Business deal spam from Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 14 Sep 2022 17:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYbtG-0004MP-1v
for dave@doctor.nl2k.ab.ca;
Wed, 14 Sep 2022 17:33:58 -0600
Resent-From: The Doctor
Resent-Date: Wed, 14 Sep 2022 17:33:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vi1eur05olkn2083.outbound.protection.outlook.com ([40.92.90.83]:26848 helo=EUR05-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oYZzq-000IF5-RC
for www@nl2k.ab.ca;
Wed, 14 Sep 2022 15:32:46 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=bzjwnY+MCmTbavkFhcbNOF1R3QUDbhXfkitVvvBo0KoMU+oRc6Kiy/D5vvqOwBKZsvy777P1RKrbpHxZGIK6LhTfQLVRcP93xo7kK6rb8c3lgRwGmAebDIvp6mFvnDIc6QPr4glbjMgYZdnZUgoWREnmXdEKWV46lEETIGIEToA8IUlSWa2CV+LFzvWzMUxb7r95RBS55yJEMdewW6F5S9/AND/DZ3xp4F6NxsHO3PIzMEF4hKhmqJMfF9YBKvOFzsRSbLg5Oe3yjSFbgenQWYhiyUwXklWUr4qdzKl5dLf1fx+NpqIo+U85oeD7lor94mfUQD0NQxx/T/U3HqHGiQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=OoDJPYcrgIcmt1SSp/OzSAdvRYjR+stjU1JsOgng1d4=;
b=e/WsEgwAaIzFhVDodb9lyLgRqihfsdDP69p/j0mJXniXHv7KGscZHa3rIbTmOvVcA5u7o/bN7QzSMsyEJDEGOp8d4O2sz+hEed0cZlaShX8jJvOfcZSktUa0RKkn3C+5g3ekHLD0zfSe+j4bhA7ISWVrmWiGex7OLXGb8+kfyT5XcCGbUz8ZITRhG+mScfPOIxPfoipDaYAUdsYPTfN7r7rJTIBZjWxTwYnlZnXcV5oIlh6LoieAh1YyZFvlGuRKKai7YzkaN9PwOKYbCn7mHKoY0ahnbu0O6SgmDSQNmpQHH7ZeEY3I/HPO0XKwlnktI1+U3N5u9UnMmdB5RpQZ7w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=OoDJPYcrgIcmt1SSp/OzSAdvRYjR+stjU1JsOgng1d4=;
b=Ct9V8JP4wyFnuYlq0JVL83QB+iqTaE+iLAqVOocS8wwRy1731pN34f7Rm/QMG3pGBHkS1Ek6i1vVkpSS/p+YCp1kh6DvmbsfVmsb+9Y7hF+TgMM8QxGuEXIEjAfHhN3Z9yvy/kA33vA5FRszzHCjkLKE/x5cdae41jbQoZI/KDnNEsB5DGgP6en1naSAWAzzGl3wOA/Wdy/reWTp3/O4bEm44KRcOxOxjCN+p8IxgVNhehHbCURBi5N6PsLCysbRnzVVh91lJb528llBSmDQNuUETPtA3sqiGhE6lothQY4kcG9D9a7djm50zAbFzXQQjqyuUpXNTIPt7jPvgn+Dvg==
Received: from AM0PR04MB4852.eurprd04.prod.outlook.com (2603:10a6:208:c4::29)
by DB9PR04MB8297.eurprd04.prod.outlook.com (2603:10a6:10:245::5) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.22; Wed, 14 Sep
2022 21:31:56 +0000
Received: from AM0PR04MB4852.eurprd04.prod.outlook.com
([fe80::5e11:9494:aefe:5301]) by AM0PR04MB4852.eurprd04.prod.outlook.com
([fe80::5e11:9494:aefe:5301%6]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022
21:31:56 +0000
From: Kazim Taylor
Subject: FROM: MR.KAZIM TAYLOR.
Thread-Topic: FROM: MR.KAZIM TAYLOR.
Thread-Index: AQHYyIFq7vGk1Ls2z0iCL0gFX/tRrw==
Date: Wed, 14 Sep 2022 21:31:56 +0000
Message-ID:
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [KhUT0/um4CixdzKchklAfI9HF47gqdIf]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AM0PR04MB4852:EE_|DB9PR04MB8297:EE_
x-ms-office365-filtering-correlation-id: 4f19a407-00f8-4a0b-16dc-08da96988c9d
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?SgW9ZYSKFsf0pU1ksvnEkNTTrdzuER6gc/RxGY/iYd3wYIxSDzB2QPzd?=
=?Windows-1252?Q?vrStP1twvmvI5U0pkYgbm8B9N39hSwD4CkHed1R0hNj3/dAhvnRrcT1r?=
=?Windows-1252?Q?tWYd8wVpNIynfk6beUS5/csVKDM0Z/0fpbEN8Kn54Lrfys8R/Ll1NJco?=
=?Windows-1252?Q?wW0UfcibZIDHqHHXg5T4O7p+cJk2K7E+F0Ve959Q0c9Ke61IptmCG6UP?=
=?Windows-1252?Q?ElQ0mw1GsD7BVWp3F2L1N1zgYJXlk8KzOmkrXkFDbFKhS8an/besWXUc?=
=?Windows-1252?Q?9gWz96vkzUWZMgxAewLINDS4TdPEkn8OBBNfJQruKTgNemgkhECcMCZw?=
=?Windows-1252?Q?KBq7+UwquRk8+j8GsYCUC9KkdznLIGWY7cksSF61W4eteTADUWeCWSdW?=
=?Windows-1252?Q?fNaOfIpsjMkobitApLWuh9uW7L230/Y7T4vWDEub0LUxMgbY61LYvhMW?=
=?Windows-1252?Q?lqoz4dDrIy7zZr8T20jITAZ8Aj+Gs5/MfycI1j5wGNCvpvgWMCNfMrxm?=
=?Windows-1252?Q?g27IXJqdCrbpBU3b7S/o3smXfEGPnXPm7gwLhBzZQgWtELrXAfoJsvUu?=
=?Windows-1252?Q?QpaHJaBs2nE8PpO4MjHp0538Vi5A2A/5gTlNWgQBoWEhuSEm7V4E30RW?=
=?Windows-1252?Q?BJ5jBcg1Nyzwp9P9eZKN3kAGZKgCveUH2V5eym2xrPr6rJNTvirZNdgk?=
=?Windows-1252?Q?RS44f8mjJFzyKg8QtdEwVmovzyj5sJ+aon6iwXbEL5WdCNfwsfnqMvdc?=
=?Windows-1252?Q?QtI/RkkpgmdfsqQ1N8qZdTaPzPdFzKMLSh7SVmaS5drXxsRJ9UFdqs70?=
=?Windows-1252?Q?PbtY4juIO/JFohjoBP+FfM6i4ymEKL3WVHXHynbZyV5rhQR8alURazXP?=
=?Windows-1252?Q?K/Iy6L7TG7S78kgATUngL48kKbmNEC9QAt+FeGqnq5iFtSCsgWadyGMe?=
=?Windows-1252?Q?O3lOY3dre0MdqD9t78mz/w7c0kDXQ48bvNW6PlyD0BqlrpMuqSQhGOwu?=
=?Windows-1252?Q?rGj5qtA4JGfpn478fNgbw2MCrKpcymqry8mazPwWoPJM2FkA+1SfhJPU?=
=?Windows-1252?Q?VHmWrHnJ3VxtLryyPTAtAmYA1G6upUYEed0P3EF3eo7VFcWWTl4lTSpG?=
=?Windows-1252?Q?MXEvXr7Ccff+YItme4pSo72m0j4n7fzEeGjh4RfkyT88GxbxYlXVZ8R7?=
=?Windows-1252?Q?ckVrQL6Yc018CqDdHihUooACPDIgEZzfpPgAKfvoqOl62J49wQlk0+bO?=
=?Windows-1252?Q?6mH41/bwwU7NNGdcXyVdlOiRMO7uTCDHHFcdMWhvfuXc3u+w5MMQXBU1?=
=?Windows-1252?Q?nJZZxWTE/BhKrLc8lWMDrb0eIO9vfBPkZW8Q477xo/UjqjE0?=
Content-Type: multipart/alternative;
boundary="_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR04MB4852.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 4f19a407-00f8-4a0b-16dc-08da96988c9d
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2022 21:31:56.4022
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR04MB8297
X-Spam_score: 14.2
X-Spam_score_int: 142
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FROM MR. KAZIM TAYLOR PHONE, +27-73-639-4004 EMAIL: kazimtaylor05@gmail.com
Dear, Good day, you may be surprise to receive this email since you don’t
know me in person, but With due respect, trust and humility, I write to you
this proposal. I am Mr. Kazim Taylor the Son of late Mr. [...]
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.90.83 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[webkk049[at]outlook.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[webkk049[at]outlook.com]
1.2 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.7 HK_SCAM_N1 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email
service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} FROM: MR.KAZIM TAYLOR.
--_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
FROM MR. KAZIM TAYLOR
PHONE, +27-73-639-4004
EMAIL: kazimtaylor05@gmail.com
Dear,
Good day, you may be surprise to receive this email since you don=92t know =
me in person, but With due respect, trust and humility, I write to you this=
proposal. I am Mr. Kazim Taylor the Son of late Mr. Tariq Taylor of Darfur=
in South Sudan. It is indeed my pleasure to contact you For assistance for=
a business venture which I intend to establish.
I need your assistance to move the sum of (US$35 Million.) THIRTY FIVE MILL=
ION UNITED STATES DOLLARS) which my late Father deposited with a private Se=
curity Company here In South Africa awaiting claim before he was assassinat=
ed by unknown persons during the War in Darfur, Sudan.
Now I have decided to invest the money in your country or anywhere safe for=
security
Reasons. I want you to help me retrieve the money for onward transfer to an=
y designated bank Account of your choice for investment purposes
I will furnish you with more details I and my family have agreed to compens=
ate you with 30% Of the total sum which will be your own share for assistin=
g us, and 5% for any expenses that Might be incurred by both parties in the=
course of the transaction. Then the remaining 65% Will be for me and my fa=
mily, which you will help us to invest in your country. Please feel Free to=
contact me on my phone number +27736394004 or email (kazimtaylor05@gmail.c=
om), All I require from you is honest & Your kind co-operation. I will give=
you further details as soon as you show interest in helping Me.
I wait for your kind consideration to my proposal.
Yours faithfully,
Mr. Kazim Taylor.
--_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
FROM MR. KAZIM TAYLOR
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 14 Sep 2022 17:34:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oYbtG-0004MP-1v
for dave@doctor.nl2k.ab.ca;
Wed, 14 Sep 2022 17:33:58 -0600
Resent-From: The Doctor
Resent-Date: Wed, 14 Sep 2022 17:33:58 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-vi1eur05olkn2083.outbound.protection.outlook.com ([40.92.90.83]:26848 helo=EUR05-VI1-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oYZzq-000IF5-RC
for www@nl2k.ab.ca;
Wed, 14 Sep 2022 15:32:46 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=bzjwnY+MCmTbavkFhcbNOF1R3QUDbhXfkitVvvBo0KoMU+oRc6Kiy/D5vvqOwBKZsvy777P1RKrbpHxZGIK6LhTfQLVRcP93xo7kK6rb8c3lgRwGmAebDIvp6mFvnDIc6QPr4glbjMgYZdnZUgoWREnmXdEKWV46lEETIGIEToA8IUlSWa2CV+LFzvWzMUxb7r95RBS55yJEMdewW6F5S9/AND/DZ3xp4F6NxsHO3PIzMEF4hKhmqJMfF9YBKvOFzsRSbLg5Oe3yjSFbgenQWYhiyUwXklWUr4qdzKl5dLf1fx+NpqIo+U85oeD7lor94mfUQD0NQxx/T/U3HqHGiQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=OoDJPYcrgIcmt1SSp/OzSAdvRYjR+stjU1JsOgng1d4=;
b=e/WsEgwAaIzFhVDodb9lyLgRqihfsdDP69p/j0mJXniXHv7KGscZHa3rIbTmOvVcA5u7o/bN7QzSMsyEJDEGOp8d4O2sz+hEed0cZlaShX8jJvOfcZSktUa0RKkn3C+5g3ekHLD0zfSe+j4bhA7ISWVrmWiGex7OLXGb8+kfyT5XcCGbUz8ZITRhG+mScfPOIxPfoipDaYAUdsYPTfN7r7rJTIBZjWxTwYnlZnXcV5oIlh6LoieAh1YyZFvlGuRKKai7YzkaN9PwOKYbCn7mHKoY0ahnbu0O6SgmDSQNmpQHH7ZeEY3I/HPO0XKwlnktI1+U3N5u9UnMmdB5RpQZ7w==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
s=selector1;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
bh=OoDJPYcrgIcmt1SSp/OzSAdvRYjR+stjU1JsOgng1d4=;
b=Ct9V8JP4wyFnuYlq0JVL83QB+iqTaE+iLAqVOocS8wwRy1731pN34f7Rm/QMG3pGBHkS1Ek6i1vVkpSS/p+YCp1kh6DvmbsfVmsb+9Y7hF+TgMM8QxGuEXIEjAfHhN3Z9yvy/kA33vA5FRszzHCjkLKE/x5cdae41jbQoZI/KDnNEsB5DGgP6en1naSAWAzzGl3wOA/Wdy/reWTp3/O4bEm44KRcOxOxjCN+p8IxgVNhehHbCURBi5N6PsLCysbRnzVVh91lJb528llBSmDQNuUETPtA3sqiGhE6lothQY4kcG9D9a7djm50zAbFzXQQjqyuUpXNTIPt7jPvgn+Dvg==
Received: from AM0PR04MB4852.eurprd04.prod.outlook.com (2603:10a6:208:c4::29)
by DB9PR04MB8297.eurprd04.prod.outlook.com (2603:10a6:10:245::5) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.22; Wed, 14 Sep
2022 21:31:56 +0000
Received: from AM0PR04MB4852.eurprd04.prod.outlook.com
([fe80::5e11:9494:aefe:5301]) by AM0PR04MB4852.eurprd04.prod.outlook.com
([fe80::5e11:9494:aefe:5301%6]) with mapi id 15.20.5612.022; Wed, 14 Sep 2022
21:31:56 +0000
From: Kazim Taylor
Subject: FROM: MR.KAZIM TAYLOR.
Thread-Topic: FROM: MR.KAZIM TAYLOR.
Thread-Index: AQHYyIFq7vGk1Ls2z0iCL0gFX/tRrw==
Date: Wed, 14 Sep 2022 21:31:56 +0000
Message-ID:
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
msip_labels:
x-tmn: [KhUT0/um4CixdzKchklAfI9HF47gqdIf]
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: AM0PR04MB4852:EE_|DB9PR04MB8297:EE_
x-ms-office365-filtering-correlation-id: 4f19a407-00f8-4a0b-16dc-08da96988c9d
x-ms-exchange-slblob-mailprops:
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
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info:
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
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0:
=?Windows-1252?Q?SgW9ZYSKFsf0pU1ksvnEkNTTrdzuER6gc/RxGY/iYd3wYIxSDzB2QPzd?=
=?Windows-1252?Q?vrStP1twvmvI5U0pkYgbm8B9N39hSwD4CkHed1R0hNj3/dAhvnRrcT1r?=
=?Windows-1252?Q?tWYd8wVpNIynfk6beUS5/csVKDM0Z/0fpbEN8Kn54Lrfys8R/Ll1NJco?=
=?Windows-1252?Q?wW0UfcibZIDHqHHXg5T4O7p+cJk2K7E+F0Ve959Q0c9Ke61IptmCG6UP?=
=?Windows-1252?Q?ElQ0mw1GsD7BVWp3F2L1N1zgYJXlk8KzOmkrXkFDbFKhS8an/besWXUc?=
=?Windows-1252?Q?9gWz96vkzUWZMgxAewLINDS4TdPEkn8OBBNfJQruKTgNemgkhECcMCZw?=
=?Windows-1252?Q?KBq7+UwquRk8+j8GsYCUC9KkdznLIGWY7cksSF61W4eteTADUWeCWSdW?=
=?Windows-1252?Q?fNaOfIpsjMkobitApLWuh9uW7L230/Y7T4vWDEub0LUxMgbY61LYvhMW?=
=?Windows-1252?Q?lqoz4dDrIy7zZr8T20jITAZ8Aj+Gs5/MfycI1j5wGNCvpvgWMCNfMrxm?=
=?Windows-1252?Q?g27IXJqdCrbpBU3b7S/o3smXfEGPnXPm7gwLhBzZQgWtELrXAfoJsvUu?=
=?Windows-1252?Q?QpaHJaBs2nE8PpO4MjHp0538Vi5A2A/5gTlNWgQBoWEhuSEm7V4E30RW?=
=?Windows-1252?Q?BJ5jBcg1Nyzwp9P9eZKN3kAGZKgCveUH2V5eym2xrPr6rJNTvirZNdgk?=
=?Windows-1252?Q?RS44f8mjJFzyKg8QtdEwVmovzyj5sJ+aon6iwXbEL5WdCNfwsfnqMvdc?=
=?Windows-1252?Q?QtI/RkkpgmdfsqQ1N8qZdTaPzPdFzKMLSh7SVmaS5drXxsRJ9UFdqs70?=
=?Windows-1252?Q?PbtY4juIO/JFohjoBP+FfM6i4ymEKL3WVHXHynbZyV5rhQR8alURazXP?=
=?Windows-1252?Q?K/Iy6L7TG7S78kgATUngL48kKbmNEC9QAt+FeGqnq5iFtSCsgWadyGMe?=
=?Windows-1252?Q?O3lOY3dre0MdqD9t78mz/w7c0kDXQ48bvNW6PlyD0BqlrpMuqSQhGOwu?=
=?Windows-1252?Q?rGj5qtA4JGfpn478fNgbw2MCrKpcymqry8mazPwWoPJM2FkA+1SfhJPU?=
=?Windows-1252?Q?VHmWrHnJ3VxtLryyPTAtAmYA1G6upUYEed0P3EF3eo7VFcWWTl4lTSpG?=
=?Windows-1252?Q?MXEvXr7Ccff+YItme4pSo72m0j4n7fzEeGjh4RfkyT88GxbxYlXVZ8R7?=
=?Windows-1252?Q?ckVrQL6Yc018CqDdHihUooACPDIgEZzfpPgAKfvoqOl62J49wQlk0+bO?=
=?Windows-1252?Q?6mH41/bwwU7NNGdcXyVdlOiRMO7uTCDHHFcdMWhvfuXc3u+w5MMQXBU1?=
=?Windows-1252?Q?nJZZxWTE/BhKrLc8lWMDrb0eIO9vfBPkZW8Q477xo/UjqjE0?=
Content-Type: multipart/alternative;
boundary="_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: AM0PR04MB4852.eurprd04.prod.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: 4f19a407-00f8-4a0b-16dc-08da96988c9d
X-MS-Exchange-CrossTenant-originalarrivaltime: 14 Sep 2022 21:31:56.4022
(UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9PR04MB8297
X-Spam_score: 14.2
X-Spam_score_int: 142
X-Spam_bar: ++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: FROM MR. KAZIM TAYLOR PHONE, +27-73-639-4004 EMAIL: kazimtaylor05@gmail.com
Dear, Good day, you may be surprise to receive this email since you don’t
know me in person, but With due respect, trust and humility, I write to you
this proposal. I am Mr. Kazim Taylor the Son of late Mr. [...]
Content analysis details: (14.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[40.92.90.83 listed in wl.mailspike.net]
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[webkk049[at]outlook.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends
in digit
[webkk049[at]outlook.com]
1.2 MISSING_HEADERS Missing To: header
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
1.6 SUBJ_ALL_CAPS Subject is all capitals
2.7 HK_SCAM_N1 BODY: No description available.
2.5 MILLION_USD BODY: Talks about millions of dollars
0.0 HTML_MESSAGE BODY: HTML included in message
1.4 MALFORMED_FREEMAIL Bad headers on message from free email
service
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLY From and body contain different freemails
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
Subject: {SPAM?} FROM: MR.KAZIM TAYLOR.
--_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
FROM MR. KAZIM TAYLOR
PHONE, +27-73-639-4004
EMAIL: kazimtaylor05@gmail.com
Dear,
Good day, you may be surprise to receive this email since you don=92t know =
me in person, but With due respect, trust and humility, I write to you this=
proposal. I am Mr. Kazim Taylor the Son of late Mr. Tariq Taylor of Darfur=
in South Sudan. It is indeed my pleasure to contact you For assistance for=
a business venture which I intend to establish.
I need your assistance to move the sum of (US$35 Million.) THIRTY FIVE MILL=
ION UNITED STATES DOLLARS) which my late Father deposited with a private Se=
curity Company here In South Africa awaiting claim before he was assassinat=
ed by unknown persons during the War in Darfur, Sudan.
Now I have decided to invest the money in your country or anywhere safe for=
security
Reasons. I want you to help me retrieve the money for onward transfer to an=
y designated bank Account of your choice for investment purposes
I will furnish you with more details I and my family have agreed to compens=
ate you with 30% Of the total sum which will be your own share for assistin=
g us, and 5% for any expenses that Might be incurred by both parties in the=
course of the transaction. Then the remaining 65% Will be for me and my fa=
mily, which you will help us to invest in your country. Please feel Free to=
contact me on my phone number +27736394004 or email (kazimtaylor05@gmail.c=
om), All I require from you is honest & Your kind co-operation. I will give=
you further details as soon as you show interest in helping Me.
I wait for your kind consideration to my proposal.
Yours faithfully,
Mr. Kazim Taylor.
--_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable
252">
: 12pt; color: rgb(0, 0, 0);" class=3D"elementToProof">
FROM MR. KAZIM TAYLOR
PHONE, +27-73-639-4004
EMAIL: kazimtaylor05@gmail.com
Dear,
Good day, you may be surprise to receive this email since you don=92t =
know me in person, but With due respect, trust and humility, I write to you=
this proposal. I am Mr. Kazim Taylor the Son of late Mr. Tariq Taylor of D=
arfur in South Sudan. It is indeed
my pleasure to contact you For assistance for a business venture which I i=
ntend to establish.
know me in person, but With due respect, trust and humility, I write to you=
this proposal. I am Mr. Kazim Taylor the Son of late Mr. Tariq Taylor of D=
arfur in South Sudan. It is indeed
my pleasure to contact you For assistance for a business venture which I i=
ntend to establish.
I need your assistance to move the sum of (US$35 Million.) THIRTY FIVE=
MILLION UNITED STATES DOLLARS) which my late Father deposited with a priva=
te Security Company here In South Africa awaiting claim before he was assas=
sinated by unknown persons during
the War in Darfur, Sudan.
MILLION UNITED STATES DOLLARS) which my late Father deposited with a priva=
te Security Company here In South Africa awaiting claim before he was assas=
sinated by unknown persons during
the War in Darfur, Sudan.
Now I have decided to invest the money in your country or anywhere saf=
e for security
e for security
Reasons. I want you to help me retrieve the money for onward transfer =
to any designated bank Account of your choice for investment purposes
to any designated bank Account of your choice for investment purposes
I will furnish you with more details I and my family have agreed to co=
mpensate you with 30% Of the total sum which will be your own share for ass=
isting us, and 5% for any expenses that Might be incurred by both parties i=
n the course of the transaction.
Then the remaining 65% Will be for me and my family, which you will help u=
s to invest in your country. Please feel Free to contact me on my phone num=
ber +27736394004 or email (kazimtaylor05@gmail.com), All I require from you=
is honest & Your kind co-operation.
I will give you further details as soon as you show interest in helping Me=
.
mpensate you with 30% Of the total sum which will be your own share for ass=
isting us, and 5% for any expenses that Might be incurred by both parties i=
n the course of the transaction.
Then the remaining 65% Will be for me and my family, which you will help u=
s to invest in your country. Please feel Free to contact me on my phone num=
ber +27736394004 or email (kazimtaylor05@gmail.com), All I require from you=
is honest & Your kind co-operation.
I will give you further details as soon as you show interest in helping Me=
.
I wait for your kind consideration to my proposal.
Yours faithfully,
Mr. Kazim Taylor.
--_000_AM0PR04MB48527FF0134CCE5C7A1E1C7D91469AM0PR04MB4852eurp_--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments