Paypal Phish
Posted by Dave Yadallee on
From - Sat May 25 07:47:27 2013
X-Account-Key: account1
X-UIDL: 00001aed4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Thu, 23 May 2013 04:18:57 -0600
From: =?UTF-8?Q?ServicesPayPal?=
To: doctor@doctor.nl2k.ab.ca
Subject: SPAM =?UTF-8?Q?Dernier_rappel_=3a_Mise_ _jours_necessaire_=21?=
Date: Wed, 22 May 2013 17:17:51 -0700 (MST)
Message-Id: <20130523001751.5C1842F5B6@ip-97-74-196-133.ip.secureserver.net>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_JMF_BR,RCVD_IN_UCE_PFSM_1 autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519DED11.0B76F80A"
X-Antivirus: AVG for E-mail 10.0.1432 [3184/5854]
X-AVG-ID: ID586FF73B-52843E52
X-Brightmail-Tracker: AAAAAh3E6AodxOgB
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------------=_519DED11.0B76F80A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Chère/Chèr, Client : Cliquez ici pour afficher le message
complet. [...]
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_UCE_PFSM_1 RBL: Received via a relay in UCE_PFSM_1
[64.202.189.19 listed in dnsbl-1.uceprotect.net]
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[64.202.189.19 listed in ips.backscatterer.org]
11 RCVD_IN_JMF_BR RBL: Sender listed in JMF-BROWN
[64.202.189.19 listed in hostkarma.junkemailfilter.com]
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519DED11.0B76F80A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id C6D4212CFAD3; Thu, 23 May 2013 04:18:46 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Thu, 23 May 2013 04:18:46 -0600
Resent-Message-ID: <20130523101846.GA29611@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_UCE_PFSM_1 autolearn=no version=3.3.2
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: from m1plded02-02.prod.mesa1.secureserver.net (m1plded02-02.prod.mesa1.secureserver.net [64.202.189.19])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 3460512CFAC0
for; Thu, 23 May 2013 02:01:56 -0600 (MDT)
Received: from ip-97-74-196-133.ip.secureserver.net ([97.74.196.133])
by m1plded02-02.prod.mesa1.secureserver.net with : DED :
id fL1h1l00G2t9yH501L1plF; Thu, 23 May 2013 01:01:49 -0700
x-originating-ip: 97.74.196.133
Received: by ip-97-74-196-133.ip.secureserver.net (Postfix, from userid 48)
id 5C1842F5B6; Wed, 22 May 2013 17:17:51 -0700 (MST)
To: doctor@doctor.nl2k.ab.ca
Subject: =?UTF-8?Q?Dernier_rappel_=3a_Mise_ _jours_necessaire_=21?=
From: =?UTF-8?Q?ServicesPayPal?=
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20130523001751.5C1842F5B6@ip-97-74-196-133.ip.secureserver.net>
Date: Wed, 22 May 2013 17:17:51 -0700 (MST)
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
Chère/Chèr, Client :
size=2 face=Tahoma>Cliquez ici pour afficher le message complet.
------------=_519DED11.0B76F80A
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-793823E1======="
--=======AVGMAIL-793823E1=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-793823E1=======--
------------=_519DED11.0B76F80A
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-7CFA8909======="
--=======AVGMAIL-7CFA8909=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-7CFA8909=======--
------------=_519DED11.0B76F80A--
X-Account-Key: account1
X-UIDL: 00001aed4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Thu, 23 May 2013 04:18:57 -0600
From: =?UTF-8?Q?ServicesPayPal?=
To: doctor@doctor.nl2k.ab.ca
Subject: SPAM =?UTF-8?Q?Dernier_rappel_=3a_Mise_ _jours_necessaire_=21?=
Date: Wed, 22 May 2013 17:17:51 -0700 (MST)
Message-Id: <20130523001751.5C1842F5B6@ip-97-74-196-133.ip.secureserver.net>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_JMF_BR,RCVD_IN_UCE_PFSM_1 autolearn=unavailable version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519DED11.0B76F80A"
X-Antivirus: AVG for E-mail 10.0.1432 [3184/5854]
X-AVG-ID: ID586FF73B-52843E52
X-Brightmail-Tracker: AAAAAh3E6AodxOgB
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------------=_519DED11.0B76F80A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Chère/Chèr, Client : Cliquez ici pour afficher le message
complet. [...]
Content analysis details: (14.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_UCE_PFSM_1 RBL: Received via a relay in UCE_PFSM_1
[64.202.189.19 listed in dnsbl-1.uceprotect.net]
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[64.202.189.19 listed in ips.backscatterer.org]
11 RCVD_IN_JMF_BR RBL: Sender listed in JMF-BROWN
[64.202.189.19 listed in hostkarma.junkemailfilter.com]
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519DED11.0B76F80A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id C6D4212CFAD3; Thu, 23 May 2013 04:18:46 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Thu, 23 May 2013 04:18:46 -0600
Resent-Message-ID: <20130523101846.GA29611@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_UCE_PFSM_1 autolearn=no version=3.3.2
X-Original-To: doctor@doctor.nl2k.ab.ca
Delivered-To: doctor@doctor.nl2k.ab.ca
Received: from m1plded02-02.prod.mesa1.secureserver.net (m1plded02-02.prod.mesa1.secureserver.net [64.202.189.19])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 3460512CFAC0
for
Received: from ip-97-74-196-133.ip.secureserver.net ([97.74.196.133])
by m1plded02-02.prod.mesa1.secureserver.net with : DED :
id fL1h1l00G2t9yH501L1plF; Thu, 23 May 2013 01:01:49 -0700
x-originating-ip: 97.74.196.133
Received: by ip-97-74-196-133.ip.secureserver.net (Postfix, from userid 48)
id 5C1842F5B6; Wed, 22 May 2013 17:17:51 -0700 (MST)
To: doctor@doctor.nl2k.ab.ca
Subject: =?UTF-8?Q?Dernier_rappel_=3a_Mise_ _jours_necessaire_=21?=
From: =?UTF-8?Q?ServicesPayPal?=
Reply-To:
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: 8bit
Message-Id: <20130523001751.5C1842F5B6@ip-97-74-196-133.ip.secureserver.net>
Date: Wed, 22 May 2013 17:17:51 -0700 (MST)
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
Chère/Chèr, Client :
size=2 face=Tahoma>Cliquez ici pour afficher le message complet.
------------=_519DED11.0B76F80A
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-793823E1======="
--=======AVGMAIL-793823E1=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-793823E1=======--
------------=_519DED11.0B76F80A
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-7CFA8909======="
--=======AVGMAIL-7CFA8909=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3184/5854 - Release Date: 05/24/13=
--=======AVGMAIL-7CFA8909=======--
------------=_519DED11.0B76F80A--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments