Return-Path: <SRS0=/MdTef=ZM=getofficeonlinebf.org=78hello@eigbox.net>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id /uJYNcVxG2MnIAAAV5eKQw
	(envelope-from <SRS0=/MdTef=ZM=getofficeonlinebf.org=78hello@eigbox.net>)
	for <info@tictactocsaintcanut.com>; Fri, 09 Sep 2022 13:03:01 -0400
Return-path: <SRS0=/MdTef=ZM=getofficeonlinebf.org=78hello@eigbox.net>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Fri, 09 Sep 2022 13:03:01 -0400
Received: from bosmailout07.eigbox.net ([66.96.189.7]:41595)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.95)
	(envelope-from <SRS0=/MdTef=ZM=getofficeonlinebf.org=78hello@eigbox.net>)
	id 1oWhPD-00027O-LB
	for info@tictactocsaintcanut.com;
	Fri, 09 Sep 2022 13:03:01 -0400
Received: from bosmailscan06.eigbox.net ([10.20.15.6])
	by bosmailout07.eigbox.net with esmtp (Exim)
	id 1oWhOW-0006Am-8s
	for info@tictactocsaintcanut.com; Fri, 09 Sep 2022 13:02:20 -0400
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=getofficeonlinebf.org; s=dkim; h=Sender:Content-Type:Message-ID:Reply-To:
	Subject:To:From:Date:MIME-Version:Cc:Content-Transfer-Encoding:Content-ID:
	Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
	:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
	List-Subscribe:List-Post:List-Owner:List-Archive;
	bh=FbY/M/g67jnPze2y950VbgmRP9rrfOL7nRnVI2/SJVA=; b=IVrGZQkFcMPuwdtzn4VizFCkr2
	AFSzV1EckcRgo6gElespIBSQuvLxIhz57ZWd1ci1HEb9Gy0ufetyCJY2n1osu+Jmo/O7gZ+znINI6
	AeyAcd7kpOys+lq8+iu3nCqMIgF+/VrfgaCMbe+wVt+IpjdmQqv/+/WDP2VTT1Ij/hZTy8vuIpfO3
	HjaqjUknrlqb6j9wevdqxMiX1v9a0wuHFCuNYiC0qL8zr/ec09cQQ3u8N6SVOy/NDogw5Zq7UkxU2
	N9f+9s/4mvY1Zv/B6R0OsvJ6gxJpu6BPtsNBg3Ep8gEOv0//dqSoOti8qNqXOIPc5N5ES1cSH8oQ7
	VenhpDMQ==;
Received: from [10.115.3.33] (helo=bosimpout13)
	by bosmailscan06.eigbox.net with esmtp (Exim)
	id 1oWhOV-0007gl-SK
	for info@tictactocsaintcanut.com; Fri, 09 Sep 2022 13:02:19 -0400
Received: from boswebmail05.eigbox.net ([10.20.16.5])
	by bosimpout13 with 
	id Ht1k2800806ZEP601t23M6; Fri, 09 Sep 2022 13:02:19 -0400
X-Authority-Analysis: ??
Received: from [127.0.0.1] (helo=homestead)
	by boswebmail05.eigbox.net with esmtp (Exim)
	id 1oWhNg-0007gl-TO; Fri, 09 Sep 2022 13:01:28 -0400
Received: from [102.23.20.32]
 by emailmg.homestead.com
 with HTTP (HTTP/1.1 POST); Fri, 09 Sep 2022 13:01:28 -0400
MIME-Version: 1.0
Date: Fri, 09 Sep 2022 10:01:28 -0700
From: Mr Paty <78hello@getofficeonlinebf.org>
To: undisclosed-recipients:;
Reply-To: patyjerry78@yandex.com
Mail-Reply-To: patyjerry78@yandex.com
Message-ID: <050d4404e291afca2e49f11b48f4586a@getofficeonlinebf.org>
X-Sender: 78hello@getofficeonlinebf.org
User-Agent: Roundcube Webmail/1.3.14
Content-Type: multipart/alternative;
 boundary="=_8280d1167adcc63442ea0d7a61806020"
X-EN-AuthUser: 78hello@getofficeonlinebf.org
Sender:  Mr Paty <78hello@getofficeonlinebf.org>
X-Spam-Status: Yes, score=18.1
X-Spam-Score: 181
X-Spam-Bar: ++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Dear partner My name is Mr. Paty Jerry. I am working with
   one of the prime banks in Burkina Faso. Here in this bank existed a dormant
    account for many years, which belonged to one of our late foreign customers.
    Th [...] 
 Content analysis details:   (18.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See
                             http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: getofficeonlinebf.org]
  0.5 JMQ_SPF_NEUTRAL        ASKDNS: SPF set to ?all
                             [eigbox.net TXT:v=spf1 ip4:66.96.128.0/18]
                             [?all]
  0.0 MILLION_HUNDRED        BODY: Million "One to Nine" Hundred
  1.5 NA_DOLLARS             BODY: Talks about a million North American dollars
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [patyjerry78[at]yandex.com]
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily
                             valid
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.1 DKIM_INVALID           DKIM or DK signature exists, but is not valid
  1.0 HK_NAME_MR_MRS         No description available.
  3.0 ODD_FREEM_REPTO        Has unusual reply-to header
  0.0 LOTS_OF_MONEY          Huge... sums of money
  1.4 FROM_FMBLA_NEWDOM      From domain was registered in last 7 days
  0.4 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.0 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 MONEY_FRAUD_8          Lots of money and very many fraud phrases
  3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
  0.1 UNDISC_MONEY           Undisclosed recipients + money/fraud signs
X-Spam-Flag: YES
Subject:  ***SPAM***  Dear partner

--=_8280d1167adcc63442ea0d7a61806020
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII

Dear partner

My name is Mr. Paty Jerry. I am working with one of the prime banks in
Burkina Faso. Here in this bank existed a dormant account for many
years, which belonged to one of our late foreign customers. The amount
in this account stands at $25,500,000.00 (Twenty Five Million Five
Hundred Thousand US Dollars).

I want a foreign account where the bank will transfer this fund. I know
you would be surprised to read this message, especially from someone
relatively unknown to you. But, do not worry yourself so much.

This is a genuine, risk free and legal business transaction. Reply back
to me urgently, if you are interested.

All details shall be sent to you once I hear from you.

Best regards,
Mr. Paty Jerry
Email:patyjerry78@yandex.com
--=_8280d1167adcc63442ea0d7a61806020
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8

<html><head><meta http-equiv=3D"Content-Type" content=3D"text/html; charset=
=3DUTF-8" /></head><body style=3D'font-size: 10pt; font-family: Verdana,Gen=
eva,sans-serif'>
<p><br /></p>
<div>
<div class=3D"pre" style=3D"margin: 0; padding: 0; font-family: monospace">=
Dear partner<br /> <br /> My name is Mr. Paty Jerry. I am working with one =
of the prime banks in Burkina Faso. Here in this bank existed a dormant acc=
ount for many years, which belonged to one of our late foreign customers. T=
he amount in this account stands at $25,500,000.00 (Twenty Five Million Fiv=
e Hundred Thousand US Dollars).<br /> <br /> I want a foreign account where=
 the bank will transfer this fund. I know you would be surprised to read th=
is message, especially from someone relatively unknown to you. But, do not =
worry yourself so much.<br /> <br /> This is a genuine, risk free and legal=
 business transaction. Reply back to me urgently, if you are interested.<br=
 /> <br /> All details shall be sent to you once I hear from you.<br /> <br=
 /> Best regards,<br /> Mr. Paty Jerry<br /> Email:<a href=3D"mailto:patyje=
rry78@yandex.com">patyjerry78@yandex.com</a></div>
</div>
</body></html>

--=_8280d1167adcc63442ea0d7a61806020--
