LLoyds Bank Phish originating from Japan

Posted by Dave Yadallee on

























tr>














width=75% border="0"



cellspacing="0" cellpadding="0">








Dear Valued Lloyds TSB







Customer,









True to our promise to keep your







internet banking account safe and secure from fraudsters,our







online security team has discovered some foreign ip Log Ons to your account from







the following IPs : 812.164.72.212 ,195.93.21.10,







201.6.121.78


Due to this,your internet banking has been







blocked for your safety until you confirm your IP address

















href="http://sgdevaart.com/debosstraat/classes/scriptaculous/index.php"







>Click Here To







Confirm Your IP(s)






size=-1>






Please understand that this is a new security







measure brought in to Lloyds TSB for the security of your internet







banking activities.






Thanks for your



co-operation.





















src="http://tbn0.google.com/images?q=tbn:-Ixvu9U91CqXMM:http://farm3.static.flic+kr.com/2160/1526868436_a46691fc61.jpg%3Fv%3D0"



>









Lloyds TSB Security Team
Lloyds TSB







Plc






















size="2">



??Lloyds TSB Bank plc and Lloyds TSB







Scotland plc are authorised and regulated by the Financial Services







Authority and signatories to the Banking Codes. FSA authorisation







can be checked on the FSA's Register at: www.fsa.gov.uk/register.







Lloyds TSB Bank plc and Lloyds TSB Scotland plc are members of the







Financial Services Compensation Scheme and the Financial Ombudsman







Service. Lloyds TSB Group plc.



- Copyright



??







































More Scotiabank Phish

Posted by Dave Yadallee on
From - Tue Jul 07 08:24:28 2009

X-Account-Key: account2

X-UIDL: E8;!!gpF!!nAg"!/3;!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id 420F47338CF; Tue, 7 Jul 2009 08:14:48 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 7 Jul 2009 08:14:48 -0600

Resent-Message-ID: <20090707141448.GE7592@doctor.nl2k.ab.ca>

Resent-To: See root

X-Original-To: doctor@doctor.nl2k.ab.ca

Delivered-To: doctor@doctor.nl2k.ab.ca

Received: from lib-mail.city.hokuto.hokkaido.jp (gw3.city.hokuto.hokkaido.jp [219.109.234.212])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id B9E667338CE

for ; Tue, 7 Jul 2009 06:11:45 -0600 (MDT)

Received: from User (209-204-144-182.dsl.static.sonic.net [209.204.144.182])

by lib-mail.city.hokuto.hokkaido.jp (Postfix) with ESMTP

id 252314840B1; Tue, 7 Jul 2009 20:38:51 +0900 (JST)

Reply-To:

From: "Scotiabank"

Subject: Proceed the SMDI Survey

Date: Tue, 7 Jul 2009 04:29:55 -0700

MIME-Version: 1.0

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20090707113851.252314840B1@lib-mail.city.hokuto.hokkaido.jp>

To: undisclosed-recipients:;

X-UIDL: E8;!!gpF!!nAg"!/3;!!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]

Content-Type: multipart/mixed; boundary="=======AVGMAIL-4CF74D84======="





--=======AVGMAIL-4CF74D84=======

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit











































Scotia OnLine







































































































  Communications Centre





























































































































 






























































































































Dear ScotiaCard Member,








































 

src="/images/1x1_blackline.gif"

width=1>




















Welcome to "Communications Centre" service.





We recently invited you to participate in the annual ScotiaMcLeod Direct Investing survey. If you have already completed the survey, we thank you for your feedback and no further action is required.



If you have not yet had an opportunity to fill out the survey, we would like to remind you that the feedback collection period ends Sunday, July 12. Please take the time now to fill out the survey. Your input is greatly appreciated and helps us to improve the services we offer to all our clients.



Please complete the survey by clicking the link below "Proceed to the SMDI Survey". You will be taken to a secure website hosted by our independent, third-party research partner, TNS Canadian Facts, where you can complete the survey. It should take about 15 minutes of your time. We assure you that your answers will be held in strictest confidence and will only be reported in aggregate with the responses of all other clients participating in this research.



Proceed to the SMDI Survey:





https://www.scotiaonline.scotiabank.com/online/start.jsp?language=true





Thank you,


Scotiabank Head Office


44 King St West


Toronto ON


M5H 1H1


info@scotiabank.com


1-800-4SCOTIA (1-800-472-6842)


1-800-645-0288 (services for the hearing impaired)


(416) 701-7200 (Greater Toronto Area)
















































































































































--=======AVGMAIL-4CF74D84=======

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-3D4858AD======="



--=======AVGMAIL-3D4858AD=======

Content-Type: text/plain; x-avg=cert; charset=Windows-1251

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-3D4858AD=======--

--=======AVGMAIL-4CF74D84=======--



More Scotiabank Phish

Posted by Dave Yadallee on
From - Tue Jul 07 08:24:27 2009

X-Account-Key: account2

X-UIDL: !5n"!Nj%#!R(K"!BaA"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 10000000

X-Mozilla-Keys:

Received: from localhost by doctor.nl2k.ab.ca

with SpamAssassin (version 3.2.5);

Tue, 07 Jul 2009 08:14:54 -0600

From: "Scotiabank"

To: undisclosed-recipients:;

Subject: SPAM Proceed the SMDI Survey

Date: Tue, 7 Jul 2009 04:29:55 -0700

Message-Id: <20090707113851.252314840B1@lib-mail.city.hokuto.hokkaido.jp>

X-Spam-Virus: Yes (Phishing.Heuristics.Email.SSL-Spoof)

X-Spam-Flag: YES

X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on doctor.nl2k.ab.ca

X-Spam-Level: **************************************************

X-Spam-Status: Yes, score=136.1 required=5.0 tests=BAYES_50,CLAMAV,

FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,

MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,RCVD_IN_JMF_BL,RCVD_IN_SORBS_DUL,

SARE_WEOFFER,URIBL_PH_SURBL autolearn=unavailable version=3.2.5

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----------=_4A53585E.8CD6B591"

X-UIDL: !5n"!Nj%#!R(K"!BaA"!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]





This is a multi-part message in MIME format.



------------=_4A53585E.8CD6B591

Content-Type: text/plain; charset=iso-8859-1

Content-Disposition: inline

Content-Transfer-Encoding: 8bit



Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Scotia OnLine Communications Centre Dear ScotiaCard Member,

Welcome to "Communications Centre" service. [...]



Content analysis details: (136.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

13 RCVD_IN_JMF_BL RBL: Sender listed in JMF-BLACK

[219.109.234.212 listed in hostkarma.junkemailfilter.com]

0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address

[219.109.234.212 listed in dnsbl.sorbs.net]

1.8 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URIs: scotianbanks.com]

45 SARE_WEOFFER BODY: Offers Something

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%

[score: 0.5001]

1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

70 CLAMAV Clam AntiVirus detected a virus

0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook



The original message was not completely plain text, and may be unsafe to

open with some email clients; in particular, it may contain a virus,

or confirm that your address can receive spam. If you wish to view

it, it may be safer to save it to a file and open it with an editor.





------------=_4A53585E.8CD6B591

Content-Type: message/rfc822; x-spam-type=original

Content-Description: original message before SpamAssassin

Content-Disposition: attachment

Content-Transfer-Encoding: 8bit



Return-Path:

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id 626B87338D1; Tue, 7 Jul 2009 08:14:44 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 7 Jul 2009 08:14:44 -0600

Resent-Message-ID: <20090707141444.GD7592@doctor.nl2k.ab.ca>

Resent-To: See root

X-Original-To: doctor@netknow.ca

Delivered-To: doctor@netknow.ca

Received: from lib-mail.city.hokuto.hokkaido.jp (gw3.city.hokuto.hokkaido.jp [219.109.234.212])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id BE1207338CF

for ; Tue, 7 Jul 2009 06:11:45 -0600 (MDT)

Received: from User (209-204-144-182.dsl.static.sonic.net [209.204.144.182])

by lib-mail.city.hokuto.hokkaido.jp (Postfix) with ESMTP

id 252314840B1; Tue, 7 Jul 2009 20:38:51 +0900 (JST)

Reply-To:

From: "Scotiabank"

Subject: Proceed the SMDI Survey

Date: Tue, 7 Jul 2009 04:29:55 -0700

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20090707113851.252314840B1@lib-mail.city.hokuto.hokkaido.jp>

To: undisclosed-recipients:;











































Scotia OnLine







































































































  Communications Centre





























































































































 






























































































































Dear ScotiaCard Member,








































 

src="/images/1x1_blackline.gif"

width=1>




















Welcome to "Communications Centre" service.





We recently invited you to participate in the annual ScotiaMcLeod Direct Investing survey. If you have already completed the survey, we thank you for your feedback and no further action is required.



If you have not yet had an opportunity to fill out the survey, we would like to remind you that the feedback collection period ends Sunday, July 12. Please take the time now to fill out the survey. Your input is greatly appreciated and helps us to improve the services we offer to all our clients.



Please complete the survey by clicking the link below "Proceed to the SMDI Survey". You will be taken to a secure website hosted by our independent, third-party research partner, TNS Canadian Facts, where you can complete the survey. It should take about 15 minutes of your time. We assure you that your answers will be held in strictest confidence and will only be reported in aggregate with the responses of all other clients participating in this research.



Proceed to the SMDI Survey:





https://www.scotiaonline.scotiabank.com/online/start.jsp?language=true





Thank you,


Scotiabank Head Office


44 King St West


Toronto ON


M5H 1H1


info@scotiabank.com


1-800-4SCOTIA (1-800-472-6842)


1-800-645-0288 (services for the hearing impaired)


(416) 701-7200 (Greater Toronto Area)


















































































































































------------=_4A53585E.8CD6B591

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-465446CB======="



--=======AVGMAIL-465446CB=======

Content-Type: text/plain; x-avg=cert; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-465446CB=======--

------------=_4A53585E.8CD6B591--





More Scotiabank Phish

Posted by Dave Yadallee on
From - Tue Jul 07 08:24:26 2009

X-Account-Key: account2

X-UIDL: dU:!!ZkQ"!?kG"!8-]"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 10000000

X-Mozilla-Keys:

Received: from localhost by doctor.nl2k.ab.ca

with SpamAssassin (version 3.2.5);

Tue, 07 Jul 2009 08:14:50 -0600

From: "Scotiabank"

To: undisclosed-recipients:;

Subject: SPAM Proceed the SMDI Survey

Date: Tue, 7 Jul 2009 04:29:55 -0700

Message-Id: <20090707113851.252314840B1@lib-mail.city.hokuto.hokkaido.jp>

X-Spam-Virus: Yes (Phishing.Heuristics.Email.SSL-Spoof)

X-Spam-Flag: YES

X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on doctor.nl2k.ab.ca

X-Spam-Level: **************************************************

X-Spam-Status: Yes, score=136.1 required=5.0 tests=BAYES_50,CLAMAV,

FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_MESSAGE,

MIME_HTML_ONLY,MSOE_MID_WRONG_CASE,RCVD_IN_JMF_BL,RCVD_IN_SORBS_DUL,

SARE_WEOFFER,URIBL_PH_SURBL autolearn=spam version=3.2.5

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----------=_4A53585A.B8FB0699"

X-UIDL: dU:!!ZkQ"!?kG"!8-]"!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]





This is a multi-part message in MIME format.



------------=_4A53585A.B8FB0699

Content-Type: text/plain; charset=iso-8859-1

Content-Disposition: inline

Content-Transfer-Encoding: 8bit



Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: Scotia OnLine Communications Centre Dear ScotiaCard Member,

Welcome to "Communications Centre" service. [...]



Content analysis details: (136.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.8 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist

[URIs: scotianbanks.com]

0.9 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address

[219.109.234.212 listed in dnsbl.sorbs.net]

13 RCVD_IN_JMF_BL RBL: Sender listed in JMF-BLACK

[219.109.234.212 listed in hostkarma.junkemailfilter.com]

45 SARE_WEOFFER BODY: Offers Something

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%

[score: 0.5001]

1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

70 CLAMAV Clam AntiVirus detected a virus

0.8 MSOE_MID_WRONG_CASE MSOE_MID_WRONG_CASE

0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only

0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

3.1 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook



The original message was not completely plain text, and may be unsafe to

open with some email clients; in particular, it may contain a virus,

or confirm that your address can receive spam. If you wish to view

it, it may be safer to save it to a file and open it with an editor.





------------=_4A53585A.B8FB0699

Content-Type: message/rfc822; x-spam-type=original

Content-Description: original message before SpamAssassin

Content-Disposition: attachment

Content-Transfer-Encoding: 8bit



Return-Path:

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id A5DA67338CE; Tue, 7 Jul 2009 08:14:37 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 7 Jul 2009 08:14:37 -0600

Resent-Message-ID: <20090707141437.GC7592@doctor.nl2k.ab.ca>

Resent-To: See root

X-Original-To: doctor@nl2k.ab.ca

Delivered-To: doctor@nl2k.ab.ca

Received: from lib-mail.city.hokuto.hokkaido.jp (gw3.city.hokuto.hokkaido.jp [219.109.234.212])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 4DB1C7338CE

for ; Tue, 7 Jul 2009 05:30:03 -0600 (MDT)

Received: from User (209-204-144-182.dsl.static.sonic.net [209.204.144.182])

by lib-mail.city.hokuto.hokkaido.jp (Postfix) with ESMTP

id 252314840B1; Tue, 7 Jul 2009 20:38:51 +0900 (JST)

Reply-To:

From: "Scotiabank"

Subject: Proceed the SMDI Survey

Date: Tue, 7 Jul 2009 04:29:55 -0700

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20090707113851.252314840B1@lib-mail.city.hokuto.hokkaido.jp>

To: undisclosed-recipients:;











































Scotia OnLine







































































































  Communications Centre





























































































































 






























































































































Dear ScotiaCard Member,








































 

src="/images/1x1_blackline.gif"

width=1>




















Welcome to "Communications Centre" service.





We recently invited you to participate in the annual ScotiaMcLeod Direct Investing survey. If you have already completed the survey, we thank you for your feedback and no further action is required.



If you have not yet had an opportunity to fill out the survey, we would like to remind you that the feedback collection period ends Sunday, July 12. Please take the time now to fill out the survey. Your input is greatly appreciated and helps us to improve the services we offer to all our clients.



Please complete the survey by clicking the link below "Proceed to the SMDI Survey". You will be taken to a secure website hosted by our independent, third-party research partner, TNS Canadian Facts, where you can complete the survey. It should take about 15 minutes of your time. We assure you that your answers will be held in strictest confidence and will only be reported in aggregate with the responses of all other clients participating in this research.



Proceed to the SMDI Survey:





https://www.scotiaonline.scotiabank.com/online/start.jsp?language=true





Thank you,


Scotiabank Head Office


44 King St West


Toronto ON


M5H 1H1


info@scotiabank.com


1-800-4SCOTIA (1-800-472-6842)


1-800-645-0288 (services for the hearing impaired)


(416) 701-7200 (Greater Toronto Area)


















































































































































------------=_4A53585A.B8FB0699

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-1EAF5B7D======="



--=======AVGMAIL-1EAF5B7D=======

Content-Type: text/plain; x-avg=cert; charset=us-ascii

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-1EAF5B7D=======--

------------=_4A53585A.B8FB0699--





Scotiabank PHish

Posted by Dave Yadallee on
From - Tue Jul 07 04:09:22 2009

X-Account-Key: account2

X-UIDL: 2MI"!-9b"!&-!"!gfg!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

X-Original-To: sales@nk.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix)

id 0FC537338CC; Tue, 7 Jul 2009 04:04:37 -0600 (MDT)

Delivered-To: sales@nk.ca

Received: from mail.spreadinnovation.com (medusa.spreadinnovation.com [74.43.179.196])

(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))

(No client certificate requested)

by doctor.nl2k.ab.ca (Postfix) with ESMTPS id AC3E87338C7

for ; Tue, 7 Jul 2009 04:03:44 -0600 (MDT)

Received: from medusa.spreadinnovation.org (localhost [127.0.0.1])

by mail.spreadinnovation.com (Postfix) with SMTP id 0164345438D;

Tue, 7 Jul 2009 06:03:43 -0400 (EDT)

Received: from User (static24-72-38-106.regina.accesscomm.ca [24.72.38.106])

by mail.spreadinnovation.com (Postfix) with ESMTP id 28D2B45438D;

Tue, 7 Jul 2009 06:02:46 -0400 (EDT)

Reply-To:

From: "Bank of Nova Scotia"

Subject: Notification Of Limited Account

Date: Tue, 7 Jul 2009 04:03:13 -0600

MIME-Version: 1.0

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Message-Id: <20090707100247.28D2B45438D@mail.spreadinnovation.com>

To: undisclosed-recipients:;

X-UIDL: 2MI"!-9b"!&-!"!gfg!!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]

Content-Type: multipart/mixed; boundary="=======AVGMAIL-37980E21======="





--=======AVGMAIL-37980E21=======

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit












Dear Bank of Nova Scotia Customer,




During our regularly scheduled account maintenance and verification procedures,




we have detected a slight error in your account information.


To securely confirm your personal information please click on the link bellow:





https://www.scotiaonline.scotiabank.com/online/start.jsp



Confirm Your Bank of Nova Scotia Account and SiteKey now to enjoy the benefits of


online banking and finance to avoid identity theft and fraudulent activities on


your account.



Note: We will be upgrading our yearly SSL EncryptedServer to prevent fraudulent


activity.



2009 Bank of Nova Scotia Corporation. All rights reserved.







--=======AVGMAIL-37980E21=======

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-5A4E690E======="



--=======AVGMAIL-5A4E690E=======

Content-Type: text/plain; x-avg=cert; charset=Windows-1251

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-5A4E690E=======--

--=======AVGMAIL-37980E21=======--



More Desjardins Phish

Posted by Dave Yadallee on
From - Tue Jul 07 08:24:31 2009

X-Account-Key: account2

X-UIDL: 8lh"!ggQ!!B#)!!I3d"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id BC3597338CF; Tue, 7 Jul 2009 08:17:24 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 7 Jul 2009 08:17:24 -0600

Resent-Message-ID: <20090707141724.GH7592@doctor.nl2k.ab.ca>

Resent-To: See root

X-Spam-Virus: No

X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on doctor.nl2k.ab.ca

X-Spam-Level: ****

X-Spam-Status: No, score=4.7 required=5.0 tests=HTML_IMAGE_ONLY_04,

HTML_MESSAGE,MIME_HTML_ONLY,MISSING_HEADERS autolearn=no version=3.2.5

X-Original-To: doctor@netknow.ca

Delivered-To: doctor@netknow.ca

Received: from mail.401kexchange.com (mail.401kexchange.com [65.115.190.98])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 65F9F7338CE

for ; Tue, 7 Jul 2009 08:04:12 -0600 (MDT)

Received: from User ([66.194.254.70]) by mail.401kexchange.com with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 7 Jul 2009 10:04:11 -0400

From:

Subject: Important Amelioration de la procedure de connexion

Date: Tue, 7 Jul 2009 10:04:11 -0400

MIME-Version: 1.0

Message-ID:

X-OriginalArrivalTime: 07 Jul 2009 14:04:11.0891 (UTC) FILETIME=[CDC7B430:01C9FF0B]

X-UIDL: 8lh"!ggQ!!B#)!!I3d"!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]

Content-Type: multipart/mixed; boundary="=======AVGMAIL-45EA27B5======="





--=======AVGMAIL-45EA27B5=======

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit



















--=======AVGMAIL-45EA27B5=======

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-674528CE======="



--=======AVGMAIL-674528CE=======

Content-Type: text/plain; x-avg=cert; charset=Windows-1251

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-674528CE=======--

--=======AVGMAIL-45EA27B5=======--



More Desjardins Phish

Posted by Dave Yadallee on
From - Tue Jul 07 08:24:32 2009

X-Account-Key: account2

X-UIDL: 6'3!!6-Q"!_#H"!SGo!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id 4649E7338D1; Tue, 7 Jul 2009 08:17:29 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 7 Jul 2009 08:17:29 -0600

Resent-Message-ID: <20090707141729.GI7592@doctor.nl2k.ab.ca>

Resent-To: See root

X-Original-To: doctor@nl2k.ab.ca

Delivered-To: doctor@nl2k.ab.ca

Received: from mail.401kexchange.com (mail.401kexchange.com [65.115.190.98])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 7060A7338D0

for ; Tue, 7 Jul 2009 08:04:12 -0600 (MDT)

Received: from User ([66.194.254.70]) by mail.401kexchange.com with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 7 Jul 2009 10:04:11 -0400

From:

Subject: Important Amelioration de la procedure de connexion

Date: Tue, 7 Jul 2009 10:04:11 -0400

MIME-Version: 1.0

Message-ID:

X-OriginalArrivalTime: 07 Jul 2009 14:04:11.0891 (UTC) FILETIME=[CDC7B430:01C9FF0B]

X-UIDL: 6'3!!6-Q"!_#H"!SGo!!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]

Content-Type: multipart/mixed; boundary="=======AVGMAIL-15D978C7======="





--=======AVGMAIL-15D978C7=======

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit



















--=======AVGMAIL-15D978C7=======

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-77AE2EA4======="



--=======AVGMAIL-77AE2EA4=======

Content-Type: text/plain; x-avg=cert; charset=Windows-1251

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-77AE2EA4=======--

--=======AVGMAIL-15D978C7=======--



More Desjardins Phish

Posted by Dave Yadallee on
From - Tue Jul 07 08:24:33 2009

X-Account-Key: account2

X-UIDL: VJp"!cY&#!SfX!!eK#!!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Return-Path:

X-Original-To: aboo@doctor.nl2k.ab.ca

Delivered-To: aboo@doctor.nl2k.ab.ca

Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)

id 5142B7338D2; Tue, 7 Jul 2009 08:17:33 -0600 (MDT)

Resent-From: doctor@doctor.nl2k.ab.ca

Resent-Date: Tue, 7 Jul 2009 08:17:33 -0600

Resent-Message-ID: <20090707141733.GJ7592@doctor.nl2k.ab.ca>

Resent-To: See root

X-Spam-Virus: No

X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on doctor.nl2k.ab.ca

X-Spam-Level: ****

X-Spam-Status: No, score=4.7 required=5.0 tests=HTML_IMAGE_ONLY_04,

HTML_MESSAGE,MIME_HTML_ONLY,MISSING_HEADERS autolearn=no version=3.2.5

X-Original-To: doctor@doctor.nl2k.ab.ca

Delivered-To: doctor@doctor.nl2k.ab.ca

Received: from mail.401kexchange.com (mail.401kexchange.com [65.115.190.98])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6A4227338CF

for ; Tue, 7 Jul 2009 08:04:12 -0600 (MDT)

Received: from User ([66.194.254.70]) by mail.401kexchange.com with Microsoft SMTPSVC(6.0.3790.3959);

Tue, 7 Jul 2009 10:04:11 -0400

From:

Subject: Important Amelioration de la procedure de connexion

Date: Tue, 7 Jul 2009 10:04:11 -0400

MIME-Version: 1.0

Message-ID:

X-OriginalArrivalTime: 07 Jul 2009 14:04:11.0891 (UTC) FILETIME=[CDC7B430:01C9FF0B]

X-UIDL: VJp"!cY&#!SfX!!eK#!!

X-Antivirus: AVG for E-mail 8.5.375 [270.13.6/2221]

Content-Type: multipart/mixed; boundary="=======AVGMAIL-05131233======="





--=======AVGMAIL-05131233=======

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit



















--=======AVGMAIL-05131233=======

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-72CC38CA======="



--=======AVGMAIL-72CC38CA=======

Content-Type: text/plain; x-avg=cert; charset=Windows-1251

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "AVG certification"





No virus found in this incoming message.

Checked by AVG - www.avg.com

Version: 8.5.375 / Virus Database: 270.13.6/2221 - Release Date: 07/06/09 17=

:54:00



--=======AVGMAIL-72CC38CA=======--

--=======AVGMAIL-05131233=======--