Received: from vmaprod1.mail-relay.ubc.ca (vmaprod1.mail-relay.ubc.ca [142.103.117.132]) by viol.math.ubc.ca (8.14.5/8.14.5) with ESMTP id s086HbrP028812 for <{redacted}@math.ubc.ca>; Tue, 7 Jan 2014 22:17:37 -0800 (PST) Received: from vmaprod1.mail-relay.ubc.ca (localhost.localdomain [127.0.0.1]) by localhost (Email Security Appliance) with SMTP id B314729E5BD_2CCED7BB; Wed, 8 Jan 2014 06:17:31 +0000 (GMT) Received: from smtp.mail.ubc.ca (s-itsv-hub02p.ead.ubc.ca [137.82.151.71]) (using TLSv1 with cipher AES128-SHA (128/128 bits)) (Client CN "rpc.mail.ubc.ca", Issuer "Entrust Certification Authority - L1C" (verified OK)) by vmaprod1.mail-relay.ubc.ca (Sophos Email Appliance) with ESMTPS id 3BEA129E4B9_2CCED7BF; Wed, 8 Jan 2014 06:17:31 +0000 (GMT) Received: from [172.20.10.2] (41.203.69.3) by smtp.mail.ubc.ca (137.82.151.71) with Microsoft SMTP Server id 14.3.174.1; Tue, 7 Jan 2014 22:17:24 -0800 Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Description: Mail message body Subject: Your Incident ID is: 130329-018715 To: Recipients From: Help Desk Date: Wed, 8 Jan 2014 06:16:28 +0000 Reply-To: Message-ID: X-Originating-IP: [41.203.69.3] X-Spam-Level: XXXXXXX X-PerlMx-Spam: Probability=72%,Report= FRAUD_IP_ANY 2.5, FRAUD_FROM_KNOWN_IP 1.5, FRAUD_IP_XOIP 0.5, PHISH_SPEAR_FROM_EDU_WEBMAIL_REPLYTO 0.5, SXL_IP_PROXY_RCVD 0.5, SXL_IP_SPAM_RCVD 0.5, WEBMAIL_REPLYTO_NOT_FROM 0.5, FRAUD_WEBMAIL_R_NOT_F 0.1, REPLYTO_FROM_DIFF_ADDY 0.1, FROM_SAME_AS_TO 0.05, HTML_00_01 0.05, HTML_00_10 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BODY_SIZE_700_799 0, FROM_EDU_TLD 0, URI_ENDS_IN_PHP 0, WEBMAIL_SOURCE 0, WEBMAIL_XOIP 0, WEBMAIL_X_IP_HDR 0, __ANY_URI 0, __CP_MEDIA_BODY 0, __CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_REPLYTO 0, __HAS_FROM 0, __HAS_MSGID 0, __HAS_REPLYTO 0, __HAS_XOIP 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __PHISH_COMPR_DIR_NAME 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_STRUCTURE_2 0, __SANE_MSGID 0, __SPEAR_FROM_NAME_B 0, __TO_MALFORMED_2 0, __TO_SAME_AS_FROM2 0, __URI_NO_MAILTO 0, __URI_NS X-SEA-Spam: Gauge=XXXXXXXII, Probability=72%, Report=' FRAUD_IP_ANY 2.5, FRAUD_FROM_KNOWN_IP 1.5, FRAUD_IP_XOIP 0.5, PHISH_SPEAR_FROM_EDU_WEBMAIL_REPLYTO 0.5, SXL_IP_PROXY_RCVD 0.5, SXL_IP_SPAM_RCVD 0.5, WEBMAIL_REPLYTO_NOT_FROM 0.5, FRAUD_WEBMAIL_R_NOT_F 0.1, REPLYTO_FROM_DIFF_ADDY 0.1, FROM_SAME_AS_TO 0.05, HTML_00_01 0.05, HTML_00_10 0.05, BODYTEXTP_SIZE_3000_LESS 0, BODY_SIZE_1000_LESS 0, BODY_SIZE_2000_LESS 0, BODY_SIZE_5000_LESS 0, BODY_SIZE_7000_LESS 0, BODY_SIZE_700_799 0, FROM_EDU_TLD 0, URI_ENDS_IN_PHP 0, WEBMAIL_SOURCE 0, WEBMAIL_XOIP 0, WEBMAIL_X_IP_HDR 0, __ANY_URI 0, __CP_MEDIA_BODY 0, __CP_URI_IN_BODY 0, __CT 0, __CTE 0, __CT_TEXT_PLAIN 0, __FRAUD_WEBMAIL 0, __FRAUD_WEBMAIL_REPLYTO 0, __HAS_FROM 0, __HAS_MSGID 0, __HAS_REPLYTO 0, __HAS_XOIP 0, __MIME_TEXT_ONLY 0, __MIME_VERSION 0, __PHISH_COMPR_DIR_NAME 0, __PHISH_SPEAR_STRUCTURE_1 0, __PHISH_SPEAR_STRUCTURE_2 0, __SANE_MSGID 0, __SPEAR_FROM_NAME_B 0, __TO_MALFORMED_2 0, __TO_SAME_AS_FROM2 0, __URI_NO_MAILTO 0, __URI_NS ' X-MIME-Autoconverted: from quoted-printable to 8bit by viol.math.ubc.ca id s086HbrP028812 This is an automated message to notify you that we detected a login attempt with a valid password to your webmail account from an unrecognized device yesterday @ Location: NICARAGUA, MANAGUA,IP=190.212.80.225 Latitude, Longitude: 12.13282, -86.2504 (12°7'58"S -86°15'1"E) Connection through: TELEMATIX/ENITEL Local Time: 2013 08:29 PM (UTC -06:00) IDD Code: 505 Weather Station: MANAGUA (NUXX0004) Usage Type: ISP Was this you? If so, you can disregard the rest of this email. If this wasn't you kindly follow the account review link Below Click or copy paste the link on browser hxxp://www.bouncycastlehirebournemouth.com/wp-includes/images/smilies/wbmEdu.php Sincerely, Graleks. E. Lopez Tech-Support Agent 01 [---001:000564:57449---]