Return-Path: <SRS1=HOpA=mail.hydrar.de==KtIp=IP=amnet.net.au=norm.h@mail.hydrar.de>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id KCr+CXOZmGW+bgAAV5eKQw
	(envelope-from <SRS1=HOpA=mail.hydrar.de==KtIp=IP=amnet.net.au=norm.h@mail.hydrar.de>)
	for <info@tictactocsaintcanut.com>; Fri, 05 Jan 2024 19:06:11 -0500
Return-path: <SRS1=HOpA=mail.hydrar.de==KtIp=IP=amnet.net.au=norm.h@mail.hydrar.de>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Fri, 05 Jan 2024 19:06:11 -0500
Received: from i59f617c5.versanet.de ([89.246.23.197]:56220 helo=mail.hydrar.de)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <SRS1=HOpA=mail.hydrar.de==KtIp=IP=amnet.net.au=norm.h@mail.hydrar.de>)
	id 1rLuCW-0007Ky-0x
	for info@tictactocsaintcanut.com;
	Fri, 05 Jan 2024 19:06:11 -0500
Received: from User (unknown [192.168.203.1])
	by mail.hydrar.de (Postfix) with SMTP id 89701C8D95;
	Fri,  5 Jan 2024 21:43:50 +0000 (UTC)
Authentication-Results: mail.hydrar.de;
	none
Reply-To: <revsistermargarethjohnson@protonmail.com>
From: "Rev Sister Margareth Johnson"<norm.h@amnet.net.au>
Date: Fri, 5 Jan 2024 13:44:09 -0800
MIME-Version: 1.0
Content-Type: text/html;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Level: **************
X-Spamd-Bar: ++++++++++++++
X-Spam: Yes
X-Spam-Status: Yes, score=28.2
X-Spam-Score: 282
X-Spam-Bar: ++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Good Day my dear Beloved, I am sorry not to get back to you
    in time.I was on special assignment in Vatican City (Rome) Just returned
   last week. 
 Content analysis details:   (28.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [89.246.23.197 listed in bl.score.senderscore.com]
  0.5 SUBJ_ALL_CAPS          Subject is all capitals
  1.2 MISSING_HEADERS        Missing To: header
  0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
                             mail domains are different
  0.1 MIME_HTML_ONLY         BODY: Message only has text/html MIME parts
  0.0 HTML_MESSAGE           BODY: HTML included in message
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  1.5 KAM_DMARC_QUARANTINE   DKIM has Failed or SPF has failed on the
                             message and the domain has a DMARC
                             quarantine policy
  0.0 FORGED_OUTLOOK_HTML    Outlook can't send HTML message only
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  1.9 REPLYTO_WITHOUT_TO_CC  No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.9 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  1.4 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  0.6 FORGED_OUTLOOK_TAGS    Outlook can't send HTML in this format
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  2.0 FROM_MISSPACED         From: missing whitespace
  1.3 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.8 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.0 FILL_THIS_FORM         Fill in a form with personal information
  2.2 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  0.0 MONEY_FORM             Lots of money if you fill out a form
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  1.0 ADVANCE_FEE_2_NEW_FRM_MNY Advance Fee fraud form and lots of
                             money
  1.6 MONEY_FRAUD_3          Lots of money and several fraud phrases
  0.0 FORM_FRAUD_3           Fill a form and several fraud phrases
X-Spam-Flag: YES
Subject:  ***SPAM***  GOOD DAY MY DEAR BELOVED

<HTML><HEAD><TITLE></TITLE>
</HEAD>
<BODY bgcolor=#FFFFFF leftmargin=5 topmargin=5 rightmargin=5 bottommargin=5>
<FONT size=2 color=#000000 face="Arial">
<DIV>
Good Day my dear Beloved,</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
I am sorry not to get back to you in time.I was on special assignment</DIV>
<DIV>
in Vatican City (Rome) Just returned last week.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
I am Reverend Sister Margareth Johnson, from&nbsp; St. John's Cathedral</DIV>
<DIV>
Kuala Lumpur,Malaysia,it's very pathetic that we lost Rev.</DIV>
<DIV>
Father Gerard Andrew of St. John's Cathedral Kuala Lumpur. Late</DIV>
<DIV>
Rev.Father Gerard Andrew was an American and also an orphan but</DIV>
<DIV>
nationalized in St. John's Cathedral Kuala Lumpur,Malaysia.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
He died on April 13, 2023&nbsp; and before he died, he made a will and</DIV>
<DIV>
instructs me to contact you on your email when he died as the next of</DIV>
<DIV>
kin of his fund as his spirit directed him and made you the</DIV>
<DIV>
beneficiary of his will a sum of $5,500,000.00 through your e-mail</DIV>
<DIV>
address which he chose after a random sampling of many</DIV>
<DIV>
people's e-mail addresses by the help of Microsoft international firm.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Now for you to claim your fund, forward your details below via this</DIV>
<DIV>
(revsistermargarethjohnson@protonmail.com) to me so I can forward it to the</DIV>
<DIV>
CIMB BANK</DIV>
<DIV>
MALAYSIA for the release of your funds.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Full name.</DIV>
<DIV>
Contact address.</DIV>
<DIV>
Age</DIV>
<DIV>
Occupation.</DIV>
<DIV>
Private phone number whatsApp.</DIV>
<DIV>
Driver License</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Attached is the Deposited Certificate on your behalf.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Congratulations Looking forward to reading from you.</DIV>
<DIV>
&nbsp;</DIV>
<DIV>
Best regards &amp; God bless you.</DIV>
<DIV>
Reverend Sister Margareth Johnson.</DIV>
</FONT>
</BODY></HTML>
