Return-Path: <bounces+SRS=A10i7=J5@christ.de>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id shAMNxfJ1GU6RwAAV5eKQw
	(envelope-from <bounces+SRS=A10i7=J5@christ.de>)
	for <info@tictactocsaintcanut.com>; Tue, 20 Feb 2024 10:45:27 -0500
Return-path: <bounces+SRS=A10i7=J5@christ.de>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Tue, 20 Feb 2024 10:45:27 -0500
Received: from mail-be0deu01hn2216.outbound.protection.outlook.com ([52.100.3.216]:19969 helo=DEU01-BE0-obe.outbound.protection.outlook.com)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <bounces+SRS=A10i7=J5@christ.de>)
	id 1rcSJB-0004iK-1y
	for info@tictactocsaintcanut.com;
	Tue, 20 Feb 2024 10:45:27 -0500
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=X9Grr7gTYwpO/UpZ8wXPzvIOUMkztd1raKp/Y6AuSsDpHOZ7+LWDJsOPWUxqvDVzg5KQe7IyPIvFsQQrdn1jr4pdhOqhFfM4jMwRNXKe4mtDb8qm8+GGaDdsi0Mi4uLirAHfvyOipE5r8C+VaY6d2QpIyY1itR1Z+T/42pq9OWgN4TS5XMBaIbwZ/HlqJ1tiT2J06X+Q9y+1QvwSPKFM3NGJlhIE5GkHI9GoxT4lAEm8ajN/Cc2/20wJf+9PGUJpJ9gSx51PfaHwNpJjzmCp+ceJEDdvAdl2I7NIqePDXjielqGL/lUv4VJUDiLrCkwb10TxCQ9XmSzEkS2tJu54ZA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
 bh=srXUFVRymCvk+Q6HvI+bMWFlv+6j13y/23jCtVwHTTE=;
 b=hEKbl7TiaQ2yFXAQALDlth7RWeSao60669RQb7UlggauxAu/boKEFfLQTEYFcg//BfFc2vKn2PEIO0tOohc56Qcw7CPI0RGykJVMzYVTqwSGgp+mtYPYmPZijL91bgQx4D+uycVg4v6dbv6OYrChCqpGOCyJpIzzlWGeNy1FR1HhP21Fu6HQARahEK4lFFaiCDnEAkAm+sYJgomxHytu2FQT9scZ7DGPa2SGIRhMp+0LT1T6i+x0Z3UB0hY4w2UHZYxUXKPpjVskXLwPmTAYfce68MJhLfTkXUf5qO3LqSfJiLI4BVRmqHsgHMPmnJLlFk9sbHm8Q/udseBzZ9R1Aw==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none (sender ip is
 193.37.149.254) smtp.rcpttodomain=thunderonthelake.com
 smtp.mailfrom=chr-exc-hyb01.christ.de; dmarc=fail (p=none sp=none pct=100)
 action=none header.from=chr-exc-hyb01.christ.de; dkim=none (message not
 signed); arc=none (0)
Received: from BE1P281CA0447.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:81::26)
 by BE1P281MB2003.DEUP281.PROD.OUTLOOK.COM (2603:10a6:b10:3c::6) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7292.39; Tue, 20 Feb
 2024 15:44:42 +0000
Received: from BE0DEU01FT007.eop-deu01.prod.protection.outlook.com
 (2603:10a6:b10:81:cafe::9d) by BE1P281CA0447.outlook.office365.com
 (2603:10a6:b10:81::26) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7316.15 via Frontend
 Transport; Tue, 20 Feb 2024 15:44:42 +0000
X-MS-Exchange-Authentication-Results: spf=none (sender IP is 193.37.149.254)
 smtp.mailfrom=chr-exc-hyb01.christ.de; dkim=none (message not signed)
 header.d=none;dmarc=fail action=none header.from=chr-exc-hyb01.christ.de;
Received-SPF: None (protection.outlook.com: chr-exc-hyb01.christ.de does not
 designate permitted sender hosts)
Received: from hybrid.christ.de (193.37.149.254) by
 BE0DEU01FT007.mail.protection.outlook.com (20.128.125.108) with Microsoft
 SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
 15.20.7339.7 via Frontend Transport; Tue, 20 Feb 2024 15:44:41 +0000
Received: from CHR-EXC-HYB02.christ.local (10.60.4.72) by
 CHR-EXC-HYB01.christ.local (10.60.4.71) with Microsoft SMTP Server
 (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
 15.1.2375.34; Tue, 20 Feb 2024 16:44:33 +0100
Received: from User (10.60.4.26) by CHR-EXC-HYB02.christ.local (10.60.4.72)
 with Microsoft SMTP Server id 15.1.2507.34 via Frontend Transport; Tue, 20
 Feb 2024 16:44:14 +0100
Reply-To: <stevesson8@gmail.com>
From: Customer Service <info@chr-exc-hyb01.christ.de>
To: <stevesson8@gmail.com>
Date: Tue, 20 Feb 2024 16:45:03 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <be659151-4233-461d-a1d2-396100f88283@CHR-EXC-HYB02.christ.local>
X-EOPAttributedMessage: 0
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: BE0DEU01FT007:EE_|BE1P281MB2003:EE_
X-MS-Office365-Filtering-Correlation-Id: aed697b0-cf61-4347-1cd2-08dc322adaba
X-MS-Exchange-SenderADCheck: 1
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
	=?windows-1251?Q?lWPlhUU1sjIqXZHOrk+2bIaU35wTXo2y58aVq9JQhiEy6zv+rJGUJpxT?=
 =?windows-1251?Q?WSBD5NjJrXVqazNrfZwkgwS88YyyxOCrwke4U/rE7098updDwNtVbByC?=
 =?windows-1251?Q?HQ2JpQnKikhXfPB5RlphFUyD16HdqeEvLjW3x2TRttFcIrWeA9LNlEyq?=
 =?windows-1251?Q?ZxfLiyvVMbSJcHPiE1OpQ0IlD+eojf3lXa4RVf7gmge4+5GaLcehKYQp?=
 =?windows-1251?Q?LsqSpNllLrCrmH0Y+b3mJIwJWAx4xFEUqfjNvn+NRdSNdqBlQ+J2tkPP?=
 =?windows-1251?Q?5kVzpM65qjEV0XBixFZRsK1IgwSOaW9UnZVpduOiWzWbC0CRxZyldiYd?=
 =?windows-1251?Q?6dHvEBfy47YkunwFloEAW7hbXlZxa0rC1Sn7v1dWfvw11R/TfSCuYH1O?=
 =?windows-1251?Q?ggYN3hR93/rzCQhqGQsZ9zWcHiy3wuKouOIji3yxhmKlSOdUwpYRjcbQ?=
 =?windows-1251?Q?DcYboe7XN6Yc6LNXaXRNoXkg2CLBLjwxOXujQFFDq4Dc8aPgUlIKc4z2?=
 =?windows-1251?Q?C4Qp9TWj+Ywyza0SQciS5V8Y/t5CkQQjRT2dVkYfesFgM+kzI/qFZ9pR?=
 =?windows-1251?Q?ECtTOQz5K6Xj93VGgohIzd+PHeaT+KoQsiEp2N4fUNi2msHIBPAc+731?=
 =?windows-1251?Q?5H8yQI4ZX7Z8uYIlVQn/O9lms2EnqPndeMMk2W8dGYqdbKUrVQ7A/zz4?=
 =?windows-1251?Q?/CQT2saOpNPfClNJKvRi9Y+e4tcWKFZnpNtZyOpx6pJOB65dkOr/pYA+?=
 =?windows-1251?Q?KLVBY6O5UzPWgx/bL0mDbS+nGkZtF8Q4tyXPhhdg42rHswJOVHkMv/ru?=
 =?windows-1251?Q?dFGbYZYfQNnPWZNdk22Q6zOk4YJA57nwc8lTh/eP+ozmrsq/9tyHNCjo?=
 =?windows-1251?Q?Zc3r/v1xozI2IDl/LrQB5cMEEPRI7HJMyZlNxc10azs7O4zIEiQV4an0?=
 =?windows-1251?Q?FY+Y5u8k28zHEgnY0CLyqo0bn01TyEv9Cmj43Zqz6MwZribC++PSk4AY?=
 =?windows-1251?Q?8f+LaF6qi0NBKJokkFBz8Mfr1ouXYDh3/qpxXzhCFY1agJTeh07zxR/2?=
 =?windows-1251?Q?25He1NaejkCcXkk1Cv+7Dw9KGx5WithzEgtlFFdC9KwN/nM5kJk/YLfK?=
 =?windows-1251?Q?ob199JTxnnCQalpOqGPWl0YRpTqfWtGKI9ZGnzRrKQcCpnAZMK7ChDKv?=
 =?windows-1251?Q?8gNvi5iaMEaFMPwN2VkVYgkp+5rQWV20htsODeE6DZWi9YV49sPMZ7iF?=
 =?windows-1251?Q?eys9X0xQ7LtC40JWDcFS4OgyJxZQLqMbb1N+jjHYQQQTf5Cyezk4cjak?=
 =?windows-1251?Q?Wi4iI9A11ff+ax4MwIPJnffyI34Ylfi8GSh6+0evd8uNnDkT1JEb4Mzq?=
 =?windows-1251?Q?Dq0kbSweb98OpChtmrEhAGen+00/JnhA3r+hPScIvxMWEPSXZ6Sz+ADD?=
 =?windows-1251?Q?MlwsVfDg0A9C/Kc6x91kZjPOX4jDsAmIRUUvVAJmnNd2pqwuE8BD2JU0?=
 =?windows-1251?Q?G3NHnQbk1jkmKvXzHFpaTRoJkAokEBr96l/EyiosfHpvuq71IBwSjfOC?=
 =?windows-1251?Q?OZ/6UZWBIjmDSKGP0ETUG92BHRVzEDBZax1pNuMpbmLYARnNzI9i1kbU?=
 =?windows-1251?Q?+zdMWaDU4LemWyE8cyF5Hv7otc7CSWZDFr3Mi9apUul04aJFZC5Lhhhi?=
 =?windows-1251?Q?0iLJ5aol2YvTG4fZeRjEJ13XHPiWFaGRDWlIGL422obEJQWibrhcYd4d?=
 =?windows-1251?Q?Y+a08bUfb8xHoc9zCls=3D?=
X-Forefront-Antispam-Report:
	CIP:193.37.149.254;CTRY:DE;LANG:en;SCL:7;SRV:;IPV:NLI;SFV:SPM;H:hybrid.christ.de;PTR:InfoDomainNonexistent;CAT:OSPM;SFS:(13230031)(35950700004)(46966006)(40470700004)(2700400011);DIR:OUT;SFP:1501;
X-OriginatorOrg: christ.de
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 20 Feb 2024 15:44:41.8631
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: aed697b0-cf61-4347-1cd2-08dc322adaba
X-MS-Exchange-CrossTenant-Id: 26e679cb-c6e9-4b2e-adfa-503fc9451154
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=26e679cb-c6e9-4b2e-adfa-503fc9451154;Ip=[193.37.149.254];Helo=[hybrid.christ.de]
X-MS-Exchange-CrossTenant-AuthSource:
	BE0DEU01FT007.eop-deu01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BE1P281MB2003
X-Spam-Status: Yes, score=19.8
X-Spam-Score: 198
X-Spam-Bar: +++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn Beneficiary, It's regarding the prepaid ATM card worth
    of US$5,500,000.00 as approved by the board, I wish to inform you that you
    were listed among beneficiaries yet to receive their duly approved funds.
    
 Content analysis details:   (19.8 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.4 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  3.6 AXB_X_FF_SEZ_S         Forefront sez this is spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
                             digit
                             [stevesson8[at]gmail.com]
  0.8 DKIM_ADSP_NXDOMAIN     No valid author signature and domain not in
                             DNS
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  2.5 MONEY_NOHTML           Lots of money in plain text
  1.5 MONEY_ATM_CARD         Lots of money on an ATM card
  1.4 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
                             information
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.0 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Your ATM card worth of (US$5,500,000.00)

Attn Beneficiary,

It's regarding the prepaid ATM card worth of US$5,500,000.00 as approved by the board, I wish to inform you that you were listed among beneficiaries yet to receive their duly approved funds.

The delivery of your Card has been slated to be dispatched upon receipt from you, Send the below information to Mr. Steven Duke to facilitate delivery.

Contact Person: Steven Duke
Email: stevesson8@gmail.com

1.Your Full Name:
2. Your Home Address:
3. Your Age:
4.Your Telephone Number:

Note: The prepaid ATM Card Pin code is (2049) I am pleading to you to try your best to get in contact with him, I will not be available until 1st April 2024 because i will be going on vacation.

Regards

Msr. Mary Jose
International funds organization
