20210904_PHISHING_SCAM_1

FROM: MR. JOHN KUTA
Tel:+27-78-7806649
Private Email: [email protected]

YOUR KINDEST ATTENTION
                                   BUSINESS RELATIONSHIP


I only got your contact details from the South Africa Exchange Information On-line Service on my personal programmed search on the internet for a reputable company or individual to assist me sincerely & confidential which your information & profiles were very satisfactory, so I decided to contact you immediately.

It is my great pleasure to write you this letter. Within the Department of Minerals & Energy where I work as a Director of Audit and Project Implementation, I have in my possession an overdue payment in US funds. The said funds represent certain percentage of the total contract value executed on behalf of my Department by a foreign contracting firm, which, I the official over-invoiced to the amount of US$10.500, 000.00 (Ten Million Five Hundred Thousand US Dollars). Though the actual contract cost has been paid to the original contractor, leaving the excess balance unclaimed.

Since the present elected Government is determined to pay foreign contractors all debts owed, so as to maintain good relationship with foreign governments and non-government agencies, we included our bills for approvals with the Department of Finance and the South Africa Reserve Bank (SARB). I am seeking your assistance to front as beneficiary of the unclaimed funds, since I am not allowed to operate foreign accounts.

Details and change of beneficiary information upon application for claim to reflect payment and approvals will be secured on behalf of you/your Company. I have to propose that should you be willing to assist me in this transaction your share as compensation will be (35%), and the balance of (65%) will be for me.

The business is completely safe and secure, provided you treat it with Utmost confidentiality. It does not matter whether you/your Company does contract projects, as a transfer of powers will be secured in favor of you/your Company. Also, your area of specialization is not a hindrance to the successful execution of this transaction. I have reposed my confidence in you and hope that you will not disappoint me.

Your urgent response please. Thanks for your co-operation. Contact me on this number Tel: +27-78-7806649, Or Email Address: [email protected]   , for more information's.


Regards,
Mr. John kuta




Received: from MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) by
 MBX05C-ORD1.mex08.mlsrvr.com (172.29.9.23) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2 via Mailbox Transport; Sun, 5 Sep 2021 01:02:54 -0500
Received: from MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) by
 MBX05D-ORD1.mex08.mlsrvr.com (172.29.9.24) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2; Sun, 5 Sep 2021 01:02:53 -0500
Received: from gate.forward.smtp.iad3b.emailsrvr.com (146.20.86.8) by
 MBX06D-ORD1.mex08.mlsrvr.com (172.29.9.27) with Microsoft SMTP Server (TLS)
 id 15.0.1497.2 via Frontend Transport; Sun, 5 Sep 2021 01:02:53 -0500
Return-Path: <[email protected]>
X-Spam-Threshold: 95
X-Spam-Score: 100
Precedence: junk
X-Spam-Flag: YES
Authentication-Results: smtp25.gate.iad3b.rsapps.net x-tls.subject="/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=mail.protection.outlook.com"; auth=pass (cipher=AES256-GCM-SHA384)
X-Virus-Scanned: OK
X-Orig-To:
X-Originating-Ip: [40.92.17.87]
Authentication-Results: smtp25.gate.iad3b.rsapps.net; iprev=pass policy.iprev="40.92.17.87"; spf=pass smtp.mailfrom="[email protected]" smtp.helo="eur06-vi1-obe.outbound.protection.outlook.com"; dkim=pass header.d=outlook.com; dmarc=pass (p=none; dis=none) header.from=outlook.com
X-Suspicious-Flag: NO
X-Classification-ID: e7e7a5da-0e0e-11ec-b6e0-52540030a522-1-1
Received: from [40.92.17.87] ([40.92.17.87:7678] helo=EUR06-VI1-obe.outbound.protection.outlook.com)
	by smtp25.gate.iad3b.rsapps.net (envelope-from <[email protected]>)
	(ecelerity 4.2.38.62370 r(:)) with ESMTPS (cipher=AES256-GCM-SHA384
	subject="/C=US/ST=Washington/L=Redmond/O=Microsoft Corporation/CN=mail.protection.outlook.com")
	id D7/7B-13837-D8D54316; Sun, 05 Sep 2021 02:02:53 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none;
 b=EqU48hmkYnzyVbckM0KdAzTPbmeIQ6jRrDinR7O8cw+Q+jRbIn11WbT/FDwKtg8NU/Wx6neyEyVB9737nYbpHQdUzOyPPcrXIEoWrJI/Ql4wM69cl7sOkWlfvCEx26YHQVimIYJf0/OoVPGcyiTBmvXHUbTjAzkNXkiFynNTyk1Nnd9+RXG6Gs0QOie5a0X/jD3HQSzMvX0gFwSgFLL7c+PQV56gytfct1yTuVPV0J9QCvSDLkViMxh9HnAl0t0KVdMPcV+uK/7FNvOVM17d4liFx3BqnED5QQl3g7hwJQBmoO3hrWSf4MxUcTUi5s56uFHskHq6+FfefQHZt2oopw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com;
 s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version;
 bh=3hGX0eBv2llzPwAuKDPCKyOAJ8aU845BUtZ4caxSRM8=;
 b=EZ1J4Y2Y2xWYn2RNYLc7CpZ3MpF4c43t1AnE55wYr3+FZSUfNqJP4O2hldH7f9JEpwW4SkhW7lTj48iijnEaadkklCcRE6voqH2kK9NgKSVpwUVL5b9Uh6iwQnQ/U0wHOZ6KTrXLBunv8LZCS1j8P42CAXe2xD4X8nljtaVW3TU6k/RVcvGAmyDa3ZTgcU2QKjZo8yi7Dc7nHMEU2cl3WVwjEWL+BwY2q1+3gnV2Bsh4M1pvspNz7ezBQ2vZrGXKneEA3y4xLiu2JQw28RYFmT19VtThG04BLPe4ta1zawUYzPuTMBmRc04R4ryu1wXS41DfvZaw1ITvCyk++R4KiQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=none; dmarc=none;
 dkim=none; arc=none
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=outlook.com;
 s=selector1;
 h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck;
 bh=3hGX0eBv2llzPwAuKDPCKyOAJ8aU845BUtZ4caxSRM8=;
 b=XG44hCjZdPsD8hKlwpeQJgu10bG7RKGLaqVF++2v7+21C4kCttzGU0Jcz88o6xyRlwVX2uNU8+WKtEl0X4TLW/hF2Hqm2OM/DxNKWrDXUaretwdoN1EJvQkicNVn2qr87QF0+YXmJ7FiHAARGaghMwIUrwDiizU80O2bY6h83p7sW/BJWbBQf0fih6Twe3V0xLEDENmT9yMBRYlYFDE5WeFKQSA9Zx+9L7aS3zara+kvAKR1AVacGmkwLHLsTO0Tb46BZK2z2AnIX3SASQk3PZ3vNYmUjk+YNXKtp7fhWiwEwVGqi+lBLUFHz9A10qR5661d7IhNidqex3NQRLwNSg==
Received: from VI1EUR06FT012.eop-eur06.prod.protection.outlook.com
 (2a01:111:e400:fc37::49) by
 VI1EUR06HT037.eop-eur06.prod.protection.outlook.com (2a01:111:e400:fc37::277)
 with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4478.19; Sun, 5 Sep
 2021 06:02:39 +0000
Received: from VI1P195MB0655.EURP195.PROD.OUTLOOK.COM (2a01:111:e400:fc37::52)
 by VI1EUR06FT012.mail.protection.outlook.com (2a01:111:e400:fc37::164) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4478.19 via Frontend
 Transport; Sun, 5 Sep 2021 06:02:39 +0000
Received: from VI1P195MB0655.EURP195.PROD.OUTLOOK.COM
 ([fe80::1881:6f96:b2b5:1183]) by VI1P195MB0655.EURP195.PROD.OUTLOOK.COM
 ([fe80::1881:6f96:b2b5:1183%5]) with mapi id 15.20.4478.025; Sun, 5 Sep 2021
 06:02:39 +0000
From: John Kuta <[email protected]>
Subject: FROM: MR. JOHN KUTA
Thread-Topic: FROM: MR. JOHN KUTA
Thread-Index: AQHXohuhHwxbEkADVk27hySEcIhkIQ==
Date: Sun, 5 Sep 2021 06:02:38 +0000
Message-ID: <VI1P195MB0655F2D15A5A194F2E37A586D3D19@VI1P195MB0655.EURP195.PROD.OUTLOOK.COM>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
suggested_attachment_session_id: 8efecba1-d617-89ee-1c62-1abe173c6922
x-incomingtopheadermarker: OriginalChecksum:CD602238997646533207DC7DEA3181C722FA11A06A8C38E53403D4626B7C6BDE;UpperCasedChecksum:7F683F40570D4CB201CC1A9C911A0683143BA8863B10A72141144D227439C2FA;SizeAsReceived:30993;Count:42
x-ms-exchange-messagesentrepresentingtype: 1
x-tmn: [26JDfl1c0ayclmiEhUDf77tc8/HA1FBJ]
x-ms-publictraffictype: Email
x-incomingheadercount: 42
x-eopattributedmessage: 0
x-ms-office365-filtering-correlation-id: bf1589c0-3eca-4d45-0ef2-08d97032c44b
x-ms-traffictypediagnostic: VI1EUR06HT037:
x-microsoft-antispam: BCL:0;
x-microsoft-antispam-message-info: E8Me8xeGB5O/lAqErgAnEAa4dl9X7unn6LGm+YpGMT/fXI8f0uOz+6mvaCzZWQGWKwLV4td9xTL5XSxqqqAo0uG93qtVQQ7O3DxZ497BHGoEHapRp3RcKF1sK3t3bY0uaYPbFLZFdUnon3/1JghOvm3YlZj+zKieGeqXs1a3c1KNI7ndtwPBJjxzUZY8dNwiHuIb1E95TkXaoqW/O89uazV9v0+vTtTpODliVCA0GUCH7lg1PJu3VssNR4LX2vqgR4X6pL9D6JXhpZNJDYW7ldlkrLLjmA+RBHZLsGkaK89xd9Ce/pgLtxG5gLAL9zIIK/N3PPYP2PnihAFpARx3JGYyvWf0oSrXBBUZehyg6D0OKtYv8QerXzafTjO6HiUfvDORO54oU5v5fOK77OMcDkfEi8Hk64H7JFjMoR1Z64I1Ei7wM9eSsfZljrDz5z6s
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: Nyor36JjJ67ec9opgHir5q8BN/pFt2UJ0Ag0rVz9cR6vIvZyOSU3wo8znV+1d0KJ5w8y0gGpOSAWQCiyLIPuM+V0TKkhgnnTpelOLOlYRwAFbLVPglClQ/MO2owZWZZIRXISehPuD5NuyCfFKNZ5jQ==
x-ms-exchange-transport-forked: True
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-AuthSource: VI1EUR06FT012.eop-eur06.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-CrossTenant-Network-Message-Id: bf1589c0-3eca-4d45-0ef2-08d97032c44b
X-MS-Exchange-CrossTenant-originalarrivaltime: 05 Sep 2021 06:02:39.0199
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-rms-persistedconsumerorg: 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: VI1EUR06HT037
To: Undisclosed recipients:;
X-MS-Exchange-Organization-Network-Message-Id: 16bb8a0a-a738-4927-5426-08d97032cccd
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-AuthSource: MBX06D-ORD1.mex08.mlsrvr.com
X-MS-Exchange-Organization-AuthAs: Anonymous
Content-type: multipart/alternative;
	boundary="B_3713786866_601972510"

> This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

--B_3713786866_601972510
Content-type: text/plain;
	charset="UTF-8"
Content-transfer-encoding: 7bit