Return-Path: Delivered-To: info@tictactocsaintcanut.com Received: from cl-t211-187cl.majeunesse.ca by cl-t211-187cl.majeunesse.ca with LMTP id R3XgH5fNuGmDbwAAV5eKQw (envelope-from ) for ; Mon, 16 Mar 2026 23:42:15 -0400 Return-path: Envelope-to: info@tictactocsaintcanut.com Delivery-date: Mon, 16 Mar 2026 23:42:15 -0400 Received: from vps-4912841-x.dattaweb.com ([179.43.121.120]:49986) by cl-t211-187cl.majeunesse.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96.2) (envelope-from ) id 1w2LJu-0007PY-2I for info@tictactocsaintcanut.com; Mon, 16 Mar 2026 23:42:15 -0400 Received: from bellnet.ca (ec2-34-208-115-5.us-west-2.compute.amazonaws.com [34.208.115.5]) (Authenticated sender: info@emines.com.ar) by vps-4912841-x.dattaweb.com (Postfix) with ESMTPSA id A508F152CAC for ; Mon, 16 Mar 2026 19:47:20 -0300 (-03) From: yvonduchesneetfils@bellnet.ca To: info@tictactocsaintcanut.com Subject: Money sent. Date: 16 Mar 2026 22:47:20 +0000 Message-ID: <20260316224720.A77DFD601929ACE2@bellnet.ca> MIME-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable X-Spam-Status: No, score=4.5 X-Spam-Score: 45 X-Spam-Bar: ++++ X-Ham-Report: Spam detection software, running on the system "cl-t211-187cl.majeunesse.ca", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see root\@localhost for details. Content preview: Please review the payment invoice link dated 03/16/26 which are also listed below: https://ramayanatravelgroup.co.in/lnvoice82727335.zip INVOICE# AMOUNT Content analysis details: (4.5 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [URIs: ramayanatravelgroup.co.in] 0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [179.43.121.120 listed in bl.score.senderscore.com] 0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information. [179.43.121.120 listed in sa-accredit.habeas.com] 1.1 DATE_IN_PAST_03_06 Date: is 3 to 6 hours before Received: date 1.5 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) 0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF Failure with Strict Alignment 0.0 LOTS_OF_MONEY Huge... sums of money 0.2 KAM_DMARC_NONE DKIM has Failed or SPF has failed on the message and the domain has no DMARC policy 1.7 MONEY_NOHTML Lots of money in plain text X-Spam-Flag: NO Please review the payment invoice link dated 03/16/26 which are also listed below: https://ramayanatravelgroup.co.in/lnvoice82727335.zip INVOICE# AMOUNT =3D=3D=3D=3D=3D=3D=3D=3D =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D $1,450.30 $3,660.20 Kevin Higgins Chief Executive Officer THS National, LLC=09 2450 Louisiana St Ste 400 Houston=09 TX=09 77006-2318=09 USA=09 919-741-6229 www.thsnational.com