Письма счастья от RBC
Добавлено: 24 мар 2015, 18:48
Есть почтовый адрес, не гугл, даденный RBC при открытии аккаунта. Есть другой почтовый адрес, на гугле. Начал получать вот такие письма на гугловский ящик. Меня интересует как они связали второй емэйл c названием банка который никогда не упоминался в переписке идущей через гугл? Отфорвордил письмена на phishing@rbc.com пусть разбираются если хотят.
-------------------------------------
-------------------------------------
-------------------------------------
Код: Выделить всё
-------- Original Message --------
Delivered-To: XXXXXX@gmail.com
Received: by 10.76.95.197 with SMTP id dm5csp238598oab; Fri, 20 Mar
2015 14:23:48 -0700 (PDT)
X-Received: by 10.70.125.162 with SMTP id
mr2mr180091269pdb.21.1426886627838; Fri, 20 Mar 2015 14:23:47 -0700 (PDT)
Return-Path: <technosweat@technosweat.com>
Received: from technosweat.com (technosweat.com. [206.130.109.241]) by
mx.google.com with ESMTPS id pf2si11680121pdb.27.2015.03.20.14.23.47 for
<XXXXXX@gmail.com> (version=TLSv1 cipher=RC4-SHA bits=128/128); Fri, 20
Mar 2015 14:23:47 -0700 (PDT)
Received-SPF: none (google.com: technosweat@technosweat.com does not
designate permitted sender hosts) client-ip=206.130.109.241;
Authentication-Results: mx.google.com; spf=none (google.com:
technosweat@technosweat.com does not designate permitted sender hosts)
smtp.mail=technosweat@technosweat.com; dmarc=fail (p=NONE dis=NONE)
header.from=gmail.com
Received: (from technosweat@localhost) by technosweat.com
(8.13.1/8.13.1) id t2KLNlZT027433; Fri, 20 Mar 2015 15:23:47 -0600
Date: Fri, 20 Mar 2015 15:23:47 -0600
Message-Id: <201503202123.t2KLNlZT027433@technosweat.com>
To: XXXXXX@gmail.com
Subject: Please Update Your Rbc Bank Info !
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
From: XXXXXX@gmail.com
Recently, we noticed some strange moves in bank account,
Please enter via the following link and make sure these moves as quickly
as possible,
www.rbcroyalbank.com
<http://internetmarketingvideosdotcom.com/rbc/home/?/Rbc./Update./FS84sd89f489F894DS89F4S89D4FS89D489G4S8D4G89SDG498SD4G984SD8G4SD89G4S984DG89SD4G8S4DG984SD8G4S894DG8S4DG8489SD4G8>
If this is not completed before march 30, 2015, we will be forced to
suspend your account indefinitely
Код: Выделить всё
-------- Original Message --------
Delivered-To: XXXXXX@gmail.com
Received: by 10.76.95.197 with SMTP id dm5csp1715981oab; Mon, 9 Mar
2015 15:10:34 -0700 (PDT)
X-Received: by 10.55.23.26 with SMTP id
i26mr19080366qkh.16.1425939034220; Mon, 09 Mar 2015 15:10:34 -0700 (PDT)
Return-Path: <webmaster@orquestraxeqmat.com.br>
Received: from jubileu.cinte.com.br (jubileu.cinte.com.br.
[186.209.96.16]) by mx.google.com with ESMTP id
e69si19650501qhc.18.2015.03.09.15.10.33 for <XXXXXX@gmail.com>; Mon, 09
Mar 2015 15:10:34 -0700 (PDT)
Received-SPF: pass (google.com: domain of
webmaster@orquestraxeqmat.com.br designates 186.209.96.16 as permitted
sender) client-ip=186.209.96.16;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
webmaster@orquestraxeqmat.com.br designates 186.209.96.16 as permitted
sender) smtp.mail=webmaster@orquestraxeqmat.com.br; dmarc=fail (p=NONE
dis=NONE) header.from=gmail.com
Received: from localhost (localhost [127.0.0.1]) by
jubileu.cinte.com.br (Postfix) with ESMTP id 1501FABFE2 for
<XXXXXX@gmail.com>; Mon, 9 Mar 2015 19:10:33 -0300 (BRT)
X-Virus-Scanned: Debian amavisd-new at webhost.cinte.com.br
X-Amavis-Alert: BAD HEADER SECTION, Improper use of control character
(char 0D hex): From: XXXXXX@gmail.com\r\r
Received: from jubileu.cinte.com.br ([127.0.0.1]) by localhost
(jubileu.cinte.com.br [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id OUOz9oqZcN0V for <XXXXXX@gmail.com>; Mon, 9 Mar 2015 19:10:32 -0300
(BRT)
Received: by jubileu.cinte.com.br (Postfix, from userid 33) id
C57F1ABD2C; Mon, 9 Mar 2015 19:10:26 -0300 (BRT)
To: XXXXXX@gmail.com
Subject: Please Update Your Rbc Bank Info !
X-PHP-Originating-Script: 5100:djo.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
From: XXXXXX@gmail.com
Message-Id: <20150309221026.C57F1ABD2C@jubileu.cinte.com.br>
Date: Mon, 9 Mar 2015 19:10:26 -0300 (BRT)
Dear Client
Recently, we noticed some strange moves in bank account,
Please enter via the following link and make sure these moves as quickly
as possible,
<http://goo.gl/IFb1yx>
www.rbcroyalbank.com <http://goo.gl/IFb1yx>
If this is not completed before march 15, 2015, we will be forced to
suspend your account indefinitely
* Confirm My Account <http://goo.gl/IFb1yx>
*
Royal Bank of Canada Website, © 1995-2015
<http://www.diremaco.com/data/producto/updatsh/upda-t-i-n-g/informalton/>
Широко стреляют.