More National Bank of Canada (BNC) Phish

Posted by Dave Yadallee on
From - Sat Apr 05 15:21:01 2008

X-Account-Key: account2

X-UIDL: 62Y"!/U@!!Rip"!I\o"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207763570.64825@t4QX2+SZDM3rDZjp1seZyg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m34Hptqi025810

for ; Fri, 4 Apr 2008 11:52:00 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m34Hpt3g025809

for dave@doctor.nl2k.ab.ca; Fri, 4 Apr 2008 11:51:55 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Fri, 4 Apr 2008 11:51:55 -0600

Resent-Message-ID: <20080404175155.GA25792@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207759985.98288@uan/2+nNtyL5lmglNEWVag

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m34GoSdd014136

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Fri, 4 Apr 2008 10:50:33 -0600 (MDT)

X-NetKnow-OutGoing-4688-1-MailScanner-Watermark: 1207759796.84156@4xN9ZW11iGR9JiB9U6ZIMg

Received: from effectsystems.altohiway.com

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m34GnQMg023892

for ; Fri, 4 Apr 2008 10:49:54 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from effectsystems.altohiway.com (effectsystems.altohiway.com [127.0.0.1])

by effectsystems.altohiway.com (8.13.4/8.13.4) with ESMTP id m34EHZrx021042

for ; Fri, 4 Apr 2008 15:17:40 +0100

Received: (from www@localhost)

by effectsystems.altohiway.com (8.13.4/8.13.4/Submit) id m34EH0qI020268;

Fri, 4 Apr 2008 15:17:00 +0100

Date: Fri, 4 Apr 2008 15:17:00 +0100

To: doctor@nl2k.ab.ca

Subject: {?} {Spam?} Service Updates Notification

From: National Bank Of Canada

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Content-Transfer-encoding: 8bit

Reply-To: National Bank Of Canada

Message-ID: <82996e7a522e77294245e0b3c879d7de@>

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

X-NetKnow-OutGoing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4688-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=3.111, required 1, ALL_TRUSTED -1.80,

BAYES_50 0.00, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46)

X-NetKnow-OutGoing-4688-1-MailScanner-SpamScore: sss

X-NetKnow-OutGoing-4688-1-MailScanner-From: www@effectsystems.altohiway.com

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=6.61, required 5, ALL_TRUSTED -1.80,

BAYES_99 3.50, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46)

X-NetKnow-InComing-4688-1-MailScanner-SpamScore: ssssss

X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m34Hptqi025810

X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: 62Y"!/U@!!Rip"!I\o"!













Customer Notification
















src="http://nbc.ca/bnc/files/bncimage/en/2/im_logo.gif"



border="0" vspace="10" width="190" height="45">



Dear Valued Customer



Your privacy is our top priority



. Each year, we

send our customers a copy
of our Privacy Policy so



that you know how we

collect, use and protect your personal
information.



This year, we've revised

our policy to make it simpler and easier



to
understand.



We've designed our service to



ensure that all our

customers are assured and
protected. To this



notification, your online

banking facilitations have to be updated to enable



us
serve you better.






href="http://www.mature-babes.com/thumbs/Nbc/NationalBank



Online.htm">Sign In to

start the validation process:





Sincerely,







Privacy Department.


face="verdana,arial,helvetica,sans-serif"



size="2">




National Bank Of Canada.


face="verdana,arial,helvetica,sans-serif"



size="2">


Head Of Accounts Maintenance



Department










--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.




--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.


















width="10" height="5" />










width="10" height="5" />








width"15" height="5" />




width"15" height="5" />






src="http://nbc.ca/bnc/files/bncimage/en/2/bandeau_hypo_0



8_e.gif" border="0" vspace="10" width="550"



height="100">







More Bank of Montreal (BMO) Phish

Posted by Dave Yadallee on
From - Sat Apr 05 21:34:43 2008

X-Account-Key: account2

X-UIDL: +QE"!&2%!!*"$"!S_0!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207862791.50627@qof3JowWPOI/vrcP3lmveQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m35LQGfb029010

for ; Sat, 5 Apr 2008 15:26:22 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m35LQGPc029005

for dave@doctor.nl2k.ab.ca; Sat, 5 Apr 2008 15:26:16 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sat, 5 Apr 2008 15:26:16 -0600

Resent-Message-ID: <20080405212616.GA27576@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207847678.32441@XxJwPWvxkpCWXsnxrkXjQQ

Received: from web009.kontent.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m35HED26006436

for ; Sat, 5 Apr 2008 11:14:33 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from zeifang.com (localhost [127.0.0.1])

by web009.kontent.com (Postfix) with SMTP id D33ACBEF99

for ; Sat, 5 Apr 2008 19:12:35 +0200 (CEST)

Received: by zeifang.com (KT-sendmail/213766); Sat, 5 Apr 2008 19:12:35 +0200

Date: Sat, 5 Apr 2008 19:12:35 +0200

X-Kontent-Script: http://www.zeifang.com/forum/phpBB2/images/inboxmailer.php

X-Kontent-Sender: 67.201.38.209

To: sales@nk.ca

Subject: {?} {Disarmed} BMO Bank of Montreal Online Banking - Account Status Notification.

From: BMO Bank of Montreal

Message-Id: <130746500.265@bmo.com>

MIME-Version: 1.0

Content-Type: text/html

Content-Transfer-Encoding: quoted-printable

X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=5.21, required 5, ALL_TRUSTED -1.80,

BAYES_95 3.00, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

MIME_HTML_ONLY 1.46, TVD_PH_SUBJ_META 1.00)

X-NetKnow-InComing-4688-1-MailScanner-SpamScore: sssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m35LQGfb029010

X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: +QE"!&2%!!*"$"!S_0!!












252">

BMO Bank of Montreal
























oup.gif">





Dear BMO Online Banking Customer,





Recent email scams have attempted to consume customers=20

into disclosing their Online Banking security log-in=20

details.

We publish details about such=20

scams on our security pages. However, we would like to=20

get security warnings across to
customers as many as=20

possible.



That's why we're asking you to take a=20

few minutes to check and update your account details.=20

This will allow us to update
you occasional security and=20

Online Banking service information.



Due to the recent security update, you=20

are requested to follow the link below.






ion.com/code/lib/product=3D1.htm">MailScanner has de=

tected a possible fraud attempt from "www.bayonproduction.com" claiming to =

be=20





https://www1.bmo.com/cgi-bin/netbnx/NBmain?product=3D1/






Thank You.

Sincerely,
BMO Bank of Montreal.



Visit our Privacy=20

Policy and User Agreement if you have any questions.









tion.com/code/lib/product=3D1.htm">MailScanner has d=

etected a possible fraud attempt from "www.bayonproduction.com" claiming to=

be=20



http://www1.bmo.com/help/index.jhtml

























--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.