Interac Phish
Posted by Dave Yadallee on
From - Thu Jun 20 20:25:53 2013
X-Account-Key: account1
X-UIDL: 00001c664f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Jun 2013 14:33:38 -0600
Received: from vagerp.lnk.telstra.net ([120.151.49.41] helo=geraldslavenholden.safenetbox.biz)
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1)
(envelope-from)
id 1UplXu-0007Om-4M
for dave@doctor.nl2k.ab.ca; Thu, 20 Jun 2013 14:33:37 -0600
Received: from geraldslavenholden.safenetbox.biz (geraldslavenholden.safenetbox.biz [127.0.0.1])
by geraldslavenholden.safenetbox.biz (Postfix) with ESMTP id D454083C688;
Fri, 21 Jun 2013 06:33:12 +1000 (EST)
Received: from User (unknown [212.98.132.13])
(Authenticated sender: fax)
by geraldslavenholden.safenetbox.biz (Postfix) with ESMTPA id E3ACB83C68D;
Fri, 21 Jun 2013 06:32:57 +1000 (EST)
From: "notify@payments.interac.ca"
Subject: INTERAC e-Transfer from TD Canada Trust
Date: Thu, 20 Jun 2013 23:35:05 +0300
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Type: text/html; charset="windows-1251"
Content-Transfer-Encoding: 8bit
Message-Id: <20130620203312.D454083C688@geraldslavenholden.safenetbox.biz>
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: sultan omar Dear customer, You just receive an INTERAC e-Transfer
[...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: ntt.edu.vn]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} INTERAC e-Transfer from TD Canada Trust
sultan omar
You just receive an INTERAC e-Transfer
Scanned by the Netbox from
Netbox Blue
X-Account-Key: account1
X-UIDL: 00001c664f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Jun 2013 14:33:38 -0600
Received: from vagerp.lnk.telstra.net ([120.151.49.41] helo=geraldslavenholden.safenetbox.biz)
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.80.1)
(envelope-from
id 1UplXu-0007Om-4M
for dave@doctor.nl2k.ab.ca; Thu, 20 Jun 2013 14:33:37 -0600
Received: from geraldslavenholden.safenetbox.biz (geraldslavenholden.safenetbox.biz [127.0.0.1])
by geraldslavenholden.safenetbox.biz (Postfix) with ESMTP id D454083C688;
Fri, 21 Jun 2013 06:33:12 +1000 (EST)
Received: from User (unknown [212.98.132.13])
(Authenticated sender: fax)
by geraldslavenholden.safenetbox.biz (Postfix) with ESMTPA id E3ACB83C68D;
Fri, 21 Jun 2013 06:32:57 +1000 (EST)
From: "notify@payments.interac.ca"
Subject: INTERAC e-Transfer from TD Canada Trust
Date: Thu, 20 Jun 2013 23:35:05 +0300
MIME-Version: 1.0
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Content-Type: text/html; charset="windows-1251"
Content-Transfer-Encoding: 8bit
Message-Id: <20130620203312.D454083C688@geraldslavenholden.safenetbox.biz>
X-Spam_score: 6.8
X-Spam_score_int: 68
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: sultan omar Dear customer, You just receive an INTERAC e-Transfer
[...]
Content analysis details: (6.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: ntt.edu.vn]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} INTERAC e-Transfer from TD Canada Trust
Dear customer,
You just receive an INTERAC e-Transfer
(previously INTERAC Email Money Transfer).
Amount: $340.00 (CAD)
Sender's Message: Be aware that money from tax required up to 72 hours to be deposited.
Expiry Date: 21 June 2013
Action Required:
To deposit your money, click here:
https://etransfer.interac.ca/CAV4YvVq
Trouble with the link? Type it into your web browser address bar.
Need help?
http://www.interac.ca/consumers/faqs.php#emt
-------------------------------------------------------------------------------
What is an INTERAC e-Transfer? (previously INTERAC Email Money Transfer). If you use
online or mobile banking at a participating financial institution, you can send and
receive money quickly and easily.
Email or text messages carry the notice while the financial institutions securely transfer
the money using existing payment networks. If your financial institution does not yet
offer INTERAC e-Transfer, you can still deposit transfers to any bank account in Canada.
Click http://www.interac.ca/consumers/faqs.php#emt for details.
-------------------------------------------------------------------------------
Pour voir les d?tails du virement en fran?ais,
cliquez sur le lien ci-dessous :
https://etransfer.interac.ca/fr/CAV4YvVq
Scanned by the Netbox from
Netbox Blue
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments