Received: from mx3.mail-relay.ubc.ca (mx3.mail-relay.ubc.ca [142.103.117.137]) by viol.math.ubc.ca (8.14.5/8.14.5) with ESMTP id t7KH0drG010067 for <{redacted}@math.ubc.ca>; Thu, 20 Aug 2015 10:00:39 -0700 (PDT)
Received: from vmaprod3.mail-relay.ubc.ca (lb_mx-out.mail-relay.ubc.ca [10.92.8.24]) by mx3.mail-relay.ubc.ca (Postfix) with ESMTP id 323C4160274 for <dale.rolfsen@ubc.ca>; Thu, 20 Aug 2015 10:00:34 -0700 (PDT)
Received: from vmaprod3.mail-relay.ubc.ca (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id 1845D1CA884_5D607B2B for <dale.rolfsen@ubc.ca>; Thu, 20 Aug 2015 17:00:34 +0000 (GMT)
Received: from gate5.dnshostmaster.net (gate5.dnshostmaster.net [124.150.140.15]) by vmaprod3.mail-relay.ubc.ca (Sophos Email Appliance) with ESMTP id 3E8581CA89C_5D607B1F for <dale.rolfsen@ubc.ca>; Thu, 20 Aug 2015 17:00:30 +0000 (GMT)
Received: from vvps-063210.dailyvps.co.uk [195.234.11.109] by gate5.dnshostmaster.net with SMTP; Fri, 21 Aug 2015 01:02:16 +0800
From: Apple <appleid@id.apple.com>
Subject: Unauthorized AppStore Purchase !
Date: August 20, 2015 at 10:00:13 AM PDT
To: dale.rolfsen@ubc.ca
Message-Id: <20150820180013.0933C11EC13D1E96@id.apple.com>
Mime-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Sophos-Senderhistory: ip=124.150.140.15,fs=3032907,da=9712220,mc=6
X-Sophos-Esa: [vmaprod3.mail-relay.ubc.ca] 3.9.0.0, Antispam-Engine: 2.7.2.1390750, Antispam-Data: 2015.8.20.164216
X-Sea-Spam: Gauge=XXXXIIIII, Probability=45%, Report=' APPLE_FORGED_NORDNS 3.5, CTYPE_JUST_HTML 0.848, APPLE_FORGED 0.1, HTML_50_70 0.1, FROM_NAME_ONE_WORD 0.05, BODYTEXTH_SIZE_10000_LESS 0, BODY_SIZE_2000_2999 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, NO_URI_HTTPS 0, SINGLE_URI_IN_BODY 0, SPF_SOFTFAIL 0, __ANY_URI 0, __APPLE_FROM_DOMAIN 0, __APPLE_FROM_NAME 0, __APPLE_FROM_ONLY_APPLE 0, __CANPHARM_COPYRIGHT 0, __CT 0, __CTE 0, __CTYPE_HTML 0, __CTYPE_IS_HTML 0, __DQ_S_HIST_1 0, __DQ_S_HIST_2 0, __HAS_FROM 0, __HAS_HTML 0, __HAS_MSGID 0, __HTML_AHREF_TAG 0, __HTML_FONT_RED 0, __MIME_HTML 0, __MIME_HTML_ONLY 0, __MIME_VERSION 0, __OEM_PRICE 0, __PHISH_PHRASE1_A 0, __PHISH_SPEAR_DETAILS 0, __PHISH_SPEAR_GREETING 0, __PHISH_SUBJ_PHRASE1 0, __SANE_MSGID 0, __SINGLE_URI_HTML 0, __STOCK_PHRASE_7 0, __STYLE_RATWARE 0, __STYLE_RATWARE_NEG 0, __TAG_EXISTS_HTML 0, __TO_MALFORMED_2 0, __TO_NO_NAME 0, __URI_IN_BODY 0, __URI_NO_MAILTO 0, __URI_NO_PATH 0, __URI_NS '

Dear Customer ,

Your Apple Email ID, was used to purchase " THRILLER - MICHAEL JACKSON($19.99)
from the iTunes Store on a Apple Device that had not previously been associated with you.

If you made this purchase, you can ignore this email and wait for the PDF confirmation.
It was only sent to alert you in case you did not make the purchase yourself.

To issue a refund we need you to confirm your details :

Click here to follow the steps needed to confirm your account . 
[linked to phish url hxxp://www.eco-baires.com/]
After confirmation allow us 48-72 hours to process your refund .

Sincerely ,
Apple Care Team

Copyright © 2015 Apple Inc. All rights reserved.

Privacy and website security - Website Terms of Use - Site Map - Help - Jobs at Apple - Contact us