by buried under 419s
Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id 8OvNLXh1GlsbXwAAjbubUg
for <>; Fri, 08 Jun 2018 05:24:24 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Jun 2018 05:24:24 -0700
Received: from gw01.mail.saunalahti.fi ([195.197.172.115]:50957)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fRGRK-0006Kj-LG
for ; Fri, 08 Jun 2018 05:24:24 -0700
Received: from cfwo-22-2.mail.saunalahti.fi (cfwo-22.mail.saunalahti.fi [62.142.5.121])
by gw01.mail.saunalahti.fi (Postfix) with ESMTP id 34232402A2
for <>; Fri, 8 Jun 2018 15:23:38 +0300 (EEST)
Received: from localhost (localhost [127.0.0.1])
by cfwo-22-2.mail.saunalahti.fi (Postfix) with ESMTP id EF41320086
for <>; Fri, 8 Jun 2018 15:23:37 +0300 (EEST)
X-Spam-Checker-Version: SpamAssassin 3.3.2-saunamods_5.22 (2011-06-06) on
cfwo-22.mail.saunalahti.fi
X-Spam-Level: *****
Received: from webmail.elisa.fi (wm-web17.stp.saunalahti.fi [195.197.17.77])
by cfwo-22-2.mail.saunalahti.fi (Postfix) with ESMTP id D99F32007E;
Fri, 8 Jun 2018 15:23:31 +0300 (EEST)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 08 Jun 2018 15:23:31 +0300
From: "Dr.Chris Mathew" <[email protected]>
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Elisa Webmail/1.0
X-Originating-IP: 154.118.15.9
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- HSBC BANK,1819 NJ-27, Edison, NJ 08817, USA Head, Special
Diplomatic Payment unit PHONE:701 660 5704. This is to officially inform
you that your US$5Million United State Dollar contract/inheritance payment
in our Bank vault has been approved to be paid to you by the united nations
who gave us the mandate to carry on the payment through special diplomatic
cash payment which will be loaded in an iron suit case loaded with your fund
and delivered to you with full accreditation in your favor. [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dr.chrismathew9327[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[195.197.172.115 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 MILLION_USD BODY: Talks about millions of dollars
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_DR No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.1 MONEY_FORM Lots of money if you fill out a form
2.7 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT INSTRUCTION
--
HSBC BANK,1819 NJ-27, Edison, NJ 08817, USA
Head, Special Diplomatic Payment unit
PHONE:701 660 5704.
This is to officially inform you that your US$5Million United State
Dollar contract/inheritance payment in our Bank vault has been approved
to be paid to you by the united nations who gave us the mandate to carry
on the payment through special diplomatic cash payment which will be
loaded in an iron suit case loaded with your fund and delivered to you
with full accreditation in your favor.
Your Diplomatic Identification Number is 4432.
You are advised to reply with the following information for delivery
of your Suit case containing the fund:
Name, Delivery Address, Phone, Age, Sex, profession and Valid ID.
Upon the confirmation of your details, your loaded suit case will be
organised with full documentation for delivery to you as will be
proposed by the Bank.
You are required to quickly respond urgently without delay.
Thanks and God bless you.
Please reply Immediately
Faithfully yours,
Dr.Chris Mathew
Head, Special Diplomatic Payment unit
HSBC BANK,USA
Delivered-To:
Received: from
by with LMTP id 8OvNLXh1GlsbXwAAjbubUg
for <>; Fri, 08 Jun 2018 05:24:24 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 08 Jun 2018 05:24:24 -0700
Received: from gw01.mail.saunalahti.fi ([195.197.172.115]:50957)
by with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1fRGRK-0006Kj-LG
for ; Fri, 08 Jun 2018 05:24:24 -0700
Received: from cfwo-22-2.mail.saunalahti.fi (cfwo-22.mail.saunalahti.fi [62.142.5.121])
by gw01.mail.saunalahti.fi (Postfix) with ESMTP id 34232402A2
for <>; Fri, 8 Jun 2018 15:23:38 +0300 (EEST)
Received: from localhost (localhost [127.0.0.1])
by cfwo-22-2.mail.saunalahti.fi (Postfix) with ESMTP id EF41320086
for <>; Fri, 8 Jun 2018 15:23:37 +0300 (EEST)
X-Spam-Checker-Version: SpamAssassin 3.3.2-saunamods_5.22 (2011-06-06) on
cfwo-22.mail.saunalahti.fi
X-Spam-Level: *****
Received: from webmail.elisa.fi (wm-web17.stp.saunalahti.fi [195.197.17.77])
by cfwo-22-2.mail.saunalahti.fi (Postfix) with ESMTP id D99F32007E;
Fri, 8 Jun 2018 15:23:31 +0300 (EEST)
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
Date: Fri, 08 Jun 2018 15:23:31 +0300
From: "Dr.Chris Mathew" <[email protected]>
To: undisclosed-recipients:;
Reply-To: [email protected]
Mail-Reply-To: [email protected]
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Elisa Webmail/1.0
X-Originating-IP: 154.118.15.9
X-Spam-Status: Yes, score=12.3
X-Spam-Score: 123
X-Spam-Bar: ++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: -- HSBC BANK,1819 NJ-27, Edison, NJ 08817, USA Head, Special
Diplomatic Payment unit PHONE:701 660 5704. This is to officially inform
you that your US$5Million United State Dollar contract/inheritance payment
in our Bank vault has been approved to be paid to you by the united nations
who gave us the mandate to carry on the payment through special diplomatic
cash payment which will be loaded in an iron suit case loaded with your fund
and delivered to you with full accreditation in your favor. [...]
Content analysis details: (12.3 points, 7.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(dr.chrismathew9327[at]gmail.com)
-0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low
trust
[195.197.172.115 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
1.5 SUBJ_ALL_CAPS Subject is all capitals
0.0 MILLION_USD BODY: Talks about millions of dollars
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_DR No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.1 MONEY_FORM Lots of money if you fill out a form
2.7 ADVANCE_FEE_4_NEW_FRM_MNY Advance Fee fraud form and lots of money
0.3 MONEY_FRAUD_5 Lots of money and many fraud phrases
0.0 FORM_FRAUD_5 Fill a form and many fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** YOUR PAYMENT INSTRUCTION
--
HSBC BANK,1819 NJ-27, Edison, NJ 08817, USA
Head, Special Diplomatic Payment unit
PHONE:701 660 5704.
This is to officially inform you that your US$5Million United State
Dollar contract/inheritance payment in our Bank vault has been approved
to be paid to you by the united nations who gave us the mandate to carry
on the payment through special diplomatic cash payment which will be
loaded in an iron suit case loaded with your fund and delivered to you
with full accreditation in your favor.
Your Diplomatic Identification Number is 4432.
You are advised to reply with the following information for delivery
of your Suit case containing the fund:
Name, Delivery Address, Phone, Age, Sex, profession and Valid ID.
Upon the confirmation of your details, your loaded suit case will be
organised with full documentation for delivery to you as will be
proposed by the Bank.
You are required to quickly respond urgently without delay.
Thanks and God bless you.
Please reply Immediately
Faithfully yours,
Dr.Chris Mathew
Head, Special Diplomatic Payment unit
HSBC BANK,USA
Questions about scams? fraudatiocruor @ gmail.com to contact remove spaces

