Web Design spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 01 Jul 2022 09:09:04 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o7IG3-0007Qb-1V

for dave@doctor.nl2k.ab.ca;

Fri, 01 Jul 2022 09:08:35 -0600

Resent-From: The Doctor

Resent-Date: Fri, 1 Jul 2022 09:08:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-tycjpn01olkn2044.outbound.protection.outlook.com ([40.92.99.44]:22245 helo=JPN01-TYC-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1o7DP5-000IMw-Lf

for root@nk.ca;

Fri, 01 Jul 2022 03:57:42 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=oasp4bVU3hMt5Wdj0jMr/Qj5ViHUM8MkALGoKIhyOaH5M5QmPTMzgqw/WjGnthSw+/sGF8JvLu7Ea1T6tNiRzJFUy1B1DqkiqNMZfagmG2HM/78zu9HYjI68Uk8g6KiuU6Xg/xXsKtk47x7JgsF/ZnIHg6AB5mCtfB355SrVjiR+yQ2k9eZ5/YwREgDZ+KhJM9JBriXaoCtuwH5IF1ISttMEZKJTA8N/BhpeIonx7AvF8FY4og+wUTHHFptT/G/gIejmCtGdb+OFM2IpuzjZ24eqawt1Hg+E5SJ7+FjkuN33gRk08bkBk0mZ0tvPXDGC5KK0KXSPPynuWAF1su1upA==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=u7q7WAmlvy3Odqbl4AOsTXQA5gHb5rQrwWxlceWml10=;

b=GaEKRErMkwreJaSwUirRQMeTBiUF4IMZHJFhtbnOkOzGMTJ7/DbQesd4RSyUHNuTajn5BqVAyL45ixu1X9aXaCxdDYnVuNkbScZtSHclWFcX/TgLpnKnrgRP3Owz8ctOHivrdh/HQ70tvsG0JALkN3EwNQK74T4YundEvfrIMk+ghhvGjm9mYQQp6E/CCAmqOVkcaNM3FulY6oVizMLrohAjXzXEIEYZXUC33rJvzVRNtdIr94ji1VfWwkMCe0Mq/JHIHLQlJyChm/ZEsDeslXDnUmVV8RE0GGg8kpDSbKEI6KNyRqOCWXBsWJCurfuR2jn1fFEnvRyD5fHQ5DnTcg==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=u7q7WAmlvy3Odqbl4AOsTXQA5gHb5rQrwWxlceWml10=;

b=DcKaw/injSKbW3DI2Uo0n1DMzvFEvMTAwTgj3bs/0lxzYyOQxnen9Q08fgtBmoNuYchAMvfUyb2LVZ0TBo8g0bCVvakIW8RdXt49eGxrLaJIc+l0vFfLl7Uk6+POIUTz4anthz4dLtR9Lpgvxo3bXb6S1D41UMMlREtu8Ol+LvpevPhFPW41KXXnsaAfK6OhGMIfwmKic26Jv4ElFWBgn9nE6aa3zU7hiuxuK6sDGJwPsF586Dbf2XDhQ6eRzgob0M81CTn48mgkm2yCEMoKlG8hoPrGF153rsxoubUV++hJ77sML4/t3HBGbSNgWCpSTZfeqTO+ZskU8YxHSQAB1A==

Received: from OS3PR01MB5718.jpnprd01.prod.outlook.com (2603:1096:604:c6::7)

by OSAPR01MB4035.jpnprd01.prod.outlook.com (2603:1096:604:31::17) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5395.14; Fri, 1 Jul

2022 09:56:21 +0000

Received: from OS3PR01MB5718.jpnprd01.prod.outlook.com

([fe80::d143:3590:b579:22ff]) by OS3PR01MB5718.jpnprd01.prod.outlook.com

([fe80::d143:3590:b579:22ff%4]) with mapi id 15.20.5395.015; Fri, 1 Jul 2022

09:56:21 +0000

From: David Smith

Subject: Prices

Thread-Topic: Prices

Thread-Index: AQHYjTCxFPWlEFt3KUanAldl5oUoWQ==

Date: Fri, 1 Jul 2022 09:56:21 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [jbyuB0tk2VqFO+gr8zD+NcgvT4fC+QyB]

x-ms-publictraffictype: Email

x-ms-office365-filtering-correlation-id: 2cc9f085-eeb3-442a-4cba-08da5b47f3be

x-ms-traffictypediagnostic: OSAPR01MB4035:EE_

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

X0UhDciSfXzrmlb2ZlZ1bJRJHamf5HEkIaTN1PiCgIU+8zMpDrXXplAxqz8dju6SV+cVuV4C6H1Pl+Kffqz4RLfODT0XAqNiVG/baCPsdbfglFDxUgd1hSNAIfWeAaw66K6HchxfLaZn6qth3sQ4N1s0TNVeMJ8/LadmieqP+K5NSw317/wlFqYhXbyOPx3e0z0oKjiLF/17cTl7LURbuZQ9qkHDvWlsNEs5zUvjrCBme9wod0T5KNcxJ60vrT/EKaiH96L2TTSHtG1ApOE6ICgJOAAz9ZtRwesUd9A78v3jB5FSuC8SNPA6dVJ4msbDrnJh64vBLc88nWCH1QCUnE41AZ3IVS5N82t/mkgbOpmmPa6qXISu1dfRVlKQQHL7yAU1MBASAUphboFfqE2XREh+aYL9d93oaqXb7ZKYl0dLVcjqJsjT/QYV2JO/+2LTr7gaH90ZXTmiyKa/u5pCVntnIxoSShEEP8YlygUs1hsT5LN887CjkHEqfiaFdxf9X7S3jdVS/0zzbXu2TmoowMj4VIJ5JPlPHq7Q+spgspFo3Ko2Kpitd02ee7/xw8jRSYcU+fSqSIeX7OgY55XX6Tazer8YTALUYAyqa7oBn+iBwEhuXcJKGVfqukGwmRJFYLyFRWkiTiXniKWYy4gYKw==

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?D3xyuZCnACZsrFk7Rdsfg6szsNu1z305zLMrFSABtb8Dhyag2MQU+mGorg?=

=?iso-8859-1?Q?8ZVVFWrabMNvJS83T1G7dCquK4HlW5l5cbLxg0GlQtOFO2l6DCw9N8v/Ug?=

=?iso-8859-1?Q?2CXCZrX3tZZCcC1dTln+gtCgNu6v4O1ewpsL9trVsPDKGeY5kBSuvZfzfF?=

=?iso-8859-1?Q?CCnFX1qLgNfl0cHFVHDe6IV3f8rNVzRiz3thX9AiZTBsnKYXmU4b5vNn0G?=

=?iso-8859-1?Q?uvai67uaAJCR7QjcunX4iZUkFa+pdW5rfYocrSNxrBndxEgsWTqv0LrOG2?=

=?iso-8859-1?Q?kKQrqhxooRENbtUMnvlV8ddWcRQliKS/9yoC51s6xlQX8HCkmzPnoV931Z?=

=?iso-8859-1?Q?Y+Q7VJntlJw5WMF1va5hdzH47893sJ392VSgTkpA3+kFqC1kQyiZ1lqgnU?=

=?iso-8859-1?Q?Uaab6cxgRlTVRhH/wxYbuyr+w5FX/hOL0XZ9mr/Jb3VJVMwoZ0Q4ZhsaJj?=

=?iso-8859-1?Q?uh/Wm1t3DsQt2rFYKzbuJ6rtngYgZUK9GJXIrQwfBb4HzI4zpILnXd7MF+?=

=?iso-8859-1?Q?78f3nYz3K1lhmsMH2HiHbxKGePV6CEj5/OkFRVyirBHbkic2g29gAt6Hqy?=

=?iso-8859-1?Q?BaZATAWioquSUjIEIED6jj7X64PqaA7/KmE/s8j05DMm2sG496f40chUW3?=

=?iso-8859-1?Q?05JbERVPpe+EsVHH9BRlOoaIN2ru06ZR2w2nLsz/Ef2SkkI/ym/7wtw/hK?=

=?iso-8859-1?Q?sQmkh/mtPP8nDjI2zQZiuo6xCangRWunI85cQ8s75KGLvo+ifI8w+5byUE?=

=?iso-8859-1?Q?gLXwR3rIW7Y556OEsm5x3hAcpG7NaoH9UDLgEK261JolOW5lsP/7TpFNhF?=

=?iso-8859-1?Q?gQxQ61mag8MBSqhij0h2DGSPnbDJoyMScTilWSru2TLT6+G9wiWte3y1Vg?=

=?iso-8859-1?Q?M4Blrw3ytcxD+Byu0lD2Np3484eF+WD0cAgS1UZeTDhlVyDb/yUSAD/Smd?=

=?iso-8859-1?Q?1jpmwN/3IewwDW77llIof9tE3PGscFTySDQ+VQmMRmU/4nXxUbN8cceSgy?=

=?iso-8859-1?Q?5tLr8utWIAqt42pW3K7Zn8Xb6cXB289D2lfuBbZemJFsRg3WHusIO+L/Xy?=

=?iso-8859-1?Q?mAiyWr26akFF0u30PfGvmfY0PGW4oRMfrYZTr/YmMA/oUEWW1qVT3ewlgu?=

=?iso-8859-1?Q?l67HgCJ1V6nA6HBoeHQxV6ZRcmhsITZKnHbNX3M9rEkME4PLeiKUUOgaTF?=

=?iso-8859-1?Q?6qHkXAneJAc4PtnyutWjCZii50Q+uCicYTXGGnpSwWNRXcabQHn22nxAma?=

=?iso-8859-1?Q?sFwIZygZAiNeTr9TmUiTi27nwSnU3jPhhlqY63bFZs8kZnUAcwBIxqAdcj?=

=?iso-8859-1?Q?2opiVJrkBCyOR4QDoeZtRNDeyA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_OS3PR01MB5718D67FCF6FFDD640464A63F1BD9OS3PR01MB5718jpnp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: OS3PR01MB5718.jpnprd01.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 2cc9f085-eeb3-442a-4cba-08da5b47f3be

X-MS-Exchange-CrossTenant-originalarrivaltime: 01 Jul 2022 09:56:21.2894

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: OSAPR01MB4035



--_000_OS3PR01MB5718D67FCF6FFDD640464A63F1BD9OS3PR01MB5718jpnp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I am reaching out to see if there is anything that would like to upgrade, r=

epair or redesign on your site. I am a web designer/developer that can do j=

ust about anything you can imagine at very affordable prices.



Let me know what you think.



Kind Regards,

David Smith

Web Designer/Developer



PS: - if this is something, you are interested please respond to this email=

for Portfolio and Price List. Also, please feel free to share your require=

ments and queries.





--_000_OS3PR01MB5718D67FCF6FFDD640464A63F1BD9OS3PR01MB5718jpnp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

Hi,






I am reaching out to see if there is anything that would like to upgra=

de, repair or redesign on your site. I am a web designer/developer that can=

do just about anything you can imagine at very affordable prices.







Let me know what you think.







Kind Regards,


David Smith


Web Designer/Developer







PS: - if this is something, you are interested please respond to this =

email for Portfolio and Price List. Also, please feel free to share your re=

quirements and queries.













--_000_OS3PR01MB5718D67FCF6FFDD640464A63F1BD9OS3PR01MB5718jpnp_--

Chinese products spam from Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 30 Jun 2022 22:39:47 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o78QF-000ASM-Ox

for dave@doctor.nl2k.ab.ca;

Thu, 30 Jun 2022 22:38:27 -0600

Resent-From: The Doctor

Resent-Date: Thu, 30 Jun 2022 22:38:27 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [221.215.3.7] (port=52853 helo=eagle-fgcu-edu.mail.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))

(envelope-from )

id 1o74WP-000GY1-MY

for root@nk.ca;

Thu, 30 Jun 2022 18:28:37 -0600

Date: Fri, 1 Jul 2022 08:32:32 +0800 (CST)

From: gelisha76

Sender: xpbarq

To: root

Message-ID: <1066944591.101077.1656635552718@eagle-fgcu-edu.mail.protection.outlook.com>

Subject: Re:sorbitol factory from China

MIME-Version: 1.0

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-Spam_score: 11.0

X-Spam_score_int: 110

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear Sir/Madam， I’m Jane from Qingdao Qualtime International

Trading Co., Ltd, hope this mail finds you in your best time. Glad to hear

that you're in the market for Sorbitol, we specialize in this field for many

years, with the strength of good quality and pretty competitive price, we

avail ourselves of this opportunity [...]



Content analysis details: (11.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.

[221.215.3.7 listed in bb.barracudacentral.org]

0.6 RCVD_IN_SORBS_WEB RBL: SORBS: sender is an abusable web server

[221.215.3.7 listed in dnsbl.sorbs.net]

0.9 SPF_FAIL SPF: sender does not match SPF record (fail)

[SPF failed: Please see http://www.openspf.org/Why?s=mfrom;id=xpbarq%40osceola.k12.fl.us;ip=221.215.3.7;r=doctor.nl2k.ab.ca]

0.0 T_SPF_HELO_TEMPERROR SPF: test of HELO record failed (temperror)

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level

mail domains are different

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[gelisha76[at]163.com]

0.9 PRICES_ARE_AFFORDABLE BODY: Message says that prices aren't too

expensive

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and

EnvelopeFrom freemail headers are

different

0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML

tag

0.0 SPOOFED_FREEMAIL_NO_RDNS From SPOOFED_FREEMAIL and no rDNS

2.0 SPOOFED_FREEMAIL No description available.

Subject: {SPAM?} Re:sorbitol factory from China




ine-height: 150%">
or: rgb(60, 60, 60);letter-spacing: 0;font-size: 16px;background: rgb(255, =

255, 255)">Dear
;color: rgb(60, 60, 60);letter-spacing: 0;font-size: 16px;background: rgb(2=

55, 255, 255)"> Sir/Madam
Roman';color: rgb(60, 60, 60);letter-spacing: 0;font-size: 16px;backgro=

und: rgb(255, 255, 255)">=EF=

=BC=8C


: 8px 0;text-indent: 0;line-height: 150%">
font-family: =E5=AE=8B=E4=BD=93; color: rgb(60, 60, 60); letter-spacing: 0=

px; font-size: 16px;">I<=

/span>
quot;; color: rgb(60, 60, 60); letter-spacing: 0px; font-size: 16px;">=E2=

=80=99
=93; color: rgb(60, 60, 60); letter-spacing: 0px; font-size: 16px;">
tyle=3D"font-family:Times New Roman">m Jane from Qingdao Qualtime Internati=

onal Trading Co., Ltd, hope this mail finds you in your best time.
span>


dent: 0;line-height: 150%">
quot;Times New Roman"; letter-spacing: 0px; font-size: 16px;">Glad to =

hear that you're
=E5=AE=8B=E4=BD=93; color: rgb(60, 60, 60); letter-spacing: 0px; font-size:=

16px;">i
yle=3D"text-indent: 48px; font-family: "Times New Roman"; letter-=

spacing: 0px; font-size: 16px;">n the market for
-indent: 48px; font-family: =E5=AE=8B=E4=BD=93; color: rgb(60, 60, 60); let=

ter-spacing: 0px; font-size: 16px;">
man">Sorbitol
quot;Times New Roman"; letter-spacing: 0px; font-size: 16px;">,=


; font-family: "Times New Roman"; letter-spacing: 0px; font-size:=

16px;">we specialize in this field for
48px; font-family: "Times New Roman"; color: rgb(60, 60, 60); let=

ter-spacing: 0px; font-size: 16px;">many
48px; font-family: "Times New Roman"; letter-spacing: 0px; font-=

size: 16px;">years,
style=3D"text-indent: 48px; font-family: "Times New Roman"; lette=

r-spacing: 0px; font-size: 16px;">with the
: 48px;">
New Roman"; letter-spacing: 0px; font-size: 16px;">strength of good q=

uality and pretty competitive price
font-family: "Times New Roman"; color: rgb(60, 60, 60); letter-s=

pacing: 0px; font-size: 16px;">,
ont-family: "Times New Roman"; color: rgb(60, 60, 60); letter-spa=

cing: 0px; font-size: 16px; background: rgb(255, 255, 255);">we avail ourse=

lves of this opportunity to
n>
;; color: rgb(60, 60, 60); letter-spacing: 0px; font-size: 16px; background=

: rgb(255, 255, 255);">establish business relation with you.


tyle=3D"margin-bottom:2px;margin-top:2px;margin: 8px 0;text-indent: 0;line-=

height: 150%">
=BD=93; color: rgb(60, 60, 60); letter-spacing: 0px; font-size: 16px; backg=

round: rgb(255, 255, 255);">Our=

Sorbitol is
quot;Times New Roman"; color: rgb(60, 60, 60); letter-spacing: 0px; fo=

nt-size: 16px; background: rgb(255, 255, 255);">widely used in food, medici=

ne and other industries
: =E5=AE=8B=E4=BD=93; color: rgb(60, 60, 60); letter-spacing: 0px; font-siz=

e: 16px; background: rgb(255, 255, 255);">
New Roman">, it has broad market prospects and affordable prices. For examp=

le, it can keep food fresh and extend their shelf life. Also, it can be use=

d as sweetener and nutrient for people with diabetes.


tyle=3D"margin-bottom:2px;margin-top:2px;margin: 8px 0;text-indent: 0;line-=

height: 150%">
ground-color: rgb(255, 255, 255); color: rgb(60, 60, 60); font-size: 16px; =

letter-spacing: 0px; text-indent: 48px;">For more details, you can call me =

directly. We are looking forward for your reply.


in-top: 8px;margin-right: 0;margin-bottom: 8px;text-indent: 48px;line-heigh=

t: 150%">


e=3D"font-family: 'Times New Roman';color: rgb(60, 60, 60);letter-s=

pacing: 0;font-size: 16px;background: rgb(255, 255, 255)">Thanks &Best =

regards
rgb(60, 60, 60);letter-spacing: 0;font-size: 16px;background: rgb(255, 255,=

255)">

lor: rgb(60, 60, 60);letter-spacing: 0;font-size: 16px;background: rgb(255,=

255, 255)">Jane
;;color: rgb(60, 60, 60);letter-spacing: 0;font-size: 16px;background: rgb(=

255, 255, 255)">