Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id Ux3NNEJ3F2NYZAAAV5eKQw (envelope-from ) for ; Tue, 06 Sep 2022 12:37:22 -0400 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Tue, 06 Sep 2022 12:37:22 -0400 Received: from mail-oa1-f66.google.com ([209.85.160.66]:39900) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.95) (envelope-from ) id 1oVbZj-0006eI-Hg for info@tictactocsaintcanut.com; Tue, 06 Sep 2022 12:37:22 -0400 Received: by mail-oa1-f66.google.com with SMTP id 586e51a60fabf-11e9a7135easo29516941fac.6 for ; Tue, 06 Sep 2022 09:37:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc :subject:date; bh=AsD/bkNTlGAULRrSpjHJgt8neoHvDU+c449WBPUmF6M=; b=LE2pxg2wK0a+PlDDJ6d3B5QbVW2/pfgaH+7Vm24yKcOFNr2OtnK6cR7gwXfdX9PlhM QBjnxLTL7i4uIYl8HrH0821S5YI0mdWHXqcZRWzE88sDb5ulmBuNpFk/Mmlvz7tvzPl3 Uq/4e7106P7OonTOwypNawi6IAtrwP3S89VoUbpgur7mml7skF+BweR//rhoSp71Q8lc yt1fqTSd1buwzN1qu2R4b/I5j2TFyHj9RHTMsC8l8Cdtu2AxEjyJo9ALM3113XjvMPNl eBAi1dIpslhPRPZBZ0ZBy6VKRl9QKLZHT2VQ/WBJD3dJg2P14jS7rDCIAn9zl2TDuBiW LlFw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=to:subject:message-id:date:from:reply-to:mime-version :x-gm-message-state:from:to:cc:subject:date; bh=AsD/bkNTlGAULRrSpjHJgt8neoHvDU+c449WBPUmF6M=; b=rRrOY79oQ64YJ2P5ST9gokU5xcuHopTALVDTr5N2UXL5vqN/kpyKACwN9uXfIzMDmp z/7fO1U/fKDvcxYyN/hBX1b+UlawUR0ncbKlojFfzlzZsAhuFGaGzHjIOdse/z2PirbA 3SNMIHebMZj8nrZzpQwAiWuLbnyIpZ6OpC1R2hyfaR2jiE1hsrjRBlCmnVsXrYfYj+P8 9ahxnysib3r5CEdq++5bB5hsCczx35ttCEW7atRGQZfjOI2J/yrRZjb7s/a3k3A2nBiu 5+Ny8pC+/Kd0ZNQyR4MK8mJiaEAMigI2BZX9Nolxw1bkeb4wgcmcxUEcASKj0lrTwj/1 JUGw== X-Gm-Message-State: ACgBeo0fwi/RgNkS2Efq+MwMqmCwxVVKLrT1ttaaM6KIiZhZ/hmoXdsZ C5T/f+KUSM1srXCr8r/6QwKAthAizbg+PJUcbWc= X-Google-Smtp-Source: AA6agR6+j59OKU13VBPSfPL3GIsW7x+X7j5bzlOeg64hH2clGRcrx0dL0rL/DNCgf4Vuzg7zwH98fa4T+wSYeUg7tDs= X-Received: by 2002:a05:6870:1718:b0:127:399a:b26f with SMTP id h24-20020a056870171800b00127399ab26fmr6503978oae.158.1662482201236; Tue, 06 Sep 2022 09:36:41 -0700 (PDT) MIME-Version: 1.0 Received: by 2002:a05:6841:3106:b0:dc4:2671:8a7b with HTTP; Tue, 6 Sep 2022 09:36:40 -0700 (PDT) Reply-To: wunion7509@gmail.com From: "(IMF) SCAM VICTIMS" Date: Tue, 6 Sep 2022 09:36:40 -0700 Message-ID: To: undisclosed-recipients:; Content-Type: text/plain; charset="UTF-8" Bcc: info@tictactocsaintcanut.com X-Spam-Status: Yes, score=18.4 X-Spam-Score: 184 X-Spam-Bar: ++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Dear email owner, The International Monetary Fund (IMF) compensates all victims of fraud and your email address was found on the list of victims of fraud. This Western Union office has been hired by the IMF to transfer [...] Content analysis details: (18.4 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [wunion7509[at]gmail.com] 0.5 SUBJ_ALL_CAPS Subject is all capitals 0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in digit [mnbana649[at]gmail.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [mnbana649[at]gmail.com] -0.0 SPF_PASS SPF: sender matches SPF record -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature 2.0 PYZOR_CHECK Listed in Pyzor (https://pyzor.readthedocs.io/en/latest/) 2.0 HK_SCAM No description available. -0.0 T_SCC_BODY_TEXT_LINE No description available. 0.0 LOTS_OF_MONEY Huge... sums of money 0.3 FSL_BULK_SIG Bulk signature with no Unsubscribe 3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to 2.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.3 MONEY_FORM_SHORT Lots of money if you fill out a short form 0.1 UNDISC_MONEY Undisclosed recipients + money/fraud signs 2.8 MONEY_FRAUD_3 Lots of money and several fraud phrases 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money X-Spam-Flag: YES Subject: ***SPAM*** SCAM VICTIMS Dear email owner, The International Monetary Fund (IMF) compensates all victims of fraud and your email address was found on the list of victims of fraud. This Western Union office has been hired by the IMF to transfer your compensation to you via Western Union Money Transfer. However, we have decided to make your own payment through Western Union Money Transfer, $5,000 per day until the total of $5,000,000.00, has been transferred to you in full. We may not be able to send the payment with your email address alone,so we need your information on where we will send the money to you, Such as: Name of the addressee________________ Address________________ Country__________________ Telephone number________________ Attached copy of your ID_____________ Age ________________________ We will start the transfer once we have received your Information:Contact E-mail ( wunion7509@gmail.com ) Thank you Faithfully, Mr. Michael Anthony Director of Western Union Money Transfer.