More CIBC Phish
Posted by Dave Yadallee on
From - Sat May 25 07:47:19 2013
X-Account-Key: account1
X-UIDL: 00001adf4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: *
X-Spam-Status: No, score=1.0 required=5.0 tests=BOTNET,RELAY_CHECKER_BADDNS
autolearn=no version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 0)
id 534D312CFA84; Wed, 22 May 2013 12:57:05 -0600 (MDT)
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Wed, 22 May 2013 12:57:05 -0600
Resent-Message-ID: <20130522185705.GD1186@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix)
id 0DE1112CFA9F; Wed, 22 May 2013 10:23:41 -0600 (MDT)
Delivered-To: ctm-e@nk.ca
Received: from jerry.hostirex.com (unknown [80.83.117.68])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 39F6212CFA9C
for; Wed, 22 May 2013 10:23:39 -0600 (MDT)
Received: (qmail 3084 invoked by uid 0); 22 May 2013 16:21:35 -0000
Date: 22 May 2013 16:21:35 -0000
To: ctm-e@nk.ca
Subject: Your account is on restricted status
From: CIBC.Online.Request@cibc.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="968493591a75166bdeb0269e7640023d"
Message-Id: ibanking+3661694@cibc.com
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3184/5854]
X-AVG-ID: ID260B0308-764F3650
X-Brightmail-Tracker: AAAAAQa7OvU=
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
--968493591a75166bdeb0269e7640023d
Content-Type: application/DEFANGED-966; charset="UTF-8"
Content-Transfer-Encoding: 7bit
--968493591a75166bdeb0269e7640023d
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start="1369239826"):
Part (pos="1278"):
SanitizeFile (filename="unnamed.html", mimetype="text/html"):
Match (names="unnamed.html", rule="2"):
Enforced policy: accept
File name doesn't match file contents, defanging.
Replaced mime type with: application/DEFANGED-966
Replaced file name with: unnamed_html.DEFANGED-966
Total modifications so far: 1
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
--968493591a75166bdeb0269e7640023d
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-7400BE95======="
--=======AVGMAIL-7400BE95=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-7400BE95=======--
--968493591a75166bdeb0269e7640023d
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-65858F8A======="
--=======AVGMAIL-65858F8A=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-65858F8A=======--
--968493591a75166bdeb0269e7640023d--
X-Account-Key: account1
X-UIDL: 00001adf4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: *
X-Spam-Status: No, score=1.0 required=5.0 tests=BOTNET,RELAY_CHECKER_BADDNS
autolearn=no version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 0)
id 534D312CFA84; Wed, 22 May 2013 12:57:05 -0600 (MDT)
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Wed, 22 May 2013 12:57:05 -0600
Resent-Message-ID: <20130522185705.GD1186@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix)
id 0DE1112CFA9F; Wed, 22 May 2013 10:23:41 -0600 (MDT)
Delivered-To: ctm-e@nk.ca
Received: from jerry.hostirex.com (unknown [80.83.117.68])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id 39F6212CFA9C
for
Received: (qmail 3084 invoked by uid 0); 22 May 2013 16:21:35 -0000
Date: 22 May 2013 16:21:35 -0000
To: ctm-e@nk.ca
Subject: Your account is on restricted status
From: CIBC.Online.Request@cibc.com
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="968493591a75166bdeb0269e7640023d"
Message-Id: ibanking+3661694@cibc.com
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3184/5854]
X-AVG-ID: ID260B0308-764F3650
X-Brightmail-Tracker: AAAAAQa7OvU=
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
--968493591a75166bdeb0269e7640023d
Content-Type: application/DEFANGED-966; charset="UTF-8"
Content-Transfer-Encoding: 7bit
--968493591a75166bdeb0269e7640023d
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start="1369239826"):
Part (pos="1278"):
SanitizeFile (filename="unnamed.html", mimetype="text/html"):
Match (names="unnamed.html", rule="2"):
Enforced policy: accept
File name doesn't match file contents, defanging.
Replaced mime type with: application/DEFANGED-966
Replaced file name with: unnamed_html.DEFANGED-966
Total modifications so far: 1
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
--968493591a75166bdeb0269e7640023d
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-7400BE95======="
--=======AVGMAIL-7400BE95=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-7400BE95=======--
--968493591a75166bdeb0269e7640023d
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-65858F8A======="
--=======AVGMAIL-65858F8A=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-65858F8A=======--
--968493591a75166bdeb0269e7640023d--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments