Chinese product spam from Microsoft Outlook

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 18 Jun 2024 21:07:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sJlew-00000000OuN-0loH

for dave@doctor.nl2k.ab.ca;

Tue, 18 Jun 2024 21:06:54 -0600

Resent-From: The Doctor

Resent-Date: Tue, 18 Jun 2024 21:06:54 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-co1nam11olkn2103.outbound.protection.outlook.com ([40.92.18.103]:30250 helo=NAM11-CO1-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sJjTY-000000006aE-1GsL

for doctor@nl2k.ab.ca;

Tue, 18 Jun 2024 18:47:04 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=jh4vk4ptW42lTCyoi90oSgYlHtwifuqwxXfTybdJj14HfFq8oB6pol7KOFmUvvEepuhJtJ84OygWW3sbYMhZ9O8XCSxl8PIiRcHpHVffcuqRoQ//lp12Cy7l4A9cURMFIkhUe/foZ+6+M/UcJNo9g96JrNOXE7HS0uT/CnYUzBlKjQTtdEIvCg4n+bksauoLGeUg8lG8ztVTNWkl2JBQ4s6OZ5pmY0cKIH0hyyMzNLmnisur6uiz5AZFNsQXwIisIiD0CUa5aa73YbH1Xbm4uQ6DWVftzkBWdsO0f2Ly3MM3rilkUtY2P6ZXo/eo++tF/1n1nBYlpz/CICXzzpJWYw==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=jkKjqjYDyC4pw46b6J/cJIdNbUkaxViMTIMASw68vz8=;

b=UxBb+nLlP5NpE7TgbFEJWgtcQA/cYZGeLt5Tr6sMVLCPCqG1lk5u+cikzH57/JDid72rzR32JhZYKPxVg1IVaEQcApPcUmY50pJgUgmZE+792W8yHxZdAStFTGBQ/q3tusC19QXDdorMgOHO12qKsMqp71A9szbcuhIkajFpX/wvXXHNywhHgm2Ri1eiVGxz6pFajJKuxlxGSx5ulgVXFjSlOaoT8usFV39hINkmrziUu0j1lSag6LrHkwc9YS6JDxGS7uTgfQgn3ERCRUdv4pnn6USJZpXsO0irbaUUGaHpg3cCso1/qL6Lci41RRudYFi5RVH4Sol0eLqZakn/pw==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=jkKjqjYDyC4pw46b6J/cJIdNbUkaxViMTIMASw68vz8=;

b=goh/WfdDaySrQBh7/jIM7ug/rdQAjuBmrJbEUrls+db/ryFgOJ93l4IQMRTy9FPXqLLcRzcHOaO8xaI6tm9nkCHVu0zEcAA7/+i0CNVl/AINWYMyE9rhPBjZ+XHqMiuSp1Sprr+LI17vMV/rk2lsljlisVxowtkJYDFy0I4tH5Ux9skHXbMdvTT8IB8tpcvxjwWq3T9eUvhmmhyK7mQQ2FjoyAADjUb5YtWpvmeVLSkTLsMUjcjSgMBcd2F0mcd459j/qR5c6+rAKrNFjSTsoLVdH7kfMzjEoyqrjVtPD3AB9tFeBvvFSU8q1qVtPIsvrJ++oiMsKfWyGqxUWw6m3A==

Received: from IA0PR14MB6981.namprd14.prod.outlook.com (2603:10b6:208:40f::21)

by SN7PR14MB6509.namprd14.prod.outlook.com (2603:10b6:806:34e::19) with

Microsoft SMTP Server (version=TLS1_2,

cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7698.16; Wed, 19 Jun

2024 00:44:52 +0000

Received: from IA0PR14MB6981.namprd14.prod.outlook.com

([fe80::5ad6:c577:1bd9:df39]) by IA0PR14MB6981.namprd14.prod.outlook.com

([fe80::5ad6:c577:1bd9:df39%3]) with mapi id 15.20.7698.014; Wed, 19 Jun 2024

00:44:51 +0000

From: sk sk

Subject: Flooring Supplier

Thread-Topic: Flooring Supplier

Thread-Index: AQHaweHi9C1dcQb8zUepWRxLxIHB4Q==

Date: Wed, 19 Jun 2024 00:44:51 +0000

Message-ID:



Accept-Language: zh-CN, en-US

Content-Language: zh-CN

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [tguBMqmzJD4hIH9TmpNiNHHJp0EESMIB]

x-ms-publictraffictype: Email

x-ms-traffictypediagnostic: IA0PR14MB6981:EE_|SN7PR14MB6509:EE_

x-ms-office365-filtering-correlation-id: c63044f8-7406-4ef5-c512-08dc8ff90794

x-microsoft-antispam:

BCL:0;ARA:14566002|461199025|3412199022|440099025|102099029;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?gb2312?B?T0VwVk5UR2cwaU5nY29hSERUS2J4Zk1RL3ZKbWxyWjlGQUZia2FSTm1ac3lk?=

=?gb2312?B?NjN0WFZET1BuRVd5NDk1ZHkxS0dMZU8yME5USm8zQnJIbUxxcGFEY3FKeHkx?=

=?gb2312?B?VkFzWGtBZUtLWDI5M29IempMelhNaUlzZFB6L0tqSFVTeTNGRlEwZnZoZmth?=

=?gb2312?B?c0pJTlowWHg3aENLVU9PaXVNeUFRN0xtY2lhS2VDOWVoLzF4ZVRlaFFZb0JC?=

=?gb2312?B?WmYxcTBYdzY2bldCL09oZ1hWL0plZUVOSTBXa1JMVXNoUDJaZktYVzZXSklR?=

=?gb2312?B?MExLTXJRTElRcDQ2c1orVUUwRklxakhmUGpuQy9QWVhod1VWTWhuMzJOazhU?=

=?gb2312?B?NDJ6UWY0SWNJS3R6YjFRQ21LQ1J4dWdERkc1N1ZKTWlyWW4zZkNpL2J0T05v?=

=?gb2312?B?QWFHT3Rsb0lHUzk1Z09wTFpueFhiMm1wU2tKdHJiRTZkUkNqTVowKzNlNTFJ?=

=?gb2312?B?TzhxNlk1RWhjcTJMYXdMNUF1MUdxcStiNnZ2M2F6WUszK2VVVFUxdktYZGtn?=

=?gb2312?B?d1JWdUVIRTNCNnltQ21heHkyRFhzck5Wc3dLVGxDcitDL00xU09ha3oxMUVp?=

=?gb2312?B?eE05cXR5dmRpSXpVNHlIcXZFdDgzbzA1UEVUbUJrSXJYNlBnbS9sK2QxeUNt?=

=?gb2312?B?WWJMSnhnZlpZeWlvYjUrZTlNOXJSckxERFZsSHNmajdMOThLeTlBOFlRZW1R?=

=?gb2312?B?Z295ejVJMVEwSDQ3TmliVkxjU2FYdlRUY21vMm80aVYwQXIyNzkwZTFMdlAv?=

=?gb2312?B?dDd5RGtlK1IyUGVpYUJDVVJKQWlCTGtEbjM3bWR0aE9PeHNVL2x1UlY4YnY1?=

=?gb2312?B?TXBQOXZyMXdiSFhTVC8xdnpDTkhuZGtMM3dRZE9IY3plbjIwVHFUN0ptVExz?=

=?gb2312?B?N0VETUovcFI0TkVuSnpyMFpiOU90RjZVVFlHUDJBeVpxN0NYVnBMbG52MGZt?=

=?gb2312?B?V3JCZ1FkNWZZUHdDUUthdjgyTDJNREJFUTZ6WThTS09tL2l2aXkwRDRWblVO?=

=?gb2312?B?WlJSYjI0T1YzZWkzZlVNOTBCdnIwcHA0NEg1bmJOS0UxWmVaMHgwMHVpRzls?=

=?gb2312?B?V1l6Rm1MbDVXUjMxUjNaRTIvMFpjTEFzUDdDcSs3SHJsalZrM0FlU1FLaXFv?=

=?gb2312?B?c2VRM0tXTEttY0tjNjVmdXM4Vlp5T3BCT29uNmorZ3o4NXd3bkdvdGJZMExP?=

=?gb2312?B?Yk5HRFd2MldvK2JhWUJTYkpWdnVubTZYTndMc0d3aFdrakY1eWtidWZ6R1Fi?=

=?gb2312?B?eThzK1k4RUF1S3FUZzhoL093ZjgxcFhyV1dwUlJPVU5JY2VTdm40R0hjUGQz?=

=?gb2312?B?REpocWlyc1kvMGhhRWlGSWU4Nkx2TzBTcVdMVjkrTG1vZW9oRFdEOWcyK3hR?=

=?gb2312?B?eUdzQzNNOHJkQzBXN21mV2RndUpYWkdwcmw4eG5oMDdOMFhTV0FDMnA0eFRl?=

=?gb2312?B?SUZIdHA0dzJOUkp1SDB2L0tkdHpPMUVIZytwYzh2UjU5dzI0bG1yZkw0QVE2?=

=?gb2312?B?SGcwTG96d3lsRjFDNXMxSkg4RjFMSm5SemgyU0JSR1ljemtMS0ZtRi9sMFho?=

=?gb2312?B?c0FPYXNsdktKQkJSYmhWWkVnZ2tUK3hJUkpZSkFBeitBTUJNUE82RWZvWjJR?=

=?gb2312?B?RVNvTDBpRkVlL29NM1lmbVZKVk5hWkE9PQ==?=

Content-Type: multipart/alternative;

boundary="_000_IA0PR14MB6981FE0951CE4EBDFB93BF2AAECF2IA0PR14MB6981namp_"

MIME-Version: 1.0

X-OriginatorOrg: outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: IA0PR14MB6981.namprd14.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: c63044f8-7406-4ef5-c512-08dc8ff90794

X-MS-Exchange-CrossTenant-originalarrivaltime: 19 Jun 2024 00:44:51.6261

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: SN7PR14MB6509

X-Spam_score: 8.1

X-Spam_score_int: 81

X-Spam_bar: ++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Hi There, Hope you’re in good health. We’re Manufacturer

& Exporter of Flooring from China. Customize designs, label & packing available.

I’m sending our product catalog. If you’re interested, we can provide

you with a quote.



Content analysis details: (8.1 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[40.92.18.103 listed in dnsbl.ahbl.org]

[40.92.18.103 listed in dnsbl.ahbl.org]

[40.92.18.103 listed in dnsbl.ahbl.org]

[40.92.18.103 listed in dnsbl.ahbl.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[dnsbl.ahbl.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[40.92.18.103 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[40.92.18.103 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[40.92.18.103 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[40.92.18.103 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[2603:10b6:208:40f:0:0:0:21 listed in]

[will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

[40.92.18.103 listed in will-spam-for-food.eu.org]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[40.92.18.103 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[40.92.18.103 listed in wl.mailspike.net]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

0.0 ARC_SIGNED Message has a ARC signature

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

-0.1 ARC_VALID Message has a valid ARC signature

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in

digit

[sksales75(at)outlook.com]

1.2 MISSING_HEADERS Missing To: header

-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay

domain

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[sksales75(at)outlook.com]

0.0 HTML_MESSAGE BODY: HTML included in message

1.4 MALFORMED_FREEMAIL Bad headers on message from free email service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!

Subject: {SPAM?} Flooring Supplier



--_000_IA0PR14MB6981FE0951CE4EBDFB93BF2AAECF2IA0PR14MB6981namp_

Content-Type: text/plain; charset="gb2312"

Content-Transfer-Encoding: base64



SGkgVGhlcmUsDQpIb3BlIHlvdaGvcmUgaW4gZ29vZCBoZWFsdGguDQpXZaGvcmUgTWFudWZhY3R1

cmVyICYgRXhwb3J0ZXIgb2YgRmxvb3JpbmcgZnJvbSBDaGluYS4NCkN1c3RvbWl6ZSBkZXNpZ25z

LCBsYWJlbCAmIHBhY2tpbmcgYXZhaWxhYmxlLg0KDQpJoa9tIHNlbmRpbmcgb3VyIHByb2R1Y3Qg

Y2F0YWxvZy4gSWYgeW91oa9yZSBpbnRlcmVzdGVkLCB3ZSBjYW4gcHJvdmlkZSB5b3Ugd2l0aCBh

IHF1b3RlLg0KDQpXZSBhcmUgbG9va2luZyBmb3J3YXJkIHRvIGhhdmUgZ29vZCBidXNpbmVzcyB3

aXRoIHlvdS4NCkJlc3QgUmVnYXJkcw0KQW5keQ0K



--_000_IA0PR14MB6981FE0951CE4EBDFB93BF2AAECF2IA0PR14MB6981namp_

Content-Type: text/html; charset="gb2312"

Content-Transfer-Encoding: quoted-printable
















nt, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; c=

olor: rgb(0, 0, 0);">

Hi There,



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Hope you=A1=AFre in good health.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We=A1=AFre Manufacturer & Exporter of Flooring from China.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Customize designs, label & packing available.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">







Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

I=A1=AFm sending our product catalog. If you=A1=AFre interested, we can pro=

vide you with a quote.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

 



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

We are looking forward to have good business with you.



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Best Regards



Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">

Andy








--_000_IA0PR14MB6981FE0951CE4EBDFB93BF2AAECF2IA0PR14MB6981namp_--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA