German language spam from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jun 2024 06:02:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sJB3A-00000000J1V-1g99
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jun 2024 06:01:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Jun 2024 06:01:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f193.google.com ([209.85.219.193]:52228)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1sJ4N3-00000000GAL-3YoV
for doctor@doctor.nl2k.ab.ca;
Sun, 16 Jun 2024 22:53:39 -0600
Received: by mail-yb1-f193.google.com with SMTP id 3f1490d57ef6-dff302847a8so1400753276.0
for; Sun, 16 Jun 2024 21:51:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1718599893; x=1719204693; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=iBDpPPjIEphdavomjwSQVaPXjcknN4j9Yj80TlZA3aI=;
b=FyY+n4tpjoaVbNEyJilvc3FtOtcVejD0Mwc4Ctsf3siY/nEyMqwtjIHyoiST/cB5c9
uomDcVL2++CyQ5oq426vwjxP8VgB4vBdQCYe8SI7xllhOxCAqmf0CS2kvz4nwf98bCXy
oBWWVw8fHXVUvJvk6Br03k0IuV3KBZK91NCVmDXSaJphOXypQDnNaCYPxrNeTC/7F7Y4
ly2Izrrul5Dfv9pT//f7BQiHA4lyDRxhK+E0xDwJuUaSTlKMREiNoGG5byIVYKboLFnM
J74YOhPEZNz/6Z19Fr+Z7AvYvqBzqJ8T8Em635faKysfG2RtlJZJlo5n7bMKiE5gK58u
O5Aw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1718599893; x=1719204693;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=iBDpPPjIEphdavomjwSQVaPXjcknN4j9Yj80TlZA3aI=;
b=plfTcflEQ5tEew+mXeuN873aeW0B0COFzg9+uPp+JXxkC/bo5aXRagxw1bnx37m7/v
9B4HqXrBlcRjHeP7v4x8HArEdNmog2T7FjMMlrhE1Nzbu2gl3C1M9bP9WXG0ApUEmpRJ
CVLQZaXCSbMQkb7eAacpaWQeNBAnTftdzkpK2WYIEuqo3Linq8rNfQEf/fgdz+3n5/kF
UDXrOxrEKNLQVk5Rfuk+e4CfdZYFcDOrgU7NCGqElPukEWPGHdDKZeE/csUInnbx5RhS
AVMwvZaoQT3rlFw60x+AAe5O/DLXHwQXRS32wduTtdVicjRAz5Rb4BefqCg2EW4jhAos
CTdw==
X-Forwarded-Encrypted: i=1; AJvYcCW8AOscF9DWDLeUv1eWCe8snrwyeKe3zZyuSYg79Exn8PBCjWsHOEwGk1CdTE5jv8ejnmPgjorKyzsXCVPQ0vYKIzVIrvP1HAs=
X-Gm-Message-State: AOJu0YwS5rC5Jp0cG5JNhSqUF5UUfpcwoCDLG2Iou/hWVS4sr+jgu50e
KW3GAdcsw9ZE+hirxqFSl/dUZgitqBYWrLwG9PJLPDjVjcKr0sHnFgLNEUMb0/4J+QErt/jvxtD
5Chs/yufQP1pivPWgu540HL7li+0=
X-Google-Smtp-Source: AGHT+IFNGMk1dyuKmXiify8G0g45pIEJGUveKUWVGa8tdpPEE4G5oolBPVM4FEo/N4XGolYAL3uCpEhNv+39YwNNaJY=
X-Received: by 2002:a5b:98f:0:b0:df4:b01b:3d21 with SMTP id
3f1490d57ef6-dff15490b28mr8015518276.49.1718599893070; Sun, 16 Jun 2024
21:51:33 -0700 (PDT)
MIME-Version: 1.0
From: kate momodu
Date: Sun, 16 Jun 2024 21:51:21 -0700
Message-ID:
Subject: =?UTF-8?B?R2zDvGNrd3Vuc2No?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000233c6e061b0eb824"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Aufmerksamkeit Die Martha Harper Foundation hat im Rahmen
unserer Wohltätigkeits- und Philanthropie-Mission 2024 (1.000.000 US-Dollar)
an Sie und Ihre Familie gespendet Ihre Gewinner-Referenznummer ist (DQ443F/BG2024/015)
Bitte antworten Sie auf diese E-Mail für Ansprüche unter: ( marthafoundation908@gmail.com)
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
[209.85.219.193 listed in dnsbl.ahbl.org]
[209.85.219.193 listed in dnsbl.ahbl.org]
[209.85.219.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.193 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.193 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[katemomodu90(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[katemomodu90(at)gmail.com]
0.1 TW_ZN BODY: Odd Letter Triples with ZN
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
0.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} =?UTF-8?B?R2zDvGNrd3Vuc2No?=
--000000000000233c6e061b0eb824
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Aufmerksamkeit
Die Martha Harper Foundation hat im Rahmen unserer Wohlt=C3=A4tigkeits- und
Philanthropie-Mission 2024 (1.000.000 US-Dollar) an Sie und Ihre Familie
gespendet
Ihre Gewinner-Referenznummer ist (DQ443F/BG2024/015)
Bitte antworten Sie auf diese E-Mail f=C3=BCr Anspr=C3=BCche unter: (
marthafoundation908@gmail.com)
Gr=C3=BCnder REV: MARTHA HARPER FOUNDATIONS
--000000000000233c6e061b0eb824
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--000000000000233c6e061b0eb824--
I3.46KL0LD42.1KI2.16KwhoissourceRank12.7MPIN0Summary reportDiagnosisDensity00n/a
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 17 Jun 2024 06:02:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sJB3A-00000000J1V-1g99
for dave@doctor.nl2k.ab.ca;
Mon, 17 Jun 2024 06:01:28 -0600
Resent-From: The Doctor
Resent-Date: Mon, 17 Jun 2024 06:01:28 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f193.google.com ([209.85.219.193]:52228)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1sJ4N3-00000000GAL-3YoV
for doctor@doctor.nl2k.ab.ca;
Sun, 16 Jun 2024 22:53:39 -0600
Received: by mail-yb1-f193.google.com with SMTP id 3f1490d57ef6-dff302847a8so1400753276.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1718599893; x=1719204693; darn=doctor.nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=iBDpPPjIEphdavomjwSQVaPXjcknN4j9Yj80TlZA3aI=;
b=FyY+n4tpjoaVbNEyJilvc3FtOtcVejD0Mwc4Ctsf3siY/nEyMqwtjIHyoiST/cB5c9
uomDcVL2++CyQ5oq426vwjxP8VgB4vBdQCYe8SI7xllhOxCAqmf0CS2kvz4nwf98bCXy
oBWWVw8fHXVUvJvk6Br03k0IuV3KBZK91NCVmDXSaJphOXypQDnNaCYPxrNeTC/7F7Y4
ly2Izrrul5Dfv9pT//f7BQiHA4lyDRxhK+E0xDwJuUaSTlKMREiNoGG5byIVYKboLFnM
J74YOhPEZNz/6Z19Fr+Z7AvYvqBzqJ8T8Em635faKysfG2RtlJZJlo5n7bMKiE5gK58u
O5Aw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1718599893; x=1719204693;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=iBDpPPjIEphdavomjwSQVaPXjcknN4j9Yj80TlZA3aI=;
b=plfTcflEQ5tEew+mXeuN873aeW0B0COFzg9+uPp+JXxkC/bo5aXRagxw1bnx37m7/v
9B4HqXrBlcRjHeP7v4x8HArEdNmog2T7FjMMlrhE1Nzbu2gl3C1M9bP9WXG0ApUEmpRJ
CVLQZaXCSbMQkb7eAacpaWQeNBAnTftdzkpK2WYIEuqo3Linq8rNfQEf/fgdz+3n5/kF
UDXrOxrEKNLQVk5Rfuk+e4CfdZYFcDOrgU7NCGqElPukEWPGHdDKZeE/csUInnbx5RhS
AVMwvZaoQT3rlFw60x+AAe5O/DLXHwQXRS32wduTtdVicjRAz5Rb4BefqCg2EW4jhAos
CTdw==
X-Forwarded-Encrypted: i=1; AJvYcCW8AOscF9DWDLeUv1eWCe8snrwyeKe3zZyuSYg79Exn8PBCjWsHOEwGk1CdTE5jv8ejnmPgjorKyzsXCVPQ0vYKIzVIrvP1HAs=
X-Gm-Message-State: AOJu0YwS5rC5Jp0cG5JNhSqUF5UUfpcwoCDLG2Iou/hWVS4sr+jgu50e
KW3GAdcsw9ZE+hirxqFSl/dUZgitqBYWrLwG9PJLPDjVjcKr0sHnFgLNEUMb0/4J+QErt/jvxtD
5Chs/yufQP1pivPWgu540HL7li+0=
X-Google-Smtp-Source: AGHT+IFNGMk1dyuKmXiify8G0g45pIEJGUveKUWVGa8tdpPEE4G5oolBPVM4FEo/N4XGolYAL3uCpEhNv+39YwNNaJY=
X-Received: by 2002:a5b:98f:0:b0:df4:b01b:3d21 with SMTP id
3f1490d57ef6-dff15490b28mr8015518276.49.1718599893070; Sun, 16 Jun 2024
21:51:33 -0700 (PDT)
MIME-Version: 1.0
From: kate momodu
Date: Sun, 16 Jun 2024 21:51:21 -0700
Message-ID:
Subject: =?UTF-8?B?R2zDvGNrd3Vuc2No?=
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="000000000000233c6e061b0eb824"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 8.0
X-Spam_score_int: 80
X-Spam_bar: ++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Aufmerksamkeit Die Martha Harper Foundation hat im Rahmen
unserer Wohltätigkeits- und Philanthropie-Mission 2024 (1.000.000 US-Dollar)
an Sie und Ihre Familie gespendet Ihre Gewinner-Referenznummer ist (DQ443F/BG2024/015)
Bitte antworten Sie auf diese E-Mail für Ansprüche unter: ( marthafoundation908@gmail.com)
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
[209.85.219.193 listed in dnsbl.ahbl.org]
[209.85.219.193 listed in dnsbl.ahbl.org]
[209.85.219.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.219.193 listed in dnsbl.ahbl.org]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
[209.85.219.193 listed in will-spam-for-food.eu.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.219.193 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.193 listed in wl.mailspike.net]
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit
[katemomodu90(at)gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[katemomodu90(at)gmail.com]
0.1 TW_ZN BODY: Odd Letter Triples with ZN
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
1.0 FREEMAIL_REPLY From and body contain different freemails
0.6 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} =?UTF-8?B?R2zDvGNrd3Vuc2No?=
--000000000000233c6e061b0eb824
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Aufmerksamkeit
Die Martha Harper Foundation hat im Rahmen unserer Wohlt=C3=A4tigkeits- und
Philanthropie-Mission 2024 (1.000.000 US-Dollar) an Sie und Ihre Familie
gespendet
Ihre Gewinner-Referenznummer ist (DQ443F/BG2024/015)
Bitte antworten Sie auf diese E-Mail f=C3=BCr Anspr=C3=BCche unter: (
marthafoundation908@gmail.com)
Gr=C3=BCnder REV: MARTHA HARPER FOUNDATIONS
--000000000000233c6e061b0eb824
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
Aufmerksamkeit
Die Martha Harper Foundation hat im Rahm=
en unserer Wohlt=C3=A4tigkeits- und Philanthropie-Mission 2024 (1.000.000 U=
S-Dollar) an Sie und Ihre Familie gespendet
Ihre Gewinner-Referenznu=
mmer ist (DQ443F/BG2024/015)
=C2=A0Bitte antworten Sie auf diese E-Mail =
f=C3=BCr Anspr=C3=BCche unter: (
.com">marthafoundation908@gmail.com)
=C2=A0Gr=C3=BCnder REV: MAR=
THA HARPER FOUNDATIONS
Die Martha Harper Foundation hat im Rahm=
en unserer Wohlt=C3=A4tigkeits- und Philanthropie-Mission 2024 (1.000.000 U=
S-Dollar) an Sie und Ihre Familie gespendet
Ihre Gewinner-Referenznu=
mmer ist (DQ443F/BG2024/015)
=C2=A0Bitte antworten Sie auf diese E-Mail =
f=C3=BCr Anspr=C3=BCche unter: (
.com">marthafoundation908@gmail.com)
=C2=A0Gr=C3=BCnder REV: MAR=
THA HARPER FOUNDATIONS
--000000000000233c6e061b0eb824--
I3.46KL0LD42.1KI2.16KwhoissourceRank12.7MPIN0Summary reportDiagnosisDensity00n/a
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments