Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id jileJmlnfmLhEwAAV5eKQw (envelope-from ) for ; Fri, 13 May 2022 10:12:57 -0400 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Fri, 13 May 2022 10:12:57 -0400 Received: from wrqvrnkx.outbound-mail.sendgrid.net ([149.72.82.26]:37822) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.95) (envelope-from ) id 1npW2O-0001Kv-91 for info@tictactocsaintcanut.com; Fri, 13 May 2022 10:12:57 -0400 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sendgrid.me; h=mime-version:from:subject:content-type:content-transfer-encoding:to; s=smtpapi; bh=42culWEZ3ghFq5WZUORoYnad+B0/qwyW7ogEU4Q9m78=; b=OG+/wFJUqOJE3PEkJ8E5a3A1MqKsWSJ6H+PUZVwADpU50OWrAX8+9i9ZLi2141kLbirx kne5bwgti/CLHhg3n13yeLM++PSNYGY5SQvGSBogFlOAJipSFi/81z1L0rja6YsBO/Hmv0 uuQ7vCgaAdYG8YgNWyNijRYakV+xA4bEE= Received: by filterdrecv-77df7bffc9-mxhg9 with SMTP id filterdrecv-77df7bffc9-mxhg9-1-627E673E-2F 2022-05-13 14:12:14.680836983 +0000 UTC m=+3169580.182680566 Received: from wn1ldwk0000NF (unknown) by geopod-ismtpd-1-2 (SG) with ESMTP id E0C9hp-1S-mMqZMC_QuTCw Fri, 13 May 2022 14:12:14.427 +0000 (UTC) MIME-Version: 1.0 From: Hannah Alex Date: Fri, 13 May 2022 14:12:15 +0000 (UTC) Content-Type: text/html; charset=us-ascii Content-Transfer-Encoding: base64 Message-ID: X-SG-EID: =?us-ascii?Q?oXzxxvuwrj8=2FWPfUtu=2FcrUXT6rtjVoUiU3jnFwNSf9XZKqsgCtn8vofdTYcAKl?= =?us-ascii?Q?3vTUGrUYqiL1JMC2TJ3Y+5R=2FaEjlPIkK+GhLYdv?= =?us-ascii?Q?ZmXcjq6v4QDKBC5Tcr1Rkli4sW=2FvamMQfD9PEZI?= =?us-ascii?Q?mr0d++=2FVxUVK1++gEElHiaZ0Z5D4bLuklWg3IjU?= =?us-ascii?Q?PPjz3e0jeg=2FlV6J3h4I3QJgJWeNUycmdLNvTNHu?= =?us-ascii?Q?RICPOtyy7F3iQb6K6DRkK6APOQhYzDxPnhvsdIQ?= =?us-ascii?Q?2mvpT3BDR9X3iRH6Zbuvw=3D=3D?= To: hannah.aalex1@gmail.com X-Entity-ID: oWyhNZTpNeVE+Bfw9XA+5w== X-Spam-Status: Yes, score=24.7 X-Spam-Score: 247 X-Spam-Bar: ++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dearest One, My name is Hannah Alex. I wish to inquire about your services to be my foreign partner / investor and support me to transfer and manage my funds by investing in profit making ventures lik [...] Content analysis details: (24.7 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [hannah.aalex1[at]gmail.com] 0.0 DKIM_ADSP_CUSTOM_MED No valid author signature, adsp_override is CUSTOM_MED 1.0 FORGED_GMAIL_RCVD 'From' gmail.com does not match 'Received' headers -0.0 SPF_PASS SPF: sender matches SPF record 0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 HTML_MESSAGE BODY: HTML included in message 0.0 MIME_BASE64_TEXT RAW: Message text disguised using base64 encoding 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: sendgrid.me] 0.2 FREEMAIL_FORGED_FROMDOMAIN 2nd level domains in From and EnvelopeFrom freemail headers are different 0.6 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.5 KAM_SENDGRID Sendgrid being exploited by scammers -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines 10 KAM_BENEFICIARY Beneficiary scams 6.0 KAM_INVEST Investment Scams 1.0 MALF_HTML_B64 Malformatted base64-encoded HTML content 1.2 NML_ADSP_CUSTOM_MED ADSP custom_med hit, and not from a mailing list 2.3 ADVANCE_FEE_4_NEW Appears to be advance fee fraud (Nigerian 419) X-Spam-Flag: YES Subject: ***SPAM*** Hello PGJyIC8+RGVhcmVzdCBPbmUsPGJyIC8+TXkgbmFtZSBpcyBIYW5uYWggQWxleC4gSSB3aXNoIHRv IGlucXVpcmUgYWJvdXQgeW91ciBzZXJ2aWNlcyB0byBiZSBteTxiciAvPmZvcmVpZ24gcGFydG5l ciAvIGludmVzdG9yIGFuZCBzdXBwb3J0IG1lIHRvIHRyYW5zZmVyIGFuZCBtYW5hZ2UgbXk8YnIg Lz5mdW5kcyBieSBpbnZlc3RpbmcgaW4gcHJvZml0IG1ha2luZyB2ZW50dXJlcyBsaWtlIGJ1eWlu ZyBvZiBjb21wYW55PGJyIC8+c2hhcmVzIG9yIFJlYWwgRXN0YXRlIGluIHlvdXIgY291bnRyeS4g SSBoYXZlIGEgcmVhc29uYWJsZSBzdW0gdGhhdCBJPGJyIC8+aW5oZXJpdGVkIGZyb20gbXkgbGF0 ZSBmYXRoZXIsIHdoaWNoIEkgd291bGQgbGlrZSB5b3UgdG8gaGVscCBtZSBpbnZlc3QgaW4geW91 ciBjb3VudHJ5LjxiciAvPk5vdGU6IGJlbG93IGFyZSB0aGUgbWFqb3IgcmVhc29ucyBJIGFtIGNv bnRhY3RpbmcgeW91LjxiciAvPigxKSBUbyBwcm92aWRlIGEgbmV3IGVtcHR5IGJhbmsgYWNjb3Vu dCBpbiB3aGljaCB0aGlzIG1vbmV5IHdvdWxkIGJlIDxiciAvPnRyYW5zZmVycmVkLiBpZiB5b3Ug ZG8gbm90IHdhbnQgdXMgdG8gdXNlIHlvdXIgcGVyc29uYWwgYWNjb3VudC48YnIgLz4oMikgVG8g c2VydmUgYXMgYSBndWFyZGlhbiBvZiB0aGlzIGZ1bmQgc2luY2UgdGhlIGJhbmsgaW5zaXN0ZWQg dGhhdCB0aGVpciA8YnIgLz5hZ3JlZW1lbnQgd2l0aCBteSBmYXRoZXIgd2FzIHRoYXQgSSBwcm92 aWRlIGEgZm9yZWlnbiBwYXJ0bmVyIGJlZm9yZSA8YnIgLz5yZWxlYXNpbmcgdGhlIGZ1bmQuPGJy IC8+KDMpIFRvIG1ha2UgYXJyYW5nZW1lbnQgZm9yIG1lIHRvIGNvbWUgb3ZlciB0byB5b3VyIGNv dW50cnkgdG8gZnVydGhlciBteSA8YnIgLz5lZHVjYXRpb24gYW5kIHRvIHNlY3VyZSBhIHJlc2lk ZW50IHBlcm1pdCBpbiB5b3VyIGNvdW50cnkuPGJyIC8+UGxlYXNlIHJlcGx5IGFzIHNvb24gYXMg eW91IHJlYWQgdGhpcyBtZXNzYWdlIGZvciBtb3JlIGRldGFpbHMgYW5kIHByb29mLjxiciAvPktp bmQgcmVnYXJkcy48YnIgLz5IYW5uYWggQWxleC48YnIgLz4=