German language spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 29 Jun 2026 15:45:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1weJmK-00000000DzG-03Sr
for dave@doctor.nl2k.ab.ca;
Mon, 29 Jun 2026 15:44:32 -0600
Resent-From: The Doctor
Resent-Date: Mon, 29 Jun 2026 15:44:31 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail.senamhi.gob.pe ([190.119.131.37]:58700 helo=senamhi-mail.senamhi.gob.pe)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1weJIV-000000009mA-3lYt
for doctor@doctor.nl2k.ab.ca;
Mon, 29 Jun 2026 15:13:53 -0600
Received: from localhost (localhost [127.0.0.1])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTP id 8707838989CF41;
Mon, 29 Jun 2026 15:32:44 -0500 (-05)
Received: from senamhi-mail.senamhi.gob.pe ([127.0.0.1])
by localhost (senamhi-mail.senamhi.gob.pe [127.0.0.1]) (amavis, port 10032)
with ESMTP id NrmHiC0P9BFo; Mon, 29 Jun 2026 15:32:43 -0500 (-05)
Received: from senamhi-mail.senamhi.gob.pe (localhost [127.0.0.1])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTPS id DD671389890BB3;
Mon, 29 Jun 2026 15:32:42 -0500 (-05)
DKIM-Filter: OpenDKIM Filter v2.10.3 senamhi-mail.senamhi.gob.pe DD671389890BB3
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=senamhi.gob.pe;
s=92A4C6C2-509C-11F1-B330-7558252557ED; t=1782765163;
bh=M0kxO+YksMF/96KZnbWJTPsLmimEsgGFWMaRIOB+KmI=;
h=Date:From:Message-ID:MIME-Version;
b=JhvMFVly8RsX0nW78LJBNcUDJ/P7Rq/be1j5K0cji8fo3Ti7/kW0n4+3XRLfVTGaH
lrw5QYT1P8Le+xfDn4pNdv0U6htuwRrVVKBDtG9RDlFYFbhA/JrYt22NvZQ1ya3h08
eoZqPybguQ6FZmA2zDz63nskq4KmsRteZZGoBp6Qp/Nef5Gg7OEJMRl/hJOMZYddhS
bK/w1JMgfbnc8L47sz2ZSqwMJb8t0YPN/x4/oaaX2tLQFQQYVtphrayhdV/Ia6HcZb
utJlVzNZNKQ19jInCbbuShD7pMB10ctmBpQ3SAPZ2CaLh4BqCaClMjcH/ASvVIwv8O
QDGi1cvsE/+FQ==
Received: from senamhi-mail.senamhi.gob.pe (mail.senamhi.gob.pe [10.10.20.5])
by senamhi-mail.senamhi.gob.pe (Postfix) with ESMTP id 5E37B3160FB8C8;
Mon, 29 Jun 2026 15:32:37 -0500 (-05)
Date: Mon, 29 Jun 2026 15:32:37 -0500 (PET)
From: c.mori@senamhi.gob.pe
Reply-To: info@stefanquandtfoundation.com
Message-ID: <1436731749.204083.1782765157327.JavaMail.zimbra@senamhi.gob.pe>
Subject: =?utf-8?Q?GL=C3=9CCKWUNSCH?=
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_fbe075b9-c222-4959-b0a0-1a69291e7c90"
X-Originating-IP: [146.70.36.134]
X-Mailer: Zimbra 8.8.15_GA_4581 (zclient/8.8.15_GA_4581)
Thread-Index: YLHG5XRSQxyJKIf6yy3TH0yx1NdaDA==
Thread-Topic: =?utf-8?Q?GL=C3=9CCKWUNSCH?=
X-Spam_score: 6.3
X-Spam_score_int: 63
X-Spam_bar: ++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Herzlichen Glückwunsch! Wir freuen uns, Ihnen mitteilen
zu können, dass Ihre E-Mail-Adresse für eine Spende in Höhe von 1.200.000,00
USD aus dem Spendenprogramm der Stefan Quandt Foundation ausgewählt wurde.
Für weitere [...]
Content analysis details: (6.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[190.119.131.37 listed in dnsbl.ahbl.org]
[146.70.36.134 listed in dnsbl.ahbl.org]
[146.70.36.134 listed in dnsbl.ahbl.org]
[146.70.36.134 listed in dnsbl.ahbl.org]
[146.70.36.134 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[190.119.131.37 listed in dnsbl.ahbl.org]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[190.119.131.37 listed in bb.barracudacentral.org]
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 MR_NOT_ATTRIBUTED_IP Beta rule: an non-attributed IPv4 found in
headers
1.2 MISSING_HEADERS Missing To: header
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[190.119.131.37 listed in bl.score.senderscore.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[146.70.36.134 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
[190.119.131.37 listed in will-spam-for-food.eu.org]
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 NO_RDNS2 Sending MTA has no reverse DNS
1.9 REPLYTO_WITHOUT_TO_CC No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
Subject: {SPAM?} =?utf-8?Q?GL=C3=9CCKWUNSCH?=
--=_fbe075b9-c222-4959-b0a0-1a69291e7c90
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Herzlichen Gl=C3=BCckwunsch!
Wir freuen uns, Ihnen mitteilen zu k=C3=B6nnen, dass Ihre E-Mail-Adresse f=
=C3=BCr eine Spende in H=C3=B6he von 1.200.000,00 USD aus dem Spendenprogra=
mm der Stefan Quandt Foundation ausgew=C3=A4hlt wurde. F=C3=BCr weitere Inf=
ormationen zu dieser Spende und den erforderlichen Schritten zur Bearbeitun=
g und Auszahlung Ihrer Pr=C3=A4mie kontaktieren Sie bitte unsere offizielle=
Spendenabteilung per E-Mail unter info@stefanquandtfoundation.com.
--=_fbe075b9-c222-4959-b0a0-1a69291e7c90
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable
div>
Herzlichen Gl=C3=BCckwunsch!
>
sse f=C3=BCr eine Spende in H=C3=B6he von 1.200.000,00 USD aus dem Spendenp=
rogramm der Stefan Quandt Foundation ausgew=C3=A4hlt wurde. F=C3=BCr weiter=
e Informationen zu dieser Spende und den erforderlichen Schritten zur Bearb=
eitung und Auszahlung Ihrer Pr=C3=A4mie kontaktieren Sie bitte unsere offiz=
ielle Spendenabteilung per E-Mail unter info@stefanquandtfoundation.com.
iv>
--=_fbe075b9-c222-4959-b0a0-1a69291e7c90--