Chinese products spam from Gmail

Return-path:

Envelope-to: dave@nk.ca

Delivery-date: Thu, 16 Feb 2023 06:52:32 -0700

Received: from mail-il1-f193.google.com ([209.85.166.193]:39431)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pSegU-000MOC-1q

for dave@nk.ca;

Thu, 16 Feb 2023 06:52:20 -0700

Received: by mail-il1-f193.google.com with SMTP id j12so402222ila.6

for ; Thu, 16 Feb 2023 05:50:16 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=card-holder-top.20210112.gappssmtp.com; s=20210112;

h=date:reply-to:mime-version:to:subject:from:message-id:from:to:cc

:subject:date:message-id:reply-to;

bh=aGTyR5/O6Q1nwaPAc15cgez3hVEOvaR9eHGXULVqXPs=;

b=atcrwkRvizRoTk4CWoHgXxQi/s8+bUcEhocg3gmCVuDUKIPiXOWaFhGmG1hkgVkkH9

jU281b02OdmiK7ltFsAn9QMTlNKqqJjAeIFv7GESMMgHDacwyOnRDMNgqwcxopNpCYSG

LiJjZvQB0q+o46YDX48a33X3hZ6Hx0+vEa6E6NmAk5Iq3zedLCbcUdJNeEzs24kxm4cJ

naxmpevCE3hcC3WxJOW0w3pqKBU9XSkSiHQJ+lUtKvbxr+Nur2ekJ7Jn4lHabXY8PDj0

m8qNI+d1ph7x5DLBs9sblIBGHkn4a00X9I4QV0Ibhtk/LLsVr2Fh3JEp2oAbNp2hsleE

Jsuw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:reply-to:mime-version:to:subject:from:message-id

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=aGTyR5/O6Q1nwaPAc15cgez3hVEOvaR9eHGXULVqXPs=;

b=hendfrfnSI2Yzb726Iax/qOFAQLSFqC17zTs7+5jvbXynqKQgAZE+ezQ708H1WanLs

phw6PqvDrp9xGIcMhVVQIa2QkT574p6HeW1lfb1UIo78zbU/t2FzQbbRMNBw5aO/vcOE

TdT9w5a04nUZ2+pqFiFtMQ+S6A5l9/F1wf4kfEzMsbUbVaiwa7Svfn7ci3P7hA05QhyI

DHKNeQ0i/nEcSxc3b072DbM+cYYBApQzv0bgZ78lFUGAB2EEhzAK+Y2YdGYZo8+9kZI8

IIAYcd3JVm+2P44+a7aAbG8S4DJlfBS8L/Veo5Y1dWy75J7j6VdQFTfkun6LXPr4JfbG

rnnA==

X-Gm-Message-State: AO0yUKXR3fBUoM5A/iqPVrcKmYfkFrsRDo9Ty306x+DPnnFFAUedibG/

neHmRAbQJPsLgUFHtsvqHUH7lDmqG4dyuHfMWUwQ1A==

X-Google-Smtp-Source: AK7set8Jp1fKE4+WDgBooYnNycSgoSJA+le2H0LcqrBBjEWaOOqnb3Wb+xquDMSChNwPggo33U3GgA==

X-Received: by 2002:a05:6e02:1c8f:b0:315:8721:7e1f with SMTP id w15-20020a056e021c8f00b0031587217e1fmr1369491ill.18.1676555410104;

Thu, 16 Feb 2023 05:50:10 -0800 (PST)

Received: from card-holder75 ([183.228.33.219])

by smtp.googlemail.com with ESMTPSA id u12-20020a02c94c000000b0036cc14af7adsm555381jao.149.2023.02.16.05.50.08

for

(version=TLS1 cipher=AES128-SHA bits=128/128);

Thu, 16 Feb 2023 05:50:09 -0800 (PST)

Message-ID: <63ee3491.020a0220.ffc2b.0f93@mx.google.com>

From: "card-holder"

Subject: China's leading card holder Manufacturer

To: dave@nk.ca

Content-Type: multipart/alternative; charset=UTF-8; boundary="Lk4RqtNlhl27C=_39pfil8jeEwi2kyNc4n"

MIME-Version: 1.0

Reply-To: "card-holder"

Date: Thu, 16 Feb 2023 21:48:48 +0800

X-Spam_score: 5.9

X-Spam_score_int: 59

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Dear customers, We are China’s leading card holder Manufacturer.

