McAfee Phish from Google Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 08:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtqKk-0000000027f-3fdS
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:50:54 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 08:50:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f177.google.com ([209.85.214.177]:45385)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from)
id 1rtq6i-000000000uS-4AV6
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:36:28 -0600
Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-1e3dda73192so10142185ad.3
for; Mon, 08 Apr 2024 07:34:30 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712586865; x=1713191665; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=IMPLQGLwdRRGg7HOveKA3SYndAaPIQ9Z7/Zo+MfxNbGFxgCI8CW1QYYoHIlwWUYt/j
F7LPBXQClpmRWEdugaTdRAALrhaQF7QX57ruewL1ahk/Cw70Nzxe7MwrP+depC2yY+KO
h9/r7CdlnP4bIhSQII/HT2rs4wYfMvEGkTU8x5IdMJ/vVEVHllW+0DcRXAaaoYL6gFxq
QyhAfwy+S2lah2uUrUCpXlfdZGUe0hSTjCQNCe0PPE00IGuKziafUoXxvYAgrCKHaBjw
kXOGDre+DgC+rSoIYeC0zkA1wsuxbkD07LyhwdMGjxt1ZaLVOpiwuCKQCt8J2vTNkKIQ
h++w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712586865; x=1713191665;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=cin3nqAZEyVvSiOPF8uEIHwR5ypFaSqXEisTR6dEYZ+ULjv4Bvhh/o8mons6xBi/2y
BAMOCupZ07o3ADjMY5Ds0ZJkpSa9bo8xOonLk5Cxd1WR2hITpYdKYvul/111vUUXDzQu
Jl8h+qbEybwyHoRgJTlYqFpQH2eZaJaMPHvvObKzVXUCO72ejdMWTY8YcyIc1oogim33
xfDPRz1lKa6w7p5grEXpVz724oAetDy0qBuDzVrMYRsmhJECIN3NhuUUUKBsS/fJ7IoR
n5RPShDAI/ieY6VeXBOOxUkiG+A/mDZEFC5yEMvcckY9WAi59XMbz5kijT9Y7rWycx7r
u+Bg==
X-Gm-Message-State: AOJu0Yy0ni4cU2sNNS6TQRYsU1ASKQBsVL91UHw58L/yg7RqMowSe6ke
FTcHwRlcJL5YftV2iibX4prQ6Ef4aohEN3j5oKlN75oE2H1n9gyC3o7oPwETE5xDlA==
X-Google-Smtp-Source: AGHT+IGqKnoYmqHxrhY2zwP2NnqAZ1E2Vnw6EKEWwLm7Z7PD25UunF5wy5X0gO0EYcXoj4Xry5Z/CQ==
X-Received: by 2002:a17:903:94d:b0:1e4:49:de46 with SMTP id ma13-20020a170903094d00b001e40049de46mr3555257plb.47.1712586864596;
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Received: from [10.203.16.123] ([43.128.224.38])
by smtp.gmail.com with ESMTPSA id e12-20020a170902d38c00b001e250e630ffsm7045023pld.237.2024.04.08.07.34.23
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Message-ID: <66140070.170a0220.74acf.2161@mx.google.com>
Date: Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============8218412906161064892=="
MIME-Version: 1.0
Subject: Order Confirmation: Your Purchase Completed RH712050NH
From: Jonathan Schlaudraff
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: ZuckMail [version 1.00]
List-Unsubscribe:
List-Owner:
List-ID: alisaojaghi@gmail.com
List-Subscribe: alisaojaghi@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--===============8218412906161064892==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============8218412906161064892==--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 08 Apr 2024 08:51:00 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtqKk-0000000027f-3fdS
for dave@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:50:54 -0600
Resent-From: The Doctor
Resent-Date: Mon, 8 Apr 2024 08:50:54 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-pl1-f177.google.com ([209.85.214.177]:45385)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.97.1 (FreeBSD))
(envelope-from
id 1rtq6i-000000000uS-4AV6
for doctor@doctor.nl2k.ab.ca;
Mon, 08 Apr 2024 08:36:28 -0600
Received: by mail-pl1-f177.google.com with SMTP id d9443c01a7336-1e3dda73192so10142185ad.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20230601; t=1712586865; x=1713191665; darn=doctor.nl2k.ab.ca;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:from:to:cc:subject:date:message-id
:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=IMPLQGLwdRRGg7HOveKA3SYndAaPIQ9Z7/Zo+MfxNbGFxgCI8CW1QYYoHIlwWUYt/j
F7LPBXQClpmRWEdugaTdRAALrhaQF7QX57ruewL1ahk/Cw70Nzxe7MwrP+depC2yY+KO
h9/r7CdlnP4bIhSQII/HT2rs4wYfMvEGkTU8x5IdMJ/vVEVHllW+0DcRXAaaoYL6gFxq
QyhAfwy+S2lah2uUrUCpXlfdZGUe0hSTjCQNCe0PPE00IGuKziafUoXxvYAgrCKHaBjw
kXOGDre+DgC+rSoIYeC0zkA1wsuxbkD07LyhwdMGjxt1ZaLVOpiwuCKQCt8J2vTNkKIQ
h++w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20230601; t=1712586865; x=1713191665;
h=list-post:list-subscribe:list-id:list-owner:list-unsubscribe
:x_mailer:priority:importance:content-class:to:from:subject
:mime-version:date:message-id:x-gm-message-state:from:to:cc:subject
:date:message-id:reply-to;
bh=3N42/qBn2FKeBNNEMGQJB3DKQCXEKTWZ9DhUg+fG8Uc=;
b=cin3nqAZEyVvSiOPF8uEIHwR5ypFaSqXEisTR6dEYZ+ULjv4Bvhh/o8mons6xBi/2y
BAMOCupZ07o3ADjMY5Ds0ZJkpSa9bo8xOonLk5Cxd1WR2hITpYdKYvul/111vUUXDzQu
Jl8h+qbEybwyHoRgJTlYqFpQH2eZaJaMPHvvObKzVXUCO72ejdMWTY8YcyIc1oogim33
xfDPRz1lKa6w7p5grEXpVz724oAetDy0qBuDzVrMYRsmhJECIN3NhuUUUKBsS/fJ7IoR
n5RPShDAI/ieY6VeXBOOxUkiG+A/mDZEFC5yEMvcckY9WAi59XMbz5kijT9Y7rWycx7r
u+Bg==
X-Gm-Message-State: AOJu0Yy0ni4cU2sNNS6TQRYsU1ASKQBsVL91UHw58L/yg7RqMowSe6ke
FTcHwRlcJL5YftV2iibX4prQ6Ef4aohEN3j5oKlN75oE2H1n9gyC3o7oPwETE5xDlA==
X-Google-Smtp-Source: AGHT+IGqKnoYmqHxrhY2zwP2NnqAZ1E2Vnw6EKEWwLm7Z7PD25UunF5wy5X0gO0EYcXoj4Xry5Z/CQ==
X-Received: by 2002:a17:903:94d:b0:1e4:49:de46 with SMTP id ma13-20020a170903094d00b001e40049de46mr3555257plb.47.1712586864596;
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Received: from [10.203.16.123] ([43.128.224.38])
by smtp.gmail.com with ESMTPSA id e12-20020a170902d38c00b001e250e630ffsm7045023pld.237.2024.04.08.07.34.23
for
(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);
Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Message-ID: <66140070.170a0220.74acf.2161@mx.google.com>
Date: Mon, 08 Apr 2024 07:34:24 -0700 (PDT)
Content-Type: multipart/mixed; boundary="===============8218412906161064892=="
MIME-Version: 1.0
Subject: Order Confirmation: Your Purchase Completed RH712050NH
From: Jonathan Schlaudraff
To: doctor@doctor.nl2k.ab.ca
Content-Class: urn:content-classes:message
Importance: normal
Priority: normal
X-Priority: 3
X-MimeOLE: Produced By Microsoft MimeOLE
x_mailer: ZuckMail [version 1.00]
List-Unsubscribe:
List-Owner:
List-ID: alisaojaghi@gmail.com
List-Subscribe: alisaojaghi@gmail.com
List-Post:
X-Antivirus: AVG (VPS 240404-6, 4/4/2024), Inbound message
X-Antivirus-Status: Clean
--===============8218412906161064892==
MIME-Version: 1.0
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: base64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--===============8218412906161064892==--