chinese language spam from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Sun, 20 Nov 2022 05:47:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1owjiE-000KrY-3g

for dave@doctor.nl2k.ab.ca;

Sun, 20 Nov 2022 05:46:18 -0700

Resent-From: The Doctor

Resent-Date: Sun, 20 Nov 2022 05:46:18 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-ed1-f50.google.com ([209.85.208.50]:42973)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1owhaH-000DLa-8E

for doctor@doctor.nl2k.ab.ca;

Sun, 20 Nov 2022 03:30:03 -0700

Received: by mail-ed1-f50.google.com with SMTP id z18so12643761edb.9

for ; Sun, 20 Nov 2022 02:27:28 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:from:to:cc:subject:date:message-id:reply-to;

bh=bOMSTdiokPeAdDAnP8R6KkB4wr0gtvLE871i95Sm6Ic=;

b=Zej1EGo6GmdZBcO4F1uH9iF7EoqSSJwH5IczSZPHmFmQEYC/sUiCTg2j8YpeADWJyq

s2BVCKw/D9JWhBC+SJDSEhmFeLRd1mWBdZpUEjhiNQ3bup8DzPKphRsfuHXSftLPttGf

ZhfmhcEGMn5QndVn5xA4gAFQ5Qzt9eIRI5GlKRq4chYqjoqD7rPdR6ezxVioD3MZ7olq

uHOAhs7nFdYlyHTncx0W8ONwbQvRtqA5aVR4ZRKJgooQAjkDbKdN65QsY5IWXT8sfm0e

cEWUgyF60wdnvN9m4AJrae91eCL5a+n03rGZVP1BJ/+RY903YNuJoLir9h978gr/4FLd

hdnw==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:to:subject:message-id:date:from:reply-to

:mime-version:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=bOMSTdiokPeAdDAnP8R6KkB4wr0gtvLE871i95Sm6Ic=;

b=QroN1tIY3QmSkvhpYdYSBBXBBDfuOhNCJapOVhUXc042gEy+Q/q6oVDkZn/BwBfPRB

yxsH1E0b6spjxAANr22W/c8WnO2Cj6xHn2oT2yGvcZGFl1iKlmtuOGEfY0wOlbGsq0C2

A1i3xBXcPV5P+RXNVJGbNrqNb5V5QUEjs4qBLGraUyiBgRNUk0ETRCeHJsvj2vLBna/K

75W7OGigJ3H7VfZHAgVMcAqM0t2+5/qZTafjK79Z0Ir/8hReRIzLNNYNjJQKjq8S+kRJ

9IjWVC/Mbn3lo1ogQ35NNK8HVNZ6/a7K2ZCIcPM8XUs17Fu+KFTqY6Tp+ulfbAaQEuYb

L3EQ==

X-Gm-Message-State: ANoB5pkS3dREznvbLYNDj1a8L4Ic2IhllaW/4IeFD7E+z/NCz+jNphVZ

L2TbpIXsITw7/AbEQzm5IlrRTlG9nUZMdvU9rhA=

X-Google-Smtp-Source: AA0mqf4HN1PGrintvHyNTwdqXWnTpokQzu43CfNroZ63CPmgqrtq5rYsBWSFbxHhEml1WYAqtMpsBPIa/PX6Px20V6I=

X-Received: by 2002:a05:6402:b4e:b0:469:7e00:525d with SMTP id

bx14-20020a0564020b4e00b004697e00525dmr1210799edb.157.1668940041626; Sun, 20

Nov 2022 02:27:21 -0800 (PST)

MIME-Version: 1.0

Received: by 2002:a50:3b52:0:b0:1ea:9998:52c with HTTP; Sun, 20 Nov 2022

02:27:20 -0800 (PST)

Reply-To: drliesbetha@gmail.com

From: "Mrs. Liesbeth Achterberg"

Date: Sun, 20 Nov 2022 10:27:20 +0000

Message-ID:

Subject: =?UTF-8?B?6IiI5ZGz44Gu44Gq44GE5pa544Gn44KC44GU6YCj57Wh44GK5b6F44Gh44GX44Gm44GK?=

=?UTF-8?B?44KK44G+44GZLA==?=

To: undisclosed-recipients:;

Content-Type: text/plain; charset="UTF-8"

Content-Transfer-Encoding: base64

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 5.4

X-Spam_score_int: 54

X-Spam_bar: +++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: 特に重要なオファーのためにこの手段であなたに連絡することで、あなたのプライバシーを侵害して申し訳ありません.

あなたとあなたの家族は元気 [...]



Content analysis details: (5.4 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends

in digit

[chriswillams407[at]gmail.com]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[chriswillams407[at]gmail.com]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/,

no trust

[209.85.208.50 listed in list.dnswl.org]

-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)

[209.85.208.50 listed in wl.mailspike.net]

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.5 HK_NAME_FM_MR_MRS No description available.

0.0 T_HK_NAME_FM_MR_MRS No description available.

2.9 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain

different freemails

Subject: {SPAM?} =?UTF-8?B?6IiI5ZGz44Gu44Gq44GE5pa544Gn44KC44GU6YCj57Wh44GK5b6F44Gh44GX44Gm44GK?=

=?UTF-8?B?44KK44G+44GZLA==?=



54m544Gr6YeN6KaB44Gq44Kq44OV44Kh44O844Gu44Gf44KB44Gr44GT44Gu5omL5q6144Gn44GC

44Gq44Gf44Gr6YCj57Wh44GZ44KL44GT44Go44Gn44CB44GC44Gq44Gf44Gu44OX44Op44Kk44OQ

44K344O844KS5L615a6z44GX44Gm55Sz44GX6Kiz44GC44KK44G+44Gb44KTLg0K44GC44Gq44Gf

44Go44GC44Gq44Gf44Gu5a625peP44Gv5YWD5rCX44Gn44GZ44GLP+engeOBruWQjeWJjeOBr01y

cy4gTGllc2JldGgNCkFjaHRlcmJlcmfjgafjgZnjgILnp4Hjga7nm7jntprosqHnlKPjgpLnpL7k

vJrjga7mgbXjgb7jgozjgarjgYTkurrjgIXjgavlr4Tku5jjgZfjgZ/jgYTjgajmgJ3jgaPjgabj

gYTjgb7jgZnjgILnp4Hjga/oq4vosqDmpa3ogIXjgajjg5Pjgrjjg43jgrnjgqbjg7zjg57jg7Pj

gajjgZfjgablg43jgYTjgabjgYTjgb7jgZnjgILnpL7kvJrjga7mgbXjgb7jgozjgarjgYTkurrj

gIXjgavpgbrnlKPjgpLlr4Tku5jjgZfjgZ/jgYQu56eB44Gv5LiA5Lq65pqu44KJ44GX44Gn44CB

54++5Zyo5a625peP44KC6Kaq5oia44KC5a2Q5L6b44KC44GE44G+44Gb44KT44CC56eB44Gv5pyA

5oSb44Gu5aSr44GoDQoyIOS6uuOBruWtkOS+m+OCkuOBsuOBqeOBhOS6pOmAmuS6i+aVheOBp+S6

oeOBj+OBl+OBvuOBl+OBn+OAguaknOafu+e1kOaenOOBjOWHuuOBn+W+jOOAgeWMu+W4q+OBi+OC

ieS9meWRveOBjOefreOBhOOBqOiogOOCj+OCjOOBn+OBruOBp+OAgeOCpOODs+OCv+ODvOODjeOD

g+ODiOOBp+OBguOBquOBn+OBruODoeODvOODq+OCouODieODrOOCueOCkuWFpeaJi+OBl+OBvuOB

l+OBn+OAguengeOBr+aui+OCiuOBruS6uueUn+OBjOefreOBhOOBruOBp+OAgemKgOihjOOBq+WQ

iOioiDc1MOS4h+ODpuODvOODreOBruWAi+S6uueahOOBquOBiumHkeOCkuiyr+OCgeOBpuOBhOOB

vuOBmeOAguOBguOBquOBn+OBruWbveOBp+engeOBruS7o+ihqOOBq+eri+OBo+OBpuOAgeOBguOB

quOBn+OBruihl+OBruS6uuOAheOBruOBn+OCgeOBq+ODouOCueOCr+OBi+aVmeS8muOCkuW7uuOB

puOCi+OBi+OAgeWKqeOBkeOBpuOBu+OBl+OBhOOBp+OBmeOAguengeOBruOBiumHkeOBp+WtpOWF

kOmZouOBruWutuOChOiyp+OBl+OBhOS6uuOAheOAguOBguOBquOBn+OBjOengeOBruS7o+eQhuS6

uuOBq+OBquOCi+OBk+OBqOOCkuWPl+OBkeWFpeOCjOOCi+OBk+OBqOOBjOOBp+OBjeOCjOOBsOOA

geengeOBr+OBguOBquOBn+OBruOCs+ODn+ODg+OCt+ODp+ODs+OBqOOBl+OBpue3j+mhjeOBrg0K

MzAlIOOCkuOBguOBquOBn+OBq+S4juOBiOOAgeOBguOBquOBn+OBr+ODl+ODreOCuOOCp+OCr+OD

iOOBruOBn+OCgeOBq+aui+OCiuOBriA3MCUNCuOCkuS9v+eUqOOBl+OBvuOBmS7jgZPjga7jg5fj

g63jgrjjgqfjgq/jg4jjgpLlpKfkuovjgavjgZfjgabjgY/jgozjgovmraPnm7TjgarkurrjgYzl

v4XopoHjgafjgZnjgILjgYLjgarjgZ/jgYzjgZPjga7jg5fjg63jgrjjgqfjgq/jg4jjgpLlh6bn

kIbjgafjgY3jgovjgarjgonjgIHnp4Hjga/jgYLjgarjgZ/jgavlj5bjgovjgbnjgY3jgZXjgonj

garjgovjgrnjg4bjg4Pjg5fjgpLmlZnjgYjjgb7jgZku56eB44Gv5Lq655Sf44Gn5aSa44GP44Gu

6Ium44GX44G/44KS5ZGz44KP44GE44CB6Ieq5YiG44Gu6LKh55Sj44Gu6KGM44GN5YWI44KS55+l

44KJ44Ga44Gr5q2744Gs44GT44Go44KS6Z2e5bi444Gr5oGQ44KM44Gm44GE44G+44GZ44CC56eB

44GM5oyB44Gj44Gm44GE44KL44GZ44G544Gm44Gu6LKh55Sj44KS5a+E5LuY44Gb44Ga44Gr5q27

44Gr44Gf44GP44Gq44GE44Gu44Gn44CB5aSc44KC5pel5Lit44KC44G744Go44KT44Gp55yg44KM

44G+44Gb44KT44CC5re35Lmx44GZ44KL44Go5oCd44GE44G+44GZ44CCDQoNCuOBk+OBruODoeOD

vOODqyDjgqLjg4njg6zjgrnjgavoiIjlkbPjgYzjgarjgYTloLTlkIjjgafjgoLjgIHjgZTpgKPn

taHjgYTjgZ/jgaDjgZHjgozjgbDlubjjgYTjgafjgZnjgIIgKGRybGllc2JldGhhQGdtYWlsLmNv

bSkNCg0K44KI44KN44GX44GPDQpMaWVzYmV0aCBBY2h0ZXJiZXJnIOWkq+S6ug0K

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA