by buried under 419s
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Thu, 31 Aug 2017 03:12:43 -0700
Received: from ks3.vdwebhosting.net ([213.160.72.19]:46034)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dnMSn-0008AD-PC
for ; Thu, 31 Aug 2017 03:12:43 -0700
Received: from User (unknown [196.196.27.126])
by ks3.vdwebhosting.net (Postfix) with ESMTPA id DBD443363B5;
Thu, 31 Aug 2017 11:59:56 +0200 (CEST)
Reply-To: <[email protected]>
From: "HSBC London Office"<[email protected]>
Date: Thu, 31 Aug 2017 02:58:25 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=25.7
X-Spam-Score: 257
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: HSBC BANK PLC LONDON.(REGISTERED NO.1026167). ADDRESS:8 CANADA
SQUARE, CANARY WHARF, LONDON E14 5HQ, UK.. Attn: Beneficiary, We write to
inform you that Series of meetings have been held over the past 2 weeks with
the Secretary General of the United Nations Organization, International Community
Board,U.S Department of State and Africa Union Organization this ended last
week. [...]
Content analysis details: (25.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[196.196.27.126 listed in zen.spamhaus.org]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(hsblonoffice02[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.3 LOTTERY_PH_004470 No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.5 LOTTO_AGENT Claims Agent
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Bank Alert (About Your Funds)
HSBC BANK PLC LONDON.(REGISTERED NO.1026167).
ADDRESS:8 CANADA SQUARE, CANARY WHARF, LONDON E14 5HQ, UK..
Attn: Beneficiary,
We write to inform you that Series of meetings have been held over the past 2 weeks
with the Secretary General of the United Nations Organization, International
Community Board,U.S Department of State and Africa Union Organization this ended
last week.
During the meeting, this organization discovered that you have not received your
funds due to past corrupt Governmental Officials who almost held the fund to
themselves for their selfish reason and some individuals who have taken advantage of
your fund all in an attempt to swindle your fund which has led to so many losses
from your end and unnecessary delay in the release of your fund.
The International Community Board Committee enhanced by the United Nations/ U.S.
Department of State and Africa Union Organization have successfully passed a payment
mandate to our bank, to clear all over due Contract funds, Lottery winnings and
Inheritance funds owed to you and other individuals and organizations who have been
found not to have receive their funds.
A woman by name (MRS: CINDY MAY) came to our office with an application stating that
you gave her the power of attorney to be the beneficiary of your Outstanding funds.
She made us to believe that you are dead and that she is your next of kin. We
decided to send you email through this address hoping to find out if you are dead or
alive and also to find out if you at any time gave this woman the power of attorney
to represent you. We are almost ready to transfer part payment of $21.5M USD of your
outstanding funds to her nominated bank account stated below:
NAME OF BANK: FIRST NATIONAL BANK
ADDR: 120 SO. 2nd. ST. BLYTHEVILLE
ARKANSAS 72315 USA
ACCOUNT NUMBER: 482986
ROUTING NUMBER: 084107343
Swift code: WMSBUS66
BENEFICIARY: CINDY MAY
For immediate transfer of your funds to you in your country, you are required to
send your YOUR FULL NAME, CURRENT ADDRESS, CELL PHONE AND FAX NUMBER.You have 48hrs
from now to contact our Foreign payment officer with the requested Information on
his direct contact information stated below here In UK for onward transferring of
your fund to you as the legal recipient.
Name: Douglas Flint
Direct Phone No: +44-704-5734492
Fax Number: + 44-870-9741509
Email: [email protected]
Yours Sincerely,
Mr. Alex Hungate.
HSBC BANK PLC LONDON.
Envelope-to:
Delivery-date: Thu, 31 Aug 2017 03:12:43 -0700
Received: from ks3.vdwebhosting.net ([213.160.72.19]:46034)
by with esmtp (Exim 4.89)
(envelope-from <[email protected]>)
id 1dnMSn-0008AD-PC
for ; Thu, 31 Aug 2017 03:12:43 -0700
Received: from User (unknown [196.196.27.126])
by ks3.vdwebhosting.net (Postfix) with ESMTPA id DBD443363B5;
Thu, 31 Aug 2017 11:59:56 +0200 (CEST)
Reply-To: <[email protected]>
From: "HSBC London Office"<[email protected]>
Date: Thu, 31 Aug 2017 02:58:25 -0700
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Spam-Status: Yes, score=25.7
X-Spam-Score: 257
X-Spam-Bar: +++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: HSBC BANK PLC LONDON.(REGISTERED NO.1026167). ADDRESS:8 CANADA
SQUARE, CANARY WHARF, LONDON E14 5HQ, UK.. Attn: Beneficiary, We write to
inform you that Series of meetings have been held over the past 2 weeks with
the Secretary General of the United Nations Organization, International Community
Board,U.S Department of State and Africa Union Organization this ended last
week. [...]
Content analysis details: (25.7 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.0 T_DEAR_BENEFICIARY BODY: Dear Beneficiary:
0.0 HK_SCAM_N2 BODY: No description available.
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[196.196.27.126 listed in zen.spamhaus.org]
1.0 MISSING_HEADERS Missing To: header
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(hsblonoffice02[at]gmail.com)
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
0.0 FROM_MISSP_XPRIO Misspaced FROM + X-Priority
0.0 LOTS_OF_MONEY Huge... sums of money
1.6 REPLYTO_WITHOUT_TO_CC No description available.
0.0 FROM_MISSP_USER From misspaced, from "User"
1.6 MISSING_MID Missing Message-Id: header
0.0 FROM_MISSP_MSFT From misspaced + supposed Microsoft tool
3.3 LOTTERY_PH_004470 No description available.
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.5 KAM_NIGERIAN Nigerian Scam and Variants
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
0.0 TO_NO_BRKTS_FROM_MSSP Multiple header formatting problems
0.0 FROM_MISSP_REPLYTO From misspaced, has Reply-To
0.0 FROM_MISSPACED From: missing whitespace
1.5 LOTTO_AGENT Claims Agent
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 TO_NO_BRKTS_MSFT To: lacks brackets and supposed Microsoft tool
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FROM_MISSP_FREEMAIL From misspaced + freemail provider
0.0 MONEY_FRAUD_8 Lots of money and very many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** Bank Alert (About Your Funds)
HSBC BANK PLC LONDON.(REGISTERED NO.1026167).
ADDRESS:8 CANADA SQUARE, CANARY WHARF, LONDON E14 5HQ, UK..
Attn: Beneficiary,
We write to inform you that Series of meetings have been held over the past 2 weeks
with the Secretary General of the United Nations Organization, International
Community Board,U.S Department of State and Africa Union Organization this ended
last week.
During the meeting, this organization discovered that you have not received your
funds due to past corrupt Governmental Officials who almost held the fund to
themselves for their selfish reason and some individuals who have taken advantage of
your fund all in an attempt to swindle your fund which has led to so many losses
from your end and unnecessary delay in the release of your fund.
The International Community Board Committee enhanced by the United Nations/ U.S.
Department of State and Africa Union Organization have successfully passed a payment
mandate to our bank, to clear all over due Contract funds, Lottery winnings and
Inheritance funds owed to you and other individuals and organizations who have been
found not to have receive their funds.
A woman by name (MRS: CINDY MAY) came to our office with an application stating that
you gave her the power of attorney to be the beneficiary of your Outstanding funds.
She made us to believe that you are dead and that she is your next of kin. We
decided to send you email through this address hoping to find out if you are dead or
alive and also to find out if you at any time gave this woman the power of attorney
to represent you. We are almost ready to transfer part payment of $21.5M USD of your
outstanding funds to her nominated bank account stated below:
NAME OF BANK: FIRST NATIONAL BANK
ADDR: 120 SO. 2nd. ST. BLYTHEVILLE
ARKANSAS 72315 USA
ACCOUNT NUMBER: 482986
ROUTING NUMBER: 084107343
Swift code: WMSBUS66
BENEFICIARY: CINDY MAY
For immediate transfer of your funds to you in your country, you are required to
send your YOUR FULL NAME, CURRENT ADDRESS, CELL PHONE AND FAX NUMBER.You have 48hrs
from now to contact our Foreign payment officer with the requested Information on
his direct contact information stated below here In UK for onward transferring of
your fund to you as the legal recipient.
Name: Douglas Flint
Direct Phone No: +44-704-5734492
Fax Number: + 44-870-9741509
Email: [email protected]
Yours Sincerely,
Mr. Alex Hungate.
HSBC BANK PLC LONDON.
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces
