Mohammad Gaddaffi <[email protected]>

Header Analysis Quick Report
Originating IP: 186.138.58.132
Originating ISP: Cablevision
City: Buenos Aires
Country of Origin: Argentina
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.221.18.133 with SMTP id qg5csp102040vcb;
Fri, 15 Aug 2014 05:10:36 -0700 (PDT)
X-Received: by 10.194.95.66 with SMTP id di2mr19705576wjb.47.1408104635804;
Fri, 15 Aug 2014 05:10:35 -0700 (PDT)
Return-Path: <[email protected]>
Received: from vl20591.dns-privadas.es (mail.javierandres.es. [185.2.130.178])
by mx.google.com with ESMTPS id cn2si2385426wib.24.2014.08.15.05.10.32
for <multiple recipients>
(version=TLSv1 cipher=RC4-SHA bits=128/128);
Fri, 15 Aug 2014 05:10:35 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 185.2.130.178 as permitted sender) client-ip=185.2.130.178;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 185.2.130.178 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Message-Id: <[email protected]>
Received: from [186.138.58.132] (port=4277 helo=User)
by vl20591.dns-privadas.es with esmtpa (Exim 4.80)
(envelope-from <[email protected]>)
id 1XIGKE-0006f7-9T; Fri, 15 Aug 2014 14:09:43 +0200
Reply-To: <[email protected]>
From: "Mohammad"<[email protected]>
Subject: Re My Reply 15-08-14
Date: Fri, 15 Aug 2014 09:09:43 -0300
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vl20591.dns-privadas.es
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - gmail.com
X-Get-Message-Sender-Via: vl20591.dns-privadas.es: authenticated_id: oliesqui/only user confirmed/virtual account not confirmed
X-Source:
X-Source-Args:
X-Source-Dir:

Sir,
I am Mohammad Gaddaffi, son of the killed Libyan leader
Muammar Gaddaffi.
My family has been in Algeria until we were recently
granted political asylum in Oman.
For your personal consumption and information, my family
has a huge sum of money for investment for the
benefit of my family.
30% of the sum will be your entitlement for your help.
Keep this proposal confidential, please reply me via my
private email for further discussion: [email protected]
Regards,
Mohammad.

Using the same email address [email protected]

Header Analysis Quick Report
Originating IP: 23.254.130.102
Originating ISP: Hostwinds Llc
City: Tulsa
Country of Origin: United States
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.143.18 with SMTP id r18csp373381iod;
Wed, 5 Aug 2015 01:29:29 -0700 (PDT)
X-Received: by 10.13.240.67 with SMTP id z64mr8101896ywe.69.1438763369141;
Wed, 05 Aug 2015 01:29:29 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail.unellez.edu.ve (mail.unellez.edu.ve. [200.11.218.114])
by mx.google.com with ESMTP id k128si1394798ywf.181.2015.08.05.01.29.28;
Wed, 05 Aug 2015 01:29:29 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 200.11.218.114 as permitted sender) client-ip=200.11.218.114;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 200.11.218.114 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=hotmail.com
Received: by mail.unellez.edu.ve (Postfix, from userid 1001)
id 8D73CC4DAC; Wed, 5 Aug 2015 03:04:28 -0430 (VET)
Received-SPF: Softfail (domain owner discourages use of this host) identity=mailfrom; client-ip=23.254.130.102; helo=user; [email protected]; [email protected]
Received: from User (unknown [23.254.130.102])
by mail.unellez.edu.ve (Postfix) with ESMTPA id E8C32C3775;
Wed, 5 Aug 2015 02:41:33 -0430 (VET)
Reply-To: <[email protected]>
From: "Mohammad"<[email protected]>
Subject: Re Information 05-08-15
Date: Wed, 5 Aug 2015 00:11:14 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-Id: <[email protected]>
To: undisclosed-recipients:;

Sir,
compliments.
My family and I are hiding on political asylum somewhere.
For your personal consumption and information, my family has a big family treasure for investment for the benefit of my family and yours too.
30% of the family treasure will be your entitlement for your help.
Write me back for more information, while you make sure to be very confidential with this all important issue.
Regards,
Mohammad.

Header Analysis Quick Report
Originating IP: 59.125.123.190
Originating ISP: Hinet
City: Taipei
Country of Origin: Taiwan
* For a complete report on this email header goto ipTRACKERonline

Delivered-To: <snipped>
Received: by 10.107.130.220 with SMTP id m89csp853505ioi;
Sun, 27 Sep 2015 03:45:33 -0700 (PDT)
X-Received: by 10.55.42.141 with SMTP id q13mr4745791qkq.48.1443350733166;
Sun, 27 Sep 2015 03:45:33 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mx.portalava.com.br (mx.portalava.com.br. [75.101.157.247])
by mx.google.com with SMTP id v69si10604191qkv.81.2015.09.27.03.45.32
for <<snipped>>;
Sun, 27 Sep 2015 03:45:33 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning [email protected] does not designate 75.101.157.247 as permitted sender) client-ip=75.101.157.247;
Authentication-Results: mx.google.com;
spf=softfail (google.com: domain of transitioning [email protected] does not designate 75.101.157.247 as permitted sender) [email protected];
dmarc=fail (p=NONE dis=NONE) header.from=hotmail.com
Message-Id: <5607c8cd.c8c0370a.b7cbf.ffffa5f5SMTPIN_ADDED_MISSING@mx.google.com>
Received: (qmail 25154 invoked by uid 1025); 27 Sep 2015 09:40:41 -0000
Received: from ozaki.com.tw (HELO User) ([email protected]@59.125.123.190)
by mx.portalava.com.br with SMTP; 27 Sep 2015 09:40:41 -0000
Reply-To: <[email protected]>
From: "Mohammad"<[email protected]>
Subject: Re Email 27-09-15
Date: Sun, 27 Sep 2015 17:40:00 +0800
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000

Sir,
compliments.
My family and I are hiding on political asylum somewhere.
For your personal consumption and information, my family has a big family treasure for investment for the benefit of my family and yours too.
30% of the family treasure will be your entitlement for your help.
Write me back for more information, while you make sure to be very confidential with this all important issue.
Regards,
Mohammad.

He's changed emails to [email protected]

Delivered-To: <snipped>
Received: by 10.27.224.10 with SMTP id x10csp2162134wlg;
Tue, 29 Sep 2015 14:35:02 -0700 (PDT)
X-Received: by 10.170.153.3 with SMTP id u3mr212272ykc.46.1443562502044;
Tue, 29 Sep 2015 14:35:02 -0700 (PDT)
Return-Path: <[email protected]>
Received: from mail-yk0-x243.google.com (mail-yk0-x243.google.com. [2607:f8b0:4002:c07::243])
by mx.google.com with ESMTPS id o129si11815688ywe.193.2015.09.29.14.35.01
for <<snipped>>
(version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Tue, 29 Sep 2015 14:35:02 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates 2607:f8b0:4002:c07::243 as permitted sender) client-ip=2607:f8b0:4002:c07::243;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of [email protected] designates 2607:f8b0:4002:c07::243 as permitted sender) [email protected];
dkim=pass [email protected];
dmarc=pass (p=NONE dis=NONE) header.from=gmail.com
Received: by mail-yk0-x243.google.com with SMTP id z138so842165ykd.3
for <<snipped>>; Tue, 29 Sep 2015 14:35:01 -0700 (PDT)
DKIM-Signature: <snipped>
MIME-Version: 1.0
X-Received: by 10.170.197.211 with SMTP id o202mr179222yke.27.1443562500995;
Tue, 29 Sep 2015 14:35:00 -0700 (PDT)
Received: by 10.129.53.206 with HTTP; Tue, 29 Sep 2015 14:35:00 -0700 (PDT)
Date: Tue, 29 Sep 2015 22:35:00 +0100
Message-ID: <CAG=KAm3OTkBzZ-7fT3sN-Z=mSZW_degjwYeC0cMjcbwJRZw--g@mail.gmail.com>
Subject: more information/KEEP EXTRA-ORDINARILY CONFIDENTIAL!!!
From: MOHAMMAD GADDAFFI <[email protected]>
To: <snipped>

My dear friend/partner,
Thank you for your email. I am soliciting your help to help me release and invest money left for me and my family by my father the late Muammar Gaddaffi.
I got your email address while searching for a trustworthy and reliable person to assist me release and invest my money, I BELIEVE AND TRUST THAT AFTER SENDING YOUR ID AND YOUR PERSONAL INFORMATION, YOU WILL NOT BETRAY ME OR RUN AWAY WITH MY MONEY THAT IS WHY WE MUST RELEASE THE MONEY TO YOU IN 3 BATCHES.

To show you sincerity of purpose and good faith, find attached to this email copies of my photographs and copy of my international passport.
I wish to inform you that the money in question is, (USD48.7Million) it is the first deposit after which we will process and release the second deposit, I also want to inform you that we will sign a MEMORANDUM OF UNDERSTANDING (MOU)/TRUST AGREEMENT stating each others expected role and percentage once the money is freed and invested legally in a lucrative business. You will also be expected to come and be present for the final paper work and release of the money to you personally.
Please, I wish to inform you that this business deal/investment proposal must be kept very confidential and my family's involvement should not be made known to anyone and the investments made on behalf of my family should never be linked to our family now or in future.
I wish to let you know that the money in question is in two deposits, we will start with freeing/releasing and investing the first and small deposit of USD$48,700,000.00 and on the success of the release, investment and confirmation of profit, we will then proceed with freeing the two other bigger deposits.
My father, the late Muammar Gaddaffi, left three deposits of USD$48,700,000.00 (FORTY EIGHT MILLION, SEVEN HUNDRED THOUSAND DOLLARS ONLY) and USD$210,000,000.00 (TWO HUNDRED AND TEN MILLION UNITED STATES DOLLARS ONLY) USD$730,000,000.00 (SEVEN HUNDRED AND THIRTY MILLION DOLLARS ONLY).
I and my brother are the only two people in my family aware of the funds in question and where the money is currently being deposited, the only outsider who is aware of the existence of the funds and where it is deposited is my late fathers financial agent/international financial consultant.
I will give you further information once you send me your full personal information with a scanned copy of your valid ID for my security and for the security of the huge amount of money I am about to entrust into your care.
Send me the below information :-

Full Name:
Address:
Phone:
How old are you?
What is your Occupation?
Are you married or Single?
Have you handled this kind of amount or anything close before?

I also wish to inform you that the process of release of this money to you will be hitch free, everything will be taken care of to ensure legitimate and official release of the money to you in your name, there is not risk associated with the process of release of the money to you.
The process of release of the money to you can be a success within the next 3 to 5 days as soon as you confirm your ability to come forward to recieve and invest this money on behalf of my family and I but before that we must both sign a MEMORANDUM OF UNDERSTANDING/TRUST AGREEMENT TO SPECIFY EACH OTHERS ROLES AND PERCENTAGE ONCE THE PROCESS IS COMPLETED.
LASTLY, I WANT TO RE-ASSURE YOU THAT THERE IS NO ASPECT OF RISK OR ANY ILEGIMATE IMPLICATION ASSOCIATED WITH THE PROCESS OF RELEASE OF THESE FUNDS/MY FAMILY HERITAGE TO YOU.
I await your earliest email response no matter your decision.
Regards,
Mohammad.


-----Original Message-----
From: <snipped>
To: mohamadprivate <[email protected]>
Sent: Mon, Sep 28, 2015 5:35 pm
Subject: Re: Re Email 27-09-15