[email protected] Mrs. Melenia Trump

[buried under 419s]

Return-Path: <[email protected]>
Delivered-To:
Received: from
by with LMTP id GD2pJDX4w1rJRwAAjbubUg
for <>; Tue, 03 Apr 2018 14:55:01 -0700
Return-path: <[email protected]>
Envelope-to:
Delivery-date: Tue, 03 Apr 2018 14:55:01 -0700
Received: from mail-lf0-f66.google.com ([209.85.215.66]:42134)
by with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.89)
(envelope-from <[email protected]>)
id 1f3TtJ-0004lf-2V
for ; Tue, 03 Apr 2018 14:55:01 -0700
Received: by mail-lf0-f66.google.com with SMTP id q9-v6so2843780lfk.9
for <>; Tue, 03 Apr 2018 14:54:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:reply-to:frommessage-id:subject:to;
bh=sleRCiIDrW1oMNe2Wq4mtENDKR8F6jhAJiHUbQxAd00=;
b=bC5szGKst/3mdgvx74CiZ7yB40VfCfmQ2/3CFJAVBtvgwc9Venn6ZaOZwNoApE4tKq
oTlxYix8eURT6tc9RwhTm1PMvv5Ms8nl3jKJQuhGwDPgjBHAJPxdhqDlH4Ykm2aePwHB
RynoNgIGtCnKOMsFcHAqmwK5lKqQDg5eXkauh2qaypUtOKA/Fu8bS6k9xMfFrm5mrqEE
W+T0C+kjVTghcqwUsdYeVW+JhrbUaOxpP1htcoR7vI/yR9OMKZ4iyxsI8g5NvAhD0R0V
xlSq3zNASNQkYSAMTGS8cp1+ZujYBtEVO4uvMeIY/F6ovGiipRax8i2Ef+u+n+8X7Y0p
/b0Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:reply-to:frommessage-id
:subject:to;
bh=sleRCiIDrW1oMNe2Wq4mtENDKR8F6jhAJiHUbQxAd00=;
b=A5d9DObexlbVN683rSKr9Ll0+EU9423MZ3MYvFMz5VkS6tZSV+ITbUwyIS71CywEq2
B7BYMOaPtJI/tp4gKFDxp11p8KRX690gbkpC8+NnuyRxgOn8MZqkHeTDytkVYLLvF8pP
v3cxRWG993yBNbGA68m7pDJ5RkZY0zG8YWDyyvaumKr49eaZPKk9MS10C2LaFi4bOkas
cQfI3970eW73VusMC+oXbM2GmJBDKhYWw+886PJCWm2NBbCMv/hFp5VCg2qowO2Z4wmI
1YZTA5VeCjfY+znaSw1ita5t9/j+w0AIzSiVsmH2Duj/2KS9VUYuuHF37afe46oB6QV0
ITKA==
X-Gm-Message-State: ALQs6tBl9hu2N7U97oVzBRvBKz+eCTcHSOKILGTr/+VicWYeWNrXlOb9
A/a+0yNk3Agva+ZiyIKjobPhtOC1eJLh0dkK0fo=
X-Google-Smtp-Source: AIpwx48Ab9C46fNp4sJohPDkfFGNHKfaLjL62t2RHqPStjEF7iZW4/oMo8FWWpLN0C/Wiz4N1Cp44+VrDoBPvAV7Ju4=
X-Received: by 10.46.70.18 with SMTP id t18mr9956601lja.62.1522792454434; Tue,
03 Apr 2018 14:54:14 -0700 (PDT)
MIME-Version: 1.0
Received: by 2002:a19:6352:0:0:0:0:0 with HTTP; Tue, 3 Apr 2018 14:54:13 -0700 (PDT)
Reply-To: [email protected]
From: "Mrs. Melenia Trump" <[email protected]>
Date: Tue, 3 Apr 2018 22:54:13 +0100
Message-ID: <CANP6_0=as-mhXUCbzaXfH1=sSpkO=[email protected]>
To: undisclosed-recipients:;
Content-Type: text/plain; charset="UTF-8"
Bcc:
X-Spam-Status: Yes, score=11.6
X-Spam-Score: 116
X-Spam-Bar: +++++++++++
X-Spam-Report: Spam detection software, running on the system "",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.

Content preview: FROM DESK OF MRS. MELANIA TRUMP. CONGRATULATION. I'M MRS.
MELANIA TRUMP AND AM WRITING TO INFORM YOU ABOUT YOUR ATM CARD AND BANK CHEQUE
DRAFT BROUGHT BY THE UNITED EMBASSY FROM THE GOVERNMENT OF NIGERIA IN THE
WHITE HOUSE WASHINGTON DC WHICH CONTAINS THE SUM OF $13.4MILLIONS US DOLLARS
CREDITED FROM THE BANK OF AMERICA. THE DELIVERY OF YOUR FUNDS HAS BEEN MANDATED
TO BE POSTED TO YOUR ADDRESS THURSDAY 29TH MARCH 2018 TO YOU AS SOON AS YOU
GET BACK TO ME WITH YOUR HOME ADDRESS AND YOUR CELL PHONE NUMBERS. [...]

Content analysis details: (11.6 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
5.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.215.66 listed in wl.mailspike.net]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.215.66 listed in list.dnswl.org]
0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit
(melaniatrump.001[at]gmail.com)
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
(rev.fredcollins2009[at]gmail.com)
0.2 FREEMAIL_ENVFROM_END_DIGIT Envelope-from freemail username ends in
digit (rev.fredcollins2009[at]gmail.com)
1.5 SUBJ_ALL_CAPS Subject is all capitals
-0.0 SPF_PASS SPF: sender matches SPF record
1.0 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
[score: 1.0000]
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.0 T_HK_NAME_FM_MR_MRS No description available.
0.0 UPPERCASE_75_100 message body is 75-100% uppercase
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
0.0 LOTS_OF_MONEY Huge... sums of money
1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different
freemails
2.7 MONEY_ATM_CARD Lots of money on an ATM card
0.0 FILL_THIS_FORM Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LOAN Answer loan question(s)
0.0 T_FILL_THIS_FORM_FRAUD_PHISH Answer suspicious question(s)
0.0 ADVANCE_FEE_3_NEW_FRM_MNY Advance Fee fraud form and lots of money
X-Spam-Flag: YES
Subject: ***SPAM*** FROM DESK OF MRS. MELANIA TRUMP. CONGRATULATION.


FROM DESK OF MRS. MELANIA TRUMP. CONGRATULATION.

I'M MRS. MELANIA TRUMP AND AM WRITING TO INFORM YOU ABOUT YOUR ATM
CARD AND BANK CHEQUE DRAFT BROUGHT BY THE UNITED EMBASSY FROM THE
GOVERNMENT OF NIGERIA IN THE WHITE HOUSE WASHINGTON DC WHICH CONTAINS
THE SUM OF $13.4MILLIONS US DOLLARS CREDITED FROM THE BANK OF AMERICA.
THE DELIVERY OF YOUR FUNDS HAS BEEN MANDATED TO BE POSTED TO YOUR
ADDRESS THURSDAY 29TH MARCH 2018 TO YOU AS SOON AS YOU GET BACK TO ME
WITH YOUR HOME ADDRESS AND YOUR CELL PHONE NUMBERS.

SO YOU ARE REQUIRED TO GET BACK TO ME WITH THE FOLLOWING ADDRESS.

(1) YOUR FULL NAME=============
(2)MOBILE PHONE NUMBER=============
(3)CURRENT HOME ADDRESSS=============

BEAR IN MIND THAT I HAVE TAKING MY TIME TO BE IN CHARGE OF YOUR FUNDS
AS INSTRUCTED BY MY HUSBAND TO ENSURE THAT YOU RECEIVED YOUR FUNDS
SUCCESSFULLY FROM THE WHITE HOUSE TO REDUCE THE ECONOMY AND I'M THE
ONLY ONE THAT HAS YOUR FUNDS IN REGARD TO MY HUSBAND MR. DONALD JOHN
TRUMP AND YOU WILL HAVE TO PAY THE SUM OF $155 ONLY BEFORE YOUR ATM
CARD WILL BE DELIVERED TO YOU TOMORROW.THE REASON WHY THE FEE IS
REQUIRED IS TO HAVE YOUR FUNDS CLEARANCE PAPER FROM THE ORIGIN OF THE
FUNDS TO AVOID ANY HARASSMENT FROM THE AUTHORITY AND YOU ARE ALSO
EXPECTED TO BE ANNOUNCED AS WINNER OF THE SAID AMOUNT BY THURSDAY AS
SOON AS YOUR FUNDS IS DELIVERED TO YOU.

SO YOU ARE URGENT ADVISED TO GET BACK TO ME WITH YOUR HOME ADDRESS AND
ALSO THE PAYMENT INFORMATION TODAY FOR IMMEDIATE EFFECT OF YOUR
DELIVERY. PLEASE I WILL ADVICE YOU TO URGENT MAKE THE PAYMENT THIS
MORNING VIA MONEY GRAM OR WESTERN UNION MONEY TRANSFER TO THE ABOVE
LISTED CASHIER INFORMATION AS GIVEN. I WILL LOOK FORWARD TO RECEIVED
YOUR EMAIL TODAY WITH THE PAYMENT TO ENABLE ME GET THE REQUIRED
CLEARANCE PAPERS REQUIRED AT WHITE HOUSE TO DELIVER YOUR FUNDS. NOTE
THAT THE FEE IS TO BE FORWARDED TO THE FUNDS ORIGIN AS INSTRUCTED AND
TRY TO MAKE THE PAYMENT THROUGH MONEY GRAM OR WESTERN UNION.

PLEASE FIND THE PAYMENT DATA BELLOW.

RECEIVER NAME.......DIKACHI OGBUAGU
COUNTRY......NIGERIA.
CITY......LAGOS
QUESTION.....IN GOD
ANSWER.......WE TRUST
AMOUNT.....$155
MTCN..,?
SENDER NAME AND ADDRESS..?

I LOOK FORWARD TO YOUR RESPOND TO YOUR EMAIL WITH THE PAYMENT TODAY.

REGARD
MRS. MELANIA TRUMP