Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id rT6VL8anAGT7GAAAV5eKQw (envelope-from ) for ; Thu, 02 Mar 2023 08:42:30 -0500 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Thu, 02 Mar 2023 08:42:30 -0500 Received: from mx2.smoltelecom.ru ([92.241.96.198]:62967) by cl-t211-187cl.majeunesse.ca with esmtp (Exim 4.96) (envelope-from ) id 1pXjCZ-0001eY-20 for info@tictactocsaintcanut.com; Thu, 02 Mar 2023 08:42:30 -0500 Received: from [80.94.95.85] (port=53091 helo=User) by mx2.smoltelecom.ru with esmtpa (Exim 4.77 (FreeBSD)) (envelope-from ) id 1pXjBN-0003Hg-3k; Thu, 02 Mar 2023 16:41:17 +0300 Reply-To: From: "Mr. Graham Steele" Date: Thu, 2 Mar 2023 05:41:18 -0800 MIME-Version: 1.0 Content-Type: text/html; charset="Windows-1251" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Spam-Status: Yes, score=30.3 X-Spam-Score: 303 X-Spam-Bar: ++++++++++++++++++++++++++++++ X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has identified this incoming email as possible spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: U.S Department of the Treasury Address: #1500 Pennsylvania Avenue, NW Washington, Content analysis details: (30.3 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 JMQ_SPF_NEUTRAL ASKDNS: SPF set to ?all [netzero.net TXT:v=spf1 ip4:64.136.0.0/20] [ip4:64.136.16.0/21 ip4:64.136.22.0/24] [ip4:64.136.28.0/22 ip4:64.136.30.0/24] [ip4:64.136.32.0/20 ip4:64.136.50.0/23] [ip4:64.136.52.0/22 ?all] 2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL [92.241.96.198 listed in psbl.surriel.com] 2.2 DEAR_BENEFICIARY BODY: Dear Beneficiary: 2.7 UNCLAIMED_MONEY BODY: People just leave money laying around 0.0 MILLION_HUNDRED BODY: Million "One to Nine" Hundred 2.0 MILLION_USD BODY: Talks about millions of dollars 0.0 NSL_RCVD_HELO_USER Received from HELO User 0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam 0.5 SUBJ_ALL_CAPS Subject is all capitals 1.2 MISSING_HEADERS Missing To: header 0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit [smnu433[at]gmail.com] 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider [dilla[at]netzero.net] 0.0 HTML_MESSAGE BODY: HTML included in message 0.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait 0.6 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format 1.9 REPLYTO_WITHOUT_TO_CC No description available. 0.0 FORGED_OUTLOOK_HTML Outlook can't send HTML message only 0.0 T_HK_NAME_FM_MR_MRS No description available. 0.9 URG_BIZ Contains urgent matter 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 LOTS_OF_MONEY Huge... sums of money 0.0 FSL_NEW_HELO_USER Spam's using Helo and User 0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool 0.0 FAKE_REPLY_C No description available. 0.0 MONEY_FROM_MISSP Lots of money and misspaced From 0.0 FROM_MISSPACED From: missing whitespace 2.4 FROM_MISSP_REPLYTO From misspaced, has Reply-To 1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different freemails 0.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email? 0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems 1.0 XFER_LOTSA_MONEY Transfer a lot of money 2.0 FROM_MISSP_EH_MATCH From misspaced, matches envelope 0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool 0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information 2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook 0.0 SPOOFED_FREEM_REPTO Forged freemail sender with freemail reply-to 0.0 T_FROM_MISSP_FREEMAIL From misspaced + freemail provider 2.5 MONEY_FORM_SHORT Lots of money if you fill out a short form 3.0 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money 0.0 FORM_FRAUD_5 Fill a form and many fraud phrases X-Spam-Flag: YES Subject: ***SPAM*** Re: PAYMENT APPROVED NOTIFICATION
U.S Department of the Treasury
Address: #1500 Pennsylvania Avenue,
NW  Washington,
D.C. 20220,
USA.
 
 
Attn Beneficiary,
 
                            
                                            RE: YOUR FUND RELEASE NOTIFICATION.
 
 
I am Mr. Graham Steele, the U.S Department of the Treasury Assistant Secretary for Financial Institutions, and the Chairman, Unclaimed Fund Release committee set up by United Sates Government through this department to disburse/release all the unclaimed funds stopped by some agencies of the United States Government due to one reason or the other to the supposed beneficiaries from every countries of the world. After going through some payment files, I discovered that you have not received your payment because of some corrupt officials who intend to divert your funds to their own account for their selfish interest. After careful verification on your payment file, it was gathered that you abandoned this fund because of the incessant fees/levies being requested from you.
 
Be informed that after due consultation on your behalf regarding the immediate release the fund amounting to Five Million Six Hundred Thousand United States Dollars($5.6M). It will interest you to note that I have successfully secured an Approval in your favor and the fund has been arranged for immediate release/transfer into your bank account through our assigned paying bank.
 
You are hereby advise to reconfirm the information stated below in this notification for further advice:
 
Your Full Name....................
Current Residential Address.......
Direct Phone Number...............
Age / Sex / Occupation............
Scan Copy of Your ID..............
 
I shall wait to hear from you with the above mentioned information to enable us expedite action and have your approved unclaimed fund released to you within official 7 working days.
 
Your urgent response is highly anticipated.
 
Thanks.
 
Yours Sincerely,
Mr. Graham Steele.
Assistant Secretary for Financial Institutions.
Chairman,
Unclaimed Fund Release Committee.