Visa Phish

Posted by Dave Yadallee on
From - Mon Mar 31 08:11:35 2008

X-Account-Key: account2

X-UIDL: 1Q,!!;D4!!K:o"!#U_!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4685-1-MailScanner-Watermark: 1207382689.02634@oDqMZwOg1qlRC8FhEtAnqw

Received: from zb-server.zillertal-bier.at

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2V84QC4006576

for ; Mon, 31 Mar 2008 02:04:45 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([80.91.89.46]) by zb-server.zillertal-bier.at with Microsoft SMTPSVC(5.0.2195.6713);

Mon, 31 Mar 2008 08:27:21 +0200

Reply-To:

From: "Visa Inc."

Subject: {?} Protect your Visa card online with a personal password

Date: Mon, 31 Mar 2008 08:51:38 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 31 Mar 2008 06:27:21.0843 (UTC) FILETIME=[46DC0C30:01C892F8]

X-Null-Tag: 66da57bcb9064fc13c576134127ccf65

X-NetKnow-InComing-4685-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2V84QC4006576

X-NetKnow-InComing-4685-1-MailScanner: Found to be clean

X-NetKnow-InComing-4685-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=11.013, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

HTML_IMAGE_ONLY_20 1.55, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10)

X-NetKnow-InComing-4685-1-MailScanner-SpamScore: sssssssssss

X-NetKnow-InComing-4685-1-MailScanner-From: vbv@visaeurope.com

X-Spam-Status: Yes

X-UIDL: 1Q,!!;D4!!K:o"!#U_!!













Protect your Visa card online wi













Protect your Visa card online with a personal password







Solution



Create an additional password to protect

your existing card for online purchases



We are proud to announce that Visa Europe

in association with all European and U.S. banks launch a new campaign

against online fraud and reward all participants with a

50,00 Euro bonus

just for enroll and secure your card. Your personal bonus code is

VISA-884AM-4423-2008 ( after you use the code please delete the email

or keep it private, conform our privacy  and policy you cannot use your

code twice, for more info please visit our Privacy

and Policy )





Please enroll now by clinking the Global Visa

Site select your country and follow the easy steps for a better security on your

card.





  • Link opens in new window Global

    Visa Sites


    • Do not be the next victim and fight with us

    against credit card fraud. 














    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.







    Hotmail Phish

    Posted by Dave Yadallee on
    From - Mon Apr 07 19:35:05 2008

    X-Account-Key: account2

    X-UIDL: f/5!!^O?"!>$5!!Cfo!!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208028227.38223@tXbqCPfIj5ocSxRt5N+WsA

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m37JNeRg020485

    for ; Mon, 7 Apr 2008 13:23:45 -0600 (MDT)

    Received: (from doctor@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m37JNef7020483

    for dave@doctor.nl2k.ab.ca; Mon, 7 Apr 2008 13:23:40 -0600 (MDT)

    Resent-From: doctor@doctor.nl2k.ab.ca

    Resent-Date: Mon, 7 Apr 2008 13:23:40 -0600

    Resent-Message-ID: <20080407192340.GA19710@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208020748.05998@3A8/dpr6DJhyH5yKijqVKQ

    Received: from blu139-omc1-s13.blu139.hotmail.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m37HIqjA011771

    for ; Mon, 7 Apr 2008 11:19:06 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from BLU120-W14 ([65.55.162.181]) by blu139-omc1-s13.blu139.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);

    Mon, 7 Apr 2008 10:17:48 -0700

    Message-ID:

    Content-Type: multipart/alternative;

    boundary="_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_"

    X-Originating-IP: [80.89.176.36]

    From: customer care

    To:

    Subject: {?} VERIFICATION OF YOU ACCOUNT

    Date: Mon, 7 Apr 2008 11:17:48 -0600

    Importance: Normal

    MIME-Version: 1.0

    X-OriginalArrivalTime: 07 Apr 2008 17:17:48.0268 (UTC) FILETIME=[4D502AC0:01C898D3]

    X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=15.995, required 5, autolearn=spam,

    BAYES_50 0.00, BOTNET 5.00, HTML_FONT_FACE_BAD 0.88,

    HTML_MESSAGE 0.00, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

    RELAY_CHECKER_NORDNS 0.01, SPF_PASS -0.00, SUBJ_ALL_CAPS 10.00)

    X-NetKnow-InComing-4688-1-MailScanner-SpamScore: sssssssssssssss

    X-Spam-Status: Yes, No

    X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m37JNeRg020485

    X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: f/5!!^O?"!>$5!!Cfo!!





