Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id BlKuAvmRbWJoNQAAV5eKQw (envelope-from ) for ; Sat, 30 Apr 2022 15:46:01 -0400 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Sat, 30 Apr 2022 15:46:01 -0400 Received: from vps.consap.sg ([116.12.51.65]:60186) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1nkt2Y-0003Xm-5E for info@tictactocsaintcanut.com; Sat, 30 Apr 2022 15:46:00 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=consap.sg; s=default; h=Date:Message-Id:Reply-To:Content-type:MIME-Version:From:Subject: To:Sender:Cc:Content-Transfer-Encoding:Content-ID:Content-Description: Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID: In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe: List-Post:List-Owner:List-Archive; bh=5zZVT179fs7po99n322HjuwAqfd/Y3Mx2WP584b3Isk=; b=3/KSYVz/P0Qzvk1YnWFbH0kvvv 1LuD/7Z7do0JFGiTsfioUtOEyB1N2IWuAJT4ZERHkOJF1u65xHxxgbvYKAeKphrQEfDq84jb0h+H6 f8B0uozuhBQ1Ckksxae2vClPXQHoxRwAZQ6HNqG3aQhRzjh/Mv1Ku0tmZGVfWpsfmuoynyI52DXiV INqflisfR30SoC9Tb/+0iyB3XLOGk9orIorVJ1DoazeBwgKXvoqT1HTGr/TdwU1mhbK3Yc9gUIWJY ErazIr5JxczF6EFZ9Euc7R7ZGmdhF6+DExhDU9Yku2P6esM4Hn1L59wSDlME+3frmzY+s9C2pODKr 3+bAwypg==; Received: from consap by vps.consap.sg with local (Exim 4.95) (envelope-from ) id 1nkt1n-0006B1-4S for info@tictactocsaintcanut.com; Sun, 01 May 2022 03:45:15 +0800 To: info@tictactocsaintcanut.com X-PHP-Script: revamp2021.consap.sg/wp-content/alfacgiapi/mails/alexus.php for 191.96.106.217 X-PHP-Originating-Script: 1005:alexus.php(16) : eval()'d code From: =?UTF-8?B?TXJzLiBOYW5jeSBKb2huc29u?= MIME-Version: 1.0; Content-type: multipart/mixed; boundary="--BzlBMweGDG" Reply-To: nancyjohnson1972@hotmail.com Message-Id: Date: Sun, 01 May 2022 03:45:15 +0800 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - vps.consap.sg X-AntiAbuse: Original Domain - tictactocsaintcanut.com X-AntiAbuse: Originator/Caller UID/GID - [1005 993] / [47 12] X-AntiAbuse: Sender Address Domain - vps.consap.sg X-Get-Message-Sender-Via: vps.consap.sg: authenticated_id: consap/only user confirmed/virtual account not confirmed X-Authenticated-Sender: vps.consap.sg: consap X-Source: X-Source-Args: php-fpm: pool revamp2021_consap_sg X-Source-Dir: consap.sg:/revamp2021.consap.sg/wp-content/alfacgiapi/mails X-Spam-Status: Yes, score=17.7 X-Spam-Score: 177 X-Spam-Bar: +++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Greetings from here. I want to know if this email address is still valid to write to you. There is something important I would like to discuss with you. Thank you Content analysis details: (17.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: consap.sg] -0.0 SPF_HELO_PASS SPF: HELO matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [nancyjohnson1972[at]hotmail.com] 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 T_TVD_MIME_NO_HEADERS BODY: No description available. 0.0 HTML_MESSAGE BODY: HTML included in message -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.8 HK_NAME_MR_MRS No description available. 3.0 PHP_ORIG_SCRIPT_EVAL From suspicious PHP source 2.5 PHP_SCRIPT Sent by PHP script 3.5 KAM_BADPHP Questionable PHP mailer headers 1.5 PDS_PHP_EVAL PHP header shows eval'd code 3.5 BOGUS_MIME_VERSION Mime version header is bogus 0.0 FROM_EXCESS_BASE64 From: base64 encoded unnecessarily 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: ***SPAM*** =?UTF-8?B?VmVyeSBVcmdlbnQ=?= ----BzlBMweGDG Content-type: text/html; charset="utf-8" Content-Transfer-Encoding: 8bit
Greetings from here.

I want to know if this email address is still valid to write to you. There is something important I would like to discuss with you.

Thank you

Mrs. Nancy Johnson
----BzlBMweGDG