lens spam from China
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 07 Nov 2022 04:26:01 -0700
Received: from [103.45.185.160] (port=59541 helo=mk.mickynuc.top)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from)
id 1os0BW-000DAj-Q1
for dave@doctor.nl2k.ab.ca;
Mon, 07 Nov 2022 04:21:02 -0700
Received: from SKY-20160224KJU (119.118.54.209) by mk.mickynuc.top id hd3l1k0e97cj for; Mon, 7 Nov 2022 19:18:07 +0800 (envelope-from )
From: "Kiran"
Subject: Endoscope rod lens
To: dave@doctor.nl2k.ab.ca
Content-Type: text/html; charset=UTF-8
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Sender: mk4@mk.mickynuc.top
Reply-To: kiran@ybtoptics.com
Date: Mon, 7 Nov 2022 19:12:26 +0800
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913
Content-Disposition: inline
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear friend, We are professional manufacturerof Endoscope
parts in China. We provide Rigid rod lens with reliable quality. Objective
lenses and other endoscope parts are also provided. If you need th [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.45.185.160 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 FROM_SUSPICIOUS_NTLD From abused NTLD
0.1 MISSING_MID Missing Message-Id: header
1.0 XPRIO Has X-Priority header
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
Subject: {SPAM?} Endoscope rod lens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Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 07 Nov 2022 04:26:01 -0700
Received: from [103.45.185.160] (port=59541 helo=mk.mickynuc.top)
by doctor.nl2k.ab.ca with esmtp (Exim 4.95 (FreeBSD))
(envelope-from
id 1os0BW-000DAj-Q1
for dave@doctor.nl2k.ab.ca;
Mon, 07 Nov 2022 04:21:02 -0700
Received: from SKY-20160224KJU (119.118.54.209) by mk.mickynuc.top id hd3l1k0e97cj for
From: "Kiran"
Subject: Endoscope rod lens
To: dave@doctor.nl2k.ab.ca
Content-Type: text/html; charset=UTF-8
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Sender: mk4@mk.mickynuc.top
Reply-To: kiran@ybtoptics.com
Date: Mon, 7 Nov 2022 19:12:26 +0800
X-Priority: 3
X-MSMail-Priority: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913
Content-Disposition: inline
X-Spam_score: 11.6
X-Spam_score_int: 116
X-Spam_bar: +++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear friend, We are professional manufacturerof Endoscope
parts in China. We provide Rigid rod lens with reliable quality. Objective
lenses and other endoscope parts are also provided. If you need th [...]
Content analysis details: (11.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[103.45.185.160 listed in bl.score.senderscore.com]
1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL,
https://senderscore.org/blocklistlookup/
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
0.0 HTML_MESSAGE BODY: HTML included in message
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.4 FROM_SUSPICIOUS_NTLD From abused NTLD
0.1 MISSING_MID Missing Message-Id: header
1.0 XPRIO Has X-Priority header
2.5 TO_NO_BRKTS_MSFT To: misformatted and supposed Microsoft tool
Subject: {SPAM?} Endoscope rod lens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Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments