donation spam from Outlook
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 08 Sep 2022 04:29:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from)
id 1oWEi2-000IFR-I5
for dave@doctor.nl2k.ab.ca;
Thu, 08 Sep 2022 04:24:34 -0600
Resent-From: The Doctor
Resent-Date: Thu, 8 Sep 2022 04:24:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01hn2243.outbound.protection.outlook.com ([52.100.164.243]:32608 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from)
id 1oW60z-000GV9-5N
for doctor@doctor.nl2k.ab.ca;
Wed, 07 Sep 2022 19:07:38 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=OVAM32yYFb33q2tYqh+p3+NhHTIDoHJZ84BfrR6AzZqqxqAsapTe8HxUjO/LlaEleRXDPf+n7PWZkfkxYEPJQvI0gAZ9uRhXKGr40Lgx3qYnkOwp3POZZekIlFMcxYztx0u9y5eez6aySsB3NYJyfZzAR1NwJe9iaylRL7niablEE7lKXGTKyQAcUpCZtJeIJrSdDkIfvslkrX8oBesnq9rx/4gjJigeeP0j/CZTEwamsFhI4+AkFtM5rBHHqfjQpusgBIHfNXcFep/dOd5b3nrRps3yqeZR9V6BYpouaxhhI68m5cM/5frUcoJia0X2nCPVVQpHAd3qfwIjnNIuMA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=kZpGnJllYV+MssZlJ90Ic7x5SuwkpE5xEgEqRTqYz9A=;
b=oX6mETjAzcdl5BwE6QY3jcLZRFZPwfcyPL2gq0ypxvd31WYfc51Stitq+PZsQ4C5gL4ksVq4LyU9wpH/ciBIt55p8co/K13SkFnAv4+8o6ojtSHhgVaPE/nnlTjvweTtZpUnCIy0do3NiNDF2jbm8AkrCR8yho2yE9V5ePzZWSColNUt30c/jFarNyy+UCZz6+3P1p7xkECUEL4jKZIGo/SNwDuyB1pIkZ71oX6FMauAmDDiDB5Mwmx+71Qd1SrG4dHL1gcqxau9ee46YNsHZ8qoSVwGDLiALF/G02GAjBeim1P4oM7URUzNQK/D+m76UsbUs4Vkm9ElmFCnJfZ3IQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
185.222.58.60) smtp.rcpttodomain=yandex.ru smtp.mailfrom=t4.cims.jp;
dmarc=bestguesspass action=none header.from=t4.cims.jp; dkim=none (message
not signed); arc=none (0)
Received: from TYAPR01CA0081.jpnprd01.prod.outlook.com (2603:1096:404:2c::21)
by HKAPR04MB3955.apcprd04.prod.outlook.com (2603:1096:203:d6::9) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.15; Thu, 8 Sep
2022 01:07:02 +0000
Received: from TYZAPC01FT051.eop-APC01.prod.protection.outlook.com
(2603:1096:404:2c:cafe::f9) by TYAPR01CA0081.outlook.office365.com
(2603:1096:404:2c::21) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.14 via Frontend
Transport; Thu, 8 Sep 2022 01:07:02 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 185.222.58.60)
smtp.mailfrom=t4.cims.jp; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none header.from=t4.cims.jp;
Received-SPF: Pass (protection.outlook.com: domain of t4.cims.jp designates
185.222.58.60 as permitted sender) receiver=protection.outlook.com;
client-ip=185.222.58.60; helo=User; pr=M
Received: from mail.prasarana.com.my (58.26.8.158) by
TYZAPC01FT051.mail.protection.outlook.com (10.118.152.85) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.20.5612.13 via Frontend Transport; Thu, 8 Sep 2022 01:07:01 +0000
Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by
MRL-EXH-01.prasarana.com.my (10.128.66.100) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.1.2176.14; Thu, 8 Sep 2022 09:06:36 +0800
Received: from User (185.222.58.60) by MRL-EXH-02.prasarana.com.my
(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend
Transport; Thu, 8 Sep 2022 09:06:26 +0800
Reply-To:
From: "Mrs. Ann Zainab"
Subject: Re:You Receive My last Email....
Date: Thu, 8 Sep 2022 03:06:36 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <45715b3c-b584-4c0e-9fd7-4b2e97b72ab7@MRL-EXH-02.prasarana.com.my>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-Exchange-SkipListedInternetSender: ip=[185.222.58.60];domain=User
X-MS-Exchange-ExternalOriginalInternetSender: ip=[185.222.58.60];domain=User
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: TYZAPC01FT051:EE_|HKAPR04MB3955:EE_
X-MS-Office365-Filtering-Correlation-Id: 016eb31a-caa5-47c7-8677-08da91367001
X-MS-Exchange-AtpMessageProperties: SA|SL
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?bnxOkZ1jXBU0qhzSq1ROp3OkhcIksGcMU68C43QdaB8wUM1JO6Y2uXVV?=
=?windows-1251?Q?Xay4es5tN9Q1TFYuSvbt5Ll+1whnq693mQ+zOU1gpreBBJEQLTja7PFF?=
=?windows-1251?Q?kOb8NBzrzYp23dwwebFaZAjuczC+Hb4fLUcoyTvNl9qIv3VERwJtbJfu?=
=?windows-1251?Q?yDMzOB8nDQBiEMCVS4hE/VJQDTFrXHcEAhhhIIcGrQP2huTC6FqU67WC?=
=?windows-1251?Q?a5utQXyhud9U0XVz4HaIFKlQfj4cWmXMrXMl/glIhWNFSzUMxyM3zmfI?=
=?windows-1251?Q?FYmevIm3yRKn1+kQdpt4sw+9b93IOFyna6hvpbaFPP0vJ784ijcJAW9/?=
=?windows-1251?Q?vxak4d1Y1NLEso9tzP4P+dL1PcDIX9t1xy6vQqHgzssctNdyVX+Kf9D0?=
=?windows-1251?Q?itOxKHcKw5bxHz3UnzGJaLDV8QtitBP6noMx7SOnMoAtU4gHybiNvRP1?=
=?windows-1251?Q?YLAw1gTntPpqUSHbqCuzvo/kv2Wz9M4HkoF0tso2ckCxvLOaxuKbXj8w?=
=?windows-1251?Q?+5LK84bvAgRRUtN8cDKhT54Kt8zkKe8e/ra85t+B7WqrX2pMhjzx+fRM?=
=?windows-1251?Q?DvmwtYapfwIqJq9DlsmkjeFL1kI5dLewoJiLSVXbkgdzlQFrpZWujiL2?=
=?windows-1251?Q?lvbPa40eVT5c2jjbXaSM8Xgqs+vfMmGa2XY6ghRq97Sn9MUlnKLWHzX3?=
=?windows-1251?Q?N5i2NkNAqG7VutfIRbH94R+vgchlHgSUTH7rDZhNGjlb746ehSEWSU+I?=
=?windows-1251?Q?NmPWmgH6UZDybIsVPNxkuezm7p96nH/SceJh5HHLihnaxAfRm1ATb97h?=
=?windows-1251?Q?SASmssECGPhSWeF/+W4hc2mcRyroABe+ov7uMTweyrUjLite4erd2yv5?=
=?windows-1251?Q?tijqqvHYDZvmZBLiukNm0UBhfVoeo/w07vxi9A42W2xcqiNgT+w4PIQw?=
=?windows-1251?Q?XNj0T549efJaMNdcDwpFrH4zmLzuoO/doV/NhGCtcVlU7P/9qLHXsqMS?=
=?windows-1251?Q?p3Z+xn/QY6/j4gBWroaTd8Ff463CjXCU0nFxSqKhE9j1yOywsS4o+wOo?=
=?windows-1251?Q?CwKrEHTAWzCjdl65PeAoQuYFBDB4bDtgb4ZxGUvb6V9EN2gD5i8Hfb22?=
=?windows-1251?Q?VzYR4zKwve/kitwgEIQ/DDcZKlSsgBF239lSfazYpO+/CQFNQio7vbMr?=
=?windows-1251?Q?/mXYOej5Ru5vu6hyiwuWE2GPvv9TkDj+lbkGIaQyjGhl0em5SD7jN1MX?=
=?windows-1251?Q?GbWNkvj0AjlDsat0rrtTC5LUb+khKcIJ7zCbmFL514dwINNr5o6ggrtj?=
=?windows-1251?Q?em1+KT8XkIpFxvKQMlgKt+ZyanqR8UUzNSE1zSAPIsb5h3xRD4dmQ9bS?=
=?windows-1251?Q?+RRXYjduCjJ7LLbuy2md4tTQxwTY0kBn/XtV9RjQ8QgyEdn2zt/CRtNk?=
=?windows-1251?Q?nYoqkAbtuN4BuIoPPIf5C0PYGDfXlb0K4OLO7CaboHnnZq1+gh25VbAT?=
=?windows-1251?Q?2vfs5dPVoikZMmnX+QKlkgkIWWUJdzKOkE5BrD+NCw3wr4/2kHrf5zH3?=
=?windows-1251?Q?JZEaNlgdnukCciWsNoR9hnhrnk3DgAOQicuvCdFZzjyLa8VR9MDRg+uq?=
=?windows-1251?Q?Ya/rqoL4dQnEOtkBAXpE9Oqtt00xvuvJdQ1xKhTkGNgUBCMgzcdXcETu?=
=?windows-1251?Q?daCzUDTVRa5M3/i2/WN/y7v2ysp7Sh2quLCGmY4AQW/qOtXld3Bs71u5?=
=?windows-1251?Q?aCW8LjPCtnYvji618ihX9txYSFqmQGplROXyoy5/6fjSTBNp2H2uA1xM?=
=?windows-1251?Q?w1gA2w=3D=3D?=
X-Forefront-Antispam-Report:
CIP:58.26.8.158;CTRY:NL;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:modularisation.naturescar.com;CAT:OSPM;SFS:(13230016)(4636009)(346002)(376002)(396003)(39860400002)(136003)(84040400005)(40470700004)(31686004)(8676002)(2906002)(83380400001)(32650700002)(5660300002)(7366002)(8936002)(7406005)(7416002)(36906005)(316002)(70586007)(70206006)(6666004)(498600001)(40480700001)(41300700001)(82310400005)(336012)(31696002)(956004)(35950700001)(82740400003)(81166007)(40460700003)(156005)(32850700003)(109986005)(9686003)(86362001)(26005)(2700400008);DIR:OUT;SFP:1501;
X-OriginatorOrg: myprasarana.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Sep 2022 01:07:01.8193
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 016eb31a-caa5-47c7-8677-08da91367001
X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.158];Helo=[mail.prasarana.com.my]
X-MS-Exchange-CrossTenant-AuthSource:
TYZAPC01FT051.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HKAPR04MB3955
X-Spam_score: 16.2
X-Spam_score_int: 162
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear sir, May peace be upon you I am Mrs. Ann Zainab Abdullah
from Malta and married to a Muslim, late Zakir Abdullah from Dubai, United
Arab Emirates. I am a 58 years old widow, suffering from breast Cancer of
a long time. From all [...]
Content analysis details: (16.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[52.100.164.243 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.164.243 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 HK_NAME_MR_MRS No description available.
0.0 FAKE_REPLY_C No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 XPRIO Has X-Priority header
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re:You Receive My last Email....
Dear sir,
May peace be upon you
I am Mrs. Ann Zainab Abdullah from Malta and married to a Muslim, late Zakir Abdullah from Dubai, United Arab Emirates. I am a 58 years old widow, suffering from breast Cancer of a long time. From all indications my condition is really deteriorating and it's quite obvious that I won't live more than 2 months according to my doctors. This is because the cancer stage has gotten to a very bad stage. I don't want you to pity me, but I need your assistance and trust.
My late husband died earlier 2015, from Heart attack, and during the period of our Marriage we couldn't produce any children. My late husband was very wealthy and after his death, I inherited all his business and wealth. The doctor has advised me that I will not live for more than 2 months, so I have now decided to spread all my wealth to contribute mainly to the development of charity in the Middle East, Africa, America, Asia, Europe, ETC. I am sorry if you are embarrassed by my mail and if for any reason you find this mail offensive, please you can ignore it and please accept my apology.
Before my late husband died he deposited the sum of Five million, Two Hundred Thousand United States dollars ($5.200.000.00 Million) to my favor and in my name with the Bank some years ago because he love me so much, I want to WILL the total funds to you which I will like you to distribute part of it for charity, so that when I die my soul can rest in peace. The funds will be entirely in your hands and management. I hope you will touch many lives with this money. That is my main concern; 30% of the funds will be for your service and effort, while 70% goes to charity projects.
Kindly forgive me if any of my words offended you and please accept my apology.
I look forward to your response and cooperation toward this great charity work.PLEASE REPLY ME ON THIS EMAIL: annzainab2022@kakao.com
Truly Yours,
Mrs. Ann Zainab
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 08 Sep 2022 04:29:03 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))
(envelope-from
id 1oWEi2-000IFR-I5
for dave@doctor.nl2k.ab.ca;
Thu, 08 Sep 2022 04:24:34 -0600
Resent-From: The Doctor
Resent-Date: Thu, 8 Sep 2022 04:24:34 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-sgaapc01hn2243.outbound.protection.outlook.com ([52.100.164.243]:32608 helo=APC01-SG2-obe.outbound.protection.outlook.com)
by doctor.nl2k.ab.ca with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
(Exim 4.95 (FreeBSD))
(envelope-from
id 1oW60z-000GV9-5N
for doctor@doctor.nl2k.ab.ca;
Wed, 07 Sep 2022 19:07:38 -0600
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
b=OVAM32yYFb33q2tYqh+p3+NhHTIDoHJZ84BfrR6AzZqqxqAsapTe8HxUjO/LlaEleRXDPf+n7PWZkfkxYEPJQvI0gAZ9uRhXKGr40Lgx3qYnkOwp3POZZekIlFMcxYztx0u9y5eez6aySsB3NYJyfZzAR1NwJe9iaylRL7niablEE7lKXGTKyQAcUpCZtJeIJrSdDkIfvslkrX8oBesnq9rx/4gjJigeeP0j/CZTEwamsFhI4+AkFtM5rBHHqfjQpusgBIHfNXcFep/dOd5b3nrRps3yqeZR9V6BYpouaxhhI68m5cM/5frUcoJia0X2nCPVVQpHAd3qfwIjnNIuMA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
s=arcselector9901;
h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1;
bh=kZpGnJllYV+MssZlJ90Ic7x5SuwkpE5xEgEqRTqYz9A=;
b=oX6mETjAzcdl5BwE6QY3jcLZRFZPwfcyPL2gq0ypxvd31WYfc51Stitq+PZsQ4C5gL4ksVq4LyU9wpH/ciBIt55p8co/K13SkFnAv4+8o6ojtSHhgVaPE/nnlTjvweTtZpUnCIy0do3NiNDF2jbm8AkrCR8yho2yE9V5ePzZWSColNUt30c/jFarNyy+UCZz6+3P1p7xkECUEL4jKZIGo/SNwDuyB1pIkZ71oX6FMauAmDDiDB5Mwmx+71Qd1SrG4dHL1gcqxau9ee46YNsHZ8qoSVwGDLiALF/G02GAjBeim1P4oM7URUzNQK/D+m76UsbUs4Vkm9ElmFCnJfZ3IQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass (sender ip is
185.222.58.60) smtp.rcpttodomain=yandex.ru smtp.mailfrom=t4.cims.jp;
dmarc=bestguesspass action=none header.from=t4.cims.jp; dkim=none (message
not signed); arc=none (0)
Received: from TYAPR01CA0081.jpnprd01.prod.outlook.com (2603:1096:404:2c::21)
by HKAPR04MB3955.apcprd04.prod.outlook.com (2603:1096:203:d6::9) with
Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.15; Thu, 8 Sep
2022 01:07:02 +0000
Received: from TYZAPC01FT051.eop-APC01.prod.protection.outlook.com
(2603:1096:404:2c:cafe::f9) by TYAPR01CA0081.outlook.office365.com
(2603:1096:404:2c::21) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.5612.14 via Frontend
Transport; Thu, 8 Sep 2022 01:07:02 +0000
X-MS-Exchange-Authentication-Results: spf=pass (sender IP is 185.222.58.60)
smtp.mailfrom=t4.cims.jp; dkim=none (message not signed)
header.d=none;dmarc=bestguesspass action=none header.from=t4.cims.jp;
Received-SPF: Pass (protection.outlook.com: domain of t4.cims.jp designates
185.222.58.60 as permitted sender) receiver=protection.outlook.com;
client-ip=185.222.58.60; helo=User; pr=M
Received: from mail.prasarana.com.my (58.26.8.158) by
TYZAPC01FT051.mail.protection.outlook.com (10.118.152.85) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.20.5612.13 via Frontend Transport; Thu, 8 Sep 2022 01:07:01 +0000
Received: from MRL-EXH-02.prasarana.com.my (10.128.66.101) by
MRL-EXH-01.prasarana.com.my (10.128.66.100) with Microsoft SMTP Server
(version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256) id
15.1.2176.14; Thu, 8 Sep 2022 09:06:36 +0800
Received: from User (185.222.58.60) by MRL-EXH-02.prasarana.com.my
(10.128.66.101) with Microsoft SMTP Server id 15.1.2176.14 via Frontend
Transport; Thu, 8 Sep 2022 09:06:26 +0800
Reply-To:
From: "Mrs. Ann Zainab"
Subject: Re:You Receive My last Email....
Date: Thu, 8 Sep 2022 03:06:36 +0200
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <45715b3c-b584-4c0e-9fd7-4b2e97b72ab7@MRL-EXH-02.prasarana.com.my>
To: Undisclosed recipients:;
X-EOPAttributedMessage: 0
X-MS-Exchange-SkipListedInternetSender: ip=[185.222.58.60];domain=User
X-MS-Exchange-ExternalOriginalInternetSender: ip=[185.222.58.60];domain=User
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic: TYZAPC01FT051:EE_|HKAPR04MB3955:EE_
X-MS-Office365-Filtering-Correlation-Id: 016eb31a-caa5-47c7-8677-08da91367001
X-MS-Exchange-AtpMessageProperties: SA|SL
X-MS-Exchange-SenderADCheck: 0
X-MS-Exchange-AntiSpam-Relay: 0
X-Microsoft-Antispam: BCL:0;
X-Microsoft-Antispam-Message-Info:
=?windows-1251?Q?bnxOkZ1jXBU0qhzSq1ROp3OkhcIksGcMU68C43QdaB8wUM1JO6Y2uXVV?=
=?windows-1251?Q?Xay4es5tN9Q1TFYuSvbt5Ll+1whnq693mQ+zOU1gpreBBJEQLTja7PFF?=
=?windows-1251?Q?kOb8NBzrzYp23dwwebFaZAjuczC+Hb4fLUcoyTvNl9qIv3VERwJtbJfu?=
=?windows-1251?Q?yDMzOB8nDQBiEMCVS4hE/VJQDTFrXHcEAhhhIIcGrQP2huTC6FqU67WC?=
=?windows-1251?Q?a5utQXyhud9U0XVz4HaIFKlQfj4cWmXMrXMl/glIhWNFSzUMxyM3zmfI?=
=?windows-1251?Q?FYmevIm3yRKn1+kQdpt4sw+9b93IOFyna6hvpbaFPP0vJ784ijcJAW9/?=
=?windows-1251?Q?vxak4d1Y1NLEso9tzP4P+dL1PcDIX9t1xy6vQqHgzssctNdyVX+Kf9D0?=
=?windows-1251?Q?itOxKHcKw5bxHz3UnzGJaLDV8QtitBP6noMx7SOnMoAtU4gHybiNvRP1?=
=?windows-1251?Q?YLAw1gTntPpqUSHbqCuzvo/kv2Wz9M4HkoF0tso2ckCxvLOaxuKbXj8w?=
=?windows-1251?Q?+5LK84bvAgRRUtN8cDKhT54Kt8zkKe8e/ra85t+B7WqrX2pMhjzx+fRM?=
=?windows-1251?Q?DvmwtYapfwIqJq9DlsmkjeFL1kI5dLewoJiLSVXbkgdzlQFrpZWujiL2?=
=?windows-1251?Q?lvbPa40eVT5c2jjbXaSM8Xgqs+vfMmGa2XY6ghRq97Sn9MUlnKLWHzX3?=
=?windows-1251?Q?N5i2NkNAqG7VutfIRbH94R+vgchlHgSUTH7rDZhNGjlb746ehSEWSU+I?=
=?windows-1251?Q?NmPWmgH6UZDybIsVPNxkuezm7p96nH/SceJh5HHLihnaxAfRm1ATb97h?=
=?windows-1251?Q?SASmssECGPhSWeF/+W4hc2mcRyroABe+ov7uMTweyrUjLite4erd2yv5?=
=?windows-1251?Q?tijqqvHYDZvmZBLiukNm0UBhfVoeo/w07vxi9A42W2xcqiNgT+w4PIQw?=
=?windows-1251?Q?XNj0T549efJaMNdcDwpFrH4zmLzuoO/doV/NhGCtcVlU7P/9qLHXsqMS?=
=?windows-1251?Q?p3Z+xn/QY6/j4gBWroaTd8Ff463CjXCU0nFxSqKhE9j1yOywsS4o+wOo?=
=?windows-1251?Q?CwKrEHTAWzCjdl65PeAoQuYFBDB4bDtgb4ZxGUvb6V9EN2gD5i8Hfb22?=
=?windows-1251?Q?VzYR4zKwve/kitwgEIQ/DDcZKlSsgBF239lSfazYpO+/CQFNQio7vbMr?=
=?windows-1251?Q?/mXYOej5Ru5vu6hyiwuWE2GPvv9TkDj+lbkGIaQyjGhl0em5SD7jN1MX?=
=?windows-1251?Q?GbWNkvj0AjlDsat0rrtTC5LUb+khKcIJ7zCbmFL514dwINNr5o6ggrtj?=
=?windows-1251?Q?em1+KT8XkIpFxvKQMlgKt+ZyanqR8UUzNSE1zSAPIsb5h3xRD4dmQ9bS?=
=?windows-1251?Q?+RRXYjduCjJ7LLbuy2md4tTQxwTY0kBn/XtV9RjQ8QgyEdn2zt/CRtNk?=
=?windows-1251?Q?nYoqkAbtuN4BuIoPPIf5C0PYGDfXlb0K4OLO7CaboHnnZq1+gh25VbAT?=
=?windows-1251?Q?2vfs5dPVoikZMmnX+QKlkgkIWWUJdzKOkE5BrD+NCw3wr4/2kHrf5zH3?=
=?windows-1251?Q?JZEaNlgdnukCciWsNoR9hnhrnk3DgAOQicuvCdFZzjyLa8VR9MDRg+uq?=
=?windows-1251?Q?Ya/rqoL4dQnEOtkBAXpE9Oqtt00xvuvJdQ1xKhTkGNgUBCMgzcdXcETu?=
=?windows-1251?Q?daCzUDTVRa5M3/i2/WN/y7v2ysp7Sh2quLCGmY4AQW/qOtXld3Bs71u5?=
=?windows-1251?Q?aCW8LjPCtnYvji618ihX9txYSFqmQGplROXyoy5/6fjSTBNp2H2uA1xM?=
=?windows-1251?Q?w1gA2w=3D=3D?=
X-Forefront-Antispam-Report:
CIP:58.26.8.158;CTRY:NL;LANG:en;SCL:9;SRV:;IPV:NLI;SFV:SPM;H:User;PTR:modularisation.naturescar.com;CAT:OSPM;SFS:(13230016)(4636009)(346002)(376002)(396003)(39860400002)(136003)(84040400005)(40470700004)(31686004)(8676002)(2906002)(83380400001)(32650700002)(5660300002)(7366002)(8936002)(7406005)(7416002)(36906005)(316002)(70586007)(70206006)(6666004)(498600001)(40480700001)(41300700001)(82310400005)(336012)(31696002)(956004)(35950700001)(82740400003)(81166007)(40460700003)(156005)(32850700003)(109986005)(9686003)(86362001)(26005)(2700400008);DIR:OUT;SFP:1501;
X-OriginatorOrg: myprasarana.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 08 Sep 2022 01:07:01.8193
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 016eb31a-caa5-47c7-8677-08da91367001
X-MS-Exchange-CrossTenant-Id: 3cbb2ff2-27fb-4993-aecf-bf16995e64c0
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: TenantId=3cbb2ff2-27fb-4993-aecf-bf16995e64c0;Ip=[58.26.8.158];Helo=[mail.prasarana.com.my]
X-MS-Exchange-CrossTenant-AuthSource:
TYZAPC01FT051.eop-APC01.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: HybridOnPrem
X-MS-Exchange-Transport-CrossTenantHeadersStamped: HKAPR04MB3955
X-Spam_score: 16.2
X-Spam_score_int: 162
X-Spam_bar: ++++++++++++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Dear sir, May peace be upon you I am Mrs. Ann Zainab Abdullah
from Malta and married to a Muslim, late Zakir Abdullah from Dubai, United
Arab Emirates. I am a 58 years old widow, suffering from breast Cancer of
a long time. From all [...]
Content analysis details: (16.2 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 AXB_X_FF_SEZ_S Forefront sez this is spam
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.0 RCVD_IN_DNSWL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
DNSWL was blocked. See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[52.100.164.243 listed in list.dnswl.org]
-0.2 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[52.100.164.243 listed in wl.mailspike.net]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
2.5 MILLION_USD BODY: Talks about millions of dollars
1.7 DEAR_SOMETHING BODY: Contains 'Dear (something)'
2.5 US_DOLLARS_3 BODY: Mentions millions of $ ($NN,NNN,NNN.NN)
-0.0 T_SCC_BODY_TEXT_LINE No description available.
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.6 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 HK_NAME_MR_MRS No description available.
0.0 FAKE_REPLY_C No description available.
2.8 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 T_MONEY_PERCENT X% of a lot of money for you
1.0 XPRIO Has X-Priority header
3.7 ADVANCE_FEE_5_NEW_MONEY Advance Fee fraud and lots of money
1.5 UNDISC_MONEY Undisclosed recipients + money/fraud signs
Subject: {SPAM?} Re:You Receive My last Email....
Dear sir,
May peace be upon you
I am Mrs. Ann Zainab Abdullah from Malta and married to a Muslim, late Zakir Abdullah from Dubai, United Arab Emirates. I am a 58 years old widow, suffering from breast Cancer of a long time. From all indications my condition is really deteriorating and it's quite obvious that I won't live more than 2 months according to my doctors. This is because the cancer stage has gotten to a very bad stage. I don't want you to pity me, but I need your assistance and trust.
My late husband died earlier 2015, from Heart attack, and during the period of our Marriage we couldn't produce any children. My late husband was very wealthy and after his death, I inherited all his business and wealth. The doctor has advised me that I will not live for more than 2 months, so I have now decided to spread all my wealth to contribute mainly to the development of charity in the Middle East, Africa, America, Asia, Europe, ETC. I am sorry if you are embarrassed by my mail and if for any reason you find this mail offensive, please you can ignore it and please accept my apology.
Before my late husband died he deposited the sum of Five million, Two Hundred Thousand United States dollars ($5.200.000.00 Million) to my favor and in my name with the Bank some years ago because he love me so much, I want to WILL the total funds to you which I will like you to distribute part of it for charity, so that when I die my soul can rest in peace. The funds will be entirely in your hands and management. I hope you will touch many lives with this money. That is my main concern; 30% of the funds will be for your service and effort, while 70% goes to charity projects.
Kindly forgive me if any of my words offended you and please accept my apology.
I look forward to your response and cooperation toward this great charity work.PLEASE REPLY ME ON THIS EMAIL: annzainab2022@kakao.com
Truly Yours,
Mrs. Ann Zainab
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments