From - Tue Mar 11 09:17:13 2014
X-Account-Key: account2
X-UIDL: 000571bf501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Tue, 11 Mar 2014 09:15:10 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WNOI2-0002YU-7g
for aboo@doctor.nl2k.ab.ca; Tue, 11 Mar 2014 09:08:23 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Tue, 11 Mar 2014 09:08:21 -0600
Resent-Message-ID: <20140311150821.GA9326@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from [202.60.117.71] (helo=hdfx.com.cn)
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WNNro-0000no-0Y
for root@nk.ca; Tue, 11 Mar 2014 08:41:30 -0600
Received: from User ([98.173.59.168])
by hdfx.com.cn (Lotus Domino Release 6.5.4)
with ESMTP id 2014031122231779-353 ;
Tue, 11 Mar 2014 22:23:17 +0800
From: "RBC Royal Bank"
Subject: Your RBC Royal Bank Alerts
Date: Tue, 11 Mar 2014 07:22:10 -0700
MIME-Version: 1.0
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-MIMETrack: Itemize by SMTP Server on MAILSVR/MAILHDFX(Release 6.5.4|March 27, 2005) at
2014-03-11 22:23:18,
Serialize by Router on MAILSVR/MAILHDFX(Release 6.5.4|March 27, 2005) at
2014-03-11 22:41:18,
Serialize complete at 2014-03-11 22:41:18
Message-ID:
Content-Transfer-Encoding: 7bit
Content-Type: text/html;
charset="Windows-1251"
X-Spam_score: 20.1
X-Spam_score_int: 201
X-Spam_bar: ++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Hello RBC Client, You are receiving this email because you
recently added or updated your email address, allowing RBC to contact you
by email and deliver useful product and account information straight to your
inbox. [...]
Content analysis details: (20.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[202.60.117.71 listed in psbl.surriel.com]
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.60.117.71 listed in bb.barracudacentral.org]
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.2 NSL_RCVD_FROM_USER Received from User
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=ibanking%40ib.rbc.com;ip=202.60.117.71;r=gallifrey.nk.ca]
1.2 MISSING_HEADERS Missing To: header
0.7 HTML_IMAGE_ONLY_20 BODY: HTML: images with 1600-2000 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
0.0 FROM_MISSPACED From: missing whitespace
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.5 FROM_MISSP_USER From misspaced, from "User"
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} Your RBC Royal Bank Alerts
|
Hello RBC Client,
You are receiving this email because you recently added or updated your email address, allowing RBC to contact you by email and deliver useful product and account information straight to your inbox.
To change the alerts that you have chosen for your account, or to update your e-mail address and other info
Please visit us to RBC Online Banking
|
|
RBC Online Banking is offered by Royal Bank of Canada.
From - Tue Mar 11 09:17:13 2014
X-Account-Key: account2
X-UIDL: 000571c0501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Tue, 11 Mar 2014 09:15:14 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WNOIF-0002ZI-1H
for aboo@doctor.nl2k.ab.ca; Tue, 11 Mar 2014 09:08:36 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Tue, 11 Mar 2014 09:08:34 -0600
Resent-Message-ID: <20140311150834.GB9326@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from leimbergservices.com ([72.3.245.15])
by doctor.nl2k.ab.ca with esmtp (Exim 4.82)
(envelope-from )
id 1WNNpA-0000da-Go
for root@nl2k.ab.ca; Tue, 11 Mar 2014 08:38:48 -0600
Received: from 286555-app1 [127.0.0.1] by leimbergservices.com with ESMTP
(SMTPD32-8.15) id A4FD6E020C; Tue, 11 Mar 2014 09:51:57 -0400
Date: Tue, 11 Mar 2014 09:51:57 -0400 (EDT)
From: apple
To: root@nl2k.ab.ca
Message-ID: <11005234.184523.1394545917335.JavaMail.286555-APP1$@localhost>
Subject: Your Apple lD comes to expire.
MIME-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Mailer: ColdFusion 9 Application Server
X-Spam_score: 5.3
X-Spam_score_int: 53
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Dear Customer, This is an automatic message sent by our security
system to let you know that you have 48 hours to confirm your account information.
Your itunes account has been frozen because we are unable to validate your
account information. [...]
Content analysis details: (5.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 TVD_PH_BODY_ACCOUNTS_PRE BODY: TVD_PH_BODY_ACCOUNTS_PRE
2.0 TVD_PH_REC BODY: Message has a phrase standard for phishing mails
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
Subject: {SPAM?} Your Apple lD comes to expire.
or=3D"#CCCCCC">
|
|
|
|
border=3D"0" align=3D"center" width=3D"560" style=3D"line-height: 21px; col=
or: rgb(68, 68, 68); font-family: Calibri, sans-serif; font-size: 15px; fon=
t-style: normal; font-variant: normal; font-weight: normal; letter-spacing:=
normal; orphans: auto; text-align: start; text-indent: 0px; text-transform=
: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-=
stroke-width: 0px; background-color: rgb(255, 255, 255)">
|
border=3D"0" alt=3D"" src=3D"http://zupimages.net/up/13/49/ig69.png" style=
=3D"line-height: 21px; display: block" width=3D"560" height=3D"37" /> |
=3D"0" width=3D"508" style=3D"line-height: 21px">
|
|
: 21px; padding-left: 30px; padding-right: 27px; padding-top: 36px; padding=
-bottom: 0px">
mily: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, Helveti=
ca, Verdana, sans-serif; font-size: 18px; color: rgb(102, 102, 102)">
size=3D"3">Dear Customer,
|
ht: 21px">
=3D"0" width=3D"52" style=3D"line-height: 21px">
|
: 21px; padding-left: 0px; padding-right: 30px; padding-top: 32px; padding-=
bottom: 0px">
|
t: 21px">
=3D"0" width=3D"560" style=3D"line-height: 21px" height=3D"26">
|
|
: 21px; padding-left: 30px; padding-right: 30px; padding-top: 0px; padding-=
bottom: 0px">
family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, Helve=
tica, Verdana, sans-serif; font-size: 12px; color: rgb(102, 102, 102)">This=
is an automatic message sent by our security system to let you know that y=
ou have =09=09=09=09=09=09=09=09=0948 hours=
to confirm your account information.
|
t: 21px">
=3D"0" width=3D"560" style=3D"line-height: 21px">
|
|
: 21px; padding-left: 30px; padding-right: 30px; padding-top: 0px; padding-=
bottom: 0px">
family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, Helve=
tica, Verdana, sans-serif; font-size: 12px; color: rgb(102, 102, 102)"><=
font style=3D"font-size: 9pt">Your itunes account has been frozen because w=
e are unable to validate your account information.
|
t: 21px">
=3D"0" width=3D"560" style=3D"line-height: 21px">
|
|
: 21px; padding-left: 30px; padding-right: 30px; padding-top: 0px; padding-=
bottom: 0px">
family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, Helve=
tica, Verdana, sans-serif; font-size: 12px; color: rgb(102, 102, 102)">Once=
you have updated your account records, we will try again to validate your =
information and your account suspension will be lifted. This will help pro=
tect your account in the future. This process does not take more than 3 min=
utes. To proceed to confirm your account details please click on the link =
below and follow the instructions.
=3D"0" width=3D"560" style=3D"line-height: 21px">
|
: 21px; padding-left: 30px; padding-right: 30px; padding-top: 0px; padding-=
bottom: 0px">
family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, Helve=
tica, Verdana, sans-serif; font-size: 12px; color: rgb(102, 102, 102)">
lass=3D"ecxaapl-link" target=3D"_blank" style=3D"line-height: 17px; font-we=
ight: normal; text-decoration: none; color: rgb(0, 136, 204); cursor: point=
er; font-family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Ari=
al, Helvetica, Verdana, sans-serif; font-size: 12px; font-style: normal; fo=
nt-variant: normal; letter-spacing: normal; orphans: auto; text-align: -web=
kit-left; text-indent: 0px; text-transform: none; white-space: normal; wido=
ws: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-col=
or: rgb(255, 255, 255);" href=3D"http://reformaemcasa.com.br/apc.html">Clic=
k Here Validate Your Account
ont-family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, H=
elvetica, Verdana, sans-serif; font-size: 12px; font-style: normal; font-va=
riant: normal; font-weight: normal; letter-spacing: normal; line-height: 16=
.796875px; orphans: auto; text-align: -webkit-left; text-indent: 0px; text-=
transform: none; white-space: normal; widows: auto; word-spacing: 0px; -web=
kit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); display: =
inline !important; float: none;">.
=3D"0" width=3D"560" style=3D"line-height: 21px">
|
: 21px; padding-left: 30px; padding-right: 30px; padding-top: 0px; padding-=
bottom: 0px">
family: 'Lucida Grande', 'Lucida Sans', 'Lucida Sans Unicode', Arial, Helve=
tica, Verdana, sans-serif; font-size: 12px; color: rgb(102, 102, 102)">We a=
pologise for any inconvenience caused.
Your sincerely,
Apple Security Department
|
ng-top: 11px">
49/lfnu.png" style=3D"line-height: 21px; display: block" width=3D"560" heig=
ht=3D"10" />
|
|
=3D"#8C8C8C">TM =09=09and copyright © 2014 Apple Inc. 1 Infinite Loop=
, MS 38-DM, Cupertino, CA =09=0952019.
=09=09
font-weight: inherit; text-decoration: underline; color: #8C8C8C; cursor: p=
ointer; font-family: Arial; white-space: nowrap" href=3D"#"> =09=09All Righ=
ts Reserved
converted-space"> / =
inherit; text-decoration: underline; color: #8C8C8C; cursor: pointer; font=
-family: Arial; white-space: nowrap" href=3D"#">Keep =09=09Informed
nt face=3D"Arial" color=3D"#8C8C8C">&=
nbsp;/
arget=3D"_blank" style=3D"line-height: 12px; font-weight: inherit; text-dec=
oration: underline; color: #8C8C8C; cursor: pointer; font-family: Arial; wh=
ite-space: nowrap" href=3D"#">Privacy =09=09Policy
color=3D"#8C8C8C"> /
n class=3D"Apple-converted-space">
blank" style=3D"line-height: 12px; font-weight: inherit; text-decoration: u=
nderline; color: #8C8C8C; cursor: pointer; font-family: Arial; white-space:=
nowrap" href=3D"#">My =09=09Apple ID
|
|
From - Mon Mar 10 09:17:55 2014
X-Account-Key: account2
X-UIDL: 00057197501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Mar 2014 09:15:54 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.82)
(envelope-from )
id 1WN196-0006bt-RF
for aboo@doctor.nl2k.ab.ca; Mon, 10 Mar 2014 08:25:37 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Mon, 10 Mar 2014 08:25:36 -0600
Resent-Message-ID: <20140310142536.GA25036@doctor.nl2k.ab.ca>
Resent-To: See root
Received: from dime167.dizinc.com ([66.7.218.232])
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from )
id 1WN0RN-0003Zw-UB
for doctor@nl2k.ab.ca; Mon, 10 Mar 2014 07:40:46 -0600
Received: from [178.78.114.130] (port=2229 helo=bing.com)
by dime167.dizinc.com with esmtpa (Exim 4.80.1)
(envelope-from )
id 1WN0QV-00067D-UC
for doctor@nl2k.ab.ca; Mon, 10 Mar 2014 09:39:32 -0400
From: TD Canada Trust
To: doctor@nl2k.ab.ca
Subject: Account locked for security reason! Please Login
Date: 10 Mar 2014 13:42:27 +0000
Message-ID: <20140310134227.F5FA0D9371222F99@bing.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - dime167.dizinc.com
X-AntiAbuse: Original Domain - nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bing.com
X-Get-Message-Sender-Via: dime167.dizinc.com: authenticated_id: info@multiservicios-kapehclean.com
X-Source:
X-Source-Args:
X-Source-Dir:
=3D2>Dear Client,
=3D2>You have 1 unread Security Message!
=3D2>Click Here to res=
olve the problem.
=3D2>Please do not reply to this email, as your reply will no=
t be received.
This is an automatic notification of new security messages=
=2E
=3D1>Sincerly, TD Canada Trust Company
elvetica, sans-
serif" color=3D#006699 size=3D2>
ce=3D"Verdana, Arial, Helvetica, sans-serif" size=3D2>
size=3D1>(Server ID: SE1A : 4d06a3e1-e8ac-4e19-a944-055ebf585fee)
NT>
From - Mon Mar 10 07:09:02 2014
X-Account-Key: account2
X-UIDL: 00057195501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Mar 2014 07:06:56 -0600
Received: from nexus.websitewelcome.com ([192.185.82.216])
by doctor.nl2k.ab.ca with esmtps (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.82)
(envelope-from )
id 1WMzuX-0001Fi-EA
for aboo@doctor.nl2k.ab.ca; Mon, 10 Mar 2014 07:06:54 -0600
Received: from [178.78.114.130] (port=1951 helo=bing.com)
by nexus.websitewelcome.com with esmtpa (Exim 4.80.1)
(envelope-from )
id 1WMzuS-00006v-Ot
for aboo@doctor.nl2k.ab.ca; Mon, 10 Mar 2014 08:06:24 -0500
From: TD Canada Trust
To: aboo@doctor.nl2k.ab.ca
Subject: Account locked for security reason! Please Login
Date: 10 Mar 2014 13:09:21 +0000
Message-ID: <20140310130921.02976E6308B549EA@bing.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - nexus.websitewelcome.com
X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - bing.com
X-BWhitelist: no
X-Source-IP: 178.78.114.130
X-Source:
X-Source-Args:
X-Source-Dir:
X-Source-Sender: (bing.com) [178.78.114.130]:1951
X-Source-Auth: info@nbjwedding.com
X-Email-Count: 21
X-Source-Cap: YnJhbmRvbjttYnJvd24xMTtuZXh1cy53ZWJzaXRld2VsY29tZS5jb20=
=3D2>Dear Client,
=3D2>You have 1 unread Security Message!
=3D2>Click Here to resolve the p=
roblem.
=3D2>Please do not reply to this email, as your reply will no=
t be received.
This is an automatic notification of new security messages=
=2E
=3D1>Sincerly, TD Canada Trust Company
elvetica, sans-
serif" color=3D#006699 size=3D2>
ce=3D"Verdana, Arial, Helvetica, sans-serif" size=3D2>
size=3D1>(Server ID: SE1A : 4d06a3e1-e8ac-4e19-a944-055ebf585fee)
NT>