Return-Path: <3qkh-YgkJBE8Dvx5szrQIx3rz2.t53z4w5AztArtA5t9rz4Atr4BA.t53@trix.bounces.google.com> Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id AJUHE9RIfmJqTgAAV5eKQw (envelope-from <3qkh-YgkJBE8Dvx5szrQIx3rz2.t53z4w5AztArtA5t9rz4Atr4BA.t53@trix.bounces.google.com>) for ; Fri, 13 May 2022 08:02:28 -0400 Return-path: <3qkh-YgkJBE8Dvx5szrQIx3rz2.t53z4w5AztArtA5t9rz4Atr4BA.t53@trix.bounces.google.com> Envelope-to: info@tictactocsaintcanut.com Delivery-date: Fri, 13 May 2022 08:02:28 -0400 Received: from mail-ua1-f69.google.com ([209.85.222.69]:38534) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.95) (envelope-from <3qkh-YgkJBE8Dvx5szrQIx3rz2.t53z4w5AztArtA5t9rz4Atr4BA.t53@trix.bounces.google.com>) id 1npU06-0005Cs-MW for info@tictactocsaintcanut.com; Fri, 13 May 2022 08:02:28 -0400 Received: by mail-ua1-f69.google.com with SMTP id c18-20020ab00b92000000b0035ffe6d403fso3725178uak.5 for ; Fri, 13 May 2022 05:02:07 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=mime-version:reply-to:feedback-id:message-id:date:subject:from:to; bh=24fdKFJCRaEzuKh8cKg14Cw4zej/01tT1z5LEFZ8y/8=; b=cDbtDx/2wPqCUYoTbeGrVXKLQmQ+ruJU4+2Df2Ybi+nKjuNJiVsLL61iGEnfYWpop7 PptFH6lM3yzBXH60SdksITaVrLdUkD1R74SM9oQtYv9V4SBabxe5wEzTWuqPVkXWq5Bx svXjDyabQ2vy8EieLqsYv+JxjDwu1Ty4B0t0Qk2xA5RNLbil6FeJhaG4drhwuNbPh4EX Lj/Th1xBiLPvSjFZxg0IkUQEzPeKPjYAzTzkvLTpIVpXM/iQ/0jy4L10RYkinQ1axB4y 6nySqhlnxsMvS6lTJl21aRqnjtquxvXkZVGBvUBbjZWrg+NVN3vKtCCHvHMTkQbThdvF HAUg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=x-gm-message-state:mime-version:reply-to:feedback-id:message-id :date:subject:from:to; bh=24fdKFJCRaEzuKh8cKg14Cw4zej/01tT1z5LEFZ8y/8=; b=kc/bi5rQzHHGmjJtv6CFlvOSf96+r5rQykneJEZij6Y+e3OxMlMLFvOMLMghLjHYpJ dE+adZH1/FCSDyGM954lbJBtjJ0R3Km5ixhtaGDSFR4V+Dipw89H0V1b4Dp2D/d2XjIs wXiTHMaWV69GwC1eO0W7g6iAs3X5fW9VwKmvF9eWIZ6pEK3G8ATwZMX1Uo0Y+AYjTb0O w2Z2rmv7b/xfSIxY6HjEyx53alFzQSAo7MXcRN0uIPqbUM7Xe7bX1paO8IrX8SkIumeg 8+cXDoB5FFYN4zVOvynyrDquzgI+x+dGo7WEY+95bPO6yqhl5IVRL99jGPLNVGATXhUu peOg== X-Gm-Message-State: AOAM532e3490hEbtRDtuNhuRC5XNifnxoaBvQBB8fHwDNLroxwc48Q9P IhTvCMEZo9vV2dzf68jw5OEnyWcSRX5Cor1sB36m MIME-Version: 1.0 X-Received: by 2002:a05:6102:3d83:b0:331:48bf:e796 with SMTP id h3-20020a0561023d8300b0033148bfe796mt1981911vsv.24.1652443306371; Fri, 13 May 2022 05:01:46 -0700 (PDT) Reply-To: wegobia91@gmail.com X-No-Auto-Attachment: 1 Feedback-ID: MailTypeSendForm:GoogleForms X-GoogleForms-FormId: e/1FAIpQLSczNT-r9QMKcUjGT055OgV2R_lZrJhlPdyIGHm-AmIWSM8A3w X-GoogleForms-IsConsumerForm: true Message-ID: <00000000000049b31d05dee37059@google.com> Date: Fri, 13 May 2022 12:01:46 +0000 From: wegobia91@gmail.com To: info@tictactocsaintcanut.com Content-Type: multipart/alternative; boundary="0000000000004c42e405dee37048" X-Spam-Status: Yes, score=8.8 X-Spam-Score: 88 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Je vous ai invité à remplir le formulaire suivant : Inscription pour recevoir un t-shirt Pour remplir ce formulaire, consultez : https://docs.google.com/forms/d/e/1FAIpQLSczNT-r9QMKcUjGT055OgV2R_lZrJhlPdyIGHm-AmIWSM8A3w/viewform?vc=0&c=0&w=1&flr=0&usp=mail_form_link Content analysis details: (8.8 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 MILLION_USD BODY: Talks about millions of dollars 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [wegobia91[at]gmail.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [wegobia91[at]gmail.com] 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.0 LOTS_OF_MONEY Huge... sums of money 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom freemail headers are different -0.0 T_SCC_BODY_TEXT_LINE No description available. 4.0 KAM_FAKEFORM Fake Form for Scams 0.1 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 1.0 GOOGLE_DOC_SUSP Suspicious use of Google Docs 0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money 1.0 ENVFROM_GOOG_TRIX From suspicious Google subdomain X-Spam-Flag: YES Subject: ***SPAM*** Re:I need your help --0000000000004c42e405dee37048 Content-Type: text/plain; charset="UTF-8"; format=flowed; delsp=yes Content-Transfer-Encoding: base64 SmUgdm91cyBhaSBpbnZpdMOpIMOgIHJlbXBsaXIgbGUgZm9ybXVsYWlyZSBzdWl2YW50wqA6DQpJ bnNjcmlwdGlvbiBwb3VyIHJlY2V2b2lyIHVuIHQtc2hpcnQNCg0KUG91ciByZW1wbGlyIGNlIGZv cm11bGFpcmUsIGNvbnN1bHRlesKgOg0KaHR0cHM6Ly9kb2NzLmdvb2dsZS5jb20vZm9ybXMvZC9l LzFGQUlwUUxTY3pOVC1yOVFNS2NVakdUMDU1T2dWMlJfbFpySmhsUGR5SUdIbS1BbUlXU004QTN3 L3ZpZXdmb3JtP3ZjPTAmYW1wO2M9MCZhbXA7dz0xJmFtcDtmbHI9MCZhbXA7dXNwPW1haWxfZm9y bV9saW5rDQoNCkhlbGxvIGRlYXIsDQoNCkkmIzM5O20gRGFuaWVsIExhd3JlbmNlIG5pbmV0ZWVu IHllYXJzIG9sZCxJJiMzOTttIHRoZSBzb24gb2YgbXkgbGF0ZSBEci4gIA0KTGF3cmVuY2UgUGhp bGlwLCBNeSBGYXRoZXIgd2FzIGEgd2VhbHRoeSBidXNpbmVzcyBtYW4gaGUgd2FzIHBvaXNvbmVk IGJ5IG11ICANCnVuY2xlJiMzOTtzIHdobyB3YW50ZWQgdG8gdGFrZSBvdmVyIGhpcyBidXNpbmVz cyBlbXBhbmQgd2VhbHRoLCBhY2NvcmRpbmcgIA0KdG8gdGhlIGxhYm9yYXRvcnkgcmVzdWx0LCBo ZSB3YXMgZ2l2ZW4gYSBwb2lzb25lZCBvcmFuZ2UganVpY2UsIHRoZSBkb2N0b3IgIA0KdHJpZWQg dG8gc2F2ZSBoaXMgbGlmZSB1bmZvcnR1bmF0ZWx5IGFsbCB0aGUgZG9jdG9ycyYjMzk7IGVmZm9y dCB3YXMgaW4gIA0KdmFpbiBoZSBkaWVkLg0KDQpCZWZvcmUgaGUgd2VudCB0byB0aGUgZm9yIGhv c3BpdGFsIGZvciB0cmVhdG1lbnQsIGhlIHNlY3JldGVseSB0b2xkIG1lIHRoYXQgIA0KaGUgZGVw b3NpdGVkIHRoZSBzdW0gb2YgKFR3byBtaWxsaW9uLCB0d28gaHVuZHJlZCB0aG91c2FuZCBVbml0 ZWQgc3RhdGUgIA0KZG9sbGFycykgd2l0aCBiYW5rIGFuZCB3YXJuZWQgbWUgdGhhdCBJIHdlIHNo b3VsZCBiZSBjYXJlZnVsIGluIGNhc2UgIA0KYW55dGhpbmcgaGFwcGVuZWQgdG8gaGltIGFzIGlm IGhlIGtuZXcgaGUgd2FzIGdvaW5nIHRvIGRpZS4gVGhleSBoYXZlICANCnN1Y2NlZWRlZCBpbiBr aWxsaW5nIGhpbSwgbXkgbGF0ZSBtb3RoZXIgd2FzIGEgTXVzbGltLiBUcnVlbHkgSSBkb24mIzM5 O3QgIA0Ka25vdyB5b3UgYnV0IEkgd25hdCB5b3UgY29uc2lkZXIgbXkgc2l0dWF0aW9uIGFuZCBh c3Npc3QgbWUgdG8gZ2V0IHRoaXMgIA0KbW9uZXkgdHJhbnNmZXJlZCBpbnRvIHlvdXIgZm9yZWln biBhY2NvdW50IGZvciBpbnZlc3RtZW50IHB1cnBvc2UgaW4geW91ciAgDQpjb3VudHJ5Lg0KDQpZ b3Ugd2lsbCBoZWxwIG1lIHRvIGNvbWUgdG8geW91ciBjb3VudHJ5IGFuZCBjb250aW51ZSBteSBz dHVkaWVzIHdoaWxlIHRoZSAgDQppbnZlc3RtZW50IHdlIGJlIHVuZGVyIHlvdXIgY2FyZS4NCg0K WW91cnMgU2luY2VyZWx5DQpEYW5pZWwNCg0KR29vZ2xlwqBGb3JtcyB2b3VzIHBlcm1ldCBkZSBj csOpZXIgZGVzIGVucXXDqnRlcyBldCBkJ2VuIGFuYWx5c2VyIGxlcyAgDQpyw6lzdWx0YXRzLg0K --0000000000004c42e405dee37048 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable
3D"Google=C2=A0Forms"
<= td dir=3D"auto">Inscripti= on pour recevoir un t-shirt
<= /tbody>
Hello dear,

I'm Daniel Lawrence nine= teen years old,I'm the son of my late Dr. Lawrence Philip, My Father wa= s a wealthy business man he was poisoned by mu uncle's who wanted to ta= ke over his business empand wealth, according to the laboratory result, he = was given a poisoned orange juice, the doctor tried to save his life unfort= unately all the doctors' effort was in vain he died.

Before he w= ent to the for hospital for treatment, he secretely told me that he deposit= ed the sum of (Two million, two hundred thousand United state dollars) with= bank and warned me that I we should be careful in case anything happened t= o him as if he knew he was going to die. They have succeeded in killing him= , my late mother was a Muslim. Truely I don't know you but I wnat you c= onsider my situation and assist me to get this money transfered into your f= oreign account for investment purpose in your country.

You will help= me to come to your country and continue my studies while the investment we= be under your care.

Yours Sincerely
Daniel
Saisissez votre nom et la taille voulue afin de vous inscrire pour r= ecevoir un t-shirt.
Remplir le f= ormulaire
<= tr height=3D"24px">
Cr= =C3=A9er votre propre formulaire Google
= --0000000000004c42e405dee37048--