Kein Spam?

SPAM: Nomadesk - FileLink, Anna Müller is sharing Glückwunsch! Sie haben den Ostergeldpreis gewonnen !!!.pdf

Absender: norep**@*omadesk.com Gesendet am: 28.04.2019 14:41:15 Betreff: Nomadesk - FileLink, Anna Müller is sharing Glückwunsch! Sie haben den Ostergeldpreis gewonnen !!!.pdf Anzahl: 8

Nachricht (HTML Version)

Nachricht (Plain Version)

From: Anna Müller
Link: https://nmd.sk/vCKyTtQn
Message:Glückwunsch! Sie haben den Ostergeldpreis gewonnen !!! Um zu erhalten, folgen Sie dem Link http://y.dobokon.ru/184e
Please visit https://secure.nomadesk.com/partner for more product information and support.
Thank you for using Nomadesk.

Header

Return-Path: bounce+dadf21.83f0-ankimai=arcor.**@*omadesk.com
X-Original-To: ankim**@*iscardmail.de
Received: from vsmx004.vodafonemail.xion.oxcs.net (vsmx012.vodafonemail.xion.oxcs.net [153.92.174.xxx])
by mx.discard.email (Go MTA) with ESMTP
for ankim**@*iscardmail.de; Sun, 28 Apr 2019 14:41:15 +0200 (CEST)
Received: from imap-backend-16.dovecot.xion.oxcs.net (imap-backend-16.dovecot.xion.oxcs.net [10.10.4.xxx])
by mta-5-out.mta.xion.oxcs.net (Postfix) with ESMTP id 2BA5F1C04854
for ankim**@*iscardmail.de; Sun, 28 Apr 2019 12:41:15 +0000 (UTC)
X-Sieve: Pigeonhole Sieve 0.5.5 (2483b085)
X-Sieve-Redirected-From: 3@2107557
Delivered-To: 3@2107557
Received: from imap-director-5.novalocal ([10.10.5.xxx])
by imap-backend-16.dovecot.xion.oxcs.net with LMTP
id uCRSA2ufxVwvYgAAj9nX6w
(envelope-from bounce+dadf21.83f0-ankimai=arcor.**@*omadesk.com)
for 3@2107557; Sun, 28 Apr 2019 12:41:15 +0000
Received: from mx020l.vodafonemail.xion.oxcs.net ([10.10.2.xxx])
by imap-director-5.novalocal with LMTP id oGL1AmufxVyJDgAAMBTjPQ
; Sun, 28 Apr 2019 12:41:15 +0000
Received: from vsmx001.vodafonemail.xion.oxcs.net (mta-5.mta.xion.oxcs.net [10.10.2.xxx])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by mx020l.vodafonemail.xion.oxcs.net (Postfix) with ESMTPS id 44sS8C0GfDzdbxW
for ankim**@*rcor.de; Sun, 28 Apr 2019 12:41:15 +0000 (UTC)
Received: from mta-p1.oxcloud-vadesecure.net (mta-p1.oxcloud-vadesecure.net [157.97.76.xxx])
(using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits))
(No client certificate requested)
by vsmx001.vodafonemail.xion.oxcs.net (Postfix) with ESMTPS id 44sS8B70gtz9tcC
for ankim**@*rcor.de; Sun, 28 Apr 2019 12:41:14 +0000 (UTC)
Received: from m32-11.eu.mailgun.net (m32-11.eu.mailgun.net [141.193.32.xxx])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
(No client certificate requested)
by mta-p1.oxcloud-vadesecure.net (ox1mtai57p) with ESMTPS id C853323657C
for ankim**@*rcor.de; Sun, 28 Apr 2019 12:41:14 +0000 (UTC)
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=nomadesk.com; q=dns/txt;
s=nmd; t=1556455274; h=
Message-ID:
Date:
Subject:
To: From:

Content-Type:
MIME-Version: Sender;
bh=lmeWumJnn2oFMbLNCy0RRVmmvlCDKp28yL3ScfvrpyE=; b=O77V63DFVDCI67JmgQXe1fRu4mdQFCLBUb4w8tBMhQ/gdeFUPJi9rVOcL3fuVm2tMuyiv9tP
nxyiESMPsNz1RTAb2c6f0vxyWrUHQEJ0erw5M+/REgrKIgiTRF7+Dig9SzBlRaPF8i6Lvjcl
nZVXgAS5lGCvnJgxJLKWHVzmPo0=
X-Mailgun-Sending-Ip: 141.193.32.xxx
X-Mailgun-Sid: WyI4OWUxZCIsICJhbmtpbWFpQGFyY29yLmRlIiwgIjgzZjAiXQ==
Sender: norep**@*omadesk.com
Received: from localhost (wwaow02.unifiedpost.com [188.64.79.xxx])
by mxa.mailgun.org with ESMTP id 5cc59f6a.7f699a1a0630-smtp-out-n01;
Sun, 28 Apr 2019 12:41:14 -0000 (UTC)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_73601c6d52ef312ffdb67e57ac70b8af"
From: norep**@*omadesk.com
To: ankim**@*rcor.de
Subject: =?UTF-8?B?Tm9tYWRlc2sgLSBGaWxlTGluaywgQW5uYSBNw7xsbGVyIGlzIHNoYXJpbmcgR2zDvGNrd3Vuc2NoISBTaWUgaGFiZW4gZGVuIE9zdGVyZ2VsZHByZWlzIGdld29ubmVuICEhIS5wZGY=?=
Date: Sun, 28 Apr 2019 12:41:13 +0000
Message-ID: 5cc59f69e****@*omadesk.com
X-VRC-SPAM-STATUS: 0,49,gggruggvucftvghtrhhoucdtuddrgeduuddriedtgdehjecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqigfgfgenuceurghilhhouhhtmecufedtudenucgoufhushhpvggtthffohhmrghinhculdegledmnecujfgurhepgggthffvufffkfesrgdtreertddtjeenucfhrhhomhepnhhorhgvphhlhiesnhhomhgruggvshhkrdgtohhmnecuffhomhgrihhnpehnmhgurdhskhdpnhhomhgruggvshhkrdgtohhmpdguohgsohhkohhnrdhruhenucfkphepudeguddrudelfedrfedvrdduuddpudekkedrieegrdejledriedunecurfgrrhgrmhepmhgrgihmshhgshhiiigvpedutdegkeehjeeipdhhvghlohepmhefvddquddurdgvuhdrmhgrihhlghhunhdrnhgvthdpihhnvghtpedugedurdduleefrdefvddruddupdhmrghilhhfrhhomhepsghouhhntggvodgurggufhdvuddrkeeffhdtqdgrnhhkihhmrghipegrrhgtohhrrdguvgesnhhomhgruggvshhkrdgtohhmpdhrtghpthhtoheprghnkhhimhgrihesrghrtghorhdruggvnecuvehluhhsthgvrhfuihiivgepuddt
X-VRSPAM-STATE: legit
X-VR-SPAM-STATE: 0
X-VR-SPAM-SCORE: 49
X-VR-SPF-RESULT: nil
X-Virus-Status-VR: clean
X-Virus-Status-CA: clean
X-VRC-SPAM-STATUS: 0,49,gggruggvucftvghtrhhoucdtuddrgeduuddriedtgdehjecutefuodetggdotefrodftvfcurfhrohhfihhlvgemucfqigfgfgenuceurghilhhouhhtmecufedtudenucgoufhushhpvggtthffohhmrghinhculdegledmnecujfgurhepgggthffvufffkfesrgdtreertddtjeenucfhrhhomhepnhhorhgvphhlhiesnhhomhgruggvshhkrdgtohhmnecuffhomhgrihhnpehnmhgurdhskhdpnhhomhgruggvshhkrdgtohhmpdguohgsohhkohhnrdhruhenucfkphepudeguddrudelfedrfedvrdduuddpudekkedrieegrdejledriedunecurfgrrhgrmhepmhgrgihmshhgshhiiigvpedutdegkeehjeeipdhhvghlohepmhefvddquddurdgvuhdrmhgrihhlghhunhdrnhgvthdpihhnvghtpedugedurdduleefrdefvddruddupdhmrghilhhfrhhomhepsghouhhntggvodgurggufhdvuddrkeeffhdtqdgrnhhkihhmrghipegrrhgtohhrrdguvgesnhhomhgruggvshhkrdgtohhmpdhrtghpthhtoheprghnkhhimhgrihesrghrtghorhdruggvnecuvehluhhsthgvrhfuihiivgepuddt
X-VRSPAM-STATE: legit
X-VRC-POLICY-STATUS: t=1,a=1,l=0