: from localhost ([127.0.0.1]:34165 helo=host.saysonconsulting.com)
by host.saysonconsulting.com with esmtp (Exim 4.80)
(envelope-from )
id 1UbqbO-0003AE-2J; Mon, 13 May 2013 07:07:34 -0400
Received: from host81-137-244-36.in-addr.btopenworld.com ([81.137.244.36]:4835
helo=168.187.240.163)
by host.saysonconsulting.com with esmtpa (Exim 4.80)
(envelope-from ) id 1UbqaK-0002m0-41
for bmo@totalfluidpower.ca; Mon, 13 May 2013 07:06:28 -0400
From: "BMO"
To: "bmo"
Date: Mon, 13 May 2013 12:06:22 +0100
Organization: btopenworld.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0000_01C6527E.AE8904D0"
Subject: [BMO] Alert message
X-BeenThere: bmo@totalfluidpower.ca
X-Mailman-Version: 2.1.15
Precedence: list
List-Id:
List-Unsubscribe: ,

List-Archive:
List-Post:
List-Help:
List-Subscribe: ,

Errors-To: bmo-bounces@totalfluidpower.ca
Sender: "BMO"
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host.saysonconsulting.com
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - totalfluidpower.ca
X-Get-Message-Sender-Via: host.saysonconsulting.com: acl_c_authenticated_local_user: mailman/mailman
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean

This is a multi-part message in MIME format.

------=_NextPart_000_0000_01C6527E.AE8904D0
Content-Type: text/plain;
charset="utf-8"
Content-Transfer-Encoding: 8bit

This is a security alert from BMO Online Fraud Prevention.
We identified activity on your account that may be fraudulent and ask you confirm your identity.
We have not fully restricted your account but you must confirm your identity in order to avoid any suspension.
Please Click Here to confirm your identity.

For your protection, transactions on your account may be limited until you are able to confirm your identity.
We realize that this precaution may cause you some inconvenience.
However keeping your account safe is one of our top priorities.

Thank you for being our customer.

Jake Holloway
BMO Chief Operating Officer
------=_NextPart_000_0000_01C6527E.AE8904D0
Content-Type: text/html;
charset="utf-8"

This is a security alert from BMO Online Fraud Prevention.
We identified
activity on your account that may be fraudulent and ask you confirm your
identity.
We have not fully restricted your account but you must confirm your
identity in order to avoid any suspension.

DEFANGED_rel="nofollow" target="_blank">Please Click Here to confirm
your identity.

For your protection,
transactions on your account may be limited until you are able to confirm your
identity.
We realize that this precaution may cause you some
inconvenience.
However keeping your account safe is one of our top
priorities.

Thank you for being our
customer.

src="http://images.xendpay.com/email/jake-sig.png">
Jake
Holloway
style="FONT-FAMILY: Arial,sans-serif; FONT-SIZE: 9pt">BMO Chief Operating
Officer

------=_NextPart_000_0000_01C6527E.AE8904D0--

------------=_5191FDE6.A87ECC90
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.

Sanitizer (start="1368522214"):
Part (pos="740"):
SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
Match (names="unnamed.txt", rule="2"):
Enforced policy: accept

Part (pos="2047"):
Part (pos="174"):
Part (pos="2477"):
SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
Match (names="unnamed.txt", rule="2"):
Enforced policy: accept

Part (pos="3230"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept

Rewrote HTML tag: >>A id=yahoo href="http://www1.bmo.mahoot.ir/bmo/bmo@totalfluidpower.ca" rel=nofollow target=_blank<<
as: >>A id="yahoo" href="http://www1.bmo.mahoot.ir/bmo/bmo@totalfluidpower.ca" DEFANGED_rel="nofollow" target="_blank"<<
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.

Rewrote HTML tag: >>/SPAN<<
as: >>/DEFANGED_SPAN<<
Rewrote HTML tag: >>DIV<<
as: >>p__DEFANGED_DIV<<
Rewrote HTML tag: >>/SPAN<<
as: >>/DEFANGED_SPAN<<
Rewrote HTML tag: >>SPAN style="FONT-FAMILY: Arial,sans-serif; FONT-SIZE: 9pt"<<
as: >>DEFANGED_SPAN style="FONT-FAMILY: Arial,sans-serif; FONT-SIZE: 9pt"<<
Rewrote HTML tag: >>/SPAN<<
as: >>/DEFANGED_SPAN<<
Rewrote HTML tag: >>/DIV<<
as: >>/p__DEFANGED_DIV<<

Total modifications so far: 7

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

------------=_5191FDE6.A87ECC90--

------------=_5191FDEE.060732DA--

------------=_51923DEF.0A5AC7ED
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-2DD236AD======="

--=======AVGMAIL-2DD236AD=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5825 - Release Date: 05/15/13=

--=======AVGMAIL-2DD236AD=======--

------------=_51923DEF.0A5AC7ED
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-0B41C693======="

--=======AVGMAIL-0B41C693=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5825 - Release Date: 05/15/13=

--=======AVGMAIL-0B41C693=======--

------------=_51923DEF.0A5AC7ED--

Paypal Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:13:43 -0600

From - Fri May 10 15:38:46 2013
X-Account-Key: account1
X-UIDL: 000019474f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.0 required=5.0 tests=RCVD_IN_SPAMCANNIBAL
autolearn=no version=3.3.2
X-Original-To: dave@nl2k.ab.ca
Delivered-To: dave@nl2k.ab.ca
Received: from us59.toservers.com (us59.toservers.com [216.59.32.59])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 7ECDE12CFA86
for ; Fri, 10 May 2013 15:33:17 -0600 (MDT)
Received: from us59.toservers.com (localhost [127.0.0.1])
by us59.toservers.com (Postfix) with ESMTP id 491313497091E
for ; Fri, 10 May 2013 18:34:39 -0300 (ART)
Received: by us59.toservers.com (Postfix, from userid 34144)
id 47DBA34970915; Fri, 10 May 2013 18:34:39 -0300 (ART)
To: dave@nl2k.ab.ca
Subject: You just need to confirm your billing address.
From: PayPal Service
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20130510213439.47DBA34970915@us59.toservers.com>
Date: Fri, 10 May 2013 18:34:39 -0300 (ART)
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5813]
X-AVG-ID: ID4E772E20-422ACCD5
X-Brightmail-Tracker: AAAAAx15M1kdeRn6HXpP6w==
X-Brightmail-Tracker: AAAAAA==

tr>

Dear member,

d="yui_3_7_2_1_1366036663675_1972">You just need to confirm your billing address.

If you did not confirm it until 15th May 2013, Your account will be deactivated.

Just a reminder:

Never share your password with anyone.
Never share your personal information with any one.
Use different passwords for each of your online accounts.
Be sure to include uppercase and lowercase letters, numbers, and symbols in your password.

Sincerely,
PayPal

To get in touch with us

Click To Confirm

This email was sent by an automated system, so if you reply, nobody will see it.

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5813 - Release Date: 05/10/13

LinkedIn Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:12:37 -0600

From - Fri May 10 13:31:24 2013
X-Account-Key: account1
X-UIDL: 0000193b4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ****
X-Spam-Status: No, score=4.0 required=5.0 tests=RCVD_IN_SPAMCANNIBAL,
URIBL_PH_SURBL autolearn=no version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from us59.toservers.com (us59.toservers.com [216.59.32.59])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id D1B0212CFA9D
for ; Fri, 10 May 2013 13:22:52 -0600 (MDT)
Received: from us59.toservers.com (localhost [127.0.0.1])
by us59.toservers.com (Postfix) with ESMTP id F356D3479AB29
for ; Fri, 10 May 2013 16:24:13 -0300 (ART)
Received: by us59.toservers.com (Postfix, from userid 34144)
id F16C43479AB1E; Fri, 10 May 2013 16:24:13 -0300 (ART)
To: dave@doctor.nl2k.ab.ca
Subject: [Norton AntiSpam]You need to confirm your email address.
From: Linkedln Support
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20130510192413.F16C43479AB1E@us59.toservers.com>
Date: Fri, 10 May 2013 16:24:13 -0300 (ART)
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5813]
X-AVG-ID: ID2A9C21B4-2C8CADF1
X-Brightmail-Tracker: AAAAAx15GfodeTQ9HXpYtg==
X-Brightmail-Tracker: AAAAAR27LnE=

We write to inform you that your LinkedIn account has been blocked due to inactivity.

To ensure that your online services with LinkedIn will no longer be interrupted

Click here to unblock your account.

You will be asked to log into your account to confirm this email address. Be sure to log in with your current primary email address.

We ask you to confirm your email address before sending invitations or requesting contacts at LinkedIn. You can have several email addresses, but one will need to be confirmed at all times to use the system.

If you have more than one email address, you can choose one to be your primary email address. This is the address you will log in with, and the address to which we will deliver all email messages regarding invitations and requests, and other system mail.

Thank you for using LinkedIn!

--The LinkedIn Team

http://www.linkedin.com/

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5813 - Release Date: 05/10/13

Bank of Montreal Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:11:49 -0600

From - Fri May 17 16:20:40 2013
X-Account-Key: account1
X-UIDL: 00001a054f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.0 required=5.0 tests=RCVD_IN_UCE_PFSM_1
autolearn=no version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 13C7D12CFA83; Thu, 16 May 2013 05:21:35 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Thu, 16 May 2013 05:21:35 -0600
Resent-Message-ID: <20130516112135.GA10272@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: sales@nk.ca
Delivered-To: sales@nk.ca
Received: from clay-system.jp (www3363uf.sakura.ne.jp [219.94.255.137])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6BB3112CFAA1
for ; Thu, 16 May 2013 05:04:05 -0600 (MDT)
Received: (qmail 20138 invoked by uid 510); 9 May 2013 22:05:06 +0900
X-Qmail-Scanner-Diagnostics: from 72.18.197.26 (info@diet-compilation.com@72.18.197.26) by www3363uf.sakura.ne.jp (envelope-from , uid 0) with qmail-scanner-2.10
(spamassassin: 3.3.1.
Clear:RC:0(72.18.197.26):SA:0(6.2/13.0):.
Processed in 0.260257 secs); 09 May 2013 13:05:06 -0000
X-Envelope-From: btp@cosmomusic.ca
Received: from unknown (HELO cosmomusic.ca) (info@diet-compilation.com@72.18.197.26)
by 0 with SMTP; 9 May 2013 22:05:06 +0900
Reply-To: noreply@cosmomusic.ca
From: "BMO Bank of Montreal"
Subject: Your Online Banking access has been restricted.
Date: 09 May 2013 06:04:48 -0700
Message-ID: <20130509060448.62C083BE1E478027@cosmomusic.ca>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID2942CB7E-D3247A
X-Brightmail-Tracker: AAAAAx3FWDkdxWDdHcVX9g==
X-Brightmail-Tracker: AAAAAA==

252">
New Page 1

" cellPadding=3D"10"
width=3D"575" summary=3D"layout" borderColorLight=3D"#003399" border=3D"1">=

ges/GdIxflw.png">

>

Your Online Banking access has been locked due to an unusua=
l number of failed login attempts.

You will need to click : ref=3D"http://reliancefinance.com.au/checklists/ck/">Log On to BMO Online B=
anking and proceed with the verification process. erdana" size=3D"2">

Sincer=
ely,

BMO Fi=
nancial Group face=3D"Verdana">

This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start=3D"1368702259"):

  SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=

html"):

    Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):

      Enforced policy: accept



  Rewrote HTML tag: >>_meta http-equiv=3D"Content-Language" content=

=3D"en-us"_<<

                as: >>_meta DEFANGED_http-equiv=3D"Content-Language" =

content=3D"en-us"_<<

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style<<

                as: >>DEFANGED_style<<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Rewrote HTML tag: >>span class=3D"style8"<<

                as: >>DEFANGED_span class=3D"style8"<<

  Total modifications so far: 4

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start=3D"1368702259"):

  SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=

html"):

    Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):

      Enforced policy: accept



  Rewrote HTML tag: >>_meta http-equiv=3D"Content-Language" content=

=3D"en-us"_<<

                as: >>_meta DEFANGED_http-equiv=3D"Content-Language" =

content=3D"en-us"_<<

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style<<

                as: >>DEFANGED_style<<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Rewrote HTML tag: >>span class=3D"style8"<<

                as: >>DEFANGED_span class=3D"style8"<<

  Total modifications so far: 4

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

t" color=3D"#000000">No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start=3D"1368702259"):

  SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=

html"):

    Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):

      Enforced policy: accept



  Rewrote HTML tag: >>_meta http-equiv=3D"Content-Language" content=

=3D"en-us"_<<

                as: >>_meta DEFANGED_http-equiv=3D"Content-Language" =

content=3D"en-us"_<<

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style<<

                as: >>DEFANGED_style<<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Rewrote HTML tag: >>span class=3D"style8"<<

                as: >>DEFANGED_span class=3D"style8"<<

  Total modifications so far: 4

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

More Royal Bank of Canada Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:10:23 -0600

From - Thu May 09 06:13:35 2013
X-Account-Key: account1
X-UIDL: 000018ea4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable
version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 0)
id 6C2AC12CFA90; Wed, 8 May 2013 13:16:52 -0600 (MDT)
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Wed, 8 May 2013 13:16:52 -0600
Resent-Message-ID: <20130508191652.GA18755@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: from vps.rovm.com (vps.rovm.com [173.237.189.15])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 03B0412CFA94
for ; Wed, 8 May 2013 13:04:27 -0600 (MDT)
Received: from esaanet1 by vps.rovm.com with local (Exim 4.77)
(envelope-from )
id 1Ua85o-0002UD-3X
for doctor@doctor.nl2k.ab.ca; Wed, 08 May 2013 19:23:52 +0200
To: doctor@doctor.nl2k.ab.ca
Subject: ONLINE ACCESS BLOCKED..
X-PHP-Script: ntwk.esaanet.com/libraries//mailer.php for 75.150.201.45
From:
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id:
Date: Wed, 08 May 2013 19:23:52 +0200
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.rovm.com
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [845 841] / [47 12]
X-AntiAbuse: Sender Address Domain - vps.rovm.com
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5809]
X-AVG-ID: ID75669CBC-6BB4AF1D
X-Brightmail-Tracker: AAAABR15L8UdeRn6HXkn9B16T8sdelBa
X-Brightmail-Tracker: AAAAAA==

Dear Customer,

We recently dectected an untrusted activities in your RBC Royal Bank Online Banking account, multiple login failures were also made in your online banking account.

We need you to verify your online banking information right away in order to afford account suspension because your account must have been involved in fraudulent activities.

To confirm your Online Banking records and to avoid your online banking suspended, we may require some specific information from you.

target="_self" DEFANGED_style="color: rgb(0, 0, 255); text-decoration: underline;

font-family: Arial; font-size: 9pt; font-style: normal; font-variant: normal;

font-weight: normal; letter-spacing: normal; line-height: 16px; orphans: 2;

text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space:

normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto;

-webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255)">

To restore your online banking account, please Sign in to Online Banking
style="font-size: 9pt">

Thank you for banking with us at RBC and making use of RBC Royal Bank Online Service

Royal Bank of Canada Website, © 1995-2013

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368040443"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Rewrote HTML tag: >>a name="online_banking_service_agreement" href="http://gerentenet.com.br/manual/images/fig_forms/fig_forms/c.php" target="_self" style="color: rgb(0, 0, 255); text-decoration: underline; font-family: Arial; font-size: 9pt; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 16px; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255)"<<

                as: >>a name="online_banking_service_agreement" href="http://gerentenet.com.br/manual/images/fig_forms/fig_forms/c.php" target="_self" DEFANGED_style="color: rgb(0, 0, 255); text-decoration: underline; font-family: Arial; font-size: 9pt; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: 16px; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255)"<<

  Total modifications so far: 1

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5809 - Release Date: 05/08/13

Bell Canada PHish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:09:16 -0600

From - Thu May 09 06:13:29 2013
X-Account-Key: account1
X-UIDL: 000018e04f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ****
X-Spam-Status: No, score=4.2 required=5.0 tests=FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_TAGS autolearn=no version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id A909D12CFA94; Wed, 8 May 2013 06:46:46 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 8 May 2013 06:46:46 -0600
Resent-Message-ID: <20130508124646.GA19525@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix)
id 498DC12CFA94; Wed, 8 May 2013 06:42:27 -0600 (MDT)
Delivered-To: ctm-e@nk.ca
Received: from SHME-ENTSRV2003.steelehme.com (steelehme.com [65.66.225.57])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id C509C12CFA96
for ; Wed, 8 May 2013 06:42:02 -0600 (MDT)
Received: from User ([99.237.246.21]) by SHME-ENTSRV2003.steelehme.com with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 8 May 2013 07:41:37 -0500
From: "noreply@bell.ca"
Subject: Your bell.ca account will be terminated
Date: Wed, 8 May 2013 08:41:49 -0400
MIME-Version: 1.0
Content-Type: text/html; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID:
X-OriginalArrivalTime: 08 May 2013 12:41:37.0859 (UTC) FILETIME=[61AE2930:01CE4BE9]
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5809]
X-AVG-ID: ID17E84270-16EC3C06
X-Brightmail-Tracker: AAAAAxrot4ENQpHjHXpGug==
X-Brightmail-Tracker: AAAAAA==

a {color:#00446e; text-decoration:none; outline:0px;}
a.active {color:#000 !important;}
a:hover {text-decoration:underline;}
a:visited {color:#0077bf;}
body {
font-family: Arial, Helvetica, sans-serif;
font-size: 12px;
}

>


E-bill
?	Hello Customer This email is to confirm : your pre-authorized payments has expired. Please keep this email for future reference. Log in to My Bell today to enjoy all the benefits of self serve online	?

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368016953"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style a {color:#00446e; text-decoration:none; outline:0px;} a.active {color:#000 !important;} a:hover {text-decoration:underline;} a:visited {color:#0077bf;} body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; } <<

                as: >>DEFANGED_style a {color:#00446e; text-decoration:none; outline:0px;} a.active {color:#000 !important;} a:hover {text-decoration:underline;} a:visited {color:#0077bf;} body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; } <<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Rewrote HTML tag: >>table cellpadding="0" cellspacing="0" border="0" width="542" style="margin-bottom: 10px;"<<

                as: >>table cellpadding=0 cellspacing=0 border=0 width="542" DEFANGED_style="margin-bottom: 10px;"<<

  Rewrote HTML tag: >>img style="margin-top: 18px;" src="https://mybell.bell.ca/custom/image/email/bell_logo.gif" width="81" height="51" border="0" alt="Bell"<<

                as: >>img DEFANGED_style="margin-top: 18px;" src="https://mybell.bell.ca/custom/image/email/bell_logo.gif" width="81" height="51" border=0 alt="Bell"<<

  Rewrote HTML tag: >>table width="542" cellspacing="0" cellpadding="0" border="0" style="border-spacing: 0;"<<

                as: >>table width="542" cellspacing=0 cellpadding=0 border=0 DEFANGED_style="border-spacing: 0;"<<

  Rewrote HTML tag: >>td height="7" valign="bottom" colspan="3" style="line-height: 0; margin-bottom: 0; height:7px;"<<

                as: >>td height="7" valign="bottom" colspan="3" DEFANGED_style="line-height: 0; margin-bottom: 0; height:7px;"<<

  Rewrote HTML tag: >>td align="left" colspan="3" bgcolor="#f4f4f4" style="font-family: Arial, Helvetica, Sans-serif; color: #212121;font-size: 20px; padding: 20px; padding-top: 12px; padding-bottom: 15px; border-left: 1px #d1d1d1 solid; border-right: 1px #d1d1d1 solid; border-bottom: 1px #d1d1d1 solid;"<<

                as: >>td align="left" colspan="3" bgcolor="#f4f4f4" DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; color: #212121;font-size: 20px; padding: 20px; padding-top: 12px; padding-bottom: 15px; border-left: 1px #d1d1d1 solid; border-right: 1px #d1d1d1 solid; border-bottom: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td width="1" style="border-left: 1px #d1d1d1 solid;"<<

                as: >>td width="1" DEFANGED_style="border-left: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td align="left" valign="top" style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px; color: #555; padding-left: 20px; padding-right: 20px; padding-top: 10px;"<<

                as: >>td align="left" valign="top" DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px; color: #555; padding-left: 20px; padding-right: 20px; padding-top: 10px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>a href="http://mybell-bell.xsell-business-consulting.com/Login/" title="" style="color: #0066A4; text-decoration: none;"<<

                as: >>a href="http://mybell-bell.xsell-business-consulting.com/Login/" title="" DEFANGED_style="color: #0066A4; text-decoration: none;"<<

  Rewrote HTML tag: >>p style="padding-bottom: 21px; margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="padding-bottom: 21px; margin-bottom: 8px;"<<

  Rewrote HTML tag: >>a href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title="" style="color: #0066A4; text-decoration: none;"<<

                as: >>a href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title="" DEFANGED_style="color: #0066A4; text-decoration: none;"<<

  Rewrote HTML tag: >>td width="1" style="border-right: 1px #d1d1d1 solid;"<<

                as: >>td width="1" DEFANGED_style="border-right: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td height="7" valign="bottom" colspan="3" style="line-height: 0; height:7px;"<<

                as: >>td height="7" valign="bottom" colspan="3" DEFANGED_style="line-height: 0; height:7px;"<<

  Rewrote HTML tag: >>table width="542" cellspacing="0" cellpadding="0" border="0" style="border-spacing: 0; margin-bottom: 15px;"<<

                as: >>table width="542" cellspacing=0 cellpadding=0 border=0 DEFANGED_style="border-spacing: 0; margin-bottom: 15px;"<<

  Rewrote HTML tag: >>td align="left" valign="top" style="padding: 0;"<<

                as: >>td align="left" valign="top" DEFANGED_style="padding: 0;"<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-right: 10px" href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-right: 10px" href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title=""<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-left: 10px; padding-right: 10px" href="http://www.bell.ca/shopping/PrsShp_LegalAndTerms.page" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-left: 10px; padding-right: 10px" href="http://www.bell.ca/shopping/PrsShp_LegalAndTerms.page" title=""<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; padding-left: 10px; padding-right: 10px" href="http://support.bell.ca/en-ON/Customer_service/Security_and_privacy/How_does_Bell_respect_my_privacy" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; padding-left: 10px; padding-right: 10px" href="http://support.bell.ca/en-ON/Customer_service/Security_and_privacy/How_does_Bell_respect_my_privacy" title=""<<

  Total modifications so far: 22

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368016953"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style a {color:#00446e; text-decoration:none; outline:0px;} a.active {color:#000 !important;} a:hover {text-decoration:underline;} a:visited {color:#0077bf;} body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; } <<

                as: >>DEFANGED_style a {color:#00446e; text-decoration:none; outline:0px;} a.active {color:#000 !important;} a:hover {text-decoration:underline;} a:visited {color:#0077bf;} body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; } <<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Rewrote HTML tag: >>table cellpadding="0" cellspacing="0" border="0" width="542" style="margin-bottom: 10px;"<<

                as: >>table cellpadding=0 cellspacing=0 border=0 width="542" DEFANGED_style="margin-bottom: 10px;"<<

  Rewrote HTML tag: >>img style="margin-top: 18px;" src="https://mybell.bell.ca/custom/image/email/bell_logo.gif" width="81" height="51" border="0" alt="Bell"<<

                as: >>img DEFANGED_style="margin-top: 18px;" src="https://mybell.bell.ca/custom/image/email/bell_logo.gif" width="81" height="51" border=0 alt="Bell"<<

  Rewrote HTML tag: >>table width="542" cellspacing="0" cellpadding="0" border="0" style="border-spacing: 0;"<<

                as: >>table width="542" cellspacing=0 cellpadding=0 border=0 DEFANGED_style="border-spacing: 0;"<<

  Rewrote HTML tag: >>td height="7" valign="bottom" colspan="3" style="line-height: 0; margin-bottom: 0; height:7px;"<<

                as: >>td height="7" valign="bottom" colspan="3" DEFANGED_style="line-height: 0; margin-bottom: 0; height:7px;"<<

  Rewrote HTML tag: >>td align="left" colspan="3" bgcolor="#f4f4f4" style="font-family: Arial, Helvetica, Sans-serif; color: #212121;font-size: 20px; padding: 20px; padding-top: 12px; padding-bottom: 15px; border-left: 1px #d1d1d1 solid; border-right: 1px #d1d1d1 solid; border-bottom: 1px #d1d1d1 solid;"<<

                as: >>td align="left" colspan="3" bgcolor="#f4f4f4" DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; color: #212121;font-size: 20px; padding: 20px; padding-top: 12px; padding-bottom: 15px; border-left: 1px #d1d1d1 solid; border-right: 1px #d1d1d1 solid; border-bottom: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td width="1" style="border-left: 1px #d1d1d1 solid;"<<

                as: >>td width="1" DEFANGED_style="border-left: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td align="left" valign="top" style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px; color: #555; padding-left: 20px; padding-right: 20px; padding-top: 10px;"<<

                as: >>td align="left" valign="top" DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px; color: #555; padding-left: 20px; padding-right: 20px; padding-top: 10px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>a href="http://mybell-bell.xsell-business-consulting.com/Login/" title="" style="color: #0066A4; text-decoration: none;"<<

                as: >>a href="http://mybell-bell.xsell-business-consulting.com/Login/" title="" DEFANGED_style="color: #0066A4; text-decoration: none;"<<

  Rewrote HTML tag: >>p style="padding-bottom: 21px; margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="padding-bottom: 21px; margin-bottom: 8px;"<<

  Rewrote HTML tag: >>a href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title="" style="color: #0066A4; text-decoration: none;"<<

                as: >>a href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title="" DEFANGED_style="color: #0066A4; text-decoration: none;"<<

  Rewrote HTML tag: >>td width="1" style="border-right: 1px #d1d1d1 solid;"<<

                as: >>td width="1" DEFANGED_style="border-right: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td height="7" valign="bottom" colspan="3" style="line-height: 0; height:7px;"<<

                as: >>td height="7" valign="bottom" colspan="3" DEFANGED_style="line-height: 0; height:7px;"<<

  Rewrote HTML tag: >>table width="542" cellspacing="0" cellpadding="0" border="0" style="border-spacing: 0; margin-bottom: 15px;"<<

                as: >>table width="542" cellspacing=0 cellpadding=0 border=0 DEFANGED_style="border-spacing: 0; margin-bottom: 15px;"<<

  Rewrote HTML tag: >>td align="left" valign="top" style="padding: 0;"<<

                as: >>td align="left" valign="top" DEFANGED_style="padding: 0;"<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-right: 10px" href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-right: 10px" href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title=""<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-left: 10px; padding-right: 10px" href="http://www.bell.ca/shopping/PrsShp_LegalAndTerms.page" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-left: 10px; padding-right: 10px" href="http://www.bell.ca/shopping/PrsShp_LegalAndTerms.page" title=""<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; padding-left: 10px; padding-right: 10px" href="http://support.bell.ca/en-ON/Customer_service/Security_and_privacy/How_does_Bell_respect_my_privacy" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; padding-left: 10px; padding-right: 10px" href="http://support.bell.ca/en-ON/Customer_service/Security_and_privacy/How_does_Bell_respect_my_privacy" title=""<<

  Total modifications so far: 22

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5809 - Release Date: 05/08/13

This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368016953"):

  SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):

    Match (names="unnamed.html, filetype.html", rule="2"):

      Enforced policy: accept



  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

  

  Rewrote HTML tag: >>style a {color:#00446e; text-decoration:none; outline:0px;} a.active {color:#000 !important;} a:hover {text-decoration:underline;} a:visited {color:#0077bf;} body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; } <<

                as: >>DEFANGED_style a {color:#00446e; text-decoration:none; outline:0px;} a.active {color:#000 !important;} a:hover {text-decoration:underline;} a:visited {color:#0077bf;} body { font-family: Arial, Helvetica, sans-serif; font-size: 12px; } <<

  Rewrote HTML tag: >>/style<<

                as: >>/DEFANGED_style<<

  Rewrote HTML tag: >>table cellpadding="0" cellspacing="0" border="0" width="542" style="margin-bottom: 10px;"<<

                as: >>table cellpadding=0 cellspacing=0 border=0 width="542" DEFANGED_style="margin-bottom: 10px;"<<

  Rewrote HTML tag: >>img style="margin-top: 18px;" src="https://mybell.bell.ca/custom/image/email/bell_logo.gif" width="81" height="51" border="0" alt="Bell"<<

                as: >>img DEFANGED_style="margin-top: 18px;" src="https://mybell.bell.ca/custom/image/email/bell_logo.gif" width="81" height="51" border=0 alt="Bell"<<

  Rewrote HTML tag: >>table width="542" cellspacing="0" cellpadding="0" border="0" style="border-spacing: 0;"<<

                as: >>table width="542" cellspacing=0 cellpadding=0 border=0 DEFANGED_style="border-spacing: 0;"<<

  Rewrote HTML tag: >>td height="7" valign="bottom" colspan="3" style="line-height: 0; margin-bottom: 0; height:7px;"<<

                as: >>td height="7" valign="bottom" colspan="3" DEFANGED_style="line-height: 0; margin-bottom: 0; height:7px;"<<

  Rewrote HTML tag: >>td align="left" colspan="3" bgcolor="#f4f4f4" style="font-family: Arial, Helvetica, Sans-serif; color: #212121;font-size: 20px; padding: 20px; padding-top: 12px; padding-bottom: 15px; border-left: 1px #d1d1d1 solid; border-right: 1px #d1d1d1 solid; border-bottom: 1px #d1d1d1 solid;"<<

                as: >>td align="left" colspan="3" bgcolor="#f4f4f4" DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; color: #212121;font-size: 20px; padding: 20px; padding-top: 12px; padding-bottom: 15px; border-left: 1px #d1d1d1 solid; border-right: 1px #d1d1d1 solid; border-bottom: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td width="1" style="border-left: 1px #d1d1d1 solid;"<<

                as: >>td width="1" DEFANGED_style="border-left: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td align="left" valign="top" style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px; color: #555; padding-left: 20px; padding-right: 20px; padding-top: 10px;"<<

                as: >>td align="left" valign="top" DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px; color: #555; padding-left: 20px; padding-right: 20px; padding-top: 10px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>p style="margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="margin-bottom: 8px;"<<

  Rewrote HTML tag: >>a href="http://mybell-bell.xsell-business-consulting.com/Login/" title="" style="color: #0066A4; text-decoration: none;"<<

                as: >>a href="http://mybell-bell.xsell-business-consulting.com/Login/" title="" DEFANGED_style="color: #0066A4; text-decoration: none;"<<

  Rewrote HTML tag: >>p style="padding-bottom: 21px; margin-bottom: 8px;"<<

                as: >>p DEFANGED_style="padding-bottom: 21px; margin-bottom: 8px;"<<

  Rewrote HTML tag: >>a href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title="" style="color: #0066A4; text-decoration: none;"<<

                as: >>a href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title="" DEFANGED_style="color: #0066A4; text-decoration: none;"<<

  Rewrote HTML tag: >>td width="1" style="border-right: 1px #d1d1d1 solid;"<<

                as: >>td width="1" DEFANGED_style="border-right: 1px #d1d1d1 solid;"<<

  Rewrote HTML tag: >>td height="7" valign="bottom" colspan="3" style="line-height: 0; height:7px;"<<

                as: >>td height="7" valign="bottom" colspan="3" DEFANGED_style="line-height: 0; height:7px;"<<

  Rewrote HTML tag: >>table width="542" cellspacing="0" cellpadding="0" border="0" style="border-spacing: 0; margin-bottom: 15px;"<<

                as: >>table width="542" cellspacing=0 cellpadding=0 border=0 DEFANGED_style="border-spacing: 0; margin-bottom: 15px;"<<

  Rewrote HTML tag: >>td align="left" valign="top" style="padding: 0;"<<

                as: >>td align="left" valign="top" DEFANGED_style="padding: 0;"<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-right: 10px" href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-right: 10px" href="http://www.bell.ca/support/PrsCSrvGnl_ContactUs.page" title=""<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-left: 10px; padding-right: 10px" href="http://www.bell.ca/shopping/PrsShp_LegalAndTerms.page" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; border-right: 1px solid #ddd; padding-left: 10px; padding-right: 10px" href="http://www.bell.ca/shopping/PrsShp_LegalAndTerms.page" title=""<<

  Rewrote HTML tag: >>a style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; padding-left: 10px; padding-right: 10px" href="http://support.bell.ca/en-ON/Customer_service/Security_and_privacy/How_does_Bell_respect_my_privacy" title=""<<

                as: >>a DEFANGED_style="font-family: Arial, Helvetica, Sans-serif; font-size: 12px;line-height: 16px;color: #0066A4; text-decoration: none; padding-left: 10px; padding-right: 10px" href="http://support.bell.ca/en-ON/Customer_service/Security_and_privacy/How_does_Bell_respect_my_privacy" title=""<<

  Total modifications so far: 22

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

Royal Bank of Canada Phish

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:06:41 -0600

From - Tue May 07 16:04:23 2013
X-Account-Key: account1
X-UIDL: 000018bb4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 07 May 2013 07:02:43 -0600
From: RBC Royal Bank
To: doctor@netknow.ca
Subject: [Norton AntiSpam]*SPAM* Message Center: 1 New Alert Message!
Date: 07 May 2013 07:25:10 -0400
Message-Id: <20130507072510.CAA43FE8A46DF54F@advisor.webssl.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=51.0 required=5.0 tests=BOTNET,RCVD_IN_JMF_BL,
RELAY_CHECKER_BADDNS,RELAY_CHECKER_IPHOSTNAME,RELAY_CHECKER_KEYWORDS
autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5188FB73.E35E9445"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5802]
X-AVG-ID: ID2E54899D-4FCEA7CA
X-Brightmail-Tracker: AAAABB15M1AdeRryHXka6R15M+g=

This is a multi-part message in MIME format.

------------=_5188FB73.E35E9445
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: RBC Royal Bank / Message Center: 1 New Alert Message! 1 New
Alert Message! Customer Service: Your account has been limited! Click to
Resolve Thank you for using Royal Bank of Canada. [...]

Content analysis details: (51.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
50 RCVD_IN_JMF_BL RBL: Sender listed in JMF-BLACK
[204.195.138.250 listed in hostkarma.junkemailfilter.com]
1.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=204.195.138.250,rdns=204-195-138-250-dhcp.atlanticbb.net,baddns,client,ipinhostname,clientwords]
0.0 RELAY_CHECKER_IPHOSTNAME Hostname contains IP address
0.0 RELAY_CHECKER_KEYWORDS Hostname matches keywords
0.0 RELAY_CHECKER_BADDNS Doesn't have full circle DNS

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_5188FB73.E35E9445
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 44DCA12CFA82; Tue, 7 May 2013 07:02:36 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Tue, 7 May 2013 07:02:36 -0600
Resent-Message-ID: <20130507130236.GB6560@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: *
X-Spam-Status: No, score=1.0 required=5.0 tests=BOTNET,RELAY_CHECKER_BADDNS,
RELAY_CHECKER_IPHOSTNAME,RELAY_CHECKER_KEYWORDS autolearn=no version=3.3.2
X-Original-To: doctor@netknow.ca
Delivered-To: doctor@netknow.ca
Received: from advisor.webssl.com (unknown [204.195.138.250])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id A961D12CFAA6
for ; Tue, 7 May 2013 05:25:52 -0600 (MDT)
From: RBC Royal Bank
To: doctor@netknow.ca
Subject: Message Center: 1 New Alert Message!
Date: 07 May 2013 07:25:10 -0400
Message-ID: <20130507072510.CAA43FE8A46DF54F@advisor.webssl.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean

RBC Royal Bank / Message Center: 1 New Alert Message!
yalbank_en.gif">

old.gif"> 1 New Alert Message!

=20

ng=3D"0" width=3D"100%">

cellpadding=3D"3" cellspacing=3D"0" width=3D"100%">

Customer Service: Your account has b=
een limited! http://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3DIB&F21=3DIB&=
F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH/index.html">Click to =
Resolve

=20
Thank you for using Royal Bank of Canada.

This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start=3D"1367925959"):

  SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=

html"):

    Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):

      Enforced policy: accept



  Rewrote HTML tag: >>_a rel=3D"nofollow" target=3D"_blank" href=3D"h=

ttp://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3DIB&F2=

1=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH/index=

.html"_<<

                as: >>_a DEFANGED_rel=3D"nofollow" target=3D"_blank" =

href=3D"http://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3D=

IB&F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGL=

ISH/index.html"_<<

  Total modifications so far: 1

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start=3D"1367925959"):

  SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=

html"):

    Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):

      Enforced policy: accept



  Rewrote HTML tag: >>_a rel=3D"nofollow" target=3D"_blank" href=3D"h=

ttp://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3DIB&F2=

1=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH/index=

.html"_<<

                as: >>_a DEFANGED_rel=3D"nofollow" target=3D"_blank" =

href=3D"http://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3D=

IB&F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGL=

ISH/index.html"_<<

  Total modifications so far: 1

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

 =20

  Rewrote HTML tag: >>/div<<

                as: >>/p__DEFANGED_div<<

  Total modifications so far: 2

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start=3D"1367925959"):

  SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=

html"):

    Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):

      Enforced policy: accept



  Rewrote HTML tag: >>_a rel=3D"nofollow" target=3D"_blank" href=3D"h=

ttp://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3DIB&F2=

1=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH/index=

.html"_<<

                as: >>_a DEFANGED_rel=3D"nofollow" target=3D"_blank" =

href=3D"http://216.245.209.110/icons/ssl/encrypted-session/F6=3D1&F7=3D=

IB&F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGL=

ISH/index.html"_<<

  Total modifications so far: 1

  Note: Styles and layers give attackers many tools to fool the

  user and common browsers interpret Javascript code found

  within style definitions.

 =20

  Rewrote HTML tag: >>/div<<

                as: >>/p__DEFANGED_div<<

  Total modifications so far: 2

Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

------------=_5188FB73.E35E9445
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-0E7A9122======="

--=======AVGMAIL-0E7A9122=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5802 - Release Date: 05/06/13=

--=======AVGMAIL-0E7A9122=======--

------------=_5188FB73.E35E9445
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-5F820E90======="

--=======AVGMAIL-5F820E90=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5802 - Release Date: 05/06/13=

--=======AVGMAIL-5F820E90=======--

------------=_5188FB73.E35E9445--

More Pakistani Google Spam

nospam@example.com (Dave Yadallee) — Fri, 17 May 2013 19:06:03 -0600

From - Tue May 07 16:04:20 2013
X-Account-Key: account1
X-UIDL: 000018b94f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 07 May 2013 06:49:04 -0600
From: "Korangi Industrial"
To:
Subject: SPAM information Korangi 1.14 Acre for sale
Date: Tue, 7 May 2013 13:00:59 +0500
Message-Id: <5188b4bd.041a0f0a.77d1.ffffd3d2@mx.google.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.5 required=5.0 tests=INLINE_IMAGE,NOTVALID_GMAIL
autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5188F840.1C495631"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5802]
X-AVG-ID: ID7585CFD-4068D4DB
X-Brightmail-Tracker: AAAAAh15GvIdeRrp
X-Brightmail-Tracker: AAAAAA==

This is a multi-part message in MIME format.

------------=_5188F840.1C495631
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see the administrator of
that system for details. [...]

Content analysis details: (5.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.0 INLINE_IMAGE RAW: Inline Images
3.5 NOTVALID_GMAIL Claims to be from gmail.com but is not

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_5188F840.1C495631
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 7E0CB12CFA81; Tue, 7 May 2013 06:48:54 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Tue, 7 May 2013 06:48:54 -0600
Resent-Message-ID: <20130507124854.GA6560@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 07 May 2013 02:01:48 -0600
From: "Korangi Industrial"
To:
Subject: SPAM information Korangi 1.14 Acre for sale
Date: Tue, 7 May 2013 13:00:59 +0500
Message-Id: <5188b4bd.041a0f0a.77d1.ffffd3d2@mx.google.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.0 required=5.0 tests=DKIM_SIGNED,INLINE_IMAGE,
RCVD_IN_SPAMCANNIBAL,RCVD_IN_UCE_PFSM_3 autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5188B4EC.075BE25C"
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean

This is a multi-part message in MIME format.

------------=_5188B4EC.075BE25C
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: Korangi 1.14 Acre Factory for Sale Plot Size : 5556 ( Yard
) Building : Ground + 1 [...]

Content analysis details: (6.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_SPAMCANNIBAL RBL: Received via a relay in SpamCannibal
[175.110.226.171 listed in bl.spamcannibal.org]
2.0 RCVD_IN_UCE_PFSM_3 RBL: Received via a relay in UCE_PFSM_3
[175.110.226.171 listed in dnsbl-3.uceprotect.net]
0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
2.0 INLINE_IMAGE RAW: Inline Images

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

------------=_5188B4EC.075BE25C
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=-1.5 required=5.0 tests=DKIM_SIGNED,DKIM_VERIFIED,
INLINE_IMAGE,RCVD_IN_SPAMCANNIBAL,RCVD_IN_UCE_PFSM_3,USER_IN_DEF_DKIM_WL
autolearn=no version=3.3.2
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: from mail-ea0-f192.google.com (mail-ea0-f192.google.com [209.85.215.192])
(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 1CF9312CFA99
for ; Tue, 7 May 2013 02:01:35 -0600 (MDT)
Received: by mail-ea0-f192.google.com with SMTP id h14sf69178eak.19
for ; Tue, 07 May 2013 01:01:28 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20120806;
h=x-received:x-beenthere:x-received:received-spf:x-received:from:to
:subject:date:message-id:mime-version:x-mailer:thread-index
:x-original-sender:x-original-authentication-results:reply-to
:precedence:mailing-list:list-id:x-google-group-id:list-post
:list-help:list-archive:sender:list-subscribe:list-unsubscribe
:content-type:content-language;
bh=QktR6BWiodQoI76L8CdADWAqZYXE6ZUZQMpLqxc/ZdA=;
b=FatYN8fUm9Ti3oMPgI/6T2/U36IRw1ZnssXXG5oty2XZjMe8FDC7X8I5G+/wM+m+hL
z22llujqIGnoWEYORFZRcMQaNjMjSxjsKbaFZCr9rS6mTH9DztwgyM4Sbt8sqwg//m2O
R0SPFCA2/m8BBFrbO9wXBeOK636F83V5t/wHrwZuj+gh8P3PyQUVFzDybZp0tl4QMemT
0XkCSB+MK2uGpb6nwrTsL/+tDp6WiPIEiYx3JZUV+cfSG5vMjWCuubG0vD8TSywLYVrE
J8abZV6k0JvQpg7s+f3oXtlmWZP7udvGmxrPcquNj3D/35Yv06SK2fo6ynlBqXO1UuiW
xeNQ==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=x-received:x-beenthere:x-received:received-spf:x-received:from:to
:subject:date:message-id:mime-version:x-mailer:thread-index
:x-original-sender:x-original-authentication-results:reply-to
:precedence:mailing-list:list-id:x-google-group-id:list-post
:list-help:list-archive:sender:list-subscribe:list-unsubscribe
:content-type:content-language;
bh=QktR6BWiodQoI76L8CdADWAqZYXE6ZUZQMpLqxc/ZdA=;
b=Y3l5j99bDYtr8GQ7a7l+o0dUQarBPv6QQx8iDMj4JjgnUPhF6b09uUgzn7wRQovvZu
jKTK3/UfMx+92sLUcSFr7lSUMIgMwoaDLyvjXXNNigCQhU9YiqQ5TQRrU34d/oERWAcg
Sn/d9iHWafwKHeI/tQGjxGCRTmV3kLjEMXHE0Kd8dtNBxfRKx5daXXgY5JPN/HOhiuWR
W+HAlzm9i3bDGrlQPGEcT9l7yLdsVcdNT4sAMqoQbgABI9IbJzqyA/NQOC+yZrlVx0Od
fN+5ra7eJqzkWoAZ9aLKHMYyCnuszEzLrSdPgCOkGIbb0VGpeSJJ3f6Y1WWb7Ogs08YG
iJ/g==
X-Received: by 10.180.82.97 with SMTP id h1mr644930wiy.18.1367913687883;
Tue, 07 May 2013 01:01:27 -0700 (PDT)
X-BeenThere: propertyguide04@googlegroups.com
Received: by 10.180.73.168 with SMTP id m8ls100587wiv.47.gmail; Tue, 07 May
2013 01:01:02 -0700 (PDT)
X-Received: by 10.15.95.2 with SMTP id bc2mr1671218eeb.4.1367913662176;
Tue, 07 May 2013 01:01:02 -0700 (PDT)
Received: from mail-ea0-x230.google.com (mail-ea0-x230.google.com [2a00:1450:4013:c01::230])
by gmr-mx.google.com with ESMTPS id j6si6026724eew.0.2013.05.07.01.01.02
for
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Tue, 07 May 2013 01:01:02 -0700 (PDT)
Received-SPF: pass (google.com: domain of industrial.korangi@gmail.com designates 2a00:1450:4013:c01::230 as permitted sender) client-ip=2a00:1450:4013:c01::230;
Received: by mail-ea0-x230.google.com with SMTP id h14so128289eak.7
for ; Tue, 07 May 2013 01:01:02 -0700 (PDT)
X-Received: by 10.14.100.1 with SMTP id y1mr2868518eef.9.1367913662082;
Tue, 07 May 2013 01:01:02 -0700 (PDT)
Received: from saleemPC ([175.110.226.171])
by mx.google.com with ESMTPSA id m4sm11635643eeu.15.2013.05.07.01.00.59
for
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Tue, 07 May 2013 01:01:01 -0700 (PDT)
From: "Korangi Industrial"
To:
Subject: information Korangi 1.14 Acre for sale
Date: Tue, 7 May 2013 13:00:59 +0500
Message-ID: <5188b4bd.041a0f0a.77d1.ffffd3d2@mx.google.com>
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook 12.0
Thread-Index: Ac5K+QKS3c6pyItlSTysixL/LcZUTQ==
X-Original-Sender: industrial.korangi@gmail.com
X-Original-Authentication-Results: gmr-mx.google.com; spf=pass
(google.com: domain of industrial.korangi@gmail.com designates
2a00:1450:4013:c01::230 as permitted sender) smtp.mail=industrial.korangi@gmail.com;
dkim=pass header.i=@gmail.com
Reply-To: industrial.korangi@gmail.com
Precedence: list
Mailing-list: list propertyguide04@googlegroups.com; contact propertyguide04+owners@googlegroups.com
List-ID:
X-Google-Group-Id: 229077759210
List-Post: ,
List-Help: ,
List-Archive:
Sender: propertyguide04@googlegroups.com
List-Subscribe: ,

List-Unsubscribe: ,

Content-Type: multipart/related;
boundary="----=_NextPart_000_01F2_01CE4B22.EC2E4670"
Content-Language: en-us
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $

This is a multi-part message in MIME format.

------=_NextPart_000_01F2_01CE4B22.EC2E4670
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_01F3_01CE4B22.EC2E4670"

------=_NextPart_001_01F3_01CE4B22.EC2E4670
Content-Type: text/plain; charset=ISO-8859-1

Korangi 1.14 Acre Factory for Sale

Plot Size : 5556 ( Yard )

Building : Ground + 1

Covered Area: 550000 sq ft, RCC + 10% ACC

Roof Height: 20 ft & 14 ft

Power : 280 KW

Gas: 8 Lb

Location : Korangi Industrial Area Sector-28 near Murtaza
Chorangi

Asking Price: Please Contact

For viewing and other details please contact authorized agent.

Saleem Abdullah

Saleem Estate Agency

Cell# +92 300 7007791

Tel- +92 21 3 2473013

cid:image001.jpg@01C81CAA.38CAEC20

More: also deals in industrial /commercial properties in Korangi /SITE /Port
Qasim/ DHA open plots

--
--
You received this message because you are subscribed to the Google
Groups "propertyguide04" group.
To unsubscribe from this group, send email to
propertyguide04+unsubscribe@googlegroups.com
---
You received this message because you are subscribed to the Google Groups "propertyguide04" group.
To unsubscribe from this group and stop receiving emails from it, send an email to propertyguide04+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

------=_NextPart_001_01F3_01CE4B22.EC2E4670
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

=3D"urn:schemas-microsoft-com:office:office" DEFANGED_xmlns:w=3D"urn:schemas-=
microsoft-com:office:word" DEFANGED_xmlns:m=3D"http://schemas.microsoft.com=
/office/2004/12/omml" DEFANGED_xmlns=3D"http://www.w3.org/TR/REC-html40"> ead> cii"> >=
/ Font Definitions /
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:"Segoe Print";
panose-1:2 0 6 0 0 0 0 0 0 0;}
@font-face
{font-family:Verdana;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/ Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0in;
margin-bottom:.0001pt;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--> US link=3Dblue vlink=3Dpurple>

s=3DMsoNormal> s New Roman","serif"'>Korangi 1.14 Acre Factory for Sale ED_span>

2.0pt;font-family:"Times New Roman","serif"'> an>

;font-family:"Times New Roman","serif"'>Plot Size : =
5556 ( Y=
ard )

pan style=3D'font-size:12.0pt;font-family:"Times New Roman","serif"'>Buildi=
ng : =
; Ground + 1

=3DMsoNormal> ew Roman","serif"'>Covered Area: 550000=
sq ft, RCC + 10% ACC

al> ","serif"'>Roof Height: &nbs=
p; 20 ft & 14 ft

> "serif"'>Power : =
; 280 KW ED_span>

2.0pt;font-family:"Times New Roman","serif"'>Gas:    &n=
bsp;            =
;         8 Lb   &nb=
sp;            =

_span style=3D'font-size:12.0pt;font-family:"Times New Roman","serif"'>Loca=
tion : &nb=
sp; Korangi Industrial Area Sector-28 near Murtaza Chorangi >

=3D'font-size:12.0pt;font-family:"Times New Roman","serif"'>Asking Pr=
ice: Please Contact p>

ont-size:12.0pt;font-family:"Arial","sans-serif"'>    &=
nbsp;           &nbs=
p;            &=
nbsp;           &nbs=
p;

l>For v=
iewing and other details please contact authorized agent. EFANGED_span style=3D'font-size:10.0pt;font-family:"Verdana","sans-serif"'>=

yle=3D'font-size:10.0pt;font-family:"Segoe Print";color:black'>Saleem Abdul=
lah =
t-family:"Verdana","sans-serif"'>

MsoNormal> Print";color:black'>Saleem Estate Agency FANGED_span style=3D'font-size:10.0pt;font-family:"Verdana","sans-serif"'><=
o:p>

font-size:10.0pt;font-family:"Verdana","sans-serif";color:black'>Cell# +92 =
300 7007791 mily:"Verdana","sans-serif"'>

ormal> serif";color:black'>Tel- +92 21 3 n style=3D'font-size:10.0pt;font-family:"Arial","sans-serif"'>2473013 NGED_span> ans-serif"'>

=3D144 height=3D91 id=3D"Picture_x005f_x0020_6" src=3D"cid:image001.jpg@01CE=
4B22.EB666290" alt=3D"cid:image001.jpg@01C81CAA.38CAEC20"> yle=3D'font-size:10.0pt'>

l> '>

an style=3D'color:black'>More: olor:black'> nt";color:black'>also deals in industrial /commercial properties in Korangi=
/SITE /Port Qasim/ DHA open plots

lass=3DMsoNormal>

--

--

You received this message because you are subscribed to the Google

Groups "propertyguide04" group.

To unsubscribe from this group, send email to

propertyguide04+unsubscribe@googlegroups.com

---

You received this message because you are subscribed to the Google Groups &=
quot;propertyguide04" group.

To unsubscribe from this group and stop receiving emails from it, send an e=
mail to propertyguide04+unsubscribe@googlegroups.com.

For more options, visit ">https://groups.google.com/groups/opt_out.

------=_NextPart_001_01F3_01CE4B22.EC2E4670--
------=_NextPart_000_01F2_01CE4B22.EC2E4670
Content-Type: image/jpeg;
name="image001.jpg"
Content-Transfer-Encoding: base64
Content-ID:
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------=_NextPart_000_01F2_01CE4B22.EC2E4670--

------------=_5188B4EC.075BE25C--

------------=_5188F840.1C495631
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-3C5191B7======="

--=======AVGMAIL-3C5191B7=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5802 - Release Date: 05/06/13=

--=======AVGMAIL-3C5191B7=======--

------------=_5188F840.1C495631
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-7D6E641E======="

--=======AVGMAIL-7D6E641E=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5802 - Release Date: 05/06/13=

--=======AVGMAIL-7D6E641E=======--

------------=_5188F840.1C495631--

NetKnow now in Netcraft's Top 6300

nospam@example.com (Dave Yadallee) — Mon, 13 May 2013 21:47:25 -0600

All data is from Netcraft Toolbar . Looks as if there are major changes to the Netcraft algorithm!

NetKnow

Netknow now ranks 6278 at Netcraft and in Netcraft's top 200 Canadian sites.

A significant decrease!

Some of our others domains and services ranks as follows:

NetKnow Secure Server
ranks 75111 from 71850 on Netcraft.
NetKnow's secondary server
ranks at 39229 from 29008 last week on Netcraft.
NetKnow's Anonynous FTP server
is at 378059 from 392774 and non-anonymous rank 268956 from 272802.
www.nl2k.ab.ca
ranks 313130 from 319757 on Netcraft.
edmontonab.ca
ranks 402628 from 453116 .
edmontoninternetserviceprovider.ca
is at 378222 from 420747 .
internetedmonton.ca
ranks at 378058 from 392773 .

How do we compare with other providers in
Edmonton, Alberta, Canada?

Netknow again

We at Netknow are down 75 and down 1874 the end of the year 2013 from 4604 . We aim to be above 4600 by the end of May 2013.

Telus and reviews

Next we have Telus.com
ranked by Netcraft at 53321 from 54248 with Mytelus
ranking 8666 from 8848 .
Sometimes their Web Hosting is done by title="Internet Names for Business">Internet Names for Business
is ranked by Netcraft at 424605 from 445925 .
And Edmonton Chamber of Commerce
is at 323674 from 331697 .

Is Telus's ADSL network suspectible to Code Red Attacks and Attackers?

Reviews of Telus are available :

NCIX FORUMS

DSL Reports

Juno and NetZero

We have Juno Internet ranked on top
at 17449 from 17838 who are the owners of
US Based Netzero at Netcraft Rank 43828 from 45266 .

Shaw Cable

Next, members.shaw.ca
ranks 53568 from 52700 and
Shaw Cable
is next at Netcraft rank 33900 from 34723. Briefly unavailable during high peak demand.
Their Network Hosting Arm,
Big Pipe is at
Netcraft rank 315306 from 321842 .
One of customer of Shaw Avalon Global
rank 401869 from 419982. Another of their customers The Alberta Liberals
at 355103 from 390058.

Reviews of Shaw are available :

Rate It All

Review Stream

Review Stream Number 2

DSL reports

University of Alberta

The University of Alberta ranks 99206 from 99609 .

City of Edmonton

The City of Edmonton ranks 108896 from 110815 by Netcraft and are now with Alentus of Edmonton.

Primus

Primus
ranks 115985 from 280243 and now points to BLACKIRON_DataCentres
ranked 263774 from 267310 . Or
Colo Is here ranks 115985 from 120254 .
A customer the Progressive Conservative Party of Alberta
ranks 425846 from 447197 .

NAIT / Northern Alberta Institute of Technology

The Northern Alberta Institute of Technology
ranks 122570 from 123730.

Distributel / 3Web / CIA

Next is 3 Web
which ranks 402709 from 420851 And a questionable secure certificate. Their parent company
Cybersurf
is ranked 138238 from 133548.

Xplornet

xplornet
ranks 146578 from 148922 and are listed with
Stentor and are joining up with Shaw.
Acoording to an article in the Sherwood Park Independent they are also getting an Alberta Government subsidy.

Government of Alberta

The Government of Alberta Website
ranks 166580 from 173774 by Netcraft

Alentus

Alentus
rank by Netcraft 189267 from 198220 and I note they are hosted in the USA .
One of their customers The Alberta New Democrat Party
ranks 756035 from 430692 .

Uniserve / Interbaun

Next, Uniserve
ranks on Netcraft 192585 from 192406.
One of their acquisitions
interbaun
ranks with Netcraft 192585 from 192406 due to merging of sites.
One customer just came over from this organization in Nov 2006.

Wolfpaw

Computer Engineering
ranks 402624 from 420750. Thank you Scott.
And they seem to be hosted by wolfpaw.net
which ranks at 205360 from 208372.

Tera Byte Edmonton and reviews

Next is Tera-Byte
at Netcraft Rank 213008 from 452711 with
Tera-Byte.ca
ranking 429597 from 451039 and their wireless arm Tera-Byte Wireless
ranks 378273 from 393002 and
airsurfer.ca is now part of Tera-Byte Wireless. One of their clients nexopia
local Edmonton Social MEdia Site is ranked 120180 from 122423. Very Interesting!
One of Tera-Byte's acquisitions
Edmonton Community Networks
ranks at 376491 from 391235 and
Go Edmonton ranks 423911 from 445148 .
Reviews of Tera-byte is available at
here
and another here

Internet Centre / CCINet

Internet Centre
rank 221432 from 223440 and using Worldgate IPs

Platinum Communications

Platinum Communications Corp.
ranks 283539 from 288086

Radiant Communications

Radiant Communications
are ranked by Netcraft 291002 from 296010.

Grant MacEwen University

MacEwan
ranks 291753 from 318824.

WSI Corporation

Next is WSI - We Simply The Internet of Toronto
at Netcraft Position 310838 from 305659

Pivot Data Centres

Care Factor ranks 360820 from 372792
and is redirected to Pivot Data Centres .

MediaShaker

Media Shakers of Edmonton
ranks 375358 from 390051 .

Nucleus Internet Services

After that we have

Nucleus Information Services which can be found at
Netcraft Rank 377025 from 368685

Wiband Wireless

Wiband Wireless
rank on Netcraft at 377475 from 392182 and
their customer Found Locally
ranks at 396620 from 414691
and Memory Express
ranks 17150 from 17655 Interesting!

Nisa Custom Internet Solutions

Nisa Custom Internet Solutions
ranks 396101 from 414157 by Netcraft

Carbon 14

Carbon 14 Graphic Art and Web Design
ranks 396793 from 414891 on Netcraft .
BTW Illusions Photographics wants a word with you!

Open Concept Internet, Inc.

Open Concept Internet, Inc.
rank 401563 from 419717 .

MDCi

MDCi, the company that bought out OANet.com
ranks 428409 from 449877.

Emergence by Design

Emergence by Design
now ranks 429369 from 450824 .

Wild Rose Internet

Wild Rose Internet
ranks 429530 from 450962 and I wonder if this is another wireless branch of Tera-Byte

Koi Media

Koi Media
rank 430338 from 451794

WebFire

Webfire.ca
ranks 431113 from 452580 and seems to be connected with Shaw.

Core Network Solutions Inc.

Core Network Solutions Inc.
ranks at 431371 from 452818 .

The Network Centre

The Network Centre
ranks 431422 from 452872 .

TIC Internet

TIC Internet
ranks 464465 from 488749 ( I do remember you).

InterSpots

Interspots of Edmonton
rank 464719 from 489000 ;

Clearwave Broadband

Clearwave Broadband ranks at 1716394.

Internet Crossroads

Internet Crossroads Ltd of North Edmonton
rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .

If I remember anymore, I will add to this entry, before Netcraft changes
our ranking. Please watch this space and please feel free to peruse
our services.

More Pakistani Google Spam

nospam@example.com (Dave Yadallee) — Fri, 10 May 2013 09:46:00 -0600

From - Fri May 10 09:40:59 2013
X-Account-Key: account1
X-UIDL: 000019374f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
X-AVG: Scanning
Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 0BB3912CFA82; Fri, 10 May 2013 07:56:54 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Fri, 10 May 2013 07:56:53 -0600
Resent-Message-ID: <20130510135653.GB27024@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@nl2k.ab.ca
Delivered-To: doctor@nl2k.ab.ca
Received: from mail-ee0-f55.google.com (mail-ee0-f55.google.com [74.125.83.55])
(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 18F0412CFA81
for ; Fri, 10 May 2013 07:56:11 -0600 (MDT)
Received: by mail-ee0-f55.google.com with SMTP id d4sf349880eek.10
for ; Fri, 10 May 2013 06:56:04 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=googlegroups.com; s=20120806;
h=x-received:x-beenthere:x-received:received-spf:x-received
:message-id:date:from:reply-to:organization:user-agent:mime-version
:to:subject:x-original-sender:x-original-authentication-results
:precedence:mailing-list:list-id:x-google-group-id:list-post
:list-help:list-archive:sender:list-subscribe:list-unsubscribe
:content-type;
bh=oc8NsmMQu0Lf3rCy6lW2nqqpYAzVBWvQtV4EqIDK8+Y=;
b=PJ+8RklNIqrztcMsPnnQD8hALtRrM1NodireHlJPQ8zNz+7fP5/O2Jc/XJRHWjvzhZ
kAq4CRDZ3nh1UM/7zK+3LcbWg7Yl/eubnXj/HyYVyjoz0QZNbHAzI85Agm9z2qO6NsSG
PAl2iWcB2XFLbaTMixLLEoT1m0SQJ4rhReg5BbWzRFxW8bRSEqU54ewGHKBehiwYuS8+
Um16a7TTgC6JA39Pgd+yxhNcUMP0HEA5WO4qspViKGbn+4ftCpik1aPEaYfenwc9D27C
YLTmvup8eZDUkaoQ2XUWJSIyYyt9aoXrnlkaQaR/lnLWt5uEh0+cNfLDa/4rd97C6pmw
GubA==
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=x-received:x-beenthere:x-received:received-spf:x-received
:message-id:date:from:reply-to:organization:user-agent:mime-version
:to:subject:x-original-sender:x-original-authentication-results
:precedence:mailing-list:list-id:x-google-group-id:list-post
:list-help:list-archive:sender:list-subscribe:list-unsubscribe
:content-type;
bh=oc8NsmMQu0Lf3rCy6lW2nqqpYAzVBWvQtV4EqIDK8+Y=;
b=sFu6jn6rjWR0UxI7MTNC7/ZhtwOjPVuQod5aC/rA+ChOW1oYbfZL7kuBWGEEipmFZv
otPi6EYv6HVxbILnSECHolOIDpQ6Q2VfO2FI3c+KpuWouf0ZCGS0WxNuZGIsQPl7vIY4
MBBg3FstN0NXy03+OfqkD294kKUheLqffobpW/sdZ3Jw2zcCi+UgzdtSeF/G2ciz99ZF
BsfvdHeYNOCTcFcEd0ssNbVooNjfFFP0VMLWhUrTxa46mAUKD3KRyGxk1+Pq4K8SgYq9
5io0j99NmzRORIzjTD6vCTVO03TQrtsvQPtseC/ypBYrkfMGssEddXuBpTsn1SS4wvIj
ux9Q==
X-Received: by 10.180.198.44 with SMTP id iz12mr127687wic.18.1368194163812;
Fri, 10 May 2013 06:56:03 -0700 (PDT)
X-BeenThere: clickmarketingpk@googlegroups.com
Received: by 10.180.83.74 with SMTP id o10ls143382wiy.15.canary; Fri, 10 May
2013 06:55:32 -0700 (PDT)
X-Received: by 10.15.94.2 with SMTP id ba2mr6544725eeb.1.1368194132333;
Fri, 10 May 2013 06:55:32 -0700 (PDT)
Received: from mail-ee0-f49.google.com (mail-ee0-f49.google.com [74.125.83.49])
by gmr-mx.google.com with ESMTPS id bj52si606272eeb.1.2013.05.10.06.55.32
for
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Fri, 10 May 2013 06:55:32 -0700 (PDT)
Received-SPF: pass (google.com: domain of umairpbl@gmail.com designates 74.125.83.49 as permitted sender) client-ip=74.125.83.49;
Received: by mail-ee0-f49.google.com with SMTP id d17so2231043eek.8
for ; Fri, 10 May 2013 06:55:32 -0700 (PDT)
X-Received: by 10.14.99.198 with SMTP id x46mr41426144eef.38.1368194131890;
Fri, 10 May 2013 06:55:31 -0700 (PDT)
Received: from [119.157.213.19] ([119.157.213.19])
by mx.google.com with ESMTPSA id e2sm3664636eem.16.2013.05.10.06.55.19
for
(version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128);
Fri, 10 May 2013 06:55:30 -0700 (PDT)
Message-ID: <518CFC4E.1050501@gmail.com>
Date: Fri, 10 May 2013 18:55:26 +0500
From: Donation
Reply-To: Wafa Naz
Organization: Donation
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
MIME-Version: 1.0
To: undisclosed-recipients:;
Subject: Donate Money To Save HAMZA Yasmeen From BONE CANCER .
X-Original-Sender: umairpbl@gmail.com
X-Original-Authentication-Results: gmr-mx.google.com; spf=pass
(google.com: domain of umairpbl@gmail.com designates 74.125.83.49 as
permitted sender) smtp.mail=umairpbl@gmail.com; dkim=pass header.i=@gmail.com
Precedence: list
Mailing-list: list clickmarketingpk@googlegroups.com; contact clickmarketingpk+owners@googlegroups.com
List-ID:
X-Google-Group-Id: 355542843555
List-Post: ,
List-Help: ,
List-Archive:
Sender: clickmarketingpk@googlegroups.com
List-Subscribe: ,

List-Unsubscribe: ,

Content-Type: multipart/related;
boundary="------------060903070506000102090400"
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5813]
X-AVG-ID: ID3010FBCE-171D437E
X-Brightmail-Tracker: AAAABAr/ZN8K/0QXHbXmQx16WQs=
X-Brightmail-Tracker: AAAAAA==

--------------060903070506000102090400
Content-Type: multipart/alternative;
boundary="------------040608070800000902070306"

This is a multi-part message in MIME format.
--------------040608070800000902070306
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

?? ??? ????? ??? ?? ???? ?? ?? ????? ?? ???? ?? ????? ?? ??? ??? ???
??
?? ?? ???? ???? ?? ??? ?? ?? ????? ???? ??????
???? ?? ??? ????? ?? ???? ??

HOSPITAL LETTER IS ATTACHED KINDLY CHECK IT

--
You received this message because you are subscribed to the Google Groups "clickmarketingpk" group.
To unsubscribe from this group and stop receiving emails from it, send an email to clickmarketingpk+unsubscribe@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5813 - Release Date: 05/10/13

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5813 - Release Date: 05/10/13
--------------040608070800000902070306
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

859-1">

charset=3DISO-8859-1">

m:.0001pt;
text-align:center;line-height:normal" align=3D"center">
style=3D"font-size:18.0pt;font-family:
"Tahoma","sans-serif";mso-fareast-font-family:&=
quot;Times
New Roman";color:#333333;
background:white">جب کسی ضž=
5;ورت مند کی آو=
از تم تک پہنچ&#=
1746; تو الله
رب العزت کا &=
#1588;کر
ادا کرو D_span
style=3D"font-size:18.0pt;font-family:"Tahoma","sans=
-serif";
mso-fareast-font-family:"Times
New Roman";color:#333333">

کہ span>

اس ن=
746; اپنے بندے ک®=
0; مدد کے لۓ
تمہیں پسند =
فرمایا

ورن=
29; وہ خود اکیلا=
; ھی کافی ھے > style=3D"font-size:18.0pt;font-family:"Times New
Roman","serif";mso-fareast-font-family:
"Times New Roman"">

ight:115%">

src=3D"cid:part1.04070505.03030008@gmail.com" width=3D"800"
height=3D"1600">

HOSPITAL LETTER IS ATTACHED KINDLY CHECK IT

width=3D"462" height=3D"718">

-height:115%">

>

DEFANGED_href=3D"file:///C:%5CUsers%5CUmair%5CAppData%5CLocal%5CTemp%5Cmsoh=
tmlclip1%5C01%5Cclip_filelist.xml">
DEFANGED_href=3D"file:///C:%5CUsers%5CUmair%5CAppData%5CLocal%5CTemp%5Cmsoh=
tmlclip1%5C01%5Cclip_themedata.thmx">
DEFANGED_href=3D"file:///C:%5CUsers%5CUmair%5CAppData%5CLocal%5CTemp%5Cmsoh=
tmlclip1%5C01%5Cclip_colorschememapping.xml">

t" color=3D"#000000">No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5813 - Release Date: 05/10/13

--

You received this message because you are subscribed to the Google Groups &=
quot;clickmarketingpk" group.

To unsubscribe from this group and stop receiving emails from it, send an e=
mail to clickmarketingpk+unsubscribe@googlegroups.com.

For more options, visit ">https://groups.google.com/groups/opt_out.

--------------040608070800000902070306--

--------------060903070506000102090400
Content-Type: image/jpeg;
name="hamza.jpg"
Content-Transfer-Encoding: base64
Content-ID:
Content-Disposition: inline;
filename="hamza.jpg"
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Paypal Phish

nospam@example.com (Dave Yadallee) — Fri, 10 May 2013 00:21:47 -0600

From - Fri May 10 00:10:51 2013
X-Account-Key: account1
X-UIDL: 000019344f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.0 required=5.0 tests=RCVD_IN_SPAMCANNIBAL
autolearn=no version=3.3.2
X-Original-To: dave@nl2k.ab.ca
Delivered-To: dave@nl2k.ab.ca
Received: from us59.toservers.com (us59.toservers.com [216.59.32.59])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 60D5212CFAB3
for ; Thu, 9 May 2013 23:31:58 -0600 (MDT)
Received: from us59.toservers.com (localhost [127.0.0.1])
by us59.toservers.com (Postfix) with ESMTP id 61DFA33FF842F
for ; Fri, 10 May 2013 02:33:09 -0300 (ART)
Received: by us59.toservers.com (Postfix, from userid 34144)
id 60D0B33FF8421; Fri, 10 May 2013 02:33:09 -0300 (ART)
To: dave@nl2k.ab.ca
Subject: You just need to confirm your billing address.
From: PayPal Service
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20130510053309.60D0B33FF8421@us59.toservers.com>
Date: Fri, 10 May 2013 02:33:09 -0300 (ART)
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5812]
X-AVG-ID: ID62F5F9B3-67D4151D
X-Brightmail-Tracker: AAAAAx15M1kdeRn6HXpP6w==
X-Brightmail-Tracker: AAAAAA==

tr>

Dear member,

d="yui_3_7_2_1_1366036663675_1972">You just need to confirm your billing address.

If you did not confirm it until 15th May 2013, Your account will be deactivated.

Just a reminder:

Never share your password with anyone.
Never share your personal information with any one.
Use different passwords for each of your online accounts.
Be sure to include uppercase and lowercase letters, numbers, and symbols in your password.

Sincerely,
PayPal

To get in touch with us

Click To Confirm

This email was sent by an automated system, so if you reply, nobody will see it.

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5812 - Release Date: 05/09/13