NetKnow Internet Knowledge Company blog

NetKnow Internet Knowledge Company Blog






This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368963841"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept

Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.

Rewrote HTML tag: >>span class="yshortcuts" id="lw_1229947415_4"<<
as: >>DEFANGED_span class="yshortcuts" id="lw_1229947415_4"<<
Rewrote HTML tag: >>/span<<
as: >>/DEFANGED_span<<
Total modifications so far: 2



Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $



No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13




No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13



Tuesday, May 21. 2013

More Nigerian Yahoo! Spam

From - Tue May 21 10:16:41 2013
X-Account-Key: account1
X-UIDL: 00001a554f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Sat, 18 May 2013 04:27:36 -0600
From: Zamora Ahmad
To: undisclosed recipients: ;
Subject: [Norton AntiSpam]*SPAM* NEW format for transfer use it
Date: Sat, 18 May 2013 11:27:22 +0100 (BST)
Message-Id: <1368872842.74016.YahooMailClassic@web171405.mail.ir2.yahoo.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **********************************************
X-Spam-Status: Yes, score=46.7 required=5.0 tests=DKIM_SIGNED,DKIM_VERIFIED,
RCVD_IN_BACKSCATTER,SARE_FRAUD_X3,SARE_MONEYTERMS autolearn=unavailable
version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_51975798.253BBE9E"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID276F8133-663CB034
X-Brightmail-Tracker: AAAAChlc1NUdxTXoHcToCh3E6AEdxPtXHcUUth3FMqQdxTRbHcUzXh3FNEM=

This is a multi-part message in MIME format.

------------=_51975798.253BBE9E
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: FROM ZAMORA AHMAD AUDITS & ACCOUNTS DEPT BANQUE INTERNATIONALE
DU BURKINA FASO (BIB) Ouagadougou Burkina Faso Private Phone Number+226 76666100
Attention: Please I am Mr Zamora Ahmad the manager Audit & Accounts dept.
in Banque Internationale Du Burkina Faso (BIB) I am writing to request your
assistance to transferthe sum of $9.500.000.00 (Nine million, five hundred
thousand United States dollars) into your accounts. The above sum belongs
to our deceased customer late YOUNG CAO WEIJIE JIAN from South Korea who
died along with his entire family auto crash. 2003 and since then the fund
has been in a suspenseaccount. After my further investigation, I discovered
that Mr YOUNG CAO WEIJIE JIAN died with his next of kin and according to
the laws and constitution guiding this banking institution stated that after
the expiration of (10) years, if no body or person comes for the claim as
the next of kin, the fund will be channel into national treasury as unclaimed
fund.. Because of the static of this transaction I want you to stand as the
next of kin so that our bank will accord you there cognition and have the
fund transfer to your account. The total sum will be shared as follows: 60%
for me, 40% for you and expenses incidental occur during the transfer will
be incur by both of us. The transfer is risk free on both sides hence you
are going to follow my instruction till the fund transfer to your account.
More details information with the text of application form will be forwarded
to you to breakdown explaining comprehensively what require of you. Your
Full Name Your Sex Your Age Your Country Passport / driving license.......
Marital Status Your Occupation Your Personal Mobile Number Your Personal
Fax Number Thanks Mr Zamora Ahmad. [...]

Content analysis details: (46.7 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[77.238.189.35 listed in ips.backscatterer.org]
-0.0 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
verification
0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
0.7 SARE_MONEYTERMS BODY: Talks about money in some way.
45 SARE_FRAUD_X3 Matches 3+ phrases commonly used in fraud spam

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_51975798.253BBE9E
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from nm9.bullet.mail.ird.yahoo.com (nm9.bullet.mail.ird.yahoo.com [77.238.189.35])
by doctor.nl2k.ab.ca (Postfix) with SMTP id D9A9F12CFA82
for ; Sat, 18 May 2013 04:27:29 -0600 (MDT)
Received: from [77.238.189.234] by nm9.bullet.mail.ird.yahoo.com with NNFMP; 18 May 2013 10:27:22 -0000
Received: from [212.82.98.90] by tm15.bullet.mail.ird.yahoo.com with NNFMP; 18 May 2013 10:27:22 -0000
Received: from [127.0.0.1] by omp1027.mail.ir2.yahoo.com with NNFMP; 18 May 2013 10:27:22 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 782610.83788.bm@omp1027.mail.ir2.yahoo.com
Received: (qmail 74101 invoked by uid 60001); 18 May 2013 10:27:22 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1368872842; bh=CWbnr/w7Ax8MDzkf1nmLXFIhJUGTKJsQ7cyg+EITuo8=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=iwNKk3/pDD6/jS5KaxpunzDHGsJP1IIMTVwo3CVDB4zjIIByGMWHvS2LkdBUaMo3rubuhzvFT+fr5FfYqZk+M3FrzVcC6Z6RTkVJXDG9pcs8bOhyEj2M0cx0jvdB4KBz8vNcrLN6jacF/FYr/lk5dn4X+kQp4kFIk30aYU899ZE=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=Xm2uKEfZjE9TG7NXj2beqtnJRtbi5QWXp/7Exp75gPxi81eKydAc8Avv9OR1/DDfTMq76onbrpyKK2cM7aUYccjyxl3czFZKrbxAfds3kV8alanRvRFcZXnenfrg3zaHxwVomtpAo/Jv0IGdBMJvDkKFDd4A0WHJb3Po6AD6XnU=;
X-YMail-OSG: 11IkS4UVM1lM_o1GAhmrAYmKnv6MWP62HILGI_6hev79RWH
oSHgQMwbJN58Z6JwUme9Z2ywF6lTkpAiYxSYm2mCbu2Bf7cXzSf0o.FmX_xZ
a0KU24SCnHEEswEySOUluoH6Ai3XKxuvs1BBoolc1BTULbRcsd1mk8fCJQQt
brRVKrU5v0rW5PVXUpJjIS._86KyI3mW2UF4DbAkKQ.30.GVKYPFEIcSNmnA
KCiACBjVXm_a6pTkXhxi7I7mSQkcPcZdsAhD1qzQ7HDr7jomaQrjRnizZV_n
Rr9dB9tEEtCYb57jWZEbIA8RFjusrEOeH1AxlgnDy_4up8CqQ4sLOFfqy86N
s3M6txQ6MtpCzZEBSY4h7pr.xLZU8ygt3QhvI0jslGvcVvwvgX3MLNp_srti
U7fZEdqMAUsvuImVqPVniySQjB.x3fOaJS8tCXav5frUzTl5TdqwGokSXBmw
90_Wb41SVSbmfIY5HcGmb0dxem0Tc
Received: from [196.28.249.250] by web171405.mail.ir2.yahoo.com via HTTP; Sat, 18 May 2013 11:27:22 BST
X-Rocket-MIMEInfo: 002.001,DQoNCkZST03CoCBaQU1PUkEgQUhNQUQNCkFVRElUUyAmIEFDQ09VTlRTIERFUFQNCkJBTlFVRSBJTlRFUk5BVElPTkFMRSBEVSBCVVJLSU5BIEZBU0_CoCAoQklCKQ0KT3VhZ2Fkb3Vnb3UgQnVya2luYSBGYXNvDQpQcml2YXRlIFBob25lIE51bWJlcisyMjYgNzY2NjYxMDANCsKgDQrCoMKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoCBBdHRlbnRpb246IFBsZWFzZQ0KwqANCkkgYW0gTXIgWmFtb3JhIEFobWFkIHRoZSBtYW5hZ2VyIEF1ZGl0ICYgQWNjb3VudHMgZGVwdC4gaW4gQmFucXVlDQpJbnRlcm5hdGlvbmEBMAEBAQE-
X-RocketYMMF: mribrahim_mike
X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.141.536
Message-ID: <1368872842.74016.YahooMailClassic@web171405.mail.ir2.yahoo.com>
Date: Sat, 18 May 2013 11:27:22 +0100 (BST)
From: Zamora Ahmad
Reply-To: zamora_ahmad@voila.fr
Subject: NEW format for transfer use it
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1236089829-2146830056-1368872842=:74016"
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean

---1236089829-2146830056-1368872842=:74016
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable



FROM=A0 ZAMORA AHMAD
AUDITS & ACCOUNTS DEPT
BANQUE INTERNATIONALE DU BURKINA FASO=A0 (BIB)
Ouagadougou Burkina Faso
Private Phone Number+226 76666100
=A0
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 Attention: Please
=A0
I am Mr Zamora Ahmad the manager Audit & Accounts dept. in Banque
Internationale Du Burkina Faso (BIB) I am writing to request your
assistance to transferthe sum of $9.500.000.00 (Nine=A0 million, five
hundred thousand United States dollars) into your accounts.
=A0
The above sum belongs to our deceased customer late YOUNG CAO WEIJIE JIAN=
=A0 from South Korea=A0 who died along with his entire family auto crash. 2=
003 and since then the fund has been in a suspenseaccount.
=A0
After my further investigation, I discovered that=A0 Mr=A0 YOUNG CAO WEIJIE=
JIAN died with his next of kin and according to the laws and constitution =
guiding this banking institution stated that after the expiration of (10)=
=A0 years, if no body or person comes for the claim as the next of kin, the=
fund will be channel into national treasury as unclaimed fund.. Because of=
the static of this transaction I want you to stand as the next of kin so t=
hat our bank will accord you there cognition and have the fund transfer to =
your account.
=A0
The total sum will be shared as follows: 60% for me, 40% for you and
expenses incidental occur during the transfer will be incur by both of
us. The transfer is risk free on both sides hence you are going to
follow my instruction till the fund transfer to your account. More
details information with the text of application form will be
forwarded to you to breakdown explaining comprehensively what require
of you.
=A0
Your Full Name............................
Your Sex..................................
Your Age.................................
Your Country..............................
Passport / driving license.......
Marital Status.......................
Your Occupation..........................
Your Personal Mobile Number....................
Your Personal Fax Number.......................
=A0
=A0
Thanks
Mr Zamora Ahmad.
---1236089829-2146830056-1368872842=:74016
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable

top" style=3D"font: inherit;">

FROM  ZAMORA AHMAD
AUDITS =
& ACCOUNTS DEPT
BANQUE INTERNATIONALE DU BURKINA FASO  (BIB) >Ouagadougou Burkina Faso
Private Phone Number+226 76666100
  >            &n=
bsp; Attention: Please
 
I am Mr Zamora Ahmad the manager Audit =
& Accounts dept. in Banque
Internationale Du Burkina Faso (BIB) I am=
writing to request your
assistance to transferthe sum of $9.500.000.00 =
(Nine  million, five
hundred thousand United States dollars) into y=
our accounts.
 
The above sum belongs to our deceased customer l=
ate YOUNG CAO WEIJIE JIAN  from South Korea  who died along with =
his entire family auto crash. 2003 and since then the fund has been in a su=
spenseaccount.
 
After my further investigation, I discovered
that  Mr  YOUNG CAO WEIJIE JIAN died with his next of kin and ac=
cording to the laws and constitution guiding this banking institution state=
d that after the expiration of (10)  years, if no body or person comes=
for the claim as the next of kin, the fund will be channel into national t=
reasury as unclaimed fund.. Because of the static of this transaction I wan=
t you to stand as the next of kin so that our bank will accord you there co=
gnition and have the fund transfer to your account.
 
The total =
sum will be shared as follows: 60% for me, 40% for you and
expenses inci=
dental occur during the transfer will be incur by both of
us. The transf=
er is risk free on both sides hence you are going to
follow my instructi=
on till the fund transfer to your account. More
details information with=
the text of application form will be
forwarded to you to breakdown expl=
aining comprehensively what require
of you.
 
Your
Full Name............................
Your Sex.........................=
.........
Your Age.................................
Your Country.....=
.........................
Passport / driving license.......
Marital S=
tatus.......................
Your Occupation.......................... r>Your Personal Mobile Number....................
Your Personal Fax Numb=
er.......................
 
 
Thanks
Mr Zamora Ahmad.=

---1236089829-2146830056-1368872842=:74016--


------------=_51975798.253BBE9E
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-378D7097======="

--=======AVGMAIL-378D7097=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=

--=======AVGMAIL-378D7097=======--

------------=_51975798.253BBE9E
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-3D1920E7======="

--=======AVGMAIL-3D1920E7=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=

--=======AVGMAIL-3D1920E7=======--

------------=_51975798.253BBE9E--



Monday, May 20. 2013

NetKnow still in Netcraft's Top 6500

All data is from Netcraft Toolbar . Looks as if there are major changes to the Netcraft algorithm!

NetKnow




Netknow now ranks 6465 at Netcraft and in Netcraft's top 200 Canadian sites.


A significant decrease!

Some of our others domains and services ranks as follows:

NetKnow Secure Server
ranks 86405 from 75111 on Netcraft.
NetKnow's secondary server
ranks at 94910 from 39229 last week on Netcraft.
NetKnow's Anonynous FTP server
is at 369097 from 378059 and non-anonymous rank 282542 from 268956.
www.nl2k.ab.ca
ranks 310261 from 313130 on Netcraft.
edmontonab.ca
ranks 389095 from 402628 .
edmontoninternetserviceprovider.ca
is at 368256 from 378222 .
internetedmonton.ca
ranks at 368096 from 378058 .

How do we compare with other providers in
Edmonton
, Alberta, Canada?

Netknow again



We at Netknow are down 187 and down 2061 the end of the year 2013 from 4604 . We aim to be above 4600 by the end of May 2013.

Telus and reviews



Next we have Telus.com
ranked by Netcraft at 52152 from 53321 with Mytelus
ranking 8507 from 8666 .
Sometimes their Web Hosting is done by title="Internet Names for Business">Internet Names for Business
is ranked by Netcraft at 407215 from 424605 .
And Edmonton Chamber of Commerce
is at 319727 from 323674 .

Is Telus's ADSL network suspectible to Code Red Attacks and Attackers?

Reviews of Telus are available :



Juno and NetZero



We have Juno Internet ranked on top
at 17389 from 17449 who are the owners of
US Based Netzero
at Netcraft Rank 44398 from 43828 .

Shaw Cable



Next, members.shaw.ca
ranks 54127 from 53568 and
Shaw Cable
is next at Netcraft rank 33208 from 33900. Briefly unavailable during high peak demand.
Their Network Hosting Arm,
Big Pipe is at
Netcraft rank 337555 from 315306 .
One of customer of Shaw Avalon Global
rank 388353 from 401869 . Another of their customers The Alberta Liberals
at 347383 from 355103.

Reviews of Shaw are available :


University of Alberta




The University of Alberta
ranks 99457 from 99206 .

City of Edmonton




The City of Edmonton
ranks 109977 from 108896 by Netcraft and are now with Alentus of Edmonton.


Primus



Primus
ranks 183056 from 115985 and now points to BLACKIRON_DataCentres
ranked 262636 from 263774 . Or
Colo Is here
ranks 183056 from 115985 .
A customer the Progressive Conservative Party of Alberta
ranks 408422 from 425846 .

NAIT / Northern Alberta Institute of Technology



The Northern Alberta Institute of Technology
ranks 120912 from 122570.

Distributel / 3Web / CIA



Next is 3 Web
which ranks 389181 from 402709 And a questionable secure certificate. Their parent company
Cybersurf
is ranked 139001 from 138238.

Xplornet



xplornet
ranks 145812 from 146578 and are listed with
Stentor and are joining up with Shaw.
Acoording to an article in the Sherwood Park Independent they are also getting an Alberta Government subsidy.

Government of Alberta



The Government of Alberta Website
ranks 163624 from 166580 by Netcraft

Alentus



Alentus
rank by Netcraft 185589 from 189267 and I note they are hosted in the USA .
One of their customers The Alberta New Democrat Party
ranks 664760 from 756035 .

Uniserve / Interbaun



Next, Uniserve
ranks on Netcraft 188841 from 192585.
One of their acquisitions
interbaun
ranks with Netcraft 188841 from 192585 due to merging of sites.
One customer just came over from this organization in Nov 2006.

Tera Byte Edmonton and reviews



Next is Tera-Byte
at Netcraft Rank 201277 from 213008 with
Tera-Byte.ca
ranking 412133 from 429597 and their wireless arm Tera-Byte Wireless
ranks 368303 from 378273 and
airsurfer.ca is now part of Tera-Byte Wireless. One of their clients nexopia
local Edmonton Social MEdia Site is ranked 119624 from 120180. Very Interesting!
One of Tera-Byte's acquisitions
Edmonton Community Networks
ranks at 366539 from 376491 and
Go Edmonton ranks 406590 from 423911 .
Reviews of Tera-byte is available at
here
and another here

Wolfpaw



Computer Engineering
ranks 389088 from 402624. Thank you Scott.
And they seem to be hosted by wolfpaw.net
which ranks at 204349 from 205360.

Internet Centre / CCINet



Internet Centre
rank 217422 from 221432 and using Worldgate IPs

Platinum Communications



Platinum Communications Corp.
ranks 274604 from 283539

Grant MacEwen University



MacEwan
ranks 290023 from 291753.

Radiant Communications



Radiant Communications
are ranked by Netcraft 298395 from 291002.

WSI Corporation



Next is WSI - We Simply The Internet of Toronto
at Netcraft Position 308004 from 310838

Nucleus Internet Services



After that we have

Nucleus Information Services
which can be found at
Netcraft Rank 348924 from 377025

MediaShaker



Media Shakers of Edmonton
ranks 365392 from 375358 .

Wiband Wireless



Wiband Wireless
rank on Netcraft at 367500 from 377475 and
their customer Found Locally
ranks at 383366 from 396620
and Memory Express
ranks 17013 from 17150 Interesting!

Pivot Data Centres



Care Factor ranks 373146 from 360820
and is redirected to Pivot Data Centres .

Nisa Custom Internet Solutions



Nisa Custom Internet Solutions
ranks 382879 from 396101 by Netcraft

Carbon 14



Carbon 14 Graphic Art and Web Design
ranks 383532 from 396793 on Netcraft .
BTW Illusions Photographics wants a word with you!

Open Concept Internet, Inc.



Open Concept Internet, Inc.
rank 388081 from 401563 .

MDCi



MDCi, the company that bought out OANet.com
ranks 410981 from 428409.

Emergence by Design



Emergence by Design
now ranks 411902 from 429369 .

Wild Rose Internet



Wild Rose Internet
ranks 412055 from 429530 and I wonder if this is another wireless branch of Tera-Byte

Koi Media



Koi Media
rank 412937 from 430338


WebFire



Webfire.ca
ranks 413694 from 431113 and seems to be connected with Shaw.

Core Network Solutions Inc.



Core Network Solutions Inc.
ranks at 413929 from 431371 .

The Network Centre



The Network Centre
ranks 413973 from 431422 .


TIC Internet



TIC Internet
ranks 443384 from 464465 ( I do remember you).

InterSpots



Interspots of Edmonton
rank 443630 from 464719 ;

Clearwave Broadband



Clearwave Broadband ranks at 1528300 from 1716394.

Internet Crossroads



Internet Crossroads Ltd of North Edmonton
rank nothing from nothing by Netcraft and seems to merged with Tera-Byte/ecn.ab.ca .

If I remember anymore, I will add to this entry, before Netcraft changes
our ranking. Please watch this space and please feel free to peruse
our services.

Friday, May 17. 2013

More Royal Bank of Canada Phish

From - Fri May 17 16:20:41 2013
X-Account-Key: account1
X-UIDL: 00001a064f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_UCE_PFSM_1 autolearn=no version=3.3.2
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from gallifrey.nk.ca (gallifrey.nk.ca [204.209.81.3])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id B489512CFA82
for ; Thu, 16 May 2013 05:41:16 -0600 (MDT)
Received: from root by gallifrey.nk.ca with local (Exim 4.80.1)
(envelope-from )
id 1UcwY5-0006cB-Rp
for dave@nk.ca; Thu, 16 May 2013 05:40:41 -0600
Resent-From: "Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem"
Resent-Date: Thu, 16 May 2013 05:40:41 -0600
Resent-Message-ID: <20130516114041.GA24028@gallifrey.nk.ca>
Resent-To: dave@nk.ca
Received: from toroondcbmts08.bellnexxia.net ([207.236.237.42] helo=toroondcbmts08-srv.bellnexxia.net)
by gallifrey.nk.ca with esmtp (Exim 4.80.1)
(envelope-from )
id 1Ucv3E-00056j-G8
for doctor@gallifrey.nk.ca; Thu, 16 May 2013 04:04:52 -0600
Received: from toip54-bus.srvr.bell.ca ([67.69.240.140])
by toroondcbmts08-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20130516100443.RPOJ23610.toroondcbmts08-srv.bellnexxia.net@toip54-bus.srvr.bell.ca>
for ; Thu, 16 May 2013 06:04:43 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av9/ADajlFFMRh8H/2dsb2JhbAA+BwYBDwEWgi4DPzcSIoppeZ9ggz12A4oNhm0EARRpFnSCBQEBAS83EwsvAQEBCRQKAgchQ4ZFFgWBSgQImTABQgKCWjxPAoh5hQsFg3YQhHsCAUQNh1uNVBIdCWMcJAyCXmEDgSWHQjKOGoZBin6DE4FlAgcXSCcs
X-IronPort-AV: E=Sophos;i="4.87,683,1363147200";
d="scan'208,217";a="329842712"
Received: from unknown (HELO thatcherandwands.com) ([76.70.31.7])
by toip54-bus.srvr.bell.ca with ESMTP; 16 May 2013 06:04:42 -0400
Received: from advisor.webssl.com ([78.100.135.194]) by thatcherandwands.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 16 May 2013 06:04:41 -0400
From: RBC Royal Bank
To: doctor@gallifrey.nk.ca
Subject: {Spam?} Message Center: 1 New Alert Message!
Date: 16 May 2013 13:04:36 +0300
Message-ID: <20130516130436.E5394176518131A7@advisor.webssl.com>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-OriginalArrivalTime: 16 May 2013 10:04:42.0468 (UTC) FILETIME=[C8F98240:01CE521C]
X-NetKnow-OutGoing-4-84-5-3-MailScanner: Found to be clean, Found to be clean
X-NetKnow-OutGoing-4-84-5-3-MailScanner-SpamCheck: spam, SORBS-SPAM,
SpamAssassin (not cached, score=6.293, required 1, BAYES_99 3.50,
HTML_IMAGE_ONLY_12 2.06, HTML_MESSAGE 0.00, MIME_HTML_ONLY 0.72,
T_REMOTE_IMAGE 0.01)
X-NetKnow-OutGoing-4-84-5-3-MailScanner-SpamScore: ssssss
X-NetKnow-OutGoing-4-84-5-3-MailScanner-Information: Please contact the ISP for more information
X-NetKnow-OutGoing-4-84-5-3-MailScanner-ID: 1UcwY5-0006cB-Rp
X-NetKnow-OutGoing-4-84-5-3-MailScanner-IP-Protocol: IPv4
X-NetKnow-OutGoing-4-84-5-3-MailScanner-From: root@gallifrey.nk.ca
X-NetKnow-OutGoing-4-84-5-3-MailScanner-Watermark: 1369136443.42603@XEozBveYEQaU/UkhItE2fQ
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID4DB3604-3B044A68
X-Brightmail-Tracker: AAAAAh3FBaodxQZB
X-Brightmail-Tracker: AAAAAA==



RBC Royal Bank / Message Center: 1 New Alert Message!
yalbank_en.gif">



old.gif"> 1 New Alert Message!




ng=3D"0" width=3D"100%">
cellpadding=3D"3" cellspacing=3D"0" width=3D"100%">


Customer Service: Your account has b=
een limited!
u044-011.ym.edu.tw/icons/ssl/rbaccess/encrypted-session/F6=3D1&F7=3DIB&F21=
=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH">Click to Resol=
ve





Thank you for using Royal Bank of Canada.


--

This message has been scanned for viruses and

dangerous content by
MailScanner, and is

believed to be clean.


--

This message has been scanned for viruses and

dangerous content by
MailScanner, and is

believed to be clean.

=3D"left" color=3D"#000000">No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

=

t" color=3D"#000000">No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13

=






Friday, May 17. 2013

More Paypal Phish

From - Fri May 17 16:20:26 2013
X-Account-Key: account1
X-UIDL: 000019ff4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
X-AVG: Scanning
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable
version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from mailer.inditex.com (mailer.inditex.com [194.224.179.117])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 68F5B12CFA87
for ; Thu, 16 May 2013 00:21:19 -0600 (MDT)
Received: from zainetweb2.central.inditex.grp (unknown [10.71.0.8])
by mailer.inditex.com (Postfix) with ESMTP id 7774A13BEE
for ; Thu, 16 May 2013 08:21:18 +0200 (CEST)
Received: by zainetweb2.central.inditex.grp (Postfix, from userid 99)
id 6DABCB0656; Thu, 16 May 2013 08:20:58 +0200 (CEST)
To: dave@doctor.nl2k.ab.ca
Subject: Paypal.com
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
X-Mailer: Microsoft Office Outlook, Build 17.551210
From: dave@doctor.nl2k.ab.ca
Message-Id: <20130516062118.6DABCB0656@zainetweb2.central.inditex.grp>
Date: Thu, 16 May 2013 08:20:58 +0200 (CEST)
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID6EAC9341-5F432CF4
X-Brightmail-Tracker: AAAAAR3FB20=
X-Brightmail-Tracker: AAAAAA==





http-equiv="content-type">
paypal


src="http://i.imgur.com/PpFLu.png">



Your paypal
account is blocked !



You are not logged in updating our system.



Perform your upgrade now and continue using our online services.



Make
your update.




Access
your email
through internet explorer 7, 8
style="font-family: Arial; font-weight: bold;"> or 9 style="font-family: Arial; font-weight: bold;"> and update your paypal
account.

Other browsers are not compatible to upgrade.



style="font-family: Arial; font-weight: bold;">Paypal Update 2013





No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13


No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13





Friday, May 17. 2013

More Toronto Dominion Phish

From - Fri May 17 16:20:12 2013
X-Account-Key: account1
X-UIDL: 000019f74f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=5.0 tests=none autolearn=unavailable
version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 3671312CFA8F; Wed, 15 May 2013 13:54:05 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 15 May 2013 13:54:04 -0600
Resent-Message-ID: <20130515195404.GA19435@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: games@nl2k.ab.ca
Delivered-To: games@nl2k.ab.ca
Received: from upiexc.upi.local (mail.upitrans.com.tr [83.66.108.37])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 49E7612CFA82
for ; Wed, 15 May 2013 12:13:09 -0600 (MDT)
Received: from USER ([192.168.1.7]) by upiexc.upi.local with Microsoft SMTPSVC(6.0.3790.4675);
Wed, 15 May 2013 21:09:44 +0300
Content-Type: text/html
Subject: [Norton AntiSpam]Online Security Alert
FROM: TD@doctor.nl2k.ab.ca, Canada@doctor.nl2k.ab.ca,
Trust@doctor.nl2k.ab.ca
Message-ID:
X-OriginalArrivalTime: 15 May 2013 18:09:45.0000 (UTC) FILETIME=[6105BA80:01CE5197]
Date: 15 May 2013 21:09:45 +0300
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5830]
X-AVG-ID: ID46BA558D-2B78B7B
X-Brightmail-Tracker: AAAABR3FA0AdxQdEHcUCoh3FBzMdxQcv





Untitled Document










You are seeing this message because TD Security has detected suspicious activity on your account and has temporarily suspended it as a security precaution.

This may be because your TD Canada Trust account was accessed from an unfamiliar computer or you have made changes in your account information.


You will be able to regain access to your account once you complete the automated security verification process.


How can i regain access to my account ?


To regain access to your account, you must confirm your identity by completing our automated security verification process.

You can do that by simply clicking here.


You will then be taken through a series of steps to help verify your identity and, if necessary, scan your computer for viruses.


 


The security verification process is automated and is not designed to be time-intensive.

In most situations, you should be able to confirm your identity and restore your account in a few minutes.


------------------------------------------------------------------------------------------------------------------------------------


Recipient: %recipient_email%


Sender: TD Canada Trust Account Security Department.




This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368641608"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept

Rewrote HTML tag: >>html xmlns="http://www.w3.org/1999/xhtml"<<
as: >>html DEFANGED_xmlns="http://www.w3.org/1999/xhtml"<<
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.

Rewrote HTML tag: >>style type="text/css"<<
as: >>DEFANGED_style type="text/css"<<
Rewrote HTML tag: >>/style<<
as: >>/DEFANGED_style<<
Total modifications so far: 3



Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $





This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368641608"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept

Rewrote HTML tag: >>html xmlns="http://www.w3.org/1999/xhtml"<<
as: >>html DEFANGED_xmlns="http://www.w3.org/1999/xhtml"<<
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.

Rewrote HTML tag: >>style type="text/css"<<
as: >>DEFANGED_style type="text/css"<<
Rewrote HTML tag: >>/style<<
as: >>/DEFANGED_style<<
Total modifications so far: 3



Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $



No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13


No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5830 - Release Date: 05/16/13






This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.



Sanitizer (start="1368641608"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept

Rewrote HTML tag: >>html xmlns="http://www.w3.org/1999/xhtml"<<
as: >>html DEFANGED_xmlns="http://www.w3.org/1999/xhtml"<<
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.

Rewrote HTML tag: >>style type="text/css"<<
as: >>DEFANGED_style type="text/css"<<
Rewrote HTML tag: >>/style<<
as: >>/DEFANGED_style<<
Total modifications so far: 3



Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $





Friday, May 17. 2013

More Royal Bank of Canada Phish

From - Wed May 15 05:57:35 2013
X-Account-Key: account1
X-UIDL: 000019dd4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 14 May 2013 13:37:23 -0600
From: RBC Royal Bank
To: dave@nk.ca
Subject: [Norton AntiSpam]*SPAM* =?utf-8?Q?Spam?=
1 New Alert Message!
Date: 14 May 2013 21:33:20 +0200
Message-Id: <20130514213320.174FD9982150A321@advisor.webssl.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *****************
X-Spam-Status: Yes, score=17.0 required=5.0 tests=RCVD_IN_JMF_BR,RCVD_IN_PSBL,
RCVD_IN_UCE_PFSM_1,URIBL_PH_SURBL autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_51929273.25FD4672"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5825]
X-AVG-ID: ID1265A289-7CB86490
X-Brightmail-Tracker: AAAAAx15GvIdeRrpHXkz6A==

This is a multi-part message in MIME format.

------------=_51929273.25FD4672
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: RBC Royal Bank / Message Center: 1 New Alert Message! 1 New
Alert Message! Customer Service: Your account has been limited! Click to
Resolve Thank you for using Royal Bank of Canada. [...]

Content analysis details: (17.0 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_UCE_PFSM_1 RBL: Received via a relay in UCE_PFSM_1
[82.177.154.4 listed in dnsbl-1.uceprotect.net]
11 RCVD_IN_JMF_BR RBL: Sender listed in JMF-BROWN
[212.35.71.73 listed in dnsbl-1.uceprotect.net]
[212.35.71.73 listed in hostkarma.junkemailfilter.com]
2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: 81.15.144.2]
2.0 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[82.177.154.4 listed in psbl.surriel.com]

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_51929273.25FD4672
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Return-Path:
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from smtp2.batelco.jo (smtp2.batelco.jo [212.35.71.73])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id A382A12CFA84
for ; Tue, 14 May 2013 13:37:08 -0600 (MDT)
Received: from prime-jau.Jau.com (mail.jau.edu.jo [212.118.19.52])
by smtp2.batelco.jo (Postfix) with ESMTP id 3F2E510A72E
for ; Tue, 14 May 2013 21:34:56 +0300 (EEST)
Received: from advisor.webssl.com ([82.177.154.4]) by prime-jau.Jau.com with Microsoft SMTPSVC(6.0.3790.4675);
Tue, 14 May 2013 22:31:36 +0300
From: RBC Royal Bank
To: dave@nk.ca
Subject: =?utf-8?Q?Spam?=
1 New Alert Message!
Date: 14 May 2013 21:33:20 +0200
Message-ID: <20130514213320.174FD9982150A321@advisor.webssl.com>
MIME-Version: 1.0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-SpamInfo: FortiGuard - AntiSpam ip, connection black ip 82.177.154.4
X-OriginalArrivalTime: 14 May 2013 19:31:36.0671 (UTC) FILETIME=[A6317EF0:01CE50D9]
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean



RBC Royal Bank / Message Center: 1 New Alert Message!
albank_en.gif">



ld.gif"> 1 New Alert Message!


=20

g=3D"0" width=3D"100%">
ellpadding=3D"3" cellspacing=3D"0" width=3D"100%">


Customer Service: Your account has be=
en limited!
5.144.2/icons/ssl/encrypted-session/F6=3D1&F7=3DIB&F21=3DIB&F22=3DIB&REQUEST=
=3DClientSignin&LANGUAGE=3DENGLISH/index.html">Click to Resolve




=20
Thank you for using Royal Bank of Canada.





