McAfee Squad phish from Google / Gmail

Return-path:

Envelope-to: dave@doctor.nl2k.ab.ca

Delivery-date: Tue, 06 Jun 2023 15:36:01 -0600

Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6eL2-000GFp-00

for dave@doctor.nl2k.ab.ca;

Tue, 06 Jun 2023 15:35:36 -0600

Resent-From: The Doctor

Resent-Date: Tue, 6 Jun 2023 15:35:35 -0600

Resent-Message-ID:

Resent-To: Dave Yadallee

Received: from mail-qk1-f196.google.com ([209.85.222.196]:57679)

by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256

(Exim 4.96 (FreeBSD))

(envelope-from )

id 1q6a5L-000PiD-30

for support@nk.ca;

Tue, 06 Jun 2023 11:03:12 -0600

Received: by mail-qk1-f196.google.com with SMTP id af79cd13be357-75ebb3d57d0so203944185a.3

for ; Tue, 06 Jun 2023 10:01:07 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=gmail.com; s=20221208; t=1686070861; x=1688662861;

h=date:mime-version:to:subject:from:message-id:from:to:cc:subject

:date:message-id:reply-to;

bh=QSt2QhXdxHj24BWjP2kQEeLH+CYFHAftoBZlj+zIBpQ=;

b=htJ8IjRxhLnd4dxP7mrLpUOX6NE5Bs0RmSbHMuM3bLz0PfBAvymgxMTr7Kq/wN8Xv5

vsdlCPIMzDTrJzNtovft6PBApKHoLPaEiiv7kRVxltjyJxHJhZPPx9lWMMELKBOHbRqf

0Gcc2uWf/M8/JDGcxEx8t4GQkRjTxjMXxUjM3V3p0T9bPCQV13PaVhS8dVj0VzA/NHPb

awIsRJDJYH/UW2E8IMdvA3JYJtRbrW5CA868XhAXioSREY/Ho1ju6pfKc49bDFvuPG6J

01u5LkKuf180kMB1FPZ1Hp0u1Bd6WZa1nIZiK6g9ANU66hnAtSsj9I2PGgqfB0qheJ7j

9OVA==

X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

d=1e100.net; s=20221208; t=1686070861; x=1688662861;

h=date:mime-version:to:subject:from:message-id:x-gm-message-state

:from:to:cc:subject:date:message-id:reply-to;

bh=QSt2QhXdxHj24BWjP2kQEeLH+CYFHAftoBZlj+zIBpQ=;

b=eI/lHT5O7e5lOWaLRd4RnGQjgXIz6P0FA8tjsgRQp1NErXS+3Woj+ViK+5AvjYCGjP

L//JgFjNrvyntDE/75sNgEXC5TWilstl2fpB2WuBCPBLIDKErlCKbcSlw8Sp7/oP3jMz

ajzeUVHhlfmix1RajgSIOo2wfnO/VuZTL4jKIh95Gfyb6aLqEicChAjjiUBunsz0WWPO

qrxYmWx9/fh/WyxfWqMoPlFrTl0sA1bI8MOQPpz9AfVKMzUOpZ9kuyJ70jUO4Wz1Ift/

kEtCrxRRPeFVQw6SvTFSWqqIfZ7bbaiGmimnEhzr8CldRT+ZAF7en1f3i3uZQVnm+pj7

c9SQ==

X-Gm-Message-State: AC+VfDx0YKKIOy9vhZcIJXCXwexyTKJ7poS9eAwoVS+swu+xVwTrMx2b

oL46ETw7g+0vjyueMvkyDsYK8vuKN8+I8NJRK9k=

X-Google-Smtp-Source: ACHHUZ5xSQpQoKfeIovRF5uTVAifDZIIUWnk6bR5UQXGveWUDsMjUyoVFtU7nl859dhJyB8/sIfozA==

X-Received: by 2002:a05:6214:212e:b0:626:1052:20f3 with SMTP id r14-20020a056214212e00b00626105220f3mr253353qvc.18.1686070859414;

Tue, 06 Jun 2023 10:00:59 -0700 (PDT)

Received: from 185.187.243.119 ([185.187.243.119])

by smtp.gmail.com with ESMTPSA id lg5-20020a056214548500b0062382e1e228sm5494958qvb.49.2023.06.06.10.00.57

for

(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);

Tue, 06 Jun 2023 10:00:58 -0700 (PDT)

Message-ID: <647f664a.050a0220.804db.f3e0@mx.google.com>

From: "Lauren Mccarthy"

Subject: Check your account statement

To: "support"

Content-Type: multipart/alternative; boundary="SJRCWyUls7XGL=_edmrogw2tr820FF0wpi"

MIME-Version: 1.0

Date: Tue, 6 Jun 2023 22:31:03 +0530

X-Antivirus: AVG (VPS 230606-6, 6/6/2023), Inbound message

X-Antivirus-Status: Clean



This is a multi-part message in MIME format



--SJRCWyUls7XGL=_edmrogw2tr820FF0wpi

Content-Type: text/plain; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline



Hello there, support@nk.ca



Annual Subscription Automatically Activated!



Customer Unique ID: 943-6737-7816



This email is in reference to your last-year subscription plan, which =

expired yesterday.



As you opted for automatic debit, your "PC and Network Shield" annual =

subscription has been successfully activated and restored.



We have successfully processed an annual fee of $378.99 (a recurring f=

ee), which will reflect on the bank account statement in a few hours.



For assistance, please contact us toll-free at# +1 (830) 386 4964.



Here is your order and subscription information:



MCAfee Total PC Security and Network Shield

Date of order: June 6, 2023

Expiration date: June 5, 2024

Payment Mode: Automatic Debit

Annual Subscription Fee: $378.99



If you find any transactional errors or simply wish to cancel the subs=

cription plan and get a full refund, please contact us immediately to =

avoid disputes.



=20



Best Regards,



Patricia Smith

Customer Helpline Dept. (Manager)

Toll-free number: +1 (830) 386 4964.





--SJRCWyUls7XGL=_edmrogw2tr820FF0wpi

Content-Type: text/html; charset="utf-8"

Content-Transfer-Encoding: quoted-printable

Content-Disposition: inline




, 37, 37);">Hello there, support@nk.ca




=3D"color: rgb(37, 37, 37);">Annual Subscription Automatically Activat=

ed!




"color: rgb(37, 37, 37);">Customer Unique ID: 943-6737-7816

=



This email is=

in reference to your last-year subscription plan, which expired yeste=

rday.



As you opted =

for automatic debit, your "PC and Network Shield" annual subscription =

has been successfully activated and restored.



We have succe=

ssfully processed an annual fee of $378.99 (a recurring fee), which wi=

ll reflect on the bank account statement in a few hours.



For assistanc=

e, please contact us toll-free at# +1 (830) 386 4964
ong>.




=3D"color: rgb(37, 37, 37);">Here is your order and subscription infor=

mation:



or: rgb(37, 37, 37);">MCAfee Total PC Security and Network Shield

tyle=3D"color: rgb(37, 37, 37);">Date of order: June 6, 2023

"color: rgb(37, 37, 37);">Expiration date: June 5, 2024

lor: rgb(37, 37, 37);">Payment Mode: Automatic Debit

: rgb(37, 37, 37);">Annual Subscription Fee: $378.99



If you find a=

ny transactional errors or simply wish to cancel the subscription plan=

and get a full refund, please contact us immediately to avoid dispute=

s.



 



Best Regards,=



Patricia Smit=

h
Customer Helpline Dept. (Manage=

r)
Toll-free number: 
>+1 (830) 386 4964
.=







--SJRCWyUls7XGL=_edmrogw2tr820FF0wpi--



Trackbacks

Trackback specific URI for this entry

This link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.

No Trackbacks

Comments

Display comments as Linear | Threaded

No comments

Add Comment

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA

Enclosing asterisks marks text as bold (*word*), underscore are made via _word_.
Standard emoticons like :-) and ;-) are converted to images.

To prevent automated Bots from commentspamming, please enter the string you see in the image below in the appropriate input box. Your comment will only be submitted if the strings match. Please ensure that your browser supports and accepts cookies, or your comment cannot be verified correctly.
CAPTCHA