Chinese products spam
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Jan 2026 07:21:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vkjvQ-000000002x4-47Zb
for dave@doctor.nl2k.ab.ca;
Tue, 27 Jan 2026 07:20:12 -0700
Resent-From: The Doctor
Resent-Date: Tue, 27 Jan 2026 07:20:12 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out208-136.dm.aliyun.com ([140.205.208.136]:20148)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from)
id 1vkcj5-000000000kW-1hIT
for root@nk.ca;
Mon, 26 Jan 2026 23:39:03 -0700
X-AliDM-RcptTo: cm9vdEBuay5jYQ==
Feedback-ID: default:vip@vip.clampfactory.ltd:alibabak_WebBatch:324914
DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;
d=vip.clampfactory.ltd; s=aliyun-cn-hangzhou;
t=1769495881; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;
bh=IO1yP5SyASbyr7qcC3Bi18rgiZad+kSTfWutIcXwbvo=;
b=sxAbkXogjWwnnILI/Nq5qW1SfCSNqkkNPQPLHgjSbPXDVW+a5r3dcjq9Ab3bLIdQrqVqO9L0Y1WeW+TdlSZA78uQy+mRqauLciintPkRRRZ0MLKoXRICVPCJm9T861x4aigYEnRNPsl0GkkCyhZYRmuNGqVMPo206wSBzLwdZAY=
DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;
d=dm-fbl.aliyuncs.com; s=feedback;
t=1769495881; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;
bh=IO1yP5SyASbyr7qcC3Bi18rgiZad+kSTfWutIcXwbvo=;
b=tNZZ7YT2jgd5ZIxTGfY1lDyUV6ijUFGRYq2tyClqc7mbNtBrDLbQGqWIzFs+3pzCVbHm3PhQSrFcx8nFwR2CCnWrE0TGh1SmKSTm4a75XLcbY2cV77dVqGIgi+39alq8pLC82Lto5sSFFEox7xduypFcdmPuiR2W1zNzrN7i6GI=
Received: from chitu-hsf(mailfrom:vip@vip.clampfactory.ltd fp:ma_600000271784995822 cluster:AY35D)
by smtp.aliyun-inc.com(127.0.0.1);
Tue, 27 Jan 2026 14:36:06 +0800
Date: Tue, 27 Jan 2026 14:36:05 +0800
From: "Vivian"
To:
Reply-To:
Message-ID: <8474d3c6-9c07-4257-890a-4cbc5e1293ec@alibaba.com>
Subject: =?UTF-8?B?VCBCb2x0IEhvc2UgQ2xhbXAgTWFudWZhY3R1cmVyIC0gUm9ja2V0aXMgSG9zZSBDbGFtcA==?=
X-Priority: 3
MIME-Version: 1.0
X-EnvId: 600000271784995823
X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 15.0
X-Spam_score_int: 150
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you?
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
[140.205.208.136 listed in dnsbl.ahbl.org]
[140.205.208.136 listed in dnsbl.ahbl.org]
[140.205.208.136 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: chvsta.068000.xyz (xyz)]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.0 CN_B2B_SPAMMER BODY: Chinese company introducing itself
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: ns4.dnsv2.com/112.80.181.155]
Subject: {SPAM?} =?UTF-8?B?VCBCb2x0IEhvc2UgQ2xhbXAgTWFudWZhY3R1cmVyIC0gUm9ja2V0aXMgSG9zZSBDbGFtcA==?=
ap-mode: wrap;">
ew roman";">How are you?
ext-wrap-mode: wrap;">
"color: rgb(0, 0, 0);font-family:times new roman">Our T Bolt hose clamps inclu=
de:
style=3D"margin-top: 16px; margin-bottom: 16px; text-wrap-mode: wrap; color: r=
gb(15, 17, 21);" class=3D"ds-markdown-paragraph">
mes new roman">As we step into the new year, we would be delighted to explore =
how our expertise can support your business. If you have any upcoming needs fo=
r hose clamps or would like to discuss potential collaboration, please feel fr=
ee to reach out. We are always here to assist!
p: 16px; margin-bottom: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21);" c=
lass=3D"ds-markdown-paragraph">Loo=
king forward to the possibility of working together.
gin-top: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21); margin-bottom: 0p=
x !important;" class=3D"ds-markdown-paragraph">
s new roman">Best regards,
ode: wrap; color: rgb(15, 17, 21); margin-bottom: 0px !important;" class=3D"ds=
-markdown-paragraph">Vivian=
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Tue, 27 Jan 2026 07:21:00 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vkjvQ-000000002x4-47Zb
for dave@doctor.nl2k.ab.ca;
Tue, 27 Jan 2026 07:20:12 -0700
Resent-From: The Doctor
Resent-Date: Tue, 27 Jan 2026 07:20:12 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from out208-136.dm.aliyun.com ([140.205.208.136]:20148)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98.2 (FreeBSD))
(envelope-from
id 1vkcj5-000000000kW-1hIT
for root@nk.ca;
Mon, 26 Jan 2026 23:39:03 -0700
X-AliDM-RcptTo: cm9vdEBuay5jYQ==
Feedback-ID: default:vip@vip.clampfactory.ltd:alibabak_WebBatch:324914
DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;
d=vip.clampfactory.ltd; s=aliyun-cn-hangzhou;
t=1769495881; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;
bh=IO1yP5SyASbyr7qcC3Bi18rgiZad+kSTfWutIcXwbvo=;
b=sxAbkXogjWwnnILI/Nq5qW1SfCSNqkkNPQPLHgjSbPXDVW+a5r3dcjq9Ab3bLIdQrqVqO9L0Y1WeW+TdlSZA78uQy+mRqauLciintPkRRRZ0MLKoXRICVPCJm9T861x4aigYEnRNPsl0GkkCyhZYRmuNGqVMPo206wSBzLwdZAY=
DKIM-Signature:v=1; a=rsa-sha256; c=relaxed/relaxed;
d=dm-fbl.aliyuncs.com; s=feedback;
t=1769495881; h=Date:From:To:Message-ID:Subject:MIME-Version:Content-Type;
bh=IO1yP5SyASbyr7qcC3Bi18rgiZad+kSTfWutIcXwbvo=;
b=tNZZ7YT2jgd5ZIxTGfY1lDyUV6ijUFGRYq2tyClqc7mbNtBrDLbQGqWIzFs+3pzCVbHm3PhQSrFcx8nFwR2CCnWrE0TGh1SmKSTm4a75XLcbY2cV77dVqGIgi+39alq8pLC82Lto5sSFFEox7xduypFcdmPuiR2W1zNzrN7i6GI=
Received: from chitu-hsf(mailfrom:vip@vip.clampfactory.ltd fp:ma_600000271784995822 cluster:AY35D)
by smtp.aliyun-inc.com(127.0.0.1);
Tue, 27 Jan 2026 14:36:06 +0800
Date: Tue, 27 Jan 2026 14:36:05 +0800
From: "Vivian"
To:
Reply-To:
Message-ID: <8474d3c6-9c07-4257-890a-4cbc5e1293ec@alibaba.com>
Subject: =?UTF-8?B?VCBCb2x0IEhvc2UgQ2xhbXAgTWFudWZhY3R1cmVyIC0gUm9ja2V0aXMgSG9zZSBDbGFtcA==?=
X-Priority: 3
MIME-Version: 1.0
X-EnvId: 600000271784995823
X-AliDM-Settings: eyJPdXRib3VuZElwIjp7IklwTGlzdCI6W10sIklwUG9vbElkIjoiIn0sIlVuc3Vic2NyaWJlIjp7IkZpbHRlckxldmVsIjoiZGVmYXVsdCIsIkxpbmtUeXBlIjoiZGVmYXVsdCJ9LCJWZXJzaW9uIjoiMS4wIn0=
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
X-Spam_score: 15.0
X-Spam_score_int: 150
X-Spam_bar: +++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear Friend, How are you?
Content analysis details: (15.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
[140.205.208.136 listed in dnsbl.ahbl.org]
[140.205.208.136 listed in dnsbl.ahbl.org]
[140.205.208.136 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[140.205.208.136 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
[140.205.208.136 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
2.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
[URI: chvsta.068000.xyz (xyz)]
2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear!
1.0 CN_B2B_SPAMMER BODY: Chinese company introducing itself
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.7 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 MIME_QP_LONG_LINE RAW: Quoted-printable line longer than 76 chars
2.0 RATWR8_MESSID Message-ID with excessive dashes and dollars
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag
0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
[URI: ns4.dnsv2.com/112.80.181.155]
Subject: {SPAM?} =?UTF-8?B?VCBCb2x0IEhvc2UgQ2xhbXAgTWFudWZhY3R1cmVyIC0gUm9ja2V0aXMgSG9zZSBDbGFtcA==?=
mily: "times new roman";">Dear Friend,
ap-mode: wrap;">
ew roman";">How are you?
an style=3D"color: rgb(0, 0, 0); font-family: "times new roman";">I =
am Vivian From Rocketis Hose Clamp Company, Very glad to being your service.
span>
; font-family: "times new roman";">We are a leading manufacturer in =
China which specialized in T Bolt Hose Clamps&nb=
sp;supplying for over 20 years; good quality and professional service=
help us gain many good reputation all over the world.
ext-wrap-mode: wrap;">
"color: rgb(0, 0, 0);font-family:times new roman">Our T Bolt hose clamps inclu=
de:
wrap-mode: nowrap; color: rgb(84, 141, 212);font-family:times new roman">T Bol=
t hose clamps
e=3D"text-wrap-mode: nowrap;font-family:times new roman">Spring T Bolt hose cl=
amps
1.imagehub.cc/images/2026/01/08/6fa2fb52e6d3e57db608a60df2625949.jpg"/>
style=3D"margin-top: 16px; margin-bottom: 16px; text-wrap-mode: wrap; color: r=
gb(15, 17, 21);" class=3D"ds-markdown-paragraph">
mes new roman">As we step into the new year, we would be delighted to explore =
how our expertise can support your business. If you have any upcoming needs fo=
r hose clamps or would like to discuss potential collaboration, please feel fr=
ee to reach out. We are always here to assist!
p: 16px; margin-bottom: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21);" c=
lass=3D"ds-markdown-paragraph">Loo=
king forward to the possibility of working together.
gin-top: 16px; text-wrap-mode: wrap; color: rgb(15, 17, 21); margin-bottom: 0p=
x !important;" class=3D"ds-markdown-paragraph">
s new roman">Best regards,
ode: wrap; color: rgb(15, 17, 21); margin-bottom: 0px !important;" class=3D"ds=
-markdown-paragraph">Vivian=