Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 15:20:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCR8c-00000000ARE-07K7

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 15:19:30 -0700

Resent-From: The Doctor

Resent-Date: Sat, 16 Nov 2024 15:19:28 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-koreacentralazolkn19013076.outbound.protection.outlook.com ([52.103.74.76]:17333 helo=SEYPR02CU001.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCPCV-00000000JCV-3xJu

for root@nk.ca;

Sat, 16 Nov 2024 13:15:33 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=JMc0WN6o3RwKX4olcndybg8bZYdWgho28rQJ+wYIhfds03f9v7hj0yIN6K/wIkuQQQI9XQR0wSM7yVPAucH6s7AjGfERMvrfDhw7/5AVlUF3tcR2QhHPjGFAjsqhV23zD5kfn58xembelWviMLnYO21hbpqsthShw5R0ugd5MF840pddB4oQs8M6dkP5HRUHvR9cu5JP5Al9Oj5sKhQeH6FU28qkj/yafokMm+0itnk9UIrWVAW8/IrmWXHfCAnuctGZSFVbuz01F8gbpCRYqorOVCwC8OEP99ReRYoAdqknlMrD878BMchIXRRCXtviFK/huB0urhTZbSEmaXIl6A==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=wfX9PhkcO1zu/AiKFhf80BiwkYWSne4RFTszZ5Y2PG0=;

b=GkNI2Ke8LSv/iPPl4of4gca56/OOy0st7IKU8Pf4zc90vD2ws4GYZbsELcr6parCnwvuQMDNgGhj76QIG0rRtxFQUpFajzdL/lvp4E/viCuUk7Ac7n0cjV6eg5tHos15vU1eG+bFs8gEzyxPwNQ+PNANoo3JCMeAEFud18R9mlWM79jfOLmjNgSIooUfYok1Fzbzbobp64Wa+aLvk4OnDtyStgZJ+U81akzcfzOZ0PNEiV+TBAb2G5j0karkL3vFzrVIHZ0uru2m7RO1oiW+MzHdUq9lUur/jGv8xYtgv/0ZGljaGf622nMKCqlDtXpMNVdguYJYMlOsLsoiH0teHQ==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=wfX9PhkcO1zu/AiKFhf80BiwkYWSne4RFTszZ5Y2PG0=;

b=eYhSpgHgoalhoTY/WhfczQFI/D9T0cSVy0NCaA14OreV64gsOlNvMGm/4SyKOaMWmJvZdBse8g2ZbS1SpmKXMLFSxUmWLt0jwVTaoFisKRm+pGCfxEtV7g51VtAzVl+yUuwid10loVJ7nE8hqNYubO5WH4bMvxJpbmtXNATCyntTVPywIx8bGkVRDfsGYKF7vkoTBlH7yQMG1e83QdBia4cNA/uLSnsssHrc0T9t6BoIGgw0y2avX/EOE2fdgBG8UGEq22xfIV2R8Xo2aBEg15A0x73h4cKr1mtvL0heGKHd/tl4bY1G0REFcqVSu62vBGTDyB5aOTVBdTz7snnmxQ==

Received: from TYZPR02MB5102.apcprd02.prod.outlook.com (2603:1096:400:74::11)

by SEYPR02MB5992.apcprd02.prod.outlook.com (2603:1096:101:80::5) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.17; Sat, 16 Nov

2024 16:24:35 +0000

Received: from TYZPR02MB5102.apcprd02.prod.outlook.com

([fe80::3707:ccfe:2fe4:87f9]) by TYZPR02MB5102.apcprd02.prod.outlook.com

([fe80::3707:ccfe:2fe4:87f9%2]) with mapi id 15.20.8158.019; Sat, 16 Nov 2024

16:24:35 +0000

From: rupali tirbedi

Subject: Errors_?

Thread-Topic: Errors_?

Thread-Index: AQHbOEOMd/1YiM0/mkK1K3mR76sfQA==

Date: Sat, 16 Nov 2024 16:24:34 +0000

Message-ID:



Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: TYZPR02MB5102:EE_|SEYPR02MB5992:EE_

x-ms-office365-filtering-correlation-id: c91f77d5-6e3f-42a7-e5cf-08dd065b2872

x-microsoft-antispam:

BCL:0;ARA:14566002|7042599007|15080799006|8062599003|19110799003|8060799006|461199028|15030799003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?eDSK5J8ybFsrsZRjFiJ4vcwLAkSP0wh2oMUF6SHoEJRIKFd3Eheslr31ce?=

=?iso-8859-1?Q?BMD9x0ub9GiDS9/ILlZIH1+Tjr2R6OU5J3zn1+Updiwml34ffMmX/FADc1?=

=?iso-8859-1?Q?QVziX3ozOptMlGYVYdQ08KLKMuDwnWcc2Cq4/9VLPGxl9ujUpeF4kJpLab?=

=?iso-8859-1?Q?ZaesV41/iAPCBrYbh1An2HUnS6LDZN4O3jOwlY614wBoMYLdhDYDeU2JKl?=

=?iso-8859-1?Q?0/xHu2aSos37FeZ3irlqVwSQdwO6tcd1W59q/F8WSd7kLwda5fO6Gg7+L0?=

=?iso-8859-1?Q?dCn3gB1KFiEM7u8fy8g9KZSoXqCMEtAyGfOifpGnr7Zr91w6pPxJRShCLi?=

=?iso-8859-1?Q?KsqLBmzI/vPpNEXiSM/oO2ZLTKAyUtuOZNSQvhMDz7pk8YlmMefVe4f/d3?=

=?iso-8859-1?Q?jF+BaJOV4aL7uiaWdSROK4h7YEFboErwIKsPy9q3gy8jYSVkMRGaJPPx8+?=

=?iso-8859-1?Q?PUn3OIXAbHbP17booCDfWzFzGyKmls2dTT6CPLyBguKE/7t514ZfvkiOvA?=

=?iso-8859-1?Q?kpavFksP0E5cA6o+6IEfrh8yNXZmGjMT9M4Tb8AjcV2xAs0HHsSBoDYCPY?=

=?iso-8859-1?Q?PS36jAtFNisWnIUXQP98t+89GkiWTP3G7f1knq9AnL4iskzoTlQP3X0RuJ?=

=?iso-8859-1?Q?ik6uHLU/F06KhiqWlOgJfalgm+ATn6Eh+Hy5rUrtGaitN/QBg/raMaRKrN?=

=?iso-8859-1?Q?WYaLthUxlC1i24qKNpYpDBGx3bH2qzprVPTVheovo0esPg9xEwV7m+me8i?=

=?iso-8859-1?Q?SEP6XYNzu4vBWTJVCu33ZsyFSf1rQJTUMRk2QuoRs7ALduWPkNSRx48kWf?=

=?iso-8859-1?Q?HSV/akESSOh49E6ZnERBz29z+4j79T8fT/t2Wa5IAoanv8YGjvdcNG57vB?=

=?iso-8859-1?Q?03Sin++AsSRUEEqDy0usfWqOkMLtp3ytywQAy/yGVeR/YUwX5gnu/Tdo/K?=

=?iso-8859-1?Q?3gUK5cio70PG2zeozQcmj4CUcJgkg6zcyGv+dhwpD/LHlVUYREJC3yuWGu?=

=?iso-8859-1?Q?7xIfRfsAdjVyMKI9hqCxtGXiR74lK4Bbyvo9i/wcSuzM+2pUFv81yg2ixo?=

=?iso-8859-1?Q?N9xGFemRIXqN9hjWVE0m5hPxjiUrhEpvx3WsyuD4pnc0?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?xFh9uwiH41Z620ItoBIoz6cm0li2OSvW1OPUjaW2byNG/cxggDZBjbGHrw?=

=?iso-8859-1?Q?Ku4RSKxvYLP30cQ71BIc+mvwpGXUQhfRBLdcHCYXcHu5QpSK6MvbS9QQDY?=

=?iso-8859-1?Q?TTmJOFwdcxfdmRBdobZvA9xiKRd2ICM6Kn/drS6hhcDvSl62iM5xytAGQM?=

=?iso-8859-1?Q?hGMFUNYqSYZKHVTeu1Bn6WM1DXQXXCGxbWjSi1j4zKpEAOXFJMeHfyS6UE?=

=?iso-8859-1?Q?t/42GavynCP4Mfp3l7lETlUWnLOTVqqyZP/KVk7j8C240kvEQ6VceF6TkD?=

=?iso-8859-1?Q?aT/FYea1Mp71GNuETFNy8m1RAEG0g0bX9WPHKKgbAKwG4IMV/KO4XoB5xT?=

=?iso-8859-1?Q?ZyfyBgu7hDD13I10PCePtbLqnW9LRprzWnvqnAv7b5FDJT/IEmsNwsp47t?=

=?iso-8859-1?Q?Z9jU27yYV1+3CH/TbJ8GlKZLDYv0cyHYCtbfXLXpA+LPMKKNaNFd9+ckyL?=

=?iso-8859-1?Q?1IRU3x5OsOdF1i51UL8ouNyz4UQLGmxw10Tj/SL1kiWLqPgbJFfq/rSYdy?=

=?iso-8859-1?Q?PzpzzRLPr2e2+GbljX0FjFcR64UJ93OeAGL4Nh/Mq0Ne2BeWYPBhadKf2y?=

=?iso-8859-1?Q?WiIl/InTLlToO3Wa0Ns5X6fu59vXD3oDgelY4AYoUZupPvwgipcwSyI/2+?=

=?iso-8859-1?Q?NQK90woJbPF9gPOCV3GFp7Rvh1nnn0KpMWWQcRbkYTJxjKBJAHKZ5qG2jy?=

=?iso-8859-1?Q?8NBBZacpuC9FRAcb7O1s05P/Wgn6hfRqrRwoiSPsRraP2EmkJOt7aTYGB7?=

=?iso-8859-1?Q?qIO+JZ1h7RqA7WXmGRZ46DRQ/7LmbtfUitG98dpTwtTAKD4Elm0i1wdN+A?=

=?iso-8859-1?Q?QCiN4OsVJIiObqH41qMTuwTjqLOxeFCylk7HTiYz6d+YFTNXx3lmno6WbI?=

=?iso-8859-1?Q?XsVjjeYAm+3EmcvyLFh+ld9759jpkjyHpYQ3+kQBj19MgaU6XGZUWkU2zB?=

=?iso-8859-1?Q?euA37K+qkMBK83W1LYdo3xfi+50fdftHCejg9jEiipQSPblvqzzTH60ABR?=

=?iso-8859-1?Q?cd0DvRHhJWwDVz7C1diujC6FrSZt85xAsLLadjGxXVszM2lEOt6Szb0ac2?=

=?iso-8859-1?Q?q/abzg3synj4GHVe2B+p2f6/zu2oO40tETqu2EVAsuq7UoBGhwKNlgxgdt?=

=?iso-8859-1?Q?GWlrmNfweyK811LAY4SI+KQkaXAql4QVOlAnQvyGKVfc86qZRgQtIfJdm9?=

=?iso-8859-1?Q?gFOngLYejKW3ZC0nHydkyYvaYyUU9yzb7yo0n3echZaEOqbaQ7MfdA1opS?=

=?iso-8859-1?Q?V5AZNVcTD45+7e0ju0iaCo3TPGpyhS4hFPdDf1KcTdS5MDoxs+BWkA2iRM?=

=?iso-8859-1?Q?YrSZoq3k/04yJN/ZgRZNgsJ7vEDQfGtq5KGM4CF0IfFUarA=3D?=

Content-Type: multipart/alternative;

boundary="_000_TYZPR02MB51028A5EE64850D0B4CDB3CAAA252TYZPR02MB5102apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: TYZPR02MB5102.apcprd02.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c91f77d5-6e3f-42a7-e5cf-08dd065b2872

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2024 16:24:34.6500

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEYPR02MB5992

X-Spam_score: 7.2

X-Spam_score_int: 72

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I found a few errors on your site. Would you like me to

send over a screenshot of those errors?



Content analysis details: (7.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:400:74:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

[52.103.74.76 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[52.103.74.76 listed in dnsbl.ahbl.org]

[52.103.74.76 listed in dnsbl.ahbl.org]

[52.103.74.76 listed in dnsbl.ahbl.org]

[52.103.74.76 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[2603:1096:400:74:0:0:0:11 listed in]

[dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.74.76 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.74.76 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_VALID Message has a valid ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[rupalitirbedi(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

1.2 MISSING_HEADERS Missing To: header

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} Errors_?



--_000_TYZPR02MB51028A5EE64850D0B4CDB3CAAA252TYZPR02MB5102apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,



I found a few errors on your site.



Would you like me to send over a screenshot of those errors?



May I send you audit report of your business website?



Thank You.





--_000_TYZPR02MB51028A5EE64850D0B4CDB3CAAA252TYZPR02MB5102apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








line-height: normal; background-color: white; margin: 0px; font-family: Apt=

os, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif=

; font-size: 12pt; color: black;">

Hi,



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

 



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

I found a few errors on your site.



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

            &nb=

sp;    



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

Would you like me to send over a screenshot of those errors?



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

            &nb=

sp;      



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

May I send you audit report of your business website?



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

 



ground-color: white; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, A=

ptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color:=

black;">

Thank You.



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_TYZPR02MB51028A5EE64850D0B4CDB3CAAA252TYZPR02MB5102apcp_--

Web / SEO / App spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 02:49:00 -0700

Received: from mail-tyzapc01olkn2040.outbound.protection.outlook.com ([40.92.107.40]:46021 helo=APC01-TYZ-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCFPX-000000002rr-3PKQ

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 02:48:33 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=S5AE1CWgXxhuoI9szAujpoM9ggmvjyXxsd+FtLOS7xNtnVQNyP/2Vq7YEig/Q7vGDtNuKXFnjbbqCvPP42v9CWjkKWrIxLsD7dXyqgJMXi5xOGVVDN5oSw55IZQrYuEBzNNKrY3RKwaMKJGmbeD4mwdY9RncYynW2xCFuDrxCCSJmJwTVZe98jtEDSYAzhNilL48oRuofNxVE3pHa2CbwVF/9MFyRRsW4UCOIZHy20yrcnF7E5cgQ/RatiZjmyhczGXOSBmjwCu7qW32mxVJv5h1cAUNUyFQHxyrdQNQELWS/edfuFhNBH9r1QCDExq5ROtJ/yxusFCjYYogeQE8Vg==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=48opNCNXrTXKFATNXqSVCy8gnfGuSFbsc26TudDPvN0=;

b=mgSw00+PlCtmbFuVmQ6TNM78YWcBUDWpc66VpJsnc/9T9xkgRuN2dnbLOX/oyNowJvx6NwZbHhwys1Q9UdaUv4AQX836XClOIctHSHWzcggk86WdQzcFN1/PsXtloYWHFgkfqgi/q0oHjudnIAmPkcQPyIp4WSeQq7Wjp229OORLRPwFPpql8UT6JcEtfTFPNHNvfIvoMvJE0QWISd2sVEyh+PHSqvsZt/b4Kz9XVGCX7EEzPVEHZwMcqsIVbonoqtaHqftxd7NUsPls/JVo3IrL4OCWe+VC3J+vVHcrQ1CQypT9tRpWYxJOPYAWhssskb19aHSUJNekFaiXLXzHTw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=48opNCNXrTXKFATNXqSVCy8gnfGuSFbsc26TudDPvN0=;

b=q25fZc0gHFKu6DM9MA1Euab5s0DZE4uvyI7ucUaGi+mOwYRL0cp+avNyeJopO7ZiYYLpGx0zfNFBcknhS9k6lGqE6XdqiZhi1hDmVlM12/sk0CyTOiOZpGydFmTQc87Zhy3JJVCuA17v7/LrG5v9YmOtNH344jkkTFctfNm52l1WtNsAp3n7ADKCg8lC1+B68ioVTPIrUhiaItBB9jZKaSJKsfrcQxtm+LcdNHfMpGn4yMY3PIV3oyU5YsvkQ1JAr0u9PisAYGlx3z4JEKnwrW6n0A+Til9JQ05n4HaE1fPpyk2zp+xMpisaRL1ElkoGf7CBHTbs4m7cKdfuFYtldg==

Received: from JH0PR01MB5872.apcprd01.prod.exchangelabs.com

(2603:1096:990:50::5) by SEZPR01MB7220.apcprd01.prod.exchangelabs.com

(2603:1096:101:2a4::7) with Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.19; Sat, 16 Nov

2024 09:45:21 +0000

Received: from JH0PR01MB5872.apcprd01.prod.exchangelabs.com

([fe80::9415:2d87:d095:526a]) by JH0PR01MB5872.apcprd01.prod.exchangelabs.com

([fe80::9415:2d87:d095:526a%4]) with mapi id 15.20.8158.013; Sat, 16 Nov 2024

09:45:21 +0000

From: Colton Morrowfa

Subject: 1st Page Of Google!

Thread-Topic: 1st Page Of Google!

Thread-Index: AQHbOAw2qRxmACWz+UqmDdvxN0TgFg==

Date: Sat, 16 Nov 2024 09:45:20 +0000

Message-ID:



Accept-Language: en-IN, en-US

Content-Language: en-IN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: JH0PR01MB5872:EE_|SEZPR01MB7220:EE_

x-ms-office365-filtering-correlation-id: 43a5c717-b0d6-460b-4031-08dd062362a6

x-microsoft-antispam:

BCL:0;ARA:14566002|19110799003|37102599003|8060799006|15080799006|15030799003|461199028|8062599003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?iso-8859-1?Q?rxbP4hI67mWRQyeriYi98daPYnbTXcdvaqDOtF6JNiLTGEZUoAyvJi9ZhN?=

=?iso-8859-1?Q?vNbKJ1feamG13HHiTQgkEy05suxpXy/cBIRj6MqFvcEEpknY6lMA3zeIh6?=

=?iso-8859-1?Q?g9NaWi3N0mTyeTJJjHTmzSN5dvDYoI5QQ76GqoO7D1hUatpkdIRNTuAcmu?=

=?iso-8859-1?Q?tvoYXHYWwrobjC1ds0HWkk8G2+aXmmRW1BBdwM3z0SOZ6pxaXkXejm1ffg?=

=?iso-8859-1?Q?by5HlskLHFmT88xZlUrm9kz0GkwkVrSgqiJQGUQ9YkvVbXoHWPcjeOg09Q?=

=?iso-8859-1?Q?NGvxp+kDmqBNRbuyrlCWM96kDopxTFOk/kYnvQ9NEHowG+eCu/nnSBRarQ?=

=?iso-8859-1?Q?OB3Vau9mR1UDuzjQ7B3srwx0DFMhxJgprZGokbevc5tVBuFpmhsy9k/g2j?=

=?iso-8859-1?Q?DV1JI6HtWOQrKFExNEfHjLIX55Djrmjok3Wp8Fc60RMNCgWP7fjswsYDF1?=

=?iso-8859-1?Q?BWeG0LpFku6r5vgVDSaLprZe8Q+DZPHNujWVqPVutTksstdrHmjcycx/Wr?=

=?iso-8859-1?Q?Jo9XUG/Lt0jj/HauTRTXz13FEdiMZtdVa4ZekRfcEoui8qf78ULw5SXndI?=

=?iso-8859-1?Q?4KCd0oBVDr0QRKTSTiJ3CRcrMwSNKbBq2GdbgcCDLjH7mzV5LCyRFOZdt7?=

=?iso-8859-1?Q?iMxPi1X4qgz1r75ed5Pjki2fwRCnMkRpqiz4cMZ1kn+FW51mbfe3TbAfGP?=

=?iso-8859-1?Q?1GgMPkdBLRTGiG5AUlGVIghbyyVSFjmY2VG+sapmtSAAqOldlnCqzRJCAs?=

=?iso-8859-1?Q?ccDn1BHfmAWOSD0aBOkotwMe58rjnZW7zJHrsNZYKN8x/F4Lp/+UjlaLPA?=

=?iso-8859-1?Q?C8gw2yXVrITnqIa0boY0APr7monYhqgWmZRWLL+UZvwx/c3adTlTJfbHfR?=

=?iso-8859-1?Q?m45C5FSNz+7RnXcHVuvWBJcmSU3bzj/a5e3/bODi/HlGHf4JDt/QbzE9kp?=

=?iso-8859-1?Q?JNw7Ez96KSUXZjmTPNxvE6Nsxmj7IBEdZhseGAU/cwwl8BU/lk6rwAuTD2?=

=?iso-8859-1?Q?Im7t6Gjk5uv009XlbOTmyzWFq8jvtcV7gAsoXouBWN5PxcTLEYf1c92Mcx?=

=?iso-8859-1?Q?v79O3zP+fpqc1BabES4RmwmrJnTDGeWJLW2ENY+FoHAQubcY+JREZy84Yu?=

=?iso-8859-1?Q?WOU1aNRg=3D=3D?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?KCs3pEWuv4mDDR3wxXoOCIOAVYGi+f+ssLdiAAtSBW/xftL2UhM8Xogb81?=

=?iso-8859-1?Q?MQZs5hk6Yeb/2j6KY8ulS2fZ6KBRBNvi4TyKlKf92GrED4p5uR2l9cKUjS?=

=?iso-8859-1?Q?ledu5P5wISL3V8PNIvJg0c/hqcD4XZHd+ENi+g5mxzBuZILXw6GcrlYZom?=

=?iso-8859-1?Q?DfiobDqkHLKgimO76hsGIRTlIfTC2hvdbi1ijR8Dr4Z4Cj0KWRlEz4+oI2?=

=?iso-8859-1?Q?64YFYLpF/y5zufScQs/dnr4250lsY5OgIR9stYfWm9FBFmwHkjLFtMQQr4?=

=?iso-8859-1?Q?rPSZgh4bwvb7ijZOBmba4j/JC1UCIlzDh6HfW3QAJkGoPSXJMG+fcMqpDp?=

=?iso-8859-1?Q?9QTrCIKKAfva9osCA+lothTpCxhByUVzrI2ck1Yk/FVMWppv2RqTN2ZTli?=

=?iso-8859-1?Q?o0Oa+NHJxzZZ8h4Z6XEhxSSI8VsIM+JYbxtTCT11QZck2veurv6jQE4ig3?=

=?iso-8859-1?Q?ZXkQXAL5gvMNsweKj18WblGvgHTWtkkv148WfFV2NJkNAhgONJyr506MlB?=

=?iso-8859-1?Q?shq9vZgishWm9mdnHt7Uz0Pg+jPv2Kim8y47h2b9d3hfhZs9CLLnPH+IAi?=

=?iso-8859-1?Q?yv6vmCUasudtYTcCEP3AKW5nyziFC6VqlmTjNWuEXihtctrExnSeKEVsSB?=

=?iso-8859-1?Q?SNBK1Jut2sd+9Lmgt5v+OEesyXi7Mun8z/mr6m3CqoumrWfML04QB3WZhj?=

=?iso-8859-1?Q?3z5Hi1hSr+zyvevva9PwIoOjXtacWL/wLJA7MNr8jL87MFsMkEwne39HG8?=

=?iso-8859-1?Q?rQ+lMciNY5XyXfsWp0W7+TSx20ZO1r7TZwx+R5tRXnot9aNIQ5VhRRsNGN?=

=?iso-8859-1?Q?lpDMrHdqZ04i0LPqTyUKIG1CZBILsW+K7u12OhvkpvxArgdkE25jm+l6ec?=

=?iso-8859-1?Q?JnEgjaEOg0VpkrplNj3+7fJszENxPE71wRjJzfgn/MYR7npvyDD5NYY/ef?=

=?iso-8859-1?Q?yVOeYPRwXxOf8ySNYOTu1sDEK9ksAY9g/QhWqbljVzSBos1ujrgrZuamTI?=

=?iso-8859-1?Q?CHyIa0oAE5h4/+I45FAEu/osz4Q2MSzO0Xk49HbONJkVCJYGGlsKCmO2ss?=

=?iso-8859-1?Q?R+ai5uibzHDQ9gZ2Yx7wjQI4EoYHUAVCuJRDkVpOZgWm4kcHYA06AlLAD4?=

=?iso-8859-1?Q?qwy//ZENvICVF0opX1G0fulNciGAmA4UZu5kxrAXlFDRwKlfkerqgtmgjm?=

=?iso-8859-1?Q?gfOQrA/qrvUFuDRiyNF/XlMzNcDhyGVEzGtxSPLo1tDUHfpVEy3KKTDm8L?=

=?iso-8859-1?Q?QTf8YaAXF9C8ZBLanJrugKuw12X/KplMKIb6wCFu4I7tWcWUqPCNpQHhPQ?=

=?iso-8859-1?Q?qZVFVlAazU2MS9tcPmaeb1l/Vo+dT7PFmqnIRb84IvC9S4IrvwUk0RJsbf?=

=?iso-8859-1?Q?MwhPQdu6PZ?=

Content-Type: multipart/alternative;

boundary="_000_JH0PR01MB58727CF4752ABD188CA10B19E7252JH0PR01MB5872apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: JH0PR01MB5872.apcprd01.prod.exchangelabs.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 43a5c717-b0d6-460b-4031-08dd062362a6

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2024 09:45:20.4997

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SEZPR01MB7220

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you are doing well. We Can Put Your Website On

1st Page Of Google To Drive Relevant Visitors To Your Site. We will be pleased

to explain our services in detail. Let us know if you would be [...]



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[2603:1096:990:50:0:0:0:5 listed in]

[will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

[40.92.107.40 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.107.40 listed in dnsbl.ahbl.org]

[40.92.107.40 listed in dnsbl.ahbl.org]

[40.92.107.40 listed in dnsbl.ahbl.org]

[40.92.107.40 listed in dnsbl.ahbl.org]

[2603:1096:990:50:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:50:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:50:0:0:0:5 listed in]

[dnsbl.ahbl.org]

[2603:1096:990:50:0:0:0:5 listed in]

[dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.107.40 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.107.40 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.107.40 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.107.40 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.107.40 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.107.40 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[coltonmorrowfa663(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[coltonmorrowfa663(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} 1st Page Of Google!



--_000_JH0PR01MB58727CF4752ABD188CA10B19E7252JH0PR01MB5872apcp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



Hi,

I hope you are doing well.

We Can Put Your Website On 1st Page Of Google To Drive Relevant Visitors To=

Your Site.

We will be pleased to explain our services in detail.

Let us know if you would be interested in getting detailed proposal.

Kindly revert in case of any clarification; I will be more than happy to as=

sist you complete details.

Many Thanks!

Colton







--_000_JH0PR01MB58727CF4752ABD188CA10B19E7252JH0PR01MB5872apcp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








0pt; font-family: Cambria, Georgia, serif; font-size: 11pt; color: rgb(0, 3=

6, 81);">

Hi,



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

I hope you are doing well.



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

We Can Put Your Website On 1st Page Of Google To Drive Relevant Visitors=

To Your Site.



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

We will be pleased to explain our services in detail.



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

Let us know if you would be interested in getting detailed proposal.



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

Kindly revert in case of any clarification; I will be more than happy to as=

sist you complete details.



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

Many Thanks!



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

Colton



, Georgia, serif; font-size: 11pt; color: rgb(0, 36, 81);">

 



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">












--_000_JH0PR01MB58727CF4752ABD188CA10B19E7252JH0PR01MB5872apcp_--

Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 01:35:04 -0700

Received: from mail.humandock.com ([52.34.208.107]:58784 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCEGA-00000000PWH-23bb

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 01:34:32 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id BCC8553D9A; Sat, 16 Nov 2024 17:32:28 +0900 (JST)

To: dave@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--xpT7SQHa1m"

Message-Id: <20241116083230.BCC8553D9A@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 17:32:28 +0900 (JST)

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 Daniel Taco Danito Oo Hi Hello Dear, I am interested in some

of your products.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.0 BOGUS_MIME_VERSION Mime version header is bogus

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=



----xpT7SQHa1m

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui Daniel Taco Danito Oo








Hi










Hello Dear, I am interested in some of your products.

































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----xpT7SQHa1m



Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Sat, 16 Nov 2024 01:35:01 -0700

Received: from mail.humandock.com ([52.34.208.107]:58670 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCEGA-00000000PW7-23eC

for dave@nk.ca;

Sat, 16 Nov 2024 01:34:31 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id 5F0B353C43; Sat, 16 Nov 2024 17:32:25 +0900 (JST)

To: dave@nk.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--CvYZeW5I3m"

Message-Id: <20241116083226.5F0B353C43@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 17:32:25 +0900 (JST)

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 Daniel Taco Danito Oo Hi Hello Dear, I am interested in some

of your products.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.0 BOGUS_MIME_VERSION Mime version header is bogus

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=



----CvYZeW5I3m

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui Daniel Taco Danito Oo








Hi










Hello Dear, I am interested in some of your products.

































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----CvYZeW5I3m



Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 06:58:04 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCJIa-00000000604-0C9N

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 06:57:16 -0700

Resent-From: The Doctor

Resent-Date: Sat, 16 Nov 2024 06:57:16 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.humandock.com ([52.34.208.107]:50388 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCEAj-00000000PE4-1D8e

for doctor@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 01:29:37 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id C305C50E1A; Sat, 16 Nov 2024 17:26:53 +0900 (JST)

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--B07BEDSVjt"

Message-Id: <20241116082653.C305C50E1A@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 17:26:53 +0900 (JST)

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 Daniel Taco Danito Oo Hi Hello Dear, I am interested in some

of your products.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.0 BOGUS_MIME_VERSION Mime version header is bogus

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=



----B07BEDSVjt

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui Daniel Taco Danito Oo








Hi










Hello Dear, I am interested in some of your products.

































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----B07BEDSVjt



Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 06:58:11 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCJIW-000000005zX-1dWh

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 06:57:12 -0700

Resent-From: The Doctor

Resent-Date: Sat, 16 Nov 2024 06:57:12 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.humandock.com ([52.34.208.107]:50434 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCEAj-00000000PE9-1D8D

for doctor@nl2k.ab.ca;

Sat, 16 Nov 2024 01:29:39 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id 7193950E5B; Sat, 16 Nov 2024 17:26:52 +0900 (JST)

To: doctor@nl2k.ab.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--JnIgZMWBCm"

Message-Id: <20241116082654.7193950E5B@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 17:26:52 +0900 (JST)

X-Spam_score: 6.5

X-Spam_score_int: 65

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 Daniel Taco Danito Oo Hi Hello Dear, I am interested in some

of your products.



Content analysis details: (6.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.0 BOGUS_MIME_VERSION Mime version header is bogus

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkURhbmllbCBUYWNvIGZyb20gRWN1YWRvciBoYXMgc2VudCB5b3UgYW4gaW5xdWlyeQ==?=



----JnIgZMWBCm

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui Daniel Taco Danito Oo








Hi










Hello Dear, I am interested in some of your products.

































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----JnIgZMWBCm



Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 00:26:00 -0700

Received: from mail.humandock.com ([52.34.208.107]:41470 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCDAW-00000000LuC-3d3O

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 00:25:04 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id 2085B557CA; Sat, 16 Nov 2024 15:35:14 +0900 (JST)

To: dave@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkVBISUxJUCBXQU5ERVJTT04gZnJvbSBVbml0ZWQgU3RhdGVzIGhhcyBzZW50IHlvdSBhbiBpbnF1aXJ5?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--LCuwlozluz"

Message-Id: <20241116063516.2085B557CA@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 15:35:14 +0900 (JST)

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 MR PHILIP WANDERSON AMTEL VENTURE PTE LTD Hi



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

0.0 BOGUS_MIME_VERSION Mime version header is bogus

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkVBISUxJUCBXQU5ERVJTT04gZnJvbSBVbml0ZWQgU3RhdGVzIGhhcyBzZW50IHlvdSBhbiBpbnF1aXJ5?=



----LCuwlozluz

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui MR PHILIP WANDERSON AMTEL VENTURE PTE LTD








Hi










Dear friend, I am interested in some of your products.

Can I place a trial order?.
Kindly check and send your offer, and state your payment terms for a trial order.
































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----LCuwlozluz



Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 06:56:14 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCJH5-000000005r0-0Rlg

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 06:55:43 -0700

Resent-From: The Doctor

Resent-Date: Sat, 16 Nov 2024 06:55:42 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from [52.34.208.107] (port=45004 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCDG4-00000000MEJ-2yjc

for doctor@nl2k.ab.ca;

Sat, 16 Nov 2024 00:30:23 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id C134852E9C; Sat, 16 Nov 2024 15:30:58 +0900 (JST)

To: doctor@nl2k.ab.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkVBISUxJUCBXQU5ERVJTT04gZnJvbSBVbml0ZWQgU3RhdGVzIGhhcyBzZW50IHlvdSBhbiBpbnF1aXJ5?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--8ujmnRPthn"

Message-Id: <20241116063058.C134852E9C@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 15:30:58 +0900 (JST)

X-Spam_score: 11.9

X-Spam_score_int: 119

X-Spam_bar: +++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 MR PHILIP WANDERSON AMTEL VENTURE PTE LTD Hi



Content analysis details: (11.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.3 RDNS_NONE Delivered to internal network by a host with no rDNS

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

0.0 BOGUS_MIME_VERSION Mime version header is bogus

1.9 HTML_FONT_TINY_NORDNS Font too small to read, no rDNS

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkVBISUxJUCBXQU5ERVJTT04gZnJvbSBVbml0ZWQgU3RhdGVzIGhhcyBzZW50IHlvdSBhbiBpbnF1aXJ5?=



----8ujmnRPthn

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui MR PHILIP WANDERSON AMTEL VENTURE PTE LTD








Hi










Dear friend, I am interested in some of your products.

Can I place a trial order?.
Kindly check and send your offer, and state your payment terms for a trial order.
































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----8ujmnRPthn



Alibaba phish from Amazon.com

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sat, 16 Nov 2024 06:56:14 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCJH8-000000005rZ-1ETj

for dave@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 06:55:46 -0700

Resent-From: The Doctor

Resent-Date: Sat, 16 Nov 2024 06:55:46 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail.humandock.com ([52.34.208.107]:54190 helo=mail.auto-panther.com)

by doctor.nl2k.ab.ca with esmtp (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCDRI-00000000N3H-1VMs

for doctor@doctor.nl2k.ab.ca;

Sat, 16 Nov 2024 00:41:57 -0700

Received: by mail.auto-panther.com (Postfix, from userid 48)

id CA49552F1C; Sat, 16 Nov 2024 15:30:58 +0900 (JST)

To: doctor@doctor.nl2k.ab.ca

Subject: =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkVBISUxJUCBXQU5ERVJTT04gZnJvbSBVbml0ZWQgU3RhdGVzIGhhcyBzZW50IHlvdSBhbiBpbnF1aXJ5?=

X-PHP-Originating-Script: 48:anyigod22mailer.php

From: =?UTF-8?B?ZmVlZGJhY2tAc2VydmljZS5hbGliYWJhLmNvbQ==?=

MIME-Version: 1.0;

Content-type: multipart/mixed; boundary="--MU6Y7bMiBT"

Message-Id: <20241116063058.CA49552F1C@mail.auto-panther.com>

Date: Sat, 16 Nov 2024 15:30:58 +0900 (JST)

X-Spam_score: 9.1

X-Spam_score_int: 91

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Trade Center IP:100.***.***.86 【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！

立即回复 MR PHILIP WANDERSON AMTEL VENTURE PTE LTD Hi



Content analysis details: (9.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

[52.34.208.107 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.34.208.107 listed in dnsbl.ahbl.org]

0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail

domains are different

2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_TVD_MIME_NO_HEADERS BODY: No description available.

0.0 BOGUS_MIME_VERSION Mime version header is bogus

0.4 KHOP_HELO_FCRDNS Relay HELO differs from its IP's reverse DNS

0.1 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily

1.0 ALIBABA_IMG_NOT_RCVD_ALI Alibaba hosted image but message not from

Alibaba

Subject: {SPAM?} =?UTF-8?B?44CQQWxpYmFiYSBJbnF1aXJ5IE5vdGlmaWNhdGlvbuOAkVBISUxJUCBXQU5ERVJTT04gZnJvbSBVbml0ZWQgU3RhdGVzIGhhcyBzZW50IHlvdSBhbiBpbnF1aXJ5?=



----MU6Y7bMiBT

Content-type: text/html; charset="utf-8"

Content-Transfer-Encoding: 8bit

























































www.Alibaba.com








Trade Center IP:100.***.***.86
【阿里巴巴提醒您】及时、专业的回复有助于买家再次与您沟通，提升交易机会！












立即回复










Jacky Lui MR PHILIP WANDERSON AMTEL VENTURE PTE LTD








Hi










Dear friend, I am interested in some of your products.

Can I place a trial order?.
Kindly check and send your offer, and state your payment terms for a trial order.
































































Email Setting | Customer Services |








Help center | My Alibaba




You received this email because you are registered on Alibaba.com



Read our Privacy Policy and Terms of Use



Alibaba.com Hong Kong Limited.



26/F Tower One, Times Square, 1 Matheson Street, Causeway Bay, Hong Kong



Tel: (+852) 2215-5100

阿里巴巴香港有限公司

香港銅鑼灣勿地臣街1è™Ÿæ™‚ä»£å»£å ´1座26樓

電話：(+852) 2215-5100



----MU6Y7bMiBT



Job canvasing spam from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 Nov 2024 23:26:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCCFB-00000000IUP-0R3J

for dave@doctor.nl2k.ab.ca;

Fri, 15 Nov 2024 23:25:17 -0700

Resent-From: The Doctor

Resent-Date: Fri, 15 Nov 2024 23:25:17 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ej1-f65.google.com ([209.85.218.65]:54703)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tCBQN-00000000F5B-265C

for root@nk.ca;

Fri, 15 Nov 2024 22:33:05 -0700

Received: by mail-ej1-f65.google.com with SMTP id a640c23a62f3a-a9ed7d8d4e0so41892166b.1

for ; Fri, 15 Nov 2024 21:30:57 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1731735050; x=1732339850; darn=nk.ca;

h=to:subject:message-id:date:from:mime-version:from:to:cc:subject

:date:message-id:reply-to;

bh=dHo5aR4JGh36mZaY7u52fAnkcOyA380YsuGEGy/nLZ4=;

b=YkkPIeiyEC+Z7B+vlY7TzFmVLIDbchLD28/iNwJAi3sjBg8h/rEbhrOBLHiYGOgnCy

wp2Ps6scWNsXXTk0j2RsJu3tQf5T1N+Fu6kGeBTXsBLApBuyyMY4i+on+eY/rsoVuI2A

BTwop/BnUuZMNtsB28jiR1wM3DH+IMW+Ky4+kgilRav+rW3Pdy0eEElS5kHwgUrlFujs

YTBjw36V4nu2myXRn/e6CC0Pw3FGIq7ldNHEzw+z68gIu5LkszQPH/gNowE5pENWcSc6

YEZ3j1wcq4WVRUKdumKYd8anN6hCNKqILSP8trJxYTKUB5Cpt+SuMruqvtGwGsd4dKzV

UHew==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1731735050; x=1732339850;

h=to:subject:message-id:date:from:mime-version:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=dHo5aR4JGh36mZaY7u52fAnkcOyA380YsuGEGy/nLZ4=;

b=DFdJa3ev8aPhxq0RXRXn7VkIyF8O9sU3kGNcUflcJhWdRlBsMNiavU2XR8+5UhQHJK

nnLO3XeRj3tddyfauTku0BfSzyeyOMWLXLym/+8NrLenCNhlAOcg6V2VS7xIw3kiflHv

/Csq2yXpkIBTjjFVWxWKdGRynUpMuKHWHDzqeggaBCIYJI4Q5gvNLII5w3KgPT/sIk3U

z3bzPSaaLmwx8M7VQU2f/80B7XnJLkfYSHLAxriOXVhgdeZe1eoHx6TwblSQCYDA8OIp

awsC+Y39XzIru7u+zWdYREM0Z5F8wpfsaT7uhy33P8SJz5FAdR+aLqQzoVh6EvFj/6U2

V5Iw==

X-Gm-Message-State: AOJu0YxicwVVPHLbvO4r5J9RjkZcOp+jGeh6WcS+U8Hn5/lD7UqiX7/h

hwzHIC0K7yVeUTB8TI2Ml+Ho9/eVcM67lU/Ss+H6wj5QXz7RvFOx8QNyNceNHbO5DPhBjR04l1T

BLgG5lyR8H0lZbcB9IxrJIjN+ZyNPXrabE98CMg==

X-Google-Smtp-Source: AGHT+IFevgx2t5vSMBK+G+8qJiblBKvE8QHB8Rz+FzwXcxkoLFOS4dEuM3Df+5ptppnc9JlEYhDPCO468ZXGPyJrJkQ=

X-Received: by 2002:a17:907:608a:b0:aa1:dd58:aeb6 with SMTP id

a640c23a62f3a-aa48355296emr392203266b.57.1731735050227; Fri, 15 Nov 2024

21:30:50 -0800 (PST)

MIME-Version: 1.0

From: Kyle Miller

Date: Sat, 16 Nov 2024 06:30:38 +0100

Message-ID:

Subject: MURACO MEDICAL CO., LTD.

To: root@nk.ca

Content-Type: multipart/alternative; boundary="000000000000839696062700fc70"

X-Spam_score: 6.7

X-Spam_score_int: 67

X-Spam_bar: ++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hello Dave Yadallee I hope you're keeping well. I am Kyle

Miller, recruitment consultant at MURACO MEDICAL Co., Ltd. Currently, MURACO

MEDICAL Company is actively searching for a candidate or company to fulfill

the role of a part-time representativ [...]



Content analysis details: (6.7 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

[209.85.218.65 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

[209.85.218.65 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.218.65 listed in dnsbl.ahbl.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.218.65 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.218.65 listed in list.dnswl.org]

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[kyle.millerfumed1(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[kyle.millerfumed1(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

Subject: {SPAM?} MURACO MEDICAL CO., LTD.



--000000000000839696062700fc70

Content-Type: text/plain; charset="UTF-8"



Hello Dave Yadallee



I hope you're keeping well.



I am Kyle Miller, recruitment consultant at MURACO MEDICAL Co., Ltd.

Currently, MURACO MEDICAL Company is actively searching for a candidate or

company to fulfill the role of a part-time representative in the

CANADA/USA. This position offers enticing benefits and flexible work hours.



I'm reaching out to inquire if you might be interested in taking on the

responsibility of handling our company's affairs in the CANADA/USA. This

opportunity allows for remote work, enabling you to seamlessly integrate it

with your existing job or daily commitments. Should this proposition pique

your interest, I encourage you to get in touch with

ANDREW COOPER ( andrew.cooper@muracomedical.com ) to obtain further

information and a detailed job description.



Best Regards,

Kyle Miller

MURACO MEDICAL CO., LTD.

Payments Representative Required in CANADA/USA

Representative Required.



--000000000000839696062700fc70

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



















Hello Dave Yadallee

I hope you're keeping well.

I am Kyle=

Miller, recruitment consultant at MURACO MEDICAL Co., Ltd.
Currently,

MURACO MEDICAL Company is actively searching for a candidate or company

to fulfill the role of a part-time representative in the CANADA/USA.=20

This position offers enticing benefits and flexible work hours.

I=

9;m

reaching out to inquire if you might be interested in taking on the=20

responsibility of handling our company's affairs in the CANADA/USA. Thi=

s

opportunity allows for remote work, enabling you to seamlessly=20

integrate it with your existing job or daily commitments. Should this=20

proposition pique your interest, I encourage you to get in touch with
AN=

DREW COOPER (
_blank">andrew.cooper@muracomedical.com ) to obtain further information=

and a detailed job description.

Best Regards,






Kyle Miller
MURACO MEDICAL CO., LTD.
Payments Representative Required=

in CANADA/USA
Representative Required.





































--000000000000839696062700fc70--

Chinese Products spam from Microsoft Outlook

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 Nov 2024 18:46:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tC7sj-00000000JMm-2xPO

for dave@doctor.nl2k.ab.ca;

Fri, 15 Nov 2024 18:45:49 -0700

Resent-From: The Doctor

Resent-Date: Fri, 15 Nov 2024 18:45:49 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-eastasiaazolkn19010002.outbound.protection.outlook.com ([52.103.64.2]:50787 helo=HK2PR02CU002.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tC7g9-000000004rk-2Rz5

for root@nk.ca;

Fri, 15 Nov 2024 18:33:15 -0700

ARC-Seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none;

b=Ha2d3I0Cxk9yy+cOUVbQUYUfxT2ds3HS1v6RAonB8CYcywlYwyC5wCW62vTHg2ZH6apZ9H8pNfXz3Fs0BjJcYF1ofxHho7paIYMv74mpzZi5B5tIPrJtqJBRFIl+KZPKpCXWm/G3Qk8Wm88hX+Qt9xopWzWuus0CYAwhuqCGfxVoxoeq+egvbq6zlUseNz/m62TTv2gFNKgpAMTc+7c+LPY/EbrVtkY9gJyTaXZBej3i34aB5LTykdnnFdIzOxFFqqP8xBVDglLm/OKd4kgmF1h/pqNvoYwF0hEoJjJuHP0Sfu3QOhDqgfc+xbGnxESCsQwy6m/ABNuPkcV+lA8kLw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector10001;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=7h+Ddk6/UryBee0FzC5xERqooVhJBpsqlBgklQSqi6o=;

b=lO5NMjn1zdtjloPT2IrBoCBOVXuajU6XZhOnUH4w5TciRySQUvBnP71ayggD4NdoIhCPNK7SKmqkuemHCUVd+zqlc7wT3nvnBkD5J7peAk39MUwZcB42H/Ytg2PmgQdBLa/llWa/tF3BxZKgTrjjcdH36ccJtjmVgJPemUnIUgVimvQgoQQUBHc1wAFYKH/BGqBVsSlveZWjm4UhnnYMGpGOjl+RJ4+/UFcYODUmQ+LHbSflKZEYaxBtW460OkwH6B4mQpCnE8hBk2aDohmRKZx7R4XuARivjrFtwvlXqlHbJGFC8ixta3+M0k8W15YHmb/pMQIK07qCluqOrAptXA==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=7h+Ddk6/UryBee0FzC5xERqooVhJBpsqlBgklQSqi6o=;

b=u+we//On+n6HqgTcKzUjgBoA5V6oXP/DjCrdwnMH9zftrj+vxNfYXzUrAZ3kwFlsCC6wznlDZDZRADUuPDbEZKJKmhR7ieP/QCrKxB1u1MR9bDCZeel5Sb6/zYkFJ4ASttkGIGhpjVN9Ds8YIj/DNOuVnLO5OCCjENfUnABle153RS4+SHd5quvFS1mHhbs1P2JilngpWfXkvvY66bvHgi0AX5J0uI9KRmSl3VsJSscW8vTtLiszXnD02TgQGGvzsHunu8awtMuZFu1g4M3SLCLvmjQNnYQc2JnfaFywRo2JVhr1nE2VpHAoeqpVRWh8MBeVDTRsGqiHvXWg6lBh2w==

Received: from PSAPR06MB4520.apcprd06.prod.outlook.com (2603:1096:301:8e::11)

by PUZPR06MB5618.apcprd06.prod.outlook.com (2603:1096:301:e8::9) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.8158.19; Sat, 16 Nov

2024 01:30:14 +0000

Received: from PSAPR06MB4520.apcprd06.prod.outlook.com

([fe80::68c7:5979:17de:6833]) by PSAPR06MB4520.apcprd06.prod.outlook.com

([fe80::68c7:5979:17de:6833%6]) with mapi id 15.20.8158.017; Sat, 16 Nov 2024

01:30:14 +0000

From: sales dp

Subject: China-Direct Factory,

Thread-Topic: China-Direct Factory,

Thread-Index: AQHbN8cTCwctRzbw2EiJ4Qx3MVAY8Q==

Date: Sat, 16 Nov 2024 01:30:14 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: PSAPR06MB4520:EE_|PUZPR06MB5618:EE_

x-ms-office365-filtering-correlation-id: f41cd4f4-613b-4b97-d72f-08dd05de385d

x-ms-exchange-slblob-mailprops:

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

x-microsoft-antispam:

BCL:0;ARA:14566002|8062599003|461199028|8060799006|19110799003|15030799003|15080799006|37102599003|3412199025|440099028|102099032;

x-microsoft-antispam-message-info:

=?gb2312?B?NWs4U2NpR21RQ0FZc3RqMGIzRlVVVktGOGM1ZjhhU1VyTWpTaWV1UU5lejlw?=

=?gb2312?B?emtlWHdlZXlPdjI3dmNwMGl6RTZsaTRxdUlEZjFhV0RLcmZzbDg2bXVJeXpZ?=

=?gb2312?B?OU5zeDFHMHpkWHF5dG1XOWM4V1ZHRGk5NS9mTm1XTlJQZ1grc0QzektDRWdR?=

=?gb2312?B?M2l0RUNpUWd2TU9wei8wLzdGTmVvU2k1RUhnZmFvNTA4QndWcFVzWitMYmV6?=

=?gb2312?B?NVIzY1lqQ1NxYXgyTnlza05tWG45bllzOE5GdE9DbG1TUVBUaGprTENobXNs?=

=?gb2312?B?TGh1ZThoc0JmUmg0TVdpc0dSYjBKRWQ5ekRlUjdLQ2VHZklUS3doMlFNb2g1?=

=?gb2312?B?L3ROV1RsT0ttUE9wQktGdmtpb0xuN3hncFpSVzRNdER0L2wzL3EvTnpOcVVr?=

=?gb2312?B?eTdQd3ZrcHgvK0xKd1J0cGFydzM1RUxLTGhHaCtXRmRoRncvdjA1MG5DZmp4?=

=?gb2312?B?Rmt6MDR6WkxWMGtOT0FLVllJL01TU2tzckdNcTZjUHh2a1pRc3daUXZSSXNB?=

=?gb2312?B?R3dZUUw3WmlHUVNldFV3bk00clhTNm9Fc2lRWWZrcUJBbW1PeEphY3JWZHZt?=

=?gb2312?B?VmNkN3N6c0FyZW12cktldHYzSGJoVnBlb1R2SmRFbVV0OWNsZ29KZGJSZnpt?=

=?gb2312?B?SzRVaWFEQ2JKUmVDOVdFaW9SYklmNWVYZElEaFRPTm82bFk0V3J1ZzVid1dQ?=

=?gb2312?B?UE1RV2p5VFdrcUQvNkVVZVMwbFNHZUR2bTRoUE5YanA1ZkIxY3lYUnhsUVAx?=

=?gb2312?B?WktGblEwdEo4bjZaU0hFT0JMUHBmRDZWNlFRU1RUWkZ1Kys2ZVg5elIvRGcx?=

=?gb2312?B?czRPVDFsMm1DU05lUnowSDVaVitaNWtRRzV3QjdNV1NYb28rQ2F1ZUlQZUQv?=

=?gb2312?B?N2t1amF1aG9HUlB6TWJwNXExL1RWWVAvT2JadVh4N0dTRE14U01JaXI4cW81?=

=?gb2312?B?SGlkSGZNQVZxV3dNaWNHZ3htRUhEMGphSkoxdjVlVHM5TDVJemY0YVZXYjVJ?=

=?gb2312?B?bWNIeW9DaGpVbXk4UFpjR1BJdUFhUzJIYWU5dnp2dzVYZ1hzdHB1YUxveFo1?=

=?gb2312?B?Mnl4eXBteEJKUGFYV2oxcHJ6ZzQxNVI3TzJ1cGdJRDFrcHhJSnUzTGlSLzIy?=

=?gb2312?B?UStuTnZoT0xra0g1OGtUTC9BUzRyTC8wOHExRFNIUmtoSExjd3B4eGVQcnhS?=

=?gb2312?B?OGxGNUdoWi92b2NzWDVaTXBhaGhCTWl5RTJQaS9ZNjV2TmY3TTdheXd2eFBS?=

=?gb2312?B?cVVHeWdjYzhJWXFxVkQyQTVFWlJXRWFvY29TSXJ1bHIvOE1PUWxvTVE3aDdx?=

=?gb2312?B?QU9iejlUWkFwREdlUTFyWU55SUZCOTlZNjAvM1laUGFvK21RdEdmZGJjNklS?=

=?gb2312?B?QzZHL1pxOFhjaXIrZUxJNVQrcTVFZTBsZmxQQVRNZzd3UTNOTmpyWVc3cHoy?=

=?gb2312?B?ajBqYmpkZmtwc1ZiK1pvYzBERllmcGxhMlNQTGJ3PT0=?=

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?WTQxK2Z6SjdhcENhMDY3OHZobStsN1dxaWVvUUltUnMzVS9QYUVwTmo4NGJt?=

=?gb2312?B?Uy91d1F1ek1xdSs1UUx3ZVlCS20rUitWci9lNmQxbFI2ZXdDU25zNlVUSWJ0?=

=?gb2312?B?aE53SkdCdTllQWZQUy9Pd0NlN1ZmTXR5bXFzUm1yM1BFRkFxM0dhQkZ4NnYr?=

=?gb2312?B?NVBYT0MxUnh5ZHdFdThnVU1XcUdaMnBWWHBDdzBiaERQdkpSSU1JVUhhUXhT?=

=?gb2312?B?QzY3REthY0swNmtOa05mbDFzdEpIZ1V6Nm1ZdDFPaGVyNTFBOElwZUpmR0Ru?=

=?gb2312?B?WXBqdE03Tm5hSFUvK1BVUkFqOGNLSHc1ektXTFlVTEZBL2dSeDhWbXFRcUdK?=

=?gb2312?B?eTZibHpVVFBHenNXcVJoRS9TeUhyaS8xalZIYXBkaStvVys3ZkJWbVN2bkta?=

=?gb2312?B?SWxiaFNFbExrV01ONjRQTHVKZDUvZk9VQStSTms4UzVVb01XcDJtZFlPWmRo?=

=?gb2312?B?VlgvdXlvTnR0c2xtL1pQTUtnV1A5QkxON1NuRE9oU0M3RXF3aG9oZnI5UnJm?=

=?gb2312?B?WEUwUkJQdzdVa2hrZ2dRNnRBVi8vc3A2L0JJSVFaZ3pWTDRPZFEwaEdQTGcx?=

=?gb2312?B?NDVxMUZVSE1Ga05uYzBoRlg1dmk4K3BpckRoRmlLTURjVkxJVmZyOUR6Zk55?=

=?gb2312?B?NmRjR0prRElOc1VURlpOYmVXQTdkU1BWV0ZRQjRHRmF5Nm1RcjQ2QjVGK0ZS?=

=?gb2312?B?UVR0dWt0TWtKZU0vT0tSU3hsWmE5MUVmL3g1SE9tNXRQYkFGQ3RtRi96YW5M?=

=?gb2312?B?ZGF5bWZVa29mU1ZnMzZuTnBjdjBGZGFUWEZHV05XSEQ1ZCtZeHBYQTFwNUZQ?=

=?gb2312?B?OWI1MmJEdktJUUY2MmhhNXFGaURJR2ZlK3B0Smc0SDJnbkJtYzNsMklSNEtP?=

=?gb2312?B?Q2wycks4cUVTMWpyRGdWMktvRUVmOFdJZzdtSGwxWHhwRUd2eVBhczcvSjZs?=

=?gb2312?B?Uzh4Mmp2dWIyaklBa2tsT2hCcDdRR3IwSlBNd1hIbmUxZVhtU2psZEhITElt?=

=?gb2312?B?V3ZEWlVDaEVLZ0lPVUFacTM2ZUxEN1hEcjgzd1JVVTl3ZWp2d3NSWmYzS1RC?=

=?gb2312?B?OFliQk9TSHJRanVQak01d1lSZFdTMW5mb3lFN1dpUE4wNE9GemlvRjdFS0VB?=

=?gb2312?B?WUFjWkN3YlZwUEFGc3UxRmxYaU9aS3NIRERRaDBOc0x1U2I0Z05Jd3RmRldK?=

=?gb2312?B?REtoYTFHc2x6S2JMZ0hsMkdzRE41czQzVkFCeW1NL2ZudVpXWXhSSGF5TjlL?=

=?gb2312?B?WjlTdC96UFV2cnlMenM5emFPSjQ4TEduMHQxZjk3YU9oV2Q4ZjcwaENyN0gr?=

=?gb2312?B?NFJXcG1iN2xLK0daRnFML05oaEZpVUU5bjVXUjNBQkxONFJMT0drdmg0ME1m?=

=?gb2312?B?N0lvNCtUaDU3YVJLRW0yK3hvQ0FvaFl4bmhVVDlNWDZSeVBZWkpGd1FmQW5I?=

=?gb2312?B?aTJubko0a1Z4cGtGZUl3NWJnNWRncXVNRGxwSkVXY0NLblVieWkyMzhjRmo1?=

=?gb2312?B?dVZ0MFY2MHd2Nkhtd2h0Zms3TnBIRmlvYlJValpPcHpNWTdWcWpRSmVKQ0V2?=

=?gb2312?B?NFozcG9qNndPdVFHK29PRnRkd2J2L3hTZWJiTXFpcnBkbHo5SkRIdzJrdGhp?=

=?gb2312?B?UmtzNzRkazQvc3JucVFGbW1rYVNsaGc9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_PSAPR06MB45208F2C8A1A1190558DA63AA4252PSAPR06MB4520apcp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: PSAPR06MB4520.apcprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: f41cd4f4-613b-4b97-d72f-08dd05de385d

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Nov 2024 01:30:14.3016

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: PUZPR06MB5618

X-Spam_score: 8.2

X-Spam_score_int: 82

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi There, Hope you’re in good health. We’re Manufacturer

& Exporter of Bolt&Fasteners from China. Customize designs, label & packing

available. I’m sending our product catalog. If you’re interested, we

can provide you with a quote.



Content analysis details: (8.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

[52.103.64.2 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[52.103.64.2 listed in dnsbl.ahbl.org]

[52.103.64.2 listed in dnsbl.ahbl.org]

[52.103.64.2 listed in dnsbl.ahbl.org]

[52.103.64.2 listed in dnsbl.ahbl.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

[2603:1096:301:8e:0:0:0:11 listed in]

[dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[52.103.64.2 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[52.103.64.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[52.103.64.2 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[52.103.64.2 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[52.103.64.2 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[52.103.64.2 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.0 ARC_VALID Message has a valid ARC signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

1.2 MISSING_HEADERS Missing To: header

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[salesdp51(at)outlook.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[salesdp51(at)outlook.com]

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 HTML_MESSAGE BODY: HTML included in message

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

Subject: {SPAM?} China-Direct Factory,



--_000_PSAPR06MB45208F2C8A1A1190558DA63AA4252PSAPR06MB4520apcp_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64



SGkgVGhlcmUsDQpIb3BlIHlvdaGvcmUgaW4gZ29vZCBoZWFsdGguDQpXZaGvcmUgTWFudWZhY3R1

cmVyICYgRXhwb3J0ZXIgb2YgQm9sdCZGYXN0ZW5lcnMgZnJvbSBDaGluYS4NCkN1c3RvbWl6ZSBk

ZXNpZ25zLCBsYWJlbCAmIHBhY2tpbmcgYXZhaWxhYmxlLg0KDQpJoa9tIHNlbmRpbmcgb3VyIHBy

b2R1Y3QgY2F0YWxvZy4gSWYgeW91oa9yZSBpbnRlcmVzdGVkLCB3ZSBjYW4gcHJvdmlkZSB5b3Ug

d2l0aCBhIHF1b3RlLg0KDQpXZSBhcmUgbG9va2luZyBmb3J3YXJkIHRvIGhhdmUgZ29vZCBidXNp

bmVzcyB3aXRoIHlvdS4NCkJlc3QgUmVnYXJkcw0KQW5keQ0K



--_000_PSAPR06MB45208F2C8A1A1190558DA63AA4252PSAPR06MB4520apcp_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable
















nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi There,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hope you=A1=AFre in good health.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We=A1=AFre Manufacturer & Exporter of Bolt&Fasteners from China.
iv>


Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Customize designs, label & packing available.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I=A1=AFm sending our product catalog. If you=A1=AFre interested, we can pro=

vide you with a quote.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We are looking forward to have good business with you.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best Regards



nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Andy








--_000_PSAPR06MB45208F2C8A1A1190558DA63AA4252PSAPR06MB4520apcp_--

Domain name phish from Google Gmail

Posted by Dave Yadallee on
X-Mozilla-Status: 0001

X-Mozilla-Status2: 00000000

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 15 Nov 2024 18:29:14 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))

(envelope-from )

id 1tC7cY-000000003D0-0hVG

for dave@doctor.nl2k.ab.ca;

Fri, 15 Nov 2024 18:29:06 -0700

Resent-From: The Doctor

Resent-Date: Fri, 15 Nov 2024 18:29:06 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f41.google.com ([209.85.160.41]:45131)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.98 (FreeBSD))

(envelope-from )

id 1tC6bO-00000000KL2-1eg8

for sales@nk.ca;

Fri, 15 Nov 2024 17:24:03 -0700

Received: by mail-oa1-f41.google.com with SMTP id 586e51a60fabf-28896d9d9deso1052016fac.2

for ; Fri, 15 Nov 2024 16:21:58 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1731716512; x=1732321312; darn=nk.ca;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:from:to:cc:subject:date:message-id:reply-to;

bh=jG5pQFIYxzOk1M1TZRDcmGgKShFbbnctpKIl5Ybxvkc=;

b=VI4b79dquEckpYlzLPxEsBgLy5PZizv97/Z8aeZQHl/EF9SfkttamMY6a21oRfEHip

2x/AH0rzG4XRqxB04Yqw6ndCq0yZN4TKtUUBHxRQHxjVwPUURUkN1CQPjta2KGjLDAMf

kII/r3BshTwmHgD/uHEuz8C4McqOuRf5D7honTqvcHbS6WgvzHBlYQePOgND21VCseTQ

DTJDXN+SoervvLyEftf+/9UevHVyfSxw8vbC/5Y3KeVFcs2srYIDvwHH/DI4IDWhRLBM

EFxRD+CdD2vVitoB6XMRKRFY6y4DDLjqkCn7dgh6r4KSzAWpoqrK1Ky5n+mUjyPw4XQu

L74Q==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1731716512; x=1732321312;

h=to:subject:message-id:date:from:in-reply-to:references:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=jG5pQFIYxzOk1M1TZRDcmGgKShFbbnctpKIl5Ybxvkc=;

b=MJLo+eEita/BQnLL9mUOJ2b7YWzFe81boVZV1q8JZHpzE9pmJ9cvrJssEEHtfnm1c/

H9Wr8oAVi/BISxlK/0e0kY8dWOJG07qdFaKlxlBmxcXPsVykjKBQVPT4uwNXKGDpaUSx

GVsnt29e+Y+W9NWA/3kMdO3mTTD2PrJkaGDKhabqTQ/5SM0vu0S0uU0TdCxdxIwwNTn1

kE/E1XgMArgBMkfKkSeGeqmlGFhgQbrNy6tjRM8VVnEk4lWkCJi7DLiFfOEcaQ9JxM2P

avI1AXY0ZW7uDUxmSibem2NFYFAqjGG+OJlJ/V/Vxvydc3XYNYG96L+KqSzS6trtES9b

wIPA==

X-Gm-Message-State: AOJu0YxsaXbXgalwe5n0E/zz9lxRAk9w92aE3xSPrI5FYh+VzWFJv/8Z

yslS2Sgv0GifhnAtoUXVv42mhLsETgc1yP7vr2h8wusCnhZH6mDcBl9KTnX2/pmCohgPNWSjXEy

+HQsr3ZUfq6miVv5mt0YHE7cO1e+ROlsrHzDI/vPW

X-Google-Smtp-Source: AGHT+IE0z/uRf9qx01pYLofg67uKBCIwL9jt/knrmSlmC74qva4GH7RJWYvutI4/sWi/TiLOS/SU8jzaXvYoIDoGyTs=

X-Received: by 2002:a05:690c:6:b0:6ee:4a62:609d with SMTP id

00721157ae682-6ee55ca37cfmr42362557b3.27.1731711979924; Fri, 15 Nov 2024

15:06:19 -0800 (PST)

MIME-Version: 1.0

References:

In-Reply-To:

From: David Uwandu

Date: Sat, 16 Nov 2024 00:06:04 +0100

Message-ID:

Subject: Re: ALBERTA NETWORK CABLING

To: sales@nk.ca

Content-Type: multipart/alternative; boundary="0000000000006ab3460626fb9d64"

X-Spam_score: 9.2

X-Spam_score_int: 92

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi, I hope you had time to read our recent email regarding

AlbertaNetworkCabling.com's availability. Any thoughts on this?



Content analysis details: (9.2 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

[209.85.160.41 listed in will-spam-for-food.eu.org]

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.41 listed in dnsbl.ahbl.org]

[209.85.160.41 listed in dnsbl.ahbl.org]

[209.85.160.41 listed in dnsbl.ahbl.org]

[209.85.160.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.41 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.41 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.41 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.41 listed in dnsbl.ahbl.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.41 listed in list.dnswl.org]

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.41 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.6 SUBJ_ALL_CAPS Subject is all capitals

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[davebaan33(at)gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[davebaan33(at)gmail.com]

0.0 HTML_FONT_LOW_CONTRAST BODY: HTML font color similar or identical to

background

0.0 HTML_MESSAGE BODY: HTML included in message

2.5 LONGLN_LOW_CONTRAST Excessively long line + hidden text

Subject: {SPAM?} Re: ALBERTA NETWORK CABLING



--0000000000006ab3460626fb9d64

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Hi,





I hope you had time to read our recent email regarding

AlbertaNetworkCabling.com's availability.





Any thoughts on this?



We are open to offers if you would like to make an offer.





www.AlbertaNetworkCabling.com





Do let me know your best offer.





Regards,





David



Baan Domains

=E1=90=A7



On Wed, Nov 13, 2024 at 4:05=E2=80=AFPM David Uwandu =

wrote:



> Hello.

>

>

> The Premium Domain name AlbertaNetworkCabling.com is up for sale.

>

>

> This short and memorable domain name has strong keywords relevant to your

> business in Alberta.

>

> It is a well-searched term in the Search Engines to help improve your

> search engine optimization (SEO) and online presence.

>

>

> You can redirect it to your main website to capture more customers and

> targeted visitors or use the domain to build a new website gaining an

> advantage over your competitors.

>

>

> PRICE: $699

>

>

> Visit www.AlbertaNetworkCabling.com for INSTANT ownership of the Domain

> Name.

>

>

> We are also contacting other companies that may be interested.

>

>

> Let me know if you've got questions.

>

>

>

> Regards,

>

>

> David Baan

>

> Domain Broker/ Expert

>

> BAAN Domains Inc.

> =E1=90=A7

>



--0000000000006ab3460626fb9d64

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable




;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-ad=

just:none;font-kerning:auto;font-feature-settings:normal;font-stretch:norma=

l;font-size:13px;line-height:normal;font-family:"Helvetica Neue";=

margin:0px">Hi,


al;font-variant-east-asian:normal;font-variant-alternates:normal;font-size-=

adjust:none;font-kerning:auto;font-feature-settings:normal;font-stretch:nor=

mal;font-size:13px;line-height:normal;font-family:"Helvetica Neue"=

;;margin:0px;min-height:15px">


ariant-numeric:normal;font-variant-east-asian:normal;font-variant-alternate=

s:normal;font-size-adjust:none;font-kerning:auto;font-feature-settings:norm=

al;font-stretch:normal;font-size:13px;line-height:normal;font-family:"=

Helvetica Neue";margin:0px">I hope you had time to read our recent ema=

il regarding AlbertaNetworkCabling.com's availability.


mail-p2" style=3D"font-variant-numeric:normal;font-variant-east-asian:norma=

l;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;fo=

nt-feature-settings:normal;font-stretch:normal;font-size:13px;line-height:n=

ormal;font-family:"Helvetica Neue";margin:0px;min-height:15px">
r>


nt-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;f=

ont-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-size=

:13px;line-height:normal;font-family:"Helvetica Neue";margin:0px"=

>Any thoughts on this?=C2=A0


-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:norm=

al;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;fon=

t-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvet=

ica Neue";margin:0px">We are open to offers if you would like to make =

an offer.


t-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust=

:none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;fo=

nt-size:13px;line-height:normal;font-family:"Helvetica Neue";marg=

in:0px;min-height:15px">


-numeric:normal;font-variant-east-asian:normal;font-variant-alternates:norm=

al;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;fon=

t-stretch:normal;font-size:13px;line-height:normal;font-family:"Helvet=

ica Neue";margin:0px;min-height:15px">
workCabling.com">www.AlbertaNetworkCabling.com


style=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-v=

ariant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-featu=

re-settings:normal;font-stretch:normal;font-size:13px;line-height:normal;fo=

nt-family:"Helvetica Neue";margin:0px;min-height:15px">


class=3D"gmail-p1" style=3D"font-variant-numeric:normal;font-variant-east-=

asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kern=

ing:auto;font-feature-settings:normal;font-stretch:normal;font-size:13px;li=

ne-height:normal;font-family:"Helvetica Neue";margin:0px">Do let =

me know your best offer.


eric:normal;font-variant-east-asian:normal;font-variant-alternates:normal;f=

ont-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font-st=

retch:normal;font-size:13px;line-height:normal;font-family:"Helvetica =

Neue";margin:0px;min-height:15px">


=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-variant=

-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-set=

tings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-fam=

ily:"Helvetica Neue";margin:0px">Regards,


" style=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-=

variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feat=

ure-settings:normal;font-stretch:normal;font-size:13px;line-height:normal;f=

ont-family:"Helvetica Neue";margin:0px">


-p1" style=3D"font-variant-numeric:normal;font-variant-east-asian:normal;fo=

nt-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-f=

eature-settings:normal;font-stretch:normal;font-size:13px;line-height:norma=

l;font-family:"Helvetica Neue";margin:0px">David


mail-p1" style=3D"font-variant-numeric:normal;font-variant-east-asian:norma=

l;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;fo=

nt-feature-settings:normal;font-stretch:normal;font-size:13px;line-height:n=

ormal;font-family:"Helvetica Neue";margin:0px">Baan Domains


div>
3D""
tyle=3D"width:0px;max-height:0px;overflow:hidden" src=3D"https://mailfoogae=

.appspot.com/t?sender=3DaZGF2ZWJhYW4zM0BnbWFpbC5jb20%3D&type=3Dzerocont=

ent&guid=3D1ed4e47c-d8f2-403b-9f4d-b8a8f9d2c4c2">
" size=3D"1">=E1=90=A7


=3D"ltr" class=3D"gmail_attr">On Wed, Nov 13, 2024 at 4:05=E2=80=AFPM David=

Uwandu <davebaan33@gmail.com
>> wrote:

0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
v dir=3D"ltr">


-variant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:=

none;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;fon=

t-size:13px;line-height:normal;font-family:"Helvetica Neue";margi=

n:0px">Hello.


asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kern=

ing:auto;font-feature-settings:normal;font-stretch:normal;font-size:13px;li=

ne-height:normal;font-family:"Helvetica Neue";margin:0px;min-heig=

ht:15px">


asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-kern=

ing:auto;font-feature-settings:normal;font-stretch:normal;font-size:13px;li=

ne-height:normal;font-family:"Helvetica Neue";margin:0px">The Pre=

mium Domain name AlbertaNetworkCabling.com is up for sale.=C2=A0


e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-fa=

mily:"Helvetica Neue";margin:0px;min-height:15px">


e=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-varian=

t-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-se=

ttings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-fa=

mily:"Helvetica Neue";margin:0px">This short and memorable domain=

name has strong keywords relevant to your business in Alberta.=C2=A0


style=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-v=

ariant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-featu=

re-settings:normal;font-stretch:normal;font-size:13px;line-height:normal;fo=

nt-family:"Helvetica Neue";margin:0px">It is a well-searched term=

in the Search Engines to help improve your search engine optimization (SEO=

) and online presence.


ant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;=

font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-siz=

e:13px;line-height:normal;font-family:"Helvetica Neue";margin:0px=

;min-height:15px">


ant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:none;=

font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-siz=

e:13px;line-height:normal;font-family:"Helvetica Neue";margin:0px=

">You can redirect it to your main website to capture more customers and ta=

rgeted visitors or use the domain to build a new website gaining an advanta=

ge over your competitors.


ariant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:no=

ne;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-=

size:13px;line-height:normal;font-family:"Helvetica Neue";margin:=

0px;min-height:15px">


ariant-east-asian:normal;font-variant-alternates:normal;font-size-adjust:no=

ne;font-kerning:auto;font-feature-settings:normal;font-stretch:normal;font-=

size:13px;line-height:normal;font-family:"Helvetica Neue";margin:=

0px">PRICE: $699


st-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-k=

erning:auto;font-feature-settings:normal;font-stretch:normal;font-size:13px=

;line-height:normal;font-family:"Helvetica Neue";margin:0px;min-h=

eight:15px">


st-asian:normal;font-variant-alternates:normal;font-size-adjust:none;font-k=

erning:auto;font-feature-settings:normal;font-stretch:normal;font-size:13px=

;line-height:normal;font-family:"Helvetica Neue";margin:0px">Visi=

t=C2=A0w=

ww.AlbertaNetworkCabling.com for=C2=A0INSTANT ownership of the Domain N=

ame.


mal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;=

font-feature-settings:normal;font-stretch:normal;font-size:13px;line-height=

:normal;font-family:"Helvetica Neue";margin:0px;min-height:15px">=



mal;font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;=

font-feature-settings:normal;font-stretch:normal;font-size:13px;line-height=

:normal;font-family:"Helvetica Neue";margin:0px">We are also cont=

acting other companies that may be interested.


numeric:normal;font-variant-east-asian:normal;font-variant-alternates:norma=

l;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font=

-stretch:normal;font-size:13px;line-height:normal;font-family:"Helveti=

ca Neue";margin:0px;min-height:15px">


numeric:normal;font-variant-east-asian:normal;font-variant-alternates:norma=

l;font-size-adjust:none;font-kerning:auto;font-feature-settings:normal;font=

-stretch:normal;font-size:13px;line-height:normal;font-family:"Helveti=

ca Neue";margin:0px">Let me know if you've got questions.


yle=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-vari=

ant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-=

settings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-=

family:"Helvetica Neue";margin:0px;min-height:15px">


yle=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-vari=

ant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-=

settings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-=

family:"Helvetica Neue";margin:0px;min-height:15px">


yle=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-vari=

ant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-=

settings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-=

family:"Helvetica Neue";margin:0px">Regards,


=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-variant=

-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature-set=

tings:normal;font-stretch:normal;font-size:13px;line-height:normal;font-fam=

ily:"Helvetica Neue";margin:0px;min-height:16px">

<=

p style=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-=

variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feat=

ure-settings:normal;font-stretch:normal;font-size:13px;line-height:normal;f=

ont-family:"Helvetica Neue";margin:0px">David Baan


tyle=3D"font-variant-numeric:normal;font-variant-east-asian:normal;font-var=

iant-alternates:normal;font-size-adjust:none;font-kerning:auto;font-feature=

-settings:normal;font-stretch:normal;font-size:13px;line-height:normal;font=

-family:"Helvetica Neue";margin:0px">Domain Broker/ Expert=


font-variant-alternates:normal;font-size-adjust:none;font-kerning:auto;font=

-feature-settings:normal;font-stretch:normal;font-size:13px;line-height:nor=

mal;font-family:"Helvetica Neue";margin:0px">BAAN Domains Inc.=





3D""
=3D"width: 0px; max-height: 0px; overflow: hidden;" src=3D"https://mailfoog=

ae.appspot.com/t?sender=3DaZGF2ZWJhYW4zM0BnbWFpbC5jb20%3D&type=3Dzeroco=

ntent&guid=3D63d80c56-9077-44c4-97da-ab2e9f1f8be8">
ff" size=3D"1">=E1=90=A7




--0000000000006ab3460626fb9d64--