NetKnow Corporate Blog | Entries from Tuesday, May 7. 2024

Compensation spam from google Gmail

Posted by Dave Yadallee on Tuesday, May 7. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 07 May 2024 07:36:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4Kyr-000000006oN-34bL

for dave@doctor.nl2k.ab.ca;

Tue, 07 May 2024 07:35:41 -0600

Resent-From: The Doctor

Resent-Date: Tue, 7 May 2024 07:35:41 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pf1-f177.google.com ([209.85.210.177]:44100)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s4GAh-00000000JRC-00MK

for doctor@doctor.nl2k.ab.ca;

Tue, 07 May 2024 02:27:38 -0600

Received: by mail-pf1-f177.google.com with SMTP id d2e1a72fcca58-6f4521ad6c0so2076126b3a.0

for ; Tue, 07 May 2024 01:25:40 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715070335; x=1715675135; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=JPClQyv9PrWpwTzE6qnlgOaLtqSy+O/WPv7C/0eUT3g=;

b=WQNAYh2h1iPlaxbgOgjHcUOMYyx0EY5ZYkAv0MIm+WzqsOPnyNDkLpG9BJ9C7/zQuz

W2VgsI07fhNL4CnGQ2rfdn7Zd4F+Qke6rQNQwLKOS1t2zUf9PYTWMnYRGcAD7ZuUXb8S

rrYcbBlUqnqtLD+P+VCOeSyeipJ/7J4yWR1o1Fz2OEYtyNZZ0hj61/hJVO5daFUHrOVd

RuUFvtciChjCffAMqHzdD0DLlf55LMBUEvzNmo4qD0z+MTQzAi1hwlzc9HEHeejEresp

ZMa3sm4Y70mtGc3N7Caj/yL9uNImLaWxNcC4QvAmR2ox+KKHY7gVuhqNjBs4/ZOnxLE+

Y9PA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715070335; x=1715675135;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=JPClQyv9PrWpwTzE6qnlgOaLtqSy+O/WPv7C/0eUT3g=;

b=fmtAyN3Ll81SuQUeYSYcn71nPjOp7PajstQlmziC8iUF3k/nhxxBeux+BzKel4Akx3

6mpekwGupuyA6nKW8sXPVvLF8EXqdXnwZDTEnVzmSedxIIuGs2o3d/VaOeoRr1stl/EE

M0mI/g/V8Sr2DPAU0Hm1n+hlk8td3ALYlGzj55dfeH5CEYvRZ/7lg6EE9m6fWgIW4c9r

tYgmw/W4X6VUNCwJhcVDfsF5bVFucyMjHsBhWs5KtzH2BL0BFwceCpgikrELuvsu3Gvw

fEm3LDgzWeWq7fg9SXQzfM3p9LE9u/DwNr8UMgDk+FLykOOKUTAyoh7lWJ40812+Omax

5OVQ==

X-Forwarded-Encrypted: i=1; AJvYcCXkSzAZ01T+W3IL40lEtF40Y2RfXIPAjrnAOJrdGP1bd38myDeoAVrB5mgrIhuxVZFiifozGzcN4mRXjEvE+fsmR/CE9+kyWDg=

X-Gm-Message-State: AOJu0YxYRu2m3EXjLaqHlqd6fKdJXWM7Xxi40cxjUpRz+gPE6DRThKWq

9oAR7T8ez3A26Cj4bQx7WWnmAsFxHMxuVwmRLiMZSPXrXvy6TQQUTVON/MpCJdk0wiNOy0ScXrd

w401U5SO7o8l2Y70HTvpeU4xhfXc=

X-Google-Smtp-Source: AGHT+IFQ2raUoNEqf1JVlExv07mO6V6pjme5MEP8ICU0enpGAuwqZP7kGsIo1vzttQbJ+Y9Mlkz7MPbpMhpSMK70PcM=

X-Received: by 2002:a05:6a00:987:b0:6e6:9f47:c18c with SMTP id

u7-20020a056a00098700b006e69f47c18cmr14511707pfg.33.1715070334641; Tue, 07

May 2024 01:25:34 -0700 (PDT)

MIME-Version: 1.0

Reply-To: donaldfrank133@gmail.com

From: "Mr.Edwards"

Date: Tue, 7 May 2024 08:25:21 +0000

Message-ID:

Subject:

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="0000000000000faedf0617d8eee5"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 12.0

X-Spam_score_int: 120

X-Spam_bar: ++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Greetings to you and your family, have you received the compensation

money I sent to you through my Secretary frank Donald Greetings to you and

your family, have you received the compensation money I sent to you through

my Secretary frank Donald

Content analysis details: (12.0 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.210.177 listed in dnsbl.ahbl.org]

[209.85.210.177 listed in dnsbl.ahbl.org]

[209.85.210.177 listed in dnsbl.ahbl.org]

[209.85.210.177 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.210.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.210.177 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.210.177 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.210.177 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.210.177 listed in list.dnswl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

[209.85.210.177 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.210.177 listed in wl.mailspike.net]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[pw913419(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[pw913419(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[donaldfrank133(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.5 HK_NAME_FM_MR_MRS No description available.

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

2.8 UNDISC_FREEM Undisclosed recipients + freemail reply-to

Subject: {SPAM?}

Lines: 15

--0000000000000faedf0617d8eee5

Content-Type: text/plain; charset="UTF-8"

Greetings to you and your family, have you received the compensation money

I sent to you through my Secretary frank Donald

--0000000000000faedf0617d8eee5

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Greetings to you and your family, have you received the co=

mpensation money I sent to you through my Secretary frank Donald=C2=A0
<=

/div>

--0000000000000faedf0617d8eee5--

Pharmacutical spam from Google Gmail

Posted by Dave Yadallee on Tuesday, May 7. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 May 2024 16:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s471o-00000000MON-10UB

for dave@doctor.nl2k.ab.ca;

Mon, 06 May 2024 16:41:48 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 May 2024 16:41:48 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yw1-f173.google.com ([209.85.128.173]:43425)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s43NR-00000000J23-1nuM

for root@nk.ca;

Mon, 06 May 2024 12:47:56 -0600

Received: by mail-yw1-f173.google.com with SMTP id 00721157ae682-61e0c2b5cd2so31661167b3.1

for ; Mon, 06 May 2024 11:45:58 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1715021151; x=1715625951; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=VfFNB5s4hqCLqe42YkKNR7gDY0+7d3/mcgD6vCUAdOU=;

b=LoG0L2ZuWT5fmrdyMpnXjpPRA5hzEwvtX//J0auypoXYrBDz13uM00YwgnJtLgAbC7

fPkGJL4X9zDUk3jWOoQRFXyrku+3mQlUQEIYPPSd42pOYNhWGiN+VIqq4nAeefTYSomQ

MFKSizZ9EIpYCagJ7fH4kMYQ+7I0vV52YvetB2Ec1Rq6CitXXN4/fTXmPfurG1jLSHta

tLxczDPxltGksqRDnA1S/qoBb8p6HETsgplPu85W40eJRP4qctdBdUMSRi7jJTWsSooE

ildXLZ+B+pMvHB6/5/D2qK2E3TGZ86lRvhMOoV/U2k5X5cNlvzkE/BFWD0kDyOaBWD1/

VD+Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1715021151; x=1715625951;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=VfFNB5s4hqCLqe42YkKNR7gDY0+7d3/mcgD6vCUAdOU=;

b=mQ07cEx+6+ybY8nQ7j++r3EP+Fua+GToj7jLOXckk8AUtvRiuGSHKjfkfVJmAb65Kg

AaFOmiGR6j0OA+oXKMPqnBNXx2daw6Z/KvFyZKnMY6x/Nqsq9caKmrDmKQQYMCyG8ETf

mslZqnZIl6Erx8OQfpE5hKB07QeQc450UHRnAqX0noFawFqQhThuIHvzcHplGASv9hJ2

UEp8bX822gYu0UFayOMtuad2SxdRnd5VNNEC963fm4kMkiZwqKAv7uHaRUlvltYz2CTr

B6Ew63oXPgtNnQ6FKumVvXgECJJoiWSSaFUB4/L7A3IMdzL5aGqoHQbYV80JJCj2VIon

mK+Q==

X-Gm-Message-State: AOJu0YzBh6GfJjkzTU/ziO797U7NHytH+S9zXhGBKXdJIAASdYs6RCVf

AHDk8y3jEWA9XXL3CmA8GO+iyvsWE3k8NB0ZaqqBLXikOTRO4xQdRt5gtgzZYnMrzyyR99n1wll

C4w0lHnR0702AAhbvRGXN2sYem4CVucEb8c6gRQ==

X-Google-Smtp-Source: AGHT+IESfUnYokXRON6O73oetwDC/Z5zwO0nM+gpba/TpxvI2DuHGpjqtRgwPA+apjxFIRXAImIPFADvwVftssA43+A=

X-Received: by 2002:a81:4f58:0:b0:614:35a7:4c40 with SMTP id

00721157ae682-620766308a9mr3710517b3.22.1715021151264; Mon, 06 May 2024

11:45:51 -0700 (PDT)

MIME-Version: 1.0

From: Gary Galbraith

Date: Mon, 6 May 2024 19:45:39 +0100

Message-ID:

Subject: Hello Dave Yadallee

To: root@nk.ca

Content-Type: multipart/alternative; boundary="00000000000080eb5d0617cd7a8d"

--00000000000080eb5d0617cd7a8d

Content-Type: text/plain; charset="UTF-8"

Hello Dave Yadallee

I hope you're keeping well.

I am Gary Galbraith, recruitment consultant at KENZMEDIC pharmaceutical

company. At present, KENZMEDIC is actively searching for a candidate or

company to fulfill the role of a part-time representative in the

CANADA/USA. This position offers enticing benefits and flexible work hours.

I'm reaching out to inquire if you might be interested in taking on the

responsibility of handling our company's affairs in the CANADA/USA. This

opportunity allows for remote work, enabling you to seamlessly integrate it

with your existing job or daily commitments. Should this proposition pique

your interest, I encourage you to get in touch with

GARY SLACK ( gary@kenzmedic.com ) to obtain further information and a

detailed job description.

Best Regards,

Gary Galbraith

Ag Business Manager

Recruitment Consultant

KENZMEDIC Pharmaceutical Company.

Payments Representative Required in CANADA/USA

Representative Required.

--00000000000080eb5d0617cd7a8d

Content-Type: text/html; charset="UTF-8"

Hello Dave Yadallee

I hope you're keeping well.

I am

Gary Galbraith, recruitment consultant at KENZMEDIC pharmaceutical

company. At present, KENZMEDIC is actively searching for a candidate or

company to fulfill the role of a part-time representative in the

CANADA/USA. This position offers enticing benefits and flexible work

hours.

I'm reaching out to inquire if you might be interested in

taking on the responsibility of handling our company's affairs in the

CANADA/USA. This opportunity allows for remote work, enabling you to

seamlessly integrate it with your existing job or daily commitments.

Should this proposition pique your interest, I encourage you to get in

touch with
GARY SLACK ( gary@kenzmedic.com ) to obtain further information and a detailed job description.

Best Regards,

Gary Galbraith

Ag Business Manager

Recruitment Consultant
KENZMEDIC Pharmaceutical Company.
Payments Representative Required in CANADA/USA
Representative Required.

--00000000000080eb5d0617cd7a8d--

I1.01KL0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Chinese products spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, May 7. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 May 2024 16:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s471L-00000000MK0-23C2

for dave@doctor.nl2k.ab.ca;

Mon, 06 May 2024 16:41:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 May 2024 16:41:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sh0chn02on2125.outbound.protection.partner.outlook.cn ([139.219.146.125]:21345 helo=CHN02-SH0-obe.outbound.protection.partner.outlook.cn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s421k-00000000810-25M3

for root@nk.ca;

Mon, 06 May 2024 11:21:29 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=k2ENYWbzcn6RX3zT/uN7X2nkSwN1v8fOtI6Etf6Dai8fUfTh6diq2ml6XJd3vx9p7eE7aJ7UpoZrVnC4D9ZvlYq0IrCgI85YyKBEatuGz/Zz0tyoF/D6rppXqMvfmgasxpltP3PAndijuO2g2/rA1wmYyuy5Y6lyOxDXSWsDjAAQKf31jXeYzOQN75Ko396CY+gBmXcoF4Z88xMeeWYsyi36SujLhbbTakRD5x3sVOk2+PFs9df0TH4atib8cV1+w3PCmHqVWlujzwtMIV0u5N9zJNzaoG9pwLpIJOxQj/Hz3P33CWItg9tW2orvdCVxnMLV4S/9oz2qutHDbqbbfg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=zsijmiAdYFlTBFTEiwFCEe5gWRLFAlc90fnPQHydRSM=;

b=Mo37ywXjwNP2FAmtKzPbcJ0w4zKhtnFxu1ArP2ZlAhK77J99O0MIQx6pAGZaYIzeUd+Lez4Isgf/XvYdjPZHbERaSPJ7M/nw6MXVdtzmdVVfP/6aR6xl3B+FyvOnVUDKpNqTO8hidqOmutS2xGzER6kId2Df/BYGJWzHLypCrVB9Zt9u6ZK48/LW+k2lKE+dPZK17WXQmH1DZqGm4IZX7fr13B5m38pGPPQbD/DoyZCfGg9wfV49QibfG7BlCo4JXv0DU6Wj6UzgyNl4RO4BO9eJkcq8r242tq6Yqyr0QpcIkj7VKdiLhtyAVue6WzouerW07zCWjWMIuTFFXaKDog==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=blowersource.cn; dmarc=pass action=none

header.from=blowersource.cn; dkim=pass header.d=blowersource.cn; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=blowersource.cn;

Received: from NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:10::12) by NT0PR01MB1293.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:f::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7472.44; Mon, 6 May

2024 17:19:17 +0000

Received: from NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

([fe80::ec6e:a1df:2518:3099]) by

NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn ([fe80::ec6e:a1df:2518:3099%4])

with mapi id 15.20.7472.044; Mon, 6 May 2024 17:19:17 +0000

Date: Tue, 07 May 2024 01:19:16 +0800

From: info@blowersource.cn

To: root@nk.ca

Subject: Discover Superior LED Lighting

Reply-To: walter@yunding-led.com

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-ClientProxiedBy: NT0PR01CA0019.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:c::22) To NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:10::12)

Message-ID:

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: NT0PR01MB1213:EE_|NT0PR01MB1293:EE_

X-MS-Office365-Filtering-Correlation-Id: b1e0682a-24e7-4f5b-75d2-08dc6df0a928

X-MS-Exchange-SenderADCheck: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn;PTR:;CAT:NONE;SFS:(13230031)(52116005)(366007)(41320700004)(1800799015);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?dThnbnA1bHJJL0lmd2tCeDU1LzhDcDgwVG1KNVovbzhCblNzNnhtWUIydjgw?=

=?utf-8?B?bHlIYkJUSnNpbElZbTF3ZGlpYW5Wem15R29IQWU3L09WU1BjSkFMTHNLZHQ2?=

=?utf-8?B?ZGg3ak5aZUk1bW1QUHFUTWZjbzFtUzlwMjVNUEJ1UDRjUEdiUDM3QkVvdk9F?=

=?utf-8?B?OHJOQ0ZoYWJTdFhUa09LUStiMm9ncGlXUXJ4WGVVck5vb3lBL1FJRDFuclhj?=

=?utf-8?B?MmFlNlA4ZUxpQ1FOcWtLMEoxMjRWeGlPKzV3NzcvTFk2YVF5MUNaNkNSK2tO?=

=?utf-8?B?clJnWWNPZVdDWnM4UC8zcTRpTm15RlRyb1IzK3FmTnlXbUtwUncyRkxuUklr?=

=?utf-8?B?VDRZUGRSNGFKaDluNExvWjJjOG5MN3dndUxNQi9lWCt4MVdGUHNSOUF2ZEN6?=

=?utf-8?B?L3dEMFlGOE9jNFNJVUF5U0ZPV2E3UFlDa0FEYS8wLzFDVmx4SWtoZ1pyenhm?=

=?utf-8?B?UWlKV1RLWDhtUTl3dE5SNC9Rc3NRQTh1WGZpOG9aTWFsdHdUUjNsUi9oRk44?=

=?utf-8?B?ZE9YTWRLeWRFd0sycTJSMTZacU5GZmVybWd1QlV4ZktJY0RSRStFUW1mSkFO?=

=?utf-8?B?ZW1LT2hJOXZTSXhXaFhtWkxaUCtFMWMzNWR1Q1pzRWZKcklYVmdGcndCVlox?=

=?utf-8?B?NlhaNjQwejc3cEl1SjJnQnFobXVrUklTV1BDMlJQcGpLa0VQNzI1N2xtQXJJ?=

=?utf-8?B?OHh4c3VWY1AybnJXVDRkV2Vhdlp3T3UyRllNRlFRdVZwWi84MkhjZkVRYktM?=

=?utf-8?B?TFlIazBaNWpkc1pjVERXTUJZTlViWmRxWEJ1MHk4aWFyeHpzdHY0R3lieFJU?=

=?utf-8?B?U2hTTm1KbHI2MVRBcHlXMHkwYndVOEdESUwxd3JTK21zazJhREdKNjZjRjJT?=

=?utf-8?B?bEtiL2xrSzhlVkk0VDJZbnZCRGtzWVFBLy93WW8yOHhrdnExRWcraUxsMUY4?=

=?utf-8?B?L0Eyd2h6NHYyK0Y3eFkyYVJYNWxaOTVHSWZKYitCWUJFemY5UVlpRE1IT3Bm?=

=?utf-8?B?bVhNNm52eE1pMTBWbDU2cW45V3NkVks2QzBITjhHd2ovMlNEb3k1UGppUC9S?=

=?utf-8?B?WkNQN1Y0aHNFSHZUbTJqZzVKb1FINFgxYVMwaGdNZ0J3UEVLWmxBRFR5aW9F?=

=?utf-8?B?UzRnNUVvZk05SE4zN1Jhekc2WVAvTkFJM3JLQ1lXb2R4VG5BQ0orWXFrdHpU?=

=?utf-8?B?N2pxbVRYWWFKUXBQWWNrWEV2Vk1RMjlsb3JtaGM3SnNRWGZzdHRKR0NrK2xq?=

=?utf-8?B?WU16bHFpTzJENjZ1NUtMR3p3YkNSNkFuL3ZPQ0dVSVJ3UkxEM3RZUTVUN1RJ?=

=?utf-8?B?emUvOWlZWWl4SExXcndQZklIRUNYQnJ4S3phZWxiaDlxeFVHWjAyU2V5UGJa?=

=?utf-8?B?MGpJc2xoNEptcldlVS9jdDFWeVhpbzJHalYvcTRPNVZMcE9nZzJLdmJFYW5F?=

=?utf-8?B?cTFHaC9jNWtMbGlzTkN6SEtxcTREbDNTQk5VV0xmekoySnFPK1Z5K0lsc1Z1?=

=?utf-8?B?UjFQdW5zR3pGTGJLTURIWFRSZlFKYkZDZGw5eU5UK3ZueC80SllBUGp2OGJ1?=

=?utf-8?B?SmpuQ05TekR4VmVObzRpeGpINEdpWXZwSVBrL0FONDFmTTNjc283anRMNU9y?=

=?utf-8?B?RTIwdzZVbzQ3ZlZ6dVpIQ0hidVVQY2htYlM3bUNNV1JiOWpXSlc0R2ZVMWFJ?=

=?utf-8?B?WW5hcUlBYk1BQXVpbkNFclhvZE5qSzE2cjh6OG1CbkZRZXJkK2c0TGlNNTdS?=

=?utf-8?B?b1F6VXVjVENMV1JwZzVFbmlTU3d4WWlsb21TaHJYb1ZZVzFGdVcwTTNNZDNl?=

=?utf-8?B?cUN6U0l2Z1Jua1Q4OWYzY29ibzJzbFNxazh5dGhseTZmek9Nd2tsUXpCZVhJ?=

=?utf-8?B?N1h2V3JxMlVlbGxqUXlTMXBhVzZrdDhtYjBYbVJ2TENNNGtZWGVKY3pNVHVV?=

=?utf-8?B?Z1dSNzgvcnpFK0pTUGtLWkxEMC93cE54UmJXTTMzYzZOZDhadmk4NzFybWE1?=

=?utf-8?B?TmI2MHN5YWpadlgxdCtqYzJxZ3B4NUgyamczWjNnZzBGM3dIcmJudUhqNTFZ?=

=?utf-8?B?WlVHOTdteE5CWG1pSFgzZzg4ZEN0MWt4bVJ3dUs3SlFSa05MVkVBSUtuMmRx?=

=?utf-8?B?cWkyT2oxR2tuZ1k5N0diQ25HRTh4Vkc4SWw4Z0dYZUpRdXlKRUpZUFVMdU9T?=

=?utf-8?B?Y3AxbHdpRE4rOWprTEZGM2Q0UmUyT0FxaHl0cEl2RFYwWW5sUGdGTmNlSzc1?=

=?utf-8?B?WTMrSitRS1VkUGwranRLeFVJazlRPT0=?=

X-OriginatorOrg: blowersource.cn

X-MS-Exchange-CrossTenant-Network-Message-Id: b1e0682a-24e7-4f5b-75d2-08dc6df0a928

X-MS-Exchange-CrossTenant-AuthSource: NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 May 2024 17:19:17.7713

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: f5bda079-fb47-4113-98f9-b041a7f21fff

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: LI6RZEcvLlJEx0lOjeZbCyPLluyi7iuRyyDM3JomvtVfXkXIREPnbuE+0PZTTlB2mnOSN52LI4hVn8AdOzD+ZA==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: NT0PR01MB1293

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Yadallee, Walter here from Yunding Lighting, your ultimate

source for a wide range of lighting products. From tubes to spotlights, track

lights to LED tubes, we offer a comprehensive selection to [...]

Content analysis details: (13.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

[139.219.146.125 listed in dnsbl.ahbl.org]

[139.219.146.125 listed in dnsbl.ahbl.org]

[139.219.146.125 listed in dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 WEIRD_PORT URI: Uses non-standard port number for HTTP

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 FORGED_SPF_HELO No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Discover Superior LED Lighting

head>



 'PingFang SC', sans-serif; font-size: 16px;">Dear Yadallee,





Walter here from Yunding Lighting, your ultimate source for a wide range of=


 lighting products. From tubes t=


o spotlights, track lights to LED tubes, we offer a comprehensive selection=


 to meet your lighting needs.





Our products are meticulously crafted to deliver superior performance and d=


urability. Whether it's for residential, commercial, or industrial applicat=


ions, we have the ideal lighting solution for you. Explore our catalogue to=


day and experience the excellence of Yunding Lighting. Visit our website or=


 contact us for further details.





Best regards,





Walter


Yunding Lighting


T&F: (86) 769-33310865      Wechat & Whatsapp: +86 18929142019


Add:No 608, Building 3, Tianyu Industrial Zone, Hengli Town, Dongguan City,=


 Guangdong Province, China.


Facebook: https://www.facebook.com/profile.php?id=3D61558432444255

pre>


laXZlX21haWwiOiJyb290QG5rLmNhIiwidXNlcnMiOiIxMzgyMzI3NDQwNSIsImVtYWlsIjoiaW=


5mb0BibG93ZXJzb3VyY2UuY24iLCJzZW5kX3RpdGxlIjoiRGlzY292ZXIgU3VwZXJpb3IgTEVEI=


ExpZ2h0aW5nIiwic2VuZF90aW1lIjoiMjAyNC0wNS0wNyAwMToxOToxNSIsImNvZGUiOiJmNGJm=


YzFiZTNjNDNkODViMzk4ZDM4OTVkMjM4Nzc5YyJ9">


I995L0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Chinese products spam from Microsoft Outlook

Posted by Dave Yadallee on Tuesday, May 7. 2024

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Mon, 06 May 2024 16:42:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s471L-00000000MK0-23C2

for dave@doctor.nl2k.ab.ca;

Mon, 06 May 2024 16:41:19 -0600

Resent-From: The Doctor

Resent-Date: Mon, 6 May 2024 16:41:19 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sh0chn02on2125.outbound.protection.partner.outlook.cn ([139.219.146.125]:21345 helo=CHN02-SH0-obe.outbound.protection.partner.outlook.cn)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1s421k-00000000810-25M3

for root@nk.ca;

Mon, 06 May 2024 11:21:29 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=k2ENYWbzcn6RX3zT/uN7X2nkSwN1v8fOtI6Etf6Dai8fUfTh6diq2ml6XJd3vx9p7eE7aJ7UpoZrVnC4D9ZvlYq0IrCgI85YyKBEatuGz/Zz0tyoF/D6rppXqMvfmgasxpltP3PAndijuO2g2/rA1wmYyuy5Y6lyOxDXSWsDjAAQKf31jXeYzOQN75Ko396CY+gBmXcoF4Z88xMeeWYsyi36SujLhbbTakRD5x3sVOk2+PFs9df0TH4atib8cV1+w3PCmHqVWlujzwtMIV0u5N9zJNzaoG9pwLpIJOxQj/Hz3P33CWItg9tW2orvdCVxnMLV4S/9oz2qutHDbqbbfg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=zsijmiAdYFlTBFTEiwFCEe5gWRLFAlc90fnPQHydRSM=;

b=Mo37ywXjwNP2FAmtKzPbcJ0w4zKhtnFxu1ArP2ZlAhK77J99O0MIQx6pAGZaYIzeUd+Lez4Isgf/XvYdjPZHbERaSPJ7M/nw6MXVdtzmdVVfP/6aR6xl3B+FyvOnVUDKpNqTO8hidqOmutS2xGzER6kId2Df/BYGJWzHLypCrVB9Zt9u6ZK48/LW+k2lKE+dPZK17WXQmH1DZqGm4IZX7fr13B5m38pGPPQbD/DoyZCfGg9wfV49QibfG7BlCo4JXv0DU6Wj6UzgyNl4RO4BO9eJkcq8r242tq6Yqyr0QpcIkj7VKdiLhtyAVue6WzouerW07zCWjWMIuTFFXaKDog==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass

smtp.mailfrom=blowersource.cn; dmarc=pass action=none

header.from=blowersource.cn; dkim=pass header.d=blowersource.cn; arc=none

Authentication-Results: dkim=none (message not signed)

header.d=none;dmarc=none action=none header.from=blowersource.cn;

Received: from NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:10::12) by NT0PR01MB1293.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:f::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7472.44; Mon, 6 May

2024 17:19:17 +0000

Received: from NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

([fe80::ec6e:a1df:2518:3099]) by

NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn ([fe80::ec6e:a1df:2518:3099%4])

with mapi id 15.20.7472.044; Mon, 6 May 2024 17:19:17 +0000

Date: Tue, 07 May 2024 01:19:16 +0800

From: info@blowersource.cn

To: root@nk.ca

Subject: Discover Superior LED Lighting

Reply-To: walter@yunding-led.com

Content-Type: text/html; charset=UTF-8

Content-Transfer-Encoding: quoted-printable

X-ClientProxiedBy: NT0PR01CA0019.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:c::22) To NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

(2406:e500:c510:10::12)

Message-ID:

MIME-Version: 1.0

X-MS-PublicTrafficType: Email

X-MS-TrafficTypeDiagnostic: NT0PR01MB1213:EE_|NT0PR01MB1293:EE_

X-MS-Office365-Filtering-Correlation-Id: b1e0682a-24e7-4f5b-75d2-08dc6df0a928

X-MS-Exchange-SenderADCheck: 1

X-Microsoft-Antispam: BCL:0;

X-Microsoft-Antispam-Message-Info:

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

X-Forefront-Antispam-Report:

CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn;PTR:;CAT:NONE;SFS:(13230031)(52116005)(366007)(41320700004)(1800799015);DIR:OUT;SFP:1102;

X-MS-Exchange-AntiSpam-MessageData-ChunkCount: 1

X-MS-Exchange-AntiSpam-MessageData-0:

=?utf-8?B?dThnbnA1bHJJL0lmd2tCeDU1LzhDcDgwVG1KNVovbzhCblNzNnhtWUIydjgw?=

=?utf-8?B?bHlIYkJUSnNpbElZbTF3ZGlpYW5Wem15R29IQWU3L09WU1BjSkFMTHNLZHQ2?=

=?utf-8?B?ZGg3ak5aZUk1bW1QUHFUTWZjbzFtUzlwMjVNUEJ1UDRjUEdiUDM3QkVvdk9F?=

=?utf-8?B?OHJOQ0ZoYWJTdFhUa09LUStiMm9ncGlXUXJ4WGVVck5vb3lBL1FJRDFuclhj?=

=?utf-8?B?MmFlNlA4ZUxpQ1FOcWtLMEoxMjRWeGlPKzV3NzcvTFk2YVF5MUNaNkNSK2tO?=

=?utf-8?B?clJnWWNPZVdDWnM4UC8zcTRpTm15RlRyb1IzK3FmTnlXbUtwUncyRkxuUklr?=

=?utf-8?B?VDRZUGRSNGFKaDluNExvWjJjOG5MN3dndUxNQi9lWCt4MVdGUHNSOUF2ZEN6?=

=?utf-8?B?L3dEMFlGOE9jNFNJVUF5U0ZPV2E3UFlDa0FEYS8wLzFDVmx4SWtoZ1pyenhm?=

=?utf-8?B?UWlKV1RLWDhtUTl3dE5SNC9Rc3NRQTh1WGZpOG9aTWFsdHdUUjNsUi9oRk44?=

=?utf-8?B?ZE9YTWRLeWRFd0sycTJSMTZacU5GZmVybWd1QlV4ZktJY0RSRStFUW1mSkFO?=

=?utf-8?B?ZW1LT2hJOXZTSXhXaFhtWkxaUCtFMWMzNWR1Q1pzRWZKcklYVmdGcndCVlox?=

=?utf-8?B?NlhaNjQwejc3cEl1SjJnQnFobXVrUklTV1BDMlJQcGpLa0VQNzI1N2xtQXJJ?=

=?utf-8?B?OHh4c3VWY1AybnJXVDRkV2Vhdlp3T3UyRllNRlFRdVZwWi84MkhjZkVRYktM?=

=?utf-8?B?TFlIazBaNWpkc1pjVERXTUJZTlViWmRxWEJ1MHk4aWFyeHpzdHY0R3lieFJU?=

=?utf-8?B?U2hTTm1KbHI2MVRBcHlXMHkwYndVOEdESUwxd3JTK21zazJhREdKNjZjRjJT?=

=?utf-8?B?bEtiL2xrSzhlVkk0VDJZbnZCRGtzWVFBLy93WW8yOHhrdnExRWcraUxsMUY4?=

=?utf-8?B?L0Eyd2h6NHYyK0Y3eFkyYVJYNWxaOTVHSWZKYitCWUJFemY5UVlpRE1IT3Bm?=

=?utf-8?B?bVhNNm52eE1pMTBWbDU2cW45V3NkVks2QzBITjhHd2ovMlNEb3k1UGppUC9S?=

=?utf-8?B?WkNQN1Y0aHNFSHZUbTJqZzVKb1FINFgxYVMwaGdNZ0J3UEVLWmxBRFR5aW9F?=

=?utf-8?B?UzRnNUVvZk05SE4zN1Jhekc2WVAvTkFJM3JLQ1lXb2R4VG5BQ0orWXFrdHpU?=

=?utf-8?B?N2pxbVRYWWFKUXBQWWNrWEV2Vk1RMjlsb3JtaGM3SnNRWGZzdHRKR0NrK2xq?=

=?utf-8?B?WU16bHFpTzJENjZ1NUtMR3p3YkNSNkFuL3ZPQ0dVSVJ3UkxEM3RZUTVUN1RJ?=

=?utf-8?B?emUvOWlZWWl4SExXcndQZklIRUNYQnJ4S3phZWxiaDlxeFVHWjAyU2V5UGJa?=

=?utf-8?B?MGpJc2xoNEptcldlVS9jdDFWeVhpbzJHalYvcTRPNVZMcE9nZzJLdmJFYW5F?=

=?utf-8?B?cTFHaC9jNWtMbGlzTkN6SEtxcTREbDNTQk5VV0xmekoySnFPK1Z5K0lsc1Z1?=

=?utf-8?B?UjFQdW5zR3pGTGJLTURIWFRSZlFKYkZDZGw5eU5UK3ZueC80SllBUGp2OGJ1?=

=?utf-8?B?SmpuQ05TekR4VmVObzRpeGpINEdpWXZwSVBrL0FONDFmTTNjc283anRMNU9y?=

=?utf-8?B?RTIwdzZVbzQ3ZlZ6dVpIQ0hidVVQY2htYlM3bUNNV1JiOWpXSlc0R2ZVMWFJ?=

=?utf-8?B?WW5hcUlBYk1BQXVpbkNFclhvZE5qSzE2cjh6OG1CbkZRZXJkK2c0TGlNNTdS?=

=?utf-8?B?b1F6VXVjVENMV1JwZzVFbmlTU3d4WWlsb21TaHJYb1ZZVzFGdVcwTTNNZDNl?=

=?utf-8?B?cUN6U0l2Z1Jua1Q4OWYzY29ibzJzbFNxazh5dGhseTZmek9Nd2tsUXpCZVhJ?=

=?utf-8?B?N1h2V3JxMlVlbGxqUXlTMXBhVzZrdDhtYjBYbVJ2TENNNGtZWGVKY3pNVHVV?=

=?utf-8?B?Z1dSNzgvcnpFK0pTUGtLWkxEMC93cE54UmJXTTMzYzZOZDhadmk4NzFybWE1?=

=?utf-8?B?TmI2MHN5YWpadlgxdCtqYzJxZ3B4NUgyamczWjNnZzBGM3dIcmJudUhqNTFZ?=

=?utf-8?B?WlVHOTdteE5CWG1pSFgzZzg4ZEN0MWt4bVJ3dUs3SlFSa05MVkVBSUtuMmRx?=

=?utf-8?B?cWkyT2oxR2tuZ1k5N0diQ25HRTh4Vkc4SWw4Z0dYZUpRdXlKRUpZUFVMdU9T?=

=?utf-8?B?Y3AxbHdpRE4rOWprTEZGM2Q0UmUyT0FxaHl0cEl2RFYwWW5sUGdGTmNlSzc1?=

=?utf-8?B?WTMrSitRS1VkUGwranRLeFVJazlRPT0=?=

X-OriginatorOrg: blowersource.cn

X-MS-Exchange-CrossTenant-Network-Message-Id: b1e0682a-24e7-4f5b-75d2-08dc6df0a928

X-MS-Exchange-CrossTenant-AuthSource: NT0PR01MB1213.CHNPR01.prod.partner.outlook.cn

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 May 2024 17:19:17.7713

(UTC)

X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted

X-MS-Exchange-CrossTenant-Id: f5bda079-fb47-4113-98f9-b041a7f21fff

X-MS-Exchange-CrossTenant-MailboxType: HOSTED

X-MS-Exchange-CrossTenant-UserPrincipalName: LI6RZEcvLlJEx0lOjeZbCyPLluyi7iuRyyDM3JomvtVfXkXIREPnbuE+0PZTTlB2mnOSN52LI4hVn8AdOzD+ZA==

X-MS-Exchange-Transport-CrossTenantHeadersStamped: NT0PR01MB1293

X-Spam_score: 13.6

X-Spam_score_int: 136

X-Spam_bar: +++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.

Content preview: Dear Yadallee, Walter here from Yunding Lighting, your ultimate

source for a wide range of lighting products. From tubes to spotlights, track

lights to LED tubes, we offer a comprehensive selection to [...]

Content analysis details: (13.6 points, 5.0 required)

pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

[139.219.146.125 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

[139.219.146.125 listed in dnsbl.ahbl.org]

[139.219.146.125 listed in dnsbl.ahbl.org]

[139.219.146.125 listed in dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

[2406:e500:c510:10:0:0:0:12 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[139.219.146.125 listed in dnsbl.ahbl.org]

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

0.0 ARC_VALID Message has a valid ARC signature

0.0 ARC_SIGNED Message has a ARC signature

0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in

headers

0.0 NORMAL_HTTP_TO_IP URI: URI host has a public dotted-decimal IPv4

address

0.0 WEIRD_PORT URI: Uses non-standard port number for HTTP

1.0 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of words

0.0 HTML_MESSAGE BODY: HTML included in message

1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts

1.0 FORGED_SPF_HELO No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

0.0 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)

0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

[cf: 100]

2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

above 50%

[cf: 100]

0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe

Subject: {SPAM?} Discover Superior LED Lighting

head>



 'PingFang SC', sans-serif; font-size: 16px;">Dear Yadallee,





Walter here from Yunding Lighting, your ultimate source for a wide range of=


 lighting products. From tubes t=


o spotlights, track lights to LED tubes, we offer a comprehensive selection=


 to meet your lighting needs.





Our products are meticulously crafted to deliver superior performance and d=


urability. Whether it's for residential, commercial, or industrial applicat=


ions, we have the ideal lighting solution for you. Explore our catalogue to=


day and experience the excellence of Yunding Lighting. Visit our website or=


 contact us for further details.





Best regards,





Walter


Yunding Lighting


T&F: (86) 769-33310865      Wechat & Whatsapp: +86 18929142019


Add:No 608, Building 3, Tianyu Industrial Zone, Hengli Town, Dongguan City,=


 Guangdong Province, China.


Facebook: https://www.facebook.com/profile.php?id=3D61558432444255

pre>


laXZlX21haWwiOiJyb290QG5rLmNhIiwidXNlcnMiOiIxMzgyMzI3NDQwNSIsImVtYWlsIjoiaW=


5mb0BibG93ZXJzb3VyY2UuY24iLCJzZW5kX3RpdGxlIjoiRGlzY292ZXIgU3VwZXJpb3IgTEVEI=


ExpZ2h0aW5nIiwic2VuZF90aW1lIjoiMjAyNC0wNS0wNyAwMToxOToxNSIsImNvZGUiOiJmNGJm=


YzFiZTNjNDNkODViMzk4ZDM4OTVkMjM4Nzc5YyJ9">


I995L0LD37.4KI2.18KwhoissourceRank12.8MPIN0Summary reportDiagnosisDensity00n/a

Mon	Tue	Wed	Thu	Fri	Sat	Sun
← Back	May '24					Forward →
		1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31