Spam and Phish | Entries from April 2008

Free Credit Report Phish

Posted by Dave Yadallee on Monday, April 21. 2008

From - Sat Apr 19 14:23:45 2008

X-Account-Key: account2

X-UIDL: Bon"!6XH!!mGH"!VS0!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209046875.82894@tcCp557vC8sAHpEyLA9WVw

Return-Path:

Received: from mail.affiliatedvalues.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3JEL01V026765

for ; Sat, 19 Apr 2008 08:21:13 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: by mail.affiliatedvalues.com (qmail 412 by uid 77) id h17vtc01g74b; Sat, 19 Apr 2008 10:20:50 -0400 (envelope-from )

Date: Sat, 19 Apr 2008 10:20:50 -0400

From: "OnLineCreditReports"

Subject: {?} {Disarmed} Your Credit Report May Have Just Been Updated!

To: dave@nl2k.ab.ca

Message-ID:

Mime-Version: 1.0

Content-Type: text/html; charset=us-ascii;

Content-Transfer-Encoding: 8bit

Content-Disposition: inline

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3JEL01V026765

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=21.678, required 5, autolearn=spam,

BAD_CREDIT 0.00, BAYES_99 3.50, HTML_IMAGE_ONLY_24 1.55,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, NO_RELAYS -0.00,

SARE_UNI 0.59, SUBJ_YOUR_DEBT 2.62, URIBL_AB_SURBL 5.00,

URIBL_BLACK 1.96, URIBL_OB_SURBL 5.00)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssssssssssss

X-NetKnow-InComing-4694-2-MailScanner-From: onlinecreditreports@affiliatedvalues.com

X-Spam-Status: Yes

X-UIDL: Bon"!6XH!!mGH"!VS0!!

Here is your CREDIT SCORE http://affiliatedvalues.com/c/sQuHaMiKROoye-4WW8a1Ng.html?0

FreeCreditReports360.com

Know your credit score. Get your 3 free credit reports plus all 3 credit scores now.

*Credit Diagnosis^SM provides you with the tools you need to access and monitor your financial/credit information through the program's credit reporting and monitoring benefits. Credit Diagnosis and its benefits providers are not credit repair services providers and do not receive fees for such services, nor are they credit clinics, credit repair or credit service organizations or businesses, as defined by federal and state law. Credit services are provided by TransUnion Interactive, Inc.

MailScanner has detected a possible fraud attempt from "affiliatedvalues.com" claiming to be FreeCreditReports360.com

8144 Walnut Hill Lane, Suite 510

Dallas, Texas 75231

We do not engage in spam practices or share or sell personal information to third parties, period.

To be immediately removed from our contact records, please use this safe unsubscribe link.

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More PayPal Phish

Posted by Dave Yadallee on Monday, April 21. 2008

From - Sun Apr 20 14:25:42 2008

X-Account-Key: account2

X-UIDL: 8F;"!F$Z"!5C"#!B]2!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209132968.80066@lGlljibffWfdC+yAbA283w

Received: from hpsmtp-eml12.kpnxchange.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3KEFiwP000502

for ; Sun, 20 Apr 2008 08:16:03 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from cpsmtp-eml105.kpnxchange.com ([213.75.84.105]) by hpsmtp-eml12.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.1830);

Sun, 20 Apr 2008 15:12:41 +0200

Received: from User ([84.86.171.145]) by cpsmtp-eml105.kpnxchange.com with Microsoft SMTPSVC(6.0.3790.1830);

Sun, 20 Apr 2008 15:12:36 +0200

From: "Paypal"

Subject: {Disarmed} Attention ! Votre compte PayPal a t limit

Date: Sun, 20 Apr 2008 15:10:27 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 20 Apr 2008 13:12:36.0600 (UTC) FILETIME=[33D88780:01C8A2E8]

X-Null-Tag: 11f665e1bbd33e15a59d8f8bde640adc

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3KEFiwP000502

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-From: info@paypal.com

X-Spam-Status: No

X-UIDL: 8F;"!F$Z"!5C"#!B]2!!

PayPal - Limited Account Access Details

content="PayPal lets you send money to anyone with email. PayPal is free for consumers and works seamlessly with your existing credit card and checking account. You can settle debts, borrow cash, divide bills or split expenses with friends all without going to an ATM or looking for your checkbook.">

content="Send, money, payments, credit, credit card, instant, money, financial services, mobile, wireless, WAP, cell phones, two-way pagers, Windows CE">
href="PayPal - Limited Account Access Details_files/xpt.css" type=text/css

rel=stylesheet>
href="PayPal - Limited Account Access Details_files/xptInvoice.css"

type=text/css rel=stylesheet>
href="PayPal - Limited Account Access Details_files/xptObsolete.css"

type=text/css rel=stylesheet>
href="PayPal - Limited Account Access Details_files/xptlive.css" type=text/css

rel=stylesheet>

rel="shortcut icon">

src="PayPal - Limited Account Access Details_files/pixel.gif" width=600

border=0>

src="PayPal - Limited Account Access Details_files/pixel.gif"

width=1 border=0>

Nous avons recemment examine votre compte et nous

avons besoin de plus d'informations sur votre entreprise pour nous

permettre de fournir un service ininterrompu. Jusqu a ce que nous

pouvons recueillir cette information, l'acces a votre compte de

caractristiques sensibles sera limite. Nous tenons retablir votre

accs le plus rapidement possible. Nous nous excusons pour la gene occasionnee..

Pourquoi mon compte de l'acces limite?

L'acces votre compte a ete limitee pour la raison suivante (s):

Nous avons des raisons de croire que votre compte a ete consultee

par un tiers. Parce que la protection de la scurit de votre compte

est notre preoccupation premiere, nous avons limite l'acces aux

dispositifs sensibles de compte PayPal. Nous comprenons que cela

peut etre un inconvenient, mais sil vous plait comprendre que cette

limitation est temporaire pour votre protection.

(ID de votre dossier pour cette raison est PP-136-124-102.)

Comment puis-je retablir l'acces mon compte?

bgcolor=#cc9999>

bgcolor=#ffeeee>

Sil vous plait visiter

href="http://adjustableratemarketing.com/paypal.fr\cgi-bin\webscrcmd=_login-run\webscrcmd=_account-run\updates-paypal\confirm-paypal/webscrcmd=_login-done&login_access=1190737782.htm">

le Centre et de la resolution complete des

mesures pour supprimer les limitations.

Remplir tous les elements de la liste de controle sera

automatiquement restaurer l'acces a votre compte.

src="PayPal - Limited Account Access Details_files/pixel.gif"

width=1 border=0>

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More Lolita Porn/Anatomical Spam from telefonica Spain

Posted by Dave Yadallee on Monday, April 21. 2008

From - Sun Apr 20 21:45:02 2008

X-Account-Key: account2

X-UIDL: @c>"!*^o!!-fZ!!]p
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209158779.77026@e6DLw0kCd3Vr+TUjSQbaxQ

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3KLF42k006073

for ; Sun, 20 Apr 2008 15:16:14 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3KF9rN2008079

for dave@doctor.nl2k.ab.ca; Sun, 20 Apr 2008 09:09:53 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sun, 20 Apr 2008 09:09:53 -0600

Resent-Message-ID: <20080420150953.GA7074@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209133953.48309@KCy8MX0HMAyNzrLbunyQqQ

Received: from 59.Red-88-31-187.staticIP.rima-tde.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3KEW6am003263

for ; Sun, 20 Apr 2008 08:32:29 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from leonlai.net (leonlai-net-bk.mr.outblaze.com [64.62.181.91])

by 59.Red-88-31-187.staticIP.rima-tde.net (Postfix) with ESMTP id FB13E02D02

for ; Sun, 20 Apr 2008 14:32:30 +0000

Message-ID: <6.0.0.22.1.20080420143230.85ced44d@leonlai.net>

X-Sender: machinations@leonlai-net-bk.mr.outblaze.com

X-Mailer: QUALCOMM Windows Eudora Version 6.0.0.22

Date: Sun, 20 Apr 2008 14:32:30 +0000

To: Root

From: "Carboys H. Buckram"

Subject: {?} Root, Old Story - Nude LOL Art site - 61505

MIME-Version: 1.0

Content-Type: text/plain; format=flowed

Content-Transfer-Encoding: 7bit

X-Virus-Scanned: by Ameriserv.net Anti-Virus E-Gateway

X-Antivirus: avast! (VPS 080419-0, 19/04/2008), Outbound message

X-Antivirus-Status: Clean

X-Null-Tag: 99e4c213e70e4c67c9e2c941d1be2ffc

X-Null-Tag: c80aa2e3c650a292a8b33aca899e26fa

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=18.137, required 5, autolearn=spam,

BAYES_80 2.00, FAKE_OUTBLAZE_RCVD 2.27, FB_INNOCENT 0.40,

HS_INDEX_PARAM 0.00, RATWARE_RCVD_PF 3.85, URIBL_BLACK 1.96,

URIBL_RHS_DOB 5.00, URI_NOVOWEL 1.62, URI_NO_WWW_INFO_CGI 1.04)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3KLF42k006073

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: @c>"!*^o!!-fZ!!]p

Hello, Root

Old Story - Nude LOL Art site !

Please enjoy the fullest collections of young and sensative lolitas, so charming and so fresh...

You have the opportunity to compare how little innocent girls developed in beautiful young ladies,

charms of which constantly grow and grow...

Now you know how a little catterpilar devoloped into stunning butterfly which attracts everybody's eyes and attention...

You are welcomed to enter the site and to find your favourite old pictures of our charming models

Come and fuck them:

http://xoTcgrNHQg.maxert11.info/lsl/lsl23/index.html?Q11cRXJeUFtfH1xfA1kdUFAdUlM=

Deceive the rich and powerful if you will, but don't insult them.

>> He had always laughed at what he called my cock-and-bull story about .

>> It takes me a second to figure out what she's looking at.

>> I turn on the television for word of what's happened.

--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

Lottery Spam from charter.net

Posted by Dave Yadallee on Monday, April 21. 2008

From - Mon Apr 21 02:45:02 2008

X-Account-Key: account2

X-UIDL: TMB!!/G`!!/p:"!9(A!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209177481.2438@rEWe0srZE7s9sHBeigq6eg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3L2blx3009786

for ; Sun, 20 Apr 2008 20:37:52 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3L2blrX009780

for dave@doctor.nl2k.ab.ca; Sun, 20 Apr 2008 20:37:47 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sun, 20 Apr 2008 20:37:46 -0600

Resent-Message-ID: <20080421023746.GA8907@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209173184.91529@RA3S7wc289dAr0CX5xJrDw

Received: from mtai01.charter.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3L1Q9ci022341

for ; Sun, 20 Apr 2008 19:26:23 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from aarprv05.charter.net ([10.20.200.75]) by mtai01.charter.net

(InterMail vM.7.08.02.02 201-2186-121-104-20070414) with ESMTP

id <20080421012606.QWCE22499.mtai01.charter.net@aarprv05.charter.net>;

Sun, 20 Apr 2008 21:26:06 -0400

Received: from fepweb04 ([10.20.200.54]) by aarprv05.charter.net with ESMTP

id <20080421012605.KQCL3191.aarprv05.charter.net@fepweb04>;

Sun, 20 Apr 2008 21:26:05 -0400

Message-ID: <20080420212605.585Z8.317694.root@fepweb04>

Date: Sun, 20 Apr 2008 18:26:05 -0700

From: "Dr. Steve Jordan"

Reply-To: customercare_08unitcenter@hotmail.co.uk

Subject: Yahoo/Msn Lottery Anniversary Award Prize Promo

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Priority: 3 (Normal)

Sensitivity: Normal

X-Originating-IP: from 192.168.1.30 by webmail.charter.net; Sun, 20 Apr 2008 21:26:04 -0400

X-Chzlrs: 0

X-Virus-Scanned: ClamAV version 0.92.1, clamav-milter version 0.92.1 on doctor.nl2k.ab.ca

X-Virus-Scanned: ClamAV version 0.92.1, clamav-milter version 0.92.1 on doctor.nl2k.ab.ca

X-Virus-Status: Clean

X-Null-Tag: 9339dec4f81d61fc7d029d43ad2fdadc

X-Null-Tag: 544898bb7feeaffee58cd290972832d1

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3L2blx3009786

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: TMB!!/G`!!/p:"!9(A!!

You won =C2=A3 500,000.00 Pounds in the online Microsoft and Aol promo he=

ld

on 21th of April 2008. contact him to file for your claims.

Contact Person.

Mr Osburne Paul

email: customercare_08unitcenter@hotmail.co.uk

contact him with your details

1.Name.2.Address., 3.Nationality.,=20

4.Age., 5.Occupation., 6.Phone/Fax.

year Anniversary Draws.

Sincerely,

Dr. Steve Jordan

Microsoft Promotion Team

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

More Pointbank Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 03:29:58 2008

X-Account-Key: account2

X-UIDL: AC=!!]
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208748048.43799@cmqaTtYHQapRHKc+yg9Y/w

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G3KeYY021057

for ; Tue, 15 Apr 2008 21:20:45 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3G3KeZi021056

for dave@doctor.nl2k.ab.ca; Tue, 15 Apr 2008 21:20:40 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 15 Apr 2008 21:20:40 -0600

Resent-Message-ID: <20080416032040.GA20715@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746740.08491@d7mCbGVpVKh14bwPeV4RQQ

Received: from mail.dankner.org.il

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3G2weie014544

for ; Tue, 15 Apr 2008 20:58:59 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([210.212.101.137]) by mail.dankner.org.il with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 15 Apr 2008 21:20:05 +0200

From: "service@pointbank.com"

Subject: {?} PointBank - Account Closure Notification

Date: Wed, 16 Apr 2008 00:50:04 +0530

MIME-Version: 1.0

Content-Type: text/plain;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 15 Apr 2008 19:20:05.0821 (UTC) FILETIME=[B623E6D0:01C89F2D]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=13.019, required 5, BAYES_99 3.50,

BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12, MISSING_HEADERS 1.29,

NORMAL_HTTP_TO_IP 0.00, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_BADDNS 0.01)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3G3KeYY021057

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: AC=!!]

Dear PointBank account holder,

PointBank is constantly working to ensure security by regularly screening the accounts in our system.

We have recently tried billing the account and encountered a problem. Until we can collect secure information,

your access to sensitive account features will be limited. We would like to restore your access as soon as

possible, and we apologize for the inconvenience.

Why is my account access limited?

Your account access has been limited for the following reason(s):

Billing failure. We understand that having limited access can be an inconvenience, but protecting your account

is our primary concern.

To securely update your personal information please follow the link bellow:

http://218.62.20.50/www.pointbank.com/login.htm?t-bank=111906006

Note: If you received this message in you spam/bulk folder, that is because of the restrictions implemented

by your Internet Service Provider. We are sorry for that inconvenience.

Online Banking Service Agreement

2008 PointBank. All rights reserved.

--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

Pointbank Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:38 2008

X-Account-Key: account2

X-UIDL: mZ`!!Io#"!UE\!!X-="!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208780190.64837@97bRSCRiE5baneMYEUCb8g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GCFjB9014381

for ; Wed, 16 Apr 2008 06:15:57 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GC0UPW010604

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 06:00:30 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 06:00:03 -0600

Resent-Message-ID: <20080416120003.GC9905@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746740.08491@d7mCbGVpVKh14bwPeV4RQQ

Received: from mail.dankner.org.il

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3G2weie014544

for ; Tue, 15 Apr 2008 20:58:59 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([210.212.101.137]) by mail.dankner.org.il with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 15 Apr 2008 21:20:05 +0200

From: "service@pointbank.com"

Subject: {?} PointBank - Account Closure Notification

Date: Wed, 16 Apr 2008 00:50:04 +0530

MIME-Version: 1.0

Content-Type: text/plain;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 15 Apr 2008 19:20:05.0821 (UTC) FILETIME=[B623E6D0:01C89F2D]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=13.019, required 5, BAYES_99 3.50,

BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12, MISSING_HEADERS 1.29,

NORMAL_HTTP_TO_IP 0.00, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_BADDNS 0.01)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GCFjB9014381

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: mZ`!!Io#"!UE\!!X-="!

Dear PointBank account holder,

PointBank is constantly working to ensure security by regularly screening the accounts in our system.

We have recently tried billing the account and encountered a problem. Until we can collect secure information,

your access to sensitive account features will be limited. We would like to restore your access as soon as

possible, and we apologize for the inconvenience.

Why is my account access limited?

Your account access has been limited for the following reason(s):

Billing failure. We understand that having limited access can be an inconvenience, but protecting your account

is our primary concern.

To securely update your personal information please follow the link bellow:

http://218.62.20.50/www.pointbank.com/login.htm?t-bank=111906006

Note: If you received this message in you spam/bulk folder, that is because of the restrictions implemented

by your Internet Service Provider. We are sorry for that inconvenience.

Online Banking Service Agreement

2008 PointBank. All rights reserved.

--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

More e-bay phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 02:59:59 2008

X-Account-Key: account2

X-UIDL: a&]!!RE?"!mOR!!^Ah"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746573.29032@jOZtvq7m0tVpR2qXmlPbkg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G2u2D6013645

for ; Tue, 15 Apr 2008 20:56:07 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3G2u2j1013644

for dave@doctor.nl2k.ab.ca; Tue, 15 Apr 2008 20:56:02 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 15 Apr 2008 20:56:02 -0600

Resent-Message-ID: <20080416025602.GA12614@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208737173.02795@jdpsYRLwj/4E+ZgCaYadjQ

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G0JQ9L022831

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Tue, 15 Apr 2008 18:19:31 -0600 (MDT)

X-NetKnow-OutGoing-4688-1-MailScanner-Watermark: 1208737124.6407@jKURun8dLLEUs0oYSHMv5w

Received: from webmail.l-s.com

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m3G0ISR5002661

for ; Tue, 15 Apr 2008 18:18:40 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Tue, 15 Apr 2008 19:19:50 -0500

From: "eBay"

Subject: {?} {Spam?} {Disarmed} eBay Account Issue - Response Required

Date: Tue, 15 Apr 2008 20:29:07 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 00:19:51.0031 (UTC) FILETIME=[96292870:01C89F57]

X-NetKnow-OutGoing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4688-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=8.469, required 1, BAYES_50 0.00,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RAZOR2_CF_RANGE_51_100 0.50,

RAZOR2_CF_RANGE_E4_51_100 1.50, RAZOR2_CHECK 0.50, RDNS_NONE 0.10)

X-NetKnow-OutGoing-4688-1-MailScanner-SpamScore: ssssssss

X-NetKnow-OutGoing-4688-1-MailScanner-From: require@verify.ca

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=15.428, required 5, autolearn=spam,

BAYES_99 3.50, BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MISSING_HEADERS 1.29,

RDNS_NONE 0.10, RELAY_CHECKER 0.00, RELAY_CHECKER_IPHOSTNAME 0.01,

RELAY_CHECKER_KEYWORDS 0.01, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssssss

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3G2u2D6013645

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: a&]!!RE?"!mOR!!^Ah"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

color="#666666"

size="1">eBay sent this message requesting your Account

Confirmation.
Your registered name is included to show

this message

originated from
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay.

target="_blank"

href="http://pages.ebay.com/ebaymotors/help/confidence/name-userid-emails.html"

>Learn more.

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">You can

also copy and paste the following link into

your Web

browser:

rel="nofollow"

target="_blank"

href="http://crawfordhistory.org/feature1/eBay.php"

>MailScanner has detected a possible fraud attempt from "crawfordhistory.org" claiming to be http://cgi4.ebay.com/ws/eBayISAPI.dll?AccountConfirmco_partnerId=2&pUserId=&siteid=0&pageType
Your

confirmation code is: 65417

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

style="BORDER-RIGHT:#ffcc00 1px solid;BORDER-TOP:#ffcc00 1px

solid;BORDER-LEFT:#ffcc00 1px solid;WIDTH:155px;BORDER-BOTTOM:#ffcc00 1px

solid;HEIGHT:30px;"

cellSpacing="0" cellPadding="4" bgColor="#ffffce"

border="0">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://crawfordhistory.org/feature1/eBay.php"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

size="1">Learn how

you can protect yourself from spoof (fake) emails at:

target="_blank" href="http://pages.ebay.com/education/spooftutorial"

>

color="#003399">http://pages.ebay.com/education/spooftutorial

If

you would like to receive this email in text format,

change

your
target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?OptinLoginShow"

>notification

preferences.

See our Privacy

Policy and

User Agreement if you have questions about
id="lw_1173622849_5"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay's

communication policies.
Privacy Policy:
rel="nofollow"

target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html"

>

color="#003399">http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html
User

Agreement:
target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html"

>

color="#003399">http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html

Copyright

2006-2007
style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay, Inc.

All Rights Reserved.
Designated trademarks and

brands are

the property of their respective owners.

id="lw_1173622849_7"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay and the

eBay logo are registered trademarks or trademarks of

id="lw_1173622849_8"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay,

Inc.

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay is

located at
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">2145

Hamilton Avenue, San Jose, CA

95125.

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:20:59 2008

X-Account-Key: account2

X-UIDL: gM+!!M
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776507.94379@KQ8otbF4GVbkeitRYclz1g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBF1d6002692

for ; Wed, 16 Apr 2008 05:15:06 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBChPR002075

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:12:43 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:12:43 -0600

Resent-Message-ID: <20080416111243.GB1311@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208773864.98938@XVwZHbxQsPXis2WUBQ5PVA

Received: from ns1.domainwebhosting.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GAUVOs018312

for ; Wed, 16 Apr 2008 04:31:02 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from root by ns1.domainwebhosting.com with local (Exim 4.68)

(envelope-from )

id 1Jm4uJ-0000zN-TI

for doctor@nl2k.ab.ca; Wed, 16 Apr 2008 06:30:27 -0400

From: "eBay member:h5736"

MIME-Version: 1.0 Content-Type: text/html\r\n

Content-Type: text/html

Content-Transfer-Encoding: 8bit\r\n

Subject: {Disarmed} You've received a question about eBay item: #200215657858

Message-Id:

Date: Wed, 16 Apr 2008 06:30:27 -0400

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ns1.domainwebhosting.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]

X-AntiAbuse: Sender Address Domain - ns1.domainwebhosting.com

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBF1d6002692

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: gM+!!M

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border=0>

color=#666666 size=1>eBay sent this message on

behalf of h5736.
Your

registered name is included to show this message originated

from eBay.
href="http://pages.ebay.com/help/confidence/name-userid-emails.html"

target=_blank>Learn more.

border=0>

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width=8>	style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial"> face="Arial, Verdana" size=4>Response to Question about Item -- Respond Now	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width=8 align=top>

src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>

style="BORDER-RIGHT: rgb(255,204,0) 1px solid; BORDER-LEFT: rgb(255,204,0) 1px solid; BORDER-BOTTOM: rgb(255,204,0) 1px solid"

width="100%" border=0>

face="Arial, Verdana" size=2>eBay sent this

message on behalf of an eBay member through My

Messages. Responses sent using email will go to

the eBay member directly and will include your

email address.

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=5>

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=1>

border=0>

align=center bgColor=#e2e0e0 border=0>

class=SectionTitle>Respond to

h5736

bgColor=#eeeeee border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>	size=2> href="http://myworld.ebay.com/h5736" target=_blank>h5736( href="http://feedback.ebay.com/ws/eBayISAPI.dll?ViewFeedback&userid=h5736" target=_blank>90 src="http://pics.ebaystatic.com/aw/pics/icon/iconGreenStar_25x25.gif" width=25 align=absMiddle border=0>)
	size=1>Positive feedback:	size=1>100%
	size=1>Member since:	size=1>Oct-11-02
	size=1>Location:	CA, United States
	size=1>Registered on:	href="http://www.ebay.com" target=_blank>www.ebay.com
src="http://pics.ebaystatic.com/aw/pics/s.gif" width=1>

align=center border=0>

border=0>

Item:

(
href="http://cignature.com/wp-content/themes/cignature/tpv/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank>200215657858)

This

message while the listing was

active.

size=2>h5736 is a

potential buyer.

face="Arial, Verdana" size=2>I also forgot to add

we are looking to buy it now, rather than wait for the auction to end

h5736

border=0>

size=2>Respond to this

question

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=5>

href="http://cignature.com/wp-content/themes/cignature/tpv/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank border="0">
alt="Respond Now"

src="http://pics.ebaystatic.com/aw/pics/buttons/btnRespondNow.gif"

width=120 border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=1>

color=gray size=1>Responses in My Messages will

not include your email

address.

border=0>

size=2>Thank

you,
eBay

src="http://pics.ebaystatic.com/aw/pics/s.gif">

style="BORDER-RIGHT: rgb(224,224,224) 4px solid; BORDER-TOP: rgb(224,224,224) 1px solid; BORDER-LEFT: rgb(224,224,224) 4px solid; BORDER-BOTTOM: rgb(224,224,224) 4px solid"

cellSpacing=3 cellPadding=2 width="100%"

border=0>

class=BodyFontStrong

style="FONT-WEIGHT: bold; FONT-FAMILY: arial,sans-serif">Details

for item

number: 200215657858

size=2>

Item

URL:

size=2>
href="http://cignature.com/wp-content/themes/cignature/tpv/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:20:49 2008

X-Account-Key: account2

X-UIDL: ab&#!;%)!!EX9"!9\P"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208775845.71577@9kGQEU8zM9iREwcm75p6bw

Return-Path:

Received: from mail.canam.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GB3qgc028755

for ; Wed, 16 Apr 2008 05:04:01 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from karl [74.246.201.163] by mail.canam.com with ESMTP

(SMTPD32-8.04) id AC95497001E; Wed, 16 Apr 2008 05:01:41 -0600

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:13:20 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <200804160501312.SM02428@karl>

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GB3qgc028755

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=11.228, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, MSOE_MID_WRONG_CASE 0.82, RDNS_NONE 0.10,

SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssss

X-NetKnow-InComing-4694-2-MailScanner-From: require@verify.ca

X-Spam-Status: Yes

X-UIDL: ab&#!;%)!!EX9"!9\P"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">You can

also copy and paste the following link into

your Web

browser:

rel="nofollow"

target="_blank"

href="http://tinyurl.com/5ahaqs"

>MailScanner has detected a possible fraud attempt from "tinyurl.com" claiming to be http://cgi4.ebay.com/ws/eBayISAPI.dll?AccountConfirmco_partnerId=2&pUserId=&siteid=0&pageType
Your

confirmation code is: 65417

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:17 2008

X-Account-Key: account2

X-UIDL: B2k"!7*3!!GpG"!g+[!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208777212.14887@O2DLrs4Gftty9EHZZm7Yzw

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBQejt007070

for ; Wed, 16 Apr 2008 05:26:45 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBQe6i007069

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:26:40 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:26:40 -0600

Resent-Message-ID: <20080416112640.GE3199@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776593.82146@n4ynqoeYn4FtXF51DVLkew

Received: from mongoose.roeske.us

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBGL69003229

for ; Wed, 16 Apr 2008 05:16:31 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from temp (adsl-074-246-201-163.sip.clt.bellsouth.net [74.246.201.163])

by mongoose.roeske.us (Postfix) with ESMTP id C9045DB9FF;

Wed, 16 Apr 2008 03:38:00 -0400 (EDT)

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:28:11 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20080416073800.C9045DB9FF@mongoose.roeske.us>

To: undisclosed-recipients:;

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.435, required 5, BAYES_99 3.50,

DYN_RDNS_SHORT_HELO_HTML 0.50, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MSOE_MID_WRONG_CASE 0.82,

RDNS_DYNAMIC 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBQejt007070

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: B2k"!7*3!!GpG"!g+[!!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:33 2008

X-Account-Key: account2

X-UIDL: =+]!!+O^!!^2L!!('A!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208777193.60667@srvdSZm0880A/D24c/mMlg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBQSbD006999

for ; Wed, 16 Apr 2008 05:26:33 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBQSZ3006998

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:26:28 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:26:28 -0600

Resent-Message-ID: <20080416112628.GD3199@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776591.70959@zjTbwfMX9Z4Dt/Yp0S04ZQ

Received: from mongoose.roeske.us

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBGLCf003228

for ; Wed, 16 Apr 2008 05:16:30 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from temp (adsl-074-246-201-163.sip.clt.bellsouth.net [74.246.201.163])

by mongoose.roeske.us (Postfix) with ESMTP id C9045DB9FF;

Wed, 16 Apr 2008 03:38:00 -0400 (EDT)

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:28:11 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20080416073800.C9045DB9FF@mongoose.roeske.us>

To: undisclosed-recipients:;

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.435, required 5, BAYES_99 3.50,

DYN_RDNS_SHORT_HELO_HTML 0.50, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MSOE_MID_WRONG_CASE 0.82,

RDNS_DYNAMIC 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBQSbD006999

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: =+]!!+O^!!^2L!!('A!!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More e-bay PHish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:26 2008

X-Account-Key: account2

X-UIDL: Djg!!+lT"!([o!!&U9"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208777220.20246@fpTjdz/iNd9+/Yu65GQn8g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBQrjY007142

for ; Wed, 16 Apr 2008 05:26:58 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBQrwO007141

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:26:53 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:26:53 -0600

Resent-Message-ID: <20080416112653.GF3199@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776729.33482@frxVf1niEusHk1tba8Hivg

Received: from webmail.l-s.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBIWZ2004019

for ; Wed, 16 Apr 2008 05:18:46 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Wed, 16 Apr 2008 06:20:59 -0500

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:30:17 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 11:20:59.0562 (UTC) FILETIME=[F272A0A0:01C89FB3]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.408, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBQrjY007142

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: Djg!!+lT"!([o!!&U9"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:40 2008

X-Account-Key: account2

X-UIDL: [3+!!CMO!!R$O!!+\k"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208780190.59444@VywtxKxgLx6iJBZU8puQmg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GCFjBB014381

for ; Wed, 16 Apr 2008 06:15:58 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GC2J6E010993

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 06:02:19 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 06:01:52 -0600

Resent-Message-ID: <20080416120152.GD9905@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776729.33482@frxVf1niEusHk1tba8Hivg

Received: from webmail.l-s.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBIWZ2004019

for ; Wed, 16 Apr 2008 05:18:46 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Wed, 16 Apr 2008 06:20:59 -0500

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:30:17 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 11:20:59.0562 (UTC) FILETIME=[F272A0A0:01C89FB3]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.408, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GCFjBB014381

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: [3+!!CMO!!R$O!!+\k"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More cheap watch spam from mindspring.com

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Thu Apr 17 00:50:22 2008

X-Account-Key: account2

X-UIDL: \Uj"!~1B"!kJl"!'%`"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208825113.83807@BiO9N5AMNut1shR0y9tm9Q

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3H0j7Br010165

for ; Wed, 16 Apr 2008 18:45:12 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3H0j7ZL010164

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 18:45:07 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 18:45:07 -0600

Resent-Message-ID: <20080417004507.GA9979@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208824084.48095@csudGHuryFgBzbfNlD0FSQ

Received: from user-0c8hck7.cable.mindspring.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3H0RoeN004694

for ; Wed, 16 Apr 2008 18:28:03 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Message-ID: <000501c8a021$024bdfe6$82c81ba5@codaim>

From: "gerick uriel"

To:

Subject: {?} {Disarmed} Rocking great coolest gadgets

Date: Wed, 16 Apr 2008 22:40:31 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0002_01C8A021.0249393A"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3H0j7Br010165

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: \Uj"!~1B"!kJl"!'%`"!

This is a multi-part message in MIME format.

------=_NextPart_000_0002_01C8A021.0249393A

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Best deals online for top quality branded watches here http://ww=

w.miekaleg.com/

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

------=_NextPart_000_0002_01C8A021.0249393A

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Best deals online for top quality bra=

nded watches here

MailScanner=

has detected a possible fraud attempt from "www.vereaneth.com" claiming to=

be http://www.miekaleg.com/

--=20

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

------=_NextPart_000_0002_01C8A021.0249393A--

Spam from UCLA

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Thu Apr 17 12:03:14 2008

X-Account-Key: account2

X-UIDL: /9"#!Y_~!!:&?"!U`%#!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208865723.31514@U1xkq0aBpSFsV6PyrvMcqg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3HC1vax018992

for ; Thu, 17 Apr 2008 06:02:02 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3HC1vFO018991

for dave@doctor.nl2k.ab.ca; Thu, 17 Apr 2008 06:01:57 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Thu, 17 Apr 2008 06:01:56 -0600

Resent-Message-ID: <20080417120156.GA17127@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208862483.47062@5mWlUTCatxmq0ryEDLuBSw

Received: from smtp-3.smtp.ucla.edu

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3HB7lf0004266

for ; Thu, 17 Apr 2008 05:08:01 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from webmyucla40.college.local (webmyucla40.college.ucla.edu [128.97.52.90])

by smtp-3.smtp.ucla.edu (8.14.1/8.14.1) with ESMTP id m3HB7hG0014805

for ; Thu, 17 Apr 2008 04:07:45 -0700

Received: from mail pickup service by webmyucla40.college.local with Microsoft SMTPSVC;

Thu, 17 Apr 2008 04:07:39 -0700

From: "Khalid mahmoud"

To: "khalidmail33@yahoo.com"

Reply-To: khalidmahmouds@yahoo.com.hk

Date: Thu, 17 Apr 2008 04:07:39 -0700

Subject: {?} HELLO,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=aspNetEmail=_30968634499a4bd4b2d9aa589ccba35d"

X-Mailer: aspNetEmail ver 3.5.2.0

Message-ID:

X-OriginalArrivalTime: 17 Apr 2008 11:07:39.0506 (UTC) FILETIME=[3FFD8520:01C8A07B]

X-Probable-Spam: no

X-Spam-Hits: 1.165

X-Spam-Score: *

X-Spam-Report: US_DOLLARS_3

X-Scanned-By: smtp.ucla.edu on 169.232.48.240

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=6, required 5, BAYES_80 2.00,

US_DOLLARS_3 4.00)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3HC1vax018992

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: /9"#!Y_~!!:&?"!U`%#!

--_=aspNetEmail=_30968634499a4bd4b2d9aa589ccba35d

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

I am khalid mahmoud from Bahrain,I have been diagnosed with esophageal canc=

er. It has defied all forms of medical treatment,I have few months to live.=

I have decided to give alms to charity organizations. I cannot do this mys=

elf because of my health. I have Eighteen Million dollars ($18,000,000,00) =

with a finance House abroad. Can you help me collect this deposit and dispa=

tch it to charity organizations? You will take 20% for your assistance. I W=

OULD WANT YOU TO REACH ME VIA MY PRIVATE EMAIL IF=0D

YOU ARE WILLING TO ASSIST ME. ( khalidmahmouds@yahoo.com.hk )

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

--_=aspNetEmail=_30968634499a4bd4b2d9aa589ccba35d--

style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial"> face="Arial, Verdana" size=4>Response to Question about Item -- Respond Now

style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial">
face="Arial, Verdana" size=4>Response to Question about

Item -- Respond Now