Return-Path: <info@trade.karlan.ltd>
Delivered-To: info@tictactocsaintcanut.com
Received: from cl-t211-187cl.majeunesse.ca
	by cl-t211-187cl.majeunesse.ca with LMTP
	id cByWBowB8GU+GAAAV5eKQw
	(envelope-from <info@trade.karlan.ltd>)
	for <info@tictactocsaintcanut.com>; Tue, 12 Mar 2024 03:17:32 -0400
Return-path: <info@trade.karlan.ltd>
Envelope-to: info@tictactocsaintcanut.com
Delivery-date: Tue, 12 Mar 2024 03:17:32 -0400
Received: from [101.36.106.47] (port=57880 helo=trade.karlan.ltd)
	by cl-t211-187cl.majeunesse.ca with esmtps  (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96.2)
	(envelope-from <info@trade.karlan.ltd>)
	id 1rjwO9-0001am-3C
	for info@tictactocsaintcanut.com;
	Tue, 12 Mar 2024 03:17:31 -0400
Received: from User (unknown [105.112.69.171])
	by trade.karlan.ltd (Postfix) with SMTP id DBEEBC245F;
	Tue, 12 Mar 2024 09:39:21 +0800 (HKT)
Reply-To: <stevessonss@hotmail.com>
From: "Customer Service"<info@trade.karlan.ltd>
To: stevessonss@hotmail.com
Date: Tue, 12 Mar 2024 02:40:27 +0100
MIME-Version: 1.0
Content-Type: text/plain;
	charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=38.2
X-Spam-Score: 382
X-Spam-Bar: ++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 Content preview:  Attn: Beneficiary, It's regarding the prepaid ATM card worth
    of US$5,500,000.00 as approved by the board, I wish to inform you that you
    were listed among beneficiaries yet to receive their duly approved funds.
    
 Content analysis details:   (38.2 points, 5.0 required)
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
  0.7 DEAR_BENEFICIARY       BODY: Dear Beneficiary:
  0.0 FSL_CTYPE_WIN1251      Content-Type only seen in 419 spam
  0.0 NSL_RCVD_FROM_USER     Received from User
  1.3 RCVD_IN_VALIDITY_RPBL  RBL: Relay in Validity RPBL,
                             https://senderscore.org/blocklistlookup/
                             [101.36.106.47 listed in bl.score.senderscore.com]
  3.6 RCVD_IN_PBL            RBL: Received via a relay in Spamhaus PBL
                             [101.36.106.47 listed in zen.spamhaus.org]
  2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL
                             [101.36.106.47 listed in psbl.surriel.com]
  1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in
                             bl.spamcop.net
               [Blocked - see <https://www.spamcop.net/bl.shtml?101.36.106.47>]
  2.0 PYZOR_CHECK            Listed in Pyzor
                             (https://pyzor.readthedocs.io/en/latest/)
  0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
  2.5 FROM_MISSP_XPRIO       Misspaced FROM + X-Priority
 -0.0 T_SCC_BODY_TEXT_LINE   No description available.
  1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
                             anti-forgery methods
  2.2 HDR_ORDER_FTSDMCXX_NORDNS Header order similar to spam
                             (FTSDMCXX/boundary variant) + no rDNS
  0.0 FSL_NEW_HELO_USER      Spam's using Helo and User
  0.0 FROM_MISSP_MSFT        From misspaced + supposed Microsoft tool
  2.0 RDNS_NONE              Delivered to internal network by a host with no rDNS
  0.0 KAM_DMARC_STATUS       Test Rule for DKIM or SPF Failure with Strict
                             Alignment
  0.0 FROM_MISSP_USER        From misspaced, from "User"
  0.0 LOTS_OF_MONEY          Huge... sums of money
  0.0 MONEY_FROM_MISSP       Lots of money and misspaced From
  2.5 MONEY_NOHTML           Lots of money in plain text
  0.0 FSL_BULK_SIG           Bulk signature with no Unsubscribe
  0.8 FROM_MISSPACED         From: missing whitespace
  0.9 FROM_MISSP_REPLYTO     From misspaced, has Reply-To
  1.1 MONEY_FREEMAIL_REPTO   Lots of money from someone using free
                             email?
  0.0 MONEY_ATM_CARD         Lots of money on an ATM card
  2.5 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
  2.5 TO_NO_BRKTS_FROM_MSSP  Multiple header formatting problems
  0.4 FROM_MISSP_EH_MATCH    From misspaced, matches envelope
  1.6 TO_NO_BRKTS_MSFT       To: lacks brackets and supposed Microsoft tool
  0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal
                             information
  2.8 FORGED_MUA_OUTLOOK     Forged mail pretending to be from MS Outlook
  0.9 MONEY_FORM_SHORT       Lots of money if you fill out a short form
  1.0 FORM_FRAUD             Fill a form and a fraud phrase
  2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject:  ***SPAM***  Your ATM Card worth of (US$5,500,000.00)!!!   

Attn: Beneficiary,

It's regarding the prepaid ATM card worth of US$5,500,000.00 as approved by the board, I wish to inform you that you were listed among beneficiaries yet to receive their duly approved funds.

The delivery of your Card has been slated to be dispatched upon receipt from you, Send the below information to Mr. Steven Duke to facilitate delivery.

Contact Name: Mr. Steven Duke
Email: stevessonss@hotmail.com

1.Your Full Name:
2. Your Home Address:
3. Your Age:
4.Your Telephone Number:

Note: The prepaid ATM Card Pin code is (2049) I am pleading to you to try your best to get in contact with him, I will not be available until 1st April 2024 because i will be going on vacation.

Regards

Msr. Mary Jose
International Funds Organization
