Return-Path: <admin@ittimegroup.com>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id 4BOsLUB+JWSLNgAAV5eKQw
	(envelope-from <admin@ittimegroup.com>)
	for <info@tictactocsaintcanut.com>; Thu, 30 Mar 2023 08:19:12 -0400
Return-path: <admin@ittimegroup.com>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Thu, 30 Mar 2023 08:19:12 -0400
Received: from [202.91.242.100] (port=64432 helo=ittimegroup.com)
	by cl-t211-187cl.majeunesse.ca with smtp (Exim 4.96)
	(envelope-from <admin@ittimegroup.com>)
	id 1phrFF-0003cM-27
	for info@tictactocsaintcanut.com;
	Thu, 30 Mar 2023 08:19:12 -0400
Received: from [105.112.181.107]; Thu, 30 Mar 2023 18:47:43 +0800
Reply-To: <stevesson1@gmail.com>
From: "Customer service"<admin@ittimegroup.com>
To: stevesson1@gmail.com
Date: Thu, 30 Mar 2023 04:08:06 -0700
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1081
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1081
X-Spam-Status: Yes, score=21.7
X-Spam-Score: 217
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Greetings, Your email was found in the central computer among
    the list of unpaid compensation funds, which originated from Americans, Europe,
    Asia, plus the middle East, among the list of individuals and compani [...]
    
 Content analysis details:   (21.7 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [202.91.242.100 listed in bl.score.senderscore.com]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [stevesson1[at]gmail.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
                             (FTSDMCXX/boundary variant) + no rDNS
  0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay
                             lines
  0.0 LOTS_OF_MONEY          Huge... sums of money
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.8 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  0.9 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.6 FROM_MISSPACED         From: missing whitespace
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 HDR_ORDER_FTSDMCXX_DIRECT Header order similar to spam
                             (FTSDMCXX/boundary variant) + direct-to-MX
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  1.1 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  1.4 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  0.5 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  Your outstanding funds US$5.5Million transfer

Greetings,

Your email was found in the central computer among the list of unpaid compensation funds, which originated from Americans, Europe, Asia, plus the middle East, among the list of individuals and companies. You are among the beneficiaries who will receive a contractual sum of US$5.5Million and it has been approved. You are required to contact the English agent in charge of your $5.5Million fund release documents with your full name, home address, country and cell phone number.

Agent:  Agent John Harrison
Agent e-mail: john.harrisonss@hotmail.com

I apologize to you on behalf of world debt reconciliation agencies for failure to pay your funds in time which according to records in the system had been long overdue.

Thanks,

Steven Duke
Customer Service

 
