From - Sat Feb 22 17:17:53 2014
X-Account-Key: account2
X-UIDL: 00056f0e501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Sat, 22 Feb 2014 17:16:19 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WHMbN-0004iZ-Iq; Sat, 22 Feb 2014 17:07:26 -0700
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Sat, 22 Feb 2014 17:07:25 -0700
Resent-Message-ID: <20140223000725.GA16782@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee ,
See root
Received: from mail-vc0-f196.google.com ([209.85.220.196])
by doctor.nl2k.ab.ca with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from )
id 1WHL1t-0006hI-8J
for doctor@nl2k.ab.ca; Sat, 22 Feb 2014 15:27:59 -0700
Received: by mail-vc0-f196.google.com with SMTP id lf12so1590973vcb.11
for ; Sat, 22 Feb 2014 14:26:08 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:reply-to:date:message-id:subject:from:to:content-type;
bh=+IWiOLuyiN/MQFEJqJjG/G325GR5TXvAJgL4JrlEM+8=;
b=iBW8gJiWCQONq/dlJHSBco8aBfTZD853rh6bWw+Jyme2nEqbcdUE8DAm4NyBzImNR8
HINNzVyr6xyseFTgGCG8Up6hrpWd7w3GLQCzZpL1xvb2MrxvJic9TNFNT2ra8epog+JS
Yz8O3FNJ0IAJVxK0bc32ERYPi2QPjg2QA7SRJFWLFbHhHAglchgs7FhshY+OFHYvQv/j
amdZwC1RcfQa4Mk/Qd3jEcHUScIr0+pln2HFaJ2DRHVGkTnP3sb/y3+jQ7Szltb5Qn8L
x+nAdjJScupnvk77YEGr4gHV6COCTWyxTB+3FHhkTXc2tH+aO50QA92odLJDH4yYyo+B
7UWQ==
MIME-Version: 1.0
X-Received: by 10.220.191.134 with SMTP id dm6mr8813733vcb.16.1393107968152;
Sat, 22 Feb 2014 14:26:08 -0800 (PST)
Received: by 10.52.119.179 with HTTP; Sat, 22 Feb 2014 14:26:07 -0800 (PST)
Reply-To: salesassistant6@gmail.com
Date: Sat, 22 Feb 2014 22:26:07 +0000
Message-ID:
Subject: INQUIRY
From: Julian Robert
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=089e0158a82a936b6f04f3063956
Bcc: doctor@nl2k.ab.ca
--089e0158a82a936b6f04f3063956
Content-Type: text/plain; charset=ISO-8859-1
Dear Sir/Madam,
We are interested in purchasing your products which we saw in trading site
and we sincerely hope to establish a long-term business relation with your
esteemed company.
Please kindly send me your latest catalog. Also, inform me about the
Minimum Order
Quantity, Delivery time or FOB,and payment terms warranty.
Your early reply is highly appreciated.
Thank You!
Best Regards,
Mrs Julian Robert
Purchasing Manager
Julius Textile Investment
K U N E R T AG
Julius-Tuner-Stare 49,
87509 Immensity.
--089e0158a82a936b6f04f3063956
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
sans-serif;font-size:large">
D=
ear Sir/Madam,
=A0We are interested in purchasing your products whic=
h we saw in trading site
=A0and we sincerely hope to establish a long-term business relation wit=
h your esteemed company.
=A0Please kindly send me your latest catalo=
g. Also, inform me about the Minimum Order
Quantity, Delivery time o=
r FOB,and payment terms warranty.
Your early reply is highly appreciated.
Thank You!
Best R=
egards,
Mrs J=
ulian Robert
Purchasing Manager=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0
Julius Textile Investment=A0
pan>=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=
=A0=A0=A0=A0=A0
K U N E R T AG
">Julius-Tuner-Stare 49,
87509 Immensity.
--089e0158a82a936b6f04f3063956--
From - Sun Feb 23 06:17:28 2014
X-Account-Key: account2
X-UIDL: 00056f2c501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Sun, 23 Feb 2014 06:16:05 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WHYVt-0001S1-CN; Sun, 23 Feb 2014 05:50:33 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Sun, 23 Feb 2014 05:50:33 -0700
Resent-Message-ID: <20140223125033.GC4133@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee ,
See root
Received: from sa11.bezeqint.net ([192.115.104.25])
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WHYUA-0001Du-RQ
for doctor@nl2k.ab.ca; Sun, 23 Feb 2014 05:49:18 -0700
Received: from User (bzq-84-109-70-103.red.bezeqint.net [84.109.70.103])
by sa11.bezeqint.net (Bezeq International SMTP out Mail Server) with SMTP id 289F525CDD8;
Sun, 23 Feb 2014 14:24:46 +0200 (IST)
Reply-To:
From: "Victor Ibe"
Subject: From Mr. Victor Ibe/Inheritance Proposal To You.
Date: Sun, 23 Feb 2014 14:24:44 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0043_01C2A9A6.24059D16"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 18.5
X-Spam_score_int: 185
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Kindly view attachment of my business proposal worth US$10.5
million and get back to me as soon as possible [...]
Content analysis details: (18.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[192.115.104.25 listed in psbl.surriel.com]
1.2 NSL_RCVD_FROM_USER Received from User
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see ]
1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
1.2 MISSING_HEADERS Missing To: header
0.4 OBFU_TEXT_ATTACH BODY: Text attachment with non-text MIME type
0.1 MISSING_MID Missing Message-Id: header
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 FROM_MISSPACED From: missing whitespace
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 T_OBFU_ATTACH_MISSP Obfuscated attachment type and misspaced From
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
1.5 FROM_MISSP_USER From misspaced, from "User"
2.0 MONEY_FROM_MISSP Lots of money and misspaced From
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} From Mr. Victor Ibe/Inheritance Proposal To You.
This is a multi-part message in MIME format.
------=_NextPart_000_0043_01C2A9A6.24059D16
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Kindly view attachment of my business proposal worth US$10.5 million and get back to me as soon as possible
------=_NextPart_000_0043_01C2A9A6.24059D16
Content-Type: application/octet-stream;
name="UBA.txt"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="UBA.txt"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------=_NextPart_000_0043_01C2A9A6.24059D16--
From - Sun Feb 23 06:16:37 2014
X-Account-Key: account2
X-UIDL: 00056f2b501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Sun, 23 Feb 2014 06:15:22 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WHYTx-0001Ct-FO; Sun, 23 Feb 2014 05:48:35 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Sun, 23 Feb 2014 05:48:33 -0700
Resent-Message-ID: <20140223124833.GA4133@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee ,
See root
Received: from dub0-omc1-s2.dub0.hotmail.com ([157.55.0.201])
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WHX7p-0004DH-5r
for root@doctor.nl2k.ab.ca; Sun, 23 Feb 2014 04:22:19 -0700
Received: from DUB122-W1 ([157.55.0.238]) by dub0-omc1-s2.dub0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Sun, 23 Feb 2014 03:21:25 -0800
X-TMN: [5gAbQQpkKE/dcXfel1Qv4MbOJLFoiy2m]
X-Originating-Email: [fergasonjames@live.com]
Message-ID:
Content-Type: multipart/alternative;
boundary="_eabeeaec-0873-4952-b159-8a35f96b0b92_"
Reply-To:
From: Walter Smith
Subject: Personal Assistant and Administrative officer needed
Date: Sun, 23 Feb 2014 11:21:24 +0000
Importance: Normal
MIME-Version: 1.0
Bcc:
X-OriginalArrivalTime: 23 Feb 2014 11:21:25.0273 (UTC) FILETIME=[635D1090:01CF3089]
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello, I'm looking for someone who can handle my business
& personal errandsat his/her spare time as I keep traveling a lot. Someone
who can offerme these services mentioned below: Mail services (Receive
my mails and drop them off at UPS or USPS) Shop for Gifts* Bill payment (pay
my bills on my behalf, access to the funds wouldbe provided by me) Sit for
delivery (at your home) or pick items up at nearby postoffice at your convenience.
Let me know if you will be able to offer me any or all of theseservices and
$400 would be your weekly payment. If you are ready togo, [...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail (fergasonjames[at]live.com)
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
Subject: {SPAM?} Personal Assistant and Administrative officer needed
--_eabeeaec-0873-4952-b159-8a35f96b0b92_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello=2C
I'm looking for someone who can handle my business & personal errandsat his=
/her spare time as I keep traveling a lot. Someone who can offerme these
services mentioned below:
Mail services (Receive my mails and drop them off at UPS or USPS) Shop f=
or Gifts Bill payment (pay my bills on my behalf=2C access to the funds wo=
uldbe provided by me) Sit for delivery (at your home) or pick items up at =
nearby postoffice at your convenience.
Let me know if you will be able to offer me any or all of theseservices and=
$400 would be your weekly payment. If you are ready togo=2C
P.S- You are not required to spend even a single dime from your pocket.
Sincerely=2C
Walter Smith =
--_eabeeaec-0873-4952-b159-8a35f96b0b92_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello=2C
v>
I'm looking for someone who can handle my business &=3B personal =
errands
at his/her spare time as I keep traveling a lot. Someone =
who can offer
me these
services mentione=
d below:
Mail services (Receive my mails and dro=
p them off at UPS or USPS)
Shop for Gifts
Bill paym=
ent (pay my bills on my behalf=2C access to the funds would
be pr=
ovided by me)
* Sit for delivery (at your home) or pick items up =
at nearby post
office at your convenience.
iv>Let me know if you will be able to offer me any or all of these
v>services and $400 would be your weekly payment. If you are ready to
go=2C
P.S- You are not require=
d to spend even a single dime from your pocket.
Si=
ncerely=2C
Walter Smith
ody>
=
--_eabeeaec-0873-4952-b159-8a35f96b0b92_--
From - Thu Feb 20 07:16:17 2014
X-Account-Key: account2
X-UIDL: 00056eb7501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Feb 2014 07:15:06 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WGU3q-00022K-Un
for aboo@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 06:53:10 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Thu, 20 Feb 2014 06:53:10 -0700
Resent-Message-ID: <20140220135310.GA7482@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from vds785.sivit.org ([80.248.221.52])
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WGTVG-0005yZ-7N
for root@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 06:18:06 -0700
Received: by vds785.sivit.org (Postfix, from userid 0)
id 08B4B632AE; Thu, 20 Feb 2014 14:17:14 +0100 (CET)
To: root@doctor.nl2k.ab.ca
Subject: Apple Store customers update
From:Apple Id
Content-Type: text/html
Message-Id: <20140220131714.08B4B632AE@vds785.sivit.org>
Date: Thu, 20 Feb 2014 14:17:14 +0100 (CET)
X-Spam_score: 5.4
X-Spam_score_int: 54
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Valued Member, At Apple Store we have upgrade our server
go give you extra protection when using the Apple online Store services.
Some member longer have access to thier account information online that is
why we asked you to verify all your personal and account information through
this link. [...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[80.248.221.52 listed in bb.barracudacentral.org]
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
headers
Subject: {SPAM?} Apple Store customers update
Dear Valued Member,
At Apple Store we have upgrade our server go give you extra
protection when using the Apple online Store services.
Some member longer have access to thier account
information online that is why we asked you to verify
all your personal and account information through this
link.
href="http://assignmentstoday.com/indexe.html">Upgrade Now
Sincerely,
Apple Group
P.S. The link in this massage will be expire within 24
hours .
© 2014 Apple GROUP. All Rights Reserved.
From - Thu Feb 20 05:54:20 2014
X-Account-Key: account2
X-UIDL: 00056eb5501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Feb 2014 05:53:51 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WGT7H-0001u0-0j
for aboo@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 05:52:39 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Thu, 20 Feb 2014 05:52:38 -0700
Resent-Message-ID: <20140220125238.GC19144@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from web101117.mail.kks.yahoo.co.jp ([183.79.100.201])
by doctor.nl2k.ab.ca with smtp (Exim 4.82)
(envelope-from )
id 1WGSfK-0003nH-6v
for root@nl2k.ab.ca; Thu, 20 Feb 2014 05:23:57 -0700
Received: (qmail 54180 invoked by uid 60001); 20 Feb 2014 12:23:35 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.co.jp; s=yj20110701; t=1392899015; bh=+hkDp7kjbVEcLMEN1l7tkjU9iVOFzg6V4xKIauks2Z4=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=tLVXOtPYO8RxBWqxLb0MJRxsIuu797iHUK0cuPGYMY1ztOZDMfAogaAH0jAAiRqQnU71JZboqhvdlNukx0jCemNuOiZNwEnRyola6KiwACScpq5LN0vhN92++5HTYsobrJXpyGN8XbMudhmax2C2PzGKoRziNR5QtGBhcSjHT6g=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=yj20110701; d=yahoo.co.jp;
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=VSlDKIadXPx+NQa5VA5WtnQLAG+ag0+rjbSbXneXEP/cDBbE2yn6eDMb/Tsj3t4+HfoCYLGsSy1BENYP5U4Ok0drpyBHsOR40C2Nmzqc53cIzPPGWZxEXi3P77lIj9DlI0azDVd6NKBz0RIqU4kG0xA87Dg4qEoOgrsZFw+7OsY=;
Message-ID: <810193.54132.qm@web101117.mail.kks.yahoo.co.jp>
X-YMail-OSG: dzHEDrAVM1kIiGg1_4301GjAkaqbfgh3HSIZD4zDryUqXXmbqNKgxutMnH79wrpeCizeTWo4pnGVKfVaVAeg9m5.kfjM6RIZZcjnkYXM7oWlwRd7CadXttWnvRoKcjB5UDaktrGC.WEarx8gu55WAcxEh2igCBnqdoFZSHosgqBWWSAjO3UHy_wVYFQQ8srqwMvCbIlQCBAg9LzNmzA7vhJidcIGymk8bQAINW2GJ7KgpNk5Ms_7o11Uj55p2t9UuO6mQmPz33invXxD3e294K_4nH5LfKhrg0mmrvC2c0cxScf5eQLtO1benWqT5HPR0EDLTgB64J_eFZ1YTFDdM9lVvnZrWAUK5.tfunfuZPsvdO_62MMFxRSutC3kPUiOeqJ21JJ9M.cdWmJ0VgRiOJueO.Vn_bXEQlwMXoWKXONXNXkkFEOgBPcWuE9pZz3eBTCr_ko4lz8urhQn1bOG_wRZY6I2.Fz0RavOUunGcvjgVQeAI3ffHvgwkwCdNprPKSECdl2hbUMXCnIoI9R2DfQ8Gsf1.zeXbHD.VcLSJO8J6J0o8VbYyyytnRGhO35ecIRqyjGG5CDB4bUO9rNBWR3iOBISKt8-
Received: from [41.207.17.114] by web101117.mail.kks.yahoo.co.jp via HTTP; Thu, 20 Feb 2014 21:23:35 JST
X-Mailer: YahooMailWebService/0.8.111_49
Date: Thu, 20 Feb 2014 21:23:35 +0900 (JST)
From: Mary Qattara
Reply-To: Mary Qattara
Subject: Please can you stand as my Guardian??
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="0-290599618-1392899015=:54132"
X-Spam_score: 10.1
X-Spam_score_int: 101
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Good day, my name is Mary Qattara 18years old, the only daughter
to my late parent Mr/Mrs John Qattara. I am contacting you because i need
you to stand as my guardian in the management of a sum ($8.5 million u.s
dollars) that my late father left for me before he died. Please I am ready
to offer you any percentage for your help as far as you will really help
me out also please take me like your daughter or your sister. Thanks and I
will give you more details as soon as I hear from you. Your adopted daughter
or sister Miss Mary Qattara [...]
Content analysis details: (10.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 FREEMAIL_FROM Sender email is freemail
(zamari_guei12000[at]yahoo.co.jp)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mary qattara
)
2.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (zamari_guei12000[at]yahoo.co.jp)
3.6 NA_DOLLARS BODY: Talks about a million North American dollars
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 DECEASED_NO_ML Dead not via mailing list
2.8 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 T_TO_NO_BRKTS_FREEMAIL T_TO_NO_BRKTS_FREEMAIL
0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Please can you stand as my Guardian??
--0-290599618-1392899015=:54132
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
=0A=0A=A0=0AGood day, my name is Mary Qattara 18years old, the only daughte=
r to my late parent Mr/Mrs John Qattara. I am contacting you because i need=
you to stand as my guardian in the management of a sum ($8.5 million u.s d=
ollars) that my late father left for me before he died. Please I am ready t=
o offer you any percentage for your help as far as you will really help me =
out also please take me like your daughter or your sister. Thanks and I wil=
l give you more details as soon as I hear from you.=0AYour adopted daughter=
or sister=0AMiss Mary Qattara
--0-290599618-1392899015=:54132
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
, sans-serif;font-size:12pt">
=
Good day, my name is Mary Qattara 18years old, the only daughter to my late=
parent Mr/Mrs John Qattara. I am contacting you because i need you to stan=
d as my guardian in the management of a sum ($8.5 million u.s dollars) that=
my late father left for me before he died. Please I am ready to offer you =
any percentage for your help as far as you will really help me out also ple=
ase take me like your daughter or your sister. Thanks and I will give you m=
ore details as soon as I hear from you.
Your adopted daughter or sister<=
br>Miss Mary Qattara
--0-290599618-1392899015=:54132--
From - Thu Feb 20 05:54:15 2014
X-Account-Key: account2
X-UIDL: 00056eb3501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Thu, 20 Feb 2014 05:53:28 -0700
Received: from root by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WGT4j-00018s-17
for aboo@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 05:50:01 -0700
Resent-From: root@doctor.nl2k.ab.ca
Resent-Date: Thu, 20 Feb 2014 05:50:00 -0700
Resent-Message-ID: <20140220125000.GA19144@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from moutng.kundenserver.de ([212.227.17.8])
by doctor.nl2k.ab.ca with esmtps (TLSv1:RC4-SHA:128)
(Exim 4.82)
(envelope-from )
id 1WGQhR-0005UA-1Z
for root@doctor.nl2k.ab.ca; Thu, 20 Feb 2014 03:18:01 -0700
Received: from qdos-wds (ip-87-83-197-94.easynet.co.uk [87.83.197.94])
by mrelayeu.kundenserver.de (node=mreue102) with ESMTP (Nemesis)
id 0MNcCY-1WNZtv1elW-007Ewk; Thu, 20 Feb 2014 10:47:37 +0100
From: "CIBC Bank"
Subject: Irregular Activity On Your Account
To: root@doctor.nl2k.ab.ca
Content-Type: multipart/alternative; boundary="QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0"
MIME-Version: 1.0
Date: Thu, 20 Feb 2014 09:51:38 +0000
Message-Id: <0MNcCY-1WNZtv1elW-007Ewk@mrelayeu.kundenserver.de>
X-Provags-ID: V02:K0:Oeuq5dm6cx3EswS+S6Kx+ghTezx8tjM/quVYdEZTe2a
wydRPbrkFPgo1OD3bjtaUo3AYmbCdF+OYIop2F3HImsFW+7jpK
1VTGzX7TX7M6EjPc5KiwQFzih2kbxcUH/bL2MEh9rgXs4vokNI
L/3rIXC+ajoc69M8ySuP+ZX1KadEofYdqHRc6hkX0V0X3Q8ZWS
tQqZOFX23WprvAUv6KcNiGae+SN7B9yYlvsim6QYcjZPKY5jhj
RMOcBVCGiqDqp6PaSRnrMA4yfrjfZZBVVaiqPe8W0txhgfURqh
Ic2TFD3eRb/DEEFMggOz+h8zQ/WMFQWAgOkdBVmcKPE3VXHfS9
THcLAP2V+SGPAoAuM+jqN5YX1K08/lz/nA8cj+zxO
This is a multi-part message in MIME format
--QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
- This mail is in HTML. Some elements may be ommited in plain text. -
Dear Customer,
Our Security Department detected irregular activity on your account.
In order to protect your account, we need to confirm your identity.
In the first instance we use a
online verification
and if this is successful, your account will resume normal operation.
Please
Click Here
in order to confirm your identity.
As part of our security checks we'll ask you for some personal details.
When more than one person is concerned, we may need to confirm the nam=
e and address of each of you.
If we are unable to verify your identity electronically, your online b=
anking will be disabled until futher verification is completed at your=
home branch.
You will be told during the identification process which options are a=
vailable to you.
For your protection, transactions on your account may be limited until=
you are able to confirm your identity.
We realize that this precaution may cause you some inconvenience; howe=
ver keeping your account safe is one of our top priorities.
Sincerely,
Sophie Goulet
Account Security Representative
Canadian Imperial
Bank
of Commerce
--QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
es New Roman'; WHITE-SPACE: normal; LETTER-SPACING: normal; COLOR: rgb=
(0,0,0); WORD-SPACING: 0px; -webkit-text-stroke-width: 0px">
Dear Customer,=
>Our Security Department detected irregular activity on your account.<=
BR>In order to protect your account, we need to confirm your identity.=
In the first instance we use a <=
/FONT>
href=3D"http://online.onlinein.info/cg1.sys.defaultwEbpage.cgi" targe=
t=3D_blank _cke_saved_href=3D"http://online.onlinein.info/cG1.sys.defa=
ultwEbpage.cgi">online verification and if this is successful=
, your account will resume normal operation.
Please
f=3D"http://online.onlinein.info/cG1.sys.defaultwEbpage.cgi" target=3D=
_blank _cke_saved_href=3D"http://online.onlinein.info/cG1.sys.defaultw=
Ebpage.cgi">Click Here in order to confirm your identity.
=
As part of our security checks we'll ask you for some personal det=
ails.
When more than one person is concerned, we may need to confir=
m the name and address of each of you.
If we are unable to verify y=
our identity electronically, your online banking will be disabled unti=
l futher verification is completed at your home branch.
You will be=
told during the identification process which options are available to=
you.
For your protection, transactions on your account may be =
limited until you are able to confirm your identity.
We realize tha=
t this precaution may cause you some inconvenience; however keeping yo=
ur account safe is one of our top priorities.
ONT: small Arial; WORD-WRAP: break-word; WHITE-SPACE: normal; LETTER-S=
PACING: normal; COLOR: rgb(0,0,0); WORD-SPACING: 0px; -webkit-text-str=
oke-width: 0px">
f">Sincerely,
Sophie Goulet
Account Security Represent=
ative
b(255,255,255); FONT-FAMILY: arial, sans-serif; COLOR: rgb(68,68,68)">=
Canadian Imperial
OUND-COLOR: rgb(255,255,255); FONT-FAMILY: arial, sans-serif; COLOR: r=
gb(68,68,68); FONT-WEIGHT: bold">Bank
: 16px; BACKGROUND-COLOR: rgb(255,255,255); FONT-FAMILY: arial, sans-s=
erif; COLOR: rgb(68,68,68)"> of Commerce
--QZwgaYyS1dVExLte=_Vd8nCHu2Oteipiip0--
From - Wed Feb 19 21:26:51 2014
X-Account-Key: account2
X-UIDL: 00056e9d501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: sales@nk.ca
Delivery-date: Wed, 19 Feb 2014 21:26:17 -0700
Received: from mail4.ugr.es ([150.214.35.27] helo=mail1.ugr.es)
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WGLD4-000608-Oh
for sales@nk.ca; Wed, 19 Feb 2014 21:26:17 -0700
Received: from smtp2.ugr.es (smtp2.ugr.es [150.214.220.62])
by mail1.ugr.es (Postfix) with ESMTP id D3AA426E30;
Thu, 20 Feb 2014 03:17:41 +0100 (CET)
Received: from laygroup.claygroup.com (50-196-106-233-static.hfc.comcastbusiness.net [50.196.106.233])
by smtp2.ugr.es (Postfix) with ESMTPSA id BF585CAE2;
Thu, 20 Feb 2014 01:35:10 +0100 (CET)
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
Subject: !!Charity Donation Funds!!
To: you
From: The Alberta Cancer Foundation
Date: Wed, 19 Feb 2014 19:35:02 -0500
Reply-To: albertacancertomcrist@rogers.com
The Alberta Cancer Foundation in alliance with my humble self, Mr. Tom
Crist, the Canadian CEO that won $40 million in the Calgary Canada Lotto are
writing to inform you that Google submitted your "Email" upon our request to
receive a Check for $1.2 million from me, after I decided to donate my
entire winnings in honour of my late wife, Jan, who died of cancer two years
ago. I have already donated $6 million to the Alberta Cancer Foundation,
which collects donations for Calgary's Tom Baker Cancer Centre, where Jan
was treated before her death.
Beneficiaries are always advised to also donate to cancer foundations close
to them as we aim to directly support patients.
Send me your *Full-Names, *Age:, *Tel:, & *Country, and a donation Check for
$1.2million will be issued to you.....See links below for more proof/detail=
s;
http://edition.cnn.com/video/data/2.0/video/world/2013/12/18/dnt-ctv-network
-lotto-winner.ctv-network.html
Sincerely,
Mr. Tom Crist