Return-Path: <mail@benuaquest.ru>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id buzGDj5QdWLCdAAAV5eKQw
	(envelope-from <mail@benuaquest.ru>)
	for <info@tictactocsaintcanut.com>; Fri, 06 May 2022 12:43:42 -0400
Return-path: <mail@benuaquest.ru>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Fri, 06 May 2022 12:43:42 -0400
Received: from mail.mtlgroup.ru ([109.167.231.92]:59194)
	by cl-t211-187cl.majeunesse.ca with esmtp (Exim 4.95)
	(envelope-from <mail@benuaquest.ru>)
	id 1nn13O-0007kD-NK
	for info@tictactocsaintcanut.com;
	Fri, 06 May 2022 12:43:42 -0400
Message-ID: <3382076094-6060@mail.mtlgroup.ru>
X-Footer: YmVudWFxdWVzdC5ydQ==
Received: from User ([103.89.89.150])
	(authenticated user mail@benuaquest.ru)
	by mail.mtlgroup.ru (Kerio Connect 9.2.1) with ESMTPA;
	Fri, 6 May 2022 19:43:41 +0300
Reply-To: <vladi1@citromail.hu>
From: " Vladislav Molchalin"<mail@benuaquest.ru>
Date: Fri, 6 May 2022 09:42:16 -0700
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=24.6
X-Spam-Score: 246
X-Spam-Bar: ++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear Friend, I am from Russia, I need your help and your collaboration
    to invest in a good sector in your country I have huge amount of money deposited
    with finance Security Company outside Russia, but considering [...] 
 Content analysis details:   (24.6 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 NSL_RCVD_FROM_USER     Received from User
  3.3 FROMSPACE              Idiosyncratic "From" header format
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  1.2 MISSING_HEADERS        Missing To: header
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [vladi1[at]citromail.hu]
  2.6 DEAR_FRIEND            BODY: Dear Friend? That's not very dear!
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  0.0 MSGID_FROM_MTA_HEADER  Message-Id was added by a relay
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 FROM_MISSPACED         From: missing whitespace
  2.5 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  3.3 ADVANCE_FEE_3_NEW      Appears to be advance fee fraud (Nigerian 419)
X-Spam-Flag: YES
Subject:  ***SPAM***  I wait for your reply...

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
<FONT size=3 color=#000000>Dear</FONT><FONT size=3 color=#000000> Friend,</FONT><BR>
<FONT size=3 color=#000000>&nbsp;</FONT></DIV>
<DIV>
<FONT size=3 color=#000000>I am from Russia, I need your help and your collaboration to invest in a good sector in your country I have huge amount of money deposited with finance Security Company outside Russia, but considering economic sanction on my country Russia I have decided to invest the money in your country.</FONT></DIV>
<DIV>
<FONT size=3 color=#000000>I do not want the money to be discovered and frozen by international monetary fund&nbsp; they have to</FONT><FONT size=3 color=#000000> impose fresh sanctions </FONT><FONT size=3 color=#000000>Russian Official.The reason I contacted you is for you to stand as aproxy beneficiary on my behalf to move the money to your country for lucrative investment.</FONT></DIV>
<DIV>
<FONT size=3 color=#000000>This is a business deal I </FONT><FONT size=3 color=#000000>would appreciate it if you kept strictly confidential and respects the integrity of the information. If you are interested get back to me </FONT><FONT size=3 color=#222222>through my privet Email: </FONT><FONT size=3>vladi1@citromail.hu </FONT><FONT size=3 color=#222222>for more details.</FONT></DIV>
<DIV>
<FONT size=3 color=#000000>Best Regards</FONT></DIV>
<DIV>
<FONT size=3 color=#000000>Mr.Vladislav Molchalin</FONT></DIV>
</FONT>
</BODY></HTML>