NetKnow Corporate Blog | Entries from April 2008

Lottery Spam from charter.net

Posted by Dave Yadallee on Monday, April 21. 2008

From - Mon Apr 21 02:45:02 2008

X-Account-Key: account2

X-UIDL: TMB!!/G`!!/p:"!9(A!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209177481.2438@rEWe0srZE7s9sHBeigq6eg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3L2blx3009786

for ; Sun, 20 Apr 2008 20:37:52 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3L2blrX009780

for dave@doctor.nl2k.ab.ca; Sun, 20 Apr 2008 20:37:47 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Sun, 20 Apr 2008 20:37:46 -0600

Resent-Message-ID: <20080421023746.GA8907@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1209173184.91529@RA3S7wc289dAr0CX5xJrDw

Received: from mtai01.charter.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3L1Q9ci022341

for ; Sun, 20 Apr 2008 19:26:23 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from aarprv05.charter.net ([10.20.200.75]) by mtai01.charter.net

(InterMail vM.7.08.02.02 201-2186-121-104-20070414) with ESMTP

id <20080421012606.QWCE22499.mtai01.charter.net@aarprv05.charter.net>;

Sun, 20 Apr 2008 21:26:06 -0400

Received: from fepweb04 ([10.20.200.54]) by aarprv05.charter.net with ESMTP

id <20080421012605.KQCL3191.aarprv05.charter.net@fepweb04>;

Sun, 20 Apr 2008 21:26:05 -0400

Message-ID: <20080420212605.585Z8.317694.root@fepweb04>

Date: Sun, 20 Apr 2008 18:26:05 -0700

From: "Dr. Steve Jordan"

Reply-To: customercare_08unitcenter@hotmail.co.uk

Subject: Yahoo/Msn Lottery Anniversary Award Prize Promo

MIME-Version: 1.0

Content-Type: text/plain; charset=utf-8

Content-Transfer-Encoding: quoted-printable

X-Priority: 3 (Normal)

Sensitivity: Normal

X-Originating-IP: from 192.168.1.30 by webmail.charter.net; Sun, 20 Apr 2008 21:26:04 -0400

X-Chzlrs: 0

X-Virus-Scanned: ClamAV version 0.92.1, clamav-milter version 0.92.1 on doctor.nl2k.ab.ca

X-Virus-Scanned: ClamAV version 0.92.1, clamav-milter version 0.92.1 on doctor.nl2k.ab.ca

X-Virus-Status: Clean

X-Null-Tag: 9339dec4f81d61fc7d029d43ad2fdadc

X-Null-Tag: 544898bb7feeaffee58cd290972832d1

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3L2blx3009786

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: TMB!!/G`!!/p:"!9(A!!

You won =C2=A3 500,000.00 Pounds in the online Microsoft and Aol promo he=

ld

on 21th of April 2008. contact him to file for your claims.

Contact Person.

Mr Osburne Paul

email: customercare_08unitcenter@hotmail.co.uk

contact him with your details

1.Name.2.Address., 3.Nationality.,=20

4.Age., 5.Occupation., 6.Phone/Fax.

year Anniversary Draws.

Sincerely,

Dr. Steve Jordan

Microsoft Promotion Team

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

More Pointbank Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 03:29:58 2008

X-Account-Key: account2

X-UIDL: AC=!!]
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208748048.43799@cmqaTtYHQapRHKc+yg9Y/w

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G3KeYY021057

for ; Tue, 15 Apr 2008 21:20:45 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3G3KeZi021056

for dave@doctor.nl2k.ab.ca; Tue, 15 Apr 2008 21:20:40 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 15 Apr 2008 21:20:40 -0600

Resent-Message-ID: <20080416032040.GA20715@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746740.08491@d7mCbGVpVKh14bwPeV4RQQ

Received: from mail.dankner.org.il

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3G2weie014544

for ; Tue, 15 Apr 2008 20:58:59 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([210.212.101.137]) by mail.dankner.org.il with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 15 Apr 2008 21:20:05 +0200

From: "service@pointbank.com"

Subject: {?} PointBank - Account Closure Notification

Date: Wed, 16 Apr 2008 00:50:04 +0530

MIME-Version: 1.0

Content-Type: text/plain;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 15 Apr 2008 19:20:05.0821 (UTC) FILETIME=[B623E6D0:01C89F2D]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=13.019, required 5, BAYES_99 3.50,

BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12, MISSING_HEADERS 1.29,

NORMAL_HTTP_TO_IP 0.00, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_BADDNS 0.01)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3G3KeYY021057

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: AC=!!]

Dear PointBank account holder,

PointBank is constantly working to ensure security by regularly screening the accounts in our system.

We have recently tried billing the account and encountered a problem. Until we can collect secure information,

your access to sensitive account features will be limited. We would like to restore your access as soon as

possible, and we apologize for the inconvenience.

Why is my account access limited?

Your account access has been limited for the following reason(s):

Billing failure. We understand that having limited access can be an inconvenience, but protecting your account

is our primary concern.

To securely update your personal information please follow the link bellow:

http://218.62.20.50/www.pointbank.com/login.htm?t-bank=111906006

Note: If you received this message in you spam/bulk folder, that is because of the restrictions implemented

by your Internet Service Provider. We are sorry for that inconvenience.

Online Banking Service Agreement

2008 PointBank. All rights reserved.

--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

Pointbank Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:38 2008

X-Account-Key: account2

X-UIDL: mZ`!!Io#"!UE\!!X-="!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208780190.64837@97bRSCRiE5baneMYEUCb8g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GCFjB9014381

for ; Wed, 16 Apr 2008 06:15:57 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GC0UPW010604

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 06:00:30 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 06:00:03 -0600

Resent-Message-ID: <20080416120003.GC9905@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746740.08491@d7mCbGVpVKh14bwPeV4RQQ

Received: from mail.dankner.org.il

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3G2weie014544

for ; Tue, 15 Apr 2008 20:58:59 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([210.212.101.137]) by mail.dankner.org.il with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 15 Apr 2008 21:20:05 +0200

From: "service@pointbank.com"

Subject: {?} PointBank - Account Closure Notification

Date: Wed, 16 Apr 2008 00:50:04 +0530

MIME-Version: 1.0

Content-Type: text/plain;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 1

X-MSMail-Priority: High

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 15 Apr 2008 19:20:05.0821 (UTC) FILETIME=[B623E6D0:01C89F2D]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=13.019, required 5, BAYES_99 3.50,

BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12, MISSING_HEADERS 1.29,

NORMAL_HTTP_TO_IP 0.00, RDNS_NONE 0.10, RELAY_CHECKER 0.00,

RELAY_CHECKER_BADDNS 0.01)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GCFjB9014381

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: mZ`!!Io#"!UE\!!X-="!

Dear PointBank account holder,

PointBank is constantly working to ensure security by regularly screening the accounts in our system.

We have recently tried billing the account and encountered a problem. Until we can collect secure information,

your access to sensitive account features will be limited. We would like to restore your access as soon as

possible, and we apologize for the inconvenience.

Why is my account access limited?

Your account access has been limited for the following reason(s):

Billing failure. We understand that having limited access can be an inconvenience, but protecting your account

is our primary concern.

To securely update your personal information please follow the link bellow:

http://218.62.20.50/www.pointbank.com/login.htm?t-bank=111906006

Note: If you received this message in you spam/bulk folder, that is because of the restrictions implemented

by your Internet Service Provider. We are sorry for that inconvenience.

Online Banking Service Agreement

2008 PointBank. All rights reserved.

--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

More e-bay phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 02:59:59 2008

X-Account-Key: account2

X-UIDL: a&]!!RE?"!mOR!!^Ah"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208746573.29032@jOZtvq7m0tVpR2qXmlPbkg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G2u2D6013645

for ; Tue, 15 Apr 2008 20:56:07 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3G2u2j1013644

for dave@doctor.nl2k.ab.ca; Tue, 15 Apr 2008 20:56:02 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Tue, 15 Apr 2008 20:56:02 -0600

Resent-Message-ID: <20080416025602.GA12614@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208737173.02795@jdpsYRLwj/4E+ZgCaYadjQ

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3G0JQ9L022831

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Tue, 15 Apr 2008 18:19:31 -0600 (MDT)

X-NetKnow-OutGoing-4688-1-MailScanner-Watermark: 1208737124.6407@jKURun8dLLEUs0oYSHMv5w

Received: from webmail.l-s.com

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m3G0ISR5002661

for ; Tue, 15 Apr 2008 18:18:40 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Tue, 15 Apr 2008 19:19:50 -0500

From: "eBay"

Subject: {?} {Spam?} {Disarmed} eBay Account Issue - Response Required

Date: Tue, 15 Apr 2008 20:29:07 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 00:19:51.0031 (UTC) FILETIME=[96292870:01C89F57]

X-NetKnow-OutGoing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4688-1-MailScanner: Found to be clean

X-NetKnow-OutGoing-4688-1-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=8.469, required 1, BAYES_50 0.00,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RAZOR2_CF_RANGE_51_100 0.50,

RAZOR2_CF_RANGE_E4_51_100 1.50, RAZOR2_CHECK 0.50, RDNS_NONE 0.10)

X-NetKnow-OutGoing-4688-1-MailScanner-SpamScore: ssssssss

X-NetKnow-OutGoing-4688-1-MailScanner-From: require@verify.ca

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=15.428, required 5, autolearn=spam,

BAYES_99 3.50, BOTNET 5.00, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MISSING_HEADERS 1.29,

RDNS_NONE 0.10, RELAY_CHECKER 0.00, RELAY_CHECKER_IPHOSTNAME 0.01,

RELAY_CHECKER_KEYWORDS 0.01, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssssssss

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3G2u2D6013645

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: a&]!!RE?"!mOR!!^Ah"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

color="#666666"

size="1">eBay sent this message requesting your Account

Confirmation.
Your registered name is included to show

this message

originated from
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay.

target="_blank"

href="http://pages.ebay.com/ebaymotors/help/confidence/name-userid-emails.html"

>Learn more.

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">You can

also copy and paste the following link into

your Web

browser:

rel="nofollow"

target="_blank"

href="http://crawfordhistory.org/feature1/eBay.php"

>MailScanner has detected a possible fraud attempt from "crawfordhistory.org" claiming to be http://cgi4.ebay.com/ws/eBayISAPI.dll?AccountConfirmco_partnerId=2&pUserId=&siteid=0&pageType
Your

confirmation code is: 65417

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

style="BORDER-RIGHT:#ffcc00 1px solid;BORDER-TOP:#ffcc00 1px

solid;BORDER-LEFT:#ffcc00 1px solid;WIDTH:155px;BORDER-BOTTOM:#ffcc00 1px

solid;HEIGHT:30px;"

cellSpacing="0" cellPadding="4" bgColor="#ffffce"

border="0">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://crawfordhistory.org/feature1/eBay.php"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

size="1">Learn how

you can protect yourself from spoof (fake) emails at:

target="_blank" href="http://pages.ebay.com/education/spooftutorial"

>

color="#003399">http://pages.ebay.com/education/spooftutorial

If

you would like to receive this email in text format,

change

your
target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?OptinLoginShow"

>notification

preferences.

See our Privacy

Policy and

User Agreement if you have questions about
id="lw_1173622849_5"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay's

communication policies.
Privacy Policy:
rel="nofollow"

target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html"

>

color="#003399">http://pages.ebay.com/ebaymotors/help/policies/privacy-policy.html
User

Agreement:
target="_blank"

href="http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html"

>

color="#003399">http://pages.ebay.com/ebaymotors/help/policies/user-agreement.html

Copyright

2006-2007
style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay, Inc.

All Rights Reserved.
Designated trademarks and

brands are

the property of their respective owners.

id="lw_1173622849_7"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay and the

eBay logo are registered trademarks or trademarks of

id="lw_1173622849_8"

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay,

Inc.

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay is

located at
style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">2145

Hamilton Avenue, San Jose, CA

95125.

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:20:59 2008

X-Account-Key: account2

X-UIDL: gM+!!M
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776507.94379@KQ8otbF4GVbkeitRYclz1g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBF1d6002692

for ; Wed, 16 Apr 2008 05:15:06 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBChPR002075

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:12:43 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:12:43 -0600

Resent-Message-ID: <20080416111243.GB1311@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208773864.98938@XVwZHbxQsPXis2WUBQ5PVA

Received: from ns1.domainwebhosting.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GAUVOs018312

for ; Wed, 16 Apr 2008 04:31:02 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from root by ns1.domainwebhosting.com with local (Exim 4.68)

(envelope-from )

id 1Jm4uJ-0000zN-TI

for doctor@nl2k.ab.ca; Wed, 16 Apr 2008 06:30:27 -0400

From: "eBay member:h5736"

MIME-Version: 1.0 Content-Type: text/html\r\n

Content-Type: text/html

Content-Transfer-Encoding: 8bit\r\n

Subject: {Disarmed} You've received a question about eBay item: #200215657858

Message-Id:

Date: Wed, 16 Apr 2008 06:30:27 -0400

X-AntiAbuse: This header was added to track abuse, please include it with any abuse report

X-AntiAbuse: Primary Hostname - ns1.domainwebhosting.com

X-AntiAbuse: Original Domain - nl2k.ab.ca

X-AntiAbuse: Originator/Caller UID/GID - [0 0] / [47 12]

X-AntiAbuse: Sender Address Domain - ns1.domainwebhosting.com

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBF1d6002692

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: gM+!!M

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border=0>

color=#666666 size=1>eBay sent this message on

behalf of h5736.
Your

registered name is included to show this message originated

from eBay.
href="http://pages.ebay.com/help/confidence/name-userid-emails.html"

target=_blank>Learn more.

border=0>

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width=8>	style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial"> face="Arial, Verdana" size=4>Response to Question about Item -- Respond Now	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width=8 align=top>

src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>

style="BORDER-RIGHT: rgb(255,204,0) 1px solid; BORDER-LEFT: rgb(255,204,0) 1px solid; BORDER-BOTTOM: rgb(255,204,0) 1px solid"

width="100%" border=0>

face="Arial, Verdana" size=2>eBay sent this

message on behalf of an eBay member through My

Messages. Responses sent using email will go to

the eBay member directly and will include your

email address.

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=5>

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=1>

border=0>

align=center bgColor=#e2e0e0 border=0>

class=SectionTitle>Respond to

h5736

bgColor=#eeeeee border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif" width=5>	size=2> href="http://myworld.ebay.com/h5736" target=_blank>h5736( href="http://feedback.ebay.com/ws/eBayISAPI.dll?ViewFeedback&userid=h5736" target=_blank>90 src="http://pics.ebaystatic.com/aw/pics/icon/iconGreenStar_25x25.gif" width=25 align=absMiddle border=0>)
	size=1>Positive feedback:	size=1>100%
	size=1>Member since:	size=1>Oct-11-02
	size=1>Location:	CA, United States
	size=1>Registered on:	href="http://www.ebay.com" target=_blank>www.ebay.com
src="http://pics.ebaystatic.com/aw/pics/s.gif" width=1>

align=center border=0>

border=0>

Item:

(
href="http://cignature.com/wp-content/themes/cignature/tpv/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank>200215657858)

This

message while the listing was

active.

size=2>h5736 is a

potential buyer.

face="Arial, Verdana" size=2>I also forgot to add

we are looking to buy it now, rather than wait for the auction to end

h5736

border=0>

size=2>Respond to this

question

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=5>

href="http://cignature.com/wp-content/themes/cignature/tpv/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank border="0">
alt="Respond Now"

src="http://pics.ebaystatic.com/aw/pics/buttons/btnRespondNow.gif"

width=120 border=0>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width=1>

color=gray size=1>Responses in My Messages will

not include your email

address.

border=0>

size=2>Thank

you,
eBay

src="http://pics.ebaystatic.com/aw/pics/s.gif">

style="BORDER-RIGHT: rgb(224,224,224) 4px solid; BORDER-TOP: rgb(224,224,224) 1px solid; BORDER-LEFT: rgb(224,224,224) 4px solid; BORDER-BOTTOM: rgb(224,224,224) 4px solid"

cellSpacing=3 cellPadding=2 width="100%"

border=0>

class=BodyFontStrong

style="FONT-WEIGHT: bold; FONT-FAMILY: arial,sans-serif">Details

for item

number: 200215657858

size=2>

Item

URL:

size=2>
href="http://cignature.com/wp-content/themes/cignature/tpv/signin.ebay.co.uk/ws/eBayISAPIdllSignInUsingSSL.htm"

target=_blank>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:20:49 2008

X-Account-Key: account2

X-UIDL: ab&#!;%)!!EX9"!9\P"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208775845.71577@9kGQEU8zM9iREwcm75p6bw

Return-Path:

Received: from mail.canam.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GB3qgc028755

for ; Wed, 16 Apr 2008 05:04:01 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from karl [74.246.201.163] by mail.canam.com with ESMTP

(SMTPD32-8.04) id AC95497001E; Wed, 16 Apr 2008 05:01:41 -0600

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:13:20 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <200804160501312.SM02428@karl>

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GB3qgc028755

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=11.228, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, MSOE_MID_WRONG_CASE 0.82, RDNS_NONE 0.10,

SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sssssssssss

X-NetKnow-InComing-4694-2-MailScanner-From: require@verify.ca

X-Spam-Status: Yes

X-UIDL: ab&#!;%)!!EX9"!9\P"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">You can

also copy and paste the following link into

your Web

browser:

rel="nofollow"

target="_blank"

href="http://tinyurl.com/5ahaqs"

>MailScanner has detected a possible fraud attempt from "tinyurl.com" claiming to be http://cgi4.ebay.com/ws/eBayISAPI.dll?AccountConfirmco_partnerId=2&pUserId=&siteid=0&pageType
Your

confirmation code is: 65417

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:17 2008

X-Account-Key: account2

X-UIDL: B2k"!7*3!!GpG"!g+[!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208777212.14887@O2DLrs4Gftty9EHZZm7Yzw

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBQejt007070

for ; Wed, 16 Apr 2008 05:26:45 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBQe6i007069

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:26:40 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:26:40 -0600

Resent-Message-ID: <20080416112640.GE3199@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776593.82146@n4ynqoeYn4FtXF51DVLkew

Received: from mongoose.roeske.us

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBGL69003229

for ; Wed, 16 Apr 2008 05:16:31 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from temp (adsl-074-246-201-163.sip.clt.bellsouth.net [74.246.201.163])

by mongoose.roeske.us (Postfix) with ESMTP id C9045DB9FF;

Wed, 16 Apr 2008 03:38:00 -0400 (EDT)

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:28:11 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20080416073800.C9045DB9FF@mongoose.roeske.us>

To: undisclosed-recipients:;

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.435, required 5, BAYES_99 3.50,

DYN_RDNS_SHORT_HELO_HTML 0.50, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MSOE_MID_WRONG_CASE 0.82,

RDNS_DYNAMIC 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBQejt007070

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: B2k"!7*3!!GpG"!g+[!!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:33 2008

X-Account-Key: account2

X-UIDL: =+]!!+O^!!^2L!!('A!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208777193.60667@srvdSZm0880A/D24c/mMlg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBQSbD006999

for ; Wed, 16 Apr 2008 05:26:33 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBQSZ3006998

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:26:28 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:26:28 -0600

Resent-Message-ID: <20080416112628.GD3199@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776591.70959@zjTbwfMX9Z4Dt/Yp0S04ZQ

Received: from mongoose.roeske.us

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBGLCf003228

for ; Wed, 16 Apr 2008 05:16:30 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from temp (adsl-074-246-201-163.sip.clt.bellsouth.net [74.246.201.163])

by mongoose.roeske.us (Postfix) with ESMTP id C9045DB9FF;

Wed, 16 Apr 2008 03:38:00 -0400 (EDT)

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:28:11 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20080416073800.C9045DB9FF@mongoose.roeske.us>

To: undisclosed-recipients:;

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.435, required 5, BAYES_99 3.50,

DYN_RDNS_SHORT_HELO_HTML 0.50, FORGED_MUA_OUTLOOK 3.12,

FORGED_OUTLOOK_HTML 0.00, FORGED_OUTLOOK_TAGS 0.00,

HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46, MSOE_MID_WRONG_CASE 0.82,

RDNS_DYNAMIC 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBQSbD006999

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: =+]!!+O^!!^2L!!('A!!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More e-bay PHish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:26 2008

X-Account-Key: account2

X-UIDL: Djg!!+lT"!([o!!&U9"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208777220.20246@fpTjdz/iNd9+/Yu65GQn8g

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GBQrjY007142

for ; Wed, 16 Apr 2008 05:26:58 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GBQrwO007141

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 05:26:53 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 05:26:53 -0600

Resent-Message-ID: <20080416112653.GF3199@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776729.33482@frxVf1niEusHk1tba8Hivg

Received: from webmail.l-s.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBIWZ2004019

for ; Wed, 16 Apr 2008 05:18:46 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Wed, 16 Apr 2008 06:20:59 -0500

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:30:17 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 11:20:59.0562 (UTC) FILETIME=[F272A0A0:01C89FB3]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.408, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GBQrjY007142

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: Djg!!+lT"!([o!!&U9"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More E-bay Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Wed Apr 16 20:24:40 2008

X-Account-Key: account2

X-UIDL: [3+!!CMO!!R$O!!+\k"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208780190.59444@VywtxKxgLx6iJBZU8puQmg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3GCFjBB014381

for ; Wed, 16 Apr 2008 06:15:58 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3GC2J6E010993

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 06:02:19 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 06:01:52 -0600

Resent-Message-ID: <20080416120152.GD9905@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208776729.33482@frxVf1niEusHk1tba8Hivg

Received: from webmail.l-s.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3GBIWZ2004019

for ; Wed, 16 Apr 2008 05:18:46 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from intern ([74.246.201.163]) by webmail.l-s.com with Microsoft SMTPSVC(6.0.3790.1830);

Wed, 16 Apr 2008 06:20:59 -0500

From: "eBay"

Subject: {?} {Disarmed} eBay Account Issue - Response Required

Date: Wed, 16 Apr 2008 07:30:17 -0400

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Bcc:

Message-ID:

X-OriginalArrivalTime: 16 Apr 2008 11:20:59.0562 (UTC) FILETIME=[F272A0A0:01C89FB3]

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=10.408, required 5, BAYES_99 3.50,

FORGED_MUA_OUTLOOK 3.12, FORGED_OUTLOOK_HTML 0.00,

FORGED_OUTLOOK_TAGS 0.00, HTML_MESSAGE 0.00, MIME_HTML_ONLY 1.46,

MISSING_HEADERS 1.29, RDNS_NONE 0.10, SARE_EBAY_SPOOF_NAME 0.94)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3GCFjBB014381

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: [3+!!CMO!!R$O!!+\k"!

src="http://pics.ebaystatic.com/aw/pics/logos/ebay_95x39.gif"

border="0">

border="0">

src="http://pics.ebaystatic.com/aw/pics/globalAssets/ltCurve.gif" width="8">	style="MARGIN-TOP:2px;FONT-WEIGHT:bold;FONT-SIZE:14pt;MARGIN-BOTTOM:2px;COLOR:#000000;FONT-FAMILY:arial,;"> face="Arial, Verdana" size="4">eBay Account Issue - Response Required	src="http://pics.ebaystatic.com/aw/pics/globalAssets/rtCurve.gif" width="8" align="top">
type="block" width="1">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

width="1">

border="0">

Dear

eBay Member,

src="http://pics.ebaystatic.com/aw/pics/s.gif">

size="2">Due to

our latest changes on eBay Marketplace

security

system we have discovered there is an

issue with

your Account on file.

size="2">At this

moment all selling, bidding and

watching activities

on your

account are restricted until

you

confirm your Account Informations.

Thank

you,

style="BORDER-BOTTOM:#0066cc 1px dashed;">eBay

width="99%"

border="0">

size="2">Complete

this process

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="5">

align="middle">
style="FONT:bold 13pt Arial, Helvetica,

sans-serif;COLOR:#000000;">
color="#003399">

target="_blank"

href="http://tinyurl.com/5ahaqs"

>Confirm

Now

target="_blank"

href="http://cgi4.ebay.com/ebaymotors/ws/eBayISAPI.dll?ChangeEmailConfirm&newemail=safetydiirector34%40yahoo.com&con

firmcode=65417"

>

src="http://pics.ebaystatic.com/aw/pics/s.gif"

width="1">

color="gray"

size="1">This will confirm to
id="lw_1173622849_4"

style="BACKGROUND:none transparent scroll repeat 0%

0%;BORDER-BOTTOM:#0066cc 1px dashed;">eBay

your Account

details

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="20"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="1"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

height="10"

src="http://pics.ebaystatic.com/aw/pics/s.gif">

border="0">

t>
--

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

More cheap watch spam from mindspring.com

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Thu Apr 17 00:50:22 2008

X-Account-Key: account2

X-UIDL: \Uj"!~1B"!kJl"!'%`"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208825113.83807@BiO9N5AMNut1shR0y9tm9Q

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3H0j7Br010165

for ; Wed, 16 Apr 2008 18:45:12 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3H0j7ZL010164

for dave@doctor.nl2k.ab.ca; Wed, 16 Apr 2008 18:45:07 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Wed, 16 Apr 2008 18:45:07 -0600

Resent-Message-ID: <20080417004507.GA9979@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208824084.48095@csudGHuryFgBzbfNlD0FSQ

Received: from user-0c8hck7.cable.mindspring.com

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3H0RoeN004694

for ; Wed, 16 Apr 2008 18:28:03 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Message-ID: <000501c8a021$024bdfe6$82c81ba5@codaim>

From: "gerick uriel"

To:

Subject: {?} {Disarmed} Rocking great coolest gadgets

Date: Wed, 16 Apr 2008 22:40:31 +0000

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_NextPart_000_0002_01C8A021.0249393A"

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2900.3138

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: sss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3H0j7Br010165

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: \Uj"!~1B"!kJl"!'%`"!

This is a multi-part message in MIME format.

------=_NextPart_000_0002_01C8A021.0249393A

Content-Type: text/plain;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Best deals online for top quality branded watches here http://ww=

w.miekaleg.com/

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

------=_NextPart_000_0002_01C8A021.0249393A

Content-Type: text/html;

charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Best deals online for top quality bra=

nded watches here

MailScanner=

has detected a possible fraud attempt from "www.vereaneth.com" claiming to=

be http://www.miekaleg.com/

--=20

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

------=_NextPart_000_0002_01C8A021.0249393A--

Spam from UCLA

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Thu Apr 17 12:03:14 2008

X-Account-Key: account2

X-UIDL: /9"#!Y_~!!:&?"!U`%#!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208865723.31514@U1xkq0aBpSFsV6PyrvMcqg

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3HC1vax018992

for ; Thu, 17 Apr 2008 06:02:02 -0600 (MDT)

Received: (from doctor@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3HC1vFO018991

for dave@doctor.nl2k.ab.ca; Thu, 17 Apr 2008 06:01:57 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Thu, 17 Apr 2008 06:01:56 -0600

Resent-Message-ID: <20080417120156.GA17127@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208862483.47062@5mWlUTCatxmq0ryEDLuBSw

Received: from smtp-3.smtp.ucla.edu

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3HB7lf0004266

for ; Thu, 17 Apr 2008 05:08:01 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from webmyucla40.college.local (webmyucla40.college.ucla.edu [128.97.52.90])

by smtp-3.smtp.ucla.edu (8.14.1/8.14.1) with ESMTP id m3HB7hG0014805

for ; Thu, 17 Apr 2008 04:07:45 -0700

Received: from mail pickup service by webmyucla40.college.local with Microsoft SMTPSVC;

Thu, 17 Apr 2008 04:07:39 -0700

From: "Khalid mahmoud"

To: "khalidmail33@yahoo.com"

Reply-To: khalidmahmouds@yahoo.com.hk

Date: Thu, 17 Apr 2008 04:07:39 -0700

Subject: {?} HELLO,

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="_=aspNetEmail=_30968634499a4bd4b2d9aa589ccba35d"

X-Mailer: aspNetEmail ver 3.5.2.0

Message-ID:

X-OriginalArrivalTime: 17 Apr 2008 11:07:39.0506 (UTC) FILETIME=[3FFD8520:01C8A07B]

X-Probable-Spam: no

X-Spam-Hits: 1.165

X-Spam-Score: *

X-Spam-Report: US_DOLLARS_3

X-Scanned-By: smtp.ucla.edu on 169.232.48.240

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=6, required 5, BAYES_80 2.00,

US_DOLLARS_3 4.00)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssss

X-Spam-Status: Yes, No

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3HC1vax018992

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: /9"#!Y_~!!:&?"!U`%#!

--_=aspNetEmail=_30968634499a4bd4b2d9aa589ccba35d

Content-Type: text/plain;

charset="utf-8"

Content-Transfer-Encoding: quoted-printable

I am khalid mahmoud from Bahrain,I have been diagnosed with esophageal canc=

er. It has defied all forms of medical treatment,I have few months to live.=

I have decided to give alms to charity organizations. I cannot do this mys=

elf because of my health. I have Eighteen Million dollars ($18,000,000,00) =

with a finance House abroad. Can you help me collect this deposit and dispa=

tch it to charity organizations? You will take 20% for your assistance. I W=

OULD WANT YOU TO REACH ME VIA MY PRIVATE EMAIL IF=0D

YOU ARE WILLING TO ASSIST ME. ( khalidmahmouds@yahoo.com.hk )

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

--_=aspNetEmail=_30968634499a4bd4b2d9aa589ccba35d--

More Royal Bank Phish

Posted by Dave Yadallee on Thursday, April 17. 2008

From - Thu Apr 17 13:32:32 2008

X-Account-Key: account2

X-UIDL: iNC!!7g~!!('d!!@`-!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208871023.4316@lILvCzfvddlhguVVaHB+zw

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3HDU9Yg029834

for ; Thu, 17 Apr 2008 07:30:14 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3HDU8wW029829

for dave@doctor.nl2k.ab.ca; Thu, 17 Apr 2008 07:30:08 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Thu, 17 Apr 2008 07:30:08 -0600

Resent-Message-ID: <20080417133008.GA29473@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4694-2-MailScanner-Watermark: 1208870566.97051@SSB6bHFtlvS/UyD11D1ivg

Received: from gallifrey.nk.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3HDLk5T028134

(version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=FAIL)

for ; Thu, 17 Apr 2008 07:22:46 -0600 (MDT)

X-NetKnow-OutGoing-4694-2-MailScanner-Watermark: 1208870448.4107@BUMNRDPB/UIxIO8ac40rzA

Received: from s3.nimio.nl

by gallifrey.nk.ca (8.14.2/8.14.2) with SMTP id m3HDKYCZ007206

for ; Thu, 17 Apr 2008 07:20:47 -0600 (MDT)

X-Spam-Filter: check_local@gallifrey.nk.ca by digitalanswers.org

Received: from apache by s3.nimio.nl with local (Exim 4.66)

(envelope-from )

id 1JmU0h-0007F8-C3

for sales@nk.ca; Thu, 17 Apr 2008 15:18:43 +0200

To: sales@nk.ca

Subject: {?} {Spam?} {Disarmed} Official Notice From Royal Bank

From: Royal Bank OF Canada

MIME-Version: 1.0

Content-type: text/html; charset=iso-8859-1

Content-Transfer-encoding: 8bit

Reply-To: Royal Bank OF Canada

Message-ID: <7f97aa2e63e034d48275b3282525ef85@>

X-Priority: 1

X-MSmail-Priority: High

X-Mailer: Microsoft Office Outlook, Build 11.0.5510

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1441

Date: Thu, 17 Apr 2008 15:18:43 +0200

X-NetKnow-OutGoing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-NetKnow-OutGoing-4694-2-MailScanner: Found to be clean

X-NetKnow-OutGoing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=4.919, required 1, BAYES_50 0.00,

HTML_IMAGE_ONLY_28 1.56, HTML_MESSAGE 0.00, INVALID_MSGID 1.90,

MIME_HTML_ONLY 1.46, NO_RELAYS -0.00)

X-NetKnow-OutGoing-4694-2-MailScanner-SpamScore: ssss

X-NetKnow-OutGoing-4694-2-MailScanner-From: ilusion@teknikal.be

X-Spam-Status: Yes, Yes, No

X-NetKnow-InComing-4694-2-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4694-2-MailScanner-SpamCheck: spam,

SpamAssassin (not cached, score=8.635, required 5, BAYES_99 3.50,

HTML_IMAGE_ONLY_32 1.78, HTML_MESSAGE 0.00, INVALID_MSGID 1.90,

MIME_HTML_ONLY 1.46, NO_RELAYS -0.00)

X-NetKnow-InComing-4694-2-MailScanner-SpamScore: ssssssss

X-NetKnow-InComing-4694-2-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3HDU9Yg029834

X-NetKnow-InComing-4694-2-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: iNC!!7g~!!('d!!@`-!!

window.status="https://royalbank.com/CentralLogonWeb/Logon?action=logon";

width="127" border="0" />

Safe and sound Protection with Royal Bank

online

Dear Royal Bank customer,

Thanks for banking with us, This is your official notice from Royal Bank Account service

department it has occurs that your internet banking may have been access by unknown authorized

third party.

Protecting the security of your account and of the Royal Bank Network is our primary concern,

Therefore, as a preventive measure we have temporary limited access to sensitive account

features.

For more protection we have sent you this message for more verification and to protect your

account start below,

href="http://desimusic247.net/openx/www/images/banner/newhu2.html">MailScanner has detected a possible fraud attempt from "desimusic247.net" claiming to be https://www1.royalba

nk.com/cgi-bin/rbaccess/rbunxcgi?protection.asp


src="https://www1.royalbank.com/common/images/trans1x1.gif" alt="" />
	This web site is operated by Royal Bank of Canada	Privacy \| Legal \| Trade-marks & Copyrights \| Online Banking Security class="bodyText">
	Royal Bank of Canada 1996, 2002, 2003-2008

NetKnow now in Netcraft's Top 18150

Posted by Dave Yadallee on Tuesday, April 15. 2008

All data is from Netcraft Toolbar . Looks as if there are major changes to the NEtcraft algorithm!

Netknow now ranks 18102 at Netcraft.

A significant decrease!!!

Some of our others domains and services ranks as follows:

NetKnow Secure Server ranks 164421 from 191533 on Netcraft.

NetKnow's secondary server ranks at 122450 from 67221 last week on Netcraft.

NetKnow's Anonynous FTP server is at 506284 from 625067 and non-anonymous rank 399137 from 263419 .

www.nl2k.ab.ca

ranks 430793 from 597311 on Netcraft.

edmontonab.ca ranks 448964 from 835420 .

internetedmonton.ca

ranks at 506283 from 688072 .

title="edmontoninternetserviceprovider.ca">edmontoninternetserviceprovider.ca

is at 515238 from 700587.

How do we compare with other providers in

Edmonton, Alberta, Canada?

We have Juno Internet ranked on top

at 1528 from 1398 who are the owners of

US Based Netzero at Netcraft Rank 12294 from 3887 .

Next we have Telus ranked by Netcraft at 2525 from 1552 and Telus Hosting ranked at from 190669 from 183700 .

A customer of theirs securityfocus.com rank 542 from 397 .

Sometimes their Web Hosting is done by
title="Internet Names for Business">Internet Names for Business

is ranked by Netcraft at 455643 from 503764 .

members.shaw.ca ranks 7596 from 4847 and Shaw Cable is next at Netcraft rank 24573 from 13623 . Briefly unavailable during high peak demand. Their Network Hosting Arm,

Big Pipe is at Netcraft rank 24573 from 13623. One of the customers alocalchoice.com ranks 554512 from 640916. Another customer of Shaw Avalon Global rank 606983 from 690417 . And Edmonton Chamber of Commerce is at 484750 from 611519.

We at Netknow are down 5309 from 12791 and down 5457 the beginning of the year from 12645. We aim to be above 12300 by the end of May 2008 and beyond Shaw's reach after that.

The University of Alberta ranks 32511 from 21421 .

Next, Uniserve ranks on Netcraft 120195 from 72377 . One of their acquisitions interbaun ranks with Netcraft 120195 from 72377 , due to merging of sites. One customer just came over from this organization in Nov 2006.

The City of Edmonton ranks 131071 from 91618 by Netcraft.

Next is 3 Web which ranks 176918 from 36412 . Their parent company Cybersurf is ranked 132059 from 268670 .

After that we have Nucleus Information Services which can be found at Netcraft Rank 171185 from 121130 .

xplornet ranks 155385 from 194344 and are listed with OSCO Computers Inc of New Brunswick.

The government of Alberta Website ranks 175297 from 107090 by Netcraft .

The Northern Alberta Institute of Technology ranks 211925 from 128653.

Alentus rank by Netcraft 214275 from 200380 and I note they are hosted in the USA . One of their customers The Alberta New Democrat Party ranks 552511 from 1869874.

Internet Centre rank 221031 from 198263 and using Worldgate IPs.

Next is WSI - We Simply The Internet of Toronto at Netcraft Position 221259 from 146888 .

MacEwan ranks 305781 from 296919.

Radiant Communications are ranked by Netcraft 377906 from 294423.

Webfire.ca ranks 393685 from 1131876.

Computer Engineeringranks 436710 from 488630. Thank you Scott. And they seem to be hosted by wolfpaw.net which ranks at 548203 from 991937.

Interspots of Edmonton rank 467835 from 637347 a customer of theirs conboland.com ranks 541381 from 716202 . Another customer the Progressive Conservative Party of Alberta ranks 684775 from 1047877 .

Next is Tera-Byte at Netcraft Rank 467985 from 121161 with Tera-Byte.ca ranking 478528 from 1768447 and their wireless arm Tera-Byte Wirelessranks 506830 from 703837. One of their clients nexopia is ranked 5518 from 3041. Very Interesting! Another of their customers The Alberta Liberals at 285255 from 464701 .

Also another of their clients CA Registrar ranks 541658 from 615228 and msmart of Edmonton ranks 550818 from 709504. One of Tera-Byte's acquisitions

Edmonton Community Networks ranks at 478670 from 609499 and goedmonton.net are at 515706 from 713619 on Netcraft .

Internet Crossroads Ltd of North Edmonton rank 470275 from 576530 by Netcraft .

Wiband Wireless

rank on Netcraft at 488794 from 601073 and their customer Found Locally ranks at 119164 from 102262 and Memory Express ranks 21929 from 20982 Interesting!

MDCi, the company that bought out OANet.com ranks 492371 from 566397.

Nisa Custom Internet Solutions ranks 525010 from 623187 by Netcraft .

Wild Rose Internet ranks 509726 from 598098 and I wonder if this is another wireless branch of Shaw.

airsurfer.carank 528949 from 465005 by Netcraft . I wonder if Big Pipe owns them.

Koi Media rank 529852 from 1067688.

Open Concept Internet, Inc. rank 539725 from 621944.

TIC Internet ranks 531411 from 590171 ( I do remember you).

The Network Centre ranks 542015 from 1132751.

Media Shakers of Edmonton ranks 544570 from 741846.

Carbon 14 Graphic Art and Web Design ranks 564095 from 737724 on Netcraft. BTW Illusions Photographics wants a word with you!

Elite Web Hosting Inc. now ranks 607227 from 853629.

Core Network Solutions Inc. ranks at 608776 from 812509 .

Leduc Data ranks 619961 from 873473 and somehow using Shaw Communications.

If I remember anymore, I will add to this entry, before Netcraft changes our ranking. Please watch this space and please feel free to peruse our services.

More porn/anatomical Spam from T-online Germany

Posted by Dave Yadallee on Monday, April 14. 2008

From - Fri Apr 11 13:49:44 2008

X-Account-Key: account2

X-UIDL: Id(#!!Sk"!7(9"!4p[!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208353621.54077@qcnliMqnKAhNXW+mXaHqGA

Return-Path:

Received: from doctor.nl2k.ab.ca

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with ESMTP id m3BDkrIs024187

for ; Fri, 11 Apr 2008 07:46:58 -0600 (MDT)

Received: (from root@localhost)

by doctor.nl2k.ab.ca (8.14.2/8.14.1/Submit) id m3BDkrP2024186

for dave@doctor.nl2k.ab.ca; Fri, 11 Apr 2008 07:46:53 -0600 (MDT)

Resent-From: root@doctor.nl2k.ab.ca

Resent-Date: Fri, 11 Apr 2008 07:46:53 -0600

Resent-Message-ID: <20080411134653.GD20277@doctor.nl2k.ab.ca>

Resent-To: Dave Yadallee

X-NetKnow-InComing-4688-1-MailScanner-Watermark: 1208329735.80514@9Y/Y/2/BdG1i624cXSyDQA

Received: from znivjak.t-dialin.net

by doctor.nl2k.ab.ca (8.14.2/8.14.2) with SMTP id m3B78NCT018901

for ; Fri, 11 Apr 2008 01:08:53 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Date: Fri, 11 Apr 2008 07:08:42 +0000

From: "Asken Benites"

X-Mailer: The Bat! (3.0.2.11) Professional

Reply-To: Asken Benites

X-Priority: 3 (Normal)

Message-ID: <7387561849.20080411070550@ulmason.co.uk>

To:

Subject: sabering

MIME-Version: 1.0

Content-Type: multipart/alternative;

boundary="----------99F522CBE29191"

X-Null-Tag: d506ac81280cc1820597862f428ea1c9

X-NetKnow-InComing-4688-1-MailScanner: Found to be clean, Found to be clean

X-NetKnow-InComing-4688-1-MailScanner-SpamScore: ssss

X-Spam-Status: No, No

X-NetKnow-InComing-4688-1-MailScanner-Information: Please contact the ISP for more information

X-MailScanner-ID: m3BDkrIs024187

X-NetKnow-InComing-4688-1-MailScanner-From: doctor@doctor.nl2k.ab.ca

X-UIDL: Id(#!!Sk"!7(9"!4p[!!

------------99F522CBE29191

Content-Type: text/plain; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

Hey,

=20=20

Real men! Milllions of people accross the world have already tested THIS=

and ARE making their ggirlfriends feel brand new sexual sensationns! YOU =

are the best in bed, aren't you ?Girls! Develoop your sexual reelationship=

and get even MORE pleeasure! Make your boyffriend a gift!

http://xu9p9k3aimo9d3.blogspot.com=20=20=20

Years' time. He looked forward not less happily the clanging

trumpets sound, the chargers rear, the main ditch, after

running along the slope that's what everyone says. Because

of the place's lincoln and his sister knew neither these

excellent at the gate of the bungalow known locally as the

smote him down horse and man. And in the same to negroes

now the slaves are negroes, mulattoes, measuring 7=E2=BE feet

in its longest diameter, and i do not know where he is,

replied the girl with man i ranagatha christie against once

in shanghai. Along the rapids, and they would not be burdened

for it. I found the water some three hundred yards conditions,

one of which is that hugh shall marry not noticed that barney

custer still held her.=20

--=20

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.

------------99F522CBE29191

Content-Type: text/html; charset=iso-8859-1

Content-Transfer-Encoding: quoted-printable

=20

">=09

=20

Hey,

Real men! Milllions of people accross=

the world have already tested THIS and ARE making their ggirlfriends feel =

brand new sexual sensationns! YOU are the best in bed=

, aren't you ?

Girls!
Develoop your sexual reelationship and get even MO=

RE pleeasure! Make your boyffriend a gift!

http://xu9p9k3aimo9d3.blogspot.com

Years' time. He looked forward not less happily the cla=

nging

trumpets sound, the chargers rear, the main ditch, after

running along the slope that's what everyone says. Because

of the place's lincoln and his sister knew neither these

excellent at the gate of the bungalow known locally as the

smote him down horse and man. And in the same to negroes

now the slaves are negroes, mulattoes, measuring 7=E2=BE feet

in its longest diameter, and i do not know where he is,

replied the girl with man i ranagatha christie against once

in shanghai. Along the rapids, and they would not be burdened

for it. I found the water some three hundred yards conditions,

one of which is that hugh shall marry not noticed that barney

custer still held her.

--=20

This message has been scanned for viruses and

dangerous content by

MailScanner, and is

believed to be clean.

------------99F522CBE29191--

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	April '08					Forward →
	1	2	3	4	5	6
7	8	9	10	11	12	13
14	15	16	17	18	19	20
21	22	23	24	25	26	27
28	29	30

style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial"> face="Arial, Verdana" size=4>Response to Question about Item -- Respond Now

style="MARGIN-TOP: 2px; FONT-WEIGHT: bold; FONT-SIZE: 14pt; MARGIN-BOTTOM: 2px; COLOR: rgb(0,0,0); FONT-FAMILY: arial">
face="Arial, Verdana" size=4>Response to Question about

Item -- Respond Now