McAfee phish from Google / Gmail
Posted by Dave Yadallee on
Return-path:
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Jul 2023 12:45:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from)
id 1qIvrS-0004zP-0N
for dave@doctor.nl2k.ab.ca;
Mon, 10 Jul 2023 12:43:50 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Jul 2023 12:43:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f171.google.com ([209.85.222.171]:55657)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from)
id 1qIvOm-000HYt-2Z
for cyrus@nl2k.ab.ca;
Mon, 10 Jul 2023 12:14:15 -0600
Received: by mail-qk1-f171.google.com with SMTP id af79cd13be357-765a5b93b5bso447555885a.3
for; Mon, 10 Jul 2023 11:12:36 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689012750; x=1691604750;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=ETyzXPDYUFz3BNJXhIEAeW1yeor7jYK2mpNoeWKowEI=;
b=avdO5m8mvwPEpyzXrrvRGoorRjeumPb9Ag2o2FOr6kdxwmVlJ2/rvQWFnKbNWW9I6V
Mppid98BdBPbcapWmNAdWNpKTPeLlETOm/ft80pV2WI603OT0iqnSQlGROLxIuCNlYy/
cwopvMsUQMfcrIOh+PKVTwporS/DaMU0cvQLl8XIfaQSfgLNlRDav7vRq72yMB+yoUUB
eDmSUXaLSoSto34gjOw9d0ZKWdlSJBqFtahNtTrXB4MivrFIsG/IWp64uwkYxQmi2u1l
XUnLV8uI4bHn1lzddKcLXUxTlHq7tHYhXh+Fl6pS36slSe/HeW6NrJ2dgVxlo3gFRMhg
o29g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689012750; x=1691604750;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=ETyzXPDYUFz3BNJXhIEAeW1yeor7jYK2mpNoeWKowEI=;
b=LJFn7sxI3TvYIy101GP4y5dyZopNmoAnYlTF4bmVtURRGB3GnQrME6ztzUSODEjCOU
OA9Q+EXsR751wn0w6TVoFj+ptnwPX+jo5rXFztAyz8v0O+kehHt7q5HscaSyHfsBRabp
VSLHaOri5hd/Jhf2TzgiBV41+glof9M7YsXqN7mjVOqB8be3+7WunwJtUjzgZbpCJSea
bNY5CPHYsULgzLmf+Dqo02nL/5wED6A57LgRhQoRHTQ4yI289M42PMzvI0Riav/9fWS9
J9eqGnctOiYm31lPuvR6mo575lQR+alOYtlPGf9MbGYMxIXGrMefrcANhC1x6ztOzMIm
/88A==
X-Gm-Message-State: ABy/qLZAn1F3aoE91OiVfSPWEO0ycWvpHlL/wHOqlyS+yyv22dumCKUc
YuH03s39IARDWYgO+mbg7LbtA8kJRL0GXel+ShY=
X-Google-Smtp-Source: APBJJlGZAn9fi0TuxXNb1SSkxcIw7bgzpWv3TtS331a1x8g92Di7XOw6qT4h3o1SDPaG+1FecAKGvw==
X-Received: by 2002:a37:b401:0:b0:763:dfe3:608f with SMTP id d1-20020a37b401000000b00763dfe3608fmr12677836qkf.71.1689012750142;
Mon, 10 Jul 2023 11:12:30 -0700 (PDT)
Received: from 45.15.140.2 ([45.15.140.2])
by smtp.gmail.com with ESMTPSA id c9-20020a05620a164900b00767db4a9f3bsm93241qko.93.2023.07.10.11.12.28
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 10 Jul 2023 11:12:29 -0700 (PDT)
Message-ID: <64ac4a0d.050a0220.fb60.0836@mx.google.com>
From: "Julia V. Graham"
Subject: Order Completed Successfully*402846
To: "cyrus"
Content-Type: multipart/alternative; boundary="4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P"
MIME-Version: 1.0
Date: Mon, 10 Jul 2023 23:42:29 +0530
X-Antivirus: AVG (VPS 230710-6, 7/10/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=CE=A1urchase Details ( 10 July, 2023 )
Helpline Support:- +1 {408} 458 9852
Dear user, cyrus@nl2k.ab.ca
=CE=A4hank you for choosing our services.
=20
Your specific MCafee =CE=A4otal Care membership will end today. =CE=A4=
his subscription will auto-renew based on the plan you choose.
=CE=A1lease consider the following purchasing summary.
=20
Billed To :
Customer ID: 8190362297771
Invoice No: 529-6002-DXYR-62480=20
Order No: #KJWR-00001486
Product Description :=20
A/C Type: Personal PC
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users)
=CE=A4enure: 1 Year Subscription
=CE=A1ayment Mode: Auto-Debit
This email confirms that your subscription has been renewed for anothe=
r 1 year=20
with company for ($329.99) on July 10, 2023. and valid till July 09, 2=
024.
=CE=A4his subscription will Auto-Renew every year unless you turn it O=
FF. No later than 24 hours=20
of before the end of subscription period.
=CE=A4o cancel the subscription, Call :- +1 {408} 458 9852
We obliged to you
Gina Duffy
Sr Head (Accounts Handling Dept.)
--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
8">
3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=
b" marginheight=3D"0" marginwidth=3D"0">
); text-transform: none; text-indent: 0px; letter-spacing: normal; fon=
t-family: "Times New Roman"; font-size: medium; font-style: normal; fo=
nt-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; whi=
te-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norma=
l; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=
oration-thickness: initial; text-decoration-style: initial; text-decor=
ation-color: initial;'>=CE=A1urcha=
se Details ( 10 July, 2023 )
Helpline Support:-
an>+1 {408} 458 9852
ng>
dent: 0px; letter-spacing: normal; clear: both; font-family: "Times Ne=
w Roman"; font-size: medium; font-style: normal; font-weight: 400; wor=
d-spacing: 0px; white-space: normal; orphans: 2; widows: 2; break-afte=
r: page; font-variant-ligatures: normal; font-variant-caps: normal; -w=
ebkit-text-stroke-width: 0px; text-decoration-thickness: initial; text=
-decoration-style: initial; text-decoration-color: initial; user-selec=
t: none;'>
indent: 0px; letter-spacing: normal; font-family: "Times New Roman"; f=
ont-size: medium; font-style: normal; font-weight: 400; margin-bottom:=
10px !important; word-spacing: 0px; white-space: normal; orphans: 2; =
widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; =
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=
xt-decoration-style: initial; text-decoration-color: initial;'>Dear us=
er, cyrus@nl2k.ab.ca
=CE=A4hank you for choosing our services.<=
br>
Your specific MCafee =CE=A4otal<=
u> Care membership will end today. =CE=A4hi=
s subscription will auto-renew based on the plan you choose.
=CE=
=A1lease consider the following purchasing summary.
<=
strong style=3D"font-weight: 700;">Billed To :
=
Customer ID: 8190362297771
Invoice No: 529-6002-DXYR-14083
>Order No: #KJWR-00001486
<=
u>Product Description :
A/C Type: Personal P=
C
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users=
)
=CE=A4enure: 1 Year Subscription
=CE=A1ayment Mode: Auto-Debit=
This email confirms that your subscription has been renewed fo=
r another 1 year
with company for ($329.99) on
pan>July 10, 2023. and valid till July 09, 2024.
>
=CE=A4his subscription will Auto-Renew every year unless you turn=
it OFF. No later than 24 hours
of before the end of subscrip=
tion period.
=CE=A4o cancel the subscription,
>
);">Call :- +1 {408} 458 9852
gb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: n=
ormal; clear: both; font-family: "Times New Roman"; font-size: medium;=
font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=
normal; orphans: 2; widows: 2; break-after: page; font-variant-ligatu=
res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=
; text-decoration-thickness: initial; text-decoration-style: initial; =
text-decoration-color: initial; user-select: none;'>
rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing:=
normal; font-family: "Times New Roman"; font-size: medium; font-style=
: normal; font-weight: 400; margin-bottom: 10px !important; word-spaci=
ng: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-liga=
tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=
px; text-decoration-thickness: initial; text-decoration-style: initial=
; text-decoration-color: initial;'>Respectfully
Usman Bouraima<=
br>Sr Head (Accounts Handling Dept.)
--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P--
Envelope-to: dave@doctor.nl2k.ab.ca
Delivery-date: Mon, 10 Jul 2023 12:45:02 -0600
Received: from doctor by doctor.nl2k.ab.ca with local (Exim 4.96 (FreeBSD))
(envelope-from
id 1qIvrS-0004zP-0N
for dave@doctor.nl2k.ab.ca;
Mon, 10 Jul 2023 12:43:50 -0600
Resent-From: The Doctor
Resent-Date: Mon, 10 Jul 2023 12:43:50 -0600
Resent-Message-ID:
Resent-To: Dave Yadallee
Received: from mail-qk1-f171.google.com ([209.85.222.171]:55657)
by doctor.nl2k.ab.ca with esmtps (TLS1.3) tls TLS_AES_128_GCM_SHA256
(Exim 4.96 (FreeBSD))
(envelope-from
id 1qIvOm-000HYt-2Z
for cyrus@nl2k.ab.ca;
Mon, 10 Jul 2023 12:14:15 -0600
Received: by mail-qk1-f171.google.com with SMTP id af79cd13be357-765a5b93b5bso447555885a.3
for
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20221208; t=1689012750; x=1691604750;
h=date:mime-version:to:subject:from:message-id:from:to:cc:subject
:date:message-id:reply-to;
bh=ETyzXPDYUFz3BNJXhIEAeW1yeor7jYK2mpNoeWKowEI=;
b=avdO5m8mvwPEpyzXrrvRGoorRjeumPb9Ag2o2FOr6kdxwmVlJ2/rvQWFnKbNWW9I6V
Mppid98BdBPbcapWmNAdWNpKTPeLlETOm/ft80pV2WI603OT0iqnSQlGROLxIuCNlYy/
cwopvMsUQMfcrIOh+PKVTwporS/DaMU0cvQLl8XIfaQSfgLNlRDav7vRq72yMB+yoUUB
eDmSUXaLSoSto34gjOw9d0ZKWdlSJBqFtahNtTrXB4MivrFIsG/IWp64uwkYxQmi2u1l
XUnLV8uI4bHn1lzddKcLXUxTlHq7tHYhXh+Fl6pS36slSe/HeW6NrJ2dgVxlo3gFRMhg
o29g==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20221208; t=1689012750; x=1691604750;
h=date:mime-version:to:subject:from:message-id:x-gm-message-state
:from:to:cc:subject:date:message-id:reply-to;
bh=ETyzXPDYUFz3BNJXhIEAeW1yeor7jYK2mpNoeWKowEI=;
b=LJFn7sxI3TvYIy101GP4y5dyZopNmoAnYlTF4bmVtURRGB3GnQrME6ztzUSODEjCOU
OA9Q+EXsR751wn0w6TVoFj+ptnwPX+jo5rXFztAyz8v0O+kehHt7q5HscaSyHfsBRabp
VSLHaOri5hd/Jhf2TzgiBV41+glof9M7YsXqN7mjVOqB8be3+7WunwJtUjzgZbpCJSea
bNY5CPHYsULgzLmf+Dqo02nL/5wED6A57LgRhQoRHTQ4yI289M42PMzvI0Riav/9fWS9
J9eqGnctOiYm31lPuvR6mo575lQR+alOYtlPGf9MbGYMxIXGrMefrcANhC1x6ztOzMIm
/88A==
X-Gm-Message-State: ABy/qLZAn1F3aoE91OiVfSPWEO0ycWvpHlL/wHOqlyS+yyv22dumCKUc
YuH03s39IARDWYgO+mbg7LbtA8kJRL0GXel+ShY=
X-Google-Smtp-Source: APBJJlGZAn9fi0TuxXNb1SSkxcIw7bgzpWv3TtS331a1x8g92Di7XOw6qT4h3o1SDPaG+1FecAKGvw==
X-Received: by 2002:a37:b401:0:b0:763:dfe3:608f with SMTP id d1-20020a37b401000000b00763dfe3608fmr12677836qkf.71.1689012750142;
Mon, 10 Jul 2023 11:12:30 -0700 (PDT)
Received: from 45.15.140.2 ([45.15.140.2])
by smtp.gmail.com with ESMTPSA id c9-20020a05620a164900b00767db4a9f3bsm93241qko.93.2023.07.10.11.12.28
for
(version=TLS1_2 cipher=ECDHE-ECDSA-AES128-GCM-SHA256 bits=128/128);
Mon, 10 Jul 2023 11:12:29 -0700 (PDT)
Message-ID: <64ac4a0d.050a0220.fb60.0836@mx.google.com>
From: "Julia V. Graham"
Subject: Order Completed Successfully*402846
To: "cyrus"
Content-Type: multipart/alternative; boundary="4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P"
MIME-Version: 1.0
Date: Mon, 10 Jul 2023 23:42:29 +0530
X-Antivirus: AVG (VPS 230710-6, 7/10/2023), Inbound message
X-Antivirus-Status: Clean
This is a multi-part message in MIME format
--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
=CE=A1urchase Details ( 10 July, 2023 )
Helpline Support:- +1 {408} 458 9852
Dear user, cyrus@nl2k.ab.ca
=CE=A4hank you for choosing our services.
=20
Your specific MCafee =CE=A4otal Care membership will end today. =CE=A4=
his subscription will auto-renew based on the plan you choose.
=CE=A1lease consider the following purchasing summary.
=20
Billed To :
Customer ID: 8190362297771
Invoice No: 529-6002-DXYR-62480=20
Order No: #KJWR-00001486
Product Description :=20
A/C Type: Personal PC
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users)
=CE=A4enure: 1 Year Subscription
=CE=A1ayment Mode: Auto-Debit
This email confirms that your subscription has been renewed for anothe=
r 1 year=20
with company for ($329.99) on July 10, 2023. and valid till July 09, 2=
024.
=CE=A4his subscription will Auto-Renew every year unless you turn it O=
FF. No later than 24 hours=20
of before the end of subscription period.
=CE=A4o cancel the subscription, Call :- +1 {408} 458 9852
We obliged to you
Gina Duffy
Sr Head (Accounts Handling Dept.)
--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P
Content-Type: text/html; charset="utf-8"
Content-Transfer-Encoding: quoted-printable
Content-Disposition: inline
8">
3px 0px; font-family: Helvetica, Arial, sans-serif;" bgcolor=3D"#ebebe=
b" marginheight=3D"0" marginwidth=3D"0">
); text-transform: none; text-indent: 0px; letter-spacing: normal; fon=
t-family: "Times New Roman"; font-size: medium; font-style: normal; fo=
nt-weight: 400; margin-bottom: 10px !important; word-spacing: 0px; whi=
te-space: normal; orphans: 2; widows: 2; font-variant-ligatures: norma=
l; font-variant-caps: normal; -webkit-text-stroke-width: 0px; text-dec=
oration-thickness: initial; text-decoration-style: initial; text-decor=
ation-color: initial;'>=CE=A1urcha=
se Details ( 10 July, 2023 )
Helpline Support:-
an>+1 {408} 458 9852
ng>
dent: 0px; letter-spacing: normal; clear: both; font-family: "Times Ne=
w Roman"; font-size: medium; font-style: normal; font-weight: 400; wor=
d-spacing: 0px; white-space: normal; orphans: 2; widows: 2; break-afte=
r: page; font-variant-ligatures: normal; font-variant-caps: normal; -w=
ebkit-text-stroke-width: 0px; text-decoration-thickness: initial; text=
-decoration-style: initial; text-decoration-color: initial; user-selec=
t: none;'>
indent: 0px; letter-spacing: normal; font-family: "Times New Roman"; f=
ont-size: medium; font-style: normal; font-weight: 400; margin-bottom:=
10px !important; word-spacing: 0px; white-space: normal; orphans: 2; =
widows: 2; font-variant-ligatures: normal; font-variant-caps: normal; =
-webkit-text-stroke-width: 0px; text-decoration-thickness: initial; te=
xt-decoration-style: initial; text-decoration-color: initial;'>Dear us=
er, cyrus@nl2k.ab.ca
=CE=A4hank you for choosing our services.<=
br>
Your specific MCafee =CE=A4otal<=
u> Care membership will end today. =CE=A4hi=
s subscription will auto-renew based on the plan you choose.
=CE=
=A1lease consider the following purchasing summary.
<=
strong style=3D"font-weight: 700;">Billed To :
=
Customer ID: 8190362297771
Invoice No: 529-6002-DXYR-14083
>Order No: #KJWR-00001486
<=
u>Product Description :
A/C Type: Personal P=
C
Product: MF/PC4
Charges: $329.99
Device: Window PC (4 users=
)
=CE=A4enure: 1 Year Subscription
=CE=A1ayment Mode: Auto-Debit=
This email confirms that your subscription has been renewed fo=
r another 1 year
with company for ($329.99) on
pan>July 10, 2023. and valid till July 09, 2024.
>
=CE=A4his subscription will Auto-Renew every year unless you turn=
it OFF. No later than 24 hours
of before the end of subscrip=
tion period.
=CE=A4o cancel the subscription,
>
);">Call :- +1 {408} 458 9852
gb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing: n=
ormal; clear: both; font-family: "Times New Roman"; font-size: medium;=
font-style: normal; font-weight: 400; word-spacing: 0px; white-space:=
normal; orphans: 2; widows: 2; break-after: page; font-variant-ligatu=
res: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0px=
; text-decoration-thickness: initial; text-decoration-style: initial; =
text-decoration-color: initial; user-select: none;'>
rgb(0, 0, 0); text-transform: none; text-indent: 0px; letter-spacing:=
normal; font-family: "Times New Roman"; font-size: medium; font-style=
: normal; font-weight: 400; margin-bottom: 10px !important; word-spaci=
ng: 0px; white-space: normal; orphans: 2; widows: 2; font-variant-liga=
tures: normal; font-variant-caps: normal; -webkit-text-stroke-width: 0=
px; text-decoration-thickness: initial; text-decoration-style: initial=
; text-decoration-color: initial;'>Respectfully
Usman Bouraima<=
br>Sr Head (Accounts Handling Dept.)
--4s4ncagKx8lnL3Ow7uwo3=_wvSerbTWK9P--
Trackbacks
Trackback specific URI for this entryThis link is not meant to be clicked. It contains the trackback URI for this entry. You can use this URI to send ping- & trackbacks from your own blog to this entry. To copy the link, right click and select "Copy Shortcut" in Internet Explorer or "Copy Link Location" in Mozilla.
No Trackbacks
Comments
Display comments as Linear | ThreadedNo comments