#416980 by buried under 419s
Tue Sep 08, 2020 9:39 pm
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP
id INCaFpblV18MDQAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 08 Sep 2020 20:12:06 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 08 Sep 2020 20:12:06 +0000
Received: from mail-io1-f68.google.com ([209.85.166.68]:41194)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kFjyH-0000rE-Gr
for m; Tue, 08 Sep 2020 20:12:06 +0000
Received: by mail-io1-f68.google.com with SMTP id z13so706786iom.8
for <>; Tue, 08 Sep 2020 13:11:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=NEsjuOU+GWxG2jcH9gEINEUMJzP/Zff/9M0f8BkaysI=;
b=UKX3HZBrIAQXgcmAJETZ6yjWoq+jBmX50iHlztjb6CykS//YY3shd9uBbgrRW+fW+u
HnlkekzfsBrRAIJAjh2AY+IUGYtoZRBmJ0F4XrpXHhmmyOPsYf81B9Y47CAJzK4GsLnA
r7TUQa1ZZZWO8OyZ0vAr//A5542i+FnZGbobb87kl5ogrAZ5aa1gRLUrf6040JYbK+M0
WGtW+sfQ2Jyp5ztJ0y2UT6cp1JF6dQGXbZp/96igbfV+j2303EoIcP0sN+EJkrya2iyy
eSYq7JSc0e9JFxlSmXbfRclLgwgQ3oPeOrnmHlXtODZMhg0lh6fiawYoZ5tkwu3X0/ig
vY9g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=NEsjuOU+GWxG2jcH9gEINEUMJzP/Zff/9M0f8BkaysI=;
b=Tsv45+nvspYnRIWYH3kF0FxFhVBcNXFM5eOa+v6C2iWpZSaUdCvzbO5fyyRl9ggK+X
fRyIcHGpf3n3CmQiOZW9jdU1QW05J6KQx5mwTykeOVNY0fkdgb6KBhxCJpIAuDM362OJ
PmvONta00L2Jl964DAru81DFyrqgVxFBS1pjnPiHrRZiSLQTZEVCYUX0i9UMQP89r6z8
l7i94VXcN/9wY1QUyZjPHNLqnjRKCFfBs5weLF0bP9So6sk3goHnrrtH+ghrpaULczr2
vWb2uLkQcz9iq1lZwFZSUl5yS9ahJLbjIJctkAIks9d95kdrGNepz4IzhSVrJmeDPsiP
JiEw==
X-Gm-Message-State: AOAM5326BAXU0ly4B9to+NTQRD8y1AmaakSl6foBDjmcgc7Pk7hD0TT/
IIJgmefyxc4VLz42ntHLACVS8ak7KINKf8WE4t4=
X-Google-Smtp-Source: ABdhPJwOJ0ttk3buZ3M5XvgR8zUuVrb285DYBx4jqQr57tTppo22dHPd8ZFN3ZS4zBiaFEtu6D8mwTNgg9H5Npasuo8=
X-Received: by 2002:a6b:e40f:: with SMTP id u15mr526536iog.132.1599595884699;
Tue, 08 Sep 2020 13:11:24 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: Mr Kurt Galea <[email protected]>
Date: Mon, 7 Sep 2020 21:10:57 -0700
Message-ID: <CAKCKK-=DC4Py+i15DsivrHKbvs9cw6BZM7fZG6yEROh+8mOv+Q@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007de97405aed2f0be"
Bcc:
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- *Hello Sir,* *Can you provide me with a good project plan
for investment? I have a Libyan family that wants to invest their family
wealth out of Libya because of the insecurity in Libya since the overthrow
of form [...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ofile0619[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[treasurydeptorg[at]gmail.com]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.68 listed in wl.mailspike.net]
0.9 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Investment
--0000000000007de97405aed2f0be
Content-Type: text/plain; charset="UTF-8"
Hello Sir,
Canyou provide me with a good project plan for investment? I have a Libyan family that wants to invest their family wealth out of Libya because of the insecurity in Libya since the overthrow of former President Colonel Gaddafi in 2011, their fund is no longer secured in Libya with the continued unrest all over Libya that is why they want their funds to be invested wisely in lucrative business ventures that you can perfectly manage.
Reply for more details.
Mr Kurt Galea
Delivered-To:
Received: from
by with LMTP
id INCaFpblV18MDQAAibB4EA
(envelope-from <[email protected]>)
for <>; Tue, 08 Sep 2020 20:12:06 +0000
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 08 Sep 2020 20:12:06 +0000
Received: from mail-io1-f68.google.com ([209.85.166.68]:41194)
by with esmtps (TLS1.2) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.93)
(envelope-from <[email protected]>)
id 1kFjyH-0000rE-Gr
for m; Tue, 08 Sep 2020 20:12:06 +0000
Received: by mail-io1-f68.google.com with SMTP id z13so706786iom.8
for <>; Tue, 08 Sep 2020 13:11:45 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:from:date:message-id:subject:to;
bh=NEsjuOU+GWxG2jcH9gEINEUMJzP/Zff/9M0f8BkaysI=;
b=UKX3HZBrIAQXgcmAJETZ6yjWoq+jBmX50iHlztjb6CykS//YY3shd9uBbgrRW+fW+u
HnlkekzfsBrRAIJAjh2AY+IUGYtoZRBmJ0F4XrpXHhmmyOPsYf81B9Y47CAJzK4GsLnA
r7TUQa1ZZZWO8OyZ0vAr//A5542i+FnZGbobb87kl5ogrAZ5aa1gRLUrf6040JYbK+M0
WGtW+sfQ2Jyp5ztJ0y2UT6cp1JF6dQGXbZp/96igbfV+j2303EoIcP0sN+EJkrya2iyy
eSYq7JSc0e9JFxlSmXbfRclLgwgQ3oPeOrnmHlXtODZMhg0lh6fiawYoZ5tkwu3X0/ig
vY9g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:from:date:message-id
:subject:to;
bh=NEsjuOU+GWxG2jcH9gEINEUMJzP/Zff/9M0f8BkaysI=;
b=Tsv45+nvspYnRIWYH3kF0FxFhVBcNXFM5eOa+v6C2iWpZSaUdCvzbO5fyyRl9ggK+X
fRyIcHGpf3n3CmQiOZW9jdU1QW05J6KQx5mwTykeOVNY0fkdgb6KBhxCJpIAuDM362OJ
PmvONta00L2Jl964DAru81DFyrqgVxFBS1pjnPiHrRZiSLQTZEVCYUX0i9UMQP89r6z8
l7i94VXcN/9wY1QUyZjPHNLqnjRKCFfBs5weLF0bP9So6sk3goHnrrtH+ghrpaULczr2
vWb2uLkQcz9iq1lZwFZSUl5yS9ahJLbjIJctkAIks9d95kdrGNepz4IzhSVrJmeDPsiP
JiEw==
X-Gm-Message-State: AOAM5326BAXU0ly4B9to+NTQRD8y1AmaakSl6foBDjmcgc7Pk7hD0TT/
IIJgmefyxc4VLz42ntHLACVS8ak7KINKf8WE4t4=
X-Google-Smtp-Source: ABdhPJwOJ0ttk3buZ3M5XvgR8zUuVrb285DYBx4jqQr57tTppo22dHPd8ZFN3ZS4zBiaFEtu6D8mwTNgg9H5Npasuo8=
X-Received: by 2002:a6b:e40f:: with SMTP id u15mr526536iog.132.1599595884699;
Tue, 08 Sep 2020 13:11:24 -0700 (PDT)
MIME-Version: 1.0
Reply-To: [email protected]
From: Mr Kurt Galea <[email protected]>
Date: Mon, 7 Sep 2020 21:10:57 -0700
Message-ID: <CAKCKK-=DC4Py+i15DsivrHKbvs9cw6BZM7fZG6yEROh+8mOv+Q@mail.gmail.com>
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary="0000000000007de97405aed2f0be"
Bcc:
X-Spam-Status: Yes, score=9.0
X-Spam-Score: 90
X-Spam-Bar: +++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- *Hello Sir,* *Can you provide me with a good project plan
for investment? I have a Libyan family that wants to invest their family
wealth out of Libya because of the insecurity in Libya since the overthrow
of form [...]
Content analysis details: (9.0 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in
digit
[ofile0619[at]gmail.com]
-0.0 SPF_PASS SPF: sender matches SPF record
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
provider
[treasurydeptorg[at]gmail.com]
1.0 DATE_IN_PAST_12_24 Date: is 12 to 24 hours before Received: date
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
valid
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
author's domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
[209.85.166.68 listed in wl.mailspike.net]
0.9 HK_NAME_FM_MR_MRS No description available.
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain
different freemails
X-Spam-Flag: YES
Subject: ***SPAM*** Investment
--0000000000007de97405aed2f0be
Content-Type: text/plain; charset="UTF-8"
Hello Sir,
Canyou provide me with a good project plan for investment? I have a Libyan family that wants to invest their family wealth out of Libya because of the insecurity in Libya since the overthrow of former President Colonel Gaddafi in 2011, their fund is no longer secured in Libya with the continued unrest all over Libya that is why they want their funds to be invested wisely in lucrative business ventures that you can perfectly manage.
Reply for more details.
Mr Kurt Galea
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces