Alert Alert Cobirders
Paula's account has obviously been hacked. This scam has been around for
about two years.
Karl Stecher
Centennial
----------Forwarded message ----------
Received: from localhost by mailhost.idcomm.com
with SpamAssassin (version 3.3.1);
Mon, 27 Feb 2012 10:20:44 -0700
From: Paula Hansley <[email protected]>
To: undisclosed recipients: ;
Subject: *****SPAM*****[09.0/5.0] Sorrowful Trip(I need your help)....Paula
Hansley
Date: Mon, 27 Feb 2012 09:28:22 -0800 (PST)
Message-Id: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
mailhost.idcomm.com
X-Spam-Flag: YES
X-Spam-Level: *********
X-Spam-Status: Yes, score=9.0 required=5.0 tests=BAYES_99=5.5,
BOTNET_SERVERWORDS=0.01,FREEMAIL_FROM=0.5,FREEMAIL_REPLYTO=2,
FROM_NOT_REPLYTO=1,HTML_MESSAGE=0.001,T_DKIM_INVALID=0.01,
T_RP_MATCHES_RCVD=-0.01 version=3.3.1
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4F4BBB6C.B2E23096"
Spam detection software, running on the system "mailhost.idcomm.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, email
[email protected] for details.
Content preview: I'm writing to let you know that my family and i are stuck
in London, UK has been a mess We got mugged last night at gun point and
lost
all cash,credit card and cell phone. It has been a scary experience,Thank
God we still got our life and passport saved here with us.Our return fight
leaves in some hours from now but we are having problems settling our
hotel
bills, i need you to loan me some money, I'll refund it back to you as
soon
as we arrive back home Kindly let me know if you can be of help so that i
can tell you how to wire the money to me via western union. Awaiting your
positive response. Petrographic Consultants International, Inc. [...]
Content analysis details: (9.0 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
5.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.5 FREEMAIL_FROM Sender email is freemail (plhansley[at]yahoo.com)
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
0.0 BOTNET_SERVERWORDS Hostname contains server-like substrings
[botnet_serverwords,ip=98.139.212.187,rdns=nm28.bullet.mail.bf1.yahoo.com]
1.0 FROM_NOT_REPLYTO From: does not match Reply-To:
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 FREEMAIL_REPLYTO Reply-To is different freemail than From or body
(plhansley[at]yahoo.com,
plhanslev[at]yahoo.com)
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
--
You received this message because you are subscribed to the Google Groups "Colorado
Birds" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to
[email protected].
For more options, visit this group at
http://groups.google.com/group/cobirds?hl=en.
--- Begin Message ---
I'm writing to let you know that my family and i are stuck in London, UK has
been a mess We got mugged last night at gun point and lost all cash,credit card
and cell phone. It has been a scary experience,Thank God we still got our life
and passport saved here with us.Our return fight leaves in some hours from now
but we are having problems settling our hotel bills, i need you to loan me some
money, I'll refund it back to you as soon as we arrive back home Kindly let me
know if you can be of help so that i can tell you how to wire the money to me
via western union.
Awaiting your positive response.
Petrographic Consultants International, Inc.
545 West Fir Way
Louisville, CO 80027
Ph: 720-890-2826
--- End Message ---
