Machining parts spam from Gmail
Posted by Dave Yadallee onEnvelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sun, 09 Oct 2022 14:11:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1ohc8N-000HnN-J4
for dave@doctor.nl2k.ab.ca;
Sun, 09 Oct 2022 13:38:47 -0600
Resent-From: The Doctor
Resent-Date: Sun, 9 Oct 2022 13:38:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f194.google.com ([209.85.210.194]:36425)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1ohWSo-000EYg-9Q
for root@doctor.nl2k.ab.ca;
Sun, 09 Oct 2022 07:35:35 -0600
Received: by mail-pf1-f194.google.com with SMTP id y1so1587756pfr.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=goodbomold.com; s=google;
h=mime-version:returnreceipt:disposition-notification-to:reply-to
:date:subject:to:from:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=NDKeiIo5dvFmzfJn+qRuTsQk6AcF4wjhQhXlDGnXmLk=;
b=Nn7Sx+wTLK38WUbejUQJzfo3tK573absRn6jbIOhCkNjmZix3JhQCzjk12DGpThZCj
alI7+HG0htS5cDeOWiX4x5cKq+XmFqMRmyGttTzxXtfh+Ei5tHxn4q0EmBi2Mv7X6Yuo
G1I/8GhRmkD5O7yOUo0IOYRxcAGC0moTM3gbU=
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=mime-version:returnreceipt:disposition-notification-to:reply-to
:date:subject:to:from:message-id:x-gm-message-state:from:to:cc
:subject:date:message-id:reply-to;
bh=NDKeiIo5dvFmzfJn+qRuTsQk6AcF4wjhQhXlDGnXmLk=;
b=a0hkqHZ9YvT4GZyxGvzj7nQo4zyCCdC+lxEF9ewKH7pdw+fd98ah7t9DHp+o8krBgZ
R1l6fBG5mdC4HlM7Ib4xkABYm+hl0mXGBBVjfmcqS+3ZWDNq7nYkw+dpR+SKGRFajnIQ
xLemdqNyEB7EpTTe2sehMyjFfuHaiHD3XQTTYLVIzqS6Pi1tyo/o3zN5tsqKPTUrFRQN
ZOYxkzkgEAHrJlFXU2TAWlsRlPMdFsgL5y+0qqS5LFUTrqqWuuTvdXXX404cPnRG5yof
Jk7Q630tvpTHSCZtsymtswHUakioVDynzZVAiDGc8LrZoYM2caFjKaQfU2fAmJ4ffBYP
vY7g==
X-Gm-Message-State: ACrzQf2y8ksPe/LtbpFe7aMzdTdR+76fplMFQnM8FbbjInaCKQqB0JWV
mZUwo0I3Hpr4MSBDyK3e+ya+6sqntyUOSGjq
X-Google-Smtp-Source: AMsMyM5ItHgPZ7L0NtsxLU/7zWvb75vLpRPbjDpc/6qLeWYxFiQfMgplPBqUcUWmLR267EyG/1KtFQ==
X-Received: by 2002:a65:68cb:0:b0:460:b552:fbf4 with SMTP id k11-20020a6568cb000000b00460b552fbf4mr5065013pgt.457.1665322475335;
Sun, 09 Oct 2022 06:34:35 -0700 (PDT)
Received: from ocnq (awork116105.netvigator.com. [203.198.99.105])
by smtp.gmail.com with ESMTPSA id n15-20020a170902e54f00b001785fa792f4sm4789520plf.243.2022.10.09.06.34.33
for
(version=TLS1 cipher=ECDHE-ECDSA-AES128-SHA bits=128/128);
Sun, 09 Oct 2022 06:34:34 -0700 (PDT)
Message-ID: <6342cdea.170a0220.582ab.82b4@mx.google.com>
X-Google-Original-Message-ID: EC8C3F68B58B46E2829919280BB8B1DE@ocnq
From: "emma@blueskyalloy.com"
To:
Subject: First Choise for Precision Machining Parts
Date: Sun, 09 Oct 2022 21:34:32 +0800
Reply-To: emma@blueskyalloy.com
Disposition-Notification-To: emma@blueskyalloy.com
ReturnReceipt: 1
X-Priority: 3
X-MSMail-Priority: Normal
MIME-Version: 1.0
Content-type: multipart/alternative; boundary=2c29de559d4e55fd535564a7a6206411
X-Mailer: Microsoft Outlook Express 6.00.3790.4657
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913
X-Spam_score: 7.7
X-Spam_score_int: 77
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview:
Dear Manager,
Nice to meet you.
Please allow
me to introduce our factory------Shenzhen Blue Sky Precision Technology
Co.,Ltd shortly.
Why can we become your first [...]
Content analysis details: (7.7 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 HK_RANDOM_FROM From username looks random
0.6 HK_RANDOM_ENVFROM Envelope sender username looks random
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.194 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HTML_MESSAGE BODY: HTML included in message
2.0 BASE64_LENGTH_79_INF BODY: base64 encoded email part uses line
length greater than 79 characters
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.7 PDS_FROM_2_EMAILS From header has multiple different addresses
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
Subject: {SPAM?} First Choise for Precision Machining Parts
This is a multi-part message in MIME format.
--2c29de559d4e55fd535564a7a6206411
Content-type: text/plain;
charset=gb2312
content-transfer-encoding:base64
PFA+RGVhciBNYW5hZ2VyLDwvUD4NCjxQPk5pY2UgdG8gbWVldCB5b3UuIDwvUD4NCjxQPlBsZWFzZSBhbGxvdyBtZSB0byBpbnRyb2R1Y2Ugb3VyIGZhY3RvcnktLS0tLS08VT5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkJm5ic3A7IDwvVT5zaG9ydGx5LjwvUD4NCjxQPldoeSBjYW4gd2UgYmVjb21lIHlvdXIgZmlyc3QgY2hvaXNlIGZvciBwcmVjaXNpb24gbWFjaGluaW5nIHBhcnRzPzwvUD4NCjxQPjEpIDxTVFJPTkc+UHJvZmVzc2lvbmFsIFByb2Nlc3NpbmcuIDwvU1RST05HPjxCUj5TcGVjaWFsaXppbmcgaW4gcHJlY2lzaW9uIG1lY2hhbmljYWwgcGFydHMgcHJvY2Vzc2luZywgbm9uLXN0YW5kYXJkIHBhcnRzIHByb2Nlc3NpbmcsIHRpdGFuaXVtIGFsbG95IDxCUj5wcm9jZXNzaW5nLCB2YXJpb3VzIGNhc3RpbmcgcHJvY2Vzc2luZywgc2hlZXQgbWV0YWwgcHJvY2Vzc2luZy48L1A+DQo8UD4yKSA8U1RST05HPk9uZS1zdG9wIGZhY3RvcnkuIDwvU1RST05HPjxCUj5Qcm9mZXNzaW9uYWwgc3VyZmFjZSB0cmVhdG1lbnQgc3VwcGxpZXIsIGluY2x1ZGluZyBlbGVjdHJvcGxhdGluZywgb3hpZGF0aW9uLCBvaWwgc3ByYXlpbmcsIHBvd2RlciBzcHJheWluZzwvUD4NCjxQPjMpIDxTVFJPTkc+SGlnaC1RdWFsaXR5IFNldmljZS4gPC9TVFJPTkc+PEJSPkdldHRpbmcgR0IvVDE5MDAxLTIwMTYgaWR0IElTTzkwMDE6MjAxNSwgR0IvVDI0MDAxLTIwMTYgaWR0IElTTzE0MDAxOjIwMTUgY2VydGlmaWNhdGlvbi48L1A+DQo8UD40KSA8U1RST05HPkNvbXBldGl0aXZlIFByaWNlLjwvU1RST05HPjxCUj5FdmFsdWF0aW5nIHRoZSBxdW90YXRpb24gYnkgb3VyIHJpY2ggZXhwZXJpZW5jZSBlbmdpbmVlcmluZyB0ZWFtLjwvUD4NCjxQPjUpIDxTVFJPTkc+UHJlY2lzaW9uIEVxdWlwcG1lbnRzLjwvU1RST05HPjxCUj5DTkMgbWFjaGluaW5nIGNlbnRlciwgQ05DIGxhdGhlLCB3aXJlIGN1dHRpbmcsIGhpZ2gtcHJlY2lzaW9uIGludGVybmFsICZhbXA7IGV4dGVybmFsIGdyaW5kaW5nLjwvUD4NCjxQPklmIHlvdSBoYXZlIGFueSBwcm9qZWN0IG9uIGhhbmQsIHBsZWFzZSBkb24ndCBoZXNpdGF0ZSB0byBjb250YWN0IHVzLiBXZSB3aWxsIHByb3ZpZGUgeW91IHRoZSBtb3N0IGZhdm9yYWJsZTxCUj5wcmljZSBhbmQgdGhlIGJlc3Qgc2VydmljZS48L1A+DQo8UD5Mb29raW5nIGZvcndhcmQgdG8geW91ciBzb29uIHJlcGx5LjwvUD4NCjxQPlNpbmNlcmVseSB5b3Vycyw8QlI+RW1tYTwvUD4NCjxQPjxCUj5TaGVuemhlbiBCbHVlIFNreSBQcmVjaXNpb24gVGVjaG5vbG9neSBDby4sTHRkPEJSPkhvdWdhbmcgWGluZ3hpYW4gSW5kdXN0cmlhbCBab25lLCBTaGlzaGFuIHRvd24sIDxCUj5OYW5oYWkgZGlzdHJpY3QsIEZvc2hhbiBjaXR5LCBHdWFuZ2RvbmcgcHJvdmluY2UuPC9QPg0KPFA+VGVsOiArODYtMDc1Ny04MTc5MjE2OTxCUj5GYXg6ICs4Ni0wNzU3LTg1NTA1OTQ4PEJSPkVtYWlsOiA8QSBocmVmPSJtYWlsdG86ZW1tYUBibHVlc2t5YWxsb3kuY29tIj5lbW1hQGJsdWVza3lhbGxveS5jb208L0E+PEJSPldlYjogPEEgaHJlZj0iaHR0cDovL3d3dy5ibHVlc2t5YWxsb3kuY29tIj53d3cuYmx1ZXNreWFsbG95LmNvbTwvQT4mbmJzcDsgPC9QPg0KPFA+Jm5ic3A7PC9QPg0KDQoNCjxici8+PGJyLz48YnIvPiA8YSBocmVmPSdVbnN1YnNjcmliZS5hc3A/bWFpbD1yb290QGRvY3Rvci5ubDJrLmFiLmNhJyB0YXJnZXQ9X2JsYW5rPlVuc3Vic2NyaWJlLmFzcD9tYWlsPXJvb3RAZG9jdG9yLm5sMmsuYWIuY2E8L2E+
--2c29de559d4e55fd535564a7a6206411
Content-type: text/html;
charset=gb2312
content-transfer-encoding:base64
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
--2c29de559d4e55fd535564a7a6206411--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments