496
TD Canada Trust—Protection from online fraud activity
This one caught my eye because the very first link did not work in Pine. The fact is, it included two newline characters at the very beginning and they had not thought of that in Pine (which simply prints these newline characters and ends up printing the URL 2 lines below where it is supposed to be.) I fixed that link since it will bring you to the bank safely. I removed the other link that was the phisher link. Also, in the middle there was a broken link that, again, Pine shown instead of the hacker link. That means the hacker email was so bad that it was not even possible for me to get to his website. Funny.
First broken link:
<A href="https://update-r/" target=_blank>
The hacker link was like this:
<A href="http://easyweb.tdcanadatrust.perezorive.com/update.html">
As you can see, it starts with "easyweb" and "tdcanadatrust". But it really is "perezorive.com" whatever that site is, I dunno.
A dig of perezorive gives me this now:
;; ANSWER SECTION:
perezorive.com. 14400 IN A 8.7.57.76
;; AUTHORITY SECTION:
perezorive.com. 14400 IN NS ns2.vnocspace.net.
perezorive.com. 14400 IN NS ns1.vnocspace.net.
;; ADDITIONAL SECTION:
ns1.vnocspace.net. 107574 IN A 8.10.51.160
ns2.vnocspace.net. 107574 IN A 8.10.51.161
And whois gives us this:
Domain Name: PEREZORIVE.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: NS1.VNOCSPACE.NET
Name Server: NS2.VNOCSPACE.NET
Status: clientTransferProhibited
Updated Date: 11-oct-2006
Creation Date: 01-jul-2004
Expiration Date: 01-jul-2008
Registrant:
Perez-Orive, Eduardo
210 174th Street # 1609
Sunny Isles Beach, FL 33160
US
Domain Name: PEREZORIVE.COM
------------------------------------------------------------------------
Promote your business to millions of viewers for only $1 a month
Learn how you can get an Enhanced Business Listing here for your domain name.
Learn more at http://www.NetworkSolutions.com/
------------------------------------------------------------------------
Administrative Contact, Technical Contact:
Perez-Orive, Eduardo eduorive@bellsouth.net
210 174th Street # 1609
Sunny Isles Beach, FL 33160
US
305-799-3218
Record expires on 01-Jul-2008.
Record created on 01-Jul-2004.
Database last updated on 5-Dec-2007 23:33:37 EST.
Domain servers in listed order:
NS1.VNOCSPACE.NET
NS2.VNOCSPACE.NET
According to this website: http://www.aboutus.org/PEREZORIVE.COM this is the URL of some realtor. Probably got hacked if that's true.
<A href="https://update-r/" target=_blank>
The hacker link was like this:
<A href="http://easyweb.tdcanadatrust.perezorive.com/update.html">
As you can see, it starts with "easyweb" and "tdcanadatrust". But it really is "perezorive.com" whatever that site is, I dunno.
A dig of perezorive gives me this now:
;; ANSWER SECTION:
perezorive.com. 14400 IN A 8.7.57.76
;; AUTHORITY SECTION:
perezorive.com. 14400 IN NS ns2.vnocspace.net.
perezorive.com. 14400 IN NS ns1.vnocspace.net.
;; ADDITIONAL SECTION:
ns1.vnocspace.net. 107574 IN A 8.10.51.160
ns2.vnocspace.net. 107574 IN A 8.10.51.161
And whois gives us this:
Domain Name: PEREZORIVE.COM
Registrar: NETWORK SOLUTIONS, LLC.
Whois Server: whois.networksolutions.com
Referral URL: http://www.networksolutions.com
Name Server: NS1.VNOCSPACE.NET
Name Server: NS2.VNOCSPACE.NET
Status: clientTransferProhibited
Updated Date: 11-oct-2006
Creation Date: 01-jul-2004
Expiration Date: 01-jul-2008
Registrant:
Perez-Orive, Eduardo
210 174th Street # 1609
Sunny Isles Beach, FL 33160
US
Domain Name: PEREZORIVE.COM
------------------------------------------------------------------------
Promote your business to millions of viewers for only $1 a month
Learn how you can get an Enhanced Business Listing here for your domain name.
Learn more at http://www.NetworkSolutions.com/
------------------------------------------------------------------------
Administrative Contact, Technical Contact:
Perez-Orive, Eduardo eduorive@bellsouth.net
210 174th Street # 1609
Sunny Isles Beach, FL 33160
US
305-799-3218
Record expires on 01-Jul-2008.
Record created on 01-Jul-2004.
Database last updated on 5-Dec-2007 23:33:37 EST.
Domain servers in listed order:
NS1.VNOCSPACE.NET
NS2.VNOCSPACE.NET
According to this website: http://www.aboutus.org/PEREZORIVE.COM this is the URL of some realtor. Probably got hacked if that's true.
Return-Path: <easyweb@tdcanadatrust.com> X-Original-To: notices@halk.m2osw.com Delivered-To: alexis@halk.m2osw.com Received: from mail.m2osw.com (m2osw.com [69.55.238.181]) by halk.m2osw.com (Postfix) with ESMTP id 677371BDE4 for <notices@halk.m2osw.com>; Wed, 5 Dec 2007 15:40:23 -0800 (PST) Received: from mail9.dr.myx.net (ns9.dr.myx.net [217.10.193.170]) by mail.m2osw.com (Postfix) with ESMTP id 941169DC932 for <notices@m2osw.com>; Wed, 5 Dec 2007 15:40:22 -0800 (PST) Received: from User (h-67-100-46-162.phlapafg.covad.net [67.100.46.162]) by mail9.dr.myx.net (mydomain.myx.net) with ESMTP id 004757C37B; Thu, 6 Dec 2007 01:26:47 +0200 (EET) Reply-To: <DoNotReply@mail9.dr.myx.net> From: "TD Canada Trust" <easyweb@tdcanadatrust.com> Subject: Please verify your account information Date: Wed, 5 Dec 2007 18:31:03 -0500 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Message-Id: <20071205232647.004757C37B@mail9.dr.myx.net> To: undisclosed-recipients:;
Online Safety & Security
Dear EasyWeb Members,
We are looking forward to your support and understanding and inform you about new TDCanadaTrust Business department system updrade performed by security management team in order to protect our clients from increased online fraud activity, unauthorized account access, illegal funds withdrawal and also to simplify some processes.
The new updated technologies guaranty convenience and safety of EasyWeb account usage. New services for your account will be effective immediately after an account confirmation process by a special system activation application.
To take an advantages of current updrade you should login your account by using TD Canada Trust Online application. For the purpose please follow the reference:
https://easyweb.tdcanadatrust.com/update.php
Please note that changes in security system will be effective immediately after relogin.
Current message is created by our automatic dispatch system and could not be replyed. For the purpose of assistance, please use the "User Guide" reference of an original TD Canada Trust website.
Best Regards,
TD Canada Trust .
