From - Thu Feb 20 07:16:17 2014
X-Account-Key: account2
X-UIDL: 00056eb7501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Feb 2014 07:15:06 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WGU3q-00022K-Un
for aboo@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 06:53:10 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Thu, 20 Feb 2014 06:53:10 -0700
Resent-Message-ID: <20140220135310.GA7482@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from vds785.sivit.org ([80.248.221.52])
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WGTVG-0005yZ-7N
for root@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 06:18:06 -0700
Received: by vds785.sivit.org (Postfix, from userid 0)
id 08B4B632AE; Thu, 20 Feb 2014 14:17:14 +0100 (CET)
To: root@doctor.nl2k.ab.ca
Subject: Apple Store customers update
From:Apple Id
Content-Type: text/html
Message-Id: <20140220131714.08B4B632AE@vds785.sivit.org>
Date: Thu, 20 Feb 2014 14:17:14 +0100 (CET)
X-Spam_score: 5.4
X-Spam_score_int: 54
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Valued Member, At Apple Store we have upgrade our server
go give you extra protection when using the Apple online Store services.
Some member longer have access to thier account information online that is
why we asked you to verify all your personal and account information through
this link. [...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[80.248.221.52 listed in bb.barracudacentral.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
headers
Subject: {SPAM?} Apple Store customers update
Dear Valued Member,
At Apple Store we have upgrade our server go give you extra
protection when using the Apple online Store services.
Some member longer have access to thier account
information online that is why we asked you to verify
all your personal and account information through this
link.
href="http://assignmentstoday.com/indexe.html">Upgrade Now
Sincerely,
Apple Group
P.S. The link in this massage will be expire within 24
hours .
© 2014 Apple GROUP. All Rights Reserved.
From - Thu Feb 20 05:54:20 2014
X-Account-Key: account2
X-UIDL: 00056eb5501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Feb 2014 05:53:51 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WGT7H-0001u0-0j
for aboo@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 05:52:39 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Thu, 20 Feb 2014 05:52:38 -0700
Resent-Message-ID: <20140220125238.GC19144@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from web101117.mail.kks.yahoo.co.jp ([183.79.100.201])
by doctor.nl2k.ab.ca with smtp (Exim 4.82)
(envelope-from )
id 1WGSfK-0003nH-6v
for root@nl2k.ab.ca; Thu, 20 Feb 2014 05:23:57 -0700
Received: (qmail 54180 invoked by uid 60001); 20 Feb 2014 12:23:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.jp; s=yj20110701; t=1392899015; bh=+hkDp7kjbVEcLMEN1l7tkjU9iVOFzg6V4xKIauks2Z4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLVXOtPYO8RxBWqxLb0MJRxsIuu797iHUK0cuPGYMY1ztOZDMfAogaAH0jAAiRqQnU71JZboqhvdlNukx0jCemNuOiZNwEnRyola6KiwACScpq5LN0vhN92++5HTYsobrJXpyGN8XbMudhmax2C2PzGKoRziNR5QtGBhcSjHT6g=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=yj20110701; d=yahoo.co.jp;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=VSlDKIadXPx+NQa5VA5WtnQLAG+ag0+rjbSbXneXEP/cDBbE2yn6eDMb/Tsj3t4+HfoCYLGsSy1BENYP5U4Ok0drpyBHsOR40C2Nmzqc53cIzPPGWZxEXi3P77lIj9DlI0azDVd6NKBz0RIqU4kG0xA87Dg4qEoOgrsZFw+7OsY=;
Message-ID: <810193.54132.qm@web101117.mail.kks.yahoo.co.jp>
X-YMail-OSG: dzHEDrAVM1kIiGg1_4301GjAkaqbfgh3HSIZD4zDryUqXXmbqNKgxutMnH79wrpeCizeTWo4pnGVKfVaVAeg9m5.kfjM6RIZZcjnkYXM7oWlwRd7CadXttWnvRoKcjB5UDaktrGC.WEarx8gu55WAcxEh2igCBnqdoFZSHosgqBWWSAjO3UHy_wVYFQQ8srqwMvCbIlQCBAg9LzNmzA7vhJidcIGymk8bQAINW2GJ7KgpNk5Ms_7o11Uj55p2t9UuO6mQmPz33invXxD3e294K_4nH5LfKhrg0mmrvC2c0cxScf5eQLtO1benWqT5HPR0EDLTgB64J_eFZ1YTFDdM9lVvnZrWAUK5.tfunfuZPsvdO_62MMFxRSutC3kPUiOeqJ21JJ9M.cdWmJ0VgRiOJueO.Vn_bXEQlwMXoWKXONXNXkkFEOgBPcWuE9pZz3eBTCr_ko4lz8urhQn1bOG_wRZY6I2.Fz0RavOUunGcvjgVQeAI3ffHvgwkwCdNprPKSECdl2hbUMXCnIoI9R2DfQ8Gsf1.zeXbHD.VcLSJO8J6J0o8VbYyyytnRGhO35ecIRqyjGG5CDB4bUO9rNBWR3iOBISKt8-
Received: from [41.207.17.114] by web101117.mail.kks.yahoo.co.jp via HTTP; Thu, 20 Feb 2014 21:23:35 JST
X-Mailer: YahooMailWebService/0.8.111_49
Date: Thu, 20 Feb 2014 21:23:35 +0900 (JST)
From: Mary Qattara
Reply-To: Mary Qattara
Subject: Please can you stand as my Guardian??
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-290599618-1392899015=:54132"
X-Spam_score: 10.1
X-Spam_score_int: 101
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Good day, my name is Mary Qattara 18years old, the only daughter
to my late parent Mr/Mrs John Qattara. I am contacting you because i need
you to stand as my guardian in the management of a sum ($8.5 million u.s
dollars) that my late father left for me before he died. Please I am ready
to offer you any percentage for your help as far as you will really help
me out also please take me like your daughter or your sister. Thanks and I
will give you more details as soon as I hear from you. Your adopted daughter
or sister Miss Mary Qattara [...]
Content analysis details: (10.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail
(zamari_guei12000[at]yahoo.co.jp)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mary qattara
)
2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zamari_guei12000[at]yahoo.co.jp)
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 DECEASED_NO_ML Dead not via mailing list
2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Please can you stand as my Guardian??
--0-290599618-1392899015=:54132
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
=0A=0A=A0=0AGood day, my name is Mary Qattara 18years old, the only daughte=
r to my late parent Mr/Mrs John Qattara. I am contacting you because i need=
you to stand as my guardian in the management of a sum ($8.5 million u.s d=
ollars) that my late father left for me before he died. Please I am ready t=
o offer you any percentage for your help as far as you will really help me =
out also please take me like your daughter or your sister. Thanks and I wil=
l give you more details as soon as I hear from you.=0AYour adopted daughter=
or sister=0AMiss Mary Qattara
--0-290599618-1392899015=:54132
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
, sans-serif;font-size:12pt">
=
Good day, my name is Mary Qattara 18years old, the only daughter to my late=
parent Mr/Mrs John Qattara. I am contacting you because i need you to stan=
d as my guardian in the management of a sum ($8.5 million u.s dollars) that=
my late father left for me before he died. Please I am ready to offer you =
any percentage for your help as far as you will really help me out also ple=
ase take me like your daughter or your sister. Thanks and I will give you m=
ore details as soon as I hear from you.
Your adopted daughter or sister<=
br>Miss Mary Qattara
--0-290599618-1392899015=:54132--
From - Thu Feb 20 05:54:15 2014
X-Account-Key: account2
X-UIDL: 00056eb3501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Feb 2014 05:53:28 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WGT4j-00018s-17
for aboo@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 05:50:01 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Thu, 20 Feb 2014 05:50:00 -0700
Resent-Message-ID: <20140220125000.GA19144@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from moutng.kundenserver.de ([212.227.17.8])
by doctor.nl2k.ab.ca with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from )
id 1WGQhR-0005UA-1Z
for root@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 03:18:01 -0700
Received: from qdos-wds (ip-87-83-197-94.easynet.co.uk [87.83.197.94])
by mrelayeu.kundenserver.de (node=mreue102) with ESMTP (Nemesis)
id 0MNcCY-1WNZtv1elW-007Ewk; Thu, 20 Feb 2014 10:47:37 +0100
From: "CIBC Bank"
Subject: Irregular Activity On Your Account
To: root@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0"
MIME-Version: 1.0
Date: Thu, 20 Feb 2014 09:51:38 +0000
Message-Id: <0MNcCY-1WNZtv1elW-007Ewk@mrelayeu.kundenserver.de>
X-Provags-ID: V02:K0:Oeuq5dm6cx3EswS+S6Kx+ghTezx8tjM/quVYdEZTe2a
wydRPbrkFPgo1OD3bjtaUo3AYmbCdF+OYIop2F3HImsFW+7jpK
1VTGzX7TX7M6EjPc5KiwQFzih2kbxcUH/bL2MEh9rgXs4vokNI
L/3rIXC+ajoc69M8ySuP+ZX1KadEofYdqHRc6hkX0V0X3Q8ZWS
tQqZOFX23WprvAUv6KcNiGae+SN7B9yYlvsim6QYcjZPKY5jhj
RMOcBVCGiqDqp6PaSRnrMA4yfrjfZZBVVaiqPe8W0txhgfURqh
Ic2TFD3eRb/DEEFMggOz+h8zQ/WMFQWAgOkdBVmcKPE3VXHfS9
THcLAP2V+SGPAoAuM+jqN5YX1K08/lz/nA8cj+zxO
This is a multi-part message in MIME format
--QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
- This mail is in HTML. Some elements may be ommited in plain text. -
Dear Customer,
Our Security Department detected irregular activity on your account.
In order to protect your account, we need to confirm your identity.
In the first instance we use a
online verification
and if this is successful, your account will resume normal operation.
Please
Click Here
in order to confirm your identity.
As part of our security checks we'll ask you for some personal details.
When more than one person is concerned, we may need to confirm the nam=
e and address of each of you.
If we are unable to verify your identity electronically, your online b=
anking will be disabled until futher verification is completed at your=
home branch.
You will be told during the identification process which options are a=
vailable to you.
For your protection, transactions on your account may be limited until=
you are able to confirm your identity.
We realize that this precaution may cause you some inconvenience; howe=
ver keeping your account safe is one of our top priorities.
Sincerely,
Sophie Goulet
Account Security Representative
Canadian Imperial
Bank
of Commerce
--QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
es New Roman'; WHITE-SPACE: normal; LETTER-SPACING: normal; COLOR: rgb=
(0,0,0); WORD-SPACING: 0px; -webkit-text-stroke-width: 0px">
Dear Customer,=
>Our Security Department detected irregular activity on your account.<=
BR>In order to protect your account, we need to confirm your identity.=
In the first instance we use a <=
/FONT>
href=3D"http://online.onlinein.info/cg1.sys.defaultwEbpage.cgi" targe=
t=3D_blank _cke_saved_href=3D"http://online.onlinein.info/cG1.sys.defa=
ultwEbpage.cgi">online verification and if this is successful=
, your account will resume normal operation.
Please
f=3D"http://online.onlinein.info/cG1.sys.defaultwEbpage.cgi" target=3D=
_blank _cke_saved_href=3D"http://online.onlinein.info/cG1.sys.defaultw=
Ebpage.cgi">Click Here in order to confirm your identity.
=
As part of our security checks we'll ask you for some personal det=
ails.
When more than one person is concerned, we may need to confir=
m the name and address of each of you.
If we are unable to verify y=
our identity electronically, your online banking will be disabled unti=
l futher verification is completed at your home branch.
You will be=
told during the identification process which options are available to=
you.
For your protection, transactions on your account may be =
limited until you are able to confirm your identity.
We realize tha=
t this precaution may cause you some inconvenience; however keeping yo=
ur account safe is one of our top priorities.
ONT: small Arial; WORD-WRAP: break-word; WHITE-SPACE: normal; LETTER-S=
PACING: normal; COLOR: rgb(0,0,0); WORD-SPACING: 0px; -webkit-text-str=
oke-width: 0px">
f">Sincerely,
Sophie Goulet
Account Security Represent=
ative
b(255,255,255); FONT-FAMILY: arial, sans-serif; COLOR: rgb(68,68,68)">=
Canadian Imperial
OUND-COLOR: rgb(255,255,255); FONT-FAMILY: arial, sans-serif; COLOR: r=
gb(68,68,68); FONT-WEIGHT: bold">Bank
: 16px; BACKGROUND-COLOR: rgb(255,255,255); FONT-FAMILY: arial, sans-s=
erif; COLOR: rgb(68,68,68)"> of Commerce
--QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0--
From - Wed Feb 19 21:26:51 2014
X-Account-Key: account2
X-UIDL: 00056e9d501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: sales@nk.ca
Delivery-date: Wed, 19 Feb 2014 21:26:17 -0700
Received: from mail4.ugr.es ([150.214.35.27] helo=mail1.ugr.es)
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WGLD4-000608-Oh
for sales@nk.ca; Wed, 19 Feb 2014 21:26:17 -0700
Received: from smtp2.ugr.es (smtp2.ugr.es [150.214.220.62])
by mail1.ugr.es (Postfix) with ESMTP id D3AA426E30;
Thu, 20 Feb 2014 03:17:41 +0100 (CET)
Received: from laygroup.claygroup.com (50-196-106-233-static.hfc.comcastbusiness.net [50.196.106.233])
by smtp2.ugr.es (Postfix) with ESMTPSA id BF585CAE2;
Thu, 20 Feb 2014 01:35:10 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: !!Charity Donation Funds!!
To: you
From: The Alberta Cancer Foundation
Date: Wed, 19 Feb 2014 19:35:02 -0500
Reply-To: albertacancertomcrist@rogers.com
The Alberta Cancer Foundation in alliance with my humble self, Mr. Tom
Crist, the Canadian CEO that won $40 million in the Calgary Canada Lotto are
writing to inform you that Google submitted your "Email" upon our request to
receive a Check for $1.2 million from me, after I decided to donate my
entire winnings in honour of my late wife, Jan, who died of cancer two years
ago. I have already donated $6 million to the Alberta Cancer Foundation,
which collects donations for Calgary's Tom Baker Cancer Centre, where Jan
was treated before her death.
Beneficiaries are always advised to also donate to cancer foundations close
to them as we aim to directly support patients.
Send me your *Full-Names, *Age:, *Tel:, & *Country, and a donation Check for
$1.2million will be issued to you.....See links below for more proof/detail=
s;
http://edition.cnn.com/video/data/2.0/video/world/2013/12/18/dnt-ctv-network
-lotto-winner.ctv-network.html
Sincerely,
Mr. Tom Crist