Scared Fraudsters write in panic!
Posted by Dave Yadallee on
From - Tue Mar 25 10:11:40 2014
X-Account-Key: account2
X-UIDL: 0005742e501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: sales@nk.ca
Delivery-date: Tue, 25 Mar 2014 10:10:01 -0600
Received: from oregon2.footholds.net ([91.146.107.68] helo=oregon.footholds.net)
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from)
id 1WSTvC-0006qi-8x
for sales@nk.ca; Tue, 25 Mar 2014 10:10:00 -0600
Received: from ec2-23-23-157-152.compute-1.amazonaws.com ([23.23.157.152]:43540 helo=www.buzzstream.com)
by oregon.footholds.net with esmtpsa (TLSv1:RC4-MD5:128)
(Exim 4.82)
(envelope-from)
id 1WSTuu-00018P-9k
for sales@nk.ca; Tue, 25 Mar 2014 16:09:40 +0000
From: MEC Outreach Team
Reply-To: MEC Outreach Team
To: sales@nk.ca
Message-ID: <855482165.2031.1395763773580.JavaMail.ec2-user@ip-10-108-171-6>
Subject: Important Reminder: Halifax Bank Link removal request
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-OutGoing-Spam-Status: No, score=-0.4
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - oregon.footholds.net
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mecmanchester.co.uk
X-Get-Message-Sender-Via: oregon.footholds.net: authenticated_id: technical@mecmanchester.co.uk
X-Source:
X-Source-Args:
X-Source-Dir:
X-Account-Key: account2
X-UIDL: 0005742e501fb806
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-path:
Envelope-to: sales@nk.ca
Delivery-date: Tue, 25 Mar 2014 10:10:01 -0600
Received: from oregon2.footholds.net ([91.146.107.68] helo=oregon.footholds.net)
by doctor.nl2k.ab.ca with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.82)
(envelope-from
id 1WSTvC-0006qi-8x
for sales@nk.ca; Tue, 25 Mar 2014 10:10:00 -0600
Received: from ec2-23-23-157-152.compute-1.amazonaws.com ([23.23.157.152]:43540 helo=www.buzzstream.com)
by oregon.footholds.net with esmtpsa (TLSv1:RC4-MD5:128)
(Exim 4.82)
(envelope-from
id 1WSTuu-00018P-9k
for sales@nk.ca; Tue, 25 Mar 2014 16:09:40 +0000
From: MEC Outreach Team
Reply-To: MEC Outreach Team
To: sales@nk.ca
Message-ID: <855482165.2031.1395763773580.JavaMail.ec2-user@ip-10-108-171-6>
Subject: Important Reminder: Halifax Bank Link removal request
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: 7bit
X-OutGoing-Spam-Status: No, score=-0.4
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - oregon.footholds.net
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - mecmanchester.co.uk
X-Get-Message-Sender-Via: oregon.footholds.net: authenticated_id: technical@mecmanchester.co.uk
X-Source:
X-Source-Args:
X-Source-Dir:
Hello,
I am just following up on the email below. Have you had a chance to take a look at my request to remove the link(s) to Halifax Bank from your site?
Please don’t hesitate to get in touch if you need any further assistance or require formal documentation from my client.
Articles where links have been located:
- edmontoninternetserviceprovider.ca/blog/index.php?/archives/763-More-Halifax-Banking-Phish.html
- edmontoninternetserviceprovider.ca/blog/index.php?/archives/763-More-Halifax-Banking-Phish.html
- edmontoninternetserviceprovider.ca/blog/index.php?/archives/763-More-Halifax-Banking-Phish.html
Regards,
MEC Outreach Team
technical@mecmanchester.co.uk
Office: 01619309011
Bass Warehouse4 Castle St, Castlefield, Manchester,United Kingdom
http://www.mecglobal.com
A GroupM Company