Return-Path: <bilgi@dinamikpatent.com>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id q7y/LNBqc2NsRwAAV5eKQw
	(envelope-from <bilgi@dinamikpatent.com>)
	for <info@tictactocsaintcanut.com>; Tue, 15 Nov 2022 05:32:48 -0500
Return-path: <bilgi@dinamikpatent.com>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Tue, 15 Nov 2022 05:32:48 -0500
Received: from [45.142.215.231] (port=51066 helo=encrypted.relaytocave.xyz)
	by cl-t211-187cl.majeunesse.ca with esmtp (Exim 4.95)
	(envelope-from <bilgi@dinamikpatent.com>)
	id 1outFH-0004k5-HZ
	for info@tictactocsaintcanut.com;
	Tue, 15 Nov 2022 05:32:48 -0500
Received: from User (unknown [45.137.22.176])
	by encrypted.relaytocave.xyz (Postfix) with SMTP id 9342FA1AFB;
	Mon, 14 Nov 2022 22:50:39 +0300 (MSK)
Reply-To: <maritinesecurityusa@gmail.com>
From: "Ms. Kristalina Georgieva"<bilgi@dinamikpatent.com>
Date: Mon, 14 Nov 2022 20:50:41 +0100
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=41.3
X-Spam-Score: 413
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Re. Due Process of your Compensation Benefits valued 1,485,000.00
    USD. Dear Beneficiary, This is to notify you that the Cash Management/International
    Payments Unit of the International Monetary Fund in conjunction with the
   Global Debt 
 Content analysis details:   (41.3 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  3.2 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  3.0 REPTO_419_FRAUD_GM     Reply-To is known advance fee fraud collector
                              mailbox
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  1.2 MISSING_HEADERS        Missing To: header
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [45.142.215.231 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [45.142.215.231 listed in psbl.surriel.com]
  0.0 T_SPF_HELO_TEMPERROR   SPF: test of HELO record failed (temperror)
  1.5 SPF_SOFTFAIL           SPF: sender does not match SPF record (softfail)
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  2.0 HK_SCAM                No description available.
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.5 MONEY_FROM_MISSP       Lots of money and misspaced From
  2.0 FROM_MISSPACED         From: missing whitespace
  0.9 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.9 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  2.0 TO_NO_BRKTS_NORDNS_HTML To: lacks brackets and no rDNS and HTML
                             only
  0.0 XFER_LOTSA_MONEY       Transfer a lot of money
  1.2 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  0.6 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Re. Due Process of your Compensation Benefits valued 1,485,000.00 USD.

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Re. Due Process of your Compensation Benefits valued 1,485,000.00 USD.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Dear Beneficiary,</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
This is to notify you that the Cash Management/International Payments Unit of the International Monetary Fund in conjunction with the Global Debt</DIV>
<DIV>
Reconciliation Committee of the International Monetary Fund (IMF) had agreed to pay you a total sum of $1,485,000.00 USD 2022 compensation fund.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
The compensation fund has been signed to be paid to you for all the money you have lost to scammers through internet fraud.</DIV>
<DIV>
Your name appeared on our payment schedule list of beneficiaries that will receive their funds in this 2nd quarter payment of the year</DIV>
<DIV>
according to our banking regulation.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Quickly get back to us if you are still alive, and we shall give you the REFERENCE NUMBER to enable you to pick up your money from the</DIV>
<DIV>
appointed paying Bank close to you.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Thank you for your anticipated cooperation.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Congratulations!</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Yours faithfully,</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Ms. Kristalina Georgieva</DIV>
<DIV>
Managing Director of the International Monetary Fund</DIV>
<DIV>
IMF HQ2: 1900 Pennsylvania Avenue NW,</DIV>
<DIV>
Washington, DC 20431, United States.</DIV>
</FONT>
</BODY></HTML>