Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Fri, 06 Jan 2023 05:22:03 -0500
Reply-To: <stevesson1@gmail.com>
From: "Customer service"<info@mta1.gro-next.net>
To: stevesson1@gmail.com
Date: Thu, 5 Jan 2023 23:22:49 -0800
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
    
 Content analysis details:   (17.5 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [34.124.176.124 listed in psbl.surriel.com]
  0.0 TVD_RCVD_IP            Message was received from an IP address
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [34.124.176.124 listed in bl.score.senderscore.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [stevesson1[at]gmail.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.6 RDNS_DYNAMIC           Delivered to internal network by host with
                             dynamic-looking rDNS
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 PDS_RDNS_DYNAMIC_FP    RDNS_DYNAMIC with FP steps
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  0.0 FROM_MISSPACED         From: missing whitespace
  0.0 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.4 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  0.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  0.0 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  Your outstanding funds US$5.5Million transfer

Greetings,

Your email was found in the central computer among the list of unpaid compensation funds, which originated from Americans, Europe, Asia, plus the middle East, among the list of individuals and companies. You are among the beneficiaries who will receive a contractual sum of US$5.5Million and it has been approved. You are required to contact the English agent in charge of your $5.5Million fund release documents with your full name, home address, country and cell phone number.

Agent:  Agent John Harrison
Agent e-mail: john.harrisonss@hotmail.com

I apologize to you on behalf of world debt reconciliation agencies for failure to pay your funds in time which according to records in the system had been long overdue.

Thanks,

Steven Duke
Customer Service