More TD Phish
Posted by Dave Yadallee on
From - Mon May 05 07:55:52 2014
X-Account-Key: account2
X-UIDL: 00057a4a501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 May 2014 07:55:05 -0600
Received: from suraku.com ([202.212.211.68])
by doctor.nl2k.ab.ca with smtp (Exim 4.82)
(envelope-from)
id 1WhJM5-0000W7-3z
for aboo@doctor.nl2k.ab.ca; Mon, 05 May 2014 07:55:04 -0600
Received: (qmail 1763 invoked by SAV 20140505.004 by uid 0); 5 May 2014 20:08:06 +0900
X-Authentication: sales was authenticated by 202.212.211.68
at 5 May 2014 20:08:06 +0900
Received: from unknown (HELO User) (98.173.59.168)
by ps3.suite2.arena.ne.jp (202.212.211.68) with SMTP; 5 May 2014 20:08:06 +0900
Reply-To:
From: "TD Canada Trust"
Subject: New Alert from EasyWeb TD Canada Trust
Date: Mon, 5 May 2014 04:07:54 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: TD Canada Trust Your entry to the TD Email Address Contest
has been received. View the online version Hello, You are receiving this
email because we have updated our online banking system. This email also confirms
your entry for the TD new system update, where you need to confirm and update
your account to our new system database. By entering the link below, you
are going to login into your account then you will be asked to update your
account informations. please click on this link to update your account. Note
You need to update your account before the link expires, after 24 hours.
Otherwise the new system may suspend your account and you wont be able to
access your account.. Unsubscribe | Contact Us | Privacy | Security | Legal
You have received this email at oliverwchan@shaw.ca because you are a customer
of TD Canada Trust. To ensure delivery to your inbox (and not to your junk
or bulk mail folders), add email@e.email-td.com to your address book. [...]
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.212.211.68 listed in bb.barracudacentral.org]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=email%40e.email-td.com;ip=202.212.211.68;r=gallifrey.nk.ca]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 MISSING_MID Missing Message-Id: header
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} New Alert from EasyWeb TD Canada Trust
TD Canada Trust
X-Account-Key: account2
X-UIDL: 00057a4a501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: aboo@doctor.nl2k.ab.ca
Delivery-date: Mon, 05 May 2014 07:55:05 -0600
Received: from suraku.com ([202.212.211.68])
by doctor.nl2k.ab.ca with smtp (Exim 4.82)
(envelope-from
id 1WhJM5-0000W7-3z
for aboo@doctor.nl2k.ab.ca; Mon, 05 May 2014 07:55:04 -0600
Received: (qmail 1763 invoked by SAV 20140505.004 by uid 0); 5 May 2014 20:08:06 +0900
X-Authentication: sales was authenticated by 202.212.211.68
at 5 May 2014 20:08:06 +0900
Received: from unknown (HELO User) (98.173.59.168)
by ps3.suite2.arena.ne.jp (202.212.211.68) with SMTP; 5 May 2014 20:08:06 +0900
Reply-To:
From: "TD Canada Trust"
Subject: New Alert from EasyWeb TD Canada Trust
Date: Mon, 5 May 2014 04:07:54 -0700
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 15.5
X-Spam_score_int: 155
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "gallifrey.nk.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: TD Canada Trust Your entry to the TD Email Address Contest
has been received. View the online version Hello, You are receiving this
email because we have updated our online banking system. This email also confirms
your entry for the TD new system update, where you need to confirm and update
your account to our new system database. By entering the link below, you
are going to login into your account then you will be asked to update your
account informations. please click on this link to update your account. Note
You need to update your account before the link expires, after 24 hours.
Otherwise the new system may suspend your account and you wont be able to
access your account.. Unsubscribe | Contact Us | Privacy | Security | Legal
You have received this email at oliverwchan@shaw.ca because you are a customer
of TD Canada Trust. To ensure delivery to your inbox (and not to your junk
or bulk mail folders), add email@e.email-td.com to your address book. [...]
Content analysis details: (15.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
3.4 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[202.212.211.68 listed in bb.barracudacentral.org]
0.9 SPF_FAIL SPF: sender does not match SPF record (fail)
[SPF failed: Please see http://www.openspf.net/Why?s=mfrom;id=email%40e.email-td.com;ip=202.212.211.68;r=gallifrey.nk.ca]
1.2 MISSING_HEADERS Missing To: header
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 MISSING_MID Missing Message-Id: header
1.9 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
0.5 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
1.9 FROM_MISSP_NO_TO From misspaced, To missing
0.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope
0.0 FROM_MISSP_SPF_FAIL FROM_MISSP_SPF_FAIL
0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} New Alert from EasyWeb TD Canada Trust
| ||||||||||||||||||||||||||||||||||
View the online version | ||||||||||||||||||||||||||||||||||
| ||||||||||||||||||||||||||||||||||
You have received this email at oliverwchan@shaw.ca because you are a customer of TD Canada Trust. | ||||||||||||||||||||||||||||||||||
To ensure delivery to your inbox (and not to your junk or bulk mail folders), add email@e.email-td.com to your address book. | ||||||||||||||||||||||||||||||||||
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments