More Toronto Dominion Phish
Posted by Dave Yadallee on
From - Wed Jul 24 22:33:18 2013
X-Account-Key: account1
X-UIDL: 0000200a4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 24 Jul 2013 14:08:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.80.1)
(envelope-from)
id 1V25Lr-0007T1-P6
for dave@doctor.nl2k.ab.ca; Wed, 24 Jul 2013 14:07:59 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 24 Jul 2013 14:07:59 -0600
Resent-Message-ID: <20130724200759.GA27764@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from [118.46.127.40] (helo=ekp.ksmobile.co.kr)
by doctor.nl2k.ab.ca with smtp (Exim 4.80.1)
(envelope-from)
id 1V25Gd-0006f1-Dn
for doctor@doctor.nl2k.ab.ca; Wed, 24 Jul 2013 14:02:48 -0600
Received: from admin@ksmobile.co.kr (203.198.138.43)
by ekp.ksmobile.co.kr with ZMAIL SMTP; Thu, 25 Jul 2013 05:01:31 +0900
From: "TD Canada Trust"
Subject: Account will remain limited until we hear from you
Date: Wed, 24 Jul 2013 16:06:10 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You are receiving this email because your TD Canada Trust
Online Banking information on file was changed on July 24, 2013. To avoid
any inconvenience regarding your account, such as suspension or limitation,
please complete the form to verify your personal information. [...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=118.46.127.40,nordns]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 RELAY_CHECKER_NORDNS No PTR record
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} Account will remain limited until we hear from you
You are receiving this email because your TD Canada Trust Online Banking information
on file was changed on July 24, 2013.
https://easywebcpo.td.com/waw/idp/login.htm?execution=e1s1
We take your security very seriously. To help keep your Online Banking
information safe, be careful not to share your Password or Username, Client
Card Number or Personal Verification Question answers with anyone else.
TD Canada Trust will never ask you to provide, confirm or verify personal, login or
account information through regular email or ask you to sign in to any
online service. If you receive an email of this type, that appears to be
from , please forward it to information.security@tdcanadatrust.com and then delete it. For more information
please visit Email & Website Fraud.
Please do not reply to this email, as it was sent from an unmonitored
account.
TD Group Financial Services site - Copyright c TD
X-Account-Key: account1
X-UIDL: 0000200a4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 24 Jul 2013 14:08:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.80.1)
(envelope-from
id 1V25Lr-0007T1-P6
for dave@doctor.nl2k.ab.ca; Wed, 24 Jul 2013 14:07:59 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 24 Jul 2013 14:07:59 -0600
Resent-Message-ID: <20130724200759.GA27764@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from [118.46.127.40] (helo=ekp.ksmobile.co.kr)
by doctor.nl2k.ab.ca with smtp (Exim 4.80.1)
(envelope-from
id 1V25Gd-0006f1-Dn
for doctor@doctor.nl2k.ab.ca; Wed, 24 Jul 2013 14:02:48 -0600
Received: from admin@ksmobile.co.kr (203.198.138.43)
by ekp.ksmobile.co.kr with ZMAIL SMTP; Thu, 25 Jul 2013 05:01:31 +0900
From: "TD Canada Trust"
Subject: Account will remain limited until we hear from you
Date: Wed, 24 Jul 2013 16:06:10 +0100
MIME-Version: 1.0
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam_score: 5.9
X-Spam_score_int: 59
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: You are receiving this email because your TD Canada Trust
Online Banking information on file was changed on July 24, 2013. To avoid
any inconvenience regarding your account, such as suspension or limitation,
please complete the form to verify your personal information. [...]
Content analysis details: (5.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BOTNET Relay might be a spambot or virusbot
[botnet0.8,ip=118.46.127.40,nordns]
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 RELAY_CHECKER_NORDNS No PTR record
0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} Account will remain limited until we hear from you
You are receiving this email because your TD Canada Trust Online Banking information
on file was changed on July 24, 2013.
To avoid any inconvenience regarding your account, such as suspension or
limitation, please complete the form to verify your personal information.
To do so, please sign in on the link
below and follow the steps:
https://easywebcpo.td.com/waw/idp/login.htm?execution=e1s1
We take your security very seriously. To help keep your Online Banking
information safe, be careful not to share your Password or Username, Client
Card Number or Personal Verification Question answers with anyone else.
TD Canada Trust will never ask you to provide, confirm or verify personal, login or
account information through regular email or ask you to sign in to any
online service. If you receive an email of this type, that appears to be
from , please forward it to information.security@tdcanadatrust.com and then delete it. For more information
please visit Email & Website Fraud.
Please do not reply to this email, as it was sent from an unmonitored
account.
TD Group Financial Services site - Copyright c TD
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments