Norton AV Phish from Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 14 Feb 2023 08:17:01 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pRx2Q-000Pyu-1b

for dave@doctor.nl2k.ab.ca;

Tue, 14 Feb 2023 08:16:10 -0700

Resent-From: The Doctor

Resent-Date: Tue, 14 Feb 2023 08:16:10 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-pj1-f50.google.com ([209.85.216.50]:46057)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pRsmD-000AV5-1g

for doctor@doctor.nl2k.ab.ca;

Tue, 14 Feb 2023 03:43:03 -0700

Received: by mail-pj1-f50.google.com with SMTP id z14-20020a17090abd8e00b00233bb9d6bdcso9850379pjr.4

for ; Tue, 14 Feb 2023 02:40:59 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112;

h=content-transfer-encoding:subject:to:from:mime-version:date

:message-id:from:to:cc:subject:date:message-id:reply-to;

bh=4Ckah2o68FMTouyr0R4GlJVbgxUvi/hwaLXZdmnCljc=;

b=Hbiwt/s5zOB9PtoVIqrE8RO0uuuLf0N3eyAPaAjwSolIFjjuevsoy6eV7Xn+nW8UIN

jT20Mkm46PQM+0aP4kz4govg8iO7pFe1XQJMPQA4fFKKlZ1xcDaA5NjQbRJvxSJblRfW

PVzHuscvsc1nWUGPJkssBYKawIFU5s1L5pdv+kABx4MvZ6HlAEJZXcJ67R/awJH5kB0Q

IVRtat6v9NrK/P0mYDxbm73GfVIf4XDO85d1TqxtMWgbmZ6AOTxKx28/GXsVD1oNmSOD

BvqJDYezPoI04DqDP7nk3oz7LdoyDK4JT5hOdoH3RxXiqzNe1UCCdscZao3rL+oOUEAX

9J9g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112;

h=content-transfer-encoding:subject:to:from:mime-version:date

:message-id:x-gm-message-state:from:to:cc:subject:date:message-id

:reply-to;

bh=4Ckah2o68FMTouyr0R4GlJVbgxUvi/hwaLXZdmnCljc=;

b=byq8kOyJbJzlZ2dy/r1kwVEUyJV4wvZPguwSgCz2y1Jaon4rlLGezJy1bqFFOHQIRi

5NyRwvK8MSLt6QjhGBSJzNz3+G6ax9D7A4fpQBQtNVUNsMpDTrBiz85llW1vE2BlT790

OmfA8q1lrs3lKE2XeB47YSmyMiBjJ7Z4c+M7qKo1E/pu8Pl3ChioH7KJw3pooteZndJV

XoWUrFUXPVxcNC7y7Ettt86YxsasTSN6nETry+mMzQiAMOmejf5b0/YZYun5FbMbL89q

lL8fWznqdblvKcY1llYbEUw5y5Hio2OzKGtG9OApbFifAqo8uPXvTY/cWlZaxgmJGoCw

Y9OQ==

X-Gm-Message-State: AO0yUKWWmaIqr5/EGlQbg+xc0k78yKk7hjUte9WMia9H7/jUgsNxOMol

GwAf+qA3z18SMa2zCkKrt75ysDYcEhZe973szIw=

X-Google-Smtp-Source: AK7set8BBmn/RqppQR8NaNaK0miYlZZpkB+eWdRJKRTfnA0+T8ZCapaQWoJ53KSAzynz9g23ueB5mQ==

X-Received: by 2002:a17:903:110f:b0:196:6ec4:52db with SMTP id n15-20020a170903110f00b001966ec452dbmr2352421plh.51.1676371253664;

Tue, 14 Feb 2023 02:40:53 -0800 (PST)

Received: from EC2AMAZ-DHNK7B8 (ec2-54-176-193-82.us-west-1.compute.amazonaws.com. [54.176.193.82])

by smtp.gmail.com with ESMTPSA id k3-20020a170902ba8300b0019aa6bf4450sm1248426pls.188.2023.02.14.02.40.53

for

(version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256);

Tue, 14 Feb 2023 02:40:53 -0800 (PST)

Message-ID: <63eb6535.170a0220.77d59.1fd5@mx.google.com>

Date: Tue, 14 Feb 2023 02:40:53 -0800 (PST)

X-Google-Original-Date: 14 Feb 2023 10:40:53 +0000

MIME-Version: 1.0

From: "Payment Receipt"

To: doctor@doctor.nl2k.ab.ca

Subject: Purchase Confirmation

Content-Type: text/html; charset=us-ascii

Content-Transfer-Encoding: quoted-printable



=0D=0A

Greetings, Custom=

er
ffff size=3D3 face=3DCalibri>
Calibri>rries

=0D=0A


left>=

We appreciate your business

ze=3D3 face=3DCalibri>
ri>e
<=

/FONT>
>and
<=

FONT color=3D#ffffff size=3D3 face=3DCalibri>
f size=3D3 face=3DCalibri>e

ce=3DCalibri>appreciate you utilisi=

ng Norton

bri>
ffffff size=3D3 face=3DCalibri>e

3 face=3DCalibri>for the past three=

years.

=0D=0A


ze=3D3 face=3DCalibri>We would like=

to let you know that your Norton

fff size=3D3 face=3DCalibri>
Calibri>il
FONT>

alibri>subscription

ace=3DCalibri>
color=3D#ffffff size=3D3 face=3DCalibri>il
<=

FONT size=3D3 face=3DCalibri>has be=

en renewed

ibri>
#ffffff size=3D3 face=3DCalibri>il

=3D3 face=3DCalibri>as we saw

=0D=0A=

that your annual
or=3D#ffffff size=3D3 face=3DCalibri>
3 face=3DCalibri>e<=

/FONT>

face=3DCalibri>subscription

ze=3D3 face=3DCalibri>
ri>e
<=

/FONT>
>was about to

Calibri>
=3D#ffffff size=3D3 face=3DCalibri>a

ze=3D3 face=3DCalibri>expire=


#ffffff size=3D3 face=3DCalibri>
ce=3DCalibri>a
=

today.

=0D=0A


r=3Dltr align=3Dleft>
face=3DCalibri>We'd be happy to continue our conversation with y=

ou to help you make a choice if you're considering your alternati=

ves. We can also discuss if you would like to upgrade or decrease=


color=3D#ffffff size=3D3 face=3DCalibri>
ze=3D3 face=3DCalibri>n

Calibri>your

or=3D#ffffff size=3D3 face=3DCalibri>
3 face=3DCalibri>e<=

/FONT>

face=3DCalibri>plan.

=0D=0A


left>=

Awaiting your

Calibri>
=3D#ffffff size=3D3 face=3DCalibri>e

ze=3D3 face=3DCalibri>response
T>

r=3D#ffffff size=3D3 face=3DCalibri>
3 face=3DCalibri>o

bri>with interest.

>=0D=0A


ONT size=3D3 face=3DCalibri>Contacte=


Calibri>us at

Calibri>
=3D#0070c0 size=3D3 face=3DCalibri>+1

olor=3D#ffffff size=3D3 face=3DCalibri>
=3D3 face=3DCalibri>
>5

bri>
0070c0 size=3D3 face=3DCalibri>888

r=3D#ffffff size=3D3 face=3DCalibri>
3 face=3DCalibri>0<=

/FONT>

>
0c0 size=3D3 face=3DCalibri>539

#ffffff size=3D3 face=3DCalibri>
ce=3DCalibri>6
T>

NT color=3D#0070c0 size=3D3 face=3DCalibri>
size=3D3 face=3DCalibri>0949

fffff size=3D3 face=3DCalibri>
=3DCalibri>57
>

Calibri>if you have

ace=3DCalibri>
color=3D#ffffff size=3D3 face=3DCalibri>n

ONT size=3D3 face=3DCalibri>any que=

ries
<=

FONT color=3D#ffffff size=3D3 face=3DCalibri>
f size=3D3 face=3DCalibri>t

ce=3DCalibri>or

color=3D#ffffff size=3D3 face=3DCalibri>
e=3D3 face=3DCalibri>
i>a

3 face=3DCalibri>concerns.

=0D=0A


ign=3Dleft>
libri>Regards and thanks,

=0D=0A


gn=3Dleft>
ibri>TN

i>
ffff size=3D3 face=3DCalibri>P

face=3DCalibri>Billing
T>
ffff size=3D3 face=3DCalibri>
Calibri>ic

T size=3D3 face=3DCalibri>Team

size=3D3 face=3DCalibri>
libri>iciliy


ONT>




Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA