Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Thu, 05 Oct 2023 19:33:43 -0400
Reply-To: <stevesson1@gmail.com>
From: "Customer Service"<support@mail.zskky.cn>
To: stevesson1@gmail.com
Date: Thu, 5 Oct 2023 22:48:24 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
    
 Content analysis details:   (51.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.9 NSL_RCVD_FROM_USER     Received from User
  1.2 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [220.165.250.226 listed in zen.spamhaus.org]
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                           [220.165.250.226 listed in bl.score.senderscore.com]
  4.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
                             address
                             [220.165.250.226 listed in dnsbl.sorbs.net]
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [stevesson1[at]gmail.com]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  2.5 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  2.9 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  1.7 FROM_MISSP_USER        From misspaced, from "User"
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.7 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.7 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
                             (FTSDMCXX/boundary variant) + no rDNS
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  1.3 HK_SCAM                No description available.
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  1.1 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  2.0 FROM_MISSPACED         From: missing whitespace
  2.5 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.3 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  1.0 FREEMAIL_REPLYTO       Reply-To/From or Reply-To/body contain
                             different freemails
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  2.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  2.5 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  2.8 FROM_MISSP_FREEMAIL    From misspaced + freemail provider
X-Spam-Flag: YES
Subject:  ***SPAM***  Contact John Harrison, for your compensation funds US$5.5Million transfer

Greetings,

Your email was found in the central computer among the list of unpaid compensation funds, which originated from Americans, Europe, Asia, plus the middle East, among the list of individuals and companies. You are among the beneficiaries who will receive a contractual sum of US$5.5Million and it has been approved. You are required to contact the English agent in charge of your $5.5Million fund release documents with your full name, home address, country and cell phone number.

Agent: Agent John Harrison
Agent e-mail: john.harrisonss@hotmail.com

I apologize to you on behalf of world debt reconciliation agencies for failure to pay your funds in time which according to records in the system had been long overdue.

Thanks,

Steven Duke
Customer Service
........................