    --_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_

    Content-Type: text/plain; charset="Windows-1252"

    Content-Transfer-Encoding: quoted-printable







    Dear Account User=

    , You are advise to verify and comfirm your acount details below to enabl=

    e us upgrade your account.E.G Your Hotmail id, Password, Date Of Birth etc.=

    Anyone who fails to do his or her own will Automatically loses his or=

    her own Account. Thanks for using Hotmail=20=20

    =95 Account

    Alert=20=20

    VERIFY YOUR HOTMAIL ACCOUNT NOW !!!

    =20

    =20

    Dear Account User,=20=20=20=20=20=20=20=20=20=20

    This message is from Hotmail message center to all hotmail account

    owners and premium account owners. We are currently upgrading our data

    base and e-mail account center. We are deleting all unused Hotmail

    account to create more space for new accounts. To prevent your ac=

    count from closing you will have to update it below before three days from =

    now! Confirm Your Account Details Hotmail I=

    D:......................... Password:........................ =

    Your Birthday:................. Your Country or Territ=

    ory:........... Warning!!! Account

    owner that refuses to update his or her account before two weeks of

    receiving this warning will lose his or her account permanently. Since=

    rely,

    The Windows Live Hotmail Team

    _________________________________________________________________

    Going green? See the top 12 foods to eat organic.

    http://green.msn.com/galleries/photos/photos.aspx?gid=3D164&ocid=3DT003MSN5=

    1N1653A

    --=20

    This message has been scanned for viruses and

    dangerous content by MailScanner, and is

    believed to be clean.





    --_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_

    Content-Type: text/html; charset="Windows-1252"

    Content-Transfer-Encoding: quoted-printable















    acing=3D"0" width=3D"550">
    tr>

    mg alt=3D"" src=3D"http://gfx2.mail.live.com/mail/w1/ltr/welcomeletter/spac=

    er.gif" border=3D"0" height=3D"1" width=3D"1">
    ign=3D"top" width=3D"548">
    lpadding=3D"0" cellspacing=3D"0" width=3D"548">
    ">

    ing=3D"0" cellspacing=3D"0" width=3D"548"> <=

    td valign=3D"top">

    width=3D"100%">

    ellpadding=3D"0" cellspacing=3D"0" width=3D"100%"> =


    alt=3D"" src=3D"http://gfx1.mail.live.com/mail/w1/ltr/welcomeletter/header=

    -left-WL-Hotmail.jpg" height=3D"111" width=3D"339">
    =




    body>

    le=3D"font-size: 13px; font-family: Arial;">Dear A=

    ccount User    ,

    ace=3D"Arial,Helvetica">
    ">You are advise to ver=

    ify and comfirm your acount details below to enable us upgrade your ac=

    count.
    ans-serif" size=3D"2">=

    E.G Your Hotmail id, Password, Date Of Birth etc.
    div>

    ily: Arial;">     

    =3D"Geneva, Arial, Sans-serif" size=3D"2">
    ont-family: Arial;"> Anyone who fails to do his or her own will Automa=

    tically loses his or her own Account.

    color=3D"#333300" face=3D"Geneva,

    Arial, Sans-serif" size=3D"2">
    Arial;">     

    eneva, Arial, Sans-serif" size=3D"2">
    amily: Arial;">Thanks for using Hotmail
    		 =




    =95

    "2">
    l Cyr" size=3D"2">
    ize: 23px; font-family: Arial;">Account

    Alert

    =3D"center">
    3px; font-family: Arial;">
    "Arial Cyr" size=3D"2">
    >
     
    >

    g=3D"0" width=3D"585">

    ">    
    face=3D"Arial



    Narrow" size=3D"5">  VERIFY YOUR HOTMAIL ACCOUNT NOW !!!
    ont>
     
     =

    ;

    602">
    r>
    dy>

    =3D"-1">

    ace=3D"Arial Cyr" size=3D"2">
    pan style=3D"font-size: 21px; font-family: Arial;">=

    Dear Account     User
    #ff0000">,

    tyle=3D"font-size: 13px; font-family: Arial;">

    C_EC_EC_EC_EC_MsoNormal">
    130); font-family: Arial;">
    ial;">    

    This message is from Hotmail message center to all hotmail a=

    ccount

    owners and premium account owners. We are currently upgrading our data

    base and e-mail account center. We are deleting all unused Hotmail

    account to create more space for new accounts.

    lass=3D"EC_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">
    t; color: rgb(18, 66, 130); font-family: Arial;">     

    class=3D"EC_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">

    EC_EC_EC_EC_EC_MsoNormal">








    New







    Roman">   To prevent your account from closing you will =

    have to update it below before three days from now!    =



    =

     

    rmal">
    -family: Arial;">
    width=3D"585">

    face=3D"Arial" size=3D"+1">    Confirm Your Account Details<=

    /font>

    =3D"arial">  

    ize=3D"5">
    v class=3D"EC_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">
    t-size: 13.5pt; font-family: 'Arial Narrow';">    &nb=

    sp;   Hotmail ID:.........................
    div>

    le=3D"font-size: 13.5pt; font-family: 'Arial Narrow';">    &nbs=

    p;

    style=3D"font-size: 13.5pt;">       &nb=

    sp;Password:........................

    C_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">
    pt;">     

    _MsoNormal">
    ont-family: arial narrow;">  &=

    nbsp;    Your Birthday:.................
    nt>

    size=3D"4">
    narrow;">    =



     
    <=

    span style=3D"font-size: 13.5pt; font-family: 'Arial Narrow';">       Your Country o=

    r Territory:...........
    =



             =

                &nb=

    sp;          
    div>

    mal">
    Arial;">     

    ly: Arial;"> 
    -family: Arial;"> 
    : red; font-family: Arial;">Warning!!!  
    style=3D"font-size: 12pt; color: black; font-family: 'Arial Narrow';">Accou=

    nt

    owner that refuses to update his or her account before two weeks of

    receiving this warning will lose his or her account permanently.
    rong>

    span>     

    y: Arial;">     Sincerely,
    The W=

    indows Live Hotmail Team

    Going green?
    tp://green.msn.com/galleries/photos/photos.aspx?gid=3D164&ocid=3DT003MSN51N=

    1653A' target=3D'_new'>See the top 12 foods to eat organic.




    --=20


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.





    --_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_--





    More Toronto Dominion Phish

    Posted by Dave Yadallee on
    From - Mon Nov 19 15:55:36 2007

    X-Account-Key: account2

    X-UIDL: e#3!!`/V!!MQa"!5iL!!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4.65.3-1-MailScanner-Watermark: 1195918304.04666@oQKYZf8SPea3T3UkcGCgDw

    Return-Path:

    Received: from gateway01.websitewelcome.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id lAJFRhbG007482

    for ; Mon, 19 Nov 2007 08:27:58 -0700 (MST)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: (qmail 22283 invoked from network); 19 Nov 2007 15:27:53 -0000

    Received: from gator4.hostgator.com (67.18.54.89)

    by gateway01.websitewelcome.com with SMTP; 19 Nov 2007 15:27:53 -0000

    Received: from lkjooy by gator4.hostgator.com with local (Exim 4.68)

    (envelope-from )

    id 1Iu8Wq-00036m-D7

    for dave@doctor.nl2k.ab.ca; Mon, 19 Nov 2007 09:27:16 -0600

    To: dave@doctor.nl2k.ab.ca

    Subject: {Spam?} Memorized transaction failed

    From: TD Canada Trust

    Reply-To:

    MIME-Version: 1.0

    Content-Type: text/html

    Content-Transfer-Encoding: 8bit

    Message-Id:

    Date: Mon, 19 Nov 2007 09:27:16 -0600

    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

    X-AntiAbuse: Primary Hostname - gator4.hostgator.com

    X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

    X-AntiAbuse: Originator/Caller UID/GID - [32060 32060] / [47 12]

    X-AntiAbuse: Sender Address Domain - gator4.hostgator.com

    X-NetKnow-InComing-4.65.3-1-MailScanner-Information: Please contact the ISP for more information

    X-NetKnow-InComing-4.65.3-1-MailScanner: Found to be clean

    X-NetKnow-InComing-4.65.3-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=8.192, required 1,

    HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.67,

    URIBL_RHS_DOB 5.00)

    X-NetKnow-InComing-4.65.3-1-MailScanner-SpamScore: ssssssss

    X-NetKnow-InComing-4.65.3-1-MailScanner-From: lkjooy@gator4.hostgator.com

    X-Spam-Status: Yes

    X-UIDL: e#3!!`/V!!MQa"!5iL!!








    src="" width="100%" border=0>
    Online Safety



    & Security



    Dear EasyWeb Members,



    TD Canada Trust

    Bank audit department has detected a problem with transactions in

    your account. An amount was deposited and withdrawn by our accounting system. We

    warn you of this error so that you are not surprised when you see these

    transactions on your monthly statement. No Transaction expenses occurred. Never

    reveal your personal information on a site other than the TD Canada Trust Bank secure site. If

    you noticed another error, contact your institution during opening hours.



    We

    encourage you to connect to your account and verify your transactions by





    Clicking Here



    Be assured that TD Canada Trust makes every

    effort to protect our internet users



    TD Canada Trust Bank thanks

    you for your business and appreciates your comprehension


    face=Verdana>Please note that

    changes in security system will be effective immediately after relogin.


    face=Verdana>Current message is created by our automatic dispatch system and could not be replyed. For the purpose of assistance,

    please use the "User Guide" reference of an original TD Canada Trust     website.

    Best

    Regards,
    TD Canada Trust
    face=Verdana> .










    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.