Quote request spam from Google Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jul 2024 19:36:56 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sPBOp-0000000037g-3Yn3

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jul 2024 19:36:39 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jul 2024 19:36:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oo1-f54.google.com ([209.85.161.54]:61740)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sPAOt-00000000Jgu-45kZ

for sales@nk.ca;

Wed, 03 Jul 2024 18:32:43 -0600

Received: by mail-oo1-f54.google.com with SMTP id 006d021491bc7-5c427f3695cso55221eaf.3

for ; Wed, 03 Jul 2024 17:30:44 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1720053039; x=1720657839; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=i54We43WMxklxrX0YVFYjrHbpnTDKpetbO+JD4MW3ME=;

b=nGp53cls3NS1P17zfhYIZSBMT7X0z1oIFrgr2kb8MdZEVHHJwhQDE5JX8GYeKfdd/a

D14BbNK3rA44U9yeU2o7j3BSdpgIaN72JYuzsQGVYsJjROxO85FsfIMKOnOPXLXD5jDb

OJMq6DC7bpYQI1I5hS87CU8rkwRZ70EPlCn9sjZ/5jIKlp3ujwEMhk3RMTAOYfJ2sKx/

YM3YJ0mCWKWVxMwkSHc9U4lSH2BKuoSJKL3J6YHoXaaM5Bl91YNoMe/DUKNuot8kV0hy

i6p0F1Quzx8Vv8Zc4GaOcaEF6qqt15Ql81/5391ovv0jafsTQ8Awstasq2RfJrI0mACo

34qw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1720053039; x=1720657839;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=i54We43WMxklxrX0YVFYjrHbpnTDKpetbO+JD4MW3ME=;

b=lbRbinYp+XihOYDOoufsaoInOFnOUrxr7nguDZ5o1NKaMiDCFps6w/z+lfIfgC95hS

/dWmza5CHB7n9Sioy4GmiYN4gBMLMGYA5REPb3MswNRes/VULC9ubV44KaXZe4P92Zzj

QVXESi5y/fLqUSteLaCHkw9KKxFQbrlnujAYAY6uMMQn4t3o0vA2plYL5kItG3CN6itU

QKPdtvBwF/gPnvc1e/UxN3M+e0BA1qSNE5QitQE3XD3Q6/HVC2b09DpjIYL/3OnwcnnK

LB7DGXY5xetIi6CPbCEVQWUuddanZXI5AO7s5rn2r3UMgUeFMLgBRSUfOxehncha8CUB

izwg==

X-Gm-Message-State: AOJu0YydBUmXj4St+E7Klfkt2B6f4VC33tP+Nxaf8lXy6TNAqcYYHlkc

oxuosFDL36YmtoTeHbKB5brE2mjbZCbRzopv3ofmyCERkb8p8Ok1x+In/sKEGoEhF0l8dh7v9rJ

OvJ//B3KgakTOjxa01pidkp/UvFj06g==

X-Google-Smtp-Source: AGHT+IHj40/Usn83udGefDgt44fN+/EaoCIhoaGmdcjvtOih8kY9230zu6Fb4x25rB2Ufx1be0JBEroH4kf7pDmaEAU=

X-Received: by 2002:a05:6870:d24c:b0:25e:1033:9d5c with SMTP id

586e51a60fabf-25e2ba0cb1bmr178631fac.13.1720053038654; Wed, 03 Jul 2024

17:30:38 -0700 (PDT)

MIME-Version: 1.0

From: Scott Donovan

Date: Wed, 3 Jul 2024 18:30:27 -0600

Message-ID:

Subject: Quote

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000005d2f4e061c610e44"

X-Spam_score: 5.0

X-Spam_score_int: 50

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, can I please get a quote? M and tin southside one's off

street seventy three and please Hi, can I please get a quote? M and tin southside

one's off street seventy three and please



Content analysis details: (5.0 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.161.54 listed in dnsbl.ahbl.org]

[209.85.161.54 listed in dnsbl.ahbl.org]

[209.85.161.54 listed in dnsbl.ahbl.org]

[209.85.161.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.161.54 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.161.54 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.161.54 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.161.54 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

[209.85.161.54 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.161.54 listed in list.dnswl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.161.54 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kurtcobain197777(at)gmail.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kurtcobain197777(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} Quote



--0000000000005d2f4e061c610e44

Content-Type: text/plain; charset="UTF-8"



Hi, can I please get a quote? M and tin southside one's off street seventy

three and please



--0000000000005d2f4e061c610e44

Content-Type: text/html; charset="UTF-8"



Hi, can I please get a quote? M and tin southside one's off street seventy three and please




--0000000000005d2f4e061c610e44--

Chinese product spam from Microsoft Outlook

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Wed, 03 Jul 2024 19:38:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sPBPC-000000003Fo-422N

for dave@doctor.nl2k.ab.ca;

Wed, 03 Jul 2024 19:37:02 -0600

Resent-From: The Doctor

Resent-Date: Wed, 3 Jul 2024 19:37:02 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-sgaapc01olkn2094.outbound.protection.outlook.com ([40.92.53.94]:43873 helo=APC01-SG2-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sPApN-00000000NYj-0R3c

for doctor@nl2k.ab.ca;

Wed, 03 Jul 2024 19:00:07 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=SpaLudrrbyaZQMKCv/S/f8nFn9O6VgMkj/ftkjNOzSCWIXfhqFw4aQ2xIjJyuaMtG5SmYaegeIQ9cPfnw4Ndi/gwJFx50QCO96nRGdbNG2EVKCgFqa5/jV6Wv633kekmPpN9ECnElbQyFKbfjbhQ5b4cjCB3/HpN8xvKjaKvJu6Wza2sr+GCoJTYaIkEeW/vXyOZYxjZRtUdfQzp3U4heSrSR7CiQm2HP5zF2Yf05H/2SQaGh13pTqMSaxfjtrztlaunX9rwXs2WU5WW9im8K+bmgGlPRQbWvwN+ljzwgnWvypVPAoleyM/B7Cj106W0AFQsAsJmbEx74SgHGSzswg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=FVUdSH1OWzSe3aidH1aNwm4lAp/qijPVM5ivf7S/Kdg=;

b=IegY3uy7Dw6+8osSIKFAFxxvTkoz7EhXqVpvGQz45N7B+WaeAfRU02DTpSd5aLR+9Meh+9auknvj15grRCkLNdeZc3OAJHo0e+DZQMXG3EWoXXuvLGhUkHNXKvROG+kaAXorRseGPCBDdyXLx+D3zZ3k7LVRUJGUuxnpWYDxaJRDfe3O+GHy2lPWeSd4eq61jAvN2A4mrQspR0QoTlenvIeKJ9Zxfcfllu1Bv3agxN83GZ926UVD61oj/Ql7HBmHIQ465WuyZKOg2MEAHi+xNRFk5181iQ871MI5oP0MvdM+W8LVNCKRd3l+WfxKWREs5UlB0FzbBLLKe8VDLIannw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=FVUdSH1OWzSe3aidH1aNwm4lAp/qijPVM5ivf7S/Kdg=;

b=ONuCAo7TwRPUnzMmgwqKLWQcAdGaQlrbqHorhOhn1av+A0QJEatOIzeKm8SNgZXuPHh0kYkv7YFHwM+Dl0m0+XMP4BTH8rLzUxBIxZ58AQRvaUzTHjxi3dYHwV30TOcUkjh3/Wd/c7d5/Aq8+RdJ+/T6TIgFZelgg9ntHOq3eiV+ad1AuZKBA76srYMW0GR/b1iRmBveSJikmmRZb+5YNC9XALyvNsbAwanc6wDOhjG7dboMmo3BCIeK0Ro/kB86XE0iz97gAK9GkAInM4iDEPqGB/IUtX8B1r8Jp1QgdPDzQtvD3ISGWijYOjS6mgbNPqHx08ru61rwji+swnHT9g==

Received: from PSAPR01MB3813.apcprd01.prod.exchangelabs.com

(2603:1096:301:4c::9) by SEZPR01MB4181.apcprd01.prod.exchangelabs.com

(2603:1096:101:3a::12) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7719.32; Thu, 4 Jul

2024 00:57:26 +0000

Received: from PSAPR01MB3813.apcprd01.prod.exchangelabs.com

([fe80::fd41:241e:64eb:35cb]) by PSAPR01MB3813.apcprd01.prod.exchangelabs.com

([fe80::fd41:241e:64eb:35cb%5]) with mapi id 15.20.7741.017; Thu, 4 Jul 2024

00:57:26 +0000

From: sk sk

Subject: Direct Factory

Thread-Topic: Direct Factory

Thread-Index: AQHazOPo+V3KYL4wakSKSJjODD7Nzw==

Date: Thu, 4 Jul 2024 00:57:25 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [ZR3i/xr5/BbCZ1wRRmIXnckysKVfYEII]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PSAPR01MB3813:EE_|SEZPR01MB4181:EE_

x-ms-office365-filtering-correlation-id: 95141e7e-9e2c-4250-f91e-08dc9bc4453a

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|8060799006|461199028|102099032|440099028|3412199025;

x-microsoft-antispam-message-info:

t3CXjHMhTC9K0yDjNhXA2jMYXW1pq4xDSU0QDrPFcYSpb/C13QGkabTISRRl+Bj7ZkEC823ly0sMcHKup42LfaCxy7XMavubAweR93D87qRdpIYoZDRiMDTYWo+7w7s2zmaO2IPMcRJOiFHwEPGrh8B6RmwMpvNodFY9ZIzLMZCFMsmu9/1sqIEhC/P3FwfusEYjeelneYD/EpfKxqOfHWsPJicBGXtOiR+qolOGh97cdyv2nfpnFqOvpF+df7wwwmD19kvt8LhAbuEysyPzToDXcrtltqo2ecyGe/zfGdgrY/Id0PMsjjkl7WRuWFkAMho/65SCNTmsYzr0J6Fw0cPOCx9STI4nXBneqIoVKyHAu1v+YEgZ8LsdPNKa31YHRkOj1K2MBUtiDn7hx7QRhR7c3K94V0duseQA+mtwDkVISWTLP1aW/FjjJD67QCZFX4tevbUSD+n7FNs/VU8Fgy9kC+sjFmuqJswqDTmgMqy3EuQc7E8OCMRapodxmsGdY0fHAxp/fJJ4/S/04Hrr8rWgY/0u+/KdWlaFMsTnbAVC6fBA+xcznPfOHjyzw2e7OWoDJopReSjIW8nx8grDUDx73lQLoqrExlBpa2m2gDG24Thr9rPD7gtahSVTSVwO

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?dkN6MjExVFBCSTBRMTRzeW1xelZDN1ZGLzk4NHluWExTdUxzbk9LbHZSK0RI?=

=?gb2312?B?RGdLaW1pZTJYZXZudmZBNWJRTFNNQllPcnBodnVSK1FWT1M5VTBlM3hVU1VH?=

=?gb2312?B?VUNTY05BM0Y5dlp2eFNOalhRQTZ3cVhFMm1TVGdFWklrdkNLNWNSMUZOZkcv?=

=?gb2312?B?Smk2Ry8zT2JzSEFjcjRGRmpxb3BuSWJFamVWbWwvdzcvaVBscDhVSUNtQUQx?=

=?gb2312?B?NHFqSTJzK1hrRUh3M3FtZEowT01vRDFibnJNM1hUT0gvZkVjcTVTTkNibWRW?=

=?gb2312?B?elF0Y0NhUkttNjJDK0VqOUE3V2RTNFBRbXI2dWtZTG93MytvekpjWVoxdUVa?=

=?gb2312?B?K0VkdXZ0UlRaL3VhVHZqZldyd2ZLUmdKWnYvNThibFlSSDFEbGxtMzU1RDY3?=

=?gb2312?B?OHM4WGU2RkN0cDFpV3pnSmtEajlrT3RSUkd1THdzeGpwb1BVWFJ2cHQ1SGdo?=

=?gb2312?B?VGE1YkhTaGZiMk1IeFl4dW5Sc1ZDN0VoL3E4N20xYlozbTVHV3EwR0NhOUF5?=

=?gb2312?B?Z08wNXdNbktaZHhVWW5UWmNhVWFpQ0N1Y0NCNnBINW5rbzhXREJkYlhPNDIz?=

=?gb2312?B?cCtDZ2ZnWWpJQitBUkVPNkQxYjJJdHlWVlV1OGphd3lIMUJnR2QvOUlneUx6?=

=?gb2312?B?M2d3U0dyckxLYUNpenFQaTkzRWVrZWZhWElaRnRVZDI2WThZZ1pvZUFmZmxi?=

=?gb2312?B?cTVaOVg4MWJWMWh0dG9BTGYycTcrVzhSMjJ3NExsemMydnlxVVJBVVViLzFG?=

=?gb2312?B?UnEwMFV4bVZ2UW81QVZwRFZqRmFGamFXNDZDMkx3S1JqM3NLMTkxb01nN1JX?=

=?gb2312?B?M0t2UWNxczNCcVhZQndWdnVkdXpoY2hKcnNGa0daaXZJd0kzQWEyelZHcFM0?=

=?gb2312?B?MEYrNmt2MGMrellHa1lxR0ZuNndRRHEyR01zdXlEbGhZQ2ZuY1JMVU5TNDdC?=

=?gb2312?B?MlN0S2Z0ekFXNi9LdHdiaUNCWVdRNnBxTWNmMU1lVC9rOFU0WGRJNm1OSmpO?=

=?gb2312?B?bGhSbXNWblAwakxVZHRoRmxtcWg5MEUwSDU0ZlF3cGNCL1ltK0pNUDRFYnhU?=

=?gb2312?B?bVVLM0d1cjVKN0h6cXRuM0diZlNBMHVsbUtScGxzeVZQV1dmUG5OWTYwT0c5?=

=?gb2312?B?dDJ2dUpscjhpUGFOQW1vNDN4Ty93NnVaaGpraGZoNUxTOG1KaVlIL1lyTy85?=

=?gb2312?B?dUZ6cmVOS0paaXI3SjRSK0xkWklrZnlGN0ZTT0NiQmF1MkFqdERTMG9yMjdB?=

=?gb2312?B?WmhRT1Yxb3EvUlRzdkIxU2lhVHVKOXlZbzhqajY5SzVsOEZiT0VyRHpPNkIv?=

=?gb2312?B?MzRIbWNIUkdFTXp5SEJVQ2lDNGV4bzE3T3NOakdEc3JkcnkrL0EzellBY2VH?=

=?gb2312?B?WE4wME1KRDZBSUhleCtqd2w4REd1YkI2OFVSbDR0SWEyMjRkWjNIWUZNSkFR?=

=?gb2312?B?ZGljTnRWL3dXek8rbXlDOTVwYlNKVjNJVWdUdmI0aEF6VFRxbHBpS1NFTjFi?=

=?gb2312?B?KzVvTFBYRW4vM1ZIdTgrUzI5aGxJcEF2VU9meDBBS3UwdFByWEhBNjdKWGNl?=

=?gb2312?B?NjlScGY4aS91R3ZjZnhqVS9sWlJWS09ManhaZmljL0FVcDRnS0llZTlGVllj?=

=?gb2312?B?RjV6UEJpTHE3YlZra1I5NDBmVUF5cGc9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_PSAPR01MB381306D8244807705B3145F2A3DD2PSAPR01MB3813apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PSAPR01MB3813.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 95141e7e-9e2c-4250-f91e-08dc9bc4453a

X-MS-Exchange-CrossTenant-originalarrivaltime: 04 Jul 2024 00:57:25.6914

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB4181

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi There, Hope you’re in good health. We’re Manufacturer

& Exporter of Lighting from China. Customize designs, label & packing available.

I’m sending our product catalog. If you’re interested, we can provide

you with a quote.



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.53.94 listed in dnsbl.ahbl.org]

[40.92.53.94 listed in dnsbl.ahbl.org]

[40.92.53.94 listed in dnsbl.ahbl.org]

[40.92.53.94 listed in dnsbl.ahbl.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.53.94 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.53.94 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.53.94 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.53.94 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:4c:0:0:0:9 listed in]

[will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

[40.92.53.94 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.53.94 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.53.94 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sksales78(at)outlook.com]

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sksales78(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Direct Factory



--_000_PSAPR01MB381306D8244807705B3145F2A3DD2PSAPR01MB3813apcp_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64



SGkgVGhlcmUsDQpIb3BlIHlvdaGvcmUgaW4gZ29vZCBoZWFsdGguDQpXZaGvcmUgTWFudWZhY3R1

cmVyICYgRXhwb3J0ZXIgb2YgTGlnaHRpbmcgZnJvbSBDaGluYS4NCkN1c3RvbWl6ZSBkZXNpZ25z

LCBsYWJlbCAmIHBhY2tpbmcgYXZhaWxhYmxlLg0KDQpJoa9tIHNlbmRpbmcgb3VyIHByb2R1Y3Qg

Y2F0YWxvZy4gSWYgeW91oa9yZSBpbnRlcmVzdGVkLCB3ZSBjYW4gcHJvdmlkZSB5b3Ugd2l0aCBh

IHF1b3RlLg0KDQpXZSBhcmUgbG9va2luZyBmb3J3YXJkIHRvIGhhdmUgZ29vZCBidXNpbmVzcyB3

aXRoIHlvdS4NCkJlc3QgUmVnYXJkcw0KQW5keQ0K



--_000_PSAPR01MB381306D8244807705B3145F2A3DD2PSAPR01MB3813apcp_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable
















nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi There,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hope you=A1=AFre in good health.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We=A1=AFre Manufacturer & Exporter of Lighting from China.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Customize designs, label & packing available.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I=A1=AFm sending our product catalog. If you=A1=AFre interested, we can pro=

vide you with a quote.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We are looking forward to have good business with you.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best Regards



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Andy








--_000_PSAPR01MB381306D8244807705B3145F2A3DD2PSAPR01MB3813apcp_--