IRS Phish
Posted by Dave Yadallee on
From - Fri Jul 19 07:51:55 2013
X-Account-Key: account1
X-UIDL: 00001f324f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Jul 2013 07:49:26 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.80.1)
(envelope-from)
id 1V0B39-0006OM-Uy
for dave@doctor.nl2k.ab.ca; Fri, 19 Jul 2013 07:48:47 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Fri, 19 Jul 2013 07:48:47 -0600
Resent-Message-ID: <20130719134847.GB22737@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from relay1.transip.nl ([80.69.67.19])
by doctor.nl2k.ab.ca with esmtp (Exim 4.80.1)
(envelope-from)
id 1V07y5-0003yf-EY
for archive@nl2k.ab.ca; Fri, 19 Jul 2013 04:31:31 -0600
Received: from webapp0.transip.nl (mysql.transip.nl [95.170.70.112])
by relay1.transip.nl (Postfix) with ESMTP id 393CB24FC82;
Fri, 19 Jul 2013 12:31:15 +0200 (CEST)
Received: from webapp0.transip.nl (localhost [127.0.0.1])
by webapp0.transip.nl (Postfix) with ESMTP id 342E51830C4E;
Fri, 19 Jul 2013 12:31:15 +0200 (CEST)
X-Virus-Scanned: amavisd-new at webapp0.transip.nl
Received: from webapp0.transip.nl ([127.0.0.1])
by webapp0.transip.nl (webapp0.transip.nl [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id OlYQOwdD1mU1; Fri, 19 Jul 2013 12:31:15 +0200 (CEST)
Received: from webmail.transip.nl (localhost [127.0.0.1])
by webapp0.transip.nl (Postfix) with ESMTP id C70741830C49;
Fri, 19 Jul 2013 12:31:12 +0200 (CEST)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_ee20905cbeee7ae16124fd9f374d568d"
Date: Fri, 19 Jul 2013 05:31:12 -0500
From: Claudia smith
To: undisclosed-recipients:;
Subject: Shipment delivery
Message-ID:
X-Sender: cphillips@goldenlog.net
User-Agent: TransIP Webmail
X-Antivirus: AVG for E-mail 10.0.1432 [3204/6001]
X-AVG-ID: ID6AEC921F-4B1A563F
--=_ee20905cbeee7ae16124fd9f374d568d
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Dear Recipient ,
This is an automatically generated email from
Dynamex logistic- Please do not reply to it.
A collection will be made
on 22-July-2013 09:16 for delivery to you, via Overnight service, by
Dynamex Logistics on behalf of Internal Revenue Service IRS.
The
delivery deadline time is set for 24-July-2013 16:00
If you have a
query regarding this email please contact (310) 371-2300 Quoting
Reference #75566DF
You can use the following link to track this order
DOWNLOAD TRACKING DETAILS [1]
Links:
------
[1]
http://www.onlinetransferencia.com/download/trackingdetails/Delivery.zip
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13
--=_ee20905cbeee7ae16124fd9f374d568d
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
width=3D"205" height=3D"86" align=3D"baseline" border=3D"0" />
X-Account-Key: account1
X-UIDL: 00001f324f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Jul 2013 07:49:26 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.80.1)
(envelope-from
id 1V0B39-0006OM-Uy
for dave@doctor.nl2k.ab.ca; Fri, 19 Jul 2013 07:48:47 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Fri, 19 Jul 2013 07:48:47 -0600
Resent-Message-ID: <20130719134847.GB22737@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from relay1.transip.nl ([80.69.67.19])
by doctor.nl2k.ab.ca with esmtp (Exim 4.80.1)
(envelope-from
id 1V07y5-0003yf-EY
for archive@nl2k.ab.ca; Fri, 19 Jul 2013 04:31:31 -0600
Received: from webapp0.transip.nl (mysql.transip.nl [95.170.70.112])
by relay1.transip.nl (Postfix) with ESMTP id 393CB24FC82;
Fri, 19 Jul 2013 12:31:15 +0200 (CEST)
Received: from webapp0.transip.nl (localhost [127.0.0.1])
by webapp0.transip.nl (Postfix) with ESMTP id 342E51830C4E;
Fri, 19 Jul 2013 12:31:15 +0200 (CEST)
X-Virus-Scanned: amavisd-new at webapp0.transip.nl
Received: from webapp0.transip.nl ([127.0.0.1])
by webapp0.transip.nl (webapp0.transip.nl [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id OlYQOwdD1mU1; Fri, 19 Jul 2013 12:31:15 +0200 (CEST)
Received: from webmail.transip.nl (localhost [127.0.0.1])
by webapp0.transip.nl (Postfix) with ESMTP id C70741830C49;
Fri, 19 Jul 2013 12:31:12 +0200 (CEST)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_ee20905cbeee7ae16124fd9f374d568d"
Date: Fri, 19 Jul 2013 05:31:12 -0500
From: Claudia smith
To: undisclosed-recipients:;
Subject: Shipment delivery
Message-ID:
X-Sender: cphillips@goldenlog.net
User-Agent: TransIP Webmail
X-Antivirus: AVG for E-mail 10.0.1432 [3204/6001]
X-AVG-ID: ID6AEC921F-4B1A563F
--=_ee20905cbeee7ae16124fd9f374d568d
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=UTF-8
Dear Recipient ,
This is an automatically generated email from
Dynamex logistic- Please do not reply to it.
A collection will be made
on 22-July-2013 09:16 for delivery to you, via Overnight service, by
Dynamex Logistics on behalf of Internal Revenue Service IRS.
The
delivery deadline time is set for 24-July-2013 16:00
If you have a
query regarding this email please contact (310) 371-2300 Quoting
Reference #75566DF
You can use the following link to track this order
DOWNLOAD TRACKING DETAILS [1]
Links:
------
[1]
http://www.onlinetransferencia.com/download/trackingdetails/Delivery.zip
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13
--=_ee20905cbeee7ae16124fd9f374d568d
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
width=3D"205" height=3D"86" align=3D"baseline" border=3D"0" />
Dear Recipient ,
=
This =
is an automatically generated email from Dynamex logistic- Please do not re=
ply to it.
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
=3D"left" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13=
--=_ee20905cbeee7ae16124fd9f374d568d--
This =
is an automatically generated email from Dynamex logistic- Please do not re=
ply to it.
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
A collection will be made on 22-July-2013 09:16 for delivery to you, v=
ia Overnight service, by Dynamex Logistics on behalf of Internal Revenue Se=
rvice IRS.
ia Overnight service, by Dynamex Logistics on behalf of Internal Revenue Se=
rvice IRS.
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
The delivery deadline time is set for 24-July-2013 16:00
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
=
n>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
v>
n>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
If you have a query regarding this email please contact (310) 371-2300=
Quoting Reference #75566DF
Quoting Reference #75566DF
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
You can use the following link to track this order
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
style=3D"color: #000000; font-family: Arial; font-size: small;">
pan>
v>
=3D"left" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13=
--=_ee20905cbeee7ae16124fd9f374d568d--
BMO Phish
Posted by Dave Yadallee on
From - Fri Jul 19 07:51:55 2013
X-Account-Key: account1
X-UIDL: 00001f314f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Jul 2013 07:48:22 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.80.1)
(envelope-from)
id 1V0B2i-0006Ln-1P
for dave@doctor.nl2k.ab.ca; Fri, 19 Jul 2013 07:48:20 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Fri, 19 Jul 2013 07:48:19 -0600
Resent-Message-ID: <20130719134819.GA22737@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from toroondcbmts06.bellnexxia.net ([207.236.237.40] helo=toroondcbmts06-srv.bellnexxia.net)
by doctor.nl2k.ab.ca with esmtp (Exim 4.80.1)
(envelope-from)
id 1V07XI-0001Zh-9j
for sales@nk.ca; Fri, 19 Jul 2013 04:03:54 -0600
Received: from toip52-bus.srvr.bell.ca ([67.69.240.55])
by toroondcbmts06-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20130719100335.NCSJ14379.toroondcbmts06-srv.bellnexxia.net@toip52-bus.srvr.bell.ca>
for; Fri, 19 Jul 2013 06:03:35 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AmN2ALIF6VFMQffv/2dsb2JhbABABAMKCRGBYAQBgUWIaYMYoVWCf4gEgxOFKYEmdB8BAYF6Ii4IESEdAScCBAIBgQIih1YYDDOZAgEBij6DT3lTjSEGjkUPgTUXDAoHAoNTiSmPYIUEhW0phQqDHy8PgQEDARoHF4Ee
X-IronPort-AV: E=Sophos;i="4.89,700,1367985600";
d="scan'208,217";a="428584832"
Received: from mtrlpq02-1279391727.sdsl.bell.ca (HELO email.microsoft.com) ([76.65.247.239])
by toip52-bus.srvr.bell.ca with ESMTP; 19 Jul 2013 06:03:32 -0400
MIME-Version: 1.0
From: bmo_montreal_onlinee@news.ca
Reply-To: bmo_montreal_onlinee@news.ca
To: sales@nk.ca
Subject: BMO Members
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_3112_7CBE5AC5.207D0720"
Date: Fri, 19 Jul 2013 18:09:30 +0800
Message-ID: <5656193585160261808289@BELFILE>
DKIM-Signature: v=1; a=rsa-sha1; d=microsoft.discoverbing.com; s=ciprod; c=relaxed/relaxed; l=34543; i=@*.microsoft.discoverbing.com; t=1364954340; x=1396490340; q=dns/txt; h=Date:From:To:Message-ID:Subject; bh=ofdy/uIutDCPqJDeQrrXR9GiBTM=; b=XYrsNQlygreKsW9QIRHxoLBU21OK2/k0xaf2UdPdRh2VnGkcjJ45WcYADEhPM+1eUtBQAIJf7PhTWwtcmyQBekE+UVnF9kAAqJjhMcAmC5izYnU6wtK/wYX7AcMaOGzIMyq49NwFUnTZn05pRC8yV6GPo3gFWblIJ6EeI22bfxI=
X-Antivirus: AVG for E-mail 10.0.1432 [3204/6001]
X-AVG-ID: ID6B8C7033-8F29F67
------=_NextPart_001_3112_7CBE5AC5.207D0720
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
DEAR VALUED CUSTOMER,
A recent security update as being issued from BMO Bank of Montreal fraud de=
partment. We require you to update your
online accounts due to a recent security patch upgrade to our servers.
You are requested to verify your account details correctly with us.
Verify and Update your identity =5B MyAccount Activity Profile=5D
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13
------=_NextPart_001_3112_7CBE5AC5.207D0720
Content-Type: text/html; charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
2">
t" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13=
------=_NextPart_001_3112_7CBE5AC5.207D0720--
X-Account-Key: account1
X-UIDL: 00001f314f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Fri, 19 Jul 2013 07:48:22 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.80.1)
(envelope-from
id 1V0B2i-0006Ln-1P
for dave@doctor.nl2k.ab.ca; Fri, 19 Jul 2013 07:48:20 -0600
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Fri, 19 Jul 2013 07:48:19 -0600
Resent-Message-ID: <20130719134819.GA22737@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
Received: from toroondcbmts06.bellnexxia.net ([207.236.237.40] helo=toroondcbmts06-srv.bellnexxia.net)
by doctor.nl2k.ab.ca with esmtp (Exim 4.80.1)
(envelope-from
id 1V07XI-0001Zh-9j
for sales@nk.ca; Fri, 19 Jul 2013 04:03:54 -0600
Received: from toip52-bus.srvr.bell.ca ([67.69.240.55])
by toroondcbmts06-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20130719100335.NCSJ14379.toroondcbmts06-srv.bellnexxia.net@toip52-bus.srvr.bell.ca>
for
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AmN2ALIF6VFMQffv/2dsb2JhbABABAMKCRGBYAQBgUWIaYMYoVWCf4gEgxOFKYEmdB8BAYF6Ii4IESEdAScCBAIBgQIih1YYDDOZAgEBij6DT3lTjSEGjkUPgTUXDAoHAoNTiSmPYIUEhW0phQqDHy8PgQEDARoHF4Ee
X-IronPort-AV: E=Sophos;i="4.89,700,1367985600";
d="scan'208,217";a="428584832"
Received: from mtrlpq02-1279391727.sdsl.bell.ca (HELO email.microsoft.com) ([76.65.247.239])
by toip52-bus.srvr.bell.ca with ESMTP; 19 Jul 2013 06:03:32 -0400
MIME-Version: 1.0
From: bmo_montreal_onlinee@news.ca
Reply-To: bmo_montreal_onlinee@news.ca
To: sales@nk.ca
Subject: BMO Members
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_3112_7CBE5AC5.207D0720"
Date: Fri, 19 Jul 2013 18:09:30 +0800
Message-ID: <5656193585160261808289@BELFILE>
DKIM-Signature: v=1; a=rsa-sha1; d=microsoft.discoverbing.com; s=ciprod; c=relaxed/relaxed; l=34543; i=@*.microsoft.discoverbing.com; t=1364954340; x=1396490340; q=dns/txt; h=Date:From:To:Message-ID:Subject; bh=ofdy/uIutDCPqJDeQrrXR9GiBTM=; b=XYrsNQlygreKsW9QIRHxoLBU21OK2/k0xaf2UdPdRh2VnGkcjJ45WcYADEhPM+1eUtBQAIJf7PhTWwtcmyQBekE+UVnF9kAAqJjhMcAmC5izYnU6wtK/wYX7AcMaOGzIMyq49NwFUnTZn05pRC8yV6GPo3gFWblIJ6EeI22bfxI=
X-Antivirus: AVG for E-mail 10.0.1432 [3204/6001]
X-AVG-ID: ID6B8C7033-8F29F67
------=_NextPart_001_3112_7CBE5AC5.207D0720
Content-Type: text/plain; charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
DEAR VALUED CUSTOMER,
A recent security update as being issued from BMO Bank of Montreal fraud de=
partment. We require you to update your
online accounts due to a recent security patch upgrade to our servers.
You are requested to verify your account details correctly with us.
Verify and Update your identity =5B MyAccount Activity Profile=5D
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13
------=_NextPart_001_3112_7CBE5AC5.207D0720
Content-Type: text/html; charset="windows-1252"
Content-Transfer-Encoding: quoted-printable
2">
DEAR VALUED CUSTOME=
R,
A recent security u=
pdate as being issued from BMO Bank of Montreal fraud department. We requir=
e you to update your
online accounts due to a recent security patch upgr=
ade to our servers.
You are requested t=
o verify your account details correctly with us.
Verify and Update y=
our identity =
=5B MyAccount Activity Profile=5D
t" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3204/6001 - Release Date: 07/18/13=
------=_NextPart_001_3112_7CBE5AC5.207D0720--