[email protected] Dr. Vincent Riso

Return-path: <[email protected]>
Envelope-to:
Delivery-date: Fri, 14 Apr 2017 06:54:15 -0700
Received: from [118.114.252.169] (port=19505 helo=ivtcmail1.cdivtc.com)
by with esmtps (TLSv1:AES128-SHA:128)
(Exim 4.88)
(envelope-from <[email protected]>)
id 1cz1ft-0000vJ-8O
for ; Fri, 14 Apr 2017 06:54:15 -0700
Received: from User (41.79.217.131) by ivtcmail1.cdivtc.com (10.35.10.25) with
Microsoft SMTP Server id 14.2.247.3; Thu, 13 Apr 2017 16:21:47 +0800
Reply-To: <[email protected]>
From: "Mr. Jean Herman" <[email protected]>
Date: Thu, 13 Apr 2017 09:21:32 +0100
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Message-ID: <[email protected]>
To: Undisclosed recipients:;
X-Originating-IP: [41.79.217.131]
X-Spam-Status: Yes, score=39.0
X-Spam-Score: 390
X-Spam-Bar: +++++++++++++++++++++++++++++++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: HELLO! DEAR! GOOD NEWS TO YOU, This is to inform you that
the America Embassy office has instructed us to released your outstanding
payment of US$ 2.500, 000.00 Million, for compensating all the SCAM VICTIMS,
[...]

Content analysis details: (39.0 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
1.6 BILLION_DOLLARS BODY: Talks about lots of money
0.6 URG_BIZ BODY: Contains urgent matter
0.0 NSL_RCVD_FROM_USER Received from User
0.0 FSL_CTYPE_WIN1251 Content-Type only seen in 419 spam
4.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[118.114.252.169 listed in bb.barracudacentral.org]
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[118.114.252.169 listed in psbl.surriel.com]
4.4 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[118.114.252.169 listed in zen.spamhaus.org]
3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
[41.79.217.131 listed in zen.spamhaus.org]
3.3 RCVD_IN_SBL_CSS RBL: Received via a relay in Spamhaus SBL-CSS
1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?118.114.252.169>]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(mherman183[at]yahoo.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
1.8 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/)
0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source
[118.114.252.169 listed in dnsbl.sorbs.net]
0.0 FSL_NEW_HELO_USER Spam's using Helo and User
2.0 RDNS_NONE Delivered to internal network by a host with no rDNS
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
0.0 AXB_XMAILER_MIMEOLE_OL_024C2 Yet another X header trait
0.0 LOTS_OF_MONEY Huge... sums of money
0.0 T_HK_NAME_MR_MRS No description available.
2.1 FREEMAIL_FORGED_REPLYTO Freemail in Reply-To, but not From
1.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 MONEY_FRAUD_3 Lots of money and several fraud phrases
X-Spam-Flag: YES
Subject: ***SPAM*** GOOD NEWS TO YOU!!!!


HELLO! DEAR! GOOD NEWS TO YOU,

This is to inform you that the America Embassy office has instructed us to released
your outstanding payment of US$ 2.500, 000.00 Million, for compensating all the SCAM
VICTIMS,


We have successfully converted this total amount into an ATM Card in your name,

And it has been approved and deposited to A.D.L Express Courier Delivery Company
this morning for registration, and we agreed up that, the delivery of your
$2.500,000.00 Million USD ATM Package will take off tomorrow morning,

The information of the A.D.L Express Courier Delivery Company is below;

Contact Name Dr. Vincent Riso
From A.D.L Express Courier Delivery Company
Email: [email protected]
Tel: +229-985-679-87

So contact with your full info where your ATM card will be delivered to,

(1) Full Name:..........
(2) Mobile Number:.............
(3) Direct telephone number:............
(4) Country of origin:......................
(5) Your Current delivery address:................
(6) YOUR Identification Card/Driver's License:...............................


NOTE: WITH YOUR CORRECT AND VALID DETAILS. ALSO, BE INFORMED THAT THE
AMOUNT TO BE PAID NOW VIA THE ATM CARD IS $2.5 MILLION DOLLARS.

We expect your urgent response to this e-mail to enable us monitor this
payment effectively,


Urgent get back to us immediately with your full address where your ATM card will be
delivered to, because I will not be in the office next week;
The amount in your Card is US$ 2.500, 000.00 Million and your Pin code is: (9206).

Best Regards,
Mr. Jean Herman
IMF Head Quarter Dept Reconciliation Committee
Benin Republic