Microsoft Outlook Hotmail Spam | Entries from Friday, May 6. 2022

Chinese product Spam from Microsoft

Posted by Dave Yadallee on Friday, May 6. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 May 2022 16:42:12 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nn6dM-0009Da-Nm

for dave@doctor.nl2k.ab.ca;

Fri, 06 May 2022 16:41:12 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 May 2022 16:41:12 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [119.133.33.253] (port=5997 helo=undp-org.mail.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nn6HC-0007A6-09

for sales@nk.ca;

Fri, 06 May 2022 16:18:23 -0600

Date: Sat, 7 May 2022 06:17:38 +0800 (CST)

From: peibaohuang

Sender: qoamhaeiz

To: sales

Message-ID: <1777383944.3257.1651875458456@undp-org.mail.protection.outlook.com>

Subject: Re:LED S19/S14s Tube $1.3/pc -7W

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 8.4

X-Spam_score_int: 84

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hi , I found your email address online. Then I went straight

to your company's website and your LinkedIn page. No, I am not a stalker.

What I am trying to do here is to learn more about your business. I bet you're

a bit like me. We both spent many years in the LED lighting space. We've

been in the upstream.

Content analysis details: (8.4 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[119.133.33.253 listed in bb.barracudacentral.org]

1.0 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[peibaohuang[at]163.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and

EnvelopeFrom freemail headers are

different

0.6 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

1.9 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Re:LED S19/S14s Tube $1.3/pc -7W

=91, Tahoma;font-variant-numeric: normal;font-variant-east-asian: normal;li=

ne-height: normal;white-space: normal;background-color: rgb(255, 255, 255);=

margin-right: 0;margin-bottom: 2px;margin-left: 0">
: 16px;font-family: Arial, sans-serif;color: rgb(0, 112, 192)">Hi ,<=

/p>

"margin-top:2px;font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Tahoma;f=

ont-variant-numeric: normal;font-variant-east-asian: normal;line-height: no=

rmal;white-space: normal;background-color: rgb(255, 255, 255);margin-right:=

0;margin-bottom: 2px;margin-left: 0">
amily: Arial, sans-serif;color: rgb(0, 112, 192)">I found your email addres=

s online. Then I went straight to your company's website and your Linke=

dIn page.

=AF=E9=9B=85=E9=BB=91, Tahoma;font-variant-numeric: normal;font-variant-eas=

t-asian: normal;line-height: normal;white-space: normal;background-color: r=

gb(255, 255, 255);margin-right: 0;margin-bottom: 2px;margin-left: 0"> =

=BB=91, Tahoma;font-variant-numeric: normal;font-variant-east-asian: normal=

;line-height: normal;white-space: normal;background-color: rgb(255, 255, 25=

5);margin-right: 0;margin-bottom: 2px;margin-left: 0">
ize: 16px;font-family: Arial, sans-serif;color: rgb(0, 112, 192)">No, I am =

not a stalker. What I am trying to do here is to learn more about your busi=

ness. I bet you're a bit like me. We both spent many years in the LED l=

ighting space. We've been in the upstream.

-top:2px;font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Tahoma;font-var=

iant-numeric: normal;font-variant-east-asian: normal;line-height: normal;wh=

ite-space: normal;background-color: rgb(255, 255, 255);margin-right: 0;marg=

in-bottom: 2px;margin-left: 0">

mily: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Tahoma;font-variant-numeric: no=

rmal;font-variant-east-asian: normal;line-height: normal;white-space: norma=

l;background-color: rgb(255, 255, 255);margin-right: 0;margin-bottom: 2px;m=

argin-left: 0">
f;color: rgb(0, 112, 192)">Just out of curiosity, would you be open-minded =

about trying a sample of our LED S19 / S14S tube?

gin-top:2px;font-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Tahoma;font-=

variant-numeric: normal;font-variant-east-asian: normal;line-height: normal=

;white-space: normal;background-color: rgb(255, 255, 255);margin-right: 0;m=

argin-bottom: 2px;margin-left: 0">

-family: =E5=BE=AE=E8=BD=AF=E9=9B=85=E9=BB=91, Tahoma;font-variant-numeric:=

normal;font-variant-east-asian: normal;line-height: normal;white-space: no=

rmal;background-color: rgb(255, 255, 255);margin-right: 0;margin-bottom: 2p=

x;margin-left: 0">
erif;color: rgb(0, 112, 192)">P.S. When would be a good time for me to foll=

ow up with you?

=E8=BD=AF=E9=9B=85=E9=BB=91, Tahoma;font-variant-numeric: normal;font-varia=

nt-east-asian: normal;line-height: normal;white-space: normal;background-co=

lor: rgb(255, 255, 255);margin-right: 0;margin-bottom: 2px;margin-left: 0">=

=85=E9=BB=91, Tahoma;font-variant-numeric: normal;font-variant-east-asian: =

normal;line-height: normal;white-space: normal;background-color: rgb(255, 2=

55, 255);margin-right: 0;margin-bottom: 2px;margin-left: 0">
font-size: 16px;font-family: Arial, sans-serif;color: olive">Best regards,<=

/span>

=BD=AF=E9=9B=85=E9=BB=91, Tahoma;font-variant-numeric: normal;font-variant-=

east-asian: normal;line-height: normal;white-space: normal;background-color=

: rgb(255, 255, 255);margin-right: 0;margin-bottom: 2px;margin-left: 0">
an style=3D"font-size: 16px;font-family: Arial, sans-serif;color: olive">TI=

ANCI

Chinese product Spam from Microsoft

Posted by Dave Yadallee on Friday, May 6. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 May 2022 16:10:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nn68w-0006UG-R1

for dave@doctor.nl2k.ab.ca;

Fri, 06 May 2022 16:09:46 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 May 2022 16:09:46 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [112.111.1.27] (port=57542 helo=ulstein-com.mail.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nn4eK-000POK-8c

for root@nk.ca;

Fri, 06 May 2022 14:34:12 -0600

Date: Sat, 7 May 2022 04:33:42 +0800 (CST)

From: superiorcctv

Sender: tbqtpa

To: root

Message-ID: <1883851486.2159257.1651869222835@ulstein-com.mail.protection.outlook.com>

Subject: Re:Camera Lens for suveillance

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: 7bit

X-Spam_score: 12.6

X-Spam_score_int: 126

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear sir, SUPERIOR CCTV LENS is top10 CCTV LENS manufacturer

in china. We offer 1/3 of your price and 3 years quality guarantee, are you

interested to get our catalog with pricelist?

Content analysis details: (12.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,

https://senderscore.org/blacklistlookup/

[112.111.1.27 listed in bl.score.senderscore.com]

1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,

https://senderscore.org/blocklistlookup/

0.6 HK_RANDOM_ENVFROM Envelope sender username looks random

1.0 HK_RANDOM_FROM From username looks random

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=tbqtpa%40utp.ac.pa;ip=112.111.1.27;r=doctor.nl2k.ab.ca]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[superiorcctv[at]163.com]

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and

EnvelopeFrom freemail headers are

different

0.6 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

1.9 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Re:Camera Lens for suveillance

Dear sir,

SUPERIOR CCTV LENS is top10 CCTV LENS manufacturer in china.

We offer 1/3 of your price and 3 years quality guarantee, are you interested to get our catalog with pricelist?

Regards

Sally

Chinese Spam from Microsoft

Posted by Dave Yadallee on Friday, May 6. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 06 May 2022 07:57:02 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nmyRn-0003WJ-9Z

for dave@doctor.nl2k.ab.ca;

Fri, 06 May 2022 07:56:43 -0600

Resent-From: The Doctor

Resent-Date: Fri, 6 May 2022 07:56:43 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [123.180.197.178] (port=25365 helo=wimech-pl.mail.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nmp1q-0001Du-7g

for sales@nk.ca;

Thu, 05 May 2022 21:53:23 -0600

Date: Fri, 6 May 2022 11:52:43 +0800 (CST)

From: sunonwirecloth2021

Sender: xcifsein

To: sales

Message-ID: <1119811844.1768632.1651809163522@wimech-pl.mail.protection.outlook.com>

Subject: Re: New Price List

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

16px;">
n: normal; line-height: 21px; font-family: Arial; background-color: rgb(255=

, 255, 255);">Attn: Purchasing

mal;font-variant-east-asian: normal;white-space: normal;background-color: r=

gb(255, 255, 255);font-family: 'Microsoft YaHei';font-size: medium"=

/>

;white-space: normal;background-color: rgb(255, 255, 255);font-family: '=

;Microsoft YaHei';font-size: medium"/>
ic: normal; font-variant-east-asian: normal; line-height: 21px; background-=

color: rgb(255, 255, 255); font-family: Arial, Helvetica, sans-serif;">
n style=3D"line-height: 2;">We produce k=

inds of the High Quality Stainless Steel Woven Wire Cloth / Mesh, Safety Sc=

reens, Welded Mesh, Extruder Screen, Cylinder & Conical Screen Pack, Mi=

ni Filters, Pleated Filters, Oilfield Screens, Quarry Screens, Papermaking =

filters,Customized Mesh Fabric, Fence Mesh, Architectural Mesh, etc<=

/strong>

Our advantage:
r/>1: No any set up cost for repeat order<=

/span>
2: High quality as we have very=

strictly quality department
3 Perfect Service

tyle=3D"widows: 1;">4: Factory direct sales, one =E2=80=93 stop servi=

ces.
5: Large quantity stocks, the quickly delivery date
span>

Please contact us to get the full price list for checking. &=

nbsp;

Best Regards

>Helen
Tel/Skype/WhatsApp/Wechat: 0086 =

138 3382 9852

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Consumable spam from outlook
Posted by Dave Yadallee on Friday, May 6. 2022

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 05 May 2022 18:45:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nmm4u-000CCx-2Z

for dave@doctor.nl2k.ab.ca;

Thu, 05 May 2022 18:44:16 -0600

Resent-From: The Doctor

Resent-Date: Thu, 5 May 2022 18:44:16 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [115.214.150.195] (port=16808 helo=intersearch-no.mail.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1nmlQP-0008mD-M8

for sales@nk.ca;

Thu, 05 May 2022 18:02:29 -0600

Date: Fri, 6 May 2022 08:01:57 +0800 (CST)

From: yuyangtextile2012

Sender: xesldeldok

To: sales

Message-ID: <1689675483.110152.1651795317793@intersearch-no.mail.protection.outlook.com>

Subject: Re:AW:AW Shipping fleece jacket ,puffer jacket

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 7.7

X-Spam_score_int: 77

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Hello Friend outdoor wear honest vertical supplier , Located

in Ningbo ,China.MOQ:50pcs . we can make free sample for you to Check our

quality and workmanship.

Content analysis details: (7.7 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=xesldeldok%40apitech.com;ip=115.214.150.195;r=doctor.nl2k.ab.ca]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[yuyangtextile2012[at]163.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and

EnvelopeFrom freemail headers are

different

0.6 PDS_HP_HELO_NORDNS High profile HELO with no sender rDNS

1.0 FREEMAIL_REPLY From and body contain different freemails

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

1.9 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Re:AW:AW Shipping fleece jacket ,puffer jacket

Hello Friend

margin-top: 2px; margin-bottom: 2px;">

margin-bottom: 2px;">outdoor wear honest vertical supplier , Located in Ni=

ngbo ,China.MOQ:50pcs .

: 2px;">
we can m=

ake free sample for you to Check our quality and workmanship.

=3D"margin-top: 2px; margin-bottom: 2px;">

2px; margin-bottom: 2px;">Fleece and puffer jacket is our strong product .<=

/p>

argin-top: 2px; margin-bottom: 2px;">Reply us ,let us talk more

=3D"margin-top: 2px; margin-bottom: 2px;">

2px; margin-bottom: 2px;">Apex

m: 2px;">
Ningbo =

Yuyang Clothing Co.,Ltd.

;">Whatsapp:+86 18967897369

2px;">E:apexwang1@gmail.com

Categories: Microsoft Outlook Hotmail Spam

0 Comments

Page 1 of 1, totaling 4 entries

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '22					Forward →
						1
2	3	4	5	6	7	8
9	10	11	12	13	14	15
16	17	18	19	20	21	22
23	24	25	26	27	28	29
30	31