Beneficiary spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 25 Jun 2022 17:41:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o5FNu-000Og2-03
for dave@doctor.nl2k.ab.ca;
Sat, 25 Jun 2022 17:40:14 -0600
Resent-From: The Doctor
Resent-Date: Sat, 25 Jun 2022 17:40:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f172.google.com ([209.85.128.172]:36647)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o5F9P-000NgG-BS
for doctor@doctor.nl2k.ab.ca;
Sat, 25 Jun 2022 17:25:20 -0600
Received: by mail-yw1-f172.google.com with SMTP id 00721157ae682-3176d94c236so55263957b3.3
for; Sat, 25 Jun 2022 16:24:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=gcDYLcWSuQyPQ/bB94BIy46ybmIySqIBJfEt+WWb428=;
b=UmGuOnMEGqFHDACTgkYmLjH9vVooizOr5f+CUj/C/cDyDlaU/UwP+K2zBsgnOpJd/3
hjGJ8mr+qB71fUiruUWEA0BUkRb362olFwIffia0g2zfkdF96xuja5pg8UybGNCrCfv6
TYDZSajdpw9oXdAp9eTcRChPFFL5dUTa1jK5951nTb0W2r71fTDfp1y38bwo5Z3AuKCF
gp1AxkPE0yunV4CALgmS+kYgwNtaf4XavC8X6zPSc16EzLi/Ohnnbo2bIVR1z3oHAF+H
f+napmLYDbHUZ4qEliTKTqAy1FaxSVHLBIVEN6wrnY+FgG6MNhg3WcnjDrwDwvPat7Lf
oodw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=gcDYLcWSuQyPQ/bB94BIy46ybmIySqIBJfEt+WWb428=;
b=S8uTXPTo1wezNUYNclaRDuL4raF90+z3EhBc1cKvnLLAGt+HajwIwMJmlaMZkBLHx1
7s2ITGGCFWUq4Up+MPDv6tv78wnYNbF/FAKPigy1B3bPui2jlNixNMqQKZtiMpVxg99s
pxcCjYRWeaoGiZxJDo00cjyTMQ8xax/2Sb6MZugZgisYIca0GjXG2ksKkSQkx3cgrC8V
kDpBZz/XA6uJklQMu3ICnqK2l1W7l5hZLliF0puQanaHlK8FyUWVwhTSKFo1p7wZWhyp
1vcMRNkZ1cVsjeqFhNGXUhwWfi/A9kDgP8zadWb8diK75dPJd9w4qy21rH33rSl2Pf2B
I12g==
X-Gm-Message-State: AJIora8HkKASOA7jNY7MIxgmbysKnXQVOL9EqMW/oLo4X1dPqOj2fm/9
JbvFVX+ciIBQEdt7Aqy4mMg+qf7jtDHjHokpPQ==
X-Google-Smtp-Source: AGRyM1tVh/ZiAhSmuSVlIyLXNaRIEzhtr7WKi9lCD/bPyDCbiVYmJ9lrBWuZZnTydRMGhAowH4zwdbaryIxE9UUUfg0=
X-Received: by 2002:a81:70d7:0:b0:317:64c0:df3d with SMTP id
l206-20020a8170d7000000b0031764c0df3dmr7139902ywc.59.1656199492299; Sat, 25
Jun 2022 16:24:52 -0700 (PDT)
MIME-Version: 1.0
Reply-To: imf741575@gmail.com
From: IMF
Date: Sun, 26 Jun 2022 00:24:34 +0100
Message-ID:
Subject: Dear beneficiary
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006a70c705e24dfe51"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 21.9
X-Spam_score_int: 219
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- INTERNATIONAL MONETARY FUND 700 19th Street, N.W., Washington,
D.C. INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$4.8m) Dear beneficiary
Content analysis details: (21.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.172 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[imf741575[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[supremecourtspain[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 HK_SCAM_N15 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.9 YOU_INHERIT Discussing your inheritance
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
1.0 MONEY_BARRISTER Lots of money from a UK lawyer
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Dear beneficiary
--0000000000006a70c705e24dfe51
Content-Type: text/plain; charset="UTF-8"
--
INTERNATIONAL MONETARY FUND
700 19th Street, N.W.,
Washington, D.C.
INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$4.8m)
Dear beneficiary
This is the second time we are notifying you about this said fund. After
due vetting and evaluation of your Inheritance file which The National
Petroleum Corporation (NNPC) in conjunction with the Ministry Of Finance
Forwarded and contacted us to see to your immediate payment of the sum of
US$4.8 million from their Offshore Account with us.
We were meant to understand from our findings that you have been going
through hard ways by paying a lot of charges to see to the release of your
fund (US$4.8 million), which has been delayed. Which has been the handiwork
of some miscreant elements from Nigeria and UK, We advice that you stop
further communication with any correspondence from Nigeria as you have met
up with the whole requirements, your representatives in Nigeria will tell
you to still go ahead with them but on your own risk.
The only thing required from you is to obtain Non-Resident Clearance
Form/Receipt which we are not asking you to pay the fee to us here in
United State as the Government of United Kingdom have paid us for
handling/processing of your payment with other customers. We will help you
to see that you obtain the Non-Residential Clearance form which will cost
you the sum of ($500) so that our bank will affect immediate transfer of
your Inheritance fund sum of (US$4.8 million) into your designated bank
account. If you follow up our directives, your fund will reflect in your
account within five Bank working days from the day you obtain your
Non-Residential Clearance form.
Reconfirm the following:
Your Full Name:
Address:
Phone Number
Occupation:
ID CARD:
Dear beneficiary
Do not go through anybody again if it is not our agent Barrister Clifford
Norman for your Non-Residential Clearance Certificate if you really want
your fund.
Head Of Operation Imf
Foreign Payments
Yours sincerely,
Mrs.Kristalina Georgieva
--0000000000006a70c705e24dfe51
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
--
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
">
div>700 19th Street, N.W.,
iv>
div>
iv>Reconfirm the following:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 25 Jun 2022 17:41:01 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o5FNu-000Og2-03
for dave@doctor.nl2k.ab.ca;
Sat, 25 Jun 2022 17:40:14 -0600
Resent-From: The Doctor
Resent-Date: Sat, 25 Jun 2022 17:40:13 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yw1-f172.google.com ([209.85.128.172]:36647)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o5F9P-000NgG-BS
for doctor@doctor.nl2k.ab.ca;
Sat, 25 Jun 2022 17:25:20 -0600
Received: by mail-yw1-f172.google.com with SMTP id 00721157ae682-3176d94c236so55263957b3.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=gcDYLcWSuQyPQ/bB94BIy46ybmIySqIBJfEt+WWb428=;
b=UmGuOnMEGqFHDACTgkYmLjH9vVooizOr5f+CUj/C/cDyDlaU/UwP+K2zBsgnOpJd/3
hjGJ8mr+qB71fUiruUWEA0BUkRb362olFwIffia0g2zfkdF96xuja5pg8UybGNCrCfv6
TYDZSajdpw9oXdAp9eTcRChPFFL5dUTa1jK5951nTb0W2r71fTDfp1y38bwo5Z3AuKCF
gp1AxkPE0yunV4CALgmS+kYgwNtaf4XavC8X6zPSc16EzLi/Ohnnbo2bIVR1z3oHAF+H
f+napmLYDbHUZ4qEliTKTqAy1FaxSVHLBIVEN6wrnY+FgG6MNhg3WcnjDrwDwvPat7Lf
oodw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=gcDYLcWSuQyPQ/bB94BIy46ybmIySqIBJfEt+WWb428=;
b=S8uTXPTo1wezNUYNclaRDuL4raF90+z3EhBc1cKvnLLAGt+HajwIwMJmlaMZkBLHx1
7s2ITGGCFWUq4Up+MPDv6tv78wnYNbF/FAKPigy1B3bPui2jlNixNMqQKZtiMpVxg99s
pxcCjYRWeaoGiZxJDo00cjyTMQ8xax/2Sb6MZugZgisYIca0GjXG2ksKkSQkx3cgrC8V
kDpBZz/XA6uJklQMu3ICnqK2l1W7l5hZLliF0puQanaHlK8FyUWVwhTSKFo1p7wZWhyp
1vcMRNkZ1cVsjeqFhNGXUhwWfi/A9kDgP8zadWb8diK75dPJd9w4qy21rH33rSl2Pf2B
I12g==
X-Gm-Message-State: AJIora8HkKASOA7jNY7MIxgmbysKnXQVOL9EqMW/oLo4X1dPqOj2fm/9
JbvFVX+ciIBQEdt7Aqy4mMg+qf7jtDHjHokpPQ==
X-Google-Smtp-Source: AGRyM1tVh/ZiAhSmuSVlIyLXNaRIEzhtr7WKi9lCD/bPyDCbiVYmJ9lrBWuZZnTydRMGhAowH4zwdbaryIxE9UUUfg0=
X-Received: by 2002:a81:70d7:0:b0:317:64c0:df3d with SMTP id
l206-20020a8170d7000000b0031764c0df3dmr7139902ywc.59.1656199492299; Sat, 25
Jun 2022 16:24:52 -0700 (PDT)
MIME-Version: 1.0
Reply-To: imf741575@gmail.com
From: IMF
Date: Sun, 26 Jun 2022 00:24:34 +0100
Message-ID:
Subject: Dear beneficiary
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000006a70c705e24dfe51"
Bcc: doctor@doctor.nl2k.ab.ca
X-Spam_score: 21.9
X-Spam_score_int: 219
X-Spam_bar: +++++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- INTERNATIONAL MONETARY FUND 700 19th Street, N.W., Washington,
D.C. INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$4.8m) Dear beneficiary
Content analysis details: (21.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.128.172 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[imf741575[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[supremecourtspain[at]gmail.com]
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.0 HK_SCAM_N15 BODY: No description available.
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
2.9 YOU_INHERIT Discussing your inheritance
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
1.0 MONEY_BARRISTER Lots of money from a UK lawyer
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 FILL_THIS_FORM Fill in a form with personal information
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
2.2 FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 MONEY_FORM Lots of money if you fill out a form
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.4 FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
1.8 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of
money
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
Subject: {SPAM?} Dear beneficiary
--0000000000006a70c705e24dfe51
Content-Type: text/plain; charset="UTF-8"
--
INTERNATIONAL MONETARY FUND
700 19th Street, N.W.,
Washington, D.C.
INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$4.8m)
Dear beneficiary
This is the second time we are notifying you about this said fund. After
due vetting and evaluation of your Inheritance file which The National
Petroleum Corporation (NNPC) in conjunction with the Ministry Of Finance
Forwarded and contacted us to see to your immediate payment of the sum of
US$4.8 million from their Offshore Account with us.
We were meant to understand from our findings that you have been going
through hard ways by paying a lot of charges to see to the release of your
fund (US$4.8 million), which has been delayed. Which has been the handiwork
of some miscreant elements from Nigeria and UK, We advice that you stop
further communication with any correspondence from Nigeria as you have met
up with the whole requirements, your representatives in Nigeria will tell
you to still go ahead with them but on your own risk.
The only thing required from you is to obtain Non-Resident Clearance
Form/Receipt which we are not asking you to pay the fee to us here in
United State as the Government of United Kingdom have paid us for
handling/processing of your payment with other customers. We will help you
to see that you obtain the Non-Residential Clearance form which will cost
you the sum of ($500) so that our bank will affect immediate transfer of
your Inheritance fund sum of (US$4.8 million) into your designated bank
account. If you follow up our directives, your fund will reflect in your
account within five Bank working days from the day you obtain your
Non-Residential Clearance form.
Reconfirm the following:
Your Full Name:
Address:
Phone Number
Occupation:
ID CARD:
Dear beneficiary
Do not go through anybody again if it is not our agent Barrister Clifford
Norman for your Non-Residential Clearance Certificate if you really want
your fund.
Head Of Operation Imf
Foreign Payments
Yours sincerely,
Mrs.Kristalina Georgieva
--0000000000006a70c705e24dfe51
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
lass=3D"gmail_signature" data-smartmail=3D"gmail_signature">
">
INTERNATIONAL MONETARY FUND
<=div>700 19th Street, N.W.,
Washington, D.C.
iv>
INSTRUCTION TO CREDIT YOUR ACCOUNT WITH THE SUM OF (US$4.8m)
<=div>
Dear beneficiary=C2=A0
This is =
the second time we are notifying you about this said fund. After due vettin=
g and evaluation of your Inheritance file which The National Petroleum Corp=
oration (NNPC) in conjunction with the Ministry Of Finance Forwarded and co=
ntacted us to see to your immediate payment of the sum of US$4.8 million fr=
om their Offshore Account with us.
the second time we are notifying you about this said fund. After due vettin=
g and evaluation of your Inheritance file which The National Petroleum Corp=
oration (NNPC) in conjunction with the Ministry Of Finance Forwarded and co=
ntacted us to see to your immediate payment of the sum of US$4.8 million fr=
om their Offshore Account with us.
We were meant t=
o understand from our findings that you have been going through hard ways b=
y paying a lot of charges to see to the release of your fund (US$4.8 millio=
n), which has been delayed. Which has been the handiwork of some miscreant =
elements from Nigeria and UK, We advice that you stop further communication=
with any correspondence from Nigeria as you have met up with the whole req=
uirements, your representatives in Nigeria will tell you to still go ahead =
with them but on your own risk.
o understand from our findings that you have been going through hard ways b=
y paying a lot of charges to see to the release of your fund (US$4.8 millio=
n), which has been delayed. Which has been the handiwork of some miscreant =
elements from Nigeria and UK, We advice that you stop further communication=
with any correspondence from Nigeria as you have met up with the whole req=
uirements, your representatives in Nigeria will tell you to still go ahead =
with them but on your own risk.
The only thing req=
uired from you is to obtain Non-Resident Clearance Form/Receipt which we ar=
e not asking you to pay the fee to us here in United State as the Governmen=
t of United Kingdom have paid us for handling/processing of your payment wi=
th other customers. We will help you to see that you obtain the Non-Residen=
tial Clearance form which will cost you the sum of ($500) so that our bank =
will affect immediate transfer of your Inheritance fund sum of (US$4.8 mill=
ion) into your designated bank account. If you follow up our directives, yo=
ur fund will reflect in your account within five Bank working days from the=
day you obtain your Non-Residential Clearance form.
uired from you is to obtain Non-Resident Clearance Form/Receipt which we ar=
e not asking you to pay the fee to us here in United State as the Governmen=
t of United Kingdom have paid us for handling/processing of your payment wi=
th other customers. We will help you to see that you obtain the Non-Residen=
tial Clearance form which will cost you the sum of ($500) so that our bank =
will affect immediate transfer of your Inheritance fund sum of (US$4.8 mill=
ion) into your designated bank account. If you follow up our directives, yo=
ur fund will reflect in your account within five Bank working days from the=
day you obtain your Non-Residential Clearance form.
iv>Reconfirm the following:
Your Full Name:
Address:
iv>
>
div>
iv>
Phone Number
Occupation:
ID CARD:
>
Dear beneficiary=C2=A0=C2=A0
Do not go through anybod=
y again if it is not our agent Barrister Clifford Norman for your Non-Resid=
ential Clearance Certificate if you really want your fund.
y again if it is not our agent Barrister Clifford Norman for your Non-Resid=
ential Clearance Certificate if you really want your fund.
div>
Head Of=
Operation Imf
f">Foreign Payme=
nts
yle=3D"color:rgb(34,34,34);font-family:sans-serif">Yours sincerely,<=
br style=3D"color:rgb(34,34,34);font-family:sans-serif">
r:rgb(34,34,34);font-family:sans-serif">Mrs.Kristalina Georgieva
=
Operation Imf
f">Foreign Payme=
nts
yle=3D"color:rgb(34,34,34);font-family:sans-serif">Yours sincerely,<=
br style=3D"color:rgb(34,34,34);font-family:sans-serif">
r:rgb(34,34,34);font-family:sans-serif">Mrs.Kristalina Georgieva
=
--0000000000006a70c705e24dfe51--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments