extortion phish from gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 16 Sep 2022 14:30:00 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZHl4-000P7G-Lp

for dave@doctor.nl2k.ab.ca;

Fri, 16 Sep 2022 14:16:18 -0600

Resent-From: The Doctor

Resent-Date: Fri, 16 Sep 2022 14:16:18 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f44.google.com ([209.85.216.44]:50719)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.95 (FreeBSD))

(envelope-from )

id 1oZGk2-000HPP-Tm

for support@netknow.ca;

Fri, 16 Sep 2022 13:11:14 -0600

Received: by mail-pj1-f44.google.com with SMTP id fv3so21988206pjb.0

for ; Fri, 16 Sep 2022 12:10:45 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date;

bh=fvtr8DhJgaTotHgo/0O4ow5ynEgTk49/NY1oyUNqCYI=;

b=QpPe15+D0iG09b234nH4QWx02GyIznX86sH09GE6smC+Yewt0V6VBYkfd3+6Pq8pDe

JAO2WyQmCaSw16W37kOK7iYVyYv2QTPu+ppNUOm7nZGG9277l3xL5lXEmK1Az0VeubHO

pErQkinjt/uCPE4VUZgT/ilsenSkNS3eQ2w+lJPnrMhpM2PSvYlTrobBXZxPrV9R4ufL

3+x1H6UEHv0/49GLGdBdFl0uDTuTpDIako3r3Wg5kInCTtstncgkKs9oDuDVsBqJhZYI

t73Mkdp5FmWF/xSsOKgxzHYZCzi8Bs9w2vwtiKOj3X4JILeCHs5/aUArhSJWwas5u+va

PMxQ==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date;

bh=fvtr8DhJgaTotHgo/0O4ow5ynEgTk49/NY1oyUNqCYI=;

b=xX9tvli4djnjHSuEUbyYHCdPYzJwi9EZP8pJ+8B3HxoIBaPveisRtN4LjM7dnhS1Tb

Dcrq7P7dxMs4nsHSIGfpbTRjR+Cc+gpLxXL4r+phfrmZo21ky36pW6eus9P+vkzKIapx

WnJazin6kGFkEzvxRBsVa1SZVg0yLMffIS3AJryfmkN9R97TG1WaN12ulJbQwYx+Toy1

03oUqUBBno5xkO7kCNRNGHVynn7QfHp9Ad6NzjbdfUSTqfERMHwV8O+ydzsxMtdQTR23

BJj6xhGJsG9hkbux4X3+Qll4j1rcnCjiUuXWlRY/MBofvs4swPWjEmhqGml5/+V/Jheh

0bFw==

X-Gm-Message-State: ACrzQf0/4Ctv4iv/AsUmr4Lb7CMRgiZMGRcsuwpqM3yOz0Zg9Nqnm8HR

9nxvathO3MmOQ2ABWHZmgkkUjX5XuefUREEiHiA=

X-Google-Smtp-Source: AMsMyM6vBz2t+/PTalILpdkktkP9f22xnqVQeAGkXqkLxLqSR5k045M3SJkzUU7QE34ONs1W9t2WEw==

X-Received: by 2002:a17:902:7c8f:b0:176:cdd8:7258 with SMTP id y15-20020a1709027c8f00b00176cdd87258mr1229636pll.49.1663355440011;

Fri, 16 Sep 2022 12:10:40 -0700 (PDT)

Received: from 45.248.78.242 ([45.248.78.242])

by smtp.gmail.com with ESMTPSA id cp19-20020a170902e79300b00176be23bbb3sm15156271plb.172.2022.09.16.12.10.38

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 16 Sep 2022 12:10:39 -0700 (PDT)

Message-ID: <6324ca2f.170a0220.edb2d.c2de@mx.google.com>

From: "Ryan"

Subject: Payment alert*5987DE9704

To: "support"

Content-Type: multipart/alternative; boundary="2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7"

MIME-Version: 1.0

Date: Sat, 17 Sep 2022 00:40:39 +0530



This is a multi-part message in MIME format



--2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello, support@netknow.ca



We thank you for shopping online with us again on 15 Sep, 2022.



Walmart has accepted your order request, we are dealing with it and ge=

tting your product r=C3=AAady for the shipment.



You have purchased VANKYO Full Video Projector worth $ 599.99 from the=

PayPal credit balance, the charge will reflect on statement in few ho=

urs.



Here is your purchase order information:-



VANKYO 1080p Full HD Video Projector

Delivered By - 16 Sep, 2022

Quantity - 03 only

Am=C3=B8unt - $ 599.99



Please be noted we will send y=C3=B5u a copy of the purchase r=C3=AAce=

ipt in another email or you can also download it from the 'purchase or=

der section page'.



If you find any error in this transaction or you would like to cancel/=

modify the order, please feel free to reach out our support representa=

tive to discuss further.



Customer Help & Support Toll-free +1 (888) 687 1505





Thank you again for your cooperation, we look forward to see you soon!=







--2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline






8">






3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=

b" marginheight=3D"0" marginwidth=3D"0">


; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=

spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=

nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=

rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=

ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=

width: 0px; text-decoration-thickness: initial; text-decoration-style:=

initial; text-decoration-color: initial;'>Hello, support@netknow.ca
p>


none; text-indent: 0px; letter-spacing: normal; font-family: "Times N=

ew Roman"; font-size: medium; font-style: normal; font-weight: 400; ma=

rgin-bottom: 10px !important; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al;'>We thank you for shopping online with us again on 15 Sep, 2022.
p>


none; text-indent: 0px; letter-spacing: normal; font-family: "Times N=

ew Roman"; font-size: medium; font-style: normal; font-weight: 400; ma=

rgin-bottom: 10px !important; word-spacing: 0px; white-space: normal; =

orphans: 2; widows: 2; font-variant-ligatures: normal; font-variant-ca=

ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=

initial; text-decoration-style: initial; text-decoration-color: initi=

al;'>Walmart has accepted your order request, we are dealing with it a=

nd getting your product r=C3=AAady for the shipment.


xt-align: center; color: rgb(0, 0, 0); text-transform: none; text-inde=

nt: 0px; letter-spacing: normal; font-family: "Times New Roman"; font-=

size: medium; font-style: normal; font-weight: 400; margin-bottom: 10p=

x !important; word-spacing: 0px; white-space: normal; orphans: 2; wido=

ws: 2; font-variant-ligatures: normal; font-variant-caps: normal; -web=

kit-text-stroke-width: 0px; text-decoration-thickness: initial; text-d=

ecoration-style: initial; text-decoration-color: initial;'>You have pu=

rchased VANKYO
strong> Full Video Projector worth $ 599.99 from the=

PayPal credit balance, the charge will reflect on statement in few ho=

urs.


sform: none; text-indent: 0px; letter-spacing: normal; font-family: "T=

imes New Roman"; font-size: medium; font-style: normal; font-weight: 4=

00; margin-bottom: 10px !important; word-spacing: 0px; white-space: no=

rmal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color:=

initial;'>Here is your purchase o=

rder information:-


rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: =

normal; font-family: "Times New Roman"; font-size: medium; font-style:=

normal; font-weight: 400; margin-bottom: 10px !important; word-spacin=

g: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-ligat=

ures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0p=

x; text-decoration-thickness: initial; text-decoration-style: initial;=

text-decoration-color: initial;'>VANKYO 1080p Full HD Video Projector=


Delivered By - 16 Sep, 2022
Quantity - 03 only
Am=C3=B8unt -=

$ 599.99


-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=

y: "Times New Roman"; font-size: medium; font-style: normal; font-weig=

ht: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spac=

e: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font=

-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=

-thickness: initial; text-decoration-style: initial; text-decoration-c=

olor: initial;'>Please be noted we will send y=C3=B5u a copy of the pu=

rchase r=C3=AAceipt in another email or you can also download it from =

the 'purchase order section page'.


color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-sp=

acing: normal; font-family: "Times New Roman"; font-size: medium; font=

-style: normal; font-weight: 400; margin-bottom: 10px !important; word=

-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-varian=

t-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-wi=

dth: 0px; text-decoration-thickness: initial; text-decoration-style: i=

nitial; text-decoration-color: initial;'>If you find any error in this=

transaction or you would like to cancel/modify the order, please feel=

free to reach out our support representative to discuss further.

<=

p style=3D'text-align: center; color: rgb(0, 0, 0); text-transform: no=

ne; text-indent: 0px; letter-spacing: normal; font-family: "Times New =

Roman"; font-size: medium; font-style: normal; font-weight: 400; margi=

n-bottom: 10px !important; word-spacing: 0px; white-space: normal; orp=

hans: 2; widows: 2; font-variant-ligatures: normal; font-variant-caps:=

normal; -webkit-text-stroke-width: 0px; text-decoration-thickness: in=

itial; text-decoration-style: initial; text-decoration-color: initial;=

'>Customer Help & Support Toll=

-free
 <=

span style=3D"color: rgb(61, 142, 185);">+1 (888) 687 1505
ong>


sform: none; text-indent: 0px; letter-spacing: normal; font-family: "T=

imes New Roman"; font-size: medium; font-style: normal; font-weight: 4=

00; margin-bottom: 10px !important; word-spacing: 0px; white-space: no=

rmal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-vari=

ant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-thic=

kness: initial; text-decoration-style: initial; text-decoration-color:=

initial;'>
Thank you again for your cooperation, we look forward t=

o see you soon!







--2F5kmSmOGSfGO=_vYtloEw3qV6l4jvuOf7--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA