German language spam from Google

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 13 Sep 2022 08:15:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY6gR-0000CS-Dp

for dave@doctor.nl2k.ab.ca;

Tue, 13 Sep 2022 08:14:39 -0600

Resent-From: The Doctor

Resent-Date: Tue, 13 Sep 2022 08:14:39 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-yb1-f193.google.com ([209.85.219.193]:35427)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oY6HH-000N8h-Ic

for bin@nl2k.ab.ca;

Tue, 13 Sep 2022 07:48:43 -0600

Received: by mail-yb1-f193.google.com with SMTP id b136so17862814yba.2

for ; Tue, 13 Sep 2022 06:48:22 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date;

bh=4QZXkby0Wp/4RNwMQIRzC/NR6VYNSdocgJEPpjfKIz0=;

b=ZqQ78q2HtVvMDhmtx4HbofLdGT/+jrFH6+BHTIYkn9NAQTMK3ZSUVhSQTs5vQlvPkS

cfdvqF7U0qj+tCWi5/kUt07ubgUXrO0zl0g2yMb77rsmEWJfbsajSZkNfsGND0qqntZd

I192FBEL3p9+zBK/6XrqpwvixBkKcv8QbzYcQAUFXYpg0I7kCL4D03W+HpfTHITEZ2ZC

Pa61ocapL18+A1mjVYrVyu5yoQnrfRTWMj4XarCWUgdjSnSZhq1Zp3aB/dOTo4fIs3eS

X8DVTRY0T+cYxhIp830YHjRTdvi6a8U5F/dHnW9dYKiKfjanMCM/Zrjj39ZvSBxbU5kB

DkdA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date;

bh=4QZXkby0Wp/4RNwMQIRzC/NR6VYNSdocgJEPpjfKIz0=;

b=yfiA8llDJWY6V6dIzKYkk51mvlCz5gVs7sJgZyWI1r21mbdWcoqNCFmyPOCQzy6ytJ

nUXuh6ga5G+OOh8Wi9FgpVcxQ9vQzloprCrAL9WrOM7CFUxmvntcnyvm/Yln3sRqTxck

p2r7u8U+ES1qMMQcu6PITSPEQqirn7cz/5BFCtBIMOoWrpetV+G4vV17U5lLbpbVJX9b

odaauo2QjyN5nZLiyxUBQARVHRPSN9rwlOFyCDnEDMsf78QPdRGDQkMGKvC+VLFsmi53

CasZv8ZrEU8uKTJmNJaukoKCdlVsUnsjL4rbjARUmWjTFghavslagskQ7wxVfSongc5U

PHzQ==

X-Gm-Message-State: ACgBeo1rgM7tQEDCo+6loq2KkoJJ4RpXGXMh4m9LJTgqEo3oPC1cYLc7

C3esAFxL7qB/RlXKYfswahohbbIq4MrC3xTdxgc=

X-Google-Smtp-Source: AA6agR46Y4yTBCox00aFiG80GBz/ZpkAJ2V/oZBAJ+o1eBsozgjXaOdlrn/Xp0JIwmI5G8hPIsOeszgnmmau7atFknI=

X-Received: by 2002:a5b:aca:0:b0:6ae:269b:5dc1 with SMTP id

a10-20020a5b0aca000000b006ae269b5dc1mr21957286ybr.521.1663076896732; Tue, 13

Sep 2022 06:48:16 -0700 (PDT)

MIME-Version: 1.0

Received: by 2002:a25:396:0:0:0:0:0 with HTTP; Tue, 13 Sep 2022 06:48:14 -0700 (PDT)

Reply-To: thepowerpackk@gmail.com

From: The Power Pack

Date: Tue, 13 Sep 2022 06:48:14 -0700

Message-ID:

Subject: Spende

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable

Bcc: bin@nl2k.ab.ca

X-Spam_score: 7.5

X-Spam_score_int: 75

X-Spam_bar: +++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: -- Guten Tag liebe Begünstigte, Sie haben diese Nachricht

von der Power Pack Foundation erhalten; Wir sind The Power Pack und der Gewinner

des $731,1 Millionen Powerball Jackpot. Wir sind einer der g [...]



Content analysis details: (7.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.219.193 listed in wl.mailspike.net]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[thomasjaudip[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 T_SCC_BODY_TEXT_LINE No description available.

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

0.0 LOTS_OF_MONEY Huge... sums of money

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

3.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to

2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free

email?

1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs

Subject: {SPAM?} Spende



--=20

Guten Tag liebe Beg=C3=BCnstigte,

Sie haben diese Nachricht von der Power Pack Foundation erhalten;

Wir sind The Power Pack und der Gewinner des $731,1 Millionen Powerball

Jackpot. Wir sind einer der gr=C3=B6=C3=9Ften Jackpot-Gewinner in der Gesch=

ichte von

die Maryland-Lotterie in den Vereinigten Staaten. Wir haben diese

Lotterie gewonnen

20. Januar 2021 und m=C3=B6chte Sie dar=C3=BCber informieren, dass Google i=

n

Zusammenarbeit mit Microsoft, Ihre "E-Mail-Adresse" auf meine Anfrage an

eine Spende in H=C3=B6he von 3 Millionen US-Dollar erhalten. Wir geben

Ihnen diese 3 Millionen Dollar

um Wohlt=C3=A4tigkeitsorganisationen und armen Menschen in Ihrer Gemeinde

zu helfen, damit wir das schaffen k=C3=B6nnen

Welt ein besserer Ort f=C3=BCr alle. Bitte besuchen Sie die unten stehende

Website f=C3=BCr

weitere Informationen, um nicht skeptisch gegen=C3=BCber diesen 3 Millionen

Dollar zu sein

Spende



HINWEIS: Sie k=C3=B6nnen nach The Power Pack suchen, dem Gewinner des $731,=

1

Millionen-Powerball-Jackpot-Gewinner Maryland 20. Januar, 20. Januar 2021



Bitte antworten Sie an: (thepowerpackk@gmail.com), damit wir nach

rechts gehen k=C3=B6nnen

Bank, eine 3-Millionen-Dollar-Geldautomatenkarte auszustellen. Diese

Bankomatkarte wird mitgeliefert

zusammen mit Ihrer PIN f=C3=BCr den Zugriff auf Ihr Guthaben. Merken Sie

sich das alles

Antworten auf diese Nachricht m=C3=BCssen an (thepowerpackk@gmail.com)

gesendet werden

weitere Informationen dar=C3=BCber, wie Sie diese Spende mit einem

universellen Geldautomaten erhalten k=C3=B6nnen

Karte, die Ihnen schnellstm=C3=B6glich zugesandt wird. Nehmen Sie Kontakt m=

it auf

uns so schnell wie m=C3=B6glich



Gr=C3=BC=C3=9Fe,

Power Pack Foundation

*

Powerball-Jackpot-Gewinner

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA