by buried under 419s
Return-path: <>
Envelope-to:
Delivery-date: Mon, 21 Dec 2015 10:07:12 -0800
Received: from mail-db3hn0251.outbound.protection.outlook.com ([157.55.234.251]:17317 helo=emea01-db3-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
id 1aB4rW-0006cm-6Y
for ; Mon, 21 Dec 2015 10:07:12 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=ema157.onmicrosoft.com; s=selector1-ema157-onmicrosoft-com;
h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=O2LyYRnFXMfKrEiqZzNsSEarWvf0VaHTQ8adQQhawwY=;
b=MuONjEPydJqeTAHjxn1RSWa+eUKqDXq1s68mABuVVmYtLTCkaP9Uikosg9NKJLLGHoZPpznrNRhTRh3VqCTNS0LrnKuEEs7mUvPj5LqJ+DENbYVimk9JWwpV9HT44TDB1lxaiBU/56CGZioIzW4FmV8Q8VA2Fz/pjhVRHW04M9w=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [192.168.1.139] (105.235.235.116) by
AM4PR08MB0771.eurprd08.prod.outlook.com (10.164.82.149) with Microsoft SMTP
Server (TLS) id 15.1.361.13; Mon, 21 Dec 2015 18:22:05 +0000
Content-Type: multipart/alternative; boundary="===============1934734912=="
MIME-Version: 1.0
To: Recipients
From: Aisha Gaddafi
Date: Mon, 21 Dec 2015 19:26:06 +0100
Reply-To: <[email protected]>
X-Originating-IP: [105.235.235.116]
X-ClientProxiedBy: DB5PR01CA0081.eurprd01.prod.exchangelabs.com (25.163.24.49)
To AM4PR08MB0771.eurprd08.prod.outlook.com (25.164.82.149)
Message-ID: <AM4PR08MB0771BCB0AA6925BD50261AECB8E40@AM4PR08MB0771.eurprd08.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics: 1;AM4PR08MB0771;2:E9VOvPa7MEwWeVsUa2ofAN2UiT2aeG1U4ayFXnAUBkXdVQrErJjeImHheg4KzPHNqdsaNTRDuY5bkvlB6BqrJkAyjEju1MGIw4VWPehvDUfARVTaabkHpVPMFM2xMYjVMEZwVLwHot0jk6BNro2YZg==;3:GF9CoY6e9rC6sAls6KX4dhijaWLjPdZqJFgIiyOHegqYD7mSTLffdAPAIUR/mWvoQvsEhzz6EosiXDKcD4+YTSq7pID9TjT/pOVLBNJ9uZV9WYuEnnDPkZ8T1QLXkW0/;25:TsFBV8xMia51EnUD4tO0pxVhQrZm505gPTtIYkVrnxUqUmNRhpriiMw1qUz7DK019J2n0eBaEcB8pJjLZ1fHMvJ5lanzGQT/bYTl+mFfT2hDUo53RkyoNHGtNZifkS8FZu6EM4cOSoH41I8wztQL2mgpPDphv4RYEMwWwnZ8wn4X+1Vym5Wd1DlbQT6U6GaqQwkFaX5zeWVTwzBgL3bqES/K6cPpUoI6+OffV2r+OJQnzNb5sJHbbdXZMEq5eBChfeWFJDQiIik0M951/mQRMA==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM4PR08MB0771;
X-Microsoft-Antispam-PRVS: <AM4PR08MB0771374F5B4B21B79F2B2194B8E40@AM4PR08MB0771.eurprd08.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001)(10201501046)(6009046)(6011046);SRVR:AM4PR08MB0771;BCL:0;PCL:0;RULEID:;SRVR:AM4PR08MB0771;
X-Microsoft-Exchange-Diagnostics: 1;AM4PR08MB0771;4:DwT7zpF3XMhgVy+Wi/ndLi1+a1dWVwNAtb9/kyF25eNXWtV9aTVuSTilMDI8aleFSiLSkCX6f26LFvEzx3Yc6zjLHAFTktQJ17ysOSWv1qO8+2kfnGMoYqmx+6Q6skniNIYOIio9cKJHWsMKD9f8Ajj8nVnApkR8sEJcRkfPuDg8Jw4t8KQPvfggx6+FBQ2feAGXExihqRbz2oZvrBedbMPwPa36RCGfR1+emuNwGwRGG77MOCoB06G9PAQzdclStNzOHfHiVUqs3d+YSGLcFd8RUpsoRW4pN/MVWMEi8ShJPIv56jnn9IFJpVQg/GQr61dFBBXxGFy2aVmc2o2rwwv20cq7NuA421R6NNzcRTqYTecVrdClruBQ7qL4K9ljPWpHm7+bN23EK/XIe+Pxgn5d8ZaJoY6dCeWm/rd5rHU=;23:VhioMhVHElV0c9X8RxzgxsxxnMLdHbRiEl+H72dlcIH+59kKVcvpXdAsBCHdZKhNML7kmMqUekeeb38EfGnKZwqVu+IAHZjEZBrn/ssfa2zpqR7gm+Tx+MPSZWlEk5vU4B1aB6CP9f3EBRRY7Mhy+KH2nrCUetknzd3zQKenx5rkWyRCnE5ak9k6ca7UeCd++EM8ut5fGLli+wMn18qfiwaLgcCQD4mfCbJnv+m838c8J3zKi6RkExMAP0J5No4w3Ljvb5nVoHwkZkDC7sEQBe0+8oUVFBeHQPpV3wY6akk=;5:W9bcpHL5pv1p4QDUdEr23CSVI5gLusfJf72QWlNSV7vcAozN5olrIhFVFbTRvF7ExPkeEroFaH05LS1eizY2Hssx+zi6MYpYyt3uzdNAPPDzNPk6Bs7qjb8efpA8XpzxeuEVjPN0aREP4oILTxwntw==
X-Forefront-PRVS: 079756C6B9
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6049001)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:AM4PR08MB0771;H:[192.168.1.139];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: None (protection.outlook.com: [192.168.1.139] does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;AM4PR08MB0771;24:vqXNK4glEvNb8PpgVMejw/seZ3AdbZyr13i66r/3ZkM9rjCrQq1DQsBpUM9/qkD53KncMQItcT0JuHFQMqjY5g==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: ema157.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Dec 2015 18:22:05.3945
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR08MB0771
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Good Day, Am Aisha Gaddafi daughter of late Colonel Gaddafi
the Libyan leader.I am contacting you to assist me in removing the sum of
sixty five million USA dollars being deposited with a security company in
UAE Dubai. The funds was deposited with a security company in my name and
as a matter of fact, me my only surviving son manage to escape with the help
of a security guard on duty that fateful day, I am presently into hiding
in a refugee camp between the border of Chad and Nigria because I know that
the regime of my father has collapse after his death. Please for your kind
assistance I will offer you 30% of the total sum, all the legal documentation
concerning the deposit are with me, I will issue power of attorney making
you the new beneficiary of the deposit so that the security company can release
the consignment to you. Once you successfully secure the consignment from
the security company an arrangement would be made for disbursement. May Allah
grant you the heart to assist me and my only son in this our trial period,
please never you abandon me with my son just because we are Arabs, but I
want to assure you that honesty and trust must remain our bond. Get back with
your details so that we can proceed without delay because l am here without
help from no one. Aisha Gaddafi [...]
Content analysis details: (13.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 TO_MALFORMED To: has a malformed address
0.5 AXB_X_FF_SEZ_S Forefront sez this is spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.55.234.251 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.9 HK_SCAM_N1 BODY: HK_SCAM_N1
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1924]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.8 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.8 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** PERSONALLY TO YOU..
Good Day,
Am Aisha Gaddafi daughter of late Colonel Gaddafi the Libyan leader.I am contacting you to assist me in removing the sum of sixty five million USA dollars being deposited with a security company in UAE Dubai.
The funds was deposited with a security company in my name and as a matter of fact, me my only surviving son manage to escape with the help of a security guard on duty that fateful day, I am presently into hiding in a refugee camp between the border of Chad and Nigria because I know that the regime of my father has collapse after his death. Please for your kind assistance I will offer you 30% of the total sum, all the legal documentation concerning the deposit are with me, I will issue power of attorney making you the new beneficiary of the deposit so that the security company can release the consignment to you.
Once you successfully secure the consignment from the security company an arrangement would be made for disbursement.
May Allah grant you the heart to assist me and my only son in this our trial period, please never you abandon me with my son just because we are Arabs, but I want to assure you that honesty and trust must remain our bond.
Get back with your details so that we can proceed without delay because l am here without help from no one.
Aisha Gaddafi
Envelope-to:
Delivery-date: Mon, 21 Dec 2015 10:07:12 -0800
Received: from mail-db3hn0251.outbound.protection.outlook.com ([157.55.234.251]:17317 helo=emea01-db3-obe.outbound.protection.outlook.com)
by with esmtps (TLSv1:AES256-SHA:256)
(Exim 4.80)
id 1aB4rW-0006cm-6Y
for ; Mon, 21 Dec 2015 10:07:12 -0800
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=ema157.onmicrosoft.com; s=selector1-ema157-onmicrosoft-com;
h=From:To:Date:Subject:Message-ID:Content-Type:MIME-Version;
bh=O2LyYRnFXMfKrEiqZzNsSEarWvf0VaHTQ8adQQhawwY=;
b=MuONjEPydJqeTAHjxn1RSWa+eUKqDXq1s68mABuVVmYtLTCkaP9Uikosg9NKJLLGHoZPpznrNRhTRh3VqCTNS0LrnKuEEs7mUvPj5LqJ+DENbYVimk9JWwpV9HT44TDB1lxaiBU/56CGZioIzW4FmV8Q8VA2Fz/pjhVRHW04M9w=
Authentication-Results: spf=none (sender IP is ) smtp.mailfrom=<>;
Received: from [192.168.1.139] (105.235.235.116) by
AM4PR08MB0771.eurprd08.prod.outlook.com (10.164.82.149) with Microsoft SMTP
Server (TLS) id 15.1.361.13; Mon, 21 Dec 2015 18:22:05 +0000
Content-Type: multipart/alternative; boundary="===============1934734912=="
MIME-Version: 1.0
To: Recipients
From: Aisha Gaddafi
Date: Mon, 21 Dec 2015 19:26:06 +0100
Reply-To: <[email protected]>
X-Originating-IP: [105.235.235.116]
X-ClientProxiedBy: DB5PR01CA0081.eurprd01.prod.exchangelabs.com (25.163.24.49)
To AM4PR08MB0771.eurprd08.prod.outlook.com (25.164.82.149)
Message-ID: <AM4PR08MB0771BCB0AA6925BD50261AECB8E40@AM4PR08MB0771.eurprd08.prod.outlook.com>
X-Microsoft-Exchange-Diagnostics: 1;AM4PR08MB0771;2:E9VOvPa7MEwWeVsUa2ofAN2UiT2aeG1U4ayFXnAUBkXdVQrErJjeImHheg4KzPHNqdsaNTRDuY5bkvlB6BqrJkAyjEju1MGIw4VWPehvDUfARVTaabkHpVPMFM2xMYjVMEZwVLwHot0jk6BNro2YZg==;3:GF9CoY6e9rC6sAls6KX4dhijaWLjPdZqJFgIiyOHegqYD7mSTLffdAPAIUR/mWvoQvsEhzz6EosiXDKcD4+YTSq7pID9TjT/pOVLBNJ9uZV9WYuEnnDPkZ8T1QLXkW0/;25:TsFBV8xMia51EnUD4tO0pxVhQrZm505gPTtIYkVrnxUqUmNRhpriiMw1qUz7DK019J2n0eBaEcB8pJjLZ1fHMvJ5lanzGQT/bYTl+mFfT2hDUo53RkyoNHGtNZifkS8FZu6EM4cOSoH41I8wztQL2mgpPDphv4RYEMwWwnZ8wn4X+1Vym5Wd1DlbQT6U6GaqQwkFaX5zeWVTwzBgL3bqES/K6cPpUoI6+OffV2r+OJQnzNb5sJHbbdXZMEq5eBChfeWFJDQiIik0M951/mQRMA==
X-Microsoft-Antispam: UriScan:;BCL:0;PCL:0;RULEID:;SRVR:AM4PR08MB0771;
X-Microsoft-Antispam-PRVS: <AM4PR08MB0771374F5B4B21B79F2B2194B8E40@AM4PR08MB0771.eurprd08.prod.outlook.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(601004)(2401047)(520078)(5005006)(8121501046)(3002001)(10201501046)(6009046)(6011046);SRVR:AM4PR08MB0771;BCL:0;PCL:0;RULEID:;SRVR:AM4PR08MB0771;
X-Microsoft-Exchange-Diagnostics: 1;AM4PR08MB0771;4:DwT7zpF3XMhgVy+Wi/ndLi1+a1dWVwNAtb9/kyF25eNXWtV9aTVuSTilMDI8aleFSiLSkCX6f26LFvEzx3Yc6zjLHAFTktQJ17ysOSWv1qO8+2kfnGMoYqmx+6Q6skniNIYOIio9cKJHWsMKD9f8Ajj8nVnApkR8sEJcRkfPuDg8Jw4t8KQPvfggx6+FBQ2feAGXExihqRbz2oZvrBedbMPwPa36RCGfR1+emuNwGwRGG77MOCoB06G9PAQzdclStNzOHfHiVUqs3d+YSGLcFd8RUpsoRW4pN/MVWMEi8ShJPIv56jnn9IFJpVQg/GQr61dFBBXxGFy2aVmc2o2rwwv20cq7NuA421R6NNzcRTqYTecVrdClruBQ7qL4K9ljPWpHm7+bN23EK/XIe+Pxgn5d8ZaJoY6dCeWm/rd5rHU=;23:VhioMhVHElV0c9X8RxzgxsxxnMLdHbRiEl+H72dlcIH+59kKVcvpXdAsBCHdZKhNML7kmMqUekeeb38EfGnKZwqVu+IAHZjEZBrn/ssfa2zpqR7gm+Tx+MPSZWlEk5vU4B1aB6CP9f3EBRRY7Mhy+KH2nrCUetknzd3zQKenx5rkWyRCnE5ak9k6ca7UeCd++EM8ut5fGLli+wMn18qfiwaLgcCQD4mfCbJnv+m838c8J3zKi6RkExMAP0J5No4w3Ljvb5nVoHwkZkDC7sEQBe0+8oUVFBeHQPpV3wY6akk=;5:W9bcpHL5pv1p4QDUdEr23CSVI5gLusfJf72QWlNSV7vcAozN5olrIhFVFbTRvF7ExPkeEroFaH05LS1eizY2Hssx+zi6MYpYyt3uzdNAPPDzNPk6Bs7qjb8efpA8XpzxeuEVjPN0aREP4oILTxwntw==
X-Forefront-PRVS: 079756C6B9
X-Forefront-Antispam-Report: SFV:SPM;SFS:(10009020)(6049001)(6009001)(5005620100007);DIR:OUT;SFP:1501;SCL:9;SRVR:AM4PR08MB0771;H:[192.168.1.139];FPR:;SPF:None;PTR:InfoNoRecords;LANG:en;
Received-SPF: None (protection.outlook.com: [192.168.1.139] does not designate
permitted sender hosts)
X-Microsoft-Exchange-Diagnostics: 1;AM4PR08MB0771;24:vqXNK4glEvNb8PpgVMejw/seZ3AdbZyr13i66r/3ZkM9rjCrQq1DQsBpUM9/qkD53KncMQItcT0JuHFQMqjY5g==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000
X-OriginatorOrg: ema157.onmicrosoft.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 21 Dec 2015 18:22:05.3945
(UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR08MB0771
X-Spam-Status: Yes, score=13.6
X-Spam-Score: 136
X-Spam-Bar: +++++++++++++
X-Spam-Report: Spam detection software, running on the system "", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: Good Day, Am Aisha Gaddafi daughter of late Colonel Gaddafi
the Libyan leader.I am contacting you to assist me in removing the sum of
sixty five million USA dollars being deposited with a security company in
UAE Dubai. The funds was deposited with a security company in my name and
as a matter of fact, me my only surviving son manage to escape with the help
of a security guard on duty that fateful day, I am presently into hiding
in a refugee camp between the border of Chad and Nigria because I know that
the regime of my father has collapse after his death. Please for your kind
assistance I will offer you 30% of the total sum, all the legal documentation
concerning the deposit are with me, I will issue power of attorney making
you the new beneficiary of the deposit so that the security company can release
the consignment to you. Once you successfully secure the consignment from
the security company an arrangement would be made for disbursement. May Allah
grant you the heart to assist me and my only son in this our trial period,
please never you abandon me with my son just because we are Arabs, but I
want to assure you that honesty and trust must remain our bond. Get back with
your details so that we can proceed without delay because l am here without
help from no one. Aisha Gaddafi [...]
Content analysis details: (13.6 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.1 TO_MALFORMED To: has a malformed address
0.5 AXB_X_FF_SEZ_S Forefront sez this is spam
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[157.55.234.251 listed in list.dnswl.org]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.9 HK_SCAM_N1 BODY: HK_SCAM_N1
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 BAYES_20 BODY: Bayes spam probability is 5 to 20%
[score: 0.1924]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_MONEY_PERCENT X% of a lot of money for you
3.8 MONEY_FRAUD_5 Lots of money and many fraud phrases
3.8 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** PERSONALLY TO YOU..
Good Day,
Am Aisha Gaddafi daughter of late Colonel Gaddafi the Libyan leader.I am contacting you to assist me in removing the sum of sixty five million USA dollars being deposited with a security company in UAE Dubai.
The funds was deposited with a security company in my name and as a matter of fact, me my only surviving son manage to escape with the help of a security guard on duty that fateful day, I am presently into hiding in a refugee camp between the border of Chad and Nigria because I know that the regime of my father has collapse after his death. Please for your kind assistance I will offer you 30% of the total sum, all the legal documentation concerning the deposit are with me, I will issue power of attorney making you the new beneficiary of the deposit so that the security company can release the consignment to you.
Once you successfully secure the consignment from the security company an arrangement would be made for disbursement.
May Allah grant you the heart to assist me and my only son in this our trial period, please never you abandon me with my son just because we are Arabs, but I want to assure you that honesty and trust must remain our bond.
Get back with your details so that we can proceed without delay because l am here without help from no one.
Aisha Gaddafi
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
