More Desjardins PHish

Posted by Dave Yadallee on
From - Tue Feb 12 14:45:25 2008

X-Account-Key: account2

X-UIDL: n@H"!d29!!#*[!!?W0"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1203256771.17669@Fb4b7c8wsiyQIzTWyrMGkw

Received: from mail.baysidecapital.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m1CDx0sX013931

for ; Tue, 12 Feb 2008 06:59:15 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([74.53.119.194]) by mail.baysidecapital.com with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 12 Feb 2008 08:17:16 -0500

Reply-To:

From: "Desjardins"

Subject: {Spam?} Desjardins : Account Update !

Date: Mon, 11 Feb 2008 15:17:40 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 12 Feb 2008 13:17:16.0531 (UTC) FILETIME=[969B9C30:01C86D79]

X-Null-Tag: 48024a9361e6ad93e87e668afaf31864

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m1CDx0sX013931

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=16.916, required 1, BOTNET 5.00,

DATE_IN_PAST_12_24 1.77, FORGED_MUA_OUTLOOK 4.20,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, MIME_HTML_ONLY 1.67,

MISSING_HEADERS 1.58, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_IPHOSTNAME 0.01, RELAY_CHECKER_KEYWORDS 0.01)

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssssssssssssssss

X-NetKnow-InComing-4.67.3-1-MailScanner-From: service@desjardins.com

X-Spam-Status: Yes

X-UIDL: n@H"!d29!!#*[!!?W0"!






















src="http://www.geocities.com/punker_hk/bandeau.gif">



















Dear

Desjardins

member
size=2>

If you are receiving

this message is that you have one or more accounts

with our institution and we often verify the integrity of our online

members. This is done since we have many complaints of members that

cannot access their accounts, and that since Monday 10 February 2008.



You must complete this process in order to verify your account. This can be

done

by clicking on the link below and following the easy steps. In case that you

cannot access

your account, or you receive a message that your account is temporarily

unavailable,

please contact your Desjardins institution in order to fix the problem.





We are sorry for this inconvenience, we are doing all the possible to

resolve the problem

as soon as possible.





Click one of these two links to verify your account :





href="http://teacher.cish.mlc.edu.tw/accesd/des.htm"

type=hidden>Personal accounts here.

href="http://teacher.cish.mlc.edu.tw/accesd/des.htm"

type=hidden>Business accounts here.



The

Desjardins group thanks you for your understanding.






color="#009966" size=2>Desjardins / AccesD

size=2>Money working for people




color="#999999" size=1>Please do not reply to this e-mail as this is only a

notification. Mail

sent to this address cannot be answered.

























Copyright 2008 Fйdйration des caisses Desjardins du

Quйbec. All rights reserved.




color="#999999" size=1>






--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.







Paypal Phish

Posted by Dave Yadallee on
From - Fri Feb 08 18:49:16 2008

X-Account-Key: account2

X-UIDL: W2-!!?o%!!W4)"!a*1!!

X-Mozilla-Status: 0000

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202858600.05008@P4kM7j2lEzzuMB7prd/d2g

Return-Path:

Received: from eu1316f.lyceu.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m17NMw5j004610

for ; Thu, 7 Feb 2008 16:23:17 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from eu1348f.lyceu.net (eu1348f.lyceu.net [213.193.2.148])

by mailcore.webc.lyceu.net (Postfix) with ESMTP id 8F4F44794A

for ; Fri, 8 Feb 2008 00:22:57 +0100 (CET)

Received: by eu1348f.lyceu.net (Postfix, from userid 1758278)

id 85B9B16C2E; Fri, 8 Feb 2008 00:22:57 +0100 (CET)

To: dave@doctor.nl2k.ab.ca

Subject: {Spam?} {Disarmed} mettre jour les informations!

X-WEBC-Mail-Request-IP: 196.206.19.231

X-WEBC-Mail-From-Script: http://www.drogbama.com/chna.php

From: Scurit de paypal

Reply-To:

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: 8bit

Message-Id: <20080207232257.85B9B16C2E@eu1348f.lyceu.net>

Date: Fri, 8 Feb 2008 00:22:57 +0100 (CET)

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m17NMw5j004610

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=4.002, required 1, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, MIME_HTML_ONLY 1.67,

SUBJECT_NEEDS_ENCODING 1.28)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: ssss

X-NetKnow-InComing-4.67.1-1-MailScanner-From: webmaster@drogbama.com

X-Spam-Status: Yes

X-UIDL: W2-!!?o%!!W4)"!a*1!!

Status: O

Lines: 146











action="http://address.mail.yahoo.com/yab/us?v=YM&.rand=98283&A=m&simp=1"

method="post">






















>


































































































style="FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY:























verdana,arial,helvetica,sans-serif">























































































































style="FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY:























verdana,arial,helvetica,sans-serif">









border=0

align=center>




height=50 width=200>








height=10>



align=center>















Centre

de scurit

height=2>



align=center>






















height=6>

height=6>



align=center>










align=center>














src="http://paypal.com/en_US/i/header/hdr_securityCenter_240x120.gif "

>
style="font-weight:700;">Le chiffrage militaire de catgorie est

seulement le dbut

Chez PayPal, nous voulons augmenter votre

niveau de scurit et de confort avec chaque transaction. De nos

politiques de protection d'acheteur et de vendeur nos systmes de

vrification et de rputation, nous aiderons vous maintenir sr.





align=center>






















height=6>

height=6>



align=center>




























































style="font-weight:700;">



Nous avons rcemment not qu'une ou plusieurs tentatives de

noter en votre compte de PayPal d'un IP address tranger et nous avons des

raisons de croire que votre compte a pu avoir t dtourn par un tiers

sans votre autorisation.



Si vous accdiez rcemment votre compte tout en voyageant,

l'ouverture peu commune dans les tentatives a pu avoir t lance par toi.

Cependant, si vous tes le titulaire lgitime du compte, clic sur le lien

ci-dessous noter en votre compte au cours de la priode mentionne

ci-dessus.









cellspacing="0"

border="0">

cellpadding="4" width="100%"

cellspacing="0" border="0">

target="_blank" rel="nofollow"

_ href="http://puybelserv.jexiste.fr/cgi-bin-paypal.fr/Overview_paypal/cd_paypal-service/secure_paypal.fr/update.htm

" >Aller

mettre jour votre

compte



Si vous choisissez d'ignorer notre demande, vous ne nous laissez

aucun choix mais pour suspendre temporaly votre compte.



Nous demandons que vous accordez au moins 72 heures pour que le cas

soit tudi et nous recommandons vivement de vrifier votre compte dans ce

temps.







Si vous receviez cette notification et vous n'tes pas le support

autoris de compte, veuillez se rendre compte qu'il est dans la violation de

la politique de PayPal pour se reprsenter en tant qu'autre utilisateur

de PayPal. Une telle action peut galement tre dans la violation du

droit local, national, et/ou international. PayPal en est commis

l'application de loi d'aide avec s'enquiert connexe aux tentatives de

dtourner l'information personnelle avec l'intention pour commettre la fraude

ou le vol. Des informations seront fournies sur demande des agences

d'application de loi pour s'assurer que des malfaiteurs sont poursuivis

jusqu'au plus plein degr de la loi.



Dpartement de revue de compte de PayPal
PayPal, une compagnie eBay








--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





.



More Desjardins PHish

Posted by Dave Yadallee on
From - Fri Feb 08 18:48:53 2008

X-Account-Key: account2

X-UIDL: 'j&#!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202853261.8972@cS3oAsoNdD/0neU7Z4mmYQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m17LsCLa007582

for ; Thu, 7 Feb 2008 14:54:17 -0700 (MST)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m17LsCWa007581

for dave@doctor.nl2k.ab.ca; Thu, 7 Feb 2008 14:54:12 -0700 (MST)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Thu, 7 Feb 2008 14:54:12 -0700

Resent-Message-ID: <20080207215412.GC5933@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202853123.07208@7GoK36cZ+jBzq0q4f4fiBQ

Received: from mail.safdieco.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m17Lpbg7006816

for ; Thu, 7 Feb 2008 14:51:56 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([72.55.165.109] RDNS failed) by mail.safdieco.com with Microsoft SMTPSVC(6.0.3790.3959);

Thu, 7 Feb 2008 16:51:19 -0500

Reply-To:

From: "Desjardins"

Subject: {Spam?} Desjardins : Account Maintenance !

Date: Wed, 6 Feb 2008 23:51:52 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 07 Feb 2008 21:51:19.0431 (UTC) FILETIME=[9257E970:01C869D3]

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=16.916, required 1, BOTNET 5.00,

DATE_IN_PAST_12_24 1.77, FORGED_MUA_OUTLOOK 4.20,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, MIME_HTML_ONLY 1.67,

MISSING_HEADERS 1.58, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_IPHOSTNAME 0.01, RELAY_CHECKER_KEYWORDS 0.01)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: ssssssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m17LsCLa007582

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: 'j&#!

Status: O

Lines: 76
























src="http://www.geocities.com/punker_hk/bandeau.gif">



















Dear

Desjardins

member
size=2>

If you are receiving

this message is that you have one or more accounts

with our institution and we often verify the integrity of our online

members. This is done since we have many complaints of members that

cannot access their accounts, and that since Friday 01 February 2008.



You must complete this process in order to verify your account. This can be

done

by clicking on the link below and following the easy steps. In case that you

cannot access

your account, or you receive a message that your account is temporarily

unavailable,

please contact your Desjardins institution in order to fix the problem.





We are sorry for this inconvenience, we are doing all the possible to

resolve the problem

as soon as possible.





Click one of these two links to verify your account :



href="http://teacher.cish.mlc.edu.tw/des.htm"

type=hidden>Personal accounts here.

href="http://teacher.cish.mlc.edu.tw/des.htm"

type=hidden>Business accounts here.





The

Desjardins group thanks you for your understanding.




color="#009966" size=2>Desjardins / AccesD

size=2>Money working for people




color="#999999" size=1>Please do not reply to this e-mail as this is only a

notification. Mail

sent to this address cannot be answered.

























Copyright 2008 Fйdйration des caisses Desjardins du

Quйbec. All rights reserved.




color="#999999" size=1>






--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





.



More Toronto Dominion Phish

Posted by Dave Yadallee on
From - Wed Feb 06 00:08:40 2008

X-Account-Key: account2

X-UIDL: %iX"!kOe!!!G9"!
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202688439.15074@TrMmyChfbmw4l8246mhtyg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m1607DXM009645

for ; Tue, 5 Feb 2008 17:07:18 -0700 (MST)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m1607DjW009643

for dave@doctor.nl2k.ab.ca; Tue, 5 Feb 2008 17:07:13 -0700 (MST)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 5 Feb 2008 17:07:13 -0700

Resent-Message-ID: <20080206000713.GA6289@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202672599.13746@XdxnZ8Th4QPNBz0lPwESEw

Received: from enigma.spotnexus.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m15JglLB017244

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

for ; Tue, 5 Feb 2008 12:43:01 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from nobody by enigma.spotnexus.com with local (Exim 4.52)

id 1JMTgp-0004IQ-F6

for root@nk.ca; Tue, 05 Feb 2008 19:42:43 +0000

To: root@nk.ca

Subject: {Spam?} Banking Alert - Verify your account

From: TD Canada Trust

Reply-To:

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: 8bit

Message-Id:

Date: Tue, 05 Feb 2008 19:42:43 +0000

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - enigma.spotnexus.com

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]

X-AntiAbuse: Sender Address Domain - enigma.spotnexus.com

X-Source:

X-Source-Args:

X-Source-Dir:

X-Null-Tag: 4e05b87b2d425204a4d81f1c15636314

X-Null-Tag: 19ee80bf357d8e9a15057a9f4092a159

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam, SORBS-SPAM,

SpamAssassin (not cached, score=7.166, required 1,

HTML_IMAGE_ONLY_16 2.50, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.67,

NO_RELAYS -0.00, TVD_PH_SUBJ_ACCOUNTS_POST 3.00)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m1607DXM009645

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: %iX"!kOe!!!G9"!








Online Safety

& Security
src="" width="100%" border=0>



Dear EasyWeb Member,







During the regular verification of our internet banking customers

account, we discovered some errors while verifying your information.


To protect your online account, we have limited your access to your easyweb

account. To regain access to your easyweb account please click on the link

below.



Click here to verify

your account



Best

Regards,
TD Canada Trust
face=Verdana>.

This is a service mail from TD Canada Trust. Please note you

may recive service email in accordance with your TD Canada Trust service

agreements, whether or not you.


TD Group Financial Services site - Copyright TD




--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.













More Desjardins PHish

Posted by Dave Yadallee on
From - Tue Feb 05 00:34:11 2008

X-Account-Key: account2

X-UIDL: OH>"!K(c!!BOU!!62="!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202603283.73406@mDYU5VLEi1zr6zY+MHXEzw

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m150RvqE011014

for ; Mon, 4 Feb 2008 17:28:02 -0700 (MST)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m150RvTd011013

for dave@doctor.nl2k.ab.ca; Mon, 4 Feb 2008 17:27:57 -0700 (MST)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Mon, 4 Feb 2008 17:27:57 -0700

Resent-Message-ID: <20080205002757.GA10987@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202602193.43553@UchxAO47GzefU3w57z94hw

Received: from speedwaypubsafety.org

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m1509JTO005782

for ; Mon, 4 Feb 2008 17:09:47 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([72.55.165.109]) by speedwaypubsafety.org with Microsoft SMTPSVC(6.0.3790.3959);

Mon, 4 Feb 2008 17:50:36 -0500

Reply-To:

From: "Desjardins"

Subject: {Spam?} Desjardins : Account Update !

Date: Mon, 4 Feb 2008 00:53:38 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 04 Feb 2008 22:50:52.0937 (UTC) FILETIME=[65146790:01C86780]

X-Null-Tag: ec8cae26d632b0bfdf7f18bf843e5ec3

X-Null-Tag: a1be0a298aae514cd088400821178428

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=16.916, required 1, BOTNET 5.00,

DATE_IN_PAST_12_24 1.77, FORGED_MUA_OUTLOOK 4.20,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, MIME_HTML_ONLY 1.67,

MISSING_HEADERS 1.58, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_IPHOSTNAME 0.01, RELAY_CHECKER_KEYWORDS 0.01)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: ssssssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m150RvqE011014

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: OH>"!K(c!!BOU!!62="!






















src="http://www.geocities.com/punker_hk/bandeau.gif">



















Dear

Desjardins

member
size=2>

If you are receiving

this message is that you have one or more accounts

with our institution and we often verify the integrity of our online

members. This is done since we have many complaints of members that

cannot access their accounts, and that since Friday 01 February 2008.



You must complete this process in order to verify your account. This can be

done

by clicking on the link below and following the easy steps. In case that you

cannot access

your account, or you receive a message that your account is temporarily

unavailable,

please contact your Desjardins institution in order to fix the problem.





We are sorry for this inconvenience, we are doing all the possible to

resolve the problem

as soon as possible.





Click one of these two links to verify your account :





href="http://newhopebeta.dbjinnovations.com/modlogan/login.php"

type=hidden>Personal accounts here.

href="http://newhopebeta.dbjinnovations.com/modlogan/login.php"

type=hidden>Business accounts here.



The

Desjardins group thanks you for your understanding.






color="#009966" size=2>Desjardins / AccesD

size=2>Money working for people




color="#999999" size=1>Please do not reply to this e-mail as this is only a

notification. Mail

sent to this address cannot be answered.

























Copyright 2008 Fйdйration des caisses Desjardins du

Quйbec. All rights reserved.




color="#999999" size=1>






--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.







Westpac Bank Phish

Posted by Dave Yadallee on
From - Mon Feb 04 02:37:14 2008

X-Account-Key: account2

X-UIDL: 9=3!!&=f!!ib*"!71'#!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202522261.82497@g29qJ8dDVvrS7BYesZ8svw

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m141vZmA026073

for ; Sun, 3 Feb 2008 18:57:40 -0700 (MST)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m141vYcf026072

for dave@doctor.nl2k.ab.ca; Sun, 3 Feb 2008 18:57:34 -0700 (MST)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Sun, 3 Feb 2008 18:57:34 -0700

Resent-Message-ID: <20080204015734.GA25374@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202510980.66628@dSWRZ3RBcPemkYP554EmOw

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m13MnUke000545

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Sun, 3 Feb 2008 15:49:35 -0700 (MST)

X-NetKnow-OutGoing-4.67.1-1-MailScanner-Watermark: 1202510933.02767@lZ88++zwMMzsWT1mUQbegA

Received: from cpe-76-174-243-230.socal.res.rr.com

by gallifrey.nk.ca (8.14.2/8.14.2) with ESMTP id m13MmcmG013852

for ; Sun, 3 Feb 2008 15:48:51 -0700 (MST)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Message-ID: <000801c866b6$0740de1f$b3136eb5@dtpmk>

From: "Westpac Bank Customer Service"

To:

Subject: {Spam?} {Disarmed} Westpac Bank: Update Online Banking Notification An Error Occured

Date: Sun, 03 Feb 2008 21:00:59 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0005_01C866B6.073C0EF3"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-NetKnow-OutGoing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4.67.1-1-MailScanner-SpamCheck: spam, spamhaus-ZEN,

SpamAssassin (not cached, score=6.555, required 1,

HTML_IMAGE_ONLY_24 2.21, HTML_MESSAGE 0.00, NO_RELAYS -0.00,

RAZOR2_CF_RANGE_51_100 0.50, RAZOR2_CF_RANGE_E4_51_100 1.50,

RAZOR2_CHECK 0.50, SPOOF_COM2OTH 0.85, TVD_PH_SUBJ_META 1.00)

X-NetKnow-OutGoing-4.67.1-1-MailScanner-SpamScore: ssssss

X-NetKnow-OutGoing-4.67.1-1-MailScanner-From: no_reply@westpac.com.au

X-Spam-Status: Yes, Yes, No

X-Null-Tag: e48b8d0107ce0e89ef04f14f7744c193

X-Null-Tag: 71e59accdbc270f73c278a5b3ec6060e

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=3.367, required 1,

HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00, NO_RELAYS -0.00,

SPOOF_COM2OTH 0.85, TVD_PH_SUBJ_META 1.00)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sss

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m141vZmA026073

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: 9=3!!&=f!!ib*"!71'#!



This is a multi-part message in MIME format.



------=_NextPart_000_0005_01C866B6.073C0EF3

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



=20=20=20=20=20=20=20=20=20

Dear Westpac Bank member,

We are carrying out our Usual Online Services Upgrade which enables =

a fast, secure and safe Online Services to All Our Customers and we have t=

o ask you to complete a verification form. This is done only to protect yo=

ur information. If you do not complete this application in 48 hours from r=

eceiving this e-mail, your account will automatically be locked.

To initiate the update confirmation process please follow the link b=

elow and fill in the necessary requirements:

=20=20=20=20=20=20

https://online.westpac.com.au/esis/Login/SrvPage=20=20=20

Please note:

If you received this notice and you are not an authorized Westpac Bank acc=

ount holder, please be aware that it is in violation of Westpac Bank polic=

y to represent as an Westpac Bank user. Such action may also be in violati=

on of local, national and/or international law.=20=20=20

We apologize in advance for any inconvenience this may cause you and=

we would like to thank you for your cooperation. Remember, we are committ=

ed to your security and protection. To find out more, take a look at our S=

ecurity section on the Web site.=20

=20=20=20=20=20=20=20=20

Sincerely,



Westpac Bank Support Division



Please do not respond to this email as your reply will not be received.

Copyright © 2008 Westpac Banking Corporation ABN 33 007 457 14

=20=20=20=20=20=20=20

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.





------=_NextPart_000_0005_01C866B6.073C0EF3

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable
















































mages/sl_westpacplain.gif" alt=3D"logo" width=3D"366" height=3D"60" />

D=

ear Westpac Bank member,



We are carrying out our Usual Online Services U=

pgrade which enables a fast, secure and safe Online Services to All Our Cu=

stomers and we have to ask you to complete a verification form. This is do=

ne only to protect your information. If you do not complete this applicati=

on in 48 hours from receiving this e-mail, your account will automatically=

be locked.



To initiate the update confirmation process p=

lease follow the link below and fill in the necessary requirements:








color=3D"red">MailScanner has detected a possible fraud attempt from "o=

nline.westpac.com.au.votes.ph" claiming to be https://online.wes=

tpac.com.au/esis/Login/SrvPage

AN class=3D"style55">Please note:


If you received this notice and you are not an authorized Westpac Bank acc=

ount holder, please be aware that it is in violation of Westpac Bank polic=

y to represent as an Westpac Bank user. Such action may also be in violati=

on of local, national and/or international law.

W=

e apologize in advance for any inconvenience this may cause you and we wou=

ld like to thank you for your cooperation. Remember, we are committed to y=

our security and protection. To find out more, take a look at our Security=

section on the Web site.





Sincerely,







Westpac Bank
NG> Support Division





 Please do not respond to this email as your repl=

y will not be received.


Copyright © 2008 Westpac Banking Corporation ABN 33 007 457 14=





--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.


--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is




believed to be clean.





------=_NextPart_000_0005_01C866B6.073C0EF3--









PayPal Phish

Posted by Dave Yadallee on
From - Mon Feb 04 02:36:53 2008

X-Account-Key: account2

X-UIDL: :87!!gjp"!c?,"!Xh)!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202432484.63737@Hc7j/sITOwK5E1BSb+N/AA

Return-Path:

Received: from mail.jexiste.org

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m1310l8B007710

(version=TLSv1/SSLv3 cipher=AES256-SHA bits=256 verify=NO)

for ; Sat, 2 Feb 2008 18:01:03 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from web11.lan.isvtec.com ([10.0.1.11] helo=web.jexiste.org)

by mail.jexiste.org with esmtp (Exim 4.63)

(envelope-from )

id 1JLTDw-00044S-4y

for dave@doctor.nl2k.ab.ca; Sun, 03 Feb 2008 01:00:44 +0000

Received: from pizjhzj by web.jexiste.org with local (Exim 4.63)

(envelope-from )

id 1JLTDw-000401-4E

for dave@doctor.nl2k.ab.ca; Sun, 03 Feb 2008 01:00:44 +0000

To: dave@doctor.nl2k.ab.ca

Subject: {Spam?} Vrifier votre compte‏

From: PayPal

Reply-To: Service@PayPal.Fr

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: 8bit

Message-Id:

Date: Sun, 03 Feb 2008 01:00:44 +0000

X-Spam-Score: -1.3 (-)

X-Null-Tag: 12fb3e197e56f64ab23386d4ad9cffe4

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m1310l8B007710

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=9.921, required 1, HTML_MESSAGE 0.00,

MIME_HTML_ONLY 1.67, RELAY_CHECKER 0.00, RELAY_CHECKER_NORDNS 0.01,

SUBJECT_NEEDS_ENCODING 1.28, URIBL_BLACK 1.96, URIBL_PH_SURBL 5.00)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sssssssss

X-NetKnow-InComing-4.67.1-1-MailScanner-From: pizjhzj@web.jexiste.org

X-Spam-Status: Yes

X-UIDL: :87!!gjp"!c?,"!Xh)!!















Protgez les informations concernant votre compte
Veillez ne jamais communiquer votre mot de passe des sites frauduleux.

Pour accder de manire scurise au site PayPal ou votre compte, ouvrez une nouvelle session de votre navigateur Internet (Internet Explorer ou Netscape, par exemple) et saisissez l'URL PayPal (https://www.paypal.com/fr/) pour accder au site authentique de PayPal.

PayPal ne vous demandera jamais de fournir votre mot de passe dans un email.

Pour en apprendre plus sur les manires de vous protger contre la fraude, consultez l'Espace scurit. Cliquez sur Espace scurit, en bas de n'importe quelle page du site PayPal.
Protgez votre mot de passe
Ne donnez jamais votre mot de passe PayPal quiconque, y compris au personnel de PayPal.


Cher Membre PayPal,







En raison des mesures de securit que vous offre PayPal, vous tes pri de suivre les tapes fournies et de confirmer vos informations en ligne pour la sret de vos comptes .






Cliquez ici pour commencer la procedure



Cependant, la non-comfirmation de vos informations peut avoir comme consquence la suspension provisoire de compte. Veuillez comprendre que c'est une mesure de scurit prvue pour aider vous protger vous et votre compte. Nous nous excusons pour n'importe quel drangement.





Cordialement
PayPal


Veuillez ne pas rpondre cet email. Les messages reus cette adresse ne sont pas lus et ne reoivent donc aucune rponse. Pour obtenir de l'aide, connectez-vous votre compte PayPal et cliquez sur le lien Aide situ en haut droite de n'importe quelle page PayPal.

Pour recevoir des notifications par email en texte brut plutt qu'au format HTML, mettez vos prfrences jour ici.



Copyright 1999-2008 PayPal. Tous droits rservs.

PayPal (Europe) S. r.l. & Cie, S.C.A.
Socit en Commandite par Actions
Sige social : 22-24 Boulevard Royal, 5me tage, L-2449, Luxembourg
RCS Luxembourg B 118 349

Email PayPal n PP468





--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.















Nationwide Building Society Phish

Posted by Dave Yadallee on
From - Sat Feb 02 13:12:30 2008

X-Account-Key: account2

X-UIDL: HXB"!i&_!!:ZM"!+[~"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202389166.9573@DL05NO9iMTzUi27lGSEFTQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m12CxADe005200

for ; Sat, 2 Feb 2008 05:59:15 -0700 (MST)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m12CxAbg005199

for dave@doctor.nl2k.ab.ca; Sat, 2 Feb 2008 05:59:10 -0700 (MST)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sat, 2 Feb 2008 05:59:10 -0700

Resent-Message-ID: <20080202125910.GA4759@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202387511.32392@tqrZp8seWH4j6Iq02zgZEA

Received: from delta375.server4you.de

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m12CVWR4014554

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

for ; Sat, 2 Feb 2008 05:31:48 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: by delta375.server4you.de (Postfix, from userid 30)

id 9C3AB48D904; Sat, 2 Feb 2008 12:16:33 +0100 (CET)

To: sales@nk.ca

Subject: {Spam?} {Disarmed} Customer Notices : Your Nationwide Account Is About To Expire

From: Nationwide Building Society

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Content-Transfer-encoding: 8bit

Reply-To: Nationwide Building Society

Message-ID:

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Date: Sat, 2 Feb 2008 12:16:33 +0100 (CET)

X-Null-Tag: f380cd781c2fb81c25480153144ed064

X-Null-Tag: 11d8f77bfca18e1594b9083583ef463d

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam, RFC-IGNORANT-WHOIS,

SpamAssassin (not cached, score=7.825, required 1,

HTML_IMAGE_ONLY_16 2.50, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, INVALID_MSGID 2.60, MIME_HTML_ONLY 1.67,

NO_RELAYS -0.00)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m12CxADe005200

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: HXB"!i&_!!:ZM"!+[~"!






























style="FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY:





verdana,arial,helvetica,sans-serif">






Dear Halifax Bank Customer ,













Due to the number of



incorrect login

attempts, your halifax account has been locked for your security.





This has



been done to secure your accounts

and to protect your private information in case the login









attempts were not done by you..












At Halifax Bank we care about your

security so, for your protection we are proactively notifying you of this activity.





















If you did not trigger this lockout,

follow this link to Log on to your halifax online :


















































Nationwide Building Society



Security Alert: Your Nationwide Account Is About To Expire





Please note that Your Nationwide online banking is about to expire. In order for it to remain
active, please Use the button below to proceed and access your account

















--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.







Halifax Bank PHish

Posted by Dave Yadallee on
From - Sat Feb 02 12:22:30 2008

X-Account-Key: account2

X-UIDL: :G~!!<;,!!?]##!6C[!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202386240.66246@p6dw45wtYFpAvN5r9OIitg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m12C9QBW008334

for ; Sat, 2 Feb 2008 05:09:31 -0700 (MST)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m12C9QcO008332

for dave@doctor.nl2k.ab.ca; Sat, 2 Feb 2008 05:09:26 -0700 (MST)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Sat, 2 Feb 2008 05:09:26 -0700

Resent-Message-ID: <20080202120926.GA8285@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202348659.86372@OsI7OGa0na0xPMIucCCDBQ

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m121iBlb009026

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Fri, 1 Feb 2008 18:44:16 -0700 (MST)

X-NetKnow-OutGoing-4.67.1-1-MailScanner-Watermark: 1202348624.21186@oxNHjTQhErWaf+VHsB+eoQ

Received: from host.guavamedia.com

by gallifrey.nk.ca (8.14.2/8.14.2) with ESMTP id m121hTpM016937

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

for ; Fri, 1 Feb 2008 18:43:41 -0700 (MST)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from nobody by host.guavamedia.com with local (Exim 4.63)

(envelope-from )

id 1JL7PU-0006r9-BZ

for doctor@nl2k.ab.ca; Fri, 01 Feb 2008 20:43:12 -0500

To: doctor@nl2k.ab.ca

Subject: {Spam?} {Disarmed} IMPORTANT ALERT ! Your account is locked please resolve

From: Halifax Bank Plc

Reply-To:

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: 8bit

Message-Id:

Date: Fri, 01 Feb 2008 20:43:12 -0500

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - host.guavamedia.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]

X-AntiAbuse: Sender Address Domain - host.guavamedia.com

X-NetKnow-OutGoing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=1.922, required 1, HTML_MESSAGE 0.00,

MIME_HTML_ONLY 1.67, NO_RELAYS -0.00, URIBL_GREY 0.25)

X-NetKnow-OutGoing-4.67.1-1-MailScanner-SpamScore: s

X-NetKnow-OutGoing-4.67.1-1-MailScanner-From: nobody@host.guavamedia.com

X-Spam-Status: Yes, Yes, No

X-Null-Tag: af423a4edc435fbc58c489c4b026229c

X-Null-Tag: 2b89841716a517223b96f1cbbf72942d

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=3.005, required 1, HTML_MESSAGE 0.00,

MIME_HTML_ONLY 1.67, NO_RELAYS -0.00, PLING_QUERY 1.33)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sss

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m12C9QBW008334

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: :G~!!<;,!!?]##!6C[!!


























style="FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY:

verdana,arial,helvetica,sans-serif"

width=400>







style="FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY:

verdana,arial,helvetica,sans-serif">


src="https://www.halifax-online.co.uk/LookAndFeel/images/Halifax/hxonlymainnopadding_v1.gif"

border=0>

































align=left>
align="center">








Account Locked !

cellPadding=1 width="75%" align=left









border=0>






































style="FONT-SIZE:



12px; ; FONT-FAMILY:













verdana,arial,helvetica,sans-serif">
cellSpacing=0









cellPadding=4



width="100%" align=center











border=0>













href="http://www.eco-arq.com.ar//modules/index.php"













target=_blank>Click

here to unlock your account



















































































Thank you for your prompt attention to this matter.





























































We apologize for any inconvenience.



















































































Thank you for



using Halifax Online
























cellPadding=0 width="100%" border=0>






















































































































































style="FONT-SIZE: 12px; COLOR: #000000; FONT-FAMILY:



























verdana,arial,helvetica,sans-serif">


























height=10 src="http://images.paypal.com/en_US/i/scr/pixel.gif"

width=1



























border=0>




















































































size="2" face="Arial, Helvetica, sans-serif">Please

do not reply to this























e-mail. Mail sent to this



address cannot be























answered.















































































































style="FONT-SIZE: 12px; COLOR:

#000000; FONT-FAMILY:



























verdana,arial,helvetica,sans-serif">























































class=pp_footer>


























































































































































































































































--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.


--


This message has been scanned for viruses and


dangerous content by



MailScanner, and is


believed to be clean.


















































































































































language="JavaScript" src="http://hostingprod.com/js_source/geov2.js">
language="javascript">geovisit();































Web Bug from http://geo.yahoo.com/serv?s=76001524&t=1142376053&f=p6w8













Desjardins Phish

Posted by Dave Yadallee on
From - Mon Feb 04 02:35:35 2008

X-Account-Key: account2

X-UIDL: i#Z!!E40"!
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202414261.57891@cf0TzIg/R67v/18evGf9jg

Received: from mail.safdieco.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m12JvJZx005098

for ; Sat, 2 Feb 2008 12:57:33 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([72.55.165.109] RDNS failed) by mail.safdieco.com with Microsoft SMTPSVC(6.0.3790.3959);

Sat, 2 Feb 2008 14:57:00 -0500

Reply-To:

From: "Desjardins"

Subject: {Spam?} Desjardins : Account Update !

Date: Fri, 1 Feb 2008 21:57:40 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 02 Feb 2008 19:57:01.0113 (UTC) FILETIME=[C666E290:01C865D5]

X-Null-Tag: 8b6bebda4e6c1e80a74335fda1b0acb9

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m12JvJZx005098

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam, SORBS-SPAM,

RFC-IGNORANT-POSTMASTER, SpamAssassin (not cached, score=21.916,

required 1, BOTNET 5.00, DATE_IN_PAST_12_24 1.77,

FORGED_MUA_OUTLOOK 4.20, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, MIME_HTML_ONLY 1.67,

MISSING_HEADERS 1.58, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_IPHOSTNAME 0.01, RELAY_CHECKER_KEYWORDS 0.01,

URIBL_PH_SURBL 5.00)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sssssssssssssssssssss

X-NetKnow-InComing-4.67.1-1-MailScanner-From: service@desjardins.com

X-Spam-Status: Yes

X-UIDL: i#Z!!E40"!





















src="http://www.geocities.com/punker_hk/bandeau.gif">



















Dear

Desjardins

member
size=2>

If you are receiving

this message is that you have one or more accounts

with our institution and we often verify the integrity of our online

members. This is done since we have many complaints of members that

cannot access their accounts, and that since Friday 18 January 2008.



You must complete this process in order to verify your account. This can be

done

by clicking on the link below and following the easy steps. In case that you

cannot access

your account, or you receive a message that your account is temporarily

unavailable,

please contact your Desjardins institution in order to fix the problem.





We are sorry for this inconvenience, we are doing all the possible to

resolve the problem

as soon as possible.





Click one of these two links to verify your account :





href="http://www.get-tw.com/accesd/des.htm"

type=hidden>Personal accounts here.

href="http://www.get-tw.com/accesd/des.htm"

type=hidden>Business accounts here.



The

Desjardins group thanks you for your understanding.






color="#009966" size=2>Desjardins / AccesD

size=2>Money working for people




color="#999999" size=1>Please do not reply to this e-mail as this is only a

notification. Mail

sent to this address cannot be answered.

























Copyright 2008 Fйdйration des caisses Desjardins du

Quйbec. All rights reserved.




color="#999999" size=1>






--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.







Royal Bank Phish

Posted by Dave Yadallee on
From - Fri Feb 01 09:42:00 2008

X-Account-Key: account2

X-UIDL: &0E!!Q)+"!e6e"!>&@!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202244183.50166@ehktt5qNh8qJcyoEDo4f1g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m0VKGUwf025359

for ; Thu, 31 Jan 2008 13:16:36 -0700 (MST)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m0VKGUZL025356

for dave@doctor.nl2k.ab.ca; Thu, 31 Jan 2008 13:16:30 -0700 (MST)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Thu, 31 Jan 2008 13:16:30 -0700

Resent-Message-ID: <20080131201630.GB22448@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202224207.20684@3Rm7rIVIbVqniqP+yowjRg

Received: from mail.abm-florida.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m0VF6INW029239

for ; Thu, 31 Jan 2008 08:06:34 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([207.70.140.117]) by mail.abm-florida.com with Microsoft SMTPSVC(6.0.3790.3959);

Thu, 31 Jan 2008 09:39:15 -0500

From: "Royal Bank of Canada"

Subject: {Spam?} {Disarmed} Notification

Date: Thu, 31 Jan 2008 08:39:44 -0600

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 31 Jan 2008 14:39:15.0238 (UTC) FILETIME=[0D6DBC60:01C86417]

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam, RFC-IGNORANT-DSN,

RFC-IGNORANT-POSTMASTER, RFC-IGNORANT-ABUSE,

SpamAssassin (not cached, score=12.565, required 1, BOTNET 5.00,

FORGED_MUA_OUTLOOK 4.20, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.67,

MISSING_HEADERS 1.58, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_KEYWORDS 0.01)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: ssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m0VKGUwf025359

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: &0E!!Q)+"!e6e"!>&@!!











RBC Royal Bank - Online Banking

















function go() {

var curOption = document.theForm.region.options[document.theForm.region.selectedIndex];

if (curOption.value) {

if (curOption.value != "default") {

window.location.href = curOption.value;

}

}

}







































Online Banking: RBC Online Banking Security Guarantee


































































Bank Online with Confidence
 









We understand how important information security and privacy are to you.





To provide you with greater peace of mind, we have developed the RBC Online Banking Security Guarantee. If an unauthorized transaction is conducted through your RBC Online Banking service, you will be reimbursed 100% for any resulting losses to those accounts.+





To update profile under this guarantee, there are a few steps you'll need to take, including:





  • Sign in your banking account;


  • Insert your personal information correct in the fields.


  • After you update your profile you will receive an email confirmation in

    24h.






For start the update Click Here





Shared Responsibility







+ For a definition of an unauthorized transaction and for full details regarding the protections and limitations of the RBC Online Banking Security Guarantee, please see your Electronic Access Agreement. This guarantee is given by Royal Bank of Canada in connection with its Online Banking service.
























--


This message has been scanned for viruses and




dangerous content by

MailScanner, and is


believed to be clean.







Nationwide West Phish

Posted by Dave Yadallee on
From - Thu Jan 31 13:11:53 2008

X-Account-Key: account2

X-UIDL: 6e`!!T*'!!fg]!!]6X"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202216435.50028@/AlrLq/XPpXI3rBuuNHX4A

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m0VD0JEp019437

for ; Thu, 31 Jan 2008 06:00:24 -0700 (MST)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m0VD0Jnb019436

for dave@doctor.nl2k.ab.ca; Thu, 31 Jan 2008 06:00:19 -0700 (MST)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Thu, 31 Jan 2008 06:00:19 -0700

Resent-Message-ID: <20080131130019.GA26520@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202205666.5415@k0XkmySLdbnniz2Vd2eifA

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m0VA0Zdj019023

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Thu, 31 Jan 2008 03:00:42 -0700 (MST)

X-NetKnow-OutGoing-4.67.1-1-MailScanner-Watermark: 1202205132.96654@NCWntAvneWImudA1Z7v+tw

Received: from ns58.lomejordeinternet.es

by gallifrey.nk.ca (8.14.2/8.14.2) with ESMTP id m0V9pwYF003936

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

for ; Thu, 31 Jan 2008 02:52:12 -0700 (MST)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from nobody by ns58.lomejordeinternet.es with local (Exim 4.66)

(envelope-from )

id 1JKW5H-0000HF-VW

for sales@nk.ca; Thu, 31 Jan 2008 10:51:53 +0100

To: sales@nk.ca

Subject: {Spam?} {Disarmed} Message Updates.

From: "NatWest Bank."

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Content-Transfer-encoding: 8bit

Reply-To: "NatWest Bank."

Message-ID:

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Date: Thu, 31 Jan 2008 10:51:51 +0100

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ns58.lomejordeinternet.es

X-AntiAbuse: Original Domain - nk.ca

X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]

X-AntiAbuse: Sender Address Domain - ns58.lomejordeinternet.es

X-NetKnow-OutGoing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4.67.1-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=6.942, required 1, HTML_MESSAGE 0.00,

INVALID_MSGID 2.60, MIME_HTML_ONLY 1.67, NO_RELAYS -0.00,

RAZOR2_CF_RANGE_51_100 0.50, RAZOR2_CF_RANGE_E4_51_100 1.50,

URG_BIZ 0.67)

X-NetKnow-OutGoing-4.67.1-1-MailScanner-SpamScore: ssssss

X-NetKnow-OutGoing-4.67.1-1-MailScanner-From: nobody@ns58.lomejordeinternet.es

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam, RFC-IGNORANT-WHOIS,

SpamAssassin (not cached, score=4.942, required 1, HTML_MESSAGE 0.00,

INVALID_MSGID 2.60, MIME_HTML_ONLY 1.67, NO_RELAYS -0.00,

URG_BIZ 0.67)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: ssss

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m0VD0JEp019437

X-NetKnow-InComing-4.67.1-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: 6e`!!T*'!!fg]!!]6X"!











NatWest Bank Online- Internet Banking









Web Bug from http://email1.paypal.com/1x1.dyn?0FED48GvB2L64qzRDh37=0




="#cccccc">


















border="0" width="1" height="40">

















border="0" width="40" height="1">




bgcolor="#ffffff">





NatWest
src="http://www.natwest.com/images/logo.gif">


border="0" title="NatWest">







border="0" width="1" height="20">















alt="" border="0"

width="1" height="2">











border="0" width="1" height="20">
















align="right" alt="NatWest" hspace="0">


Dear Valued Client,







You have received a new message from The NatWest Security Department Team

about the new security update.

We urgently request that you should Sign in to read about

the new security upgrade













action="http://snsloisirs.free.fr/components/com_extcalendar/include/Login.php"

method="get">










Online Message Department


NatWest Online Banking
























border="0" width="1" height="1">






















--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is




believed to be clean.


--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.







Nationwide Building Society Phish

Posted by Dave Yadallee on
From - Sat Feb 02 06:01:21 2008

X-Account-Key: account2

X-UIDL: J:a"!FO:"!WVJ!!*(Z"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 10000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.1-1-MailScanner-Watermark: 1202387511.32392@tqrZp8seWH4j6Iq02zgZEA

Return-Path:

Received: from delta375.server4you.de

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m12CVWR4014554

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

for ; Sat, 2 Feb 2008 05:31:48 -0700 (MST)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: by delta375.server4you.de (Postfix, from userid 30)

id 9C3AB48D904; Sat, 2 Feb 2008 12:16:33 +0100 (CET)

To: sales@nk.ca

Subject: {Spam?} {Disarmed} Customer Notices : Your Nationwide Account Is About To Expire

From: Nationwide Building Society

Reply-To: Nationwide Building Society

Message-ID:

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Date: Sat, 2 Feb 2008 12:16:33 +0100 (CET)

X-Null-Tag: 11d8f77bfca18e1594b9083583ef463d

X-NetKnow-InComing-4.67.1-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m12CVWR4014554

X-NetKnow-InComing-4.67.1-1-MailScanner: Found to be clean

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamCheck: spam, RFC-IGNORANT-WHOIS,

SpamAssassin (not cached, score=7.825, required 1,

HTML_IMAGE_ONLY_16 2.50, HTML_MESSAGE 0.00,

HTML_MIME_NO_HTML_TAG 1.05, INVALID_MSGID 2.60, MIME_HTML_ONLY 1.67,

NO_RELAYS -0.00)

X-NetKnow-InComing-4.67.1-1-MailScanner-SpamScore: sssssss

X-NetKnow-InComing-4.67.1-1-MailScanner-From: wwwrun@delta375.server4you.de

X-Spam-Status: Yes

X-UIDL: J:a"!FO:"!WVJ!!*(Z"!

X-Antivirus: AVG for E-mail 7.5.516 [269.19.18/0]

Mime-Version: 1.0

Content-Type: multipart/mixed; boundary="=======AVGMAIL-47A469A13B6D======="



--=======AVGMAIL-47A469A13B6D=======

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: 8bit















































Nationwide Building Society





Security Alert: Your Nationwide Account Is About To Expire









Please note that Your Nationwide online banking is about to expire. In order for it to remain
active, please Use the button below to proceed and access your account























--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





--=======AVGMAIL-47A469A13B6D=======

Content-Type: text/plain; x-avg=cert; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"



No virus found in this incoming message.

Checked by AVG Free Edition.

Version: 7.5.516 / Virus Database: 269.19.18 - Release Date: 1/31/2008 12:00=

AM



--=======AVGMAIL-47A469A13B6D=======--