Urgency spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 18 May 2022 07:58:27 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1nrKBF-000NPr-Ur
for dave@doctor.nl2k.ab.ca;
Wed, 18 May 2022 07:57:37 -0600
Resent-From: The Doctor
Resent-Date: Wed, 18 May 2022 07:57:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f49.google.com ([209.85.217.49]:35803)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1nrK4l-000MxZ-Fs
for root@nk.ca;
Wed, 18 May 2022 07:50:59 -0600
Received: by mail-vs1-f49.google.com with SMTP id d22so2101635vsf.2
for; Wed, 18 May 2022 06:50:32 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=ZAXpFFAU9tnT7Bj8C67YZcRl8DY9Q86U+Q+cIyfPwpk=;
b=aeetabiVBaHyAZqo6+Z7w1Q/Us54eiqgyXmBkzF7LzcA4HozpFnBoeMILqHlZlHOFz
SuM6/PKTvJhMTBUOGvsyHM1mcPt/xrqPwD6oMTqgVcNjMwUvppFGApjywEcDiMJDvihA
ZHPQmi7fJZGc0JK/71j+pWBFWh1MEyPM9RGEYdKYQYXWQvxxRIwKOuTHCvPueAhlfLf3
k/iXmm8Ck1zZe7RvUAWR9fXSonZu+Mlfb8z3Z6RdFmhkY2CRUEkO4sdnBemKHeRBSMSy
okt80dTG0ZYmn5ucSzgmc+5UIrfGdbd/KZxkVkY7JiqLG0WYEeZKNIqNzMz5+qCKBy/g
bZlg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=ZAXpFFAU9tnT7Bj8C67YZcRl8DY9Q86U+Q+cIyfPwpk=;
b=1XwC4b8LUctSzLSD643cZ6D77IdCWxIhLVusPs/BkHf1fGfhbXxgWU9Ix0UW4BHZ94
6y15vWLa0yhOMc1l5P1sFUCdnPdLxyYd9s3NdS7PyOJ8TO8hkomIjcYANhgICo7ee98N
eBC6N/nFGpNoPkoIJA2K9k4cQRGsLKlelWzJfb47RlKs/LGWwlDiHUkg71zO5ETIyaT4
DPNFw6Keec52jrYWPWbD/FyTufn12TiHAYSIwJYD4FH5mnEYb4puREtPi5rcjjDUbDXI
PPEJPVKmjolgUYWncrn7g4W6n7kWzviL4gG5JVCZfQPwMPjvj9SotAhWjzl4aARuIWPl
I2Cg==
X-Gm-Message-State: AOAM530nilAVGWt/uupyY24DPTliZZDE4TLRm8z+LDEFENU5wRj3GMoM
nV2T6X1zmJxc0BzKmMdCZ4TsSgQhsGyI3gH+ZC0=
X-Google-Smtp-Source: ABdhPJw+yrTp2U5yCn2+lVZCmbAhFf3Xo+9hv7NWQsjIpXeBXes5BN3pIW0fYEkYMwadhE+0Uh1SSKEloA60VWeiF8s=
X-Received: by 2002:a67:d803:0:b0:335:d948:d0d6 with SMTP id
e3-20020a67d803000000b00335d948d0d6mr735645vsj.32.1652881826100; Wed, 18 May
2022 06:50:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a67:1905:0:0:0:0:0 with HTTP; Wed, 18 May 2022 06:50:25
-0700 (PDT)
Reply-To: m.wood@indamail.hu
From: Kristalina Georgieva
Date: Wed, 18 May 2022 14:50:25 +0100
Message-ID:
Subject: Urgent Attention!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 12.1
X-Spam_score_int: 121
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attn beneficiary, We have been waiting for you to contact
us about your package that was seized some time ago as a result of not paying
the charge for IMF Tax Clearance . Now, all modalities regarding your fund
release [...]
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[maijiddamustapha222[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[maijiddamustapha222[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Urgent Attention!
Attn beneficiary,
We have been waiting for you to contact us about your package that was
seized some time ago as a result of not paying the charge for IMF Tax
Clearance . Now, all modalities regarding your fund release have been
put in place and your total sum of US$2,500,000.00 has been logged
into a certified Bank draft to be delivered to your doorstep. This is
as a result of the financial report we received from the US President
Joe Biden to boost the exercise of clearing all outstanding debts owed
to you and other lucky individuals who have been found not to have
received their overdue funds.
It is my pleasure to inform you that your certified Bank Draft has
been registered with DHL Express for delivery to your doorstep and it
is estimated to be delivered within the next 3 working days. You are
therefore advised to contact DHL Dispatch Agent so he can issue to you
the delivery tracking information which will enable you to monitor the
movement of the delivery until it finally arrives at your doorstep.
Reconfirm your delivery details such as Full Name/Address/Phone number
and also include your registration number(DHLGX000909)
Below is the contact information.
DHL Express Service Point
Contact Person: Michael Wood
Email: m.wood@indamail.hu
Tel +1 (516) 953 4055
Congratulations, your long awaited funds will now be delivered to you
without further delay.
Regards,
Kristalina Georgieva
Managing Director(IMF)
1900 Pennsylvania Avenue NW,20431
Washington, D.C, United States
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 18 May 2022 07:58:27 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1nrKBF-000NPr-Ur
for dave@doctor.nl2k.ab.ca;
Wed, 18 May 2022 07:57:37 -0600
Resent-From: The Doctor
Resent-Date: Wed, 18 May 2022 07:57:37 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vs1-f49.google.com ([209.85.217.49]:35803)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1nrK4l-000MxZ-Fs
for root@nk.ca;
Wed, 18 May 2022 07:50:59 -0600
Received: by mail-vs1-f49.google.com with SMTP id d22so2101635vsf.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=ZAXpFFAU9tnT7Bj8C67YZcRl8DY9Q86U+Q+cIyfPwpk=;
b=aeetabiVBaHyAZqo6+Z7w1Q/Us54eiqgyXmBkzF7LzcA4HozpFnBoeMILqHlZlHOFz
SuM6/PKTvJhMTBUOGvsyHM1mcPt/xrqPwD6oMTqgVcNjMwUvppFGApjywEcDiMJDvihA
ZHPQmi7fJZGc0JK/71j+pWBFWh1MEyPM9RGEYdKYQYXWQvxxRIwKOuTHCvPueAhlfLf3
k/iXmm8Ck1zZe7RvUAWR9fXSonZu+Mlfb8z3Z6RdFmhkY2CRUEkO4sdnBemKHeRBSMSy
okt80dTG0ZYmn5ucSzgmc+5UIrfGdbd/KZxkVkY7JiqLG0WYEeZKNIqNzMz5+qCKBy/g
bZlg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=ZAXpFFAU9tnT7Bj8C67YZcRl8DY9Q86U+Q+cIyfPwpk=;
b=1XwC4b8LUctSzLSD643cZ6D77IdCWxIhLVusPs/BkHf1fGfhbXxgWU9Ix0UW4BHZ94
6y15vWLa0yhOMc1l5P1sFUCdnPdLxyYd9s3NdS7PyOJ8TO8hkomIjcYANhgICo7ee98N
eBC6N/nFGpNoPkoIJA2K9k4cQRGsLKlelWzJfb47RlKs/LGWwlDiHUkg71zO5ETIyaT4
DPNFw6Keec52jrYWPWbD/FyTufn12TiHAYSIwJYD4FH5mnEYb4puREtPi5rcjjDUbDXI
PPEJPVKmjolgUYWncrn7g4W6n7kWzviL4gG5JVCZfQPwMPjvj9SotAhWjzl4aARuIWPl
I2Cg==
X-Gm-Message-State: AOAM530nilAVGWt/uupyY24DPTliZZDE4TLRm8z+LDEFENU5wRj3GMoM
nV2T6X1zmJxc0BzKmMdCZ4TsSgQhsGyI3gH+ZC0=
X-Google-Smtp-Source: ABdhPJw+yrTp2U5yCn2+lVZCmbAhFf3Xo+9hv7NWQsjIpXeBXes5BN3pIW0fYEkYMwadhE+0Uh1SSKEloA60VWeiF8s=
X-Received: by 2002:a67:d803:0:b0:335:d948:d0d6 with SMTP id
e3-20020a67d803000000b00335d948d0d6mr735645vsj.32.1652881826100; Wed, 18 May
2022 06:50:26 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a67:1905:0:0:0:0:0 with HTTP; Wed, 18 May 2022 06:50:25
-0700 (PDT)
Reply-To: m.wood@indamail.hu
From: Kristalina Georgieva
Date: Wed, 18 May 2022 14:50:25 +0100
Message-ID:
Subject: Urgent Attention!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nk.ca
X-Spam_score: 12.1
X-Spam_score_int: 121
X-Spam_bar: ++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Attn beneficiary, We have been waiting for you to contact
us about your package that was seized some time ago as a result of not paying
the charge for IMF Tax Clearance . Now, all modalities regarding your fund
release [...]
Content analysis details: (12.1 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[maijiddamustapha222[at]gmail.com]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.217.49 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[maijiddamustapha222[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
information
1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.3 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Urgent Attention!
Attn beneficiary,
We have been waiting for you to contact us about your package that was
seized some time ago as a result of not paying the charge for IMF Tax
Clearance . Now, all modalities regarding your fund release have been
put in place and your total sum of US$2,500,000.00 has been logged
into a certified Bank draft to be delivered to your doorstep. This is
as a result of the financial report we received from the US President
Joe Biden to boost the exercise of clearing all outstanding debts owed
to you and other lucky individuals who have been found not to have
received their overdue funds.
It is my pleasure to inform you that your certified Bank Draft has
been registered with DHL Express for delivery to your doorstep and it
is estimated to be delivered within the next 3 working days. You are
therefore advised to contact DHL Dispatch Agent so he can issue to you
the delivery tracking information which will enable you to monitor the
movement of the delivery until it finally arrives at your doorstep.
Reconfirm your delivery details such as Full Name/Address/Phone number
and also include your registration number(DHLGX000909)
Below is the contact information.
DHL Express Service Point
Contact Person: Michael Wood
Email: m.wood@indamail.hu
Tel +1 (516) 953 4055
Congratulations, your long awaited funds will now be delivered to you
without further delay.
Regards,
Kristalina Georgieva
Managing Director(IMF)
1900 Pennsylvania Avenue NW,20431
Washington, D.C, United States