------------=_51929273.25FD4672
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-2450F706======="

--=======AVGMAIL-2450F706=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5825 - Release Date: 05/15/13=

--=======AVGMAIL-2450F706=======--

------------=_51929273.25FD4672
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-5AB4F267======="

--=======AVGMAIL-5AB4F267=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"

-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5825 - Release Date: 05/15/13=

--=======AVGMAIL-5AB4F267=======--

------------=_51929273.25FD4672--


(Page 1 of 96, totaling 1440 entries) » next page

Calendar

Back May '13 Forward
Mon Tue Wed Thu Fri Sat Sun
    1 2 3 4 5
7 8 9 11 12
14 15 16 18 19
22 23 24 25 26
27 28 29 30 31    

Quicksearch

Top Referrers

Archives

Categories

Syndicate This Blog

Blog Administration

Powered by

Serendipity PHP Weblog

NetKnow Navigation

Remote RSS/OPML-Blogroll Feed

No RSS/OPML feed selected

Statistics

Last entry: 2013-05-21 15:38
1440 entries written
11 comments have been made

addthis



AddThis Social Bookmark Button





Blog Grade for www.nk.ca/blog

Empire Avenue



Google PageRank

  • This page:
  • Page d'accueil:

IPv6 Check

You have accessed this website using IPv4!

del.icio.us

A del.icio.us error occured!
Error Message: rss failed(More)

User Self-Registration

Here you can register yourself as an author for this blog. Just enter your data, submit the form and receive further instructions via mail.




Show tagged entries

Hitmaps

Last Search (Google, Yahoo, Bing, Scroogle)

Bing info ltivs.ilc.edu.tw loc:CA
Bing info ltivs.ilc.edu.tw loc:CA
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Bing info taruma.sp.gov.br loc:CA
Bing info taruma.sp.gov.br loc:CA
Bing info neu.edu.vn loc:CA
Bing info krd.ru loc:CA
Bing info mail.zhao-ding.com.tw loc:CA
Bing info guabiruba.sc.gov.br loc:CA
Google @aol @comcast @hotmail @gmail @yahoo
Google @aol @comcast @hotmail @gmail @yahoo
Google @aol @comcast @hotmail @gmail @yahoo
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing info ituverava.sp.gov.br loc:CA
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Google info re2k.com
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Bing @aol @comcast @hotmail @gmail @yahoo @netzero.net loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing info novatrento.sc.gov.br loc:CA
Bing info rt-mart.com.tw loc:CA
Google info rt-mart.com.tw
Google info rt-mart.com.tw
Google info rt-mart.com.tw
Bing info emw.co.kr loc:CA
Bing info mail.wzu.edu.cn loc:CA
Bing info rt-mart.com.tw loc:CA
Bing info proevents.cz loc:CA
Bing info mahalo-s.com loc:CA
Bing info santacruzdoriopardo.sp.gov.br loc:CA
Bing info santacruzdoriopardo.sp.gov.br loc:CA
Bing info tax-edu.net loc:CA
Bing info mail.wzu.edu.cn loc:CA
Bing info mail.wzu.edu.cn loc:CA
Google info novatrento.sc.gov.br
Google info alcon.telecom.nov.ru
Google info lmkj.cn
Bing info mail.isha.org.tw loc:CA
Bing info hrb.com.cn loc:CA
Google Yorkshire Banks FSC Birmingham B2 5YB Xavier Dolan from Harlesden
Bing info cm2.tinp.net.tw loc:CA
Bing info cm2.tinp.net.tw loc:CA
Bing info mail.urumqi.gov.cn loc:CA
Bing info just.edu.tw loc:CA
Bing info just.edu.tw loc:CA
Bing info cm2.tinp.net.tw loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing @aol @comcast @hotmail @gmail @yahoo loc:CA
Bing @aol @comcast @hotmail @gmail @yahoo loc:CA
Bing info eparaguacu.sp.gov.br loc:CA
Bing info mp.sp.gov.br loc:CA
Bing info mail.acrotech.com.tw loc:CA
Bing info mail.fhsh.tp.edu.tw loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo
Bing info eparaguacu.sp.gov.br loc:CA
Bing info eparaguacu.sp.gov.br loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing info eparaguacu.sp.gov.br loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing info eparaguacu.sp.gov.br loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing info cambc.sc.gov.br loc:CA
Bing info eparaguacu.sp.gov.br loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Bing info mail.fhsh.tp.edu.tw loc:CA
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google @aol @comcast @hotmail @gmail @yahoo @netzero.net
Google 475
Bing 193

Statistics

Last entry: 2013-05-21 15:38
1440 entries written
11 comments have been made

Twitter Timeline

Syndicate This Blog

Timezones

  • London:%MDT
  • Edmonton:%MDT