Return-Path: <info@mail.sauderesidencia.com.br>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id 3ollH3jk3WXtQgAAV5eKQw
	(envelope-from <info@mail.sauderesidencia.com.br>)
	for <info@tictactocsaintcanut.com>; Tue, 27 Feb 2024 08:32:40 -0500
Return-path: <info@mail.sauderesidencia.com.br>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Tue, 27 Feb 2024 08:32:40 -0500
Received: from [201.48.222.227] (port=59771 helo=mail.sauderesidencia.com.br)
	by cl-t211-187cl.majeunesse.ca with esmtp (Exim 4.96.2)
	(envelope-from <info@mail.sauderesidencia.com.br>)
	id 1rexZY-0004R6-22
	for info@tictactocsaintcanut.com;
	Tue, 27 Feb 2024 08:32:40 -0500
Received: from localhost (localhost.localdomain [127.0.0.1])
	by mail.sauderesidencia.com.br (Postfix) with ESMTP id B7CC61A82541;
	Mon, 26 Feb 2024 13:29:18 -0300 (BRT)
Received: from mail.sauderesidencia.com.br ([127.0.0.1])
	by localhost (mail.sauderesidencia.com.br [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id mVOebz1TMqsi; Mon, 26 Feb 2024 13:29:18 -0300 (BRT)
Received: from mail.sauderesidencia.com.br (localhost.localdomain [127.0.0.1])
	by mail.sauderesidencia.com.br (Postfix) with ESMTP id 6ED1E1A83F13;
	Mon, 26 Feb 2024 11:07:01 -0300 (BRT)
Received: from User (unknown [192.168.0.10])
	by mail.sauderesidencia.com.br (Postfix) with SMTP id 5C7771A6ADF4;
	Mon, 26 Feb 2024 03:49:55 -0300 (BRT)
Reply-To: <stevessonss@hotmail.com>
From: "Customer Service"<info@mail.sauderesidencia.com.br>
To: stevessonss@hotmail.com
Date: Mon, 26 Feb 2024 07:09:25 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <20240226064956.5C7771A6ADF4@mail.sauderesidencia.com.br>
X-Spam-Status: Yes, score=42.4
X-Spam-Score: 424
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn: Beneficiary, It's regarding the prepaid ATM card worth
    of US$5,500,000.00 as approved by the board, I wish to inform you that you
    were listed among beneficiaries yet to receive their duly approved funds.
    
 Content analysis details:   (42.4 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  2.4 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                            [201.48.222.227 listed in bl.score.senderscore.com]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [201.48.222.227 listed in psbl.surriel.com]
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  3.4 MSOE_MID_WRONG_CASE    No description available.
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.5 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  1.9 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
                             (FTSDMCXX/boundary variant) + no rDNS
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  2.5 MONEY_NOHTML           Lots of money in plain text
  2.5 BOGUS_MSM_HDRS         Apparently bogus Microsoft email headers
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  0.9 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.1 FROM_MISSPACED         From: missing whitespace
  0.3 MONEY_ATM_CARD         Lots of money on an ATM card
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  1.1 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  2.0 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  2.1 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
                             information
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  1.8 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  1.0 FORM_FRAUD             Fill a form and a fraud phrase
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Your ATM Card worth of (US$5,500,000.00)

Attn: Beneficiary,

It's regarding the prepaid ATM card worth of US$5,500,000.00 as approved by the board, I wish to inform you that you were listed among beneficiaries yet to receive their duly approved funds.

The delivery of your Card has been slated to be dispatched upon receipt from you, Send the below information to Mr. Steven Duke to facilitate delivery.

Contact Name: Mr. Steven Duke
Email: stevessonss@hotmail.com

1.Your Full Name:
2. Your Home Address:
3. Your Age:
4.Your Telephone Number:

Note: The prepaid ATM Card Pin code is (2049) I am pleading to you to try your best to get in contact with him, I will not be available until 1st April 2024 because i will be going on vacation.

Regards

Msr. Mary Jose
International funds organization
