| Dir : /home/ithome/mail/new/ |
| Server: Linux host100322.itwesthosting.com 3.10.0-1160.144.1.el7.tuxcare.els4.x86_64 #1 SMP Tue Apr 7 08:40:40 UTC 2026 x86_64 IP: 144.91.64.173 |
| Dir : /home/ithome/mail/new/1773285717.M418786P8651.host100322.itwesthosting.com,S=7648,W=7782 |
Return-Path: <kristalina.georgieva@dhstpierrecc.com>
Delivered-To: ithome@host100322.itwesthosting.com
Received: from host100322.itwesthosting.com
by host100322.itwesthosting.com with LMTP
id oLHMGFUxsmnLIQAAp0YrwQ
(envelope-from <kristalina.georgieva@dhstpierrecc.com>)
for <ithome@host100322.itwesthosting.com>; Thu, 12 Mar 2026 04:21:57 +0100
Return-path: <kristalina.georgieva@dhstpierrecc.com>
Envelope-to: john.doe@h1telekom.hr
Delivery-date: Thu, 12 Mar 2026 04:21:57 +0100
Received: from [163.223.211.19] (port=35099 helo=mail1.dhstpierrecc.com)
by host100322.itwesthosting.com with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.96.2)
(envelope-from <kristalina.georgieva@dhstpierrecc.com>)
id 1w0WcY-0002Im-0r
for john.doe@h1telekom.hr;
Thu, 12 Mar 2026 04:21:57 +0100
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=key1; d=dhstpierrecc.com;
h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:
Content-Transfer-Encoding; i=kristalina.georgieva@dhstpierrecc.com;
bh=cyWTAJM0TTUOMba8kly8JX4yOrh4cUQuCTWkyLajnOg=;
b=aK0TNYuGgjTHjIAP8lyI2Nof9oSVm3qx9agtWRhPZ/oNkEAOwaQlY6e6S/XoJq+1UpNOR/NZmcwx
dY6OzFiyfKj/uFmvawYh6+l4w87MLcYxw+BmBlu8g/ZVctHkSXAjpzF71V4/0RrBjAERB+Vh7gdd
Kl+YP0yh3NLVNkp9whBNjAnENPgggfZ/6MNRtDnS+JxrN3T3871utC+LOPUOgI8dm7is2ET9V4yp
qyyxRjXGoQfCoQwdS/JRbBL3YsU4uewDi49PkaO3J9w3kRhYC+bvq+G1BpXBVYihSmwMnAGq7+IM
mBG2NXob0I1OqFRsIn8ab+sajCjsWBIPbh9NnA==
Reply-To: Mrs.Kristalina Georgieva <kristalina.georgieva@onet.pl>
From: Mrs.Kristalina Georgieva <kristalina.georgieva@dhstpierrecc.com>
To: john.doe@h1telekom.hr
Date: 11 Mar 2026 20:21:51 -0700
Message-ID: <20260311202151.CF9E706DD0E56ACE@dhstpierrecc.com>
MIME-Version: 1.0
Disposition-Notification-To: mkg10102@gmail.com
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: Yes, score=16.3
X-Spam-Score: 163
X-Spam-Bar: ++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "host100322.itwesthosting.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Attn:Beneficiary, I am Mrs.Kristalina Georgieva,Managing Director
of the International Monetary Fund (IMF).It may interest you to know that
reports have reached our office by so many correspondences o [...]
Content analysis details: (16.3 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus
DBL blocklist
[URIs: dhstpierrecc.com]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was
blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: dhstpierrecc.com]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[163.223.211.19 listed in zen.spamhaus.org]
1.2 MILLION_USD BODY: Talks about millions of dollars
0.0 DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[163.223.211.19 listed in bl.score.senderscore.com]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE:
The query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[163.223.211.19 listed in sa-accredit.habeas.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 HK_NAME_MR_MRS No description available.
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 GB_FREEMAIL_DISPTO Disposition-Notification-To/From or
Disposition-Notification-To/body contain
different freemails
0.1 GB_FREEMAIL_DISPTO_NOTFREEM Disposition-Notification-To/From
contain different freemails but mailfrom
is not a freemail
0.2 MONEY_FREEMAIL_REPTO Lots of money from someone using free
email?
0.0 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money
3.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Official Payment Notification
X-From-Rewrite: unmodified, forwarded message
<!DOCTYPE HTML>
<html><head><title></title>
<meta http-equiv=3D"X-UA-Compatible" content=3D"IE=3Dedge">
</head>
<body style=3D"margin: 0.4em;">
<p>Attn:Beneficiary,<br>I am Mrs.Kristalina Georgieva,Managing Director of =
the International Monetary Fund (IMF).It may interest you to know that repo=
rts have reached our office by so many correspondences on the uneasy way wh=
ich people like you are treated by various Banks and Courier Companies Dipl=
omat(s)across Europe to Africa and Asia London UK,and we have decided to pu=
t a stop to that and that is why I was appointed to handle your transaction=
here in Washington DC USA.<br>
I am delighted to inform you that the contract/Inheritance Lottery panel of=
the UN/COVID19 Awarded Payment has been approved, Governmental and Non-Gov=
ernmental prostates,NGO's,Finance Companies,Banks,Security Companies and Di=
plomat(s)which have been in contact with you of late have been instructed t=
o back off from your transaction and you have been advised NOT to respond t=
o them anymore since the International Monetary Fund (I.M.F) Head Off=
ice is now directly in charge of your Contract=20
Sum,Lottery/Inheritance payment of Fifteen Million,Five hundred=
thousand United State Dollars.<br>You are hereby advised NOT to remit furt=
her payment to any institutions with respect to your transaction as your fu=
nd will be transferred to you directly from our source.I hope this is clear=
=2EAny action contrary to this instruction is at your own risk.<br>In order=
for us to proceed you must get back to us with the below requested informa=
tion:<br>Your Full Name:<br>Your Address:<br>
Your Age:<br>Your Direct Phone Numbers:<br>Your Profession:<br>And we shall=
give you further details on how your fund will be released to you.<br>Best=
Regards,<br>Mrs.Kristalina Georgieva<br>Managing Director (IMF)</p><p>
<br></p>
</body></html>