From - Tue May 21 10:17:32 2013
X-Account-Key: account1
X-UIDL: 00001a9c4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 21 May 2013 00:49:30 -0600
From: "Alfa Mirage Co., Ltd."
To: dave@nk.ca
Subject: SPAM Re:Catalogue for products
Date: Mon, 20 May 2013 22:29:03 +0200
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.5 required=5.0 tests=NOTVALID_YAHOO,
RCVD_IN_SPAMCANNIBAL,SPF_HELO_PASS,URIBL_PH_SURBL autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519B18FA.3F9F765D"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID45BC0F9E-2C4DFDBC
X-Brightmail-Tracker: AAAAAx3E6AodxOgBHcUw7w==
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------------=_519B18FA.3F9F765D
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: - This mail is in HTML. Some elements may be ommited in plain
text. - Dear Supplier, Thanks for your email and information... We have gone
through your Ad and seen the good products your company deals on, can you
assure us on the quality and that you can really Deliver within the stipulated
period given to us by you if we place an order immediately, or you already
have them in stock, we also could not find some products in your page. Check
our link below to see if you have the product listed in our catalouge . login
with your email and password to access the catalouge. [...]
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_SPAMCANNIBAL RBL: Received via a relay in SpamCannibal
[95.173.163.80 listed in bl.spamcannibal.org]
2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: eventsrusworld.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
3.5 NOTVALID_YAHOO Claims to be from Yahoo but is not
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519B18FA.3F9F765D
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from 88zwrmkb.ni.net.tr (80qkmvmx.ni.net.tr [95.173.163.80])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id CE24112CFA87
for ; Tue, 21 May 2013 00:49:22 -0600 (MDT)
Received: from [127.0.0.1] (port=36860 helo=serv2003)
by 88zwrmkb.ni.net.tr with esmtpa (Exim 4.80)
(envelope-from )
id 1UeWha-003E0H-ND
for dave@nk.ca; Mon, 20 May 2013 23:29:03 +0300
Received: from serv2003 ([80.68.181.228] helo=serv2003) by ASSP.at.88zwrmkb.ni.net.tr;
20 May 2013 23:12:33 +0300
From: "Alfa Mirage Co., Ltd."
Subject: Re:Catalogue for products
To: dave@nk.ca
Content-Type: multipart/alternative; boundary="5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30"
MIME-Version: 1.0
Date: Mon, 20 May 2013 22:29:03 +0200
X-Assp-Whitelisted: Yes
X-Assp-Envelope-From: americanasiannc@yahoo.com
X-Assp-Intended-For: dave@nk.ca
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 88zwrmkb.ni.net.tr
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: 88zwrmkb.ni.net.tr: authenticated_id: sergen@aslanweb.net
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
This is a multi-part message in MIME format
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
- This mail is in HTML. Some elements may be ommited in plain text. -
Dear Supplier,
Thanks for your email and information...
We have gone through your Ad and seen the good products your company d=
eals on, can you assure us on the quality and that you can really Deli=
ver within the stipulated period given to us by you if we place an ord=
er immediately, or you already have them in stock, we also could not f=
ind some products in your page. Check our link below to see if you hav=
e the product listed in our catalouge . login with your email and pass=
word to access the catalouge.
CLICK HERE TO VIEW THE SAMPLE
Also please give us your payment terms and delivery time. We wait soon=
est reply..
Alfa Mirage Co., Ltd.
Booth:
1403
3-2-19 Miyakojimahondori
Miyakojima-ku, Osaka-shi Japan 534-0021
Phone:
81-6-6924-2631
Fax:
81-6-6924-2022
Thank you
Best Regards
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Dear Supplier,=20
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium">
tline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium">Thanks for your email and information...
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>We have gone through your Ad and seen the goo=
d products your company deals on, can you assure us on the quality and=
that you can really Deliver within the stipulated period given to us =
by you if we place an order immediately, or you already have them in s=
tock, we also could not find some products in your page. Check our lin=
k below to see if you have the product listed in our catalouge . login=
with your email and password to access the catalouge.
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" href=3D"http://eventsrusworld.com/wp-admin/det.htm" target=
=3D_blank rel=3Dnofollow>CLICK HERE TO VIEW THE SAMPLE
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>Also please give us your payment terms and de=
livery time. We wait soonest reply..
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
=
k>Alfa Mirage Co., Ltd.
el>Booth: 1403
3-2-19 Miyakojimahondori
Miyakojima-ku, Os=
aka-shi Japan 534-0021
Phone: 81-6-6924-=
2631
Fax: 81-6-6924-2022
T>
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
Thank you
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>Best Regards
1.2em; outline-color: invert; outline-style: none; outline-width: medi=
um">
eva,Swiss,SunSans-Regular color=3Dblack>
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
TML>
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30--
------------=_519B18FA.3F9F765D
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-42462247======="
--=======AVGMAIL-42462247=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-42462247=======--
------------=_519B18FA.3F9F765D
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-507A214D======="
--=======AVGMAIL-507A214D=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-507A214D=======--
------------=_519B18FA.3F9F765D--
From - Tue May 21 10:17:17 2013
X-Account-Key: account1
X-UIDL: 00001a824f5d9180x
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level:
X-Spam-Status: No, score=0.0 required=5.0 tests=DKIM_SIGNED
autolearn=unavailable version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 6E75812CFA82; Mon, 20 May 2013 08:35:51 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Mon, 20 May 2013 08:35:51 -0600
Resent-Message-ID: <20130520143551.GE26369@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@nl2k.ab.ca
Delivered-To: doctor@nl2k.ab.ca
Received: from oms-dc02.r1000.mx.aol.com (oms-dc02.r1000.mx.aol.com [205.188.167.67])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 475ED12CFA81
for ; Mon, 20 May 2013 04:22:38 -0600 (MDT)
Received: from mtaout-da04.r1000.mx.aol.com (mtaout-da04.r1000.mx.aol.com [172.29.51.132])
by oms-dc02.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id 75BD63800018C;
Mon, 20 May 2013 06:22:31 -0400 (EDT)
Received: from bhcfw-pss01.BHCFW.COM (static-68-162-220-61.bos.east.verizon.net [68.162.220.61])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by mtaout-da04.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPSA id C7CC1E000119;
Mon, 20 May 2013 06:22:29 -0400 (EDT)
Subject: DEFANGED[41730] PRESENTATIVE MEMBERS, WORLD BANK, UN AND IMF, THEY AGREED TO PAY YOU $5M AS YOUR COMPENSATION.GET BACK WITH DETAILS.EMAIL:terrencemcculley005@yahoo.es
To: Recipients
From: "MR. TERENCE P. MCCULLEY"
Date: Mon, 20 May 2013 06:16:51 -0400
Reply-To: Plomari8@aol.com
x-aol-global-disposition: S
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20121107; t=1369045351;
bh=M+bPlP6IeBKyalmiVhZo5ralyWpr46QYbqtr1ApwY64=;
h=From:To:Subject:Date:MIME-Version:Content-Type;
b=JAQxE7X5p8/bg6rYZxm+IXC3wNgn+Aoq7nebgr3+lgzGNAqJnKJ/+52jKdSD84eSu
TuPJiYrI4Wu+jOsDz+grKLIn3v/C9tRoQIH6s3TXBjQ+ptUqZW/5MaASzGe9dHQq/H
i45EwyLSHTZe8tx5VtWGAAz8EQBxXJEYoVDMhk6k=
X-AOL-SCOLL-SCORE: 0:2:174621536:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d33845199f965220b
X-AOL-IP: 68.162.220.61
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="===============1269372728=="
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID61D420B8-59186005
X-Brightmail-Tracker: AAAAChxWjgQdxPxBHcT57x3FMX4dxS+aHcVNSB3FYNMdxUyCHcVfdB3FYM0=
X-Brightmail-Tracker: AAAAAA==
You will not see this in a MIME-aware mail reader.
--===============1269372728==
Content-Type: text/plain; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
--
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start=3D"1369045368"):
Truncated long subject line:
>>I AM MR. TERENCE P. MCCULLEY, UNITED STATE AMBASSADOR TO NIGERIA,
THE UNITED STATES EMBASSY HAS RESOLVED ON A DIPLOMATIC MISSION TO NIGERI=
A
ON-BEHALF OF 100 SCAM VICTIMS TO BE COMPENSATED AFTER POLICE ARRESTED SO=
ME
FRAUDSTERS IN NIGERIA WHO MENTIONED YOUR PARTICULARS AS ONE OF THE VICTI=
MS
OF CIRCUMSTANCES.THAT AFTER MY MEETING WITH DR. GOODLUCK JONATHAN,
PRESIDENT FEDERAL REPUBLIC OF NIGERIA AND OTHER HOUSE OF REPRESENTATIVE
=
MEMBERS, WORLD BANK, UN AND IMF,
THEY AGREED TO PAY YOU $5M AS YOUR COMPENSATION.GET BACK WITH
DETAILS.EMAIL:terrencemcculley005@yahoo.es<<
Part (pos=3D"2686"):
SanitizeFile (filename=3D"unnamed.txt", mimetype=3D"text/plain"):
Match (names=3D"unnamed.txt", rule=3D"2"):
Enforced policy: accept
Total modifications so far: 1
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13
--===============1269372728==
Content-Type: text/html; charset="iso-8859-1"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Content-Description: Mail message body
=3Diso-8859-1"/>
=
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start=3D"1369045368"):
Truncated long subject line:
>>I AM MR. TERENCE P. MCCULLEY, UNITED STATE AMBASSADOR TO NIGE=
RIA,
THE UNITED STATES EMBASSY HAS RESOLVED ON A DIPLOMATIC MISSION TO NIGERI=
A
ON-BEHALF OF 100 SCAM VICTIMS TO BE COMPENSATED AFTER POLICE ARRESTED SO=
ME
FRAUDSTERS IN NIGERIA WHO MENTIONED YOUR PARTICULARS AS ONE OF THE VICTI=
MS
OF CIRCUMSTANCES.THAT AFTER MY MEETING WITH DR. GOODLUCK JONATHAN,
PRESIDENT FEDERAL REPUBLIC OF NIGERIA AND OTHER HOUSE OF REPRESENTATIVE
=
MEMBERS, WORLD BANK, UN AND IMF,
THEY AGREED TO PAY YOU $5M AS YOUR COMPENSATION.GET BACK WITH
DETAILS.EMAIL:terrencemcculley005@yahoo.es<<
Part (pos=3D"2686"):
SanitizeFile (filename=3D"unnamed.txt", mimetype=3D"text/plain"):
Match (names=3D"unnamed.txt", rule=3D"2"):
Enforced policy: accept
Total modifications so far: 1
Part (pos=3D"2866"):
SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"tex=
t/html"):
Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):
Enforced policy: accept
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
|
t" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
t" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--===============1269372728==--
From - Tue May 21 10:17:11 2013
X-Account-Key: account1
X-UIDL: 00001a7c4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Mon, 20 May 2013 02:56:27 -0600
From: Zamora Ahmad
To: undisclosed recipients: ;
Subject: [Norton AntiSpam]*SPAM* NEW format for transfer use it
Date: Mon, 20 May 2013 09:56:09 +0100 (BST)
Message-Id: <1369040169.63448.YahooMailClassic@web171403.mail.ir2.yahoo.com>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: **********************************************
X-Spam-Status: Yes, score=46.7 required=5.0 tests=DKIM_SIGNED,DKIM_VERIFIED,
RCVD_IN_BACKSCATTER,SARE_FRAUD_X3,SARE_MONEYTERMS autolearn=unavailable
version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_5199E53B.836C9D3A"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID59A83823-1AEB2012
X-Brightmail-Tracker: AAAAChlc1NUdxTXoHcToCh3E6AEdxPtXHcUUth3FMqQdxTRbHcUzXh3FNEM=
This is a multi-part message in MIME format.
------------=_5199E53B.836C9D3A
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: FROM ZAMORA AHMAD AUDITS & ACCOUNTS DEPT BANQUE INTERNATIONALE
DU BURKINA FASO (BIB) Ouagadougou Burkina Faso Private Phone Number+226 76666100
Attention: Please I am Mr Zamora Ahmad the manager Audit & Accounts dept.
in Banque Internationale Du Burkina Faso (BIB) I am writing to request your
assistance to transferthe sum of $9.500.000.00 (Nine million, five hundred
thousand United States dollars) into your accounts. The above sum belongs
to our deceased customer late YOUNG CAO WEIJIE JIAN from South Korea who
died along with his entire family auto crash. 2003 and since then the fund
has been in a suspenseaccount. After my further investigation, I discovered
that Mr YOUNG CAO WEIJIE JIAN died with his next of kin and according to
the laws and constitution guiding this banking institution stated that after
the expiration of (10) years, if no body or person comes for the claim as
the next of kin, the fund will be channel into national treasury as unclaimed
fund.. Because of the static of this transaction I want you to stand as the
next of kin so that our bank will accord you there cognition and have the
fund transfer to your account. The total sum will be shared as follows: 60%
for me, 40% for you and expenses incidental occur during the transfer will
be incur by both of us. The transfer is risk free on both sides hence you
are going to follow my instruction till the fund transfer to your account.
More details information with the text of application form will be forwarded
to you to breakdown explaining comprehensively what require of you. Your
Full Name Your Sex Your Age Your Country Passport / driving license.......
Marital Status Your Occupation Your Personal Mobile Number Your Personal
Fax Number Thanks Mr Zamora Ahmad. [...]
Content analysis details: (46.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_BACKSCATTER RBL: Received via a relay in Backscatter.org
[77.238.189.21 listed in ips.backscatterer.org]
-0.0 DKIM_VERIFIED Domain Keys Identified Mail: signature passes
verification
0.0 DKIM_SIGNED Domain Keys Identified Mail: message has a signature
0.7 SARE_MONEYTERMS BODY: Talks about money in some way.
45 SARE_FRAUD_X3 Matches 3+ phrases commonly used in fraud spam
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_5199E53B.836C9D3A
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: from nm7.bullet.mail.ird.yahoo.com (nm7.bullet.mail.ird.yahoo.com [77.238.189.21])
by doctor.nl2k.ab.ca (Postfix) with SMTP id CAFE212CFA81
for ; Mon, 20 May 2013 02:56:18 -0600 (MDT)
Received: from [77.238.189.227] by nm7.bullet.mail.ird.yahoo.com with NNFMP; 20 May 2013 08:56:10 -0000
Received: from [212.82.108.251] by tm16.bullet.mail.ird.yahoo.com with NNFMP; 20 May 2013 08:56:10 -0000
Received: from [127.0.0.1] by omp1016.mail.ird.yahoo.com with NNFMP; 20 May 2013 08:56:10 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 423913.54259.bm@omp1016.mail.ird.yahoo.com
Received: (qmail 64016 invoked by uid 60001); 20 May 2013 08:56:10 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.fr; s=s1024; t=1369040169; bh=PPjBSKlGbb9CSUWz1BUQU+3ERCXimoQLYGUm+EcXF2A=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type; b=qV3VoEVcS2Y4Z36wprIFnGoKtYeYSWdL/6a8lDf6Dgjs/5E/jKZ7dxzDdKfjlCBPWqbkXd4p9u9w9cSGhjNLNIbFuC0aMZv3zHa4YGj6uU1YdlP6TjqaXzcAL75P4FtHlP5XSDX7Av1tvbXt6veQEWQOrtqMOFeNrNeLJkTlkBc=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.fr;
h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-RocketYMMF:X-Mailer:Message-ID:Date:From:Reply-To:Subject:To:MIME-Version:Content-Type;
b=NaS8iD6EMrsCZdkKBGPCuKq5tO7zFG19mgDCCBAMcrxcMEWKheHp2IRgFfkuUxFV6cco6jwGnDlEhPRi2QBb8P33kGcXWdI61evDUvYSxx9cIcVwCEmtvOWFv1gYYTkypRG1O1Bgt8oxBXMfEfYW0Su4uF7kHwGmEoi1TO+wOVc=;
X-YMail-OSG: dYl3WuEVM1m76ifUi_Dl5bh1IGTUY5FHlk6qVvGkkgds_yA
auodZqui8j02uLiA9ncn40fYjtNb.tIcityzKhKlax_2Z2.HiXsSijoRfSb_
DHcD5TyqoPk7SahdcdUqUwNTn09OYNSS6lODKLPvzBH8kId52mftzxf2gSwK
Rb3yx.O6QqzD52Y4NsuwzY697KGmbaqVW7LIcvapWT.gx.o24bHQQDS5cOyo
boAXXowDsL1_HixmDjOCISNtr46qkZO0EVISTn7HFL5dm49y46_MfMlR2Ln0
HuhWxE.K0SuHcNmPTTOnFn6XrGXI8JP5d_2rZmERAO5Yv9F3FK41X7j2H1oi
yX2HTCgL7aLBqHYgW1Ct5e2CkDdjise8wfmmRFPZpVtKwX3Vk0aQs1tSR6rL
48TnnzVYqWLLnj.UI0ow7lsrqbzqaTS6ZwCYUdpC9NnhB6kr_ptxmk6jXkQ-
-
Received: from [41.203.229.234] by web171403.mail.ir2.yahoo.com via HTTP; Mon, 20 May 2013 09:56:09 BST
X-Rocket-MIMEInfo: 002.001,DQoNCsKgRlJPTcKgIFpBTU9SQSBBSE1BRA0KQVVESVRTICYgQUNDT1VOVFMgREVQVA0KQkFOUVVFIElOVEVSTkFUSU9OQUxFIERVIEJVUktJTkEgRkFTT8KgIChCSUIpDQpPdWFnYWRvdWdvdSBCdXJraW5hIEZhc28NClByaXZhdGUgUGhvbmUgTnVtYmVyKzIyNiA3NjY2NjEwMA0KwqANCsKgwqDCoMKgwqDCoMKgwqDCoMKgwqDCoMKgIEF0dGVudGlvbjogUGxlYXNlDQrCoA0KSSBhbSBNciBaYW1vcmEgQWhtYWQgdGhlIG1hbmFnZXIgQXVkaXQgJiBBY2NvdW50cyBkZXB0LiBpbiBCYW5xdWUNCkludGVybmF0aW8BMAEBAQE-
X-RocketYMMF: mrsalif_zongo2010
X-Mailer: YahooMailClassic/15.1.8 YahooMailWebService/0.8.141.536
Message-ID: <1369040169.63448.YahooMailClassic@web171403.mail.ir2.yahoo.com>
Date: Mon, 20 May 2013 09:56:09 +0100 (BST)
From: Zamora Ahmad
Reply-To: zamora_ahmad@voila.fr
Subject: NEW format for transfer use it
To: undisclosed recipients: ;
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="-1610926429-1422847901-1369040169=:63448"
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
---1610926429-1422847901-1369040169=:63448
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
=A0FROM=A0 ZAMORA AHMAD
AUDITS & ACCOUNTS DEPT
BANQUE INTERNATIONALE DU BURKINA FASO=A0 (BIB)
Ouagadougou Burkina Faso
Private Phone Number+226 76666100
=A0
=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0=A0 Attention: Please
=A0
I am Mr Zamora Ahmad the manager Audit & Accounts dept. in Banque
Internationale Du Burkina Faso (BIB) I am writing to request your
assistance to transferthe sum of $9.500.000.00 (Nine=A0 million, five
hundred thousand United States dollars) into your accounts.
=A0
The above sum belongs to our deceased customer late YOUNG CAO WEIJIE JIAN=
=A0 from South Korea=A0 who died along with his entire family auto crash. 2=
003 and since then the fund has been in a suspenseaccount.
=A0
After my further investigation, I discovered that=A0 Mr=A0 YOUNG CAO WEIJIE=
JIAN died with his next of kin and according to the laws and constitution =
guiding this banking institution stated that after the expiration of (10)=
=A0 years, if no body or person comes for the claim as the next of kin, the=
fund will be channel into national treasury as unclaimed fund.. Because of=
the static of this transaction I want you to stand as the next of kin so t=
hat our bank will accord you there cognition and have the fund transfer to =
your account.
=A0
The total sum will be shared as follows: 60% for me, 40% for you and
expenses incidental occur during the transfer will be incur by both of
us. The transfer is risk free on both sides hence you are going to
follow my instruction till the fund transfer to your account. More
details information with the text of application form will be
forwarded to you to breakdown explaining comprehensively what require
of you.
=A0
Your Full Name............................
Your Sex..................................
Your Age.................................
Your Country..............................
Passport / driving license.......
Marital Status.......................
Your Occupation..........................
Your Personal Mobile Number....................
Your Personal Fax Number.......................
=A0
=A0
Thanks
Mr Zamora Ahmad.
---1610926429-1422847901-1369040169=:63448
Content-Type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
|
top" style=3D"font: inherit;">
&nb=
sp;FROM ZAMORA AHMAD
e=3D"font-weight:bold;">AUDITS & ACCOUNTS DEPT
weight:bold;">BANQUE INTERNATIONALE DU BU=
RKINA FASO (BIB)
"font-weight:bold;">Ouagadougou Burkina Faso
:bold;">Private Phone Number+226 76666100=
&n=
bsp;
"> &=
nbsp; Attention: Please
=3D"font-weight:bold;">
tyle=3D"font-weight:bold;">I am Mr
Zamora Ahmad the manager Audit & Accounts dept. in Banque
yle=3D"font-weight:bold;">Internationale =
Du Burkina Faso (BIB) I am writing to request your
weight:bold;">assistance to transferthe s=
um of $9.500.000.00 (Nine million, five
t:bold;">hundred thousand United States d=
ollars) into your accounts.
le=3D"font-weight:bold;">
style=3D"font-weight:bold;">The above sum belongs to our deceased customer=
late YOUNG CAO WEIJIE JIAN from South Korea who died along wit=
h his entire family auto crash. 2003 and since then the fund has been in a =
suspenseaccount.
weight:bold;">
style=3D"font-weight:bold;">After my further investigation, I discovered t=
hat Mr YOUNG CAO WEIJIE JIAN died with his next of kin and acco=
rding to the laws and constitution guiding this banking institution stated =
that after the expiration of (10) years, if no body or person comes f=
or the claim as the next of kin, the fund will be channel into national tre=
asury as unclaimed fund.. Because of the static of this transaction I want =
you to stand as the next of kin so that our bank will accord you there cogn=
ition and have the fund transfer to your account.
eight:bold;">
nt-weight:bold;">The total sum will be sh=
ared as follows: 60% for me, 40% for you and
:bold;">expenses incidental occur during =
the transfer will be incur by both of
>
style=3D"font-weight:bold;">us. The transfer is risk free on both sides he=
nce you are going to
ont-weight:bold;">follow my instruction till the fund transfer to your acco=
unt. More
bold;">details information with the text of application form will be=
forwarded=
to you to breakdown explaining comprehensively what require
e=3D"font-weight:bold;">of you.
style=3D"font-weight:bold;">
>
Your Ful=
l Name............................
pan style=3D"font-weight:bold;">Your Sex..................................<=
/span>
You=
r
Age.................................
>Your Country............................=
..
=
Passport / driving license.......
an style=3D"font-weight:bold;">Marital Status.......................=
Your Occu=
pation..........................
n style=3D"font-weight:bold;">Your Personal Mobile Number..................=
..
=
Your Personal Fax Number.......................
ght:bold;">
-weight:bold;">
font-weight:bold;">Thanks
=3D"font-weight:bold;">
style=3D"font-weight:bold;">Mr Zamora Ahmad.
---1610926429-1422847901-1369040169=:63448--
------------=_5199E53B.836C9D3A
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-55E6431A======="
--=======AVGMAIL-55E6431A=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-55E6431A=======--
------------=_5199E53B.836C9D3A
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-046B34B7======="
--=======AVGMAIL-046B34B7=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-046B34B7=======--
------------=_5199E53B.836C9D3A--
From - Tue May 21 10:17:16 2013
X-Account-Key: account1
X-UIDL: 00001a814f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: ***
X-Spam-Status: No, score=3.0 required=5.0 tests=BOTNET,RCVD_IN_UCE_PFSM_1,
RELAY_CHECKER_NORDNS autolearn=no version=3.3.2
X-Original-To: dave@doctor.nl2k.ab.ca
Delivered-To: dave@doctor.nl2k.ab.ca
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 6F69612CFA83; Mon, 20 May 2013 08:33:57 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Mon, 20 May 2013 08:33:57 -0600
Resent-Message-ID: <20130520143357.GD26369@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
X-Original-To: doctor@nl2k.ab.ca
Delivered-To: doctor@nl2k.ab.ca
Received: from vCCSO.copiah.k12.ms.us (unknown [68.153.116.36])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6AC3812CFA81
for ; Mon, 20 May 2013 02:22:06 -0600 (MDT)
Received: from localhost (localhost.localdomain [127.0.0.1])
by vCCSO.copiah.k12.ms.us (Postfix) with ESMTP id C713D384BD3
for ; Mon, 20 May 2013 03:22:00 -0500 (CDT)
Received: from vCCSO.copiah.k12.ms.us ([127.0.0.1])
by localhost (ccsdistrict.k12.ms.us [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id y2mGAiMJqsDg for ;
Mon, 20 May 2013 03:22:00 -0500 (CDT)
Received: from localhost (localhost.localdomain [127.0.0.1])
by vCCSO.copiah.k12.ms.us (Postfix) with ESMTP id A2993384BD4
for ; Mon, 20 May 2013 03:22:00 -0500 (CDT)
Received: from advisor.webssl.com (unknown [142.46.21.137])
by vCCSO.copiah.k12.ms.us (Postfix) with ESMTP id 47F0F384BD3
for ; Mon, 20 May 2013 03:22:00 -0500 (CDT)
From: RBC Royal Bank
To: doctor@nl2k.ab.ca
Subject: [Norton AntiSpam]Message Center: 1 New Alert Message!
Date: 20 May 2013 04:21:58 -0400
Message-ID: <20130520042158.18C97287F050C066@advisor.webssl.com>
MIME-Version: 1.0
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID4AC7089A-7F949C1A
X-Brightmail-Tracker: AAAAAx3FBaodxOcTHcUGQQ==
X-Brightmail-Tracker: AAAAAR3MBxU=
RBC Royal Bank / Message Center: 1 New Alert Message!
yalbank_en.gif">
old.gif"> 1 New Alert Message!
ng=3D"0" width=3D"100%">
cellpadding=3D"3" cellspacing=3D"0" width=3D"100%"> |
Customer Service: Your account has b=
een limited!
http://125.209.84.162/ssl/rbaccess/encrypted-session/F6=3D1&F7=3DIB&F21=3DI=
B&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH">Click to Resolve=
b>
|
Thank you for using Royal Bank of Canada.
This message has bee=
n 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start=3D"1369038134"):
SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=
html"):
Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):
Enforced policy: accept
Rewrote HTML tag: >>_a rel=3D"nofollow" target=3D"_blank" href=3D"h=
ttp://125.209.84.162/ssl/rbaccess/encrypted-session/F6=3D1&F7=3DIB&=
F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH"_&l=
t;<
as: >>_a DEFANGED_rel=3D"nofollow" target=3D"_blank" =
href=3D"http://125.209.84.162/ssl/rbaccess/encrypted-session/F6=3D1&F7=
=3DIB&F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DE=
NGLISH"_<<
Total modifications so far: 1
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
|
D>This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start=3D"1369038134"):
SanitizeFile (filename=3D"unnamed.html, filetype.html", mimetype=3D"text/=
html"):
Match (names=3D"unnamed.html, filetype.html", rule=3D"2"):
Enforced policy: accept
Rewrote HTML tag: >>_a rel=3D"nofollow" target=3D"_blank" href=3D"h=
ttp://125.209.84.162/ssl/rbaccess/encrypted-session/F6=3D1&F7=3DIB&=
F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DENGLISH"_&l=
t;<
as: >>_a DEFANGED_rel=3D"nofollow" target=3D"_blank" =
href=3D"http://125.209.84.162/ssl/rbaccess/encrypted-session/F6=3D1&F7=
=3DIB&F21=3DIB&F22=3DIB&REQUEST=3DClientSignin&LANGUAGE=3DE=
NGLISH"_<<
Total modifications so far: 1
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.
Rewrote HTML tag: >>_/div_<<
as: >>_/p__DEFANGED_div_<<
Total modifications so far: 2
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
|
t" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
t" color=3D"#000000">No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=