More AOL Spam
Posted by Dave Yadallee on
From - Wed Jul 11 11:43:40 2012
X-Account-Key: account2
X-UIDL: ?ll!!H"S"!]fA!!NeY!!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: **
X-Spam-Status: No, score=3.1 required=5.0 tests=DKIM_SIGNED,FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_TAGS autolearn=no version=3.3.2
X-Original-To: aboo@doctor.nl2k.ab.ca
Delivered-To: aboo@doctor.nl2k.ab.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id DA9ED12CFA89;
Wed, 11 Jul 2012 05:29:13 -0600 (MDT)
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Authentication-Results: doctor.nl2k.ab.ca (amavisd-new);
dkim=fail (1024-bit key) reason="fail (body has been altered)"
header.d=mx.aol.com
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id DN7-sCyNQR0V; Wed, 11 Jul 2012 05:29:10 -0600 (MDT)
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 7EE5C12CFA86; Wed, 11 Jul 2012 05:29:10 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 11 Jul 2012 05:29:10 -0600
Resent-Message-ID: <20120711112910.GM23906@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee,
See root
X-Original-To: root@nl2k.ab.ca
Delivered-To: root@nl2k.ab.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 00E8F12CFA86
for; Wed, 11 Jul 2012 03:55:14 -0600 (MDT)
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id tkAPtNjQfhY8 for;
Wed, 11 Jul 2012 03:55:10 -0600 (MDT)
Received: from oms-db04.r1000.mx.aol.com (oms-db04.r1000.mx.aol.com [205.188.58.4])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6650C12CFA82
for; Wed, 11 Jul 2012 03:55:10 -0600 (MDT)
Received: from mtaout-mb04.r1000.mx.aol.com (mtaout-mb04.r1000.mx.aol.com [172.29.41.68])
by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id ADAB01C00009C;
Wed, 11 Jul 2012 05:55:09 -0400 (EDT)
Received: from User (unknown [64.122.225.69])
by mtaout-mb04.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 30154E0000C5;
Wed, 11 Jul 2012 05:55:00 -0400 (EDT)
Reply-To:
From: "Sanusi Lamido Sanusi"
Subject: [Norton AntiSpam]***SPAM** IMMEDIATE CONTRACT/INHERITANCE PAYMENT Kindly Respond ASAP
Date: Wed, 11 Jul 2012 04:54:56 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016_01C2A9A6.71AC9CA2"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: S
X-AOL-VSS-INFO: 5400.1158/82153
X-AOL-VSS-CODE: clean
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20110426; t=1342000509;
bh=OmFswJJtdNztdOAmdpagsEDIcF/ccxJ1BjngNSj2kqQ=;
h=From:Subject:Date:MIME-Version:Content-Type;
b=L2Mxyflz6H/HvkouI0QqQs2Ci4qQI6pKKGyqqapctgbeVWl/1pe8D+G7zbgzqp1kn
/viKxCH+jxD/bD38NMEBSZqihGT3GXKIz7ZXn1tXNiIghTmmTAT4El27SvjXiZvGck
ShXCfTOfnmKKtp8B4p7rI9Ilak2jfcUD1bdT4s2w=
X-AOL-SCOLL-SCORE: 0:2:143574288:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d29444ffd4d74093f
X-AOL-IP: 64.122.225.69
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-UIDL: ?ll!!H"S"!]fA!!NeY!!
Status: U
X-Brightmail-Tracker: AAAAChrot4EZCEfjGK3PTRhmgGgbETzWGxItTRsSNR0bEjTvGxI1IxsSNVs=
This is a multi-part message in MIME format.
------=_NextPart_000_0016_01C2A9A6.71AC9CA2
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
------=_NextPart_000_0016_01C2A9A6.71AC9CA2
Content-Type: application/octet-stream;
name="SANUSI.rtf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="SANUSI.rtf"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------=_NextPart_000_0016_01C2A9A6.71AC9CA2
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start="1342000517"):
Part (pos="2570"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.
Rewrote HTML tag: >>_DIV_<<
as: >>_p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Part (pos="3009"):
SanitizeFile (filename="SANUSI.rtf", mimetype="application/octet-stream"):
Match (names="SANUSI.rtf", rule="2"):
Enforced policy: accept
Total modifications so far: 2
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
------=_NextPart_000_0016_01C2A9A6.71AC9CA2--
X-Account-Key: account2
X-UIDL: ?ll!!H"S"!]fA!!NeY!!
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Return-Path:
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Level: **
X-Spam-Status: No, score=3.1 required=5.0 tests=DKIM_SIGNED,FORGED_MUA_OUTLOOK,
FORGED_OUTLOOK_TAGS autolearn=no version=3.3.2
X-Original-To: aboo@doctor.nl2k.ab.ca
Delivered-To: aboo@doctor.nl2k.ab.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id DA9ED12CFA89;
Wed, 11 Jul 2012 05:29:13 -0600 (MDT)
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Authentication-Results: doctor.nl2k.ab.ca (amavisd-new);
dkim=fail (1024-bit key) reason="fail (body has been altered)"
header.d=mx.aol.com
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id DN7-sCyNQR0V; Wed, 11 Jul 2012 05:29:10 -0600 (MDT)
Received: by doctor.nl2k.ab.ca (Postfix, from userid 101)
id 7EE5C12CFA86; Wed, 11 Jul 2012 05:29:10 -0600 (MDT)
Resent-From: doctor@doctor.nl2k.ab.ca
Resent-Date: Wed, 11 Jul 2012 05:29:10 -0600
Resent-Message-ID: <20120711112910.GM23906@doctor.nl2k.ab.ca>
Resent-To: Dave Yadallee
See root
X-Original-To: root@nl2k.ab.ca
Delivered-To: root@nl2k.ab.ca
Received: from localhost (localhost.nl2k.ab.ca [127.0.0.1])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 00E8F12CFA86
for
X-Virus-Scanned: amavisd-new at doctor.nl2k.ab.ca
Received: from doctor.nl2k.ab.ca ([127.0.0.1])
by localhost (doctor.nl2k.ab.ca [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id tkAPtNjQfhY8 for
Wed, 11 Jul 2012 03:55:10 -0600 (MDT)
Received: from oms-db04.r1000.mx.aol.com (oms-db04.r1000.mx.aol.com [205.188.58.4])
by doctor.nl2k.ab.ca (Postfix) with ESMTP id 6650C12CFA82
for
Received: from mtaout-mb04.r1000.mx.aol.com (mtaout-mb04.r1000.mx.aol.com [172.29.41.68])
by oms-db04.r1000.mx.aol.com (AOL Outbound OMS Interface) with ESMTP id ADAB01C00009C;
Wed, 11 Jul 2012 05:55:09 -0400 (EDT)
Received: from User (unknown [64.122.225.69])
by mtaout-mb04.r1000.mx.aol.com (MUA/Third Party Client Interface) with ESMTPA id 30154E0000C5;
Wed, 11 Jul 2012 05:55:00 -0400 (EDT)
Reply-To:
From: "Sanusi Lamido Sanusi"
Subject: [Norton AntiSpam]***SPAM**
Date: Wed, 11 Jul 2012 04:54:56 -0500
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0016_01C2A9A6.71AC9CA2"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
x-aol-global-disposition: S
X-AOL-VSS-INFO: 5400.1158/82153
X-AOL-VSS-CODE: clean
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mx.aol.com;
s=20110426; t=1342000509;
bh=OmFswJJtdNztdOAmdpagsEDIcF/ccxJ1BjngNSj2kqQ=;
h=From:Subject:Date:MIME-Version:Content-Type;
b=L2Mxyflz6H/HvkouI0QqQs2Ci4qQI6pKKGyqqapctgbeVWl/1pe8D+G7zbgzqp1kn
/viKxCH+jxD/bD38NMEBSZqihGT3GXKIz7ZXn1tXNiIghTmmTAT4El27SvjXiZvGck
ShXCfTOfnmKKtp8B4p7rI9Ilak2jfcUD1bdT4s2w=
X-AOL-SCOLL-SCORE: 0:2:143574288:93952408
X-AOL-SCOLL-URL_COUNT: 0
X-AOL-REROUTE: YES
x-aol-sid: 3039ac1d29444ffd4d74093f
X-AOL-IP: 64.122.225.69
X-Sanitizer: This message has been sanitized!
X-Sanitizer-URL: http://mailtools.anomy.net/
X-Sanitizer-Rev: $Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
X-UIDL: ?ll!!H"S"!]fA!!NeY!!
Status: U
X-Brightmail-Tracker: AAAAChrot4EZCEfjGK3PTRhmgGgbETzWGxItTRsSNR0bEjTvGxI1IxsSNVs=
This is a multi-part message in MIME format.
------=_NextPart_000_0016_01C2A9A6.71AC9CA2
Content-Type: text/html;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
Kindly read the memo for more info from Sanusi Lamido Sanusi and get back to me
------=_NextPart_000_0016_01C2A9A6.71AC9CA2
Content-Type: application/octet-stream;
name="SANUSI.rtf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
filename="SANUSI.rtf"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------=_NextPart_000_0016_01C2A9A6.71AC9CA2
Content-Type: text/sanitizer-log; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Content-Disposition: attachment; filename="sanitizer.log"
This message has been 'sanitized'. This means that potentially
dangerous content has been rewritten or removed. The following
log describes which actions were taken.
Sanitizer (start="1342000517"):
Part (pos="2570"):
SanitizeFile (filename="unnamed.html, filetype.html", mimetype="text/html"):
Match (names="unnamed.html, filetype.html", rule="2"):
Enforced policy: accept
Note: Styles and layers give attackers many tools to fool the
user and common browsers interpret Javascript code found
within style definitions.
Rewrote HTML tag: >>_DIV_<<
as: >>_p__DEFANGED_DIV_<<
Rewrote HTML tag: >>_/DIV_<<
as: >>_/p__DEFANGED_DIV_<<
Part (pos="3009"):
SanitizeFile (filename="SANUSI.rtf", mimetype="application/octet-stream"):
Match (names="SANUSI.rtf", rule="2"):
Enforced policy: accept
Total modifications so far: 2
Anomy 0.0.0 : Sanitizer.pm
$Id: Sanitizer.pm,v 1.94 2006/01/02 16:43:10 bre Exp $
------=_NextPart_000_0016_01C2A9A6.71AC9CA2--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments