Foreign language spam
Posted by Dave Yadallee onX-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 20 May 2026 15:53:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPopq-000000004nk-0GUe
for dave@doctor.nl2k.ab.ca;
Wed, 20 May 2026 15:52:14 -0600
Resent-From: The Doctor
Resent-Date: Wed, 20 May 2026 15:52:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from [216.238.75.135] (port=36436 helo=cloud.pesqueria.gob.mx)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.3 (FreeBSD))
(envelope-from
id 1wPnBI-00000000OjD-1i5r
for root@nk.ca;
Wed, 20 May 2026 14:06:24 -0600
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=pesqueria.gob.mx; s=default; h=Content-Transfer-Encoding:Content-Type:
MIME-Version:Message-ID:Date:Subject:To:From:Reply-To:Sender:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=TpImFOEBRT6qx2y8iwwpA40KAwnl/WOJQtyxPZrQMFg=; b=Ec4d7TCq3dkUtMyhW1Wqcz6ly1
mjEnmbBw2BXx8KLgBgosYgc1zQWT7Wq9hrMguXgkkaZ1ZOqsaxl5tqOtBaegUDbpyIkngCVBUVsPQ
YuOvDdgGmkfm9H4GW3LM3vBDIE8Kj+Ra0DTCZL6pbsfL0XG+VmonUx0cfzEc7caCdkTW+oaBJWvhW
C0SZmUJ65awR5OsevVqyKDwU2exbIfMccccNTs6/9D3ULSSlUnXS4CD9iG82zZ57bajWUT0AhIxop
MxNliGmFZ0EXOtdKUuGNfzdz68I76cPofA1UHP6Vqr2Z34J30FzRrwM8z1gamgUDMDF4k22cRaw3p
i5eZqkmA==;
Received: from ec2-16-59-125-90.us-east-2.compute.amazonaws.com ([16.59.125.90]:51213)
by cloud.pesqueria.gob.mx with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.99.1)
(envelope-from
id 1wPnAJ-0000000EhPV-1p3m
for root@nk.ca;
Wed, 20 May 2026 14:05:13 -0600
Reply-To: verarbeitungabteilung@gmail.com
From: Patricia Muller Dos Santos
To: root@nk.ca
Subject: =?UTF-8?B?TWVkZGVsYW5kZSBvbSBlbiBkb25hdGlvbiBww6UgMyAwMDAgMDAwIGV1cm8u?=
Date: 20 May 2026 20:05:12 +0000
Message-ID: <20260520200512.54ABA2B592C14241@pesqueria.gob.mx>
MIME-Version: 1.0
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - cloud.pesqueria.gob.mx
X-AntiAbuse: Original Domain - nk.ca
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - pesqueria.gob.mx
X-Get-Message-Sender-Via: cloud.pesqueria.gob.mx: authenticated_id: sipinna@pesqueria.gob.mx
X-Authenticated-Sender: cloud.pesqueria.gob.mx: sipinna@pesqueria.gob.mx
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam_score: 10.9
X-Spam_score_int: 109
X-Spam_bar: ++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Grattis, Vi väntade på att du skulle meddela oss när du ville
att vi skulle skicka dig det donerade beloppet på 3 000 000,00 euro (tre
miljoner euro), vilket ONU-organisationen hade för överföring. Din e-posta
[...]
Content analysis details: (10.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[216.238.75.135 listed in dnsbl.ahbl.org]
[216.238.75.135 listed in dnsbl.ahbl.org]
[216.238.75.135 listed in dnsbl.ahbl.org]
[216.238.75.135 listed in dnsbl.ahbl.org]
[16.59.125.90 listed in dnsbl.ahbl.org]
[16.59.125.90 listed in dnsbl.ahbl.org]
[16.59.125.90 listed in dnsbl.ahbl.org]
[16.59.125.90 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[216.238.75.135 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[216.238.75.135 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[216.238.75.135 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[216.238.75.135 listed in dnsbl.ahbl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
-2.0 RCVD_IN_RP_SAFE RBL: Sender in ReturnPath Safe - Contact
safe-sa@returnpath.net
[Excessive Number of Queries |
-3.0 RCVD_IN_RP_CERTIFIED RBL: Sender in ReturnPath Certified - Contact
cert-sa@returnpath.net
[Excessive Number of Queries |
2.3 MANGLED_FORM BODY: mangled form
0.6 J_CHICKENPOX_31 BODY: 3alpha-pock-1alpha
1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL,
https://senderscore.org/blacklistlookup/
[216.238.75.135 listed in bl.score.senderscore.com]
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[216.238.75.135 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
[16.59.125.90 listed in will-spam-for-food.eu.org]
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_FONT_SIZE_HUGE BODY: HTML font size is huge
1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.0 LOTS_OF_MONEY Huge... sums of money
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information
0.6 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
Subject: {SPAM?} =?UTF-8?B?TWVkZGVsYW5kZSBvbSBlbiBkb25hdGlvbiBww6UgMyAwMDAgMDAwIGV1cm8u?=
Grattis,
Vi väntade på att du skulle meddela oss =
när du ville att vi skulle skicka dig det donerade beloppet på 3=
000 000,00 euro (tre miljoner euro), vilket ONU-organisationen hade fö=
;r överföring. Din e-postadress var den enda information som ONU =
gav oss så att vi kunde överföra medlen till dig. Jag har i=
nformerats om att du är förmånstagare till donationsint&aum=
l;kterna..
Din e-postadress root@nk.ca valdes från ONU:s donationsformulär.=
 =
; &n=
bsp;  =
;
Obs: Du har blivit utvald bland mottagarna av ONU-donationer, och jag uppm=
untrar dig personligen att använda medlen klokt. Vi behöver dock =
din information enligt följande för att påbörja transa=
ktionsprocessen..
Nedan hittar du information om den advokat/skadeomb=
ud som du behöver kontakta för att hjälpa dig med att behand=
la din donation..
EFTERNAMN:
EFTERNAMN:
FÖDELSEDATUM:<=
br>ARBETE:
ADRESS:
TEL:
MOBIL:
FAX:
Direkt e-postadress: root@nk.ca
Datum:
Pass eller körko=
rt:
Uppmärksamhet!!
För att inleda din ansökan &=
auml;r det viktigt att du omedelbart sätter dig ner och ber din ombud =
att fylla i formuläret nedan och följa instruktionerna för e=
n snabb och enkel överföring av dina vinster..
Med v=
änliga hälsningar,
Fru Christina Huber Keiser
>