More East Asian Spam
Posted by Dave Yadallee on
From - Tue May 21 10:17:32 2013
X-Account-Key: account1
X-UIDL: 00001a9c4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 21 May 2013 00:49:30 -0600
From: "Alfa Mirage Co., Ltd."
To: dave@nk.ca
Subject: SPAM Re:Catalogue for products
Date: Mon, 20 May 2013 22:29:03 +0200
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.5 required=5.0 tests=NOTVALID_YAHOO,
RCVD_IN_SPAMCANNIBAL,SPF_HELO_PASS,URIBL_PH_SURBL autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519B18FA.3F9F765D"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID45BC0F9E-2C4DFDBC
X-Brightmail-Tracker: AAAAAx3E6AodxOgBHcUw7w==
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------------=_519B18FA.3F9F765D
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: - This mail is in HTML. Some elements may be ommited in plain
text. - Dear Supplier, Thanks for your email and information... We have gone
through your Ad and seen the good products your company deals on, can you
assure us on the quality and that you can really Deliver within the stipulated
period given to us by you if we place an order immediately, or you already
have them in stock, we also could not find some products in your page. Check
our link below to see if you have the product listed in our catalouge . login
with your email and password to access the catalouge. [...]
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_SPAMCANNIBAL RBL: Received via a relay in SpamCannibal
[95.173.163.80 listed in bl.spamcannibal.org]
2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: eventsrusworld.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
3.5 NOTVALID_YAHOO Claims to be from Yahoo but is not
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519B18FA.3F9F765D
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from 88zwrmkb.ni.net.tr (80qkmvmx.ni.net.tr [95.173.163.80])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id CE24112CFA87
for; Tue, 21 May 2013 00:49:22 -0600 (MDT)
Received: from [127.0.0.1] (port=36860 helo=serv2003)
by 88zwrmkb.ni.net.tr with esmtpa (Exim 4.80)
(envelope-from)
id 1UeWha-003E0H-ND
for dave@nk.ca; Mon, 20 May 2013 23:29:03 +0300
Received: from serv2003 ([80.68.181.228] helo=serv2003) by ASSP.at.88zwrmkb.ni.net.tr;
20 May 2013 23:12:33 +0300
From: "Alfa Mirage Co., Ltd."
Subject: Re:Catalogue for products
To: dave@nk.ca
Content-Type: multipart/alternative; boundary="5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30"
MIME-Version: 1.0
Date: Mon, 20 May 2013 22:29:03 +0200
X-Assp-Whitelisted: Yes
X-Assp-Envelope-From: americanasiannc@yahoo.com
X-Assp-Intended-For: dave@nk.ca
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 88zwrmkb.ni.net.tr
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: 88zwrmkb.ni.net.tr: authenticated_id: sergen@aslanweb.net
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
This is a multi-part message in MIME format
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
- This mail is in HTML. Some elements may be ommited in plain text. -
Dear Supplier,
Thanks for your email and information...
We have gone through your Ad and seen the good products your company d=
eals on, can you assure us on the quality and that you can really Deli=
ver within the stipulated period given to us by you if we place an ord=
er immediately, or you already have them in stock, we also could not f=
ind some products in your page. Check our link below to see if you hav=
e the product listed in our catalouge . login with your email and pass=
word to access the catalouge.
CLICK HERE TO VIEW THE SAMPLE
Also please give us your payment terms and delivery time. We wait soon=
est reply..
Alfa Mirage Co., Ltd.
Booth:
1403
3-2-19 Miyakojimahondori
Miyakojima-ku, Osaka-shi Japan 534-0021
Phone:
81-6-6924-2631
Fax:
81-6-6924-2022
Thank you
Best Regards
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Dear Supplier,=20
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium">
tline-style: none; outline-width: medium">
X-Account-Key: account1
X-UIDL: 00001a9c4f5d9180
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:
Received: from localhost by doctor.nl2k.ab.ca
with SpamAssassin (version 3.3.2);
Tue, 21 May 2013 00:49:30 -0600
From: "Alfa Mirage Co., Ltd."
To: dave@nk.ca
Subject: SPAM Re:Catalogue for products
Date: Mon, 20 May 2013 22:29:03 +0200
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on doctor.nl2k.ab.ca
X-Spam-Flag: YES
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.5 required=5.0 tests=NOTVALID_YAHOO,
RCVD_IN_SPAMCANNIBAL,SPF_HELO_PASS,URIBL_PH_SURBL autolearn=no version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_519B18FA.3F9F765D"
X-Antivirus: AVG for E-mail 10.0.1432 [3162/5841]
X-AVG-ID: ID45BC0F9E-2C4DFDBC
X-Brightmail-Tracker: AAAAAx3E6AodxOgBHcUw7w==
X-Brightmail-Tracker: AAAAAA==
This is a multi-part message in MIME format.
------------=_519B18FA.3F9F765D
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "doctor.nl2k.ab.ca", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: - This mail is in HTML. Some elements may be ommited in plain
text. - Dear Supplier, Thanks for your email and information... We have gone
through your Ad and seen the good products your company deals on, can you
assure us on the quality and that you can really Deliver within the stipulated
period given to us by you if we place an order immediately, or you already
have them in stock, we also could not find some products in your page. Check
our link below to see if you have the product listed in our catalouge . login
with your email and password to access the catalouge. [...]
Content analysis details: (7.5 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.0 RCVD_IN_SPAMCANNIBAL RBL: Received via a relay in SpamCannibal
[95.173.163.80 listed in bl.spamcannibal.org]
2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist
[URIs: eventsrusworld.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
3.5 NOTVALID_YAHOO Claims to be from Yahoo but is not
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_519B18FA.3F9F765D
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path:
X-Original-To: dave@nk.ca
Delivered-To: dave@nk.ca
Received: from 88zwrmkb.ni.net.tr (80qkmvmx.ni.net.tr [95.173.163.80])
(using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
(No client certificate requested)
by doctor.nl2k.ab.ca (Postfix) with ESMTPS id CE24112CFA87
for
Received: from [127.0.0.1] (port=36860 helo=serv2003)
by 88zwrmkb.ni.net.tr with esmtpa (Exim 4.80)
(envelope-from
id 1UeWha-003E0H-ND
for dave@nk.ca; Mon, 20 May 2013 23:29:03 +0300
Received: from serv2003 ([80.68.181.228] helo=serv2003) by ASSP.at.88zwrmkb.ni.net.tr;
20 May 2013 23:12:33 +0300
From: "Alfa Mirage Co., Ltd."
Subject: Re:Catalogue for products
To: dave@nk.ca
Content-Type: multipart/alternative; boundary="5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30"
MIME-Version: 1.0
Date: Mon, 20 May 2013 22:29:03 +0200
X-Assp-Whitelisted: Yes
X-Assp-Envelope-From: americanasiannc@yahoo.com
X-Assp-Intended-For: dave@nk.ca
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - 88zwrmkb.ni.net.tr
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - yahoo.com
X-Get-Message-Sender-Via: 88zwrmkb.ni.net.tr: authenticated_id: sergen@aslanweb.net
X-Virus-Scanned: clamav-milter 0.97.8-exp-debug at doctor.nl2k.ab.ca
X-Virus-Status: Clean
This is a multi-part message in MIME format
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
- This mail is in HTML. Some elements may be ommited in plain text. -
Dear Supplier,
Thanks for your email and information...
We have gone through your Ad and seen the good products your company d=
eals on, can you assure us on the quality and that you can really Deli=
ver within the stipulated period given to us by you if we place an ord=
er immediately, or you already have them in stock, we also could not f=
ind some products in your page. Check our link below to see if you hav=
e the product listed in our catalouge . login with your email and pass=
word to access the catalouge.
CLICK HERE TO VIEW THE SAMPLE
Also please give us your payment terms and delivery time. We wait soon=
est reply..
Alfa Mirage Co., Ltd.
Booth:
1403
3-2-19 Miyakojimahondori
Miyakojima-ku, Osaka-shi Japan 534-0021
Phone:
81-6-6924-2631
Fax:
81-6-6924-2022
Thank you
Best Regards
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
Dear Supplier,=20
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium">
tline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium">Thanks for your email and information...
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>We have gone through your Ad and seen the goo=
d products your company deals on, can you assure us on the quality and=
that you can really Deliver within the stipulated period given to us =
by you if we place an order immediately, or you already have them in s=
tock, we also could not find some products in your page. Check our lin=
k below to see if you have the product listed in our catalouge . login=
with your email and password to access the catalouge.
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" href=3D"http://eventsrusworld.com/wp-admin/det.htm" target=
=3D_blank rel=3Dnofollow>CLICK HERE TO VIEW THE SAMPLE
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>Also please give us your payment terms and de=
livery time. We wait soonest reply..
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
=
k>Alfa Mirage Co., Ltd.
el>Booth: 1403
3-2-19 Miyakojimahondori
Miyakojima-ku, Os=
aka-shi Japan 534-0021
Phone: 81-6-6924-=
2631
Fax: 81-6-6924-2022
T>
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
Thank you
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>Best Regards
1.2em; outline-color: invert; outline-style: none; outline-width: medi=
um">
eva,Swiss,SunSans-Regular color=3Dblack>
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
HEIGHT: 1.2em; outline-color: invert; outline-style: none; outline-wid=
th: medium" face=3Darial>
r: invert; outline-style: none; outline-width: medium">
PADDING-BOTTOM: 0px; MARGIN: 0px; COLOR: rgb(42,42,42); LINE-HEIGHT: 1=
6px; PADDING-TOP: 0px; FONT-FAMILY: arial,helvetica; outline-color: in=
vert; outline-style: none; outline-width: medium">
TML>
--5VIdW=_j65v1rJFepIac56C5dJbfc7Z1o30--
------------=_519B18FA.3F9F765D
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-42462247======="
--=======AVGMAIL-42462247=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-42462247=======--
------------=_519B18FA.3F9F765D
Content-Type: multipart/alternative;
boundary="=======AVGMAIL-507A214D======="
--=======AVGMAIL-507A214D=======
Content-Type: text/plain; x-avg=cert; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
Content-Description: "Certification"
-----
No virus found in this message.
Checked by AVG - www.avg.com
Version: 10.0.1432 / Virus Database: 3162/5841 - Release Date: 05/20/13=
--=======AVGMAIL-507A214D=======--
------------=_519B18FA.3F9F765D--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments