Chinese Products Spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 20 Jul 2026 07:33:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wlo6t-00000000IqS-1MSL
for dave@doctor.nl2k.ab.ca;
Mon, 20 Jul 2026 07:32:43 -0600
Resent-From: The Doctor
Resent-Date: Mon, 20 Jul 2026 07:32:43 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [47.85.125.120] (port=52582 helo=mail-m4785125120.xmail.ntesmail.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wlhm2-00000000HZB-3ZiF
for sales@nk.ca;
Mon, 20 Jul 2026 00:46:59 -0600
Content-Type: multipart/alternative; BOUNDARY="=_Part_922920_1259645692.1784529941233"
To: sales
Subject: =?UTF-8?B?QSBQcmVtaXVtIFNvbHV0aW9uOiBUaGUgV2F0ZXJsZXNzIEVzc2VudGlhbCBPaWwgRGlmZnVzZXI=?=
X-Priority: 3
MIME-Version: 1.0
Received: from lily@platformvendor.com( [10.139.4.160] ) by ajax-webmail ( [127.0.0.1] ) ; Mon, 20 Jul 2026 14:45:41 +0800 (GMT+08:00)
From: jerry.kutch@verb.fitnesstrainingtribuo.com
Date: Mon, 20 Jul 2026 14:45:41 +0800 (GMT+08:00)
X-WM-Tid: 0a9f7e45eb91d0bfkusy4d171444129600
Reply-To: lily@platformvendor.com
DKIM-Signature: a=rsa-sha256;
b=fmUsnq6nqP2P+z3ZiaerC6hISF1gjuufN8Qhz3Vxgsa+w9DGFC/7CLqmV2rEejb7OH2f+yirNKHz3jW/nRa4ezacEMhQmemCPkiuFM++6Mj/sz8f0/xaTekU4ra01l1gQg+dogBrj5ca8GP47ms3ddSTQBD7Y+i6acxni4SzdEc=; s=default; c=relaxed/relaxed; d=verb.fitnesstrainingtribuo.com; v=1;
bh=ChTpJgzurvxXKrQ9aU+0A4VjgHFctm5oC7JFHmdH4gI=;
h=date:mime-version:subject:message-id:from;
Message-ID:
X-Spam_score: 5.6
X-Spam_score_int: 56
X-Spam_bar: +++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Greetings sales, Hope you are having a productive week. In
continuation, the focus today shifts to a specialized product: the waterless
diffuser. This nebulizing diffuser is crafted for connoisseurs seeking the
purest [...]
Content analysis details: (5.6 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[47.85.125.120 listed in dnsbl.ahbl.org]
[47.85.125.120 listed in dnsbl.ahbl.org]
[47.85.125.120 listed in dnsbl.ahbl.org]
[47.85.125.120 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[47.85.125.120 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[47.85.125.120 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[47.85.125.120 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[47.85.125.120 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
[47.85.125.120 listed in will-spam-for-food.eu.org]
1.7 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URI: fitnesstrainingtribuo.com]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[47.85.125.120 listed in bl.score.senderscore.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.6 J_CHICKENPOX_57 BODY: 5alpha-pock-7alpha
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.8 SARE_FROM_SPAM_WORD3 I don't know people named this!
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
Subject: {SPAM?} =?UTF-8?B?QSBQcmVtaXVtIFNvbHV0aW9uOiBUaGUgV2F0ZXJsZXNzIEVzc2VudGlhbCBPaWwgRGlmZnVzZXI=?=
Greetings sales,
Hope you are having a productive week. In continuation, the focus today shifts to a specialized product: the waterless diffuser. This nebulizing diffuser is crafted for connoisseurs seeking the purest aromatherapy experience, representing a high-value addition to any premium product line.
The waterless diffuser provides unique therapeutic and functional benefits:
It delivers a concentrated aroma by using pure essential oils without water.
The technology breaks oils into smaller molecules for a more immediate effect.
It is highly effective in larger spaces without increasing humidity levels.
This model caters to a discerning market segment. May I prepare a quotation or send a sample for you to experience its superior performance firsthand?-