Nigerian Google Gmail spam

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Thu, 04 Jul 2024 06:24:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sPLUi-00000000FwI-2IvN

for dave@doctor.nl2k.ab.ca;

Thu, 04 Jul 2024 06:23:24 -0600

Resent-From: The Doctor

Resent-Date: Thu, 4 Jul 2024 06:23:24 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-oa1-f66.google.com ([209.85.160.66]:56435)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.97.1 (FreeBSD))

(envelope-from )

id 1sPIH0-00000000Lgy-2KkF

for doctor@doctor.nl2k.ab.ca;

Thu, 04 Jul 2024 02:57:08 -0600

Received: by mail-oa1-f66.google.com with SMTP id 586e51a60fabf-25caf76158cso287864fac.0

for ; Thu, 04 Jul 2024 01:55:08 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20230601; t=1720083302; x=1720688102; darn=doctor.nl2k.ab.ca;

h=to:subject:message-id:date:from:reply-to:mime-version:from:to:cc

:subject:date:message-id:reply-to;

bh=tqjATcu8WQ5o6UZXHP9QvvpMpuoMMlOs4ISQOREf81M=;

b=U8F33iUvSAfcnFubV3Oi9JhyRJ0LrfH1zlN1WjsVACojTNIB7VOWpp3rFR62GEUmpq

Lysm32HAMu+5KwhEwb3lgXqbhW7Ln1D7/m4n5oleJgeyyKO5tfUJvk4IpfQbx/bN4kQ0

x/nnFwdghqIryUcyWzWCwhampp6YIzJi+ZrtfDdLvpq7uGJ+hE3tg2Y2A2/+dhLafArf

OJF6hZ5R735rmLnorbUuFXvBDK4ZHCFP+5m7qKy3hCxEqAEuHKCtJOoAWCXvCXP+moTt

42XyexwxQxVzh4kJVQSZTgyWpxc1mWaVclktoWqQzNuFAcjOwlNZUgVwM/57USvnd3EW

zj0g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20230601; t=1720083302; x=1720688102;

h=to:subject:message-id:date:from:reply-to:mime-version

:x-gm-message-state:from:to:cc:subject:date:message-id:reply-to;

bh=tqjATcu8WQ5o6UZXHP9QvvpMpuoMMlOs4ISQOREf81M=;

b=ndRtGGRbg1YltwCumzLdU6a16Zc8y2r/MHBdgVVsHHdXIQaAc40auZJpa39h8QoBnE

FgiWOyfVIwhVlBkoJGZFq7Y5X7lYhuRFjbLV819IsYhRBKoQAjlWkmFmI7oKD2hxVli7

49nXqnpC55u+MiUHLJJZItMVFyTyo8y+KAWwZ8rAmKqLKa+y91fjEDhXmkFqbYDMVFdK

diDu5FQ0p/M10ZFefyJMCAMDmeeo/FhoAl9uVevbWZ4b+r+tId4d/FCAREzdj47g0yMi

jsfMvOE9/J3Pp4XcBJYT+qXDyDiOUwS5cZzyFj+wlbh2UV5hQJ+ZTP2i1haJsz6iCwrm

xPLg==

X-Forwarded-Encrypted: i=1; AJvYcCVcqGpkH0dINZHoKfRDyV6jYNz7kD/+VEsywpl0YY/DlHAC9FnI0x/Esbf2GA4tQwRFA3Xg2a9qnZfvVwJQR/RMfYRr0avfX2U=

X-Gm-Message-State: AOJu0Yy67jRVpUJ9WAKtglPaWwWjbDJ8z92xXFleEuSn2NKIRLT7O6Ue

5oJ9265hOkiKACLsbupUYfCvM1+9iIs9mT84iMO0yWqvF8faNUcahWsbkTHaFFN1I9GzYt0Gsx5

HKIY/CVt2HVhHaAHcrXvLk8jFRU0=

X-Google-Smtp-Source: AGHT+IG9Inqa8xRDMBSXs37FxQY7IPTKZ5wsPh6bPDVnTScOkIHS3bfSzxGPbRWNsJrmPXdsxmAYK9VvuFyhaSsCDdY=

X-Received: by 2002:a05:6870:2114:b0:254:94a4:35d2 with SMTP id

586e51a60fabf-25e2bea668amr912301fac.45.1720083301179; Thu, 04 Jul 2024

01:55:01 -0700 (PDT)

MIME-Version: 1.0

Reply-To: ucndf12@gmail.com

From: Derrick Jeffrey

Date: Thu, 4 Jul 2024 09:54:50 +0100

Message-ID:

Subject: Good Day

To: undisclosed-recipients:;

Content-Type: multipart/alternative; boundary="00000000000026a784061c681a53"

Bcc: doctor@doctor.nl2k.ab.ca

X-Spam_score: 16.9

X-Spam_score_int: 169

X-Spam_bar: ++++++++++++++++

X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",

has identified this incoming email as possible spam. The original

message has been attached to this so you can view it or label

similar future email. If you have any questions, see

@@CONTACT_ADDRESS@@ for details.



Content preview: Assistant Director Inspection Unit Charlotte Douglas International

Airport North Carolina 5651 Josh Birmingham Parkway Charlotte, NC 28208,

United States Good Day I am Mr. Derrick Jeffrey a former US Army Contractor

presently working as the Assistant Director Inspection Unit of Charlotte

Douglas International Airport North Carolina USA. During our recent inspec

[...]



Content analysis details: (16.9 points, 5.0 required)



pts rule name description

---- ---------------------- --------------------------------------------------

1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org

[209.85.160.66 listed in dnsbl.ahbl.org]

[209.85.160.66 listed in dnsbl.ahbl.org]

[209.85.160.66 listed in dnsbl.ahbl.org]

[209.85.160.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org

[209.85.160.66 listed in dnsbl.ahbl.org]

0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org

[209.85.160.66 listed in dnsbl.ahbl.org]

1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org

[209.85.160.66 listed in dnsbl.ahbl.org]

0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org

[209.85.160.66 listed in dnsbl.ahbl.org]

1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

[209.85.160.66 listed in will-spam-for-food.eu.org]

-0.0 SPF_PASS SPF: sender matches SPF record

-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature

0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid

-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from

envelope-from domain

-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's

domain

1.5 GR_DOMAIN_UNDISC1 To contains undisclosed recipient (undisc)

-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)

[209.85.160.66 listed in wl.mailspike.net]

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no

trust

[209.85.160.66 listed in list.dnswl.org]

0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider

[fatimaalayu(at)gmail.com]

0.2 FREEMAIL_REPLYTO_END_DIGIT Reply-To freemail username ends in digit

[ucndf12(at)gmail.com]

0.0 HTML_MESSAGE BODY: HTML included in message

0.0 LOTS_OF_MONEY Huge... sums of money

-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders

1.5 MONEY_ATM_CARD Lots of money on an ATM card

1.0 MONEY_FREEMAIL_REPTO Lots of money from someone using free email?

1.0 FREEMAIL_REPLYTO Reply-To/From or Reply-To/body contain different

freemails

3.1 UNDISC_FREEM Undisclosed recipients + freemail reply-to

1.8 ADVANCE_FEE_4_NEW_MONEY Advance Fee fraud and lots of money

0.0 T_FILL_THIS_FORM_SHORT Fill in a short form with personal information

0.7 UNDISC_MONEY Undisclosed recipients + money/fraud signs

1.3 MONEY_FORM_SHORT Lots of money if you fill out a short form

Subject: {SPAM?} Good Day



--00000000000026a784061c681a53

Content-Type: text/plain; charset="UTF-8"



Assistant Director Inspection Unit Charlotte

Douglas International Airport

North Carolina 5651 Josh Birmingham

Parkway Charlotte,

NC 28208, United States





Good Day





I am Mr. Derrick Jeffrey a former US Army Contractor presently working as

the Assistant Director Inspection Unit of Charlotte Douglas International

Airport North Carolina USA. During our recent inspection a package

containing an ATM card was found. I discovered the abandoned shipment left

by a Courier Service agent who was supposed to deliver these package to you

but failed to provide necessary clearances papers needed by the US Customs

and when scanned we discover that the ATM card contains a huge amount of

the sum of $16.5M with other vital documents . The consignment was

abandoned because the Contents of the consignment was not properly declared

by the consignee as "MONEY" rather it was declared as personal effect to

avoid diversion by the Shipping Agent and also the inability to summit a

clearance certificate requested by the US Custom.





Further finding reveal that the Director of Charlotte Douglas International

Airport North Carolina , has contacted you and the consignment is still

left at our Storage House here at Charlotte Douglas International Airport

North Carolina till date which was delivered through a registered shipping

Company known as UPS Courier Services a division of Tran guard LTD.

Approximately, the details of the consignment includes your name, your

email address and the official yellow tag document are all tagged on the

parcel.





However, to enable me confirm if you are the actual recipient of this

consignment, I will advise you to provide your current Phone Number and

Full Address, to enable me to crosscheck if it corresponds with the address

on the official documents including the name of nearest Airport around your

city and other details. Please note that we have made arrangements to

release your ATM card worth $16.5M to you immediately. You provide all the

necessary requirements for the delivery of your ATM card and also remit the

sum of $395.00 charged for Custom clearance fee. So by this letter, you are

advised to re-confirm to me the followings:



(1) Your House Address

(2) Your working Telephone and Fax numbers for easy communication.





Take note that this consignment is supposed to have been returned to the

United States Treasury Department as unclaimed delivery due to the delays

in concluding on the clearance processes. Once I confirm you as the actual

recipient of the parcel, and you send in the sum of $395.00 charged for the

Custom clearance fee, within 27 hours upon the receiver of the fee your

parcel will be delivered to you. And also make sure you reply on this

email: ucndf12@gmail.com





Thanks.





Mr. Derrick Jeffrey

Assistance Inspection Director



--00000000000026a784061c681a53

Content-Type: text/html; charset="UTF-8"

Content-Transfer-Encoding: quoted-printable



Assistant Director Inspection Unit Charlotte
Douglas I=

nternational Airport
North Carolina 5651 Josh Birmingham
Parkway =C2=

=A0Charlotte,
NC 28208, United States


Good Day


I a=

m Mr. Derrick Jeffrey a former US Army Contractor presently working as the =

Assistant Director Inspection Unit of Charlotte Douglas International Airpo=

rt North Carolina USA. During our recent inspection a package containing an=

ATM card was found. I discovered the abandoned shipment left by a Courier =

Service agent who was supposed to deliver these package to you but failed t=

o provide necessary clearances papers needed by the US Customs and when sca=

nned we discover that the ATM card contains a huge amount of the sum of $16=

.5M with other vital documents . The consignment was abandoned because the =

Contents of the consignment was not properly declared by the consignee as &=

quot;MONEY" rather it was declared as personal effect to avoid diversi=

on by the Shipping Agent and also the inability to summit a clearance certi=

ficate requested =C2=A0by the US Custom.


Further finding reveal =

that the Director of Charlotte Douglas International Airport =C2=A0North Ca=

rolina , has contacted you and the consignment is still left at our Storage=

House here at Charlotte Douglas International Airport =C2=A0North Carolina=

till date which was delivered through a registered shipping Company known =

as UPS Courier Services a division of Tran guard LTD. Approximately, the de=

tails of the consignment includes your name, your email address and the off=

icial yellow tag document are all tagged on the parcel.


However,=

to enable me confirm if you are the actual recipient of this consignment, =

I will advise you to provide your current Phone Number and Full Address, to=

enable me to crosscheck if it corresponds with the address on the official=

documents including the name of nearest Airport around your city and other=

details. Please note that we have made arrangements to release your ATM ca=

rd worth $16.5M to you immediately. You provide all the necessary requireme=

nts for the delivery of your ATM card and also remit the sum of $395.00 cha=

rged for Custom clearance fee. So by this letter, you are advised to re-con=

firm to me the followings:

(1) Your House Address
(2) Your workin=

g Telephone and Fax numbers for easy communication.


Take note th=

at this consignment is supposed to have been returned to the United States =

Treasury Department as unclaimed delivery due to the delays in concluding o=

n the clearance processes. Once I confirm you as the actual recipient of th=

e parcel, and you send in the sum of $395.00 charged for the Custom clearan=

ce fee, within 27 hours upon the receiver of the fee your parcel will be de=

livered to you. And also make sure you reply on this email:
to:ucndf12@gmail.com">ucndf12@gmail.com



Thanks.


M=

r. Derrick Jeffrey
Assistance Inspection Director




--00000000000026a784061c681a53--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA