McAfee Phish from Google
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 19 Dec 2022 14:33:09 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from)
id 1p7Nkq-00053j-0y
for dave@doctor.nl2k.ab.ca;
Mon, 19 Dec 2022 14:33:00 -0700
Resent-From: The Doctor
Resent-Date: Mon, 19 Dec 2022 14:33:00 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f47.google.com ([209.85.160.47]:35388)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from)
id 1p7Jbf-000Ab9-0j
for sales@netknow.ca;
Mon, 19 Dec 2022 10:07:21 -0700
Received: by mail-oa1-f47.google.com with SMTP id 586e51a60fabf-143ffc8c2b2so12282548fac.2
for; Mon, 19 Dec 2022 09:04:46 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=UkQw+3Fw6RFbu9o/PbHmk7HYRi8SEWvGsqRoX40AkS4=;
b=hL7qBkBIsbbQkAi7BSpHTLXZrBl4LvXZBw6NhtGfk3TFZnSBSCrGzkBSK1+ixPvPtS
wLvH1gg7fstttC0ZNc11A0FW/OvV+0CP8e+EBFxRTyptat7Y4aqSfPwMbwIma1dBP2mM
vJ7eQGkQn0fHtDcl+AigGcMgs63C4MlcCeyHPfeJUQj/Be7+ZeqRrg9GZWVSoUJmixhE
Q+Y1lBZW447zoQkt1wbF4srT7uMLv63+dtT2M6IBassOPrfaDtA0hukpwFMyNKObVfon
SGNfIVOfi8K3BO800vtDuYWgNw3+ENf/7hRB0g5MISNqcIq607aujyqhb915onS+PH7h
TF9Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=UkQw+3Fw6RFbu9o/PbHmk7HYRi8SEWvGsqRoX40AkS4=;
b=0tEFgJe/oiG+vAMGkPzeZ1338ebvKkLejTt3j2XNlXFQZYaZIVi8O57idzJKzMYgwL
AX4CXlh19ncjDpahwvyyblFe2WcxVvukVjXObvDnuM4QhrvebY8EeWuCeCtz891YAkHF
u+KdWu+r5dRdhBafSo5Xz2+1rMtzLpYOhnZNu0QKJDsJ/4fUflKZSSdymldwroKP9suf
ewQyAtMj80LiajYzgPxUlzUJWRJd12+sWT5zZB3x0Qwlvg2P1V9LCy6mTPZCgrYHdF8r
3T73hrTW0cxGX1QmrNV9XsIW3binkkoLrimxGKGaDBPls1W8KLfZJtV4GI09ux1G/vTT
Ho1Q==
X-Gm-Message-State: ANoB5plvVR4edjmN2QKvfAQ0IZ04WoNUxfVps3wQ/L5RcERVKEZFl0B/
gb48pM1rM02n/BG25vJWf25tsPmAFsUDs8hj+Sw=
X-Google-Smtp-Source: AA0mqf4ziioLZZPTWftB/X5V/dlYeOeSyI8UlrgHZRXdtbVfLpAwd94j3SAeYd9YERjEpVFseSu6cw==
X-Received: by 2002:a05:6871:4412:b0:144:957c:bcd9 with SMTP id nd18-20020a056871441200b00144957cbcd9mr23161592oab.4.1671469480059;
Mon, 19 Dec 2022 09:04:40 -0800 (PST)
Received: from 37.120.215.100 ([185.203.218.240])
by smtp.gmail.com with ESMTPSA id k26-20020ac8475a000000b003999d25e772sm6256190qtp.71.2022.12.19.09.04.37
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 19 Dec 2022 09:04:39 -0800 (PST)
Message-ID: <63a099a7.c80a0220.19acb.281f@mx.google.com>
From: "Shelley J. Ford"
Subject: Your amount key (0SE0JHHR)
To: "sales"
Content-Type: multipart/alternative; boundary="o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7"
MIME-Version: 1.0
Date: Mon, 19 Dec 2022 09:04:38 -0800
This is a multi-part message in MIME format
--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
McAfee Total Protection 2022 |=20
5 Device | Antivirus Internet Security Software
$329.99 1 Year Subscription
Receipt From : 19 December, 2022ac
One year of premium antivirus, safe web browsing and password manager =
with VPN.
Protect your computer and avoid fraud McAfee. We have put together a l=
imited offer specially for you.
Hello User sales@netknow.ca
Your protection plan fr=C3=B3m last year has come to an end. However, =
we are extending your plan's validity for another year so that you won=
't run into any issues.
And in the next 24 hours, $329.99 will be taken out of your account as=
payment for this. Your auto debit services have been switched since l=
ast year, so they have been reactivated for you.
The remaining details have been sent to you at this email address, sal=
es@netknow.ca.
You can reach our customer support staff at this toll-free number for =
more information: +1 833 310 1016.
sincerely,
Cunsumer Helpline Dept.
Call us : +1 833 310 1016
--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
8">
3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=
b" marginheight=3D"0" marginwidth=3D"0">
; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=
spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=
nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=
rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=
ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=
width: 0px; text-decoration-thickness: initial; text-decoration-style:=
initial; text-decoration-color: initial;'>
84, 49, 47);">
size: 14px;">McAfee
px;"> Total Protection 2022 |
5 Device | Antivirus Inter=
net Security Software
; font-size: 14px;">$329.99
g> 1 Year Subscription
>
Receipt From : 19 December, 2022ac
gn: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0p=
x; letter-spacing: normal; font-family: "Times New Roman"; font-size: =
medium; font-style: normal; font-weight: 400; margin-bottom: 10px !imp=
ortant; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial;'>
nt-size: 14px;">One year of premium antivirus, safe web browsing and p=
assword manager with VPN.
Protect your computer and avoid fraud McA=
fee. We have put together a limited offer specially for you.
>
none; text-indent: 0px; letter-spacing: normal; clear: both; font-fam=
ily: "Times New Roman"; font-size: medium; font-style: normal; font-we=
ight: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows:=
2; break-after: page; font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial; text-decoration-color: initi=
al; user-select: none;'>
0, 0); text-transform: none; text-indent: 0px; letter-spacing: normal;=
font-family: "Times New Roman"; font-size: medium; font-style: normal=
; font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px;=
white-space: normal; orphans: 2; widows: 2; font-variant-ligatures: n=
ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=
-decoration-thickness: initial; text-decoration-style: initial; text-d=
ecoration-color: initial;'>Dear Exist=
ing Customer
-size: 15px;">sales@netknow.ca
rong>
Your protection plan =
fr=C3=B3m last year has come to an end. However, we are extending your=
plan's validity for another year so that you won't run into any issue=
s.
-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=
y: "Times New Roman"; font-size: medium; font-style: normal; font-weig=
ht: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spac=
e: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font=
-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style: initial; text-decoration-c=
olor: initial;'>And in the next 24 ho=
urs, $329.9=
9 will be taken out of your account as paymen=
t for this. Your auto debit services have been switched since last yea=
r, so they have been reactivated for you.
lign: center; color: rgb(0, 0, 0); text-transform: none; text-indent: =
0px; letter-spacing: normal; font-family: "Times New Roman"; font-size=
: medium; font-style: normal; font-weight: 400; margin-bottom: 10px !i=
mportant; word-spacing: 0px; white-space: normal; orphans: 2; widows: =
2; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=
text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=
ation-style: initial; text-decoration-color: initial;'>
font-size: 15px;">The remaining details have been sent to you at this =
email address,
nt-size: 15px;">sales@netknow.ca.
;">
You can reach our customer support staff at this toll-free numb=
er for more information:
t: 700;">+1 833 310 1016.
an>
0, 0); text-transform: none; text-indent: 0px; letter-spacing: normal;=
clear: both; font-family: "Times New Roman"; font-size: medium; font-=
style: normal; font-weight: 400; word-spacing: 0px; white-space: norma=
l; orphans: 2; widows: 2; break-after: page; font-variant-ligatures: n=
ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=
-decoration-thickness: initial; text-decoration-style: initial; text-d=
ecoration-color: initial; user-select: none;'>
center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; l=
etter-spacing: normal; font-family: "Times New Roman"; font-size: medi=
um; font-style: normal; font-weight: 400; margin-bottom: 10px !importa=
nt; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial;'>
ize: 14px;">regards,
Sr=
=2EHead Accounts Handling Team
Call us :
yle=3D"color: rgb(226, 80, 65);">+=
1 833 310 1016
--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 19 Dec 2022 14:33:09 -0700
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)
(envelope-from
id 1p7Nkq-00053j-0y
for dave@doctor.nl2k.ab.ca;
Mon, 19 Dec 2022 14:33:00 -0700
Resent-From: The Doctor
Resent-Date: Mon, 19 Dec 2022 14:33:00 -0700
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-oa1-f47.google.com ([209.85.160.47]:35388)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from
id 1p7Jbf-000Ab9-0j
for sales@netknow.ca;
Mon, 19 Dec 2022 10:07:21 -0700
Received: by mail-oa1-f47.google.com with SMTP id 586e51a60fabf-143ffc8c2b2so12282548fac.2
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=UkQw+3Fw6RFbu9o/PbHmk7HYRi8SEWvGsqRoX40AkS4=;
b=hL7qBkBIsbbQkAi7BSpHTLXZrBl4LvXZBw6NhtGfk3TFZnSBSCrGzkBSK1+ixPvPtS
wLvH1gg7fstttC0ZNc11A0FW/OvV+0CP8e+EBFxRTyptat7Y4aqSfPwMbwIma1dBP2mM
vJ7eQGkQn0fHtDcl+AigGcMgs63C4MlcCeyHPfeJUQj/Be7+ZeqRrg9GZWVSoUJmixhE
Q+Y1lBZW447zoQkt1wbF4srT7uMLv63+dtT2M6IBassOPrfaDtA0hukpwFMyNKObVfon
SGNfIVOfi8K3BO800vtDuYWgNw3+ENf/7hRB0g5MISNqcIq607aujyqhb915onS+PH7h
TF9Q==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=UkQw+3Fw6RFbu9o/PbHmk7HYRi8SEWvGsqRoX40AkS4=;
b=0tEFgJe/oiG+vAMGkPzeZ1338ebvKkLejTt3j2XNlXFQZYaZIVi8O57idzJKzMYgwL
AX4CXlh19ncjDpahwvyyblFe2WcxVvukVjXObvDnuM4QhrvebY8EeWuCeCtz891YAkHF
u+KdWu+r5dRdhBafSo5Xz2+1rMtzLpYOhnZNu0QKJDsJ/4fUflKZSSdymldwroKP9suf
ewQyAtMj80LiajYzgPxUlzUJWRJd12+sWT5zZB3x0Qwlvg2P1V9LCy6mTPZCgrYHdF8r
3T73hrTW0cxGX1QmrNV9XsIW3binkkoLrimxGKGaDBPls1W8KLfZJtV4GI09ux1G/vTT
Ho1Q==
X-Gm-Message-State: ANoB5plvVR4edjmN2QKvfAQ0IZ04WoNUxfVps3wQ/L5RcERVKEZFl0B/
gb48pM1rM02n/BG25vJWf25tsPmAFsUDs8hj+Sw=
X-Google-Smtp-Source: AA0mqf4ziioLZZPTWftB/X5V/dlYeOeSyI8UlrgHZRXdtbVfLpAwd94j3SAeYd9YERjEpVFseSu6cw==
X-Received: by 2002:a05:6871:4412:b0:144:957c:bcd9 with SMTP id nd18-20020a056871441200b00144957cbcd9mr23161592oab.4.1671469480059;
Mon, 19 Dec 2022 09:04:40 -0800 (PST)
Received: from 37.120.215.100 ([185.203.218.240])
by smtp.gmail.com with ESMTPSA id k26-20020ac8475a000000b003999d25e772sm6256190qtp.71.2022.12.19.09.04.37
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 19 Dec 2022 09:04:39 -0800 (PST)
Message-ID: <63a099a7.c80a0220.19acb.281f@mx.google.com>
From: "Shelley J. Ford"
Subject: Your amount key (0SE0JHHR)
To: "sales"
Content-Type: multipart/alternative; boundary="o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7"
MIME-Version: 1.0
Date: Mon, 19 Dec 2022 09:04:38 -0800
This is a multi-part message in MIME format
--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
McAfee Total Protection 2022 |=20
5 Device | Antivirus Internet Security Software
$329.99 1 Year Subscription
Receipt From : 19 December, 2022ac
One year of premium antivirus, safe web browsing and password manager =
with VPN.
Protect your computer and avoid fraud McAfee. We have put together a l=
imited offer specially for you.
Hello User sales@netknow.ca
Your protection plan fr=C3=B3m last year has come to an end. However, =
we are extending your plan's validity for another year so that you won=
't run into any issues.
And in the next 24 hours, $329.99 will be taken out of your account as=
payment for this. Your auto debit services have been switched since l=
ast year, so they have been reactivated for you.
The remaining details have been sent to you at this email address, sal=
es@netknow.ca.
You can reach our customer support staff at this toll-free number for =
more information: +1 833 310 1016.
sincerely,
Cunsumer Helpline Dept.
Call us : +1 833 310 1016
--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
8">
3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=
b" marginheight=3D"0" marginwidth=3D"0">
; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-=
spacing: normal; font-family: "Times New Roman"; font-size: medium; fo=
nt-style: normal; font-weight: 400; margin-bottom: 10px !important; wo=
rd-spacing: 0px; white-space: normal; orphans: 2; widows: 2; font-vari=
ant-ligatures: normal; font-variant-caps: normal; -webkit-text-stroke-=
width: 0px; text-decoration-thickness: initial; text-decoration-style:=
initial; text-decoration-color: initial;'>
84, 49, 47);">
size: 14px;">McAfee
px;"> Total Protection 2022 |
5 Device | Antivirus Inter=
net Security Software
; font-size: 14px;">$329.99
g> 1 Year Subscription
>
Receipt From : 19 December, 2022ac
gn: center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0p=
x; letter-spacing: normal; font-family: "Times New Roman"; font-size: =
medium; font-style: normal; font-weight: 400; margin-bottom: 10px !imp=
ortant; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2;=
font-variant-ligatures: normal; font-variant-caps: normal; -webkit-te=
xt-stroke-width: 0px; text-decoration-thickness: initial; text-decorat=
ion-style: initial; text-decoration-color: initial;'>
nt-size: 14px;">One year of premium antivirus, safe web browsing and p=
assword manager with VPN.
Protect your computer and avoid fraud McA=
fee. We have put together a limited offer specially for you.
>
none; text-indent: 0px; letter-spacing: normal; clear: both; font-fam=
ily: "Times New Roman"; font-size: medium; font-style: normal; font-we=
ight: 400; word-spacing: 0px; white-space: normal; orphans: 2; widows:=
2; break-after: page; font-variant-ligatures: normal; font-variant-ca=
ps: normal; -webkit-text-stroke-width: 0px; text-decoration-thickness:=
initial; text-decoration-style: initial; text-decoration-color: initi=
al; user-select: none;'>
0, 0); text-transform: none; text-indent: 0px; letter-spacing: normal;=
font-family: "Times New Roman"; font-size: medium; font-style: normal=
; font-weight: 400; margin-bottom: 10px !important; word-spacing: 0px;=
white-space: normal; orphans: 2; widows: 2; font-variant-ligatures: n=
ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=
-decoration-thickness: initial; text-decoration-style: initial; text-d=
ecoration-color: initial;'>Dear Exist=
ing Customer
-size: 15px;">sales@netknow.ca
rong>
Your protection plan =
fr=C3=B3m last year has come to an end. However, we are extending your=
plan's validity for another year so that you won't run into any issue=
s.
-transform: none; text-indent: 0px; letter-spacing: normal; font-famil=
y: "Times New Roman"; font-size: medium; font-style: normal; font-weig=
ht: 400; margin-bottom: 10px !important; word-spacing: 0px; white-spac=
e: normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font=
-variant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration=
-thickness: initial; text-decoration-style: initial; text-decoration-c=
olor: initial;'>And in the next 24 ho=
urs, $329.9=
9 will be taken out of your account as paymen=
t for this. Your auto debit services have been switched since last yea=
r, so they have been reactivated for you.
lign: center; color: rgb(0, 0, 0); text-transform: none; text-indent: =
0px; letter-spacing: normal; font-family: "Times New Roman"; font-size=
: medium; font-style: normal; font-weight: 400; margin-bottom: 10px !i=
mportant; word-spacing: 0px; white-space: normal; orphans: 2; widows: =
2; font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=
text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=
ation-style: initial; text-decoration-color: initial;'>
font-size: 15px;">The remaining details have been sent to you at this =
email address,
nt-size: 15px;">sales@netknow.ca.
;">
You can reach our customer support staff at this toll-free numb=
er for more information:
t: 700;">+1 833 310 1016.
an>
0, 0); text-transform: none; text-indent: 0px; letter-spacing: normal;=
clear: both; font-family: "Times New Roman"; font-size: medium; font-=
style: normal; font-weight: 400; word-spacing: 0px; white-space: norma=
l; orphans: 2; widows: 2; break-after: page; font-variant-ligatures: n=
ormal; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text=
-decoration-thickness: initial; text-decoration-style: initial; text-d=
ecoration-color: initial; user-select: none;'>
center; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; l=
etter-spacing: normal; font-family: "Times New Roman"; font-size: medi=
um; font-style: normal; font-weight: 400; margin-bottom: 10px !importa=
nt; word-spacing: 0px; white-space: normal; orphans: 2; widows: 2; fon=
t-variant-ligatures: normal; font-variant-caps: normal; -webkit-text-s=
troke-width: 0px; text-decoration-thickness: initial; text-decoration-=
style: initial; text-decoration-color: initial;'>
ize: 14px;">regards,
Sr=
=2EHead Accounts Handling Team
Call us :
yle=3D"color: rgb(226, 80, 65);">+=
1 833 310 1016
--o1wbkPQL49Q6evNsgQy=_sicJ5HATg7zv7--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments