Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id hpwODvmJ+GCeWwAAV5eKQw (envelope-from ) for ; Wed, 21 Jul 2021 16:56:25 -0400 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Wed, 21 Jul 2021 16:56:25 -0400 Received: from mta.marinershipping.eu ([138.68.111.237]:43106) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1m6JGT-00065S-Oh for info@tictactocsaintcanut.com; Wed, 21 Jul 2021 16:56:25 -0400 Received: by mta.marinershipping.eu (Postfix, from userid 33) id 5DAF1117142; Wed, 21 Jul 2021 22:55:19 +0200 (CEST) To: info@tictactocsaintcanut.com X-PHP-Originating-Script: 33:new.php(6) : eval()'d code Date: Wed, 21 Jul 2021 22:55:19 +0200 From: "MR. EBENEZER ONYEAGWU" Reply-To: monyeagwu@aol.com Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 X-Spam-Status: Yes, score=27.0 X-Spam-Score: 270 X-Spam-Bar: +++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear Sir / Madam, Your long outstanding funds totaling Ten Million and Five Hundred Thousand United States Dollars Only($10,500,000.00) held by various Banks, Courier and Security Companies has been cleared. You are he [...] Content analysis details: (27.0 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)' 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 HK_RANDOM_ENVFROM Envelope sender username looks random 0.5 FROM_LOCAL_NOVOWEL From: localpart has series of non-vowel letters 1.0 HK_RANDOM_FROM From username looks random 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [138.68.111.237 listed in bl.score.senderscore.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [zenithintbankplcgmd02[at]gmail.com] 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [zenithintbankplcgmd02[at]gmail.com] 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 0.0 LOTS_OF_MONEY Huge... sums of money 1.5 PDS_PHP_EVAL PHP header shows eval'd code 2.5 KAM_BADPHP Questionable PHP mailer headers 3.0 PHP_ORIG_SCRIPT_EVAL From suspicious PHP source 1.5 HK_NAME_FM_MR_MRS No description available. 1.5 MONEY_NOHTML Lots of money in plain text 2.1 FSL_BULK_SIG Bulk signature with no Unsubscribe 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.7 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 1.4 SPOOFED_FREEMAIL No description available. 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 0.9 SPOOF_GMAIL_MID From Gmail but it doesn't seem to be... 0.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.0 MONEY_FORM_SHORT Lots of money if you fill out a short form 0.0 FORM_FRAUD Fill a form and a fraud phrase 0.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** YOUR REIMBURSEMENT / COMPENSATION FUNDS HAS BEEN CLEARED Dear Sir / Madam, Your long outstanding funds totaling Ten Million and Five Hundred Thousand United States Dollars Only($10,500,000.00) held by various Banks, Courier and Security Companies has been cleared. You are hereby advised to stop further communication with any Person or Persons, Bank or Banks, Organization or Organizations with respect to your transaction as your fund will be transferred to you directly from our source. I hope this is clear. Any action contrary to this instruction is at your own risk. Reconfirm your details, such as your 1. Name: 2. Address: 3. Occupation: 4. Telephone Number: for your funds claim. Best Regards, Mr. Ebenezer Onyeagwu Group Managing Director / CEO Email: monyeagwu01@aol.com