[Spambayes] Exceptionally well-done identity-theft spam

[Phil Pierotti]

Although, when(if) you look closely, the message-ID givs it away :-)

Message-ID:
<200312292028.hBTKS1el090467 at mxzilla8.xs4all.nl>

ENjoy,
PhilP

Tim Peters wrote:
> If you get something like the attached, don't go to the website and "update"
> your PayPal account information.  I just got this, and my classifier scored
> it at 1% (0.01).  It looks a lot like real email from PayPal -- both to me,
> and to my classifier.
> 
> 
> ------------------------------------------------------------------------
> 
> Subject:
> PayPal Account Update
> From:
> "payPal.com" <support at paypal.com>
> Date:
> Mon, 29 Dec 2003 15:22:10 -0500
> To:
> <events at python.org>
> 
> To:
> <events at python.org>
> 
> Reply-To:
> <support at paypal.com>
> Message-ID:
> <200312292028.hBTKS1el090467 at mxzilla8.xs4all.nl>
> MIME-Version:
> 1.0
> Content-Type:
> text/html; charset="iso-8859-1"
> Content-Transfer-Encoding:
> quoted-printable
> X-Priority:
> 1 (Highest)
> X-MSMail-Priority:
> High
> X-Mailer:
> Microsoft Outlook IMO, Build 9.0.6604 (9.0.2911.0)
> X-Originating-IP:
> [12.155.117.29]
> X-Spam-Status:
> OK (default 0.071)
> X-MIMEOLE:
> Produced By Microsoft MimeOLE V6.00.2800.1165
> Importance:
> High
> X-Library:
> Indy 8.0.25
> 
> 
> <https://www.paypal.com>
> 
> URGENT: PayPal System Problems
> 
> Dear PayPal User,
> 
> Today we had some trouble with one of our computer systems. While the 
> trouble appears to be minor, we are not taking any chances. We decided 
> to take the troubled system offline and replace it with a new system. 
> Unfortunately this caused us to lose some member data. Please follow the 
> link below and log into your account to make sure your information is 
> not affected. /Account balances have not been affected./
> 
> Because of the inconvenience this causes we are giving all users that 
> repair their missing data their next two incoming transfers for free! 
> You will pay no fees for your next two incoming transfers*.
> 
> https://www.paypal.com/cgi-bin/webscr/?cmd=_login-run 
> <http://www.paypal.com%65%6B%6A%68%61%73%6B%6A%71%70%77%6F%70%77%6F@%32%31%31.%36%33.%31%36%32.%39%33:%37%33%30%31/%70%61%79%70%61%6C.%68%74%6D>
> 
> Thank you for using PayPal!
> 
> * - If fees would normally apply, you will not pay anything for the next 
> two incoming transfers you receive.
> 
> 		
> *PayPal Security*
> 
> /PROTECT YOUR PASSWORD/
> NEVER give your password to anyone and ONLY log in at PayPal's website. 
> If anyone asks for your password, please follow the Security Tips 
> instructions on the PayPal website.
> 
> Please do not reply to this e-mail. Mail sent to this address cannot be 
> answered. For assistance, log in to your PayPal account and choose the 
> "Help" link in the footer of any page.
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Spambayes at python.org
> http://mail.python.org/mailman/listinfo/spambayes
> Check the FAQ before asking: http://spambayes.sf.net/faq.html