McAfee Phish from Gmail

Posted by Dave Yadallee on
Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Fri, 10 Mar 2023 13:57:00 -0700

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96)

(envelope-from )

id 1pajn5-000MDF-2c

for dave@doctor.nl2k.ab.ca;

Fri, 10 Mar 2023 13:56:39 -0700

Resent-From: The Doctor

Resent-Date: Fri, 10 Mar 2023 13:56:39 -0700

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qt1-f171.google.com ([209.85.160.171]:33736)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96)

(envelope-from )

id 1pah7d-000Iq3-2P

for doctor@nl2k.ca;

Fri, 10 Mar 2023 11:05:44 -0700

Received: by mail-qt1-f171.google.com with SMTP id z6so6723075qtv.0

for ; Fri, 10 Mar 2023 10:03:43 -0800 (PST)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20210112; t=1678471417;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=gSU/zEcSKtEy05IpfwVFQQ+HyYxx/7mbfEHTDVoChBU=;

b=OAYYNsBq+akq8OqGg+RavJ7I4FA/mGCJZZu3MNTeTCW6IKTKmi052Km7J0mAWvoxAB

1VvGVRQEiPyN3HdjoBmZgjDIAe8nqgLJ9yLIJ9WvMdkyxe+mesfvOjIPAo+8t9wvPIei

KQ7vaLQUCx1TSk3gek3DjDFym9Qcr4oT68QGxIQR5amL7CxWlSl19g6oLhcRkZ0cgo4S

jBTseHYOZxvPbS+j7+eHXskMHRZieg1N/+OjLOzEb1EhCGj6f6t2THbHv1Z9qLSPmF+g

lot4fw1S0avNXrvNu6lAt0dtSyuE+Yn+dNiBpgRMU4qKz9JHzK/D5jozF7vPsrazhkB0

/C3g==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20210112; t=1678471417;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=gSU/zEcSKtEy05IpfwVFQQ+HyYxx/7mbfEHTDVoChBU=;

b=FszygXjNbYMmkbYrp9R5MKtIMIC0MKpFUGiiFzfpS5OL9/0i8tRrhD3A8kXaekh4pt

2r3IBYh2ZskhurX7v0yScejTLEu2nKLRt1THHRpusKcT5DISCI+S3vjgGEZhraWPUOM1

EZ/9TyXJephY+rY8RHkKutIlqPO3Dkbgvv81vsWpweIjJd/jj2gBpw9HuRNEXWstCFPJ

6a9EL6htN9HjMrc0+gfMRPbQscMqWtEr0q1VDGMtYw7peL4QEfxm1meX6ij+5M3UP3ia

nzsOnssjb34QEo34ZTzk5x83gUDNC+k1Rw0/tvuqUYJ5hqBIm4yVdIYfxiQohXEAvgXA

TDBA==

X-Gm-Message-State: AO0yUKVm5SvbMN+6uz8etZyD7GI9BlSoD2fvtcmHyFJO4Wlvpmt8rYyf

S/Zk2hNs1d+Sa+7tyO2J4fnN0cxjlHJVWA==

X-Google-Smtp-Source: AK7set8tS+H8GGBQrRFoksjgJW0Jv1pVGoljBp1kcqQP64DbaTMsVBqS5kVRTtBYnDOqfa+9RlFJUA==

X-Received: by 2002:a05:622a:50a:b0:3b8:4adb:c604 with SMTP id l10-20020a05622a050a00b003b84adbc604mr47362775qtx.14.1678471417460;

Fri, 10 Mar 2023 10:03:37 -0800 (PST)

Received: from 185.212.118.44 ([185.212.118.44])

by smtp.gmail.com with ESMTPSA id e18-20020ac84152000000b003b869f71eedsm216349qtm.66.2023.03.10.10.03.35

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Fri, 10 Mar 2023 10:03:37 -0800 (PST)

Message-ID: <640b70f9.c80a0220.c8710.1e46@mx.google.com>

From: "Donald D. Dixon"

Subject: Order Confirmation Details FJKMTJ

To: "doctor"

Content-Type: multipart/alternative; boundary="oBa8mxINGu94Oo=_5OL5ySiYh8uAEu4EVF"

MIME-Version: 1.0

Date: Fri, 10 Mar 2023 23:33:36 +0530



This is a multi-part message in MIME format



--oBa8mxINGu94Oo=_5OL5ySiYh8uAEu4EVF

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello Existing Customer, doctor@nl2k.ca



Greetings from Mcafee Total Inc.



We thank you for renewing and reactivating your annual PC subscription=

again.



The recurring annual charge of $ 395.79 has been processed successfull=

y, kindly check your statement for this charge.



If you find any transactional error or any issue with our service rene=

wal charge, please feel free to reach out to us at +1 (888) 787 0604.



Here are your order and transaction information : -





Subscription Id: 996-5273-36181

Product Name: Advanced PC Plus Protection

Payment Mode: Automatic Debit

Payable Amount: $395.79



Your services has been restored as authorized by you. If you still bel=

ieve there is an error in this transaction please contact our service =

team to discuss further.



In case you change your mind and cancel/void the charges or stop the a=

utomatic debit payments , please contact us within 24 hours to avoid t=

ransactional disputes.





In appreciation

Donald D. Dixon

Sr. Head Consumer Service Dept. +1 (888) 787 0604





--oBa8mxINGu94Oo=_5OL5ySiYh8uAEu4EVF

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello Customer, doctor@nl2k.ca



Greetings from Mcafee Total Inc.



We thank you for renewing and reactivating your annual PC subscript=

ion again.



The recurring annual charge of =

$ 395.79 has been processed successfully, kindly check your s=

tatement for this charge.



If you find any transactional error or =

any issue with our service renewal charge, please feel free to reach o=

ut to us at +1 (888) 787 =

0604.



Here are your order and transaction information : -
>



Subscription Id: 996-5273-36181
Product Name:
or: rgb(0, 0, 0);">Advanced PC Plus Protection
Payment Mode:=

Automatic Debit
Payable Amount: $395.79



Your services has been restored as auth=

orized by you. If you still believe there is an error in this transact=

ion please contact our service team to discuss further.



In=

case you change your mind and cancel/void the charges or stop the aut=

omatic debit payments , please contact us within 24 hours to avoid tra=

nsactional disputes.




Yours sincerely
Donald D. Dixon<=

br>Sr. Head McAfee Billing Team 
er; color: rgb(0, 0, 0); text-transform: none; text-indent: 0px; lette=

r-spacing: normal; font-family: "Times New Roman"; font-size: medium; =

font-style: normal; font-weight: 700; word-spacing: 0px; white-space: =

normal; orphans: 2; widows: 2; font-variant-ligatures: normal; font-va=

riant-caps: normal; -webkit-text-stroke-width: 0px; text-decoration-th=

ickness: initial; text-decoration-style: initial; text-decoration-colo=

r: initial;'> 
tyle=3D'text-align: left; color: rgb(0, 0, 0); text-transform: none; t=

ext-indent: 0px; letter-spacing: normal; font-family: "Times New Roman=

"; font-size: medium; font-style: normal; word-spacing: 0px; white-spa=

ce: normal; orphans: 2; widows: 2; background-color: rgb(255, 255, 255=

); font-variant-ligatures: normal; font-variant-caps: normal; -webkit-=

text-stroke-width: 0px; text-decoration-thickness: initial; text-decor=

ation-style: initial; text-decoration-color: initial;'>
color: rgb(0, 0, 0);">+1 (888) 787 0604
>







--oBa8mxINGu94Oo=_5OL5ySiYh8uAEu4EVF--

Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA