Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id 5YPkJqpfbWA1ZwAAV5eKQw (envelope-from ) for ; Wed, 07 Apr 2021 03:30:50 -0400 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Wed, 07 Apr 2021 03:30:50 -0400 Received: from bosmailout07.eigbox.net ([66.96.186.7]:35869) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94) (envelope-from ) id 1lU2eH-0006ql-6o for info@tictactocsaintcanut.com; Wed, 07 Apr 2021 03:30:50 -0400 Received: from bosmailscan08.eigbox.net ([10.20.15.8]) by bosmailout07.eigbox.net with esmtp (Exim) id 1lU2dc-0004xc-8j for info@tictactocsaintcanut.com; Wed, 07 Apr 2021 03:30:08 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=snakebite22.com; s=dkim; h=Sender:Content-Transfer-Encoding:Content-Type: Message-ID:Reply-To:Subject:To:From:Date:MIME-Version:Cc:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=VSR5dhuQZLP6YWwLEqnLka9o7FjT3kPLfTNTUKE/Bys=; b=IIPLiF78csEYK5PALmQpcjMuT1 srbDQfx0UQy5grM/vUO3emcUu6k1scnfCEqKNRfgvmn+L0ix1Hjlw+GJnenc4EDY8pP81zNAKl3gZ ThYUIJhKDQx68iQU31ZeCyvCUPIpWHgqi+IND1mPFsGoQrW5J79BQnecev5sPy2eaNo9+deSIdulD xSkslUs36he2z8wh3SnzmUwqhzxrZfqIY1djbDQQFsu1YJs+85vVjxancn4CbRPiPM/4FbVzQ6gtE UQftJtoJslY1Id0uOP22/ilFF8i+p87ytfQ8A8IZy4RyTQ8zrTxjMEnjHfezd/pHToLt9S9vEXqc5 WSRFWcZg==; Received: from [10.115.3.32] (helo=bosimpout12) by bosmailscan08.eigbox.net with esmtp (Exim) id 1lU2da-0008DM-8G; Wed, 07 Apr 2021 03:30:06 -0400 Received: from boswebmail12.eigbox.net ([10.20.16.12]) by bosimpout12 with id pjVi240090Fcwky01jVqQ0; Wed, 07 Apr 2021 03:30:06 -0400 X-EN-SP-DIR: OUT X-EN-SP-SQ: 1 Received: from [127.0.0.1] (helo=homestead) by boswebmail12.eigbox.net with esmtp (Exim) id 1lU2cj-0002Hn-Ba; Wed, 07 Apr 2021 03:29:13 -0400 Received: from [102.178.158.214] by emailmg.homestead.com with HTTP (HTTP/1.1 POST); Wed, 07 Apr 2021 03:29:13 -0400 MIME-Version: 1.0 Date: Wed, 07 Apr 2021 08:29:13 +0100 From: "Mr. Musa Ibrahim" To: undisclosed-recipients:; Reply-To: musaibrah.2016@gmail.com Mail-Reply-To: musaibrah.2016@gmail.com Message-ID: <898d6995247350a6c964efd46d43c9d9@snakebite22.com> X-Sender: inform747@snakebite22.com User-Agent: Roundcube Webmail/1.3.14 Content-Type: text/plain; charset=US-ASCII; format=flowed Content-Transfer-Encoding: 7bit X-EN-AuthUser: inform747@snakebite22.com Sender: "Mr. Musa Ibrahim" X-Spam-Status: Yes, score=21.0 X-Spam-Score: 210 X-Spam-Bar: +++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Friend, I am Mr. Musa Ibrahim from Burkina Faso. I am sending you this email, because of the latest development in my bank which I will like to bring you in. This business worth the sum of Thirteen Million Th [...] Content analysis details: (21.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: snakebite22.com] 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [musaibrah.2016[at]gmail.com] 0.5 SUBJ_ALL_CAPS Subject is all capitals -0.0 SPF_PASS SPF: sender matches SPF record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 2.6 DEAR_FRIEND BODY: Dear Friend? That's not very dear! 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 2.8 ODD_FREEM_REPTO Has unusual reply-to header 0.0 T_SHARE_50_50 Share the money 50/50 0.0 LOTS_OF_MONEY Huge... sums of money 0.1 DKIM_INVALID DKIM or DK signature exists, but is not valid 0.9 URG_BIZ Contains urgent matter 1.0 HK_NAME_MR_MRS No description available. 2.5 MONEY_NOHTML Lots of money in plain text 0.0 FSL_BULK_SIG Bulk signature with no Unsubscribe 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From 0.3 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 0.0 T_MONEY_PERCENT X% of a lot of money for you 0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases 3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 2.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs X-Spam-Flag: YES Subject: ***SPAM*** STRICTLY CONFIDENTIAL: URGENT REPLY NEEDED Dear Friend, I am Mr. Musa Ibrahim from Burkina Faso. I am sending you this email, because of the latest development in my bank which I will like to bring you in. This business worth the sum of Thirteen Million Three Hundred Thousand United State Dollars (US$ 13.3 Million) and it is real and legitimate. In completion of everything, we will share the funds equally. 50% for me and 50% for you. If you are interested in the deal, kindly contact me for more details. Best regards, Mr. Musa Ibrahim