More Japan Spam!

From - Mon May 06 19:16:06 2013

X-Account-Key: account1

X-UIDL: 000018914f5d9180

X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

X-Mozilla-Keys:

Received: from localhost by doctor.nl2k.ab.ca

with SpamAssassin (version 3.3.2);

Sun, 05 May 2013 14:57:03 -0600

From: "United Nations"

Subject: [Norton AntiSpam]*SPAM* Dear Beneficiary!!

Date: Mon, 6 May 2013 08:55:13 +1200

Message-Id: <201305052054.r45KshTf004364@userg506.nifty.com>

X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca

X-Spam-Flag: YES

X-Spam-Level: ********************

X-Spam-Status: Yes, score=20.2 required=5.0 tests=FORGED_MUA_OUTLOOK,

FORGED_OUTLOOK_TAGS,RCVD_IN_BACKSCATTER,RCVD_IN_JMF_BR,RCVD_IN_SPAMCANNIBAL,

RCVD_IN_UCE_PFSM_1,RELAY_CHECKER_KEYWORDS autolearn=unavailable version=3.3.2

MIME-Version: 1.0

Content-Type: multipart/mixed; boundary="----------=_5186C79F.53A93F50"

X-Antivirus: AVG for E-mail 10.0.1432 [3162/5802]

X-AVG-ID: IDBA64542-3CC6565D

X-Brightmail-Tracker: AAAACAe2B6IdeRryHXka6R16K2wdei3CHXorix16K/sdeiuD



This is a multi-part message in MIME format.



------------=_5186C79F.53A93F50

Content-Type: text/plain; charset=iso-8859-1

Content-Disposition: inline

Content-Transfer-Encoding: 8bit



Spam detection software, running on the system "doctor.nl2k.ab.ca", has

identified this incoming email as possible spam. The original message

has been attached to this so you can view it (if it isn't spam) or label

similar future email. If you have any questions, see

the administrator of that system for details.



Content preview: UNITED NATIONS. United Nations House, 617/618. Diplomatic

Zone, [...]



Content analysis details: (20.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

2.0 RCVD_IN_UCE_PFSM_1 RBL: Received via a relay in UCE_PFSM_1

[202.248.238.86 listed in dnsbl-1.uceprotect.net]

2.0 RCVD_IN_SPAMCANNIBAL RBL: Received via a relay in SpamCannibal

[202.248.238.86 listed in bl.spamcannibal.org]

11 RCVD_IN_JMF_BR RBL: Sender listed in JMF-BROWN

[202.248.238.86 listed in hostkarma.junkemailfilter.com]

1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org

[202.248.238.86 listed in ips.backscatterer.org]

0.0 RELAY_CHECKER_KEYWORDS Hostname matches keywords

0.0 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format

4.2 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook



The original message was not completely plain text, and may be unsafe to

open with some email clients; in particular, it may contain a virus,

or confirm that your address can receive spam. If you wish to view

it, it may be safer to save it to a file and open it with an editor.





------------=_5186C79F.53A93F50

Content-Type: message/rfc822; x-spam-type=original

Content-Description: original message before SpamAssassin

Content-Disposition: attachment

Content-Transfer-Encoding: 8bit



Return-Path:

X-Original-To: dave@doctor.nl2k.ab.ca

Delivered-To: dave@doctor.nl2k.ab.ca

Received: from userg506.nifty.com (userg506.nifty.com [202.248.238.86])

(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))

(No client certificate requested)

by doctor.nl2k.ab.ca (Postfix) with ESMTPS id BF5C512CFA83

for ; Sun, 5 May 2013 14:56:52 -0600 (MDT)

Received: from User (nttkyo503220.tkyo.nt.ftth.ppp.infoweb.ne.jp [124.25.233.220])by userg506.nifty.com with SMTP id r45KshTf004364;

Mon, 6 May 2013 05:54:45 +0900

X-Nifty-SrcIP: [124.25.233.220]

Message-Id: <201305052054.r45KshTf004364@userg506.nifty.com>

Reply-To:

From: "United Nations"

Subject: Dear Beneficiary!!

Date: Mon, 6 May 2013 08:55:13 +1200

MIME-Version: 1.0

Content-Type: text/html;

charset="Windows-1251"

Content-Transfer-Encoding: 7bit

X-Priority: 3

X-MSMail-Priority: Normal

X-Mailer: Microsoft Outlook Express 6.00.2800.1081

X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081

X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca

X-Virus-Status: Clean













UNITED NATIONS.




United Nations House, 617/618.




Diplomatic Zone,




Central Area District,




Federal Capital Territory,




Abuja, Nigeria.












 




Our Ref: YBNGWB/UN/2013.








 




 




Attention: Dear Beneficiary,




 




 




 




 




                                          RE: APPROVED COMPENSATION PAYMENT AWARD OF US$2.3M








 








We found your email in our list and that is why we are contacting you, This has been agreed upon and have been signed. Therefore, we are happy to inform you that an arrangement has perfectly been concluded to effect your payment as soon as possible in our bid to be transparent.












 




However, it is our pleasure to inform you that your ATM Card Number; 7876 3100 0300 1420 has been approved and upgraded in your favour. Meanwhile, your Secret Pin Number will be available as soon as you confirm to us the receipt of your ATM CARD.








 








The ATM Card Value is $2,300,000.00 USD Only (Two Million Three Hundred Thousand United States Dollars). You are advised that a maximum withdrawal value of US$5,000.00 (Five Thousand Dollars) is permitted daily.












 




Please contact Dr. Kingsley Moghalu, Email:dr.kingsleymoghalu@tnctr.com with the following information to facilitate your claims.








 




 




FULL NAME:




AGE:




GENDER:




ADDRESS:




COUNTRY:




OCCUPATION:




MOBILE NUMBER:








 








Best Regards,








 




Mr. Samson Adekunle.








CIV NAVSUBTORPFAC YORK.




UNITED NATIONS / WORLD BANK ORGANIZATION.










------------=_5186C79F.53A93F50

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-13D35903======="



--=======AVGMAIL-13D35903=======

Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "Certification"



-----

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5802 - Release Date: 05/06/13=



--=======AVGMAIL-13D35903=======--



------------=_5186C79F.53A93F50

Content-Type: multipart/alternative;

boundary="=======AVGMAIL-3ACE0C05======="



--=======AVGMAIL-3ACE0C05=======

Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline

Content-Description: "Certification"



-----

No virus found in this message.

Checked by AVG - www.avg.com

Version: 10.0.1432 / Virus Database: 3162/5802 - Release Date: 05/06/13=



--=======AVGMAIL-3ACE0C05=======--



------------=_5186C79F.53A93F50--







Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA