LARTHの日記： DKIM-Signature 付きのスパム

いわゆるナイジェリア詐欺の変形版な交通事故（？）保険金支払うよ、とかいうスパムが届く。なんと DKIM-Signature が付いていた。

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cfp.cn; h=
        x-mailer:content-transfer-encoding:content-type:content-type
        :mime-version:date:date:subject:subject:from:from:reply-to; s=
        dkim; t=1338547226; x=1339411226; bh=ezgjBXHoJXJXMjdoaWPC6Cimlhb
        27txE+uOl5L3noxM=; b=ZNMUY0Acw7c76ENcLu1QHwhLaTd0FoNtVoLZPfh29/r
        5En0wGBP/cpo+Wv8aGl5LIVVknvAA/8XKDgHX8fwdTqjvBTyZx/bEDTwpMEcsY1/
        XBNJu3OnR6+VmVmvgu9P//DO9bFD1h9rI7dq9/9ssvJIaDWLcZCJ1pLawACBFioA
        =
X-Virus-Scanned: Debian amavisd-new at ms.cfp.cn
Received: from ms.cfp.cn ([127.0.0.1])
        by localhost (ms.cfp.cn [127.0.0.1]) (amavisd-new, port 10024)
        with ESMTP id B7N7sqE9Tu3i; Fri, 1 Jun 2012 18:40:26 +0800 (CST)
Received: from User (unknown [176.61.143.30])
        by ms.cfp.cn (iRedMail) with ESMTPA id 87DB7740DD2;
        Fri, 1 Jun 2012 18:37:36 +0800 (CST)
Reply-To:
From: "MRS.DORCAS NWODU"
Subject: PAYMENT NOTIFICATION.
Date: Fri, 1 Jun 2012 03:30:27 -0700
MIME-Version: 1.0
Content-Type: text/plain;
        charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id:
To: undisclosed-recipients:;

発信元は中国の専門学校っぽい(cfp.cn)ところ。
スパムの発信方法まで教えてるのか（＾＾；

d=mx.aol.com, yahoo.com, att.net, ....

[shibuya (17159)]

ナイジェリアに限定しなければDKIM-Signature付は比率は小さくても十分に発達しているといえる感じ。