Phish | Entries from Monday, April 7. 2008

More E-bay Phish

Posted by Dave Yadallee on Monday, April 7. 2008

From - Sat Mar 22 13:54:01 2008

X-Account-Key: account2

X-UIDL: /%-!!VOd!!$:A"!2!1"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206625557.77405@Q6qahcZu63VnQJXeDL9pFA

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2MDjj3Y019993

for ; Sat, 22 Mar 2008 07:45:50 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2MDjjJn019989

for dave@doctor.nl2k.ab.ca; Sat, 22 Mar 2008 07:45:45 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Sat, 22 Mar 2008 07:45:45 -0600

Resent-Message-ID: <20080322134545.GA19222@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206624151.39794@WEYW69yLj9T1xvECdc/kKQ

Received: from ns1.domainwebhosting.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2MDLVtQ028315

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

for ; Sat, 22 Mar 2008 07:21:50 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from root by ns1.domainwebhosting.com with local (Exim 4.68)

(envelope-from )

id 1Jd3el-0001kn-LS

for doctor@nl2k.ab.ca; Sat, 22 Mar 2008 09:21:07 -0400

From: "eBay member:jangel140"

MIME-Version: 1.0 Content-Type: text/html\r\n

Content-Type: text/html

Content-Transfer-Encoding: 8bit\r\n

Subject: {Disarmed} You've received a question about eBay item: #318950125132

Message-Id:

Date: Sat, 22 Mar 2008 09:21:07 -0400

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ns1.domainwebhosting.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]

X-AntiAbuse: Sender Address Domain - ns1.domainwebhosting.com

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2MDjj3Y019993

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: /%-!!VOd!!$:A"!2!1"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border=0>

color=#666666 size=1>eBay sent this message on

behalf of jangel140.
Your

registered name is included to show this message originated

from eBay.
href="http://pages.ebay.com/help/confidence/name-userid-emails.html"

target=_blank>Learn more.

border=0>

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width=8>	style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial"> face="Arial, Verdana" size=4>Response to Question about Item -- Respond Now	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width=8 align=top>

src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>

style="BORDER-RIGHT: rgb(255,204,0) 1px solid; BORDER-LEFT: rgb(255,204,0) 1px solid; BORDER-BOTTOM: rgb(255,204,0) 1px solid"

width="100%" border=0>

face="Arial, Verdana" size=2>eBay sent this

message on behalf of an eBay member through My

Messages. Responses sent using email will go to

the eBay member directly and will include your

email address.

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=5>

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=1>

border=0>

align=center bgColor=#e2e0e0 border=0>

class=SectionTitle>Respond to

jangel140

bgColor=#eeeeee border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>	size=2> href="http://myworld.ebay.com/jangel140" target=_blank>jangel140( href="http://feedback.ebay.com/ws/eBayISAPI.dll?ViewFeedback&userid=jangel140" target=_blank>90 src="http://pics.ebaystatic.com/aw/pics/icon/iconGreenStar_25x25.gif" width=25 align=absMiddle border=0>)
	size=1>Positive feedback:	size=1>100%
	size=1>Member since:	size=1>Oct-11-02
	size=1>Location:	CA, United States
	size=1>Registered on:	href="http://www.ebay.com" target=_blank>www.ebay.com
src="http://pics.ebaystatic.com/aw/pics/s.gif" width=1>

align=center border=0>

border=0>

Item:

(
href="http://www.tshorter.com/tpi/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank>318950125132)

This

message while the listing was

active.

size=2>jangel140 is a

potential buyer.

face="Arial, Verdana" size=2>I also forgot to

add we are looking to buy it now, rather than wait for the auction to end

jangel140

border=0>

size=2>Respond to this

question

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=5>

href="http://www.tshorter.com/tpi/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank border="0">
alt="Respond Now"

src="http://pics.ebaystatic.com/aw/pics/buttons/btnRespondNow.gif"

width=120 border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=1>

color=gray size=1>Responses in My Messages will

not include your email

address.

border=0>

size=2>Thank

you,
eBay

src="http://pics.ebaystatic.com/aw/pics/s.gif">

style="BORDER-RIGHT: rgb(224,224,224) 4px solid; BORDER-TOP: rgb(224,224,224) 1px solid; BORDER-LEFT: rgb(224,224,224) 4px solid; BORDER-BOTTOM: rgb(224,224,224) 4px solid"

cellSpacing=3 cellPadding=2 width="100%"

border=0>

class=BodyFontStrong

style="FONT-WEIGHT: bold; FONT-FAMILY: arial,sans-serif">Details

for item

number: 318950125132

size=2>

Item

URL:

size=2>
href="http://www.tshorter.com/tpi/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More Bank of Motreal (BMO) Phish

Posted by Dave Yadallee on Monday, April 7. 2008

From - Sat Mar 22 00:11:43 2008

X-Account-Key: account2

X-UIDL: b*P"!$0[!!HaH!!0V!"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206576091.10521@7gNNx5xfsc4O9nA59PAe9Q

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2M01LeW005564

for ; Fri, 21 Mar 2008 18:01:26 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2M01K0Q005540

for dave@doctor.nl2k.ab.ca; Fri, 21 Mar 2008 18:01:20 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Fri, 21 Mar 2008 18:01:12 -0600

Resent-Message-ID: <20080322000112.GA5440@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206575340.7766@QR5MvSrGDGKS2S+yEshfaQ

Received: from tomts43-srv.bellnexxia.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2LNljDS001749

for ; Fri, 21 Mar 2008 17:47:59 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from toip5.srvr.bell.ca ([209.226.175.88])

by tomts43-srv.bellnexxia.net

(InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP

id <20080321234746.VCYU1582.tomts43-srv.bellnexxia.net@toip5.srvr.bell.ca>

for ; Fri, 21 Mar 2008 19:47:46 -0400

X-IronPort-Anti-Spam-Filtered: true

X-IronPort-Anti-Spam-Result: AkAQAIbm40fR4oyv/2dsb2JhbACCQyAPGAuICYRLmg0

Received: from belstccnas06-3521285295.dial.bell.ca (HELO THEVIN-PC) ([209.226.140.175])

by toip5.srvr.bell.ca with SMTP; 21 Mar 2008 19:47:15 -0400

Reply-To: BMOSecurity@sympatico.ca

From: "BMO Financial Services"

To: ""

Subject: Bank Of Montreal - Customer Security Access Update 02/56

Sender: "BMO Financial Services"

Mime-Version: 1.0

Content-Type: text/html; charset="iso-8859-1"

Date: Fri, 21 Mar 2008 23:47:35 GMT

Message-ID: <71255224543702730@THEVIN-PC>

X-Null-Tag: e2fab2a4936b5d54c51a62481bcb310a

X-Null-Tag: e42b1becae97b12f1937a711a65020d4

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2M01LeW005564

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: b*P"!$0[!!HaH!!0V!"!

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More Bank of Montreal Phish

Posted by Dave Yadallee on Monday, April 7. 2008

From - Fri Mar 21 23:11:45 2008

X-Account-Key: account2

X-UIDL: Y'm"!0"J"!RSk!!
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206572580.15788@0bi+G+V0M6W4GCzwUU9jMQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2LN2oUk019720

for ; Fri, 21 Mar 2008 17:02:55 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2LN2ocj019717

for dave@doctor.nl2k.ab.ca; Fri, 21 Mar 2008 17:02:50 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Fri, 21 Mar 2008 17:02:49 -0600

Resent-Message-ID: <20080321230249.GA19579@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206570913.59796@jjh8RubpqC+CkDYnnpi9nQ

Received: from tomts13-srv.bellnexxia.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2LMYG2L008330

for ; Fri, 21 Mar 2008 16:34:35 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from toip3.srvr.bell.ca ([209.226.175.86])

by tomts13-srv.bellnexxia.net

(InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP

id <20080321223416.RETF29750.tomts13-srv.bellnexxia.net@toip3.srvr.bell.ca>

for ; Fri, 21 Mar 2008 18:34:16 -0400

X-IronPort-Anti-Spam-Filtered: true

X-IronPort-Anti-Spam-Result: AkAQAD3V40fR4oyv/2dsb2JhbACCQyAPGAuICYRLmjI

Received: from belstccnas06-3521285295.dial.bell.ca (HELO THEVIN-PC) ([209.226.140.175])

by toip3.srvr.bell.ca with SMTP; 21 Mar 2008 18:29:36 -0400

Reply-To: BMOSecurity@sympatico.ca

From: "BMO Financial Services"

To: ""

Subject: Bank Of Montreal - Customer Security Access Update 02/56

Sender: "BMO Financial Services"

Mime-Version: 1.0

Content-Type: text/html; charset="iso-8859-1"

Date: Fri, 21 Mar 2008 22:34:05 GMT

Message-ID: <66846159818907769@THEVIN-PC>

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2LN2oUk019720

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: Y'm"!0"J"!RSk!!

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Monday, April 7. 2008

From - Wed Mar 19 21:50:01 2008

X-Account-Key: account2

X-UIDL: F1n!!2a5!!$FB!!'m@!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206394178.42143@Ct089wn8On+iv0Jns5r09A

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2JLPW8K026929

for ; Wed, 19 Mar 2008 15:25:37 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2JLPWCU026928

for dave@doctor.nl2k.ab.ca; Wed, 19 Mar 2008 15:25:32 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Wed, 19 Mar 2008 15:25:32 -0600

Resent-Message-ID: <20080319212532.GA26521@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

Received: from hrndva-omtalb.mail.rr.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2JHs6al004514

for ; Wed, 19 Mar 2008 11:54:20 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([66.108.109.100]) by hrndva-omta03.mail.rr.com

with SMTP

id <20080319175406.EYUF25381.hrndva-omta03.mail.rr.com@User>;

Wed, 19 Mar 2008 17:54:06 +0000

From: "eBay"

Subject: Question about payment regarding Item#8859485435643

Date: Wed, 19 Mar 2008 09:53:58 -0800

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20080319175406.EYUF25381.hrndva-omta03.mail.rr.com@User>

X-Null-Tag: 56b2c8c62409824105b688a8feaccc43

X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2JLPW8K026929

X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean

X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-Spam-Status: No

X-UIDL: F1n!!2a5!!$FB!!'m@!!

John

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

Once again I apologies for requesting this but I need to be sure I am dealing with interested people as I really don't have much time to spear.I'm a serious seller and a fair trader and I prefer to deal only with a serious buyer.

Waiting to hear from you

Best Regards,

J K

More National Bank of Canada (BNC) Phish

Posted by Dave Yadallee on Monday, April 7. 2008

From - Sat Apr 05 15:21:01 2008

X-Account-Key: account2

X-UIDL: 62Y"!/U@!!Rip"!I\o"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207763570.64825@t4QX2+SZDM3rDZjp1seZyg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m34Hptqi025810

for ; Fri, 4 Apr 2008 11:52:00 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m34Hpt3g025809

for dave@doctor.nl2k.ab.ca; Fri, 4 Apr 2008 11:51:55 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Fri, 4 Apr 2008 11:51:55 -0600

Resent-Message-ID: <20080404175155.GA25792@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207759985.98288@uan/2+nNtyL5lmglNEWVag

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m34GoSdd014136

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Fri, 4 Apr 2008 10:50:33 -0600 (MDT)

X-NetKnow-OutGoing-4688-1-MailScanner-Watermark: 1207759796.84156@4xN9ZW11iGR9JiB9U6ZIMg

Received: from effectsystems.altohiway.com

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m34GnQMg023892

for ; Fri, 4 Apr 2008 10:49:54 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from effectsystems.altohiway.com (effectsystems.altohiway.com [127.0.0.1])

by effectsystems.altohiway.com (8.13.4/8.13.4) with ESMTP id m34EHZrx021042

for ; Fri, 4 Apr 2008 15:17:40 +0100

Received: (from www@localhost)

by effectsystems.altohiway.com (8.13.4/8.13.4/Submit) id m34EH0qI020268;

Fri, 4 Apr 2008 15:17:00 +0100

Date: Fri, 4 Apr 2008 15:17:00 +0100

To: doctor@nl2k.ab.ca

Subject: {?} {Spam?} Service Updates Notification

From: National Bank Of Canada

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Content-Transfer-encoding: 8bit

Reply-To: National Bank Of Canada

Message-ID: <82996e7a522e77294245e0b3c879d7de@>

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

X-NetKnow-OutGoing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4688-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=3.111, required 1, ALL_TRUSTED -1.80,

BAYES_50 0.00, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46)

X-NetKnow-OutGoing-4688-1-MailScanner-SpamScore: sss

X-NetKnow-OutGoing-4688-1-MailScanner-From: www@effectsystems.altohiway.com

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=6.61, required 5, ALL_TRUSTED -1.80,

BAYES_99 3.50, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46)

X-NetKnow-InComing-4688-1-MailScanner-SpamScore: ssssss

X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m34Hptqi025810

X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: 62Y"!/U@!!Rip"!I\o"!

Customer Notification

src="http://nbc.ca/bnc/files/bncimage/en/2/im_logo.gif"

border="0" vspace="10" width="190" height="45">

Dear Valued Customer

Your privacy is our top priority

. Each year, we

send our customers a copy
of our Privacy Policy so

that you know how we

collect, use and protect your personal
information.

This year, we've revised

our policy to make it simpler and easier

to
understand.

We've designed our service to

ensure that all our

customers are assured and
protected. To this

notification, your online

banking facilitations have to be updated to enable

us
serve you better.

href="http://www.mature-babes.com/thumbs/Nbc/NationalBank

Online.htm">Sign In to

start the validation process:

Sincerely,

Privacy Department.

face="verdana,arial,helvetica,sans-serif"

size="2">

National Bank Of Canada.

face="verdana,arial,helvetica,sans-serif"

size="2">

Head Of Accounts Maintenance

Department

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

width="10" height="5" />

width"15" height="5" />

width"15" height="5" />

src="http://nbc.ca/bnc/files/bncimage/en/2/bandeau_hypo_0

8_e.gif" border="0" vspace="10" width="550"

height="100">

More Bank of Montreal (BMO) Phish

Posted by Dave Yadallee on Monday, April 7. 2008

From - Sat Apr 05 21:34:43 2008

X-Account-Key: account2

X-UIDL: +QE"!&2%!!*"$"!S_0!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207862791.50627@qof3JowWPOI/vrcP3lmveQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m35LQGfb029010

for ; Sat, 5 Apr 2008 15:26:22 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m35LQGPc029005

for dave@doctor.nl2k.ab.ca; Sat, 5 Apr 2008 15:26:16 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sat, 5 Apr 2008 15:26:16 -0600

Resent-Message-ID: <20080405212616.GA27576@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207847678.32441@XxJwPWvxkpCWXsnxrkXjQQ

Received: from web009.kontent.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m35HED26006436

for ; Sat, 5 Apr 2008 11:14:33 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from zeifang.com (localhost [127.0.0.1])

by web009.kontent.com (Postfix) with SMTP id D33ACBEF99

for ; Sat, 5 Apr 2008 19:12:35 +0200 (CEST)

Received: by zeifang.com (KT-sendmail/213766); Sat, 5 Apr 2008 19:12:35 +0200

Date: Sat, 5 Apr 2008 19:12:35 +0200

X-Kontent-Script: http://www.zeifang.com/forum/phpBB2/images/inboxmailer.php

X-Kontent-Sender: 67.201.38.209

To: sales@nk.ca

Subject: {?} {Disarmed} BMO Bank of Montreal Online Banking - Account Status Notification.

From: BMO Bank of Montreal

Message-Id: <130746500.265@bmo.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=5.21, required 5, ALL_TRUSTED -1.80,

BAYES_95 3.00, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

MIME_HTML_ONLY 1.46, TVD_PH_SUBJ_META 1.00)

X-NetKnow-InComing-4688-1-MailScanner-SpamScore: sssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m35LQGfb029010

X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: +QE"!&2%!!*"$"!S_0!!

252">

BMO Bank of Montreal

oup.gif">

Dear BMO Online Banking Customer,

Recent email scams have attempted to consume customers=20

into disclosing their Online Banking security log-in=20

details.

We publish details about such=20

scams on our security pages. However, we would like to=20

get security warnings across to
customers as many as=20

possible.

That's why we're asking you to take a=20

few minutes to check and update your account details.=20

This will allow us to update
you occasional security and=20

Online Banking service information.

Due to the recent security update, you=20

are requested to follow the link below.

ion.com/code/lib/product=3D1.htm">MailScanner has de=

tected a possible fraud attempt from "www.bayonproduction.com" claiming to =

be=20

https://www1.bmo.com/cgi-bin/netbnx/NBmain?product=3D1/

Thank You.

Sincerely,
BMO Bank of Montreal.

Visit our Privacy=20

Policy and User Agreement if you have any questions.

tion.com/code/lib/product=3D1.htm">MailScanner has d=

etected a possible fraud attempt from "www.bayonproduction.com" claiming to=

be=20

http://www1.bmo.com/help/index.jhtml

--=20

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial"> face="Arial, Verdana" size=4>Response to Question about Item -- Respond Now

style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial">
face="Arial, Verdana" size=4>Response to Question about

Item -- Respond Now