Mcafee phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Mar 2024 14:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rnOch-00000000CRx-2kFn
for dave@doctor.nl2k.ab.ca;
Thu, 21 Mar 2024 14:02:47 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 Mar 2024 14:02:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f181.google.com ([209.85.210.181]:55753)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rnJqW-000000000m4-0XYw
for doctor@doctor.nl2k.ab.ca;
Thu, 21 Mar 2024 08:56:47 -0600
Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-6e6afb754fcso959792b3a.3
for; Thu, 21 Mar 2024 07:54:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711032883; x=1711637683; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;
b=M4QCb9OPSlqYGQQamGY/7tExkui2y9vV8Om9xcEEhOq1g3LR2Sa2Fpc16fJU+5bj5Q
RmfWA35POwXheuvwrQ00iBIqAZElzU35Nrumj3QXhCwZC0OQkf9ZfRVQ5TmD4d45nvZV
j5el3RiXV5nhyUm6vw7kTaqtl7CQZnMJybL9JMWZemCbkcsMNd8ixUfGliQM0PCCq80M
b3KuVdRXc7MtaLEPEe6XA1OiHv/tgwe2VaRo7JO0ejT/P3N5JhtR33BMpSAfycM4r/DH
5Vwt3FhKpjdJBI8gmgfoXdudA3+xvJHPyqx5pGZg2lFD9EcvJo7/HgZxRurpQkJYpCnt
bd6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711032883; x=1711637683;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;
b=hVFnHhb/XJ5aKE2k6pfBOOHBtBFuQg3kj3TrWtp5CRzxRNQhy7zYScvW0lkMLTOjOP
k0s5PlDG4e+rvCqc0aE7QNqcVjtJ7+HsnfgkX8Kdrcb2Kfti7SdYpH51iaOf6juHOlhf
PDWmLWz+VmyIJ2K8DZ5puvdrY6osgrvyPYkGxU0th2xPhzrdQ4hzmkeNxEbxEn5cfVdP
7ALpFdBGvqsPIhqITBB1ms7XypizVD0aAyKoZfDH+OdZkl021PhdfdC2oKtB/p+tSHrG
cIb6ZMmp9ODwh2jmjXbtaVWhy6PwhqwXW3Uyl9zLeBSY3xYNejqz9CtUpqB5Wbx0WZc0
9xGQ==
X-Gm-Message-State: AOJu0Yx8SXo70w4+HXwsNG3EXwok3nht9uRXQcsUU3dsWX/W6OGpzrwF
2MFwIOKjLBr+R0QdocSh2qYKp21Hkdc/llxrTpZg/xjPqRMzfVL3N1ZMYkIVFA4/CQ==
X-Google-Smtp-Source: AGHT+IGFGdz1VWyKrJEK4R4FG6PnHxNssOghy6/TkJOipeBL0W+NAp1lYQ9V7r3cY6wndqwyDyTa0w==
X-Received: by 2002:a17:902:784c:b0:1dd:611d:3be3 with SMTP id e12-20020a170902784c00b001dd611d3be3mr5217045pln.17.1711032883159;
Thu, 21 Mar 2024 07:54:43 -0700 (PDT)
Received: from [172.31.0.39] ([124.156.45.65])
by smtp.gmail.com with ESMTPSA id u13-20020a170902e80d00b001def0c700e2sm13523888plg.119.2024.03.21.07.54.42
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 21 Mar 2024 07:54:42 -0700 (PDT)
Message-ID: <65fc4a32.170a0220.a982e.7241@mx.google.com>
Date: Thu, 21 Mar 2024 07:54:42 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============3070395982342246387=="
MIME-Version: 1.0
Subject: Paid Invoice for order no HF610611DA
From: Jeff Stuyt
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: Microsoft CDO for Windows 2000
List-Unsubscribe:
List-Owner:
List-ID: waillmakevin0856@gmail.com
List-Subscribe: waillmakevin0856@gmail.com
List-Post:
--===============3070395982342246387==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64
RGVhciA8Yj5kb2N0b3I8L2I+LDxicj4KJiM3MzsmIzExMDsmIzExODsmIzExMTsmIzEwNTsmIzk5
OyYjMTAxOyBEYXRlOiBNYXJjaCAyMSwgMjAyNDxicj4KPGJyPgo8Yj5Zb3VyICYjNzM7JiMxMTA7
JiMxMTg7JiMxMTE7JiMxMDU7JiM5OTsmIzEwMTsgRGV0YWlsczwvYj4KPGJyPgpDbGllbnQ6IGRv
Y3Rvcjxicj4KT3JkZXJlZCBJdGVtOiAmIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsg
U2VjdXJlPGJyPgpTdXBwb3J0IER1cmF0aW9uOiA1IHllYXJzPGJyPgo8YnI+CkFjdGl2YXRpb24g
S2V5OiBaUTI0MTJDVzxicj4KPGJyPgo8YnI+CllvdXIgJiM4MDsmIzk3OyYjMTIxOyYjMTA5OyYj
MTAxOyYjMTEwOyYjMTE2OyAmIzczOyYjMTEwOyYjMTE4OyYjMTExOyYjMTA1OyYjOTk7JiMxMDE7
IGZvciA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPiBoYXMg
YmVlbiBwcm9jZXNzZWQgc3VjY2Vzc2Z1bGx5LCBhbmQgd2UgYXJlIHBsZWFzZWQgdG8gaW5mb3Jt
IHlvdS48YnI+IFRvZGF5J3MgcmVjZWlwdCBpbmNsdWRlcyBhIGNoYXJnZSBvZiA8Yj4mIzM2OzQ0
MC40MDwvYj4gZm9yIHRoZSAmIzExNDsmIzEwMTsmIzExMDsmIzEwMTsmIzExOTsmIzk3OyYjMTA4
OyBvZiA8Yj4mIzc3OyYjOTk7JiM5NzsmIzEwMjsmIzEwMTsmIzEwMTsgU2VjdXJlPC9iPi48YnI+
SWYgdGhlcmUgYXJlIGFueSB1bmNlcnRhaW50aWVzIG9yIGlmIHlvdSByZXF1aXJlIGFkZGl0aW9u
YWwgY2xhcmlmaWNhdGlvbiBhYm91dCB0aGlzIHRyYW5zYWN0aW9uLCBmZWVsIGZyZWUgdG8gZ2V0
IGluIHRvdWNoIHdpdGggdXMuPGJyPklmIHN1cHBvcnQgaXMgbmVlZGVkLCBkb24ndCBoZXNpdGF0
ZSB0byByZWFjaCBvdXQgdG8gb3VyIGN1c3RvbWVyIHNlcnZpY2UgdGVhbSBhdCA8Yj4mIzQzOyYj
NDk7KCYjNTY7JiM1MTsmIzUwOykgNiYjNTc7OC0mIzU3OyYjNTY7NDM8L2I+IHdpdGhpbiB0aGUg
bmV4dCBzaXggaG91cnMuCjxicj4KPGJyPgo8YnI+CllvdXIgc2VsZWN0aW9uIG9mIEdlZWsgPGI+
JiM3NzsmIzk5OyYjOTc7JiMxMDI7JiMxMDE7JiMxMDE7IFNlY3VyZTwvYj4gaXMgYWNrbm93bGVk
Z2VkIHdpdGggZ3JhdGl0dWRlLiBXZSBoaWdobHkgdmFsdWUgeW91ciB0cnVzdCBpbiBvdXIgc2Vy
dmljZXMuPGJyPgo8YnI+Cjxicj4KV2FybSByZWdhcmRzLDxicj4KJiM3NzsmIzk5OyYjOTc7JiMx
MDI7JiMxMDE7JiMxMDE7IFNlY3VyZTxicj4KMjQ1OCBTdC4gSm9obiBTdHJlZXQgQ2Fub3JhIFM0
UCAzWTIgQ2FuYWRhPGJyPgpGb3IgaW5xdWlyaWVzLCBwbGVhc2Ugc3VwcG9ydCB1cyBhdCA8Yj4m
IzQzOyYjNDk7KCYjNTY7JiM1MTsmIzUwOykgNiYjNTc7OC0mIzU3OyYjNTY7NDM8L2I+Lg==
--===============3070395982342246387==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Thu, 21 Mar 2024 14:03:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rnOch-00000000CRx-2kFn
for dave@doctor.nl2k.ab.ca;
Thu, 21 Mar 2024 14:02:47 -0600
Resent-From: The Doctor
Resent-Date: Thu, 21 Mar 2024 14:02:47 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pf1-f181.google.com ([209.85.210.181]:55753)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rnJqW-000000000m4-0XYw
for doctor@doctor.nl2k.ab.ca;
Thu, 21 Mar 2024 08:56:47 -0600
Received: by mail-pf1-f181.google.com with SMTP id d2e1a72fcca58-6e6afb754fcso959792b3a.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1711032883; x=1711637683; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;
b=M4QCb9OPSlqYGQQamGY/7tExkui2y9vV8Om9xcEEhOq1g3LR2Sa2Fpc16fJU+5bj5Q
RmfWA35POwXheuvwrQ00iBIqAZElzU35Nrumj3QXhCwZC0OQkf9ZfRVQ5TmD4d45nvZV
j5el3RiXV5nhyUm6vw7kTaqtl7CQZnMJybL9JMWZemCbkcsMNd8ixUfGliQM0PCCq80M
b3KuVdRXc7MtaLEPEe6XA1OiHv/tgwe2VaRo7JO0ejT/P3N5JhtR33BMpSAfycM4r/DH
5Vwt3FhKpjdJBI8gmgfoXdudA3+xvJHPyqx5pGZg2lFD9EcvJo7/HgZxRurpQkJYpCnt
bd6A==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1711032883; x=1711637683;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=UvpJKOZ9XQVBMtAIjaWstcMFmGOw719ImQw04KnFCmE=;
b=hVFnHhb/XJ5aKE2k6pfBOOHBtBFuQg3kj3TrWtp5CRzxRNQhy7zYScvW0lkMLTOjOP
k0s5PlDG4e+rvCqc0aE7QNqcVjtJ7+HsnfgkX8Kdrcb2Kfti7SdYpH51iaOf6juHOlhf
PDWmLWz+VmyIJ2K8DZ5puvdrY6osgrvyPYkGxU0th2xPhzrdQ4hzmkeNxEbxEn5cfVdP
7ALpFdBGvqsPIhqITBB1ms7XypizVD0aAyKoZfDH+OdZkl021PhdfdC2oKtB/p+tSHrG
cIb6ZMmp9ODwh2jmjXbtaVWhy6PwhqwXW3Uyl9zLeBSY3xYNejqz9CtUpqB5Wbx0WZc0
9xGQ==
X-Gm-Message-State: AOJu0Yx8SXo70w4+HXwsNG3EXwok3nht9uRXQcsUU3dsWX/W6OGpzrwF
2MFwIOKjLBr+R0QdocSh2qYKp21Hkdc/llxrTpZg/xjPqRMzfVL3N1ZMYkIVFA4/CQ==
X-Google-Smtp-Source: AGHT+IGFGdz1VWyKrJEK4R4FG6PnHxNssOghy6/TkJOipeBL0W+NAp1lYQ9V7r3cY6wndqwyDyTa0w==
X-Received: by 2002:a17:902:784c:b0:1dd:611d:3be3 with SMTP id e12-20020a170902784c00b001dd611d3be3mr5217045pln.17.1711032883159;
Thu, 21 Mar 2024 07:54:43 -0700 (PDT)
Received: from [172.31.0.39] ([124.156.45.65])
by smtp.gmail.com with ESMTPSA id u13-20020a170902e80d00b001def0c700e2sm13523888plg.119.2024.03.21.07.54.42
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Thu, 21 Mar 2024 07:54:42 -0700 (PDT)
Message-ID: <65fc4a32.170a0220.a982e.7241@mx.google.com>
Date: Thu, 21 Mar 2024 07:54:42 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============3070395982342246387=="
MIME-Version: 1.0
Subject: Paid Invoice for order no HF610611DA
From: Jeff Stuyt
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: Microsoft CDO for Windows 2000
List-Unsubscribe:
List-Owner:
List-ID: waillmakevin0856@gmail.com
List-Subscribe: waillmakevin0856@gmail.com
List-Post:
--===============3070395982342246387==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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==
--===============3070395982342246387==--