We also can make passport holder , luggage tag , etc... you can let us make

it if you need. thanks.



Content analysis details: (5.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

3.6 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS

[183.228.33.219 listed in zen.spamhaus.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.166.193 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.166.193 listed in wl.mailspike.net]

0.0 FROM_FMBLA_NEWDOM From domain was registered in last 7 days

0.0 HTML_MESSAGE BODY: HTML included in message

0.5 FROM_SUSPICIOUS_NTLD From abused NTLD

2.0 FROM_SUSPICIOUS_NTLD_FP From abused NTLD

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

Subject: {SPAM?} China's leading card holder Manufacturer



This is a multi-part message in MIME format



--Lk4RqtNlhl27C=_39pfil8jeEwi2kyNc4n

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: Base64

Content-Disposition: inline



RGVhciBjdXN0b21lcnMsDQogDQpXZSBhcmUgQ2hpbmHigJlzIGxlYWRpbmcgY2FyZCBob2xkZXIg

TWFudWZhY3R1cmVyLg0KV2UgYWxzbyBjYW4gbWFrZSBwYXNzcG9ydCBob2xkZXIgLCBsdWdnYWdl

IHRhZyAsIGV0Yy4uLg0KIA0KeW91IGNhbiBsZXQgdXMgbWFrZSBpdCBpZiB5b3UgbmVlZC4gdGhh

bmtzLg0KIA0KS2luZCBSZWdhcmRzLA0KIA0KQnJpYW4g4oCTIFNhbGVzIE1hbmFnZXINCiANCg==



--Lk4RqtNlhl27C=_39pfil8jeEwi2kyNc4n

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: Base64

Content-Disposition: inline



PEhUTUwgeG1sbnM6bz48SEVBRD48VElUTEU+PC9USVRMRT4NCjxNRVRBIGNvbnRlbnQ9dGV4dC9o

dG1sO2NoYXJzZXQ9VVRGLTggaHR0cC1lcXVpdj1Db250ZW50LVR5cGU+DQo8TUVUQSBuYW1lPUdF

TkVSQVRPUiBjb250ZW50PSJNU0hUTUwgMTEuMDAuOTYwMC4xOTIwNCI+PC9IRUFEPg0KPEJPRFk+

DQo8QkxPQ0tRVU9URSBzdHlsZT0iTUFSR0lOLUJPVFRPTTogMHB4OyBGT05ULVNJWkU6IDE2cHg7

IEZPTlQtRkFNSUxZOiBDYWxpYnJpOyBXSElURS1TUEFDRTogbm9ybWFsOyBXT1JELVNQQUNJTkc6

IDBweDsgVEVYVC1UUkFOU0ZPUk06IG5vbmU7IEZPTlQtV0VJR0hUOiA0MDA7IENPTE9SOiByZ2Io

MCwwLDApOyBGT05ULVNUWUxFOiBub3JtYWw7IE1BUkdJTi1MRUZUOiAwLjVlbTsgT1JQSEFOUzog

MjsgV0lET1dTOiAyOyBNQVJHSU4tVE9QOiAwcHg7IExFVFRFUi1TUEFDSU5HOiBub3JtYWw7IEJB

Q0tHUk9VTkQtQ09MT1I6IHJnYigyNTUsMjU1LDI1NSk7IFRFWFQtSU5ERU5UOiAwcHg7IGZvbnQt

dmFyaWFudC1saWdhdHVyZXM6IG5vcm1hbDsgZm9udC12YXJpYW50LWNhcHM6IG5vcm1hbDsgLXdl

YmtpdC10ZXh0LXN0cm9rZS13aWR0aDogMHB4OyB0ZXh0LWRlY29yYXRpb24tc3R5bGU6IGluaXRp

YWw7IHRleHQtZGVjb3JhdGlvbi1jb2xvcjogaW5pdGlhbCIgY2l0ZT1taWQ6NjA5NDkyNTAuMWM2

OWZiODEuYzk0MjAuYjVkOUBteC5nb29nbGUuY29tIHR5cGU9ImNpdGUiPg0KPFAgY2xhc3M9TXNv

Tm9ybWFsIHN0eWxlPSJNQVJHSU46IDBweCAwY207IFdJRE9XUzogMTsgTElORS1IRUlHSFQ6IG5v

cm1hbDsgZm9udC12YXJpYW50LW51bWVyaWM6IG5vcm1hbDsgZm9udC12YXJpYW50LWVhc3QtYXNp

YW46IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWwiPkRlYXIgY3VzdG9tZXJzLDxvOnA+PC9v

OnA+PC9QPg0KPFAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJNQVJHSU46IDBweCAwY207IFdJRE9X

UzogMTsgTElORS1IRUlHSFQ6IG5vcm1hbDsgZm9udC12YXJpYW50LW51bWVyaWM6IG5vcm1hbDsg

Zm9udC12YXJpYW50LWVhc3QtYXNpYW46IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWwiPjxv

OnA+Jm5ic3A7PC9vOnA+PC9QPg0KPFAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJNQVJHSU46IDBw

eCAwY207IFdJRE9XUzogMTsgTElORS1IRUlHSFQ6IG5vcm1hbDsgZm9udC12YXJpYW50LW51bWVy

aWM6IG5vcm1hbDsgZm9udC12YXJpYW50LWVhc3QtYXNpYW46IG5vcm1hbDsgZm9udC1zdHJldGNo

OiBub3JtYWwiPldlIGFyZSBDaGluYeKAmXMgbGVhZGluZyBjYXJkIGhvbGRlciBNYW51ZmFjdHVy

ZXIuPG86cD48L286cD48L1A+DQo8UCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9Ik1BUkdJTjogMHB4

IDBjbTsgV0lET1dTOiAxOyBMSU5FLUhFSUdIVDogbm9ybWFsOyBmb250LXZhcmlhbnQtbnVtZXJp

Yzogbm9ybWFsOyBmb250LXZhcmlhbnQtZWFzdC1hc2lhbjogbm9ybWFsOyBmb250LXN0cmV0Y2g6

IG5vcm1hbCI+V2UgYWxzbyBjYW4gbWFrZSBwYXNzcG9ydCBob2xkZXIgLCBsdWdnYWdlIHRhZyAs

IGV0Yy4uLjwvUD4NCjxQIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0iTUFSR0lOOiAwcHggMGNtOyBX

SURPV1M6IDE7IExJTkUtSEVJR0hUOiBub3JtYWw7IGZvbnQtdmFyaWFudC1udW1lcmljOiBub3Jt

YWw7IGZvbnQtdmFyaWFudC1lYXN0LWFzaWFuOiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFs

Ij48bzpwPiZuYnNwOzwvbzpwPjwvUD4NCjxQIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0iTUFSR0lO

OiAwcHggMGNtOyBXSURPV1M6IDE7IExJTkUtSEVJR0hUOiBub3JtYWw7IGZvbnQtdmFyaWFudC1u

dW1lcmljOiBub3JtYWw7IGZvbnQtdmFyaWFudC1lYXN0LWFzaWFuOiBub3JtYWw7IGZvbnQtc3Ry

ZXRjaDogbm9ybWFsIj55b3UgY2FuIGxldCB1cyBtYWtlIGl0IGlmIHlvdSBuZWVkLiB0aGFua3Mu

PC9QPg0KPFAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJNQVJHSU46IDBweCAwY207IFdJRE9XUzog

MTsgTElORS1IRUlHSFQ6IG5vcm1hbDsgZm9udC12YXJpYW50LW51bWVyaWM6IG5vcm1hbDsgZm9u

dC12YXJpYW50LWVhc3QtYXNpYW46IG5vcm1hbDsgZm9udC1zdHJldGNoOiBub3JtYWwiPjxvOnA+

Jm5ic3A7PC9vOnA+PC9QPg0KPFAgY2xhc3M9TXNvTm9ybWFsIHN0eWxlPSJNQVJHSU46IDBweCAw

Y207IFdJRE9XUzogMTsgTElORS1IRUlHSFQ6IG5vcm1hbDsgZm9udC12YXJpYW50LW51bWVyaWM6

IG5vcm1hbDsgZm9udC12YXJpYW50LWVhc3QtYXNpYW46IG5vcm1hbDsgZm9udC1zdHJldGNoOiBu

b3JtYWwiPktpbmQgUmVnYXJkcyw8bzpwPjwvbzpwPjwvUD4NCjxQIGNsYXNzPU1zb05vcm1hbCBz

dHlsZT0iTUFSR0lOOiAwcHggMGNtOyBXSURPV1M6IDE7IExJTkUtSEVJR0hUOiBub3JtYWw7IGZv

bnQtdmFyaWFudC1udW1lcmljOiBub3JtYWw7IGZvbnQtdmFyaWFudC1lYXN0LWFzaWFuOiBub3Jt

YWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsIj48bzpwPiZuYnNwOzwvbzpwPjwvUD4NCjxQIGNsYXNz

PU1zb05vcm1hbCBzdHlsZT0iTUFSR0lOOiAwcHggMGNtOyBXSURPV1M6IDE7IExJTkUtSEVJR0hU

OiBub3JtYWw7IGZvbnQtdmFyaWFudC1udW1lcmljOiBub3JtYWw7IGZvbnQtdmFyaWFudC1lYXN0

LWFzaWFuOiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsIj5CcmlhbiDigJMgU2FsZXMgTWFu

YWdlcjwvUD4NCjxQIGNsYXNzPU1zb05vcm1hbCBzdHlsZT0iRk9OVC1TSVpFOiAxMXB0OyBGT05U

LUZBTUlMWTogQ2FsaWJyaSwgc2Fucy1zZXJpZjsgTUFSR0lOOiAwcHggMGNtOyBXSURPV1M6IDE7

IExJTkUtSEVJR0hUOiBub3JtYWw7IGZvbnQtdmFyaWFudC1udW1lcmljOiBub3JtYWw7IGZvbnQt

dmFyaWFudC1lYXN0LWFzaWFuOiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsIj4mbmJzcDs8

L1A+DQo8UCBjbGFzcz1Nc29Ob3JtYWwgc3R5bGU9IkZPTlQtU0laRTogMTFwdDsgRk9OVC1GQU1J

TFk6IENhbGlicmksIHNhbnMtc2VyaWY7IE1BUkdJTjogMHB4IDBjbTsgV0lET1dTOiAxOyBMSU5F

LUhFSUdIVDogbm9ybWFsOyBmb250LXZhcmlhbnQtbnVtZXJpYzogbm9ybWFsOyBmb250LXZhcmlh

bnQtZWFzdC1hc2lhbjogbm9ybWFsOyBmb250LXN0cmV0Y2g6IG5vcm1hbCI+PEJSPjwvUD4NCjxQ

IGNsYXNzPU1zb05vcm1hbCBzdHlsZT0iRk9OVC1TSVpFOiAxMXB0OyBGT05ULUZBTUlMWTogQ2Fs

aWJyaSwgc2Fucy1zZXJpZjsgTUFSR0lOOiAwcHggMGNtOyBXSURPV1M6IDE7IExJTkUtSEVJR0hU

OiBub3JtYWw7IGZvbnQtdmFyaWFudC1udW1lcmljOiBub3JtYWw7IGZvbnQtdmFyaWFudC1lYXN0

LWFzaWFuOiBub3JtYWw7IGZvbnQtc3RyZXRjaDogbm9ybWFsIj48QlI+PC9QPjwvQkxPQ0tRVU9U

RT48QlIgY2xhc3M9QXBwbGUtaW50ZXJjaGFuZ2UtbmV3bGluZT48L0JPRFk+PC9IVE1MPg0K



--Lk4RqtNlhl27C=_39pfil8jeEwi2kyNc4n--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA