Verizon-based Paypal phish

From srvs@notification.no Mon Sep 15 05:15:22 2008

Return-Path: srvs@notification.no

Received: from vms172065pub.verizon.net

by doctor.nl2k.ab.ca (8.14.3/8.14.3) with SMTP id m8FBEH43020116

for ; Mon, 15 Sep 2008 05:14:23 -0600 (MDT)

X-Spam-Filter: check_local@doctor.nl2k.ab.ca by digitalanswers.org

Received: from User ([67.95.121.2]) by vms172065.mailsrvcs.net

(Sun Java System Messaging Server 6.2-6.01 (built Apr 3 2006))

with ESMTPA id <0K78002ROHVL8XRF@vms172065.mailsrvcs.net> for

root@nk.ca; Mon, 15 Sep 2008 06:14:12 -0500 (CDT)

Date: Mon, 15 Sep 2008 08:12:10 -0500

From: "service@paypal.com"

Subject: {?} You Have 1 New Security Message Alert!

X-Originating-IP: [67.95.121.2]

To: Undisclosed recipients: ;

Message-id: <0K78002RSHVL8XRF@vms172065.mailsrvcs.net>

MIME-version: 1.0

X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

X-Mailer: Microsoft Outlook Express 6.00.2600.0000

Content-type: text/plain; charset=Windows-1251

Content-transfer-encoding: 7bit

X-Priority: 3

X-MSMail-priority: Normal

X-NetKnow-InComing-4-71-10-1-MailScanner-Information: Please contact the ISP

for more information

X-NetKnow-InComing-4-71-10-1-MailScanner-ID: m8FBEH43020116

X-NetKnow-InComing-4-71-10-1-MailScanner: Found to be clean

X-NetKnow-InComing-4-71-10-1-MailScanner-IP-Protocol: IPv4

X-NetKnow-InComing-4-71-10-1-MailScanner-SpamCheck: spam, spamhaus-ZEN,

spamhaus-XBL, SBL+XBL, CBL, SpamAssassin (not cached, score=9.927,

required 5, BAYES_99 3.50, FORGED_MUA_OUTLOOK 3.12,

NORMAL_HTTP_TO_IP 0.00, RCVD_IN_XBL 3.20, RDNS_NONE 0.10,

RELAY_CHECKER 0.00, RELAY_CHECKER_IPHOSTNAME 0.01)

X-NetKnow-InComing-4-71-10-1-MailScanner-SpamScore: sssssssss

X-NetKnow-InComing-4-71-10-1-MailScanner-From: srvs@notification.no

X-NetKnow-InComing-4-71-10-1-MailScanner-Watermark:

1221909269.73737@MAj7E7DsOIKWeuEL/O1ulw

X-Spam-Status: Yes



Dear PayPal customer,



As part of our security measures, we regularly screen activity in the PayPal

+system. We recently contacted you after noticing an issue on your account.



Our system detected unusual attempts to log in to your PayPal account from

+diffrent ip locations.



In accordance with PayPal's User Agreement, your account access will remain

+limited until the issue has been resolved. Unfortunately, if access to your

+account remains limited for an extended period of time, it may result in

+further limitations or eventual account closure. We encourage you to log in to

+your PayPal account as soon as possible to help avoid this.



Please update and verify your information by checking the link below:

If you can't open this link from email just copy to your internet browser.



http://66.49.165.226/users/alex/update/account/login.php



Once you log in, you will be provided with steps to restore your account access.+We appreciate your understanding as we work to ensure account safety.



To review your account and some or all of the information that PayPal used to

+make its decision to limit your account access, please visit the Resolution

+Center. If, after reviewing your account information, you seek further

+clarification regarding your account access, please contact PayPal by visiting

+the Help Center and clicking "Contact Us".



We thank you for your prompt attention to this matter. Please understand that

+this is a security measure intended to help protect you and your account. We

+apologize for any inconvenience.



Sincerely,

PayPal Account Review Department



PayPal Email ID PP638





--

This message has been scanned for viruses and

dangerous content by MailScanner, and is

believed to be clean.