Exhibition Phish from Google Gmail
Posted by Dave Yadallee on
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 16 Oct 2024 14:56:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from)
id 1t1B3D-00000000GWa-3VXQ
for dave@doctor.nl2k.ab.ca;
Wed, 16 Oct 2024 14:55:23 -0600
Resent-From: The Doctor
Resent-Date: Wed, 16 Oct 2024 14:55:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f182.google.com ([209.85.210.182]:45204)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from)
id 1t1AGt-000000006R2-1FPC
for doctor@nl2k.ab.ca;
Wed, 16 Oct 2024 14:05:31 -0600
Received: by mail-pf1-f182.google.com with SMTP id d2e1a72fcca58-71e49ef3b2bso125342b3a.2
for; Wed, 16 Oct 2024 13:03:31 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1729109006; x=1729713806; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=w7z6BTDabEwDXsqpOiZvYwoo/cb2y9gZa3JEHD1ZV54=;
b=Ea/wx1x/bafaY/LA1rQ4w9cp64162hs0lac6UxEkNa7Bz1H91ZyEWOchwSFVvC4N7Z
w3x+dXdnXypoEjjOXe8KKC1CIouM/dgRjnY/l9Q2Cx3qfavwmN5uv1e62E3qnIgxiGSq
s6RE2ScUw/3qF1XoPKrdRksX7JUlgHSWrwGFNC1yPuDs0oIdoFHr68SKIaC+qgAFSRbs
H13MQ1IL3sZXHgxTKNuiBngvv5wBzP8BCcmSftscXE2PYeWP/gyKj5FZ0vLGm01UdgX7
7DRnY2AdXUY/xbMTuudMX4oAWwlUnLXG7/hkiCHZG8niGpy0TLgMUlZJPr6z7jTMep2x
mihA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1729109006; x=1729713806;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=w7z6BTDabEwDXsqpOiZvYwoo/cb2y9gZa3JEHD1ZV54=;
b=YlbV/KaYgLs2Y/iT2EklVNaaoWS9fnifV7W8xq+fUZmlfN0Z79cusc7GXCXZDQnbzt
FMO+3JyrjA2yFC2fIo8LS3UjVIx4B4OdhYCSay1zMoIA9a86dg36WKR6o8N/a1ZVQnUh
MjU4aEc9o9fBF6kSqE4pbyq/0jIU6THyVdU6mhGn7WZMokcnFJyrPO6BflT6o6cGOvyN
FYiqpU98qBUREnC7RcC2XwqHpQ4+HAb6r079tdSi27Ac1ZSG6ekhMHHx7yIvC8GcY17v
sPM2i4AtJapqO7+omYuiQsGIVCrZN2t9KcbBDuHKFjYO1svipogJPL4OnaHwhUPBOSHX
0Y/w==
X-Gm-Message-State: AOJu0YyQ/OF86gi8BKx1W/gdevh5JC5MOb37+CrDNEwmTdctFjuzR29M
SMsRBDbLJLvbqirCRECT/ovE0UpQWp2cx5XCB61ijMsfiDHnhsI73WGji1Tz8A4iQgSCfs7i8K9
ZslG2C1CQTFdiYDgx0O1SxfcT4elVxg==
X-Google-Smtp-Source: AGHT+IGE7gK6shRsa0MAAre6WXuu2L7v2Q8W+RWnN2w4DD1AqzbWInwyjA29CapsV7HsWiBL8HTe6E6GaA2xdLU+XSE=
X-Received: by 2002:a17:90a:cb84:b0:2e2:c00c:cb79 with SMTP id
98e67ed59e1d1-2e2f0a36616mr20406328a91.3.1729084311970; Wed, 16 Oct 2024
06:11:51 -0700 (PDT)
MIME-Version: 1.0
From: Chole Chole
Date: Wed, 16 Oct 2024 18:41:39 +0530
Message-ID:
Subject: West Coast Christmas Show Contact List
To: doctor@nl2k.ab.ca
Content-Type: multipart/alternative; boundary="00000000000033a8c9062497d0c8"
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Hope you are doing well! Offer: Discounted cost & additional
information.
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
[209.85.210.182 listed in dnsbl.ahbl.org]
[209.85.210.182 listed in dnsbl.ahbl.org]
[209.85.210.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.182 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.182 listed in wl.mailspike.net]
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[choleweltondatasolutions(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
Subject: {SPAM?} West Coast Christmas Show Contact List
--00000000000033a8c9062497d0c8
Content-Type: text/plain; charset="UTF-8"
Hi,
Hope you are doing well!
Offer: Discounted cost & additional information.
We are following up to confirm if you are interested in acquiring the
*Visitors/Attendees
List*.
Events Name: West Coast Christmas Show 2024
Date: 15 - 17 Nov 2024
*Location*: Tradex - Trade & Exhibition Centre, Abbotsford, Canada
Counts:13,385
Each record of the list contains: Each record of the list contains: Contact
Name, Email Address, Company Name, URL/Website, Phone No,
Title/Designation.
If you are interested in acquiring the list, we can Send you the Discounted
cost and additional details.
Awaiting your positive response.
Thanks & Regards,
Chole
--00000000000033a8c9062497d0c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
Normal">
reSanitizer__Hlk172073541">
;font-family:"Calibri",sans-serif;color:#0a2f41">Hi,
p>
Normal">
Calibri",sans-serif;color:#0a2f41">We are following up to confirm if y=
ou are interested in
acquiring the Visitors/Attendees List.
al">
bri",sans-serif;color:#0a2f41">
rgin-bottom:0in">
amily:"Calibri",sans-serif;color:#0a2f41;background:yellow">Count=
s:13,385
-family:"Calibri",sans-serif;color:#0a2f41">
ss=3D"MsoNormal" style=3D"margin-bottom:0in">
.0pt;line-height:115%;font-family:"Calibri",sans-serif;color:#0a2=
f41">=C2=A0
s=3D"MsoNormal">
y:"Calibri",sans-serif;color:#0a2f41">Thanks & Regards,
>
X-Mozilla-Status2: 00000000
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Wed, 16 Oct 2024 14:56:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.98 (FreeBSD))
(envelope-from
id 1t1B3D-00000000GWa-3VXQ
for dave@doctor.nl2k.ab.ca;
Wed, 16 Oct 2024 14:55:23 -0600
Resent-From: The Doctor
Resent-Date: Wed, 16 Oct 2024 14:55:23 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f182.google.com ([209.85.210.182]:45204)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.98 (FreeBSD))
(envelope-from
id 1t1AGt-000000006R2-1FPC
for doctor@nl2k.ab.ca;
Wed, 16 Oct 2024 14:05:31 -0600
Received: by mail-pf1-f182.google.com with SMTP id d2e1a72fcca58-71e49ef3b2bso125342b3a.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1729109006; x=1729713806; darn=nl2k.ab.ca;
h=to:subject:message-id:date:from:mime-version:from:to:cc:subject
:date:message-id:reply-to;
bh=w7z6BTDabEwDXsqpOiZvYwoo/cb2y9gZa3JEHD1ZV54=;
b=Ea/wx1x/bafaY/LA1rQ4w9cp64162hs0lac6UxEkNa7Bz1H91ZyEWOchwSFVvC4N7Z
w3x+dXdnXypoEjjOXe8KKC1CIouM/dgRjnY/l9Q2Cx3qfavwmN5uv1e62E3qnIgxiGSq
s6RE2ScUw/3qF1XoPKrdRksX7JUlgHSWrwGFNC1yPuDs0oIdoFHr68SKIaC+qgAFSRbs
H13MQ1IL3sZXHgxTKNuiBngvv5wBzP8BCcmSftscXE2PYeWP/gyKj5FZ0vLGm01UdgX7
7DRnY2AdXUY/xbMTuudMX4oAWwlUnLXG7/hkiCHZG8niGpy0TLgMUlZJPr6z7jTMep2x
mihA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1729109006; x=1729713806;
h=to:subject:message-id:date:from:mime-version:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=w7z6BTDabEwDXsqpOiZvYwoo/cb2y9gZa3JEHD1ZV54=;
b=YlbV/KaYgLs2Y/iT2EklVNaaoWS9fnifV7W8xq+fUZmlfN0Z79cusc7GXCXZDQnbzt
FMO+3JyrjA2yFC2fIo8LS3UjVIx4B4OdhYCSay1zMoIA9a86dg36WKR6o8N/a1ZVQnUh
MjU4aEc9o9fBF6kSqE4pbyq/0jIU6THyVdU6mhGn7WZMokcnFJyrPO6BflT6o6cGOvyN
FYiqpU98qBUREnC7RcC2XwqHpQ4+HAb6r079tdSi27Ac1ZSG6ekhMHHx7yIvC8GcY17v
sPM2i4AtJapqO7+omYuiQsGIVCrZN2t9KcbBDuHKFjYO1svipogJPL4OnaHwhUPBOSHX
0Y/w==
X-Gm-Message-State: AOJu0YyQ/OF86gi8BKx1W/gdevh5JC5MOb37+CrDNEwmTdctFjuzR29M
SMsRBDbLJLvbqirCRECT/ovE0UpQWp2cx5XCB61ijMsfiDHnhsI73WGji1Tz8A4iQgSCfs7i8K9
ZslG2C1CQTFdiYDgx0O1SxfcT4elVxg==
X-Google-Smtp-Source: AGHT+IGE7gK6shRsa0MAAre6WXuu2L7v2Q8W+RWnN2w4DD1AqzbWInwyjA29CapsV7HsWiBL8HTe6E6GaA2xdLU+XSE=
X-Received: by 2002:a17:90a:cb84:b0:2e2:c00c:cb79 with SMTP id
98e67ed59e1d1-2e2f0a36616mr20406328a91.3.1729084311970; Wed, 16 Oct 2024
06:11:51 -0700 (PDT)
MIME-Version: 1.0
From: Chole Chole
Date: Wed, 16 Oct 2024 18:41:39 +0530
Message-ID:
Subject: West Coast Christmas Show Contact List
To: doctor@nl2k.ab.ca
Content-Type: multipart/alternative; boundary="00000000000033a8c9062497d0c8"
X-Spam_score: 7.9
X-Spam_score_int: 79
X-Spam_bar: +++++++
X-Spam_report: Spam detection software, running on the system "doctor.nl2k.ab.ca",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
@@CONTACT_ADDRESS@@ for details.
Content preview: Hi, Hope you are doing well! Offer: Discounted cost & additional
information.
Content analysis details: (7.9 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.0 RCVD_IN_WSFF RBL: Received via a relay in will-spam-for-food.eu.org
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
[209.85.210.182 listed in will-spam-for-food.eu.org]
1.5 RCVD_IN_AHBL RBL: AHBL: sender is listed in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
[209.85.210.182 listed in dnsbl.ahbl.org]
[209.85.210.182 listed in dnsbl.ahbl.org]
[209.85.210.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_PROXY RBL: AHBL: Open Proxy server in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
1.5 RCVD_IN_AHBL_SPAM RBL: AHBL: Spam Source in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
0.0 RCVD_IN_AHBL_RTB RBL: AHBL: Real-Time Blocked in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
0.5 RCVD_IN_AHBL_SMTP RBL: AHBL: Open SMTP relay in dnsbl.ahbl.org
[209.85.210.182 listed in dnsbl.ahbl.org]
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
trust
[209.85.210.182 listed in list.dnswl.org]
-0.0 SPF_PASS SPF: sender matches SPF record
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[209.85.210.182 listed in wl.mailspike.net]
1.1 DATE_IN_PAST_06_12 Date: is 6 to 12 hours before Received: date
0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
[choleweltondatasolutions(at)gmail.com]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
2.0 FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 T_FILL_THIS_FORM_LONG Fill in a form with personal information
0.0 FILL_THIS_FORM Fill in a form with personal information
Subject: {SPAM?} West Coast Christmas Show Contact List
--00000000000033a8c9062497d0c8
Content-Type: text/plain; charset="UTF-8"
Hi,
Hope you are doing well!
Offer: Discounted cost & additional information.
We are following up to confirm if you are interested in acquiring the
*Visitors/Attendees
List*.
Events Name: West Coast Christmas Show 2024
Date: 15 - 17 Nov 2024
*Location*: Tradex - Trade & Exhibition Centre, Abbotsford, Canada
Counts:13,385
Each record of the list contains: Each record of the list contains: Contact
Name, Email Address, Company Name, URL/Website, Phone No,
Title/Designation.
If you are interested in acquiring the list, we can Send you the Discounted
cost and additional details.
Awaiting your positive response.
Thanks & Regards,
Chole
--00000000000033a8c9062497d0c8
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
nature" data-smartmail=3D"gmail_signature">
Normal">
reSanitizer__Hlk172073541">
;font-family:"Calibri",sans-serif;color:#0a2f41">Hi,
p>
ont-family:"Calibri",sans-serif;color:#0a2f41">Hope you are doing=
well!
e-height:115%;font-family:"Calibri",sans-serif;color:#0a2f41">Off=
er: Discounted cost & additional information.
Normal">
Calibri",sans-serif;color:#0a2f41">We are following up to confirm if y=
ou are interested in
acquiring the Visitors/Attendees List.
al">
bri",sans-serif;color:#0a2f41">
<=
b>
i",sans-serif;color:#0a2f41">Events Name: West Coast Christmas Show 20=
24
line-height:115%;font-family:"Calibri",sans-serif;color:#0a2f41">=
Date:
y:"Calibri",sans-serif"> 15 - 17=
Nov
2024
e:11.0pt;line-height:115%;font-family:"Calibri",sans-serif;color:=
#0a2f41">Location
%;font-family:"Calibri",sans-serif;color:#0a2f41">: Tradex - T=
rade & Exhibition
Centre, Abbotsford, Canada
rgin-bottom:0in">
amily:"Calibri",sans-serif;color:#0a2f41;background:yellow">Count=
s:13,385
-family:"Calibri",sans-serif;color:#0a2f41">
ss=3D"MsoNormal" style=3D"margin-bottom:0in">
.0pt;line-height:115%;font-family:"Calibri",sans-serif;color:#0a2=
f41">=C2=A0
1.0pt;line-height:115%;font-family:"Calibri",sans-serif;color:#0a=
2f41">Each record of the list contains: Each record of the list
contains: Contact Name, Email Address, Company Name, URL/Website, Phone No,
Title/Designation.
ze:11.0pt;line-height:115%;font-family:"Calibri",sans-serif;color=
:#0a2f41">If you are interested in acquiring the list, we can Send
you the Discounted cost
and additional details.
tyle=3D"font-size:11.0pt;line-height:115%;font-family:"Calibri",s=
ans-serif;color:#0a2f41">Awaiting your positive response.
s=3D"MsoNormal">
y:"Calibri",sans-serif;color:#0a2f41">Thanks & Regards,
>
=C2=A0
=C2=A0Chole
--00000000000033a8c9062497d0c8--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments