Beneficiary spam from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 02 Jul 2022 14:41:14 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1o7jub-000B3C-Ry
for dave@doctor.nl2k.ab.ca;
Sat, 02 Jul 2022 14:40:17 -0600
Resent-From: The Doctor
Resent-Date: Sat, 2 Jul 2022 14:40:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f178.google.com ([209.85.219.178]:33716)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1o7jWp-0008lw-FD
for root@nl2k.ab.ca;
Sat, 02 Jul 2022 14:15:47 -0600
Received: by mail-yb1-f178.google.com with SMTP id h187so9973387ybg.0
for; Sat, 02 Jul 2022 13:15:26 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=qPR6xm+tCdQxC8lSaj2gOdVpTGGdoCTRC7mzkP7bn5U=;
b=lUEYPO4SbOjU2yqheaiJq2f0oinvaJp91N+4Z69TJrdixG8AQ1mHaBSdl2BJHrCpH/
7Qh5ejvafk8CaXpHgjVRCDOVHfP2QKa8ilnoBl+IQj9C1hR4wh7IUauWJ6pmcwv45hdF
Hgn+fc/uMu5UFUgJxfom1bKJpWaED+0oueZoDURUzV5UG+31cWxOc6k0dwcwmm+GsfrF
9PN08cLiqEKcLqviIDBwcOQh5PFrygK02rAGi60FKZH87M1Ra7TwdkNGoDSWAGYUvcHM
rRj6Pu4gLQMkOrMXlr2HolUUd1HF5TgdyCLEafxnJUTn73+yuGntI5EDIJnZqXjsGGQe
TBGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=qPR6xm+tCdQxC8lSaj2gOdVpTGGdoCTRC7mzkP7bn5U=;
b=KJ+7ewpbZeENqIWeapvz3EPaVayMwWTUi8u2FAqBm1L0FekQ7hqKSzpigPYZdW6itA
sJ+h8p1uOseHNfQ0KBmRMK3vWYIguoomzB24/VIxFhb8129pqvm9g0L8rsoq06OKXfjk
jbb5iY8HTslc9kTZtJJJjT4BdHh95FQ+BKl/P3BUxEugzpblOsBbMtrr4utI19bdpIP6
MLGXnjpvWPpv6zv0nl3ByBlYAJKNDQjl/oW/gBlrYfWBiKobuBy5O3qWz9jdG4oR45sN
71H4zXPufXZZplFemFj6NauuigFvwdDfNGK3jbhJfe5EP4cl+x3DPaGSEVn803DCpwCR
AYfA==
X-Gm-Message-State: AJIora/YTtzQKtr3/emmkbQB5RtZZK2hCw/epUUd2Jh7/loPRL2IB340
3uS2mWAPUuyaDS+AMJwWsTiAJCSVTZfJB7EII1Q=
X-Google-Smtp-Source: AGRyM1umdcsfU0CC7VRomJP3HozycSSlpi0A9HxMpo4JCbgAmrqgCr1QM/nAhkQU+ojf2lozw/0j2Km4K8fTKcq9xPI=
X-Received: by 2002:a25:6ac5:0:b0:66d:e726:5bdf with SMTP id
f188-20020a256ac5000000b0066de7265bdfmr9512473ybc.324.1656792920136; Sat, 02
Jul 2022 13:15:20 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:5f0d:b0:2e4:ec41:7cc7 with HTTP; Sat, 2 Jul 2022
13:15:18 -0700 (PDT)
Reply-To: creditsettlementdepartment@hotmail.com
From: Kristalina Georgieva
Date: Sat, 2 Jul 2022 21:15:18 +0100
Message-ID:
Subject: Dear Beneficiary !!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nl2k.ab.ca
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Attn: This is to notify you that all efforts to reach you,
but all efforts proved abortive. I have sent emails too, but no acknowledgement
whatsoever; I am writing to notify you of the progressive report co [...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.178 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jt4809346[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jt4809346[at]gmail.com]
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HK_SCAM_N8 BODY: No description available.
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.5 XFER_LOTSA_MONEY Transfer a lot of money
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Beneficiary !!
--
Attn:
This is to notify you that all efforts to reach you, but all efforts proved
abortive. I have sent emails too, but no acknowledgement whatsoever; I am
writing to notify you of the progressive report concerning your unclaimed
funds following the directives of the Director-General's opening remarks at
the media briefing on COVID-19 - Friday, 10, JUNE 2022.
We have been instructed by the United Nations and United States Government
to release all unclaimed funds/ATM Cards to the beneficiaries to curtail
the recession because of the outbreak of the Coronavirus" COVID-19".
All our efforts to release your unclaimed funds to your bank account have
proved abortive. Several attempts were made by our ATM card department to
authorize your card as directed, but system restoration was unable to
complete successfully. It was a big surprise to receive a letter of
authorization this morning giving permission to Mrs. Amy Barthel claimed
your funds, the letter identified Mrs. Amy Barthel as your family relatives
stated that you died months ago as a result of Coronavirus "Covid-19" and
you authorized her to receive your compensation payment funds valued
USD$10.5 Million.
Kindly but urgently confirm the authenticity of the authorization letter
submitted by your family relative as you can see the below bank details she
submitted for the funds transfer to avoid remitting your funds to a wrong
person, and please update us with your current bank account where you wish
to receive the funds immediately, and you can also reach us via this
WhatsApp on this: "+1(605) 299-9629".
Bank Name: US BANK OF AMERICA
Bank Address: 9724 BAY SIDE CT... SPRING HILL FL 34608
Home Address: 13527 NW 147TH AVE ALACHUA FL 32615
Account Holders Name: AMY BARTHEL
Account Number: 76875994746
Routing Numbers: UD5653
Online Account User ID: VP167
Online Access Password: 71104.
Please kindly chat me on WhatsApp with this Number: "+1(605) 299-9629" for
easy communications to enable us to render you the best of our service, or
you can provide us with your own WhatsApp number to enable us to reach you.
Please treat this matter as extremely urgent and respond back as soon as
possible.
Thank you, and congratulations.
Regards;
Kristalina Georgieva
Managing Director
International Monetary Fund (IMF)
WhatsApp: +1(605) 299-9629
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Sat, 02 Jul 2022 14:41:14 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1o7jub-000B3C-Ry
for dave@doctor.nl2k.ab.ca;
Sat, 02 Jul 2022 14:40:17 -0600
Resent-From: The Doctor
Resent-Date: Sat, 2 Jul 2022 14:40:17 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-yb1-f178.google.com ([209.85.219.178]:33716)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.95 (FreeBSD))
(envelope-from
id 1o7jWp-0008lw-FD
for root@nl2k.ab.ca;
Sat, 02 Jul 2022 14:15:47 -0600
Received: by mail-yb1-f178.google.com with SMTP id h187so9973387ybg.0
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=qPR6xm+tCdQxC8lSaj2gOdVpTGGdoCTRC7mzkP7bn5U=;
b=lUEYPO4SbOjU2yqheaiJq2f0oinvaJp91N+4Z69TJrdixG8AQ1mHaBSdl2BJHrCpH/
7Qh5ejvafk8CaXpHgjVRCDOVHfP2QKa8ilnoBl+IQj9C1hR4wh7IUauWJ6pmcwv45hdF
Hgn+fc/uMu5UFUgJxfom1bKJpWaED+0oueZoDURUzV5UG+31cWxOc6k0dwcwmm+GsfrF
9PN08cLiqEKcLqviIDBwcOQh5PFrygK02rAGi60FKZH87M1Ra7TwdkNGoDSWAGYUvcHM
rRj6Pu4gLQMkOrMXlr2HolUUd1HF5TgdyCLEafxnJUTn73+yuGntI5EDIJnZqXjsGGQe
TBGQ==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=qPR6xm+tCdQxC8lSaj2gOdVpTGGdoCTRC7mzkP7bn5U=;
b=KJ+7ewpbZeENqIWeapvz3EPaVayMwWTUi8u2FAqBm1L0FekQ7hqKSzpigPYZdW6itA
sJ+h8p1uOseHNfQ0KBmRMK3vWYIguoomzB24/VIxFhb8129pqvm9g0L8rsoq06OKXfjk
jbb5iY8HTslc9kTZtJJJjT4BdHh95FQ+BKl/P3BUxEugzpblOsBbMtrr4utI19bdpIP6
MLGXnjpvWPpv6zv0nl3ByBlYAJKNDQjl/oW/gBlrYfWBiKobuBy5O3qWz9jdG4oR45sN
71H4zXPufXZZplFemFj6NauuigFvwdDfNGK3jbhJfe5EP4cl+x3DPaGSEVn803DCpwCR
AYfA==
X-Gm-Message-State: AJIora/YTtzQKtr3/emmkbQB5RtZZK2hCw/epUUd2Jh7/loPRL2IB340
3uS2mWAPUuyaDS+AMJwWsTiAJCSVTZfJB7EII1Q=
X-Google-Smtp-Source: AGRyM1umdcsfU0CC7VRomJP3HozycSSlpi0A9HxMpo4JCbgAmrqgCr1QM/nAhkQU+ojf2lozw/0j2Km4K8fTKcq9xPI=
X-Received: by 2002:a25:6ac5:0:b0:66d:e726:5bdf with SMTP id
f188-20020a256ac5000000b0066de7265bdfmr9512473ybc.324.1656792920136; Sat, 02
Jul 2022 13:15:20 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a05:7010:5f0d:b0:2e4:ec41:7cc7 with HTTP; Sat, 2 Jul 2022
13:15:18 -0700 (PDT)
Reply-To: creditsettlementdepartment@hotmail.com
From: Kristalina Georgieva
Date: Sat, 2 Jul 2022 21:15:18 +0100
Message-ID:
Subject: Dear Beneficiary !!
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc: root@nl2k.ab.ca
X-Spam_score: 18.8
X-Spam_score_int: 188
X-Spam_bar: ++++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: -- Attn: This is to notify you that all efforts to reach you,
but all efforts proved abortive. I have sent emails too, but no acknowledgement
whatsoever; I am writing to notify you of the progressive report co [...]
Content analysis details: (18.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.219.178 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[jt4809346[at]gmail.com]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[jt4809346[at]gmail.com]
2.7 UNCLAIMED_MONEY BODY: People just leave money laying around
3.5 DEAR_BENEFICIARY BODY: Dear Beneficiary:
1.5 HK_SCAM_N8 BODY: No description available.
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 HK_SCAM No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
2.2 UNDISC_FREEM Undisclosed recipients + freemail reply-to
2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.5 XFER_LOTSA_MONEY Transfer a lot of money
2.0 UNDISC_MONEY Undisclosed recipients + money/fraud signs
0.0 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.6 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} Dear Beneficiary !!
--
Attn:
This is to notify you that all efforts to reach you, but all efforts proved
abortive. I have sent emails too, but no acknowledgement whatsoever; I am
writing to notify you of the progressive report concerning your unclaimed
funds following the directives of the Director-General's opening remarks at
the media briefing on COVID-19 - Friday, 10, JUNE 2022.
We have been instructed by the United Nations and United States Government
to release all unclaimed funds/ATM Cards to the beneficiaries to curtail
the recession because of the outbreak of the Coronavirus" COVID-19".
All our efforts to release your unclaimed funds to your bank account have
proved abortive. Several attempts were made by our ATM card department to
authorize your card as directed, but system restoration was unable to
complete successfully. It was a big surprise to receive a letter of
authorization this morning giving permission to Mrs. Amy Barthel claimed
your funds, the letter identified Mrs. Amy Barthel as your family relatives
stated that you died months ago as a result of Coronavirus "Covid-19" and
you authorized her to receive your compensation payment funds valued
USD$10.5 Million.
Kindly but urgently confirm the authenticity of the authorization letter
submitted by your family relative as you can see the below bank details she
submitted for the funds transfer to avoid remitting your funds to a wrong
person, and please update us with your current bank account where you wish
to receive the funds immediately, and you can also reach us via this
WhatsApp on this: "+1(605) 299-9629".
Bank Name: US BANK OF AMERICA
Bank Address: 9724 BAY SIDE CT... SPRING HILL FL 34608
Home Address: 13527 NW 147TH AVE ALACHUA FL 32615
Account Holders Name: AMY BARTHEL
Account Number: 76875994746
Routing Numbers: UD5653
Online Account User ID: VP167
Online Access Password: 71104.
Please kindly chat me on WhatsApp with this Number: "+1(605) 299-9629" for
easy communications to enable us to render you the best of our service, or
you can provide us with your own WhatsApp number to enable us to reach you.
Please treat this matter as extremely urgent and respond back as soon as
possible.
Thank you, and congratulations.
Regards;
Kristalina Georgieva
Managing Director
International Monetary Fund (IMF)
WhatsApp: +1(605) 299-9629
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments