Notice the URL in this one? It's real bad. It end with the "correct" URL, but it is so long that it is likely you will miss that part 8-)

Return-Path: <alerts@cs.usbank-email.com>
X-Original-To: alexis@halk.m2osw.com
Delivered-To: alexis@halk.m2osw.com
Received: from mail.m2osw.com (jcolo [69.55.238.181])
    by halk.m2osw.com (Postfix) with ESMTP id C9DBF1BDAB
    for <alexis@halk.m2osw.com>; Sat, 19 Sep 2009 21:44:42 -0700 (PDT)
X-Greylist: delayed 5191 seconds by postgrey-1.31 at web.m2osw.com; Sat, 19 Sep 2009 21:44:39 PDT
Received: from droandi.it (ip-226-197.sn2.eutelia.it [83.211.226.197])
    by mail.m2osw.com (Postfix) with ESMTP id 877FA694486E
    for <alexis@m2osw.com>; Sat, 19 Sep 2009 21:44:37 -0700 (PDT)
Received: from User ([70.239.17.14]) by droandi.it with Microsoft SMTPSVC(6.0.3790.3959);
     Sat, 19 Sep 2009 21:54:22 +0200
From: "U.S. Bank Alerts"<alerts@cs.usbank-email.com>
Subject: Internet Banking is unable to verify the information you have entered.
Date: Sat, 19 Sep 2009 15:56:21 -0400
MIME-Version: 1.0
Content-Type: text/plain;
    charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 1
X-MSMail-Priority: High
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <SERVERDRO3YILoygXLs000000c3@droandi.it>
X-OriginalArrivalTime: 19 Sep 2009 19:54:22.0873 (UTC) FILETIME=[FBDEA090:01CA3962]
To: undisclosed-recipients:;

Alert
  
Internet Banking is unable to verify the information you have entered.
For your security, your Personal ID has been locked and you will be unable to login.

Please contact us at: http://mail.logosnet.com.br/functions/.www.usbank.com/
 


Error Code = A90002