Paypal Phish from Bell Canada
Posted by Dave Yadallee on
From - Sun Oct 23 11:53:55 2011
X-Account-Key: account2
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_SPAMCANNIBAL autolearn=no version=3.3.2
X-Original-To: sales@nk.ca
Delivered-To: sales@nk.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id BD1F612CFA82
for; Sun, 23 Oct 2011 11:53:23 -0600 (MDT)
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id b_EVoZY2ppAq for;
Sun, 23 Oct 2011 11:53:16 -0600 (MDT)
Received: from toroondcbmts07-srv.bellnexxia.net (toroondcbmts07-srv.bellnexxia.net [207.236.237.41])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6D17312CFA81
for; Sun, 23 Oct 2011 11:53:15 -0600 (MDT)
Received: from toip57-bus.srvr.bell.ca ([67.69.240.184])
by toroondcbmts07-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20111023175315.XSLH16199.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>
for; Sun, 23 Oct 2011 13:53:15 -0400
Received: from toip39-bus.srvr.bell.ca ([67.69.240.40])
by toip57-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AghmAJ9PpE6uWFi1/2dsb2JhbAAnHIIDhhGRfAEBjn+BBoF8QXkHFIdwEIEZixuLC5BhgQQKAoxMgXODMYI7YQSOZJccgTMB
Received: from bas5-ottawa23-2925025461.dsl.bell.ca (HELO accounts.net) ([174.88.88.181])
by toip39-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
From: PayPal Inc.
To: sales@nk.ca
Subject: Message ID 5403293
Date: 23 Oct 2011 13:53:18 -0400
Message-ID: <20111023135318.CED0D84EB99CA68D@accounts.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_E28DF338.E5231843"
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Brightmail-Tracker: AAAAARk+61k=
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
We have detected a slight error in your account information.
To eliminate securely this information error please download
the form attached to this email and open it in a web browser.
Thank you !
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: application/octet-stream; name="Customer 5403293.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Customer 5403293.html"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------=_NextPart_000_0012_E28DF338.E5231843--
X-Account-Key: account2
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 10000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,
RCVD_IN_SPAMCANNIBAL autolearn=no version=3.3.2
X-Original-To: sales@nk.ca
Delivered-To: sales@nk.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id BD1F612CFA82
for
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id b_EVoZY2ppAq for
Sun, 23 Oct 2011 11:53:16 -0600 (MDT)
Received: from toroondcbmts07-srv.bellnexxia.net (toroondcbmts07-srv.bellnexxia.net [207.236.237.41])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6D17312CFA81
for
Received: from toip57-bus.srvr.bell.ca ([67.69.240.184])
by toroondcbmts07-srv.bellnexxia.net
(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP
id <20111023175315.XSLH16199.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>
for
Received: from toip39-bus.srvr.bell.ca ([67.69.240.40])
by toip57-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AghmAJ9PpE6uWFi1/2dsb2JhbAAnHIIDhhGRfAEBjn+BBoF8QXkHFIdwEIEZixuLC5BhgQQKAoxMgXODMYI7YQSOZJccgTMB
Received: from bas5-ottawa23-2925025461.dsl.bell.ca (HELO accounts.net) ([174.88.88.181])
by toip39-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400
From: PayPal Inc.
To: sales@nk.ca
Subject: Message ID 5403293
Date: 23 Oct 2011 13:53:18 -0400
Message-ID: <20111023135318.CED0D84EB99CA68D@accounts.net>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0012_E28DF338.E5231843"
X-UIDL: -2F"!dNG"!Bih"!cbB"!
X-Brightmail-Tracker: AAAAARk+61k=
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: text/plain
Content-Transfer-Encoding: 8bit
We have detected a slight error in your account information.
To eliminate securely this information error please download
the form attached to this email and open it in a web browser.
Thank you !
------=_NextPart_000_0012_E28DF338.E5231843
Content-Type: application/octet-stream; name="Customer 5403293.html"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="Customer 5403293.html"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------=_NextPart_000_0012_E28DF338.E5231843--