Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id vbH9FW4wnWNvGAAAV5eKQw (envelope-from ) for ; Fri, 16 Dec 2022 21:58:54 -0500 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Fri, 16 Dec 2022 21:58:54 -0500 Received: from ljyjkxsl.waspstings.com ([88.209.254.123]:37652) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.95) (envelope-from ) id 1p6NPc-0001bt-06 for info@tictactocsaintcanut.com; Fri, 16 Dec 2022 21:58:54 -0500 DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=waspstings.com; h=Reply-To:From:To:Subject:Date:Message-ID:MIME-Version:Content-Type:Content-Transfer-Encoding; i=amanda@waspstings.com; bh=+upyqQRktWr6giFVEMQOi+Dtkbg=; b=a4iq+65vwfhdFbT6DRSix/7MkgffDfUzJQKCUxkdrKc6t5D3SHYgEgyfMmml49aL+XEszIvaCdBq CTTT1798i4XK443VRdGXUhlLuXSuEeTP0o64pA+rhszRAv2A7CZAURQZPbQhn4dxKS7OLmKYd4PW TpwUqUE47FIlvd4Y/SoLCZCOejSIy3h34yRCahyjldnkZfL9HaMp9ZPHAKSTuGY0DHJ3qzwv+LQl xOqnZqLtXLngzYCZMOgPXtrnuCTLiq/IuDOBSCCeMdJDGOLEXkvtS508Zht8Et6xmM7w5Pmk/12b o00Cz5MXo8xmY/iAKB7OeZjs/NR0rQlwqtIGSw== DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=dkim; d=waspstings.com; b=KMKlosn/k81+vDeZau29RDYlvRZ0AsQKEUQ29Z9YgyrwPU6Mc+kL56R/yZjHSBnqImkJRN1LtRFA dzm2VdHbVecDYmNca8GqODYb2cGTzXtrXUpnywFhzTlzMuTin4rVeuSab4bHFSJerCQ81ocFHSmD 4W+Hc2R0YBJDVmOlYzTQyfEN7Iu8mHC3/49I6uChdoJRF91sVRZK/J/QLsZNOrPFJKj7JVNLQG8b wZ08jQabj96Bc0bIlS2Y9r7cjKgxANyXiolcRQnHvQia3nUq01luo7OaPazAeawkEai5gYL+HBns f7sWPgIZPYF3RQO67/Ro7Xf694tuNS0WtC9Xpg==; Reply-To: drjamesbrandlin1962@gmail.com From: "James Brandlin" To: info@tictactocsaintcanut.com Date: 16 Dec 2022 20:58:07 -0600 Message-ID: <20221216205805.D4C3C3053857A836@waspstings.com> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: Yes, score=8.3 X-Spam-Score: 83 X-Spam-Bar: ++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Hello beneficiary, Sir / Madam, This is James, from the Federal Bureau of Investigation FBI USA. I am glad to write to you with the keen hope that this message met you in good health and would bring prosperity to you and your entire [...] Content analysis details: (8.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 2.5 URIBL_DBL_MALWARE Contains a malware URL listed in the Spamhaus DBL blocklist [URIs: waspstings.com] 1.3 RCVD_IN_VALIDITY_RPBL RBL: Relay in Validity RPBL, https://senderscore.org/blocklistlookup/ [88.209.254.123 listed in bl.score.senderscore.com] 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: waspstings.com] -0.0 SPF_PASS SPF: sender matches SPF record 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [drjamesbrandlin1962[at]gmail.com] -0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from envelope-from domain 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's domain 2.0 FROM_MISSPACED From: missing whitespace 2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From X-Spam-Flag: YES Subject: ***SPAM*** Re: Transaction Refund To Beneficiary Hello beneficiary, Sir / Madam, This is James, from the Federal Bureau of Investigation FBI USA.=20 I am glad to write to you with the keen hope that this message=20 met you in good health and would bring prosperity to you and your=20 entire household. It has been brought to our knowledge via a=20 confessional statement of one Nigerian Notorious Fraud Star by=20 name Mr Ramon Abbas also known as Ray Hushpuppi who was arrested=20 in Dubai by the Dubai Police in conjunction with my humble=20 office. During interrogations he had confessed defrauding several=20 unsuspecting companies and individuals of their hard earned=20 money. I am glad to inform you that all the victims of this high profile=20 scam syndicate are being refunded their lost funds once evidence=20 of payment is provided. If you have acted in this regard and lost=20 money one way or the other, kindly respond as quickly as possible=20 with more information to enable me to work on your file for=20 refund. You can also visit google to know more about this development and=20 the latest state of the matter in the United States. Though he is=20 currently facing charges but yet to be convicted.=20 Waiting to read from you soon. Best regards. James Brandlin E-mail: drjamesbrandlin1962@gmail.com