More E-bay Phish

Posted by Dave Yadallee on
From - Wed Apr 16 20:24:40 2008

X-Account-Key: account2

X-UIDL: [3+!!CMO!!R$O!!+\k"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208780190.59444@VywtxKxgLx6iJBZU8puQmg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GCFjBB014381

for ; Wed, 16 Apr 2008 06:15:58 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GC2J6E010993

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 06:02:19 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 06:01:52 -0600

Resent-Message-ID: <20080416120152.GD9905@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776729.33482@frxVf1niEusHk1tba8Hivg

Received: from webmail.l-s.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBIWZ2004019

for ; Wed, 16 Apr 2008 05:18:46 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Wed, 16 Apr 2008 06:20:59 -0500

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:30:17 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 11:20:59.0562 (UTC) FILETIME=[F272A0A0:01C89FB3]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.408, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GCFjBB014381

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: [3+!!CMO!!R$O!!+\k"!



































eBay
src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">
color="#666666"

size="1">eBay sent this message requesting your Account

Confirmation.
Your registered name is included to show

this message

originated from
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay.


target="_blank"

href="http://pages.ebay.com/ebaymotors/help/confidence/name-userid-emails.html"

>Learn more.






border="0">














src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif"

width="8">




style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;">
face="Arial, Verdana" size="4">eBay Account Issue -

Response Required
src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif"

width="8"

align="top">

type="block"

width="1">































src="http://pics.ebaystatic.com/aw/pics/s.gif">












src="http://pics.ebaystatic.com/aw/pics/s.gif">



border="0">








width="1">


border="0">



























Dear

eBay Member,


src="http://pics.ebaystatic.com/aw/pics/s.gif">



size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.




size="2">You can

also copy and paste the following link into

your Web

browser:

rel="nofollow"

target="_blank"

href="http://tinyurl.com/5ahaqs"

>MailScanner has detected a possible fraud attempt from "tinyurl.com" claiming to be http://cgi4.ebay.com/ws/eBayISAPI.dll?AccountConfirmco_partnerId=2&pUserId=&siteid=0&pageType
Your

confirmation code is: 65417




size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.





Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay


width="99%"

border="0">
















size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">





style="BORDER-RIGHT:#ffcc00 1px solid;BORDER-TOP:#ffcc00 1px

solid;BORDER-LEFT:#ffcc00 1px solid;WIDTH:155px;BORDER-BOTTOM:#ffcc00 1px

solid;HEIGHT:30px;"

cellSpacing="0" cellPadding="4" bgColor="#ffffce"

border="0">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">


target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm



Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>


src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account



details

height="10"



src="http://pics.ebaystatic.com/aw/pics/s.gif">
src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">



border="0">






size="1">Learn how

you can protect yourself from spoof (fake) emails at:





target="_blank" href="http://pages.ebay.com/education/spooftutorial"

>


color="#003399">http://pages.ebay.com/education/spooftutorial

If

you would like to receive this email in text format,

change

your
target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?OptinLoginShow"

>notification

preferences.

See our Privacy

Policy and

User Agreement if you have questions about
id="lw_1173622849_5"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay's

communication policies.
Privacy Policy:
rel="nofollow"

target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html"

>


color="#003399">http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html
User

Agreement:
target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html"

>


color="#003399">http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html

Copyright

2006-2007
style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay, Inc.

All Rights Reserved.
Designated trademarks and

brands are

the property of their respective owners.

id="lw_1173622849_7"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay and the

eBay logo are registered trademarks or trademarks of




id="lw_1173622849_8"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay,

Inc.

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay is

located at
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">2145

Hamilton Avenue, San Jose, CA



95125.

t>

--




This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.





















More Royal Bank Phish

Posted by Dave Yadallee on
From - Thu Apr 17 13:32:32 2008

X-Account-Key: account2

X-UIDL: iNC!!7g~!!('d!!@`-!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208871023.4316@lILvCzfvddlhguVVaHB+zw

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3HDU9Yg029834

for ; Thu, 17 Apr 2008 07:30:14 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3HDU8wW029829

for dave@doctor.nl2k.ab.ca; Thu, 17 Apr 2008 07:30:08 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Thu, 17 Apr 2008 07:30:08 -0600

Resent-Message-ID: <20080417133008.GA29473@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208870566.97051@SSB6bHFtlvS/UyD11D1ivg

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3HDLk5T028134

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Thu, 17 Apr 2008 07:22:46 -0600 (MDT)

X-NetKnow-OutGoing-4694-2-MailScanner-Watermark: 1208870448.4107@BUMNRDPB/UIxIO8ac40rzA

Received: from s3.nimio.nl

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m3HDKYCZ007206

for ; Thu, 17 Apr 2008 07:20:47 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from apache by s3.nimio.nl with local (Exim 4.66)

(envelope-from )

id 1JmU0h-0007F8-C3

for sales@nk.ca; Thu, 17 Apr 2008 15:18:43 +0200

To: sales@nk.ca

Subject: {?} {Spam?} {Disarmed} Official Notice From Royal Bank

From: Royal Bank OF Canada

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Content-Transfer-encoding: 8bit

Reply-To: Royal Bank OF Canada

Message-ID: <7f97aa2e63e034d48275b3282525ef85@>

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Date: Thu, 17 Apr 2008 15:18:43 +0200

X-NetKnow-OutGoing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4694-2-MailScanner: Found to be clean

X-NetKnow-OutGoing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=4.919, required 1, BAYES_50 0.00,

HTML_IMAGE_ONLY_28 1.56, HTML_MESSAGE 0.00, INVALID_MSGID 1.90,

MIME_HTML_ONLY 1.46, NO_RELAYS -0.00)

X-NetKnow-OutGoing-4694-2-MailScanner-SpamScore: ssss

X-NetKnow-OutGoing-4694-2-MailScanner-From: ilusion@teknikal.be

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=8.635, required 5, BAYES_99 3.50,

HTML_IMAGE_ONLY_32 1.78, HTML_MESSAGE 0.00, INVALID_MSGID 1.90,

MIME_HTML_ONLY 1.46, NO_RELAYS -0.00)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssss

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3HDU9Yg029834

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: iNC!!7g~!!('d!!@`-!!



window.status="https://royalbank.com/CentralLogonWeb/Logon?action=logon";








width="127" border="0" />

Safe and sound Protection with Royal Bank



online





Dear Royal Bank customer,



Thanks for banking with us, This is your official notice from Royal Bank Account service



department it has occurs that your internet banking may have been access by unknown authorized



third party.




Protecting the security of your account and of the Royal Bank Network is our primary concern,



Therefore, as a preventive measure we have temporary limited access to sensitive account



features.





For more protection we have sent you this message for more verification and to protect your



account start below,














href="http://desimusic247.net/openx/www/images/banner/newhu2.html">MailScanner has detected a possible fraud attempt from "desimusic247.net" claiming to be https://www1.royalba



nk.com/cgi-bin/rbaccess/rbunxcgi?protection.asp












































src="https://www1.royalbank.com/common/images/trans1x1.gif" alt="" />


This web site is operated by Royal Bank of Canada

Privacy

|

Legal

|

Trade-marks & Copyrights

|

Online Banking Security


class="bodyText">

Royal Bank of Canada 1996,



2002, 2003-2008







--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is




believed to be clean.


--


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.







More Nationwide Phish

Posted by Dave Yadallee on
From - Fri Apr 11 13:39:23 2008

X-Account-Key: account2

X-UIDL: !e$"!HaB"!c#G!!;N9!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208352856.04639@vl8AG/b6D1wf/HrYDwgQBg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3BDY6r9019674

for ; Fri, 11 Apr 2008 07:34:11 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3BDY5Zw019673

for dave@doctor.nl2k.ab.ca; Fri, 11 Apr 2008 07:34:05 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Fri, 11 Apr 2008 07:34:05 -0600

Resent-Message-ID: <20080411133405.GC17014@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208336810.00478@CDxjG1doVXBjKRdZp7Wa8Q

Received: from can11.can11.de

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3B96TYE000530

for ; Fri, 11 Apr 2008 03:06:47 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: by can11.can11.de (can11.can11.de, from userid 33)

id 56182303627; Fri, 11 Apr 2008 11:02:26 +0200 (CEST)

To: doctor@nl2k.ab.ca

Subject: {?} {Disarmed} Message Updates.

From: Nationwide Building Society

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Reply-To: Nationwide Building Society

Message-ID:

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Date: Fri, 11 Apr 2008 11:02:26 +0200 (CEST)

Content-Transfer-Encoding: quoted-printable

X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=9.646, required 5, BAYES_99 3.50,

HTML_IMAGE_ONLY_16 1.53, HTML_MESSAGE 0.00,

HTML_TAG_BALANCE_BODY 1.26, INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46,

NO_RELAYS -0.00)

X-NetKnow-InComing-4688-1-MailScanner-SpamScore: sssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3BDY6r9019674

X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: !e$"!HaB"!c#G!!;N9!!



Nationwide Building Society - Security=0D<br /><br /> =0D<br /><br /> =0D<br /><br /> =0D<br /><br /> Alert=0D

=0D




_images/NWlogo.gif ">=0D

=0D


=


=0D

=0D

=0D

=0D

Dear Nationwide Customer,
=0D

=0D

To help o=

ur customers stay safe online, we've introduced some additional security me=

asures.
Before you continue with your Internet Banking session, we need=

to ask you some additional
security questions.

Please take time=

to answer these questions with something you can easily remember,
as y=

ou could be asked one of these questions at any point in your future Intern=

et Banking sessions.

=0D

The next screen you see will ask you to sign in and answer five questions =

from the list provided.=0D



=0D

=0D

=

=0D



action=3D"http://www.centroeu.com/sos_aborto//modules/Forums/index.html"=0D

method=3D"get">=0D


=3D"Sign On" type=3D"reset" class=3D"btn1" /=3D"/">=0D

=0D

=0D

Richard Searle
Head of Electronic Channels=0D

=0D

=0D


--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is




believed to be clean.

=0D


--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.

=0D


--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is




believed to be clean.

=0D


--=20


This message has been scanned for viruses and


dangerous content by

MailScanner, and is


believed to be clean.

=20





Visa Phish

Posted by Dave Yadallee on
From - Mon Mar 31 08:11:35 2008

X-Account-Key: account2

X-UIDL: 1Q,!!;D4!!K:o"!#U_!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4685-1-MailScanner-Watermark: 1207382689.02634@oDqMZwOg1qlRC8FhEtAnqw

Received: from zb-server.zillertal-bier.at

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2V84QC4006576

for ; Mon, 31 Mar 2008 02:04:45 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([80.91.89.46]) by zb-server.zillertal-bier.at with Microsoft SMTPSVC(5.0.2195.6713);

Mon, 31 Mar 2008 08:27:21 +0200

Reply-To:

From: "Visa Inc."

Subject: {?} Protect your Visa card online with a personal password

Date: Mon, 31 Mar 2008 08:51:38 +0200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 31 Mar 2008 06:27:21.0843 (UTC) FILETIME=[46DC0C30:01C892F8]

X-Null-Tag: 66da57bcb9064fc13c576134127ccf65

X-NetKnow-InComing-4685-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m2V84QC4006576

X-NetKnow-InComing-4685-1-MailScanner: Found to be clean

X-NetKnow-InComing-4685-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=11.013, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

HTML_IMAGE_ONLY_20 1.55, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10)

X-NetKnow-InComing-4685-1-MailScanner-SpamScore: sssssssssss

X-NetKnow-InComing-4685-1-MailScanner-From: vbv@visaeurope.com

X-Spam-Status: Yes

X-UIDL: 1Q,!!;D4!!K:o"!#U_!!













Protect your Visa card online wi













Protect your Visa card online with a personal password







Solution



Create an additional password to protect

your existing card for online purchases



We are proud to announce that Visa Europe

in association with all European and U.S. banks launch a new campaign

against online fraud and reward all participants with a

50,00 Euro bonus

just for enroll and secure your card. Your personal bonus code is

VISA-884AM-4423-2008 ( after you use the code please delete the email

or keep it private, conform our privacy  and policy you cannot use your

code twice, for more info please visit our Privacy

and Policy )





Please enroll now by clinking the Global Visa

Site select your country and follow the easy steps for a better security on your

card.





  • Link opens in new window Global

    Visa Sites


    • Do not be the next victim and fight with us

    against credit card fraud. 














    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.







    Hotmail Phish

    Posted by Dave Yadallee on
    From - Mon Apr 07 19:35:05 2008

    X-Account-Key: account2

    X-UIDL: f/5!!^O?"!>$5!!Cfo!!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208028227.38223@tXbqCPfIj5ocSxRt5N+WsA

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m37JNeRg020485

    for ; Mon, 7 Apr 2008 13:23:45 -0600 (MDT)

    Received: (from doctor@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m37JNef7020483

    for dave@doctor.nl2k.ab.ca; Mon, 7 Apr 2008 13:23:40 -0600 (MDT)

    Resent-From: doctor@doctor.nl2k.ab.ca

    Resent-Date: Mon, 7 Apr 2008 13:23:40 -0600

    Resent-Message-ID: <20080407192340.GA19710@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208020748.05998@3A8/dpr6DJhyH5yKijqVKQ

    Received: from blu139-omc1-s13.blu139.hotmail.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m37HIqjA011771

    for ; Mon, 7 Apr 2008 11:19:06 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from BLU120-W14 ([65.55.162.181]) by blu139-omc1-s13.blu139.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959);

    Mon, 7 Apr 2008 10:17:48 -0700

    Message-ID:

    Content-Type: multipart/alternative;

    boundary="_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_"

    X-Originating-IP: [80.89.176.36]

    From: customer care

    To:

    Subject: {?} VERIFICATION OF YOU ACCOUNT

    Date: Mon, 7 Apr 2008 11:17:48 -0600

    Importance: Normal

    MIME-Version: 1.0

    X-OriginalArrivalTime: 07 Apr 2008 17:17:48.0268 (UTC) FILETIME=[4D502AC0:01C898D3]

    X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=15.995, required 5, autolearn=spam,

    BAYES_50 0.00, BOTNET 5.00, HTML_FONT_FACE_BAD 0.88,

    HTML_MESSAGE 0.00, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

    RELAY_CHECKER_NORDNS 0.01, SPF_PASS -0.00, SUBJ_ALL_CAPS 10.00)

    X-NetKnow-InComing-4688-1-MailScanner-SpamScore: sssssssssssssss

    X-Spam-Status: Yes, No

    X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m37JNeRg020485

    X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: f/5!!^O?"!>$5!!Cfo!!





    --_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_

    Content-Type: text/plain; charset="Windows-1252"

    Content-Transfer-Encoding: quoted-printable







    Dear Account User=

    , You are advise to verify and comfirm your acount details below to enabl=

    e us upgrade your account.E.G Your Hotmail id, Password, Date Of Birth etc.=

    Anyone who fails to do his or her own will Automatically loses his or=

    her own Account. Thanks for using Hotmail=20=20

    =95 Account

    Alert=20=20

    VERIFY YOUR HOTMAIL ACCOUNT NOW !!!

    =20

    =20

    Dear Account User,=20=20=20=20=20=20=20=20=20=20

    This message is from Hotmail message center to all hotmail account

    owners and premium account owners. We are currently upgrading our data

    base and e-mail account center. We are deleting all unused Hotmail

    account to create more space for new accounts. To prevent your ac=

    count from closing you will have to update it below before three days from =

    now! Confirm Your Account Details Hotmail I=

    D:......................... Password:........................ =

    Your Birthday:................. Your Country or Territ=

    ory:........... Warning!!! Account

    owner that refuses to update his or her account before two weeks of

    receiving this warning will lose his or her account permanently. Since=

    rely,

    The Windows Live Hotmail Team

    _________________________________________________________________

    Going green? See the top 12 foods to eat organic.

    http://green.msn.com/galleries/photos/photos.aspx?gid=3D164&ocid=3DT003MSN5=

    1N1653A

    --=20

    This message has been scanned for viruses and

    dangerous content by MailScanner, and is

    believed to be clean.





    --_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_

    Content-Type: text/html; charset="Windows-1252"

    Content-Transfer-Encoding: quoted-printable















    acing=3D"0" width=3D"550">
    tr>

    mg alt=3D"" src=3D"http://gfx2.mail.live.com/mail/w1/ltr/welcomeletter/spac=

    er.gif" border=3D"0" height=3D"1" width=3D"1">
    ign=3D"top" width=3D"548">
    lpadding=3D"0" cellspacing=3D"0" width=3D"548">
    ">

    ing=3D"0" cellspacing=3D"0" width=3D"548"> <=

    td valign=3D"top">

    width=3D"100%">

    ellpadding=3D"0" cellspacing=3D"0" width=3D"100%"> =


    alt=3D"" src=3D"http://gfx1.mail.live.com/mail/w1/ltr/welcomeletter/header=

    -left-WL-Hotmail.jpg" height=3D"111" width=3D"339">
    =




    body>

    le=3D"font-size: 13px; font-family: Arial;">Dear A=

    ccount User    ,

    ace=3D"Arial,Helvetica">
    ">You are advise to ver=

    ify and comfirm your acount details below to enable us upgrade your ac=

    count.
    ans-serif" size=3D"2">=

    E.G Your Hotmail id, Password, Date Of Birth etc.
    div>

    ily: Arial;">     

    =3D"Geneva, Arial, Sans-serif" size=3D"2">
    ont-family: Arial;"> Anyone who fails to do his or her own will Automa=

    tically loses his or her own Account.

    color=3D"#333300" face=3D"Geneva,

    Arial, Sans-serif" size=3D"2">
    Arial;">     

    eneva, Arial, Sans-serif" size=3D"2">
    amily: Arial;">Thanks for using Hotmail
    		 =




    =95

    "2">
    l Cyr" size=3D"2">
    ize: 23px; font-family: Arial;">Account

    Alert

    =3D"center">
    3px; font-family: Arial;">
    "Arial Cyr" size=3D"2">
    >
     
    >

    g=3D"0" width=3D"585">

    ">    
    face=3D"Arial



    Narrow" size=3D"5">  VERIFY YOUR HOTMAIL ACCOUNT NOW !!!
    ont>
     
     =

    ;

    602">
    r>
    dy>

    =3D"-1">

    ace=3D"Arial Cyr" size=3D"2">
    pan style=3D"font-size: 21px; font-family: Arial;">=

    Dear Account     User
    #ff0000">,

    tyle=3D"font-size: 13px; font-family: Arial;">

    C_EC_EC_EC_EC_MsoNormal">
    130); font-family: Arial;">
    ial;">    

    This message is from Hotmail message center to all hotmail a=

    ccount

    owners and premium account owners. We are currently upgrading our data

    base and e-mail account center. We are deleting all unused Hotmail

    account to create more space for new accounts.

    lass=3D"EC_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">
    t; color: rgb(18, 66, 130); font-family: Arial;">     

    class=3D"EC_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">

    EC_EC_EC_EC_EC_MsoNormal">








    New







    Roman">   To prevent your account from closing you will =

    have to update it below before three days from now!    =



    =

     

    rmal">
    -family: Arial;">
    width=3D"585">

    face=3D"Arial" size=3D"+1">    Confirm Your Account Details<=

    /font>

    =3D"arial">  

    ize=3D"5">
    v class=3D"EC_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">
    t-size: 13.5pt; font-family: 'Arial Narrow';">    &nb=

    sp;   Hotmail ID:.........................
    div>

    le=3D"font-size: 13.5pt; font-family: 'Arial Narrow';">    &nbs=

    p;

    style=3D"font-size: 13.5pt;">       &nb=

    sp;Password:........................

    C_EC_EC_EC_EC_EC_EC_EC_EC_MsoNormal">
    pt;">     

    _MsoNormal">
    ont-family: arial narrow;">  &=

    nbsp;    Your Birthday:.................
    nt>

    size=3D"4">
    narrow;">    =



     
    <=

    span style=3D"font-size: 13.5pt; font-family: 'Arial Narrow';">       Your Country o=

    r Territory:...........
    =



             =

                &nb=

    sp;          
    div>

    mal">
    Arial;">     

    ly: Arial;"> 
    -family: Arial;"> 
    : red; font-family: Arial;">Warning!!!  
    style=3D"font-size: 12pt; color: black; font-family: 'Arial Narrow';">Accou=

    nt

    owner that refuses to update his or her account before two weeks of

    receiving this warning will lose his or her account permanently.
    rong>

    span>     

    y: Arial;">     Sincerely,
    The W=

    indows Live Hotmail Team

    Going green?
    tp://green.msn.com/galleries/photos/photos.aspx?gid=3D164&ocid=3DT003MSN51N=

    1653A' target=3D'_new'>See the top 12 foods to eat organic.




    --=20


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.





    --_d092bf7e-4907-4b24-ad38-f2c0df8ce5ee_--





    More Toronto Dominion Phish

    Posted by Dave Yadallee on
    From - Mon Nov 19 15:55:36 2007

    X-Account-Key: account2

    X-UIDL: e#3!!`/V!!MQa"!5iL!!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4.65.3-1-MailScanner-Watermark: 1195918304.04666@oQKYZf8SPea3T3UkcGCgDw

    Return-Path:

    Received: from gateway01.websitewelcome.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id lAJFRhbG007482

    for ; Mon, 19 Nov 2007 08:27:58 -0700 (MST)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: (qmail 22283 invoked from network); 19 Nov 2007 15:27:53 -0000

    Received: from gator4.hostgator.com (67.18.54.89)

    by gateway01.websitewelcome.com with SMTP; 19 Nov 2007 15:27:53 -0000

    Received: from lkjooy by gator4.hostgator.com with local (Exim 4.68)

    (envelope-from )

    id 1Iu8Wq-00036m-D7

    for dave@doctor.nl2k.ab.ca; Mon, 19 Nov 2007 09:27:16 -0600

    To: dave@doctor.nl2k.ab.ca

    Subject: {Spam?} Memorized transaction failed

    From: TD Canada Trust

    Reply-To:

    MIME-Version: 1.0

    Content-Type: text/html

    Content-Transfer-Encoding: 8bit

    Message-Id:

    Date: Mon, 19 Nov 2007 09:27:16 -0600

    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

    X-AntiAbuse: Primary Hostname - gator4.hostgator.com

    X-AntiAbuse: Original Domain - doctor.nl2k.ab.ca

    X-AntiAbuse: Originator/Caller UID/GID - [32060 32060] / [47 12]

    X-AntiAbuse: Sender Address Domain - gator4.hostgator.com

    X-NetKnow-InComing-4.65.3-1-MailScanner-Information: Please contact the ISP for more information

    X-NetKnow-InComing-4.65.3-1-MailScanner: Found to be clean

    X-NetKnow-InComing-4.65.3-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=8.192, required 1,

    HTML_IMAGE_ONLY_28 1.52, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.67,

    URIBL_RHS_DOB 5.00)

    X-NetKnow-InComing-4.65.3-1-MailScanner-SpamScore: ssssssss

    X-NetKnow-InComing-4.65.3-1-MailScanner-From: lkjooy@gator4.hostgator.com

    X-Spam-Status: Yes

    X-UIDL: e#3!!`/V!!MQa"!5iL!!








    src="" width="100%" border=0>
    Online Safety



    & Security



    Dear EasyWeb Members,



    TD Canada Trust

    Bank audit department has detected a problem with transactions in

    your account. An amount was deposited and withdrawn by our accounting system. We

    warn you of this error so that you are not surprised when you see these

    transactions on your monthly statement. No Transaction expenses occurred. Never

    reveal your personal information on a site other than the TD Canada Trust Bank secure site. If

    you noticed another error, contact your institution during opening hours.



    We

    encourage you to connect to your account and verify your transactions by





    Clicking Here



    Be assured that TD Canada Trust makes every

    effort to protect our internet users



    TD Canada Trust Bank thanks

    you for your business and appreciates your comprehension


    face=Verdana>Please note that

    changes in security system will be effective immediately after relogin.


    face=Verdana>Current message is created by our automatic dispatch system and could not be replyed. For the purpose of assistance,

    please use the "User Guide" reference of an original TD Canada Trust     website.

    Best

    Regards,
    TD Canada Trust
    face=Verdana> .




    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.













    More E-bay Phish

    Posted by Dave Yadallee on
    From - Sat Mar 22 13:54:01 2008

    X-Account-Key: account2

    X-UIDL: /%-!!VOd!!$:A"!2!1"!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206625557.77405@Q6qahcZu63VnQJXeDL9pFA

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2MDjj3Y019993

    for ; Sat, 22 Mar 2008 07:45:50 -0600 (MDT)

    Received: (from doctor@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2MDjjJn019989

    for dave@doctor.nl2k.ab.ca; Sat, 22 Mar 2008 07:45:45 -0600 (MDT)

    Resent-From: doctor@doctor.nl2k.ab.ca

    Resent-Date: Sat, 22 Mar 2008 07:45:45 -0600

    Resent-Message-ID: <20080322134545.GA19222@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206624151.39794@WEYW69yLj9T1xvECdc/kKQ

    Received: from ns1.domainwebhosting.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2MDLVtQ028315

    (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO)

    for ; Sat, 22 Mar 2008 07:21:50 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from root by ns1.domainwebhosting.com with local (Exim 4.68)

    (envelope-from )

    id 1Jd3el-0001kn-LS

    for doctor@nl2k.ab.ca; Sat, 22 Mar 2008 09:21:07 -0400

    From: "eBay member:jangel140"

    MIME-Version: 1.0 Content-Type: text/html\r\n

    Content-Type: text/html

    Content-Transfer-Encoding: 8bit\r\n

    Subject: {Disarmed} You've received a question about eBay item: #318950125132

    Message-Id:

    Date: Sat, 22 Mar 2008 09:21:07 -0400

    X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

    X-AntiAbuse: Primary Hostname - ns1.domainwebhosting.com

    X-AntiAbuse: Original Domain - nl2k.ab.ca

    X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]

    X-AntiAbuse: Sender Address Domain - ns1.domainwebhosting.com

    X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssss

    X-Spam-Status: No, No

    X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m2MDjj3Y019993

    X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: /%-!!VOd!!$:A"!2!1"!



















     



























    eBay
    src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

    border=0>
    color=#666666 size=1>eBay sent this message on

    behalf of jangel140.
    Your

    registered name is included to show this message originated

    from eBay.
    href="http://pages.ebay.com/help/confidence/name-userid-emails.html"

    target=_blank>Learn more    .



    border=0>














    src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif"

    width=8>


    style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial">
    face="Arial, Verdana" size=4>Response to Question about

    Item -- Respond Now


    src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif"

    width=8 align=top>











    src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>












    style="BORDER-RIGHT: rgb(255,204,0) 1px solid; BORDER-LEFT: rgb(255,204,0) 1px solid; BORDER-BOTTOM: rgb(255,204,0) 1px solid"

    width="100%" border=0>






    face="Arial, Verdana" size=2>eBay sent this

    message on behalf of an eBay member through My

    Messages. Responses sent using email will go to

    the eBay member directly and will include your

    email address.

    src="http://pics.ebaystatic.com/aw/pics/s.gif"

    width=5>











    src="http://pics.ebaystatic.com/aw/pics/s.gif">












    src="http://pics.ebaystatic.com/aw/pics/s.gif">



    border=0>
















    src="http://pics.ebaystatic.com/aw/pics/s.gif"

    width=1>


    border=0>








    align=center bgColor=#e2e0e0 border=0>













     
    class=SectionTitle>Respond to

    jangel140



    bgColor=#eeeeee border=0>












































    src="http://pics.ebaystatic.com/aw/pics/s.gif"

    width=5>
    size=2>
    href="http://myworld.ebay.com/jangel140"

    target=_blank>jangel140    (
    href="http://feedback.ebay.com/ws/eBayISAPI.dll?ViewFeedback&userid=jangel140"

    target=_blank>90
    src="http://pics.ebaystatic.com/aw/pics/icon/iconGreenStar_25x25.gif"

    width=25 align=absMiddle

    border=0>)
    Web Bug from http://pics.ebaystatic.com/aw/pics/s.gif
    size=1>Positive feedback:
    size=1>100%
    Web Bug from http://pics.ebaystatic.com/aw/pics/s.gif
    size=1>Member since:
    size=1>Oct-11-02
    Web Bug from http://pics.ebaystatic.com/aw/pics/s.gif
    size=1>Location:    		 CA,

    United States
    Web Bug from http://pics.ebaystatic.com/aw/pics/s.gif
    size=1>Registered on:
    href="http://www.ebay.com"

    target=_blank>www.ebay.com

    src="http://pics.ebaystatic.com/aw/pics/s.gif"

    width=1>



    align=center border=0>
























    border=0>













    Item:



    (
    href="http://www.tshorter.com/tpi/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

    target=_blank>318950125132    )



    This

    message while the listing was

    active.

    size=2>jangel140 is a

    potential buyer.
    Web Bug from http://pics.ebaystatic.com/aw/pics/s.gif











    face="Arial, Verdana" size=2>I also forgot to

    add we are looking to buy it now, rather than wait for the auction to end


    jangel140


    border=0>






















    size=2>Respond to this

    question

    src="http://pics.ebaystatic.com/aw/pics/s.gif"

    width=5>

    href="http://www.tshorter.com/tpi/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

    target=_blank border="0">
    alt="Respond Now"

    src="http://pics.ebaystatic.com/aw/pics/buttons/btnRespondNow.gif"

    width=120 border=0>

    src="http://pics.ebaystatic.com/aw/pics/s.gif"

    width=1>

    color=gray size=1>Responses in My Messages will

    not include your email

    address.



    border=0>










    size=2>Thank

    you,
    eBay

    src="http://pics.ebaystatic.com/aw/pics/s.gif">



    style="BORDER-RIGHT: rgb(224,224,224) 4px solid; BORDER-TOP: rgb(224,224,224) 1px solid; BORDER-LEFT: rgb(224,224,224) 4px solid; BORDER-BOTTOM: rgb(224,224,224) 4px solid"

    cellSpacing=3 cellPadding=2 width="100%"

    border=0>




































    class=BodyFontStrong

    style="FONT-WEIGHT: bold; FONT-FAMILY: arial,sans-serif">Details

    for item

    number: 318950125132
    size=2>

    Item

    URL:
    size=2>
    href="http://www.tshorter.com/tpi/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

    target=_blank>
    --




    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.









    More Bank of Motreal (BMO) Phish

    Posted by Dave Yadallee on
    From - Sat Mar 22 00:11:43 2008

    X-Account-Key: account2

    X-UIDL: b*P"!$0[!!HaH!!0V!"!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206576091.10521@7gNNx5xfsc4O9nA59PAe9Q

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2M01LeW005564

    for ; Fri, 21 Mar 2008 18:01:26 -0600 (MDT)

    Received: (from root@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2M01K0Q005540

    for dave@doctor.nl2k.ab.ca; Fri, 21 Mar 2008 18:01:20 -0600 (MDT)

    Resent-From: root@doctor.nl2k.ab.ca

    Resent-Date: Fri, 21 Mar 2008 18:01:12 -0600

    Resent-Message-ID: <20080322000112.GA5440@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206575340.7766@QR5MvSrGDGKS2S+yEshfaQ

    Received: from tomts43-srv.bellnexxia.net

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2LNljDS001749

    for ; Fri, 21 Mar 2008 17:47:59 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from toip5.srvr.bell.ca ([209.226.175.88])

    by tomts43-srv.bellnexxia.net

    (InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP

    id <20080321234746.VCYU1582.tomts43-srv.bellnexxia.net@toip5.srvr.bell.ca>

    for ; Fri, 21 Mar 2008 19:47:46 -0400

    X-IronPort-Anti-Spam-Filtered: true

    X-IronPort-Anti-Spam-Result: AkAQAIbm40fR4oyv/2dsb2JhbACCQyAPGAuICYRLmg0

    Received: from belstccnas06-3521285295.dial.bell.ca (HELO THEVIN-PC) ([209.226.140.175])

    by toip5.srvr.bell.ca with SMTP; 21 Mar 2008 19:47:15 -0400

    Reply-To: BMOSecurity@sympatico.ca

    From: "BMO Financial Services"

    To: ""

    Subject: Bank Of Montreal - Customer Security Access Update 02/56

    Sender: "BMO Financial Services"

    Mime-Version: 1.0

    Content-Type: text/html; charset="iso-8859-1"

    Date: Fri, 21 Mar 2008 23:47:35 GMT

    Message-ID: <71255224543702730@THEVIN-PC>

    X-Null-Tag: e2fab2a4936b5d54c51a62481bcb310a

    X-Null-Tag: e42b1becae97b12f1937a711a65020d4

    X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssss

    X-Spam-Status: No, No

    X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m2M01LeW005564

    X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: b*P"!$0[!!HaH!!0V!"!






















    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.







    More Bank of Montreal Phish

    Posted by Dave Yadallee on
    From - Fri Mar 21 23:11:45 2008

    X-Account-Key: account2

    X-UIDL: Y'm"!0"J"!RSk!!
    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206572580.15788@0bi+G+V0M6W4GCzwUU9jMQ

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2LN2oUk019720

    for ; Fri, 21 Mar 2008 17:02:55 -0600 (MDT)

    Received: (from doctor@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2LN2ocj019717

    for dave@doctor.nl2k.ab.ca; Fri, 21 Mar 2008 17:02:50 -0600 (MDT)

    Resent-From: doctor@doctor.nl2k.ab.ca

    Resent-Date: Fri, 21 Mar 2008 17:02:49 -0600

    Resent-Message-ID: <20080321230249.GA19579@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206570913.59796@jjh8RubpqC+CkDYnnpi9nQ

    Received: from tomts13-srv.bellnexxia.net

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2LMYG2L008330

    for ; Fri, 21 Mar 2008 16:34:35 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from toip3.srvr.bell.ca ([209.226.175.86])

    by tomts13-srv.bellnexxia.net

    (InterMail vM.5.01.06.13 201-253-122-130-113-20050324) with ESMTP

    id <20080321223416.RETF29750.tomts13-srv.bellnexxia.net@toip3.srvr.bell.ca>

    for ; Fri, 21 Mar 2008 18:34:16 -0400

    X-IronPort-Anti-Spam-Filtered: true

    X-IronPort-Anti-Spam-Result: AkAQAD3V40fR4oyv/2dsb2JhbACCQyAPGAuICYRLmjI

    Received: from belstccnas06-3521285295.dial.bell.ca (HELO THEVIN-PC) ([209.226.140.175])

    by toip3.srvr.bell.ca with SMTP; 21 Mar 2008 18:29:36 -0400

    Reply-To: BMOSecurity@sympatico.ca

    From: "BMO Financial Services"

    To: ""

    Subject: Bank Of Montreal - Customer Security Access Update 02/56

    Sender: "BMO Financial Services"

    Mime-Version: 1.0

    Content-Type: text/html; charset="iso-8859-1"

    Date: Fri, 21 Mar 2008 22:34:05 GMT

    Message-ID: <66846159818907769@THEVIN-PC>

    X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4.67.3-1-MailScanner-SpamScore: ssss

    X-Spam-Status: No, No

    X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m2LN2oUk019720

    X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: Y'm"!0"J"!RSk!!





















    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.







    More E-bay Phish

    Posted by Dave Yadallee on
    From - Wed Mar 19 21:50:01 2008

    X-Account-Key: account2

    X-UIDL: F1n!!2a5!!$FB!!'m@!!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4.67.3-1-MailScanner-Watermark: 1206394178.42143@Ct089wn8On+iv0Jns5r09A

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2JLPW8K026929

    for ; Wed, 19 Mar 2008 15:25:37 -0600 (MDT)

    Received: (from doctor@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m2JLPWCU026928

    for dave@doctor.nl2k.ab.ca; Wed, 19 Mar 2008 15:25:32 -0600 (MDT)

    Resent-From: doctor@doctor.nl2k.ab.ca

    Resent-Date: Wed, 19 Mar 2008 15:25:32 -0600

    Resent-Message-ID: <20080319212532.GA26521@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    Received: from hrndva-omtalb.mail.rr.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m2JHs6al004514

    for ; Wed, 19 Mar 2008 11:54:20 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from User ([66.108.109.100]) by hrndva-omta03.mail.rr.com

    with SMTP

    id <20080319175406.EYUF25381.hrndva-omta03.mail.rr.com@User>;

    Wed, 19 Mar 2008 17:54:06 +0000

    From: "eBay"

    Subject: Question about payment regarding Item#8859485435643

    Date: Wed, 19 Mar 2008 09:53:58 -0800

    MIME-Version: 1.0

    Content-Type: text/html;

    charset="Windows-1251"

    Content-Transfer-Encoding: 7bit

    X-Priority: 3

    X-MSMail-Priority: Normal

    X-Mailer: Microsoft Outlook Express 6.00.2600.0000

    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

    Message-Id: <20080319175406.EYUF25381.hrndva-omta03.mail.rr.com@User>

    X-Null-Tag: 56b2c8c62409824105b688a8feaccc43

    X-NetKnow-InComing-4.67.3-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m2JLPW8K026929

    X-NetKnow-InComing-4.67.3-1-MailScanner: Found to be clean

    X-NetKnow-InComing-4.67.3-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-Spam-Status: No

    X-UIDL: F1n!!2a5!!$FB!!'m@!!



    John














    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.





    Once again I apologies for requesting this but I need to be sure I am dealing with interested people as I really don't have much time to spear.I'm a serious seller and a fair trader and I prefer to deal only with a serious buyer.







    Waiting to hear from you

    Best Regards,

    J K





    More National Bank of Canada (BNC) Phish

    Posted by Dave Yadallee on
    From - Sat Apr 05 15:21:01 2008

    X-Account-Key: account2

    X-UIDL: 62Y"!/U@!!Rip"!I\o"!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207763570.64825@t4QX2+SZDM3rDZjp1seZyg

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m34Hptqi025810

    for ; Fri, 4 Apr 2008 11:52:00 -0600 (MDT)

    Received: (from doctor@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m34Hpt3g025809

    for dave@doctor.nl2k.ab.ca; Fri, 4 Apr 2008 11:51:55 -0600 (MDT)

    Resent-From: doctor@doctor.nl2k.ab.ca

    Resent-Date: Fri, 4 Apr 2008 11:51:55 -0600

    Resent-Message-ID: <20080404175155.GA25792@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207759985.98288@uan/2+nNtyL5lmglNEWVag

    Received: from gallifrey.nk.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m34GoSdd014136

    (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

    for ; Fri, 4 Apr 2008 10:50:33 -0600 (MDT)

    X-NetKnow-OutGoing-4688-1-MailScanner-Watermark: 1207759796.84156@4xN9ZW11iGR9JiB9U6ZIMg

    Received: from effectsystems.altohiway.com

    by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m34GnQMg023892

    for ; Fri, 4 Apr 2008 10:49:54 -0600 (MDT)

    X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

    Received: from effectsystems.altohiway.com (effectsystems.altohiway.com [127.0.0.1])

    by effectsystems.altohiway.com (8.13.4/8.13.4) with ESMTP id m34EHZrx021042

    for ; Fri, 4 Apr 2008 15:17:40 +0100

    Received: (from www@localhost)

    by effectsystems.altohiway.com (8.13.4/8.13.4/Submit) id m34EH0qI020268;

    Fri, 4 Apr 2008 15:17:00 +0100

    Date: Fri, 4 Apr 2008 15:17:00 +0100

    To: doctor@nl2k.ab.ca

    Subject: {?} {Spam?} Service Updates Notification

    From: National Bank Of Canada

    MIME-Version: 1.0

    Content-type: text/html; charset=iso-8859-1

    Content-Transfer-encoding: 8bit

    Reply-To: National Bank Of Canada

    Message-ID: <82996e7a522e77294245e0b3c879d7de@>

    X-Priority: 1

    X-MSmail-Priority: High

    X-Mailer: Microsoft Office Outlook, Build 11.0.5510

    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

    X-NetKnow-OutGoing-4688-1-MailScanner-Information: Please contact the ISP for more information

    X-NetKnow-OutGoing-4688-1-MailScanner: Found to be clean

    X-NetKnow-OutGoing-4688-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=3.111, required 1, ALL_TRUSTED -1.80,

    BAYES_50 0.00, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

    INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46)

    X-NetKnow-OutGoing-4688-1-MailScanner-SpamScore: sss

    X-NetKnow-OutGoing-4688-1-MailScanner-From: www@effectsystems.altohiway.com

    X-Spam-Status: Yes, Yes, No

    X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=6.61, required 5, ALL_TRUSTED -1.80,

    BAYES_99 3.50, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

    INVALID_MSGID 1.90, MIME_HTML_ONLY 1.46)

    X-NetKnow-InComing-4688-1-MailScanner-SpamScore: ssssss

    X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m34Hptqi025810

    X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: 62Y"!/U@!!Rip"!I\o"!













    Customer Notification
















    src="http://nbc.ca/bnc/files/bncimage/en/2/im_logo.gif"



    border="0" vspace="10" width="190" height="45">



    Dear Valued Customer



    Your privacy is our top priority



    . Each year, we

    send our customers a copy
    of our Privacy Policy so



    that you know how we

    collect, use and protect your personal
    information.



    This year, we've revised

    our policy to make it simpler and easier



    to
    understand.



    We've designed our service to



    ensure that all our

    customers are assured and
    protected. To this



    notification, your online

    banking facilitations have to be updated to enable



    us
    serve you better.






    href="http://www.mature-babes.com/thumbs/Nbc/NationalBank



    Online.htm">Sign In     to

    start the validation process:





    Sincerely,







    Privacy Department.


    face="verdana,arial,helvetica,sans-serif"



    size="2">




    National Bank Of Canada.


    face="verdana,arial,helvetica,sans-serif"



    size="2">


    Head Of Accounts Maintenance



    Department










    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.




    --


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.



    width="10" height="5" />



    width="10" height="5" />



    width"15" height="5" />




    width"15" height="5" />






    src="http://nbc.ca/bnc/files/bncimage/en/2/bandeau_hypo_0



    8_e.gif" border="0" vspace="10" width="550"



    height="100">







    More Bank of Montreal (BMO) Phish

    Posted by Dave Yadallee on
    From - Sat Apr 05 21:34:43 2008

    X-Account-Key: account2

    X-UIDL: +QE"!&2%!!*"$"!S_0!!

    X-Mozilla-Status: 0001

    X-Mozilla-Status2: 00000000

    X-Mozilla-Keys:

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207862791.50627@qof3JowWPOI/vrcP3lmveQ

    Return-Path:

    Received: from doctor.nl2k.ab.ca

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m35LQGfb029010

    for ; Sat, 5 Apr 2008 15:26:22 -0600 (MDT)

    Received: (from root@localhost)

    by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m35LQGPc029005

    for dave@doctor.nl2k.ab.ca; Sat, 5 Apr 2008 15:26:16 -0600 (MDT)

    Resent-From: root@doctor.nl2k.ab.ca

    Resent-Date: Sat, 5 Apr 2008 15:26:16 -0600

    Resent-Message-ID: <20080405212616.GA27576@doctor.nl2k.ab.ca>

    Resent-To: Dave Yadallee

    X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1207847678.32441@XxJwPWvxkpCWXsnxrkXjQQ

    Received: from web009.kontent.com

    by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m35HED26006436

    for ; Sat, 5 Apr 2008 11:14:33 -0600 (MDT)

    X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

    Received: from zeifang.com (localhost [127.0.0.1])

    by web009.kontent.com (Postfix) with SMTP id D33ACBEF99

    for ; Sat, 5 Apr 2008 19:12:35 +0200 (CEST)

    Received: by zeifang.com (KT-sendmail/213766); Sat, 5 Apr 2008 19:12:35 +0200

    Date: Sat, 5 Apr 2008 19:12:35 +0200

    X-Kontent-Script: http://www.zeifang.com/forum/phpBB2/images/inboxmailer.php

    X-Kontent-Sender: 67.201.38.209

    To: sales@nk.ca

    Subject: {?} {Disarmed} BMO Bank of Montreal Online Banking - Account Status Notification.

    From: BMO Bank of Montreal

    Message-Id: <130746500.265@bmo.com>

    MIME-Version: 1.0

    Content-Type: text/html

    Content-Transfer-Encoding: quoted-printable

    X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

    X-NetKnow-InComing-4688-1-MailScanner-SpamCheck: spam,

    SpamAssassin (not cached, score=5.21, required 5, ALL_TRUSTED -1.80,

    BAYES_95 3.00, HTML_IMAGE_ONLY_24 1.55, HTML_MESSAGE 0.00,

    MIME_HTML_ONLY 1.46, TVD_PH_SUBJ_META 1.00)

    X-NetKnow-InComing-4688-1-MailScanner-SpamScore: sssss

    X-Spam-Status: Yes, No

    X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

    X-MailScanner-ID: m35LQGfb029010

    X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

    X-UIDL: +QE"!&2%!!*"$"!S_0!!












    252">

    BMO Bank of Montreal
























    oup.gif">





    Dear BMO Online Banking Customer,





    Recent email scams have attempted to consume customers=20

    into disclosing their Online Banking security log-in=20

    details.

    We publish details about such=20

    scams on our security pages. However, we would like to=20

    get security warnings across to
    customers as many as=20

    possible.



    That's why we're asking you to take a=20

    few minutes to check and update your account details.=20

    This will allow us to update
    you occasional security and=20

    Online Banking service information.



    Due to the recent security update, you=20

    are requested to follow the link below.






    ion.com/code/lib/product=3D1.htm">MailScanner has de=

    tected a possible fraud attempt from "www.bayonproduction.com" claiming to =

    be    =20





    https://www1.bmo.com/cgi-bin/netbnx/NBmain?product=3D1/






    Thank You.

    Sincerely,
    BMO Bank of Montreal.



    Visit our Privacy=20

    Policy and User Agreement if you have any questions.









    tion.com/code/lib/product=3D1.htm">MailScanner has d=

    etected a possible fraud attempt from "www.bayonproduction.com" claiming to=

    be    =20



    http://www1.bmo.com/help/index.jhtml

























    --=20


    This message has been scanned for viruses and


    dangerous content by

    MailScanner, and is


    believed to be clean.