Nigerian spam from Microsoft Outlook servers

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 16 Aug 2022 06:43:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNvts-00071J-On

for dave@doctor.nl2k.ab.ca;

Tue, 16 Aug 2022 06:42:28 -0600

Resent-From: The Doctor

Resent-Date: Tue, 16 Aug 2022 06:42:28 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oln040092074101.outbound.protection.outlook.com ([40.92.74.101]:4151 helo=EUR04-DB3-obe.outbound.protection.outlook.com)

by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oNroI-0000PF-Ld

for doctor@doctor.nl2k.ab.ca;

Tue, 16 Aug 2022 02:20:36 -0600

ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;

b=jo3VDu8HboCDq9sFROf4Qnj4+7Eczc2oQTwlBs67rPX1Di7lebRQI04V/A3+Ha7bz3WHdcbZbNFMbmlONB+ykPhLQhpZM/CykKd/ZEarr4iONQo93uCkIAO0GSL0NyxP9urXigvywbawk4RXQdF5ILC/m9gBjACQlvyyQEHQkTI0BirgSqNAm01Y/RuWXphI8VxxPP7t7J1go41vxyqzAhlIfPFKV+BjEP6FwvIE7Xh4Kvs79jf8QxUEwlk1Owe2448mmV//IZK3DU36N5cEUCWJa3efy91m5MEnAoEYQOVfKWm7FilgcFAWEecGWq7+dbdH3AokFKeLI926brQfoQ==

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;

s=arcselector9901;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;

bh=VD+LxN8JfvpSrLgDRJ4x7/mVqPFRSAqY1j2NyAI9Qd0=;

b=P0PjYTsn6xl+tSe/gycJVgHYwfoTfWbwtyGAZV4ZeDSiJGm2lgw4fHSd7e0BlkdJTlE34LzQ5x5kAdPuFJN0lmMeIx+ZNSEFNtMes4E8y64Z82hsobK+wP09yE+7++rgq4uMp8aqHJgPDkIpom13OvMMC6RTcSC6rlhMKtepVohEohsLWhPeMvDnQkppKhyE3YkgxiaIY9HHRZB9kAIomNX3mCMmezb25TLI37b208zN5Xz771e8rXVEJVk4Z9W/8R2b+B4/zv4OTs29H3QefEoHEaq60KwwyE98CImjiMq3h8gzXrkSCfbWSx5dzwd63QdaV0/VQFuScUq0c4eh7A==

ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;

dkim=none; arc=none

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=hotmail.com;

s=selector1;

h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;

bh=VD+LxN8JfvpSrLgDRJ4x7/mVqPFRSAqY1j2NyAI9Qd0=;

b=CmtXD96dafrnxYM4nBKqZ5g9x2eXSlXM+ATJ9ObZvwtuk15uBs+Tmy0ACEa1asgyngTAuhd+AsOZDk5ZBZdP6UsLl7a+k9p4187i6tgoSlrw9b70wbyTeFPGfZb4nc+cvGuakoqkOVdMew8pl3ZUbKQnjsKVy2XRwMa5Qj9hAviWa6cl0D6CHqHrlLGJr2OHxEPI9OeQwsb9ES5rX+cCv5zcHkWzo1U3Xtsutgx5fNzpvDIgn8sOYFyiuQFasPan3XxAtdhqacl9NplbDgYwWqWEsV3+WZWd7c3KsOvRL6bsvCzc63sxLjy6Jz0E+If4bu/L98H80BL/+De6bYgR5Q==

Received: from VE1PR06MB7040.eurprd06.prod.outlook.com (2603:10a6:800:1a6::12)

by DB6PR06MB2998.eurprd06.prod.outlook.com (2603:10a6:6:3::12) with Microsoft

SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

15.20.5504.17; Tue, 16 Aug 2022 08:19:55 +0000

Received: from VE1PR06MB7040.eurprd06.prod.outlook.com

([fe80::9976:26d4:84a8:fd89]) by VE1PR06MB7040.eurprd06.prod.outlook.com

([fe80::9976:26d4:84a8:fd89%5]) with mapi id 15.20.5525.011; Tue, 16 Aug 2022

08:19:55 +0000

From: dl dl

Subject: ATTN -. MANAGING DIRECTOR

Thread-Topic: ATTN -. MANAGING DIRECTOR

Thread-Index: AQHYsUj3LTi8SQGhe0qBWn1OiIm6Vg==

Date: Tue, 16 Aug 2022 08:19:55 +0000

Message-ID:



Accept-Language: fr-FR, en-US

Content-Language: fr-FR

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

msip_labels:

x-tmn: [V+LWRmmodNA9XmuPVKhPojA5ViW5Kx0g]

x-ms-publictraffictype: Email

x-ms-office365-filtering-correlation-id: 3f00c4bc-e38a-4e49-3e17-08da7f6019e6

x-ms-exchange-slblob-mailprops:

NS9Gj58uCj3z6McvRDh3PVC/sdMJu4ONZg4LO1eqd/LxmuH75pxIw5xVa3Ivyek9kpX5fEPEjaYxb1w5kOWES8AtYykNgDd6Ca5r5OluPFVGYtuxMoAl/KmC+6PG5mylz6+CbLX97ptYE7otATx1939Pi+tmvbIuay/GIG9yIJ3WRs75uRRemEj7u/7mFAVTD0VJJk2Q1bkyOtMTvVYEFItKrGvKLrZHaYAjlO7kxNTF2OTnpu7Q698IO5nEDL2mr7N4e1VSh3ra581vUumYtf4fRvoV8Y4iauNa/Bj2iG83EcLgBanQ/J4ZL6dXWPgwsUUEfzh/pdhWzONVxtIX+ejCoOQ0VLjVFiYleAqO5UEBG5tSGHEyej2HdWK2EtzpUHYKJsNn1JHGXF2BpCMABT3NIZeEFAzcr6huLz/dVyT22d4AN72mI4tpEgIrMGfmMtA0srsL1U7NWr+zwrJgcy38oUmlaJnay91EZj33r0kRBGPUZ9a7kgvQpEJexh8ZF1pFw5lFaZUpDA/PajqGOO7CtUJvSBcoCYxjXNEc5nZs962rKpKXXPDPTXLd+cu9jUZSgS89ldsPJAf+RpNrm57kgsFv51+MppJyAYdHaTuWIgcqVuap5/czw5XkhL96bT4ZPT9xtfAOKxCU2Slq2xiaakwUDDltRUbAxp4bcN6A/3X0W7/cikN8BY1CVfe5gt4Hpi83f7q/DUtrnTHoLQ==

x-ms-traffictypediagnostic: DB6PR06MB2998:EE_

x-microsoft-antispam: BCL:0;

x-microsoft-antispam-message-info:

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

x-ms-exchange-antispam-messagedata-chunkcount: 1

x-ms-exchange-antispam-messagedata-0:

=?iso-8859-1?Q?cNDvZMxW+XOt2MGju7kM8P7tDIIxU5Un/s6ZmdubvP+TohD7gscIg0Q/fX?=

=?iso-8859-1?Q?vu4JPp5Xb4Vtsg44Vi40W+7p3e98PlNMAAWNh5Yze+dB1ozZSrFHcl0JXX?=

=?iso-8859-1?Q?8Cb1zsE+BkCSeWAHdwINqTaRQMCVaiciqSMNwMjkx2seMQij0xcGBPPKnX?=

=?iso-8859-1?Q?bSKLDh+TykgpxqjkhWR7xJ8yBFizTeTIGY2ZqF//68z36yrCIQY8jyCP4h?=

=?iso-8859-1?Q?CLoj5A86gQ6DMcG8216cMGdJhkoML7+bOmm7tY2VaeaG+QiOwxZAxcroDL?=

=?iso-8859-1?Q?OktTIKzdWjxmQTP8ULaUmcTmdeA8Kmgtr4DE8aSDprbAwYcVMS3ixa38+Y?=

=?iso-8859-1?Q?n371uRCqEklCkVtzI3gECnUko8yoQIxSTZx2nFrrh500s//5MXSgHRzt0P?=

=?iso-8859-1?Q?BjUZObBM09blx826NS3w0W3lXWE9BXP+VSPeZVjcMvIeyGvCJkb57UwXiA?=

=?iso-8859-1?Q?YyXxfLpreygNG7U3EI41YW6ZGmuOwH2c5nvKnYrMLpWkOeFEZ7zHJB/aUs?=

=?iso-8859-1?Q?zqpF6COaZC0VVWZg0P/bfCmZgpV2yjnGYyxM9G4oKTjukK4KCBNo6M20bc?=

=?iso-8859-1?Q?/2oGM86KPRwN52/8TfHnndNCGm6hqE/Qfl3PYlsZTnBCA/pkzs6B8CGIoN?=

=?iso-8859-1?Q?qy9KeJhtDVvX3JZVl+yra+3HlHGK9oHK4KlHaWDU1Rm+GY4sl+hh8OTyLD?=

=?iso-8859-1?Q?nalcYX+LWJsuw+Zbt1hjHpKzBjp11Rj3dx7SEBLgH+5bEc0C019RE2CyfG?=

=?iso-8859-1?Q?6MdXnmLkUusqACFJvH9jwjLa5nzqOVcV2x+LLN9GLZGqeoEqzDvP6oB0Qs?=

=?iso-8859-1?Q?/X/SHEHIVeC2lIvlTSQcPYyj3Itqx81wvFCf6RU65eQFWtOsW4zvzTpcvW?=

=?iso-8859-1?Q?NKDgkrXNb3+6jHrYSNf7DruqvitXbI1ouEJovMA4InyvgEmtfCpqXLce8W?=

=?iso-8859-1?Q?cgbqEwtz0+Tr8Uo2N4mjw5RbS0H+g3dvYqANhflQOzqlizoLakNc7FooSs?=

=?iso-8859-1?Q?Z1RVe+E8mc+m9CTtTyptuftkzINsjfSWqui5n+NHY4G8p4B0+cYVCtRWdQ?=

=?iso-8859-1?Q?mJF+rNsN6/yiP+qnku+sI4WJXgUu+IyW8owJvAsSO6VGerK3utpaACGscd?=

=?iso-8859-1?Q?tJGjTVp+rwuIjMCmsBlMmXHRsopYzZgx48L33HvCGjtttA0YEg9MyAdcme?=

=?iso-8859-1?Q?hi+UK3XhYpqcPX3Ifdv4bkVLMn8juAUq2A2erKlvEZTfRvdITNJSkQ5W2h?=

=?iso-8859-1?Q?spzkcw0nkjuHhj586gD36evkvXASrXRGZ4lB/ZGUmm6sznQfo4utLtrVWo?=

=?iso-8859-1?Q?nhtlVeJXnL9otG6GkQYoyzXXXA=3D=3D?=

Content-Type: multipart/alternative;

boundary="_000_VE1PR06MB70405774D5FD8AFD0A1C4847C36B9VE1PR06MB7040eurp_"

MIME-Version: 1.0

X-OriginatorOrg: sct-15-20-4755-11-msonline-outlook-6e454.templateTenant

X-MS-Exchange-CrossTenant-AuthAs: Internal

X-MS-Exchange-CrossTenant-AuthSource: VE1PR06MB7040.eurprd06.prod.outlook.com

X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-CrossTenant-Network-Message-Id: 3f00c4bc-e38a-4e49-3e17-08da7f6019e6

X-MS-Exchange-CrossTenant-originalarrivaltime: 16 Aug 2022 08:19:55.3829

(UTC)

X-MS-Exchange-CrossTenant-fromentityheader: Hosted

X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa

X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000

X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB6PR06MB2998

X-Spam_score: 9.5

X-Spam_score_int: 95

X-Spam_bar: +++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: ATTN -. MANAGING DIRECTOR Dear Sir, I am writing this letter

out of a genuine desperation to find a reliable partner in the unfolding

partnership in a transaction so profitable and simple.I seek your help, attention

and genuine co-opera [...]



Content analysis details: (9.5 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.2 MISSING_HEADERS Missing To: header

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail

provider

[dondonalddon[at]hotmail.com]

1.6 SUBJ_ALL_CAPS Subject is all capitals

-0.0 SPF_PASS SPF: sender matches SPF record

-0.0 SPF_HELO_PASS SPF: HELO matches SPF record

1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid

1.4 MALFORMED_FREEMAIL Bad headers on message from free email

service

-0.0 T_SCC_BODY_TEXT_LINE No description available.

1.0 FREEMAIL_REPLY From and body contain different freemails

2.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud (Nigerian 419)

Subject: {SPAM?} ATTN -. MANAGING DIRECTOR



--_000_VE1PR06MB70405774D5FD8AFD0A1C4847C36B9VE1PR06MB7040eurp_

Content-Type: text/plain; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable



ATTN -. MANAGING DIRECTOR



Dear Sir,



I am writing this letter out of a genuine desperation to find a reliable pa=

rtner in the unfolding partnership in a transaction so profitable and simpl=

e.I seek your help, attention and genuine co-operation to our mutual benefi=

t and I believe that you will not let down the trust and confidence I am ab=

out to repose on you.



MY NAME IS Shelten Neth.,I have been working in a public Relations firm tha=

t pays me about two hundred dollars each month.On the 30th of june 2019,our=

company made a very big financial breakthrough when we made contact with A=

LHAJI NADDAH (xi) and began to supply him his cow medicines. ALHAJI NADDAH =

(xi) is THE PRESIDENT OF AFRI DYNAMICS COMPANY FARMS) is a millionaire farm=

er with CATTLE FARMS in MALI, SENEGAL, GUINEA,BURKINA FASO, CHAD REP, and a=

new one located at SOUTH AFRICA.



Moreover, he is the greatest supplier of cattle beef and other dairy produc=

ts to the whole of West Africa.He has informed us about the huge amount of =

money he spends on the purchase of a particular but very important cattle m=

edicine. Precisely, he buys US$ 4,800 per carton.He asked if our organisati=

on can source for a cheaper supplier.We did market research and discovered =

that we can buy these medicines in Europe for US$2,000 per carton. We moved=

a proposal to ALHAJI NADDAH, to supply him at US$4,400 per carton which th=

ey accepted.As these supplies progressed and our company is doing fine,I re=

quested to my boss for an increase in our salary.he was so upset that he sa=

cked me without benefits and ten years of dedicated workmanship.



I was so desperate that I went to the ALHAJI and infomed ALHAJI NADDAH (XI)=

,that I have a foriegn contact that will be willing to supply him this same=

products at US$4,400. Per carton. ALHAJI NADDAH in turn confided to me tha=

t he is about to place order for two or three thousand cartons following a =

suspected outbreak of disease in his farms.I assured ALHAJI NADDAH that my =

foriegn contact will be in the position to manufacture and supply to him,in=

fact I convinced him that my former boss usually buy from my foriegn conta=

ct and that is why he sales to him at a higher price.



HOWEVER,I INFORMED ALHAJI NADDAH THAT HE WILL HAVE TO PAY CASH IN ADVANCE B=

EFORE MY FORIEGN CONTACT WILL SUPPLY TO HIM.For the moment he has stopped a=

ll contact with my boss.Please consider on how to handle this profitable pr=

oject and kindly contact me immediately for more details and negotiations a=

s regards my commission.However,I will insist that my commission will be 20=

% of the total profit.Note: We will buy two or three thousand cartons at US=

$2000. We sell to them at US$4,400 Dollars, our client pays cash before lif=

ting the goods.(They must not know our purchase point in Europe).



Thanks and God bless you.



Mr.Shelten Neth.

Email to:zimneth05@gmail.com



--_000_VE1PR06MB70405774D5FD8AFD0A1C4847C36B9VE1PR06MB7040eurp_

Content-Type: text/html; charset="iso-8859-1"

Content-Transfer-Encoding: quoted-printable








1">








: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">

ATTN -. MANAGING DIRECTOR






Dear Sir,







I am writing this letter out of a genuine desperation to find a reliab=

le partner in the unfolding partnership in a transaction so profitable and =

simple.I seek your help, attention and genuine co-operation to our mutual b=

enefit and I believe that you will

not let down the trust and confidence I am about to repose on you.







MY NAME IS Shelten Neth.,I have been working in a public Relations fir=

m that pays me about two hundred dollars each month.On the 30th of june 201=

9,our company made a very big financial breakthrough when we made contact w=

ith ALHAJI NADDAH (xi) and began

to supply him his cow medicines. ALHAJI NADDAH (xi) is THE PRESIDENT OF AF=

RI DYNAMICS COMPANY FARMS) is a millionaire farmer with CATTLE FARMS in MAL=

I, SENEGAL, GUINEA,BURKINA FASO, CHAD REP, and a new one located at SOUTH A=

FRICA.







Moreover, he is the greatest supplier of cattle beef and other dairy p=

roducts to the whole of West Africa.He has informed us about the huge amoun=

t of money he spends on the purchase of a particular but very important cat=

tle medicine. Precisely, he buys

US$ 4,800 per carton.He asked if our organisation can source for a cheaper=

supplier.We did market research and discovered that we can buy these medic=

ines in Europe for US$2,000 per carton. We moved a proposal to ALHAJI NADDA=

H, to supply him at US$4,400 per

carton which they accepted.As these supplies progressed and our company is=

doing fine,I requested to my boss for an increase in our salary.he was so =

upset that he sacked me without benefits and ten years of dedicated workman=

ship.







I was so desperate that I went to the ALHAJI and infomed ALHAJI NADDAH=

(XI),that I have a foriegn contact that will be willing to supply him this=

same products at US$4,400. Per carton. ALHAJI NADDAH in turn confided to m=

e that he is about to place order

for two or three thousand cartons following a suspected outbreak of diseas=

e in his farms.I assured ALHAJI NADDAH that my foriegn contact will be in t=

he position to manufacture and supply to him,in fact I convinced him that m=

y former boss usually buy from my

foriegn contact and that is why he sales to him at a higher price.







HOWEVER,I INFORMED ALHAJI NADDAH THAT HE WILL HAVE TO PAY CASH IN ADVA=

NCE BEFORE MY FORIEGN CONTACT WILL SUPPLY TO HIM.For the moment he has stop=

ped all contact with my boss.Please consider on how to handle this profitab=

le project and kindly contact me

immediately for more details and negotiations as regards my commission.How=

ever,I will insist that my commission will be 20% of the total profit.Note:=

We will buy two or three thousand cartons at US$2000. We sell to them at U=

S$4,400 Dollars, our client pays

cash before lifting the goods.(They must not know our purchase point in Eu=

rope).







Thanks and God bless you.







Mr.Shelten Neth.


Email to:zimneth05@gmail.com










--_000_VE1PR06MB70405774D5FD8AFD0A1C4847C36B9VE1PR06MB7040eurp_--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA