ATB Phish
Posted by Dave Yadallee on
From - Mon Jul 28 14:03:35 2014
X-Account-Key: account2
X-UIDL: 0005920c501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Mon, 28 Jul 2014 13:26:22 -0600
Received: from [12.179.140.18] (helo=mussop.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.83)
(envelope-from)
id 1XBqYc-0001fe-A3
for aboo@doctor.nl2k.ab.ca; Mon, 28 Jul 2014 13:26:22 -0600
Received: from xplornet.com ([71.255.140.162]) by mussop.com with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 28 Jul 2014 14:25:53 -0500
Reply-To: no-reply@xplornet.com
From: "ATB Financial"
Subject: Reset your Security Questions
Date: 28 Jul 2014 15:25:37 -0400
Message-ID: <20140728152537.074394190AEDB207@xplornet.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Bcc:
X-OriginalArrivalTime: 28 Jul 2014 19:25:53.0626 (UTC) FILETIME=[BF7AFBA0:01CFAA99]
X-Spam_score: 7.7
X-Spam_score_int: 77
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: page Reset your Security Questions For security purposes you
are required to reset your account security questions. [...]
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.2 MISSING_HEADERS Missing To: header
1.5 TVD_PH_SEC BODY: Message has a phrase standard for phishing mails
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Reset your Security Questions
8" />page
align=3D"center" width=3D"640">
">
=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20
=3D"left" bgcolor=3D"#FFFFFF">
ing=3D"0">
d=3D"ssss">Reset your Security Questions
=20=20=20=20=20=20=20=
=20=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20
cellpadding=3D"0" align=3D"center" width=3D"100%">
=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20
">=A9 2014 ATB Financial. All rights reserved. =99 Trademarks of Alberta Tre=
asury Branches
=
tbody>
X-Account-Key: account2
X-UIDL: 0005920c501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Mon, 28 Jul 2014 13:26:22 -0600
Received: from [12.179.140.18] (helo=mussop.com)
by doctor.nl2k.ab.ca with esmtp (Exim 4.83)
(envelope-from
id 1XBqYc-0001fe-A3
for aboo@doctor.nl2k.ab.ca; Mon, 28 Jul 2014 13:26:22 -0600
Received: from xplornet.com ([71.255.140.162]) by mussop.com with Microsoft SMTPSVC(6.0.3790.4675);
Mon, 28 Jul 2014 14:25:53 -0500
Reply-To: no-reply@xplornet.com
From: "ATB Financial"
Subject: Reset your Security Questions
Date: 28 Jul 2014 15:25:37 -0400
Message-ID: <20140728152537.074394190AEDB207@xplornet.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Bcc:
X-OriginalArrivalTime: 28 Jul 2014 19:25:53.0626 (UTC) FILETIME=[BF7AFBA0:01CFAA99]
X-Spam_score: 7.7
X-Spam_score_int: 77
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: page Reset your Security Questions For security purposes you
are required to reset your account security questions. [...]
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
1.2 MISSING_HEADERS Missing To: header
1.5 TVD_PH_SEC BODY: Message has a phrase standard for phishing mails
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} Reset your Security Questions
8" />
align=3D"center" width=3D"640">
">
ng=3D"0" cellpadding=3D"0" width=3D"100%"> |
|
=20=20=20=20=20=20=20=20=20=20=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20
=3D"left" bgcolor=3D"#FFFFFF">
ing=3D"0">
d=3D"ssss">Reset your Security Questions
For security purposes you ar=
e required to reset your account security questions.
To reset your security quest=
ions, click: Sign =
in to Online Services
=20=20=20=20=20=20=20=
=20=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20
=20=20=20=20=20=20=20=20=20=20=20=20=20
cellpadding=3D"0" align=3D"center" width=3D"100%">
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20
">=A9 2014 ATB Financial. All rights reserved. =99 Trademarks of Alberta Tre=
asury Branches
tbody>