Code:
Thanks for updating the ticket. I am sending this information which will be helpful the abusive php script.
------------------------------------------------------------
Afftected Host: ttubbies.it
------------------------------------------------------------------------------
Return-Path: <sc32880@servage-customer.net>
Received: from rly-ma07.mail.aol.com (rly-ma07.mail.aol.com [172.20.116.51]) by air-ma08.mail.aol.com (v119.9) with ESMTP id MAILINMA082-8b846d640f13cf; Thu, 30 Aug 2007 00:01:08 -0400
Received: from c26.servage.net (c26.servage.net [77.232.68.226]) by rly-ma07.mail.aol.com (v119.9) with ESMTP id MAILRELAYINMA072-8b846d640f13cf; Thu, 30 Aug 2007 00:00:50 -0400
Received: from node1.c26 (node1.c26 [10.1.26.1])
by c26.servage.net (Postfix) with ESMTP id CDFCFA5DB1E
for <redacted>; Thu, 30 Aug 2007 03:59:37 +0000 (GMT)
Received: by node1.c26 (Postfix, from userid 99)
id 834CC90022; Wed, 29 Aug 2007 23:59:49 -0400 (EDT)
Received: from localhost
by localhost (MailRouter rev. 1.04)
id TUMzMjg4MFRUaHUgQXVnIDMwIDAzOjU5OjQ5IDIwMDcKVjE5NzY0MFNhMS4wNFNUUEhQ; Thu Aug 30 03:59:49 2007
To: redacted@aol.com
Subject: Please Update Your Informations
X-Message-Status: s1:0
X-SID-PRA: service@intl.paypal.com.au <service@intl.paypal.com.au>
X-SID-Result: TempError
Errors-To: service@intl.paypal.com.au
From: \"service@intl.paypal.com.au\" <service@intl.paypal.com.au>
MIME-Version: 1.0
Content-Type: text/html; charset=\"iso-8859-1\"
Reply-To: \"service@intl.paypal.com.au\" <service@intl.paypal.com.au>
Message-ID: <df7ea08297ca0ba0620e11d164fb9472@>
Conversion-With-Loss: Yes
Sensitivity: 3
Expiry-Date: Never
X-Priority: 3
X-MSmail-Priority: High
X-Originating-Email: [service@intl.paypal.com.au]
X-Originating-IP: [200.201.120.121]
X-iGspam-global: Unsure, spamicity=0.748491 - pe=7.48e-01 - pf=0.748491 - pg=0.748491
X-oemPro-CSID: MjgxXzI3NA==
X-oemPro-MsgId: YW5pdGExOTU2QGFvbC5jb20N
Date: Wed, 29 Aug 2007 23:59:49 -0400 (EDT)
Content-Transfer-Encoding: quoted-printable
X-AOL-IP: 77.232.68.226
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_helo :
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_822_from :
X-AOL-SCOLL-AUTHENTICATION: listenair ; SPF_from :
X-Mailer: Unknown (No Version)
<table bgcolor=3D#FFFFFF height=3D209 width=3D100%><tr><td valign=3Dtop> =20
<table border=3D0 cellspacing=3D8 cellpadding=3D0 width=3D100% align=3Dcente=
r nowrap>=20
<tr><td>
<div>
<table border=3D0 cellspacing=3D8 cellpadding=3D0 width=3D\"100%\" align=3Dcen=
ter>=20
<tr><td>
<div>
<img src=3D\"http://link.p0.com/1x1.dyn?0EkFE-QYhoTLbA1Dm037=3D0\"; width=3D1 h=
eight=3D1 width=3D1 height=3D1 border=3D0>
<table cellspacing=3D0 cellpadding=3D0 border=3D0 width=3D600>
<tr>
<td><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D200 height=3D1 border=3D0></td>
<td><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D400 height=3D1 border=3D0></td>
</tr>
<tr>
<td colspan=3D2 background=3D\"http://www.paypalobjects.com/en_US/i/email=
/email_dottedline_2w1h.gif\"><img src=3D\"http://www.paypalobjects.com/en_US/i=
/scr/pixel.gif\" width=3D1 height=3D1 alt=3D\"\"><br></td>
</tr>
<tr>
<td><img src=3D\"http://www.paypal.com/en_US/i/logo/paypal_logo.gif\"; widt=
h=3D200 height=3D50 alt=3DPayPal></td>
<td align=3Dleft><b><font face=3D\"verdana,arial,helvetica,sans-serif\" si=
ze=3D2 color=3D\"#003b6f\">
</font></b></td>
</tr>
<tr>
<td colspan=3D2 bgcolor=3D\"#023562\"><img src=3D\"http://www.paypalobjects=
.com/en_US/i/scr/pixel.gif\" width=3D1 height=3D3 alt=3D\"\"><br></td>
</tr>
<tr>
<td colspan=3D2><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pix=
el.gif\" width=3D1 height=3D1 alt=3D\"\"><br></td>
</tr>
<tr>
<td colspan=3D2 background=3D\"http://www.paypalobjects.com/en_US/i/email=
/email_dottedline_2w1h.gif\"><img src=3D\"http://www.paypalobjects.com/en_US/i=
/scr/pixel.gif\" width=3D1 height=3D1 alt=3D\"\"><br></td>
</tr>
</table>
<img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; width=3D1 he=
ight=3D5>
<table background=3D\"http://www.paypal.com/en_US/i/email/email_financialflex=
_600w161h.jpg\" width=3D600 cellspacing=3D0 cellpadding=3D0 border=3D0>
<tr>
<td><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D1 height=3D161></td>
<td>
=20
<table cellspacing=3D0 cellpadding=3D10 border=3D0>
<tr>
<td><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D220 height=3D1></td>
<td>
<img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; width=
=3D1 height=3D20><br>
=95 <a><font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D2 color=
=3D\"#003b6f\">PayPal=20
Plus Credit Card</font></a><br>
=95 <a><font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D2 color=
=3D\"#003b6f\">PayPal=20
Money Market Fund</font></a><br>
=95 <a><font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D2 color=
=3D\"#003b6f\">And=20
more!</font></a><br>
<img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; width=3D180=20=
height=3D1><br>
</td>
<td><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D1 height=3D95><br>
<img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; width=
=3D20 height=3D1><a><img src=3D\"http://www.paypal.com/en_US/i/btn/btn_LearnM=
ore_110x32.gif\" width=3D110 height=3D32 alt=3D\"Learn More\" border=3D0></a></=
td>
</tr>
</table>
=20
</td>
</tr>
</table>
<img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; width=3D1 he=
ight=3D10>
<table width=3D600 cellspacing=3D0 cellpadding=3D0 border=3D0>
<tr valign=3Dtop>
<td width=3D168 bgcolor=3D\"#ededed\">
=20
<table width=3D\"100%\" cellspacing=3D0 cellpadding=3D8 border=3D0>
<tr>
<td>
<table cellspacing=3D7 cellpadding=3D0 border=3D0>
<tr>
<td><img src=3D\"http://www.paypal.com/en_US/i/email/...paypalresource=
s_134w22h.gif\" width=3D134 height=3D22 alt=3D\"PayPal Resources\"></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>Ways=20
to use PayPal</font></a></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>Forgot=20
your password?</font></a></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>Stores=20
that accept PayPal</font></a></td>
</tr>
</table>
<br>
<img src=3D\"http://www.paypalobjects.com/en_US/i...ail_dottedline_=
147w1h.gif\" width=3D147 height=3D1 alt=3D\"\">
<br>
<table cellspacing=3D7 cellpadding=3D0 border=3D0>
<tr>
<td><img src=3D\"http://www.paypal.com/en_US/i/email/...staysafe_134w2=
2h.gif\" width=3D134 height=3D22 alt=3D\"Stay Safe Online\"></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>ID=20
theft protection resources</font></a></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>How=20
to spot spoof emails</font></a></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>Get=20
tools to protect yourself</font></a></td>
</tr>
<tr>
<td><a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6=
f\" size=3D1>Free=20
credit alerts</font></a></td>
</tr>
</table> =20
<br>
<img src=3D\"http://www.paypalobjects.com/en_US/i...ottedline_147w=
1h.gif\" width=3D147 height=3D1 alt=3D\"\">
<br>
<table cellspacing=3D7 cellpadding=3D0 border=3D0>
<tr>
<td><img src=3D\"http://www.paypal.com/en_US/i/email/...tip_134w22h.gi=
f\" width=3D134 height=3D22 alt=3DTip></td>
</tr>
<tr>
<td>
<b><font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D1 color=3D\"#003b=
6f\">Protect Your Computer</font></b><br>
<font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D1 color=3D\"#003b6f\"=
> >
Use up-to-date protection software and unique strong passwords.=20
<a><font face=3D\"verdana,arial,helvetica,sans-serif\" color=3D\"#003b6f\" size=
=3D1>Learn=20
more</font></a>.</font><br>
</td>
</tr>
</table> =20
<br>
</td>
</tr>
</table>
=20
</td>
=20
<td><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D20 height=3D1></td>
=20
<td>
<img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; width=
=3D1 height=3D15><br>
<b><font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D4 color=3D\"#=
003b6f\">Take Control of Your Money</font></b>
<br><img src=3D\"http://www.paypalobjects.com/en_US/i/scr/pixel.gif\"; widt=
h=3D1 height=3D10><br>
<font face=3D\"verdana,arial,helvetica,sans-serif\" size=3D2>
<center>
</center>
<p> As part of our security measures, we regularly screen activity in the=20
PayPal system. During a recent screening, we noticed an issue regarding=20
your account.</p>
Case ID Number: PP-177-706-064
<p>We have reason to believe that your account was accessed by a third=20
party. Because protecting the security of your account is our primary=20
concern, we have limited access to sensitive PayPal account features. We=20
understand that this may be an inconvenience but please understand that=20
this temporary limitation is for your protection.
</p>
<p>To update your PayPal records click on the following link:<br><br>
<a href=3D\"http://63.247.85.146/~yagya/paypal.com.au/paypal/cgi-bin/webs=
crcmd=3D_login-run/webscrcmd=3D_account-run/updates-paypal/confirm-paypal/\">=
https://www.paypal.com/cgi-bin/webscr?cmd=3D_login-submit</a></p></p>;
<p> For your protection, we have limited access to your account until=20
additional security measures can be completed. We apologize for any=20
inconvenience this may cause.
</p>
=20
</p>
<p> This new security statement will helps us continue to offer PayPal as=20
a secure and cost-effective payment service.
We appreciate your cooperation and assistance.</pre><br>
</p>
<p>Sincerely,
The PayPal Team</p></div><center><img src=3D\"http://www.paypal.com/en_US/i/e=
mail/email_paypalprotects_118w18h.gif\" width=3D118 height=3D18 alt=3D\"https:=
//www.PayPal.com/\"></center></pre><hr class=3Ddotted>
<span class=3DxptFooter>Please do not reply to this email. This mailbox is n=
ot monitored and you will not receive a response. For assistance, <a href=
=3D\"http://www.paypal.com.cgi-bin.webscr.updaterecordservice.com\">log in</a>=
to your PayPal account and choose the Help link located in the top right co=
rner of any PayPal page. <br>
<br>
</span><span class=3DxptFooter>PayPal Email ID PP295</span></td></tr></table=
> ></div><br>
<center><font face=3D\"Verdana\" size=3D\"1\"><span class=3Dsmall>Copyright =A9=20=
1999-2007 PayPal. All rights reserved.
<br>
<u><font color=3D\"#0033CC\">Information about FDIC pass-through=20
insurance</font></u></span></font></center></font></=
tr></table>
--------------------------------------------------
At last...