Return-Path: <bounces+SRS=4rWqV=J4@christ.de>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id BhRbKA7j02URZgAAV5eKQw
	(envelope-from <bounces+SRS=4rWqV=J4@christ.de>)
	for <info@tictactocsaintcanut.com>; Mon, 19 Feb 2024 18:23:58 -0500
Return-path: <bounces+SRS=4rWqV=J4@christ.de>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Mon, 19 Feb 2024 18:23:58 -0500
Received: from mail-be0deu01hn2240.outbound.protection.outlook.com ([52.100.3.240]:6624 helo=DEU01-BE0-obe.outbound.protection.outlook.com)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <bounces+SRS=4rWqV=J4@christ.de>)
	id 1rcCzO-0006mj-0o
	for info@tictactocsaintcanut.com;
	Mon, 19 Feb 2024 18:23:58 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=R0Y21WfE+JhBbz2SkFeQhNwijjcPZ1SFzH6522DszW7/+KjboPAIWgTipbkfNA42+2cxUW58hl2KUP7Pk9u/oJ1fZ/YaeaNfLuituxrveKerrAYRVYGCRtXrqdPyERkWZmIVnxRsZMAIFQkQQaITYvbHKOn3rbOOIid0Z6CIIwWWVSoZovXy4uwbo57l2KbU8ejmIRrY2gmw5dPn4qjMxyd5HM+EX0EmPKcUvDFtlIjYP+WpwLCsY0jo0hDvOLKljV30sJyKki2UEEruIW24w7jMLmV3RZwYWfGPrOoESCK6knZm4H20T32N/fWYLwsPB68L6iX6UGGHe0ds4AANXw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=srXUFVRymCvk+Q6HvI+bMWFlv+6j13y/23jCtVwHTTE=;
 b=j7Ildsrw4f9XySO+CxCQZpAwyDo2L8uXmByOOYUeV/WJE0q01JonLUQ4i7ZXUrjEAMs6D3Wa5Lh2ZAfkpCm4cbDoPTf+8Wbi/wLxpH+S7N4q33Aixa0p7peIQbjMs1IJz6xlYEKtg5dzyBMHNHkxaFwTR9jhyWEX6fBCSxccr8tVkpn01OQ4OGwkiW/idy1hwzbJSrw3UHdM5u9twczMJ/N/p353dJ6c5wVGYukF/voeWwYGIaRHp8gIbN/04Askb40sLTaOX93q/uxu6yByQ9ZpgXv8p5jY/2f0CsfKIfts5GT76uLr1MywmV42Z07UTOHb5esfA2AtGk960i7lIg==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 193.37.149.254) smtp.rcpttodomain=thiele-granit.de
 smtp.mailfrom=chr-exc-hyb01.christ.de; dmarc=fail (p=none sp=none pct=100)
 action=none header.from=chr-exc-hyb01.christ.de; dkim=none (message not
 signed); arc=none (0)
Received: from FR0P281CA0159.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:b3::15)
 by FR3P281MB2141.DEUP281.PROD.OUTLOOK.COM (2603:10a6:d10:35::13) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7292.39; Mon, 19 Feb
 2024 23:23:15 +0000
Received: from FR3PEPF00000484.DEUP281.PROD.OUTLOOK.COM
 (2603:10a6:d10:b3:cafe::bc) by FR0P281CA0159.outlook.office365.com
 (2603:10a6:d10:b3::15) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.12 via Frontend
 Transport; Mon, 19 Feb 2024 23:23:15 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.37.149.254)
 smtp.mailfrom=chr-exc-hyb01.christ.de; dkim=none (message not signed)
 header.d=none;dmarc=fail action=none header.from=chr-exc-hyb01.christ.de;
Received-SPF: None (protection.outlook.com: chr-exc-hyb01.christ.de does not
 designate permitted sender hosts)
Received: from hybrid.christ.de (193.37.149.254) by
 FR3PEPF00000484.mail.protection.outlook.com (10.167.240.4) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
 15.20.7292.25 via Frontend Transport; Mon, 19 Feb 2024 23:23:14 +0000
Received: from CHR-EXC-HYB01.christ.local (10.60.4.71) by
 CHR-EXC-HYB01.christ.local (10.60.4.71) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
 15.1.2375.34; Tue, 20 Feb 2024 00:23:06 +0100
Received: from User (10.60.4.26) by CHR-EXC-HYB01.christ.local (10.60.4.71)
 with Microsoft SMTP Server id 15.1.2375.34 via Frontend Transport; Tue, 20
 Feb 2024 00:22:52 +0100
Reply-To: <stevesson8@gmail.com>
From: Customer Service <info@chr-exc-hyb01.christ.de>
To: <stevesson8@gmail.com>
Date: Tue, 20 Feb 2024 00:23:35 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <606056ca-70c8-4ac8-bf40-4a03eb2ff10f@CHR-EXC-HYB01.christ.local>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: FR3PEPF00000484:EE_|FR3P281MB2141:EE_
X-MS-Office365-Filtering-Correlation-Id: 647598aa-9939-460d-efbc-08dc31a1bf62
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
	=?windows-1251?Q?ZSlZFD+EgCYHvj9YcfQbJY2dJ0GIMnh1xJ5uLgJzKHSUq0ia7SP0hwbA?=
 =?windows-1251?Q?FLjAY9EfGpcWLonJI3jT+sebkqsfluPCEj0/TVVhH7rTDYn4PQo3AY0t?=
 =?windows-1251?Q?i3A/UKuzDcKZ/RWKkJnKjQkWoAuWNjYMAp1Q4IotCqRENhlCpsQEphp2?=
 =?windows-1251?Q?CVCHmXvviTo/8pmW3QZXs7fe/D+UMs2+R6EOr/D8Z9qvUD1IzHXvpTyh?=
 =?windows-1251?Q?eNDYvn61dKWmgOLqE4O8r1b8D/CWX6cwWhSpyvPc2cv3OHJRMCGXqJxg?=
 =?windows-1251?Q?1qWaVukRzHb5KlPrvdRoY5ZBh7A1n9pN8EAtVCTnve9VSRG4eZs7/wWi?=
 =?windows-1251?Q?wH2YQXib/cmsx3FoTCGGUrSsnzd46QxvKxUdSo1SHsozoWuSIRc9RwT5?=
 =?windows-1251?Q?B6W50ACZxgwtIvkJSg1qqLD9J0oNoyLx+X5uFYJ+01nBSP251TWiv2W3?=
 =?windows-1251?Q?KOT/DhZeFlwEKtjMdnGkn7yd5fmksHSWDwP+qrmACpfKo/e2bqj+g2oX?=
 =?windows-1251?Q?d39o0towXkEDLt98+s2JP8zXkhSXgIgCs+pPDBvUYhu42jtqt0rRPDfK?=
 =?windows-1251?Q?QnFSL8zvkOOhELf6GJtkrA8OOJ/PQkfzCj5GbD4TW8ok0iychxVD20YO?=
 =?windows-1251?Q?mmlrUCQ+ZbM4K5o18Zg2Vu0RLsLpO2Qo8Ik/deCeh53YHADEZxoOgNZb?=
 =?windows-1251?Q?0M0np0XUwtOZ9oE4DpiHidtn8BVPLreQDELFVXHYBKBe/a/dd2m2LEod?=
 =?windows-1251?Q?UlWCYRhfQBl4vMSVAeiFQWAH4gOgL0GyE1P5JPRi/rmL3ZfhbzPqlYDD?=
 =?windows-1251?Q?tOUhFFOWg+VJ4E9k9JVHOgl+BA/ATQCyFDyZbARD4ycnTMlf6TlIIFlp?=
 =?windows-1251?Q?qJMzesitnk1oOALzw5KyXVKT0pYOZU8HywVgRWwEkBnfA+KNjbTaz/RF?=
 =?windows-1251?Q?sgx2C5QH1e3ij7uCutOxZ1nkX6xkZFP66kYxnjq8O6UjkeGyLJ/0Rosl?=
 =?windows-1251?Q?P4QZd4Vfl4qdreyLj4bnlcHquSvtNrZlQrj5TrIg2y9C7kPVqpycxgxf?=
 =?windows-1251?Q?I4bLP9dO5j+g9HtCjgX+IEHsq3ose98fM+zMRun4Jyy9qJz/xW75SzbY?=
 =?windows-1251?Q?FbIOFejERpIe9INZC6OmCClSeSyGlz3oFelFPnLHltZ39g=3D=3D?=
X-Forefront-Antispam-Report:
	CIP:193.37.149.254;CTRY:DE;LANG:en;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:hybrid.christ.de;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230031)(35950700004)(40470700004)(46966006)(2700400011);DIR:OUT;SFP:1501;
X-OriginatorOrg: christ.de
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 19 Feb 2024 23:23:14.9570
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 647598aa-9939-460d-efbc-08dc31a1bf62
X-MS-Exchange-CrossTenant-Id: 26e679cb-c6e9-4b2e-adfa-503fc9451154
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=26e679cb-c6e9-4b2e-adfa-503fc9451154;Ip=[193.37.149.254];Helo=[hybrid.christ.de]
X-MS-Exchange-CrossTenant-AuthSource: FR3PEPF00000484.DEUP281.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: FR3P281MB2141
X-Spam-Status: Yes, score=21.1
X-Spam-Score: 211
X-Spam-Bar: +++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn Beneficiary, It's regarding the prepaid ATM card worth
    of US$5,500,000.00 as approved by the board, I wish to inform you that you
    were listed among beneficiaries yet to receive their duly approved funds.
    
 Content analysis details:   (21.1 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.4 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 NSL_RCVD_FROM_USER     Received from User
  3.6 AXB_X_FF_SEZ_S         Forefront sez this is spam
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [stevesson8[at]gmail.com]
  0.8 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in
                             DNS
 -0.0 SPF_PASS               SPF: sender matches SPF record
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  0.5 KAM_NUMSUBJECT         Subject ends in numbers excluding current years
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.5 MONEY_NOHTML           Lots of money in plain text
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.4 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.3 MONEY_ATM_CARD         Lots of money on an ATM card
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
                             information
  0.0 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Your ATM card worth of US$5,500,000.00

Attn Beneficiary,

It's regarding the prepaid ATM card worth of US$5,500,000.00 as approved by the board, I wish to inform you that you were listed among beneficiaries yet to receive their duly approved funds.

The delivery of your Card has been slated to be dispatched upon receipt from you, Send the below information to Mr. Steven Duke to facilitate delivery.

Contact Person: Steven Duke
Email: stevesson8@gmail.com

1.Your Full Name:
2. Your Home Address:
3. Your Age:
4.Your Telephone Number:

Note: The prepaid ATM Card Pin code is (2049) I am pleading to you to try your best to get in contact with him, I will not be available until 1st April 2024 because i will be going on vacation.

Regards

Msr. Mary Jose
International funds